last executing test programs:

17m31.174583539s ago: executing program 1 (id=235):
gettid()
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)

17m30.170897644s ago: executing program 1 (id=246):
syz_io_uring_setup(0xf89, &(0x7f0000000500)={0x0, 0x7d0d, 0x10, 0x1, 0x22b}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
lseek(r0, 0x289e0cb5, 0x0)

17m29.194979012s ago: executing program 1 (id=251):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x4}, {}, {}, @result}], 0x1c)

17m29.003583359s ago: executing program 1 (id=252):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYBLOB="696f636861727365743d6d6163677265656bb8756d61736b3d30303030303030303030303030303030303030303030342c6e616d65636173653d312c6e616d65636173653d312c666d61736b3d30303030303030303030303030303030303030303031302c646973636172642c6b6565705f6c6173745f646f74732c696f636861727365743d6575632d6a702c646973636172642c6572726f72733d636f6e74696e75652c00"], 0x1, 0x1528, &(0x7f00000037c0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x3bdc51, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

17m28.69779273s ago: executing program 1 (id=255):
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeb0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10)
r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
r2 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000000080))
read$FUSE(r1, &(0x7f00000008c0)={0x2020}, 0xfffffef0)
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)

17m28.386733709s ago: executing program 1 (id=258):
prctl$PR_SET_MM_MAP(0x4b, 0xe, 0x0, 0x0)

17m28.173508275s ago: executing program 32 (id=258):
prctl$PR_SET_MM_MAP(0x4b, 0xe, 0x0, 0x0)

16m32.306348247s ago: executing program 2 (id=889):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
symlinkat(&(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001200)='./file1\x00')
readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=""/29, 0x1d)
readlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f0000001300)=""/4096, 0x1000)

16m32.217712909s ago: executing program 2 (id=891):
r0 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x40, 0x13, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000240)={0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="000fe0"], 0x0, 0x0, 0x0, 0x0})

16m30.172389129s ago: executing program 2 (id=915):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1})
r1 = dup(r0)
mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r1, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3})

16m29.997929873s ago: executing program 2 (id=916):
syz_mount_image$jfs(&(0x7f0000005dc0), &(0x7f0000005e00)='./file0\x00', 0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"], 0x1, 0x5e11, &(0x7f000000bc40)="$eJzs3UuPFNfZB/CnL9Nz4TWMLL2WhbIYY+dCMDBcDLnb3iRSVpEiNlmBxmMLBScRkCi2UBhrFvkGUbJIlOyzyifIHj6EF1kGCZKNV6moZs6BmqKHHgLT1TPn95OaqqdOVfcp/n2druoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED88Ps/PteLiKu/SguWI/4vBhH9iMW6XomIxZXlvP4wIl6PreZ4rV59PqLefuufYxEXI+L+0YiHj+6s1YvP77Ef/z7y/8f++dcfnP7933537+QfT73dbv/T+j/u/eRuui0AAADguVRVVfXSx/zj6fN9v+tOAQBTkV//qyQvV6vVarVaffjqpmq8u80iIjaa29TvGe6OuzIAYHZtxBddd4EOyb9ow4g40nUngJnmuPvD6eGjO2u9lG+v+Xqwst2ejwXZkf9G7/H5HbtNJ2kfYzKt+9dmDOLVXfqzOKU+zJKcf7+d/9Xt9lFab7/zn5bd8h9tn/pUnJz/oJ1/y+HJvz82/1Ll/IfPlf9A/gAAAAAAMMPy3/+XO/7+d/7Fd2VPnvX978qU+gAAAAAAAAAAL9uLjv/3mPH/AAAAYGbVn9Vrfz76ZNlun7Hr5Vd6Ea+01gcKk06WWeq6HwAAAAAAAAAAAABQkuH2MbxXehFzEfHK0lJVVfWlqV0/rxfd/qArff+hZF0/yQMAwLb7R1vn8vciFiLiSvqtv7mlpaWqWlhcqpaqxfn8fnY0v1AtNj7X5mm9bH60hzfEw1FVX9lCY7umSZ+XJ7W3r6++rVE12EPHpqPDwAEgIrZfjR56RTpkqupYdP0uh4PB4//w8fhnL7q+nwIAAAD7r6qqqpd+zvt4+s6/33WnAICpyK//7e8F1Gq1Wq1WH766qRrvbrOIiI3mNvV7hrvjrgwAmF0b8UXXXaBD8i/aMCJe77oTwEzrdd0B9sXDR3fWeinfXvP1II3vno8F2ZH/Rm9ru7z9uOkk7WNMpnX/2oxBvLpLf16bUh9mSc6/387/6nb7KK233/lPy2751/u53EF/upbzH7Tzbzk8+ffH5l+qnP/wufIfyB8AAAAAAGZY/vv/su9/8y4DAAAAAAAAwIHz8NGdtXzea/7+/0tj1nP+5+GU8+/Jv0g5/34r/6+11hs05h+8/yT/fz26s/ajP3x+PE/3mv98numle1Yv3SN66ZZ6wzR9kb172ubcYFTf0lyvPximY36quQ/jetyI9VjdsW4//X88aT+3o73u6dyO9vM72odPtV/Y0T6XfnegWsztZ2Itfh434oOt9rptfsL+L0xorya05/wHHv9FyvkPG5c6/6XU3mtNaw8+6z/1uG9Ox93Oe7+9d391/3dnos0YPN63pnr/TnTQn63/kyOj+OWt9Ztnfn3t9u2b5yJNdiw9H2nykuX859Ll8fP/m9vt+Xm/+Xh98NnoufOfFZsx3DX/Nxvz9f6enHLfupDzH6VLzv+D1D7+8X+Q89/98X+qg/4AAAAAAAAAAAAAAADAs1RVtXWK6HsRcSmd/9PVuZkAwHTl1/8qycvVarVarVYfvrqpGu/dZhERf29uU79n+M24KwMAZtl/IuLzrjtBZ+RfsPx7f/X0ra47A0zVrU8+/em1GzfWb97quicAAAAAAAAAwP8qj/+50hj/+a2IWG6tt2P81/dj5UXH/xzmmccDjL7kgb53sdkfDfqN4cbfiGeP/30inj3+93DC7c1NaB9NaJ+f0L4woX3siR4NOf83GuOd1/kfbw2/XsL4r+0x70uQ8z/RuD/X+X+1tV4z/+ovBzn//o78z97++Bdnb33y6enrH1/7aP2j9Z9dXF29dOHyO6uXV89+eP3Gevq3wx7vr5x/HvvacaBlyfnnzOVflpz/l1Mt/7Lk/L+SavmXJeef3+/Jvyw5//zZR/5lyfmfTLX8y5Lz/3qq5V+WnP+pVMu/LDn/t1Mt/7Lk/E+nWv5lyfmfSbX8y5LzP5tq+Zcl55+/4ZJ/WXL++cgG+Zcl538+1fIvS87/QqrlX5ac/8VUy78sOf93Ui3/suT8L6Va/mXJ+V9OtfzLkvP/RqrlX5ac/zdTLf+y5Py/lWr5lyXn/+1Uy78sOf/vpFr+Zcn5fzfV8i9Lzv97qZZ/WXL+76Za/mV58vv/ZsyYMZNnun5mAgAAAAAAAAAAAADapnE4cdf7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8lx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYe9eY+Q6yzuAn13v2muHyxZCcEOAtWOCSZbs+h7TGsytpAlpKRBa6MW49tox8a1em1wUKUahTaRGbaTyIXwoBBqp+VIRAapSlSJXagUSSOQTrdQ2pEqoIkpaQ/sBKsJWM/M+r2fGe/MZx5k55/eT4sc7e2bmnTPvzO5/zX8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoN26d8/cP1QUReO/5h/jRfGyxt9XT4w3Ptzwtpd6hQAAAECvXmj+efaV+YLdy7hS2zHfeMN3vjo3NzdXPPX9t7z2M3Nz+RMTRTG+qiianwvP3fK3G9qPSe4rxoaG2z4eXuLuVyzx+ZElPj+6xOdXLvH5VUt8fmyJz593As6zuvXzmOaNbWj+dbx1SovLi9Hm5zbMc637hlYND8fPcpqGmteZGz1QHCoOFzPFdMfxrWOHmsd/bV3jvm4s4r6G2+7rqsYO+dE9+2INQ+kcb+i4r3O3GZ5/ZzHx4x/ds+8Dn336yvnmkqeh4/Za69y4vrHOT6dLWmsdKlblcxLrHG5b51XzPCcrOtY51Lxe4+/d6zy7zHWuOLfMS6r7OR8rhpt/f7J5nkbaf6yXz9NV6bKfXF0Uxelzy+4+5rz7KoaLNR2XDJ97fsZaO7JxG42t9Kpi5IL26bpl7NPG3L+hc592vybi+V+XrjeywBran6bnP7XyvOf9QvdpaDzqhV4r3XvwYr9W+mUPxr54svmgH5h3D25Ij/+eaxbeg/PunXn2YH7cbXtw/VJ7cHjliuaa85Mw1LzOuT24qeP4Fc17GmrO565ZfA9OnTxyfGr2rrvfeujI3oMzB2eObp2e3r5lx7bpHdNTBw4dnkl/ljzb/W9NMZxfA+vTuYvXwJu7jm3fqnNfuHivw7FFXofjXcde7NfhSPeDG7o0L8jz93TrtfHhxkkfe3C4WOA11nx+ru39dZgfd9vrcKTtdTjv15R5Xocjy3gdNo45fu3yvmcZaftvvjW8WF8Lxtv2YPf3I9178GJ/P9Ive3As7Yt/vXbhrwVXpfU+MHmh34+sOG8P5oeb3nsal+Tv98duaI759uWVjU9ctrI4NTtz4vo79548eWJTkcYl8eq2vdK9X9e0PabivP06fMH7dff93/r2lfNcPp7O1dhbG3+MLfhcNY7Zev3iz1Xzq9v857Pj0s1FGhfZpT6f8301b5zPnCUXOZ+NYz491fv34jmXtr3/ji7w/hu5/+fN+9mQb+q+FaMjrdfvinx2RjvejzufqpHme9dQ877PTi3v/Xg0/Xep348vX+T9eG3XsRf7/Xi0+8HF+/HQUj/t6E338zmW9snh6cXfjxvHrN18oXtyZNH346vTHErn/y0pKeRc1LZ3Ftq3+b5GRkbT4xqJe+jcp1s6jh9N2axxX49tLrdPN17duq0V+dGdc6n26UTXsRd7n+b3q4X26dBSP30rp/v5HEv74vIti+/TxjFntvb+3rk6/tr23rlyqT04umJlY82jeRO23u/nVscevL7YVxwrDhf7m59d2dxPQ837mty2vD24Mv13qd8r1y6yBzd2HXux92D+OrbQ3hsaOf/BXwTdz+dY2hcPb1t8DzaOec+Oi/u968Z0ST6m7XvX7p+vLfQzryu7TtOL+TOvxjr/YcfiP5ttHHP4hgvNmYufp+vSJZfNc566X78Lvab2F5fmPK1N6/zhDQufp8Z6Gsd8Zucy99Puoii+cvPu5s9707+vfPnUd7/a8e8uu1ufe2Lnuds677uO+f7d5ys37z7zzzf99EIeIwD97efNPzesaX2ta/uXqeX8+z8AAAAwECL3D6eZyf8AAABQGZH7438Vnsn/AAAAUBmR+0fSzGqS/x/4t9fc/rN7i9zMn0vi83Eajj/TOi46ro+kjyfmzmlc/q5H//FbH7t3efc9XBTFz276l3mPf+CZWFfLQ2mdE9/rvPw8a7+3rPv/+K3njmvvAI6n24/H070NvvbfzzSvN7GzNc/cdKY5P3j6gfsanz+7s/VxdCef+5/WcX+eyry7D/x9x/U3PtW6vw1PLf644npfev/qm1/3kXP3F9cbWv+K5sN4+O2t243fe/PQu1vHn03HLbT+v/vjx77UOP7ON82//nuH51//c+l2n03zpy+0Lm8/p42P43p/mNYf9xfXu/6LX593/Y+/r3X84+l5eSTN7vW/809f/0L7+Yr1x/3sfrp1vbj/6b/+j+b14vbi9rvXP/aOZzrOR/ftn/ly63Z2ffJ/V7QfH5fH/eR993Tn89y4nfb9Fh77ozMd57n499b1/qZr/XF7x5+ef/3Xda3z+KY1zesvVBn/3Myz8z7eWM/uv3qy4/E8/oN0/t51S/N2x36S9mP6/P891Lq97t+W8OQPOt9P4vhHxluvy7i9qa71P9S1/tNvbJy7pdd/449b63/8Hd/ofD7+s7WO3c+35lLrP/j573Rc/wvfbT0fJ+6YPHps9tSh6FCPp9/9c/z7rdtbNbZ6zWUve/krXpneK7s/3nPs5G0zJyamJ6aLYmIAfyXei73+L6b5X61x+mLf/j1FUdzR9nXt2ve29l/xhrN/8sYbH70tjvun97Quf/Dm1tetN6fjHkqXn07Pd9zO5z7b+nrY6/rjfhaaeb3LdOqb929f1oHp8T+87ormq2zoTOvi7versuJ1/vRrOl/3T324NZ9I53Uu/Wbm9Vd8s3lc9/3H70Z48EOt13d8JxfX73X9f5me71uebd1+3G5eb/o+5utrO98f4/l54t6u3zQw3votHqfT+0dxuvX5OCq+p3rw7BUXsswFzd41O3X40NFTd06dnJk9OTV71917jhw7dfTknubv5tzziaWuf+71vab5+t4/s31r0Xy1H2uNF9lLvf7jt+7bv2P6mv0zB/aeOnDy1uMzJw7um53dN7N/9pq9Bw7M3LHU9Q/t37Vp884tOzZPHjy0f9cNO3du2Tl56OixxjJai1rC9unbJ4+e2NO8yuyurTs3bdu2dXryyLH9M7t2TE9Pnlrq+s2vTZONa39y8sTM4b0nDx2ZmZw9dPfMrk07t2/fvORv9zty/MDsxNSJU0enTs3OnJhqPZaJk82LG1/7lro+NMx+fvW8X6eG0nfvm67bnn8/a8Ojn1rwplqHdP0C0R+m30Xz7b/4s23L+Thy/2iaWU3yPwAAANRB5P6VaWbyPwAAAFRG5P5VaWbyPwAAAFRG5P6xNLOa5H/9f/1//X/9/6D/r/9fhv6//n8Z+v/6/4Owfv1//X9612/9/8j9q4uilvkfAAAA6iBy/5o0M/kfAAAAKiNy/2VpZvI/AAAAVEbk/pelmdUk/+v/6//r/+v/B/1//f8y9P/1/8vQ/9f/H4T16//r/9O7fuv/R+5/eZpZTfI/AAAA1EHk/lekmcn/AAAAUBmR+1+ZZib/AwAAQGVE7h9PM6tJ/tf/1//X/9f/D/r/+v9l6P/r/5eh/6//Pwjr1//X/6d3/db/j9z/C2lmNcn/AAAAUAeR+1+VZib/AwAAQGVE7n91mpn8DwAAAJURuf/yNLOa5H/9f/1//X/9/6D/r/9fhv6//n8Z+v/6/4Owfv1//X9612/9/8j9r0kzq0n+BwAAgDqI3H9Fmpn8DwAAAJURuf+1aWbyPwAAAFRG5P61aWY1yf/6//r/+v/6/0H/X/+/DP1//f8y9P/1/wdh/fr/+v/0rt/6/5H7fzHNrCb5HwAAAOogcv+VaWbyPwAAAFRG5P7XpZnJ/wAAAFAZkfuvSjOrSf7X/9f/1//X/w/6//r/Zej/6/+Xof+v/z8I69f/1/+nd/3W/4/c//o0s5rkfwAAAKiDyP1vSDOT/wEAAKAyIve/Mc1M/gcAAIDKiNw/kWZWk/yv/6//r/+v/x/0//X/y9D/1/8vQ/9f/38Q1q//r/9P7/qt/x+5f12aWU3yPwAAANRB5P71aWbyPwAAAFRG5P6r08zkfwAAAKiMyP0b0sxqkv/1//X/9f/1/4P+v/5/Gfr/+v9l6P/r/w/C+vX/9f/pXb/1/yP3vynNrCb5HwAAAOogcv81aWbyPwAAAFRG5P43p5nJ/wAAAFAZkfs3ppnVJP/r/+v/6//r/wf9f/3/MvT/9f/L0P/X/x+E9ev/6//Tu37r/0fuf0uaWU3yPwAAANRB5P5r08zkfwAAAKiMyP3XpZnJ/wAAAFAZkfsn08xqkv/1//X/9f/1/4P+v/5/Gfr/+v9l6P/r/w/C+vX/9f/pXb/1/yP3vzXNrCb5HwAAAOogcv/1aWbyPwAAAFRG5P6pNDP5HwAAACojcv90mllN8r/+v/6//r/+f9D/1/8vQ/9f/78M/X/9/0FYv/6//j+967f+f+T+TWlmNcn/AAAAUAeR+zenmcn/AAAAUBmR+7ekmcn/AAAAUBmR+7emmdUk/+v/6//r/+v/B/1//f8y9P/1/8vQ/9f/H4T16//r/9O7fuv/R+7flmZWk/wPAAAAdRC5f3uamfwPAAAAlRG5f0eamfwPAAAAlRG5/4Y0s5rkf/1//X/9f/3/oP+v/1+G/r/+fxn6//r/g7B+/X/9f3rXb/3/yP0708xqkv8BAACgDiL3vy3NTP4HAACAyojc/0tpZvI/AAAAVEbk/l9OM6tJ/tf/1//X/9f/D/r/+v9l6P/r/5eh/6//Pwjr1//X/6d3/db/j9y/K82sJvkfAAAA6iBy/9vTzOR/AAAAqIzI/e9IM5P/AQAAoDIi9+9OM6tJ/tf/1//X/9f/D/r/+v9l6P/r/5eh/6//Pwjr1//X/6d3/db/j9z/zjSzmuR/AAAAqIPI/e9KM5P/AQAAoDIi9787zUz+BwAAgMqI3P+eNLOa5H/9f/1//X/9/6D/r/9fhv6//n8Z+v/6/4Owfv1//X9612/9/8j9700zq0n+BwAAgDqI3P8raWbyPwAAAFRG5P73pZnJ/wAAAFAZkftvTDOrSf7X/9f/1//X/w/6//r/Zej/6/+Xof+v/z8I69f/1/+nd/3W/4/c/6tpZjXJ/wAAAFAHkftvSjOT/wEAAKAyIvffnGYm/wMAAEBlRO5/f5pZTfK//r/+v/6//n/Q/9f/L0P/X/+/DP1//f9BWL/+v/4/veu3/n/k/lvSzGqS/wEAAKAOIvf/WpqZ/A8AAACVEbn/19PM5H8AAACojMj9H0gzq0n+1//X/9f/1/8P+v/6/2Xo/+v/l6H/r/8/COvX/9f/p3f91v+P3P8baWY1yf8AAABQB5H7P5hmJv8DAABAZUTu/1CamfwPAAAAlRG5/8NpZjXJ//r/+v/6//r/Qf+///v/Qws9eS8h/X/9/zL0//X/B2H9+v/6//Su3/r/kftvTTOrSf4HAACAOojc/5E0M/kfAAAAKiNy/2+mmcn/AAAAUBmR+38rzawm+V//X/9f/1//P+j/93//vx/p/+v/l6H/r/8/COvX/9f/p3f91v+P3P/RNLOa5H8AAACog8j9H0szk/8BAACgMiL3/3aamfwPAAAAlRG5/3fSzGqS//X/9f/1//X/g/6//n8Z+v/6/2Xo/+v/D8L69f/1/+ldv/X/I/f/bppZTfI/AAAA1EHk/t9LM5P/AQAAoDIi9+9JM5P/AQAAoDIi9388zawm+V//X/9f/1//P+j/6/+Xof+v/1+G/r/+/yCsX/9f/5/e9Vv/P3L/3jSzmuR/AAAAqIPI/b+fZib/AwAAQGVE7t+XZib/AwAAQGVE7t+fZlaT/K//r/+v/6//H/T/9f/L0P/X/y9D/1//fxDWr/+v/0/v+q3/H7l/Js2sJvkfAAAA6iBy/4E0M/kfAAAAKiNy/8E0M/kfAAAAKiNy/21pZjXJ//r/+v/6//r/Qf9f/78M/X/9/zL0//X/B2H9+v/6//Su3/r/kfsPpZnVJP8DAABAHUTu/0SamfwPAAAAlRG5//Y0M/kfAAAAKiNy/+E0s5rkf/1//X/9f/3/oP+v/1+G/r/+fxn6//r/g7B+/X/9f3rXb/3/yP1H0sxqkv8BAACgDiL3H00zk/8BAACgMiL3H0szk/8BAACgMiL3H08zq0n+1//X/9f/1/8P+v/6/2VUpf+/Kr0e9f8T/f8m/X/9f/1//X9602/9/8j9f5BmVpP8DwAAAHUQuf9Empn8DwAAAJURuX82zUz+BwAAgMqI3H8yzawm+V//X/9f/1//P+j/6/+XUZX+v////y76/0299v/Po/8/UOvX/9f/p3eL9P8/WrwE/f/I/afSzGqS/wEAgP9n7655NtmOKIw68u91ZGZmZmZmZmZmZmZmO3Dg2iXZuroanb6a6T61VlLJq9EJ5gt28KiBCbL771q32f8AAACwjez+u9Vt9j8AAABsI7v/7nXbkP2v/9f/6//1/6H/1/+v0P/r/1dM6f99///a79f/6/857mzf/8/uv0fdNmT/AwAAwATZ/fes2+x/AAAA2EZ2/73qNvsfAAAAtpHdf++6bcj+1//r//X/+v/Q/+v/V+j/9f8r9P/6/yu8X/+v/+e4s/X/2f33qduG7H8AAACYILv/vnWb/Q8AAADbyO6/X91m/wMAAMA2svvvX7cN2f/6f/2//l//H/p//f8K/b/+f4X+X/9/hffr//X/HHe2/j+7/wF125D9DwAAABNk9z+wbrP/AQAAYBvZ/Q+q2+x/AAAA2EZ2/4PrtiH7X/+v/9f/6/9D/6//X6H/1/+v0P/r/6/wfv2//p/jztb/Z/c/pG4bsv8BAABgguz+h9Zt9j8AAABsI7v/YXWb/Q8AAADbyO5/eN02ZP/r//X/+n/9f+j/9f8r9P/6/xX6f/3/Fd6v/9f/c9zZ+v/s/kfUbUP2PwAAAEyQ3f/Ius3+BwAAgG1k9z+qbrP/AQAAYBvZ/Y+u24bsf/2//l//r/8P/b/+f4X+X/+/Qv+v/7/C+/X/+n+OO1v/n93/mLptyP4HAACACbL7H1u32f8AAACwjez+x9Vt9j8AAABsI7v/8XXbkP2v/9f/6//1/6H/1/+v0P/r/1fo//X/V3i//l//z3Fn6/+z+59Qtw3Z/wAAADBBdv8T6zb7HwAAALaR3f+kus3+BwAAgG1k9z+5bhuy//X/+n/9v/4/9P/6/xX6f/3/Cv2//v8K79f/6/857mz9f3b/U+q2IfsfAAAAJsjuf2rdZv8DAADANrL7n1a32f8AAACwjez+p9dtQ/a//l//r//X/4f+X/+/Qv9/2/3/HfV+/f9/f6//X3Or+/mrv1//r//nuLP1/9n9z6jbhux/AAAAmCC7/5l1m/0PAAAA28juf1bdZv8DAADANrL7n123Ddn/+n/9v/5f/x/6f/3/Cv2/7/+v0P/r/6/w/p37/7vcSf/PzXG2/j+7/zl125D9DwAAABNk9z+3brP/AQAAYBvZ/c+r2+x/AAAA2EZ2//PrtiH7X/+v/9f/6/9D/6//X6H/1/+v0P/r/6/w/p37f9//52Y5W/+f3f+Cum3I/gcAAIAJsvtfWLfZ/wAAALCN7P4X1W32PwAAAGwju//FdduQ/a//1//r//X/of/X/6/Q/+v/V+j/9f9XeL/+X//PcWfr/7P7X1K3Ddn/AAAAMEF2/0vrNvsfAAAAtpHd/7K6zf4HAACAbWT3v7xuG7L/9f/6f/2//j/0//r/Ffp//f8K/b/+/wrv1//r/znubP1/dv8r6rYh+x8AAAAmyO5/Zd1m/wMAAMA2svtfVbfZ/wAAALCN7P5X121D9r/+X/+v/9f/h/5f/79C/6//X6H/1/9f4f36f/0/x52t/8/uf03dNmT/AwAAwATZ/a+t2+x/AAAA2EZ2/+vqNvsfAAAAtpHd//q6bcj+1//r//X/+v/Q/+v/V+j/9f8r9P/6/yu8X/+v/+e4s/X/2f1vqNuG7H8AAACYILv/jXWb/Q8AAADbyO5/U91m/wMAAMA2svvfXLcN2f/6f/2//l//H/p//f8K/b/+f4X+/0b7/2P/5W91P3/UrX6//l//z3Fn6/+z+99Stw3Z/wAAADBBdv9b6zb7HwAAALaR3f+2us3+BwAAgG1k97+9bhuy//X/+n/9v/4/9P/6/xX6f/3/Cv2/7/9f4f36f/0/x52t/8/uf0fdNmT/AwAAwATZ/e+s2+x/AAAA2EZ2/7vqNvsfAAAAtpHd/+66bcj+1//r//X/+v/Q/+v/V+j/9f8r9P/6/yu8X/+v/+e4s/X/2f3vqduG7H8AAACYILv/vXWb/Q8AAADbyO5/X91m/wMAAMA2svvfX7cN2f/6f/2//l//H/p//f8K/b/+f4X+X/9/hffr//X/HHe2/j+7/wN125D9DwAAABNk93+wbrP/AQAAYBvZ/R+q2+x/AAAA2EZ2/4frtiH7X/+v/9f/6/9D/6//X6H/1/+v0P/r/6/wfv2//p/jztb/Z/d/pG4bsv8BAABgguz+j9Zt9j8AAABsI7v/Y3Wb/Q8AAADbyO7/eN02ZP/r//X/+n/9f+j/9f8r9P/6/xX6f/3/Fd6v/9f/c9zZ+v/s/k/UbUP2PwAAAEyQ3f/Jus3+BwAAgG1k93+qbrP/AQAAYBvZ/Z+u24bsf/2//l//r/8P/b/+f4X+X/+/Qv+v/7/C+/X/+n+OO1v/n93/mbptyP4HAACACbL7P1u32f8AAACwjez+z9Vt9j8AAABsI7v/83XbkP2v/9f/6//1/6H/1/+v0P/r/1fo//X/V3i//l//z3Fn6/+z+79Qtw3Z/wAAADBBdv8X6zb7HwAAALaR3f+lus3+BwAAgG1k93+5bhuy//X/+n/9v/4/9P/6/xX6f/3/Cv2//v8K79f/6/857mz9f3b/V+q2IfsfAAAAJsju/2rdZv8DAADANrL7v1a32f8AAACwjez+r9dtQ/a//l//r//X/4f+X/+/Qv+v/1+h/9f/X+H9+n/9P8edrf/P7v9G3TZk/wMAAMAE2f3frNvsfwAAANhGdv+36jb7HwAAALaR3f/tum3I/tf/6//1//r/0P/r/1fo//X/K/T/+v8rvF//r//nuLP1/9n936nbhux/AAAAmCC7/7t1m/0PAAAA28ju/17dZv8DAADANrL7v1+3Ddn/+n/9v/5f/x/6f/3/Cv2//n+F/l//f4X36//1/xx3tv4/u/8HdduQ/Q8AAAATZPf/sG6z/wEAAGAb2f0/qtvsfwAAANhGdv+P67Yh+1//r//X/+v/Q/+v/1+h/9f/r9D/6/+v8H79v/6f487W/2f3/6RuG7L/AQAAYILs/p/WbfY/AAAAbCO7/2d1m/0PAAAA28ju/3ndNmT/6//1//p//X/o//X/K/T/+v8V+n/9/xXer//X/3Pc2fr/7P5f1G1D9j8AAABMkN3/y7rN/gcAAIBtZPf/qm6z/wEAAGAb2f2/rtuG7H/9v/5f/6//D/2//n+F/l//v0L/r/+/wvv1//p/jjtb/5/d/5u6bcj+BwAAgAmy+39bt9n/AAAAsI3s/t/VbfY/AAAAbCO7//d125D9r//X/+v/b6////+/iP/99/X/+n/9v/5f/79G/6//v8L79f/6f447W/+f3f+Hum3I/gcAAIAJsvv/WLfZ/wAAALCN7P4/1W32PwAAAGwju//PdduQ/a//1//r/33/P/T/+v8V+n/9/wr9v/7/Cu/X/+v/Oe5s/X92/1/qtiH7HwAAACbI7v9r3Wb/AwAAwDay+/9Wt9n/AAAAsI3s/r/XbUP2v/5f/6//1/+H/l//v0L/n/7/zvVL/f+N0P/r/6/wfv2//p/jztb/Z/f/o24bsv8BAABgguz+f9Zt9j8AAABsI7v/X3Wb/Q8AAADbyO7/d902ZP/r//X/+n/9f+j/9f8r9P++/79C/6//v8L79f/6f447W/+f3f+fAAAA///MV21W")
creat(&(0x7f0000000300)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x10000000000400, 0x0, 0x0, 0x8, 0x7, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200000000000010", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x8]})
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)

16m29.197863519s ago: executing program 2 (id=920):
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
socket$vsock_stream(0x28, 0x1, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
io_setup(0x5, &(0x7f00000000c0))
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0186415, 0x0)
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)

16m28.041918408s ago: executing program 2 (id=934):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10)
syz_emit_ethernet(0xfe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0)

16m27.804627354s ago: executing program 33 (id=934):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10)
syz_emit_ethernet(0xfe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0)

10m0.95529765s ago: executing program 4 (id=6789):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000001300)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="5400000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

10m0.155379725s ago: executing program 4 (id=6793):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffff, 0x2})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r3 = accept(r1, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000080), &(0x7f00000002c0)=@udp=r3}, 0x20)
recvmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x21, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e24, 0x84, @empty, 0x3}, 0x1c)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r3)
close_range(r0, 0xffffffffffffffff, 0x0)
listxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0)

9m59.877613712s ago: executing program 4 (id=6798):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b26900007b8af8ff00000000bfa2000000000000070200006effffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4008000, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x34, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @hyper}, 0x10)

9m59.818224867s ago: executing program 4 (id=6801):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4)

9m59.725318307s ago: executing program 4 (id=6803):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x7, 0x87, 0xfe, 0x5, 0x5, 0x0, 0x0, 0x0, 0xfd, 0x2, 0x0, 0x0, 0xcc}, 0x4e)

9m58.957726163s ago: executing program 4 (id=6811):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")

9m58.82339832s ago: executing program 34 (id=6811):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")

6m56.02063888s ago: executing program 5 (id=9028):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
ppoll(&(0x7f0000000080)=[{r0, 0x1141}], 0x1, 0x0, 0x0, 0x0)
unshare(0x22020600)
signalfd4(r0, &(0x7f0000000340)={[0x1]}, 0x8, 0x800)

6m55.195110911s ago: executing program 5 (id=9046):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x7, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)

6m55.098167464s ago: executing program 5 (id=9048):
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000fee000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0xf000, 0x2})

6m55.041437331s ago: executing program 5 (id=9049):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb500a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)

6m55.041079493s ago: executing program 5 (id=9051):
syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000100)='./file1\x00', 0x800800, &(0x7f0000000800)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@sys_tz}, {@zero_size_dir}, {@umask={'umask', 0x3d, 0x5}}, {@errors_continue}, {@keep_last_dots}, {@fmask={'fmask', 0x3d, 0x3c}}, {@errors_continue}, {@sys_tz}]}, 0x1, 0x1541, &(0x7f0000001f40)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)

6m54.817274057s ago: executing program 5 (id=9056):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = memfd_secret(0x80000)
readahead(r0, 0x7, 0x0)

6m54.597549572s ago: executing program 35 (id=9056):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = memfd_secret(0x80000)
readahead(r0, 0x7, 0x0)

6m8.570541946s ago: executing program 6 (id=9724):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@nomblk_io_submit}]}, 0x1, 0x241, &(0x7f0000000540)="$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")
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
syz_mount_image$exfat(0x0, &(0x7f00000001c0)='./bus\x00', 0x84c20, 0x0, 0x0, 0x0, &(0x7f0000000100))
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000))
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./bus/file0/file0\x00')

6m8.448937725s ago: executing program 6 (id=9727):
r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0)
ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000000)=0x2)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={'\x00', 0x8, 0x6, 0x2, 0x3, 0x3b, "f700e4000000e9ffffffffffffff00", "0500", "0100", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "010000ff3c97c443084000", "ff81000000008000"]})

6m7.908083553s ago: executing program 6 (id=9737):
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
socket$igmp6(0xa, 0x3, 0x2)

6m7.884932116s ago: executing program 6 (id=9740):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$eJzs3c9rXNUeAPDvzDRpkua9/niPR9sHr4U+6HtKM/mBNFEXulIXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLvzKT5NXXQNAO5nw/czrn33M73nAzfw51z750bQGadTv7JRQxGxBcRcbixunmH042XtbvXp5IlF/X6xe9z6X7JemvX1v87FBGrEdEXEc89FfFybnvc6vLK7GS5XFpsrhdrcwvF6vLKuStzkzOlmdL8yPj5iYnx4bHRiV3r6803X7154eNnej/6+Y07t9/69JOkWYPNuo392E2NrvfE0Q3bDkTE4w8iWBcUmv3p73ZD+FOSz+8fEXEmzf/DUUg/TSAL6vV6/bf6wXbVq3Vg38qnx8C5/FBENMr5/NBQ4xj+nzGQL1eqtYcvV5bmpxvHykeiJ3/5Srk03PyucCR6csn6SFq+tz66ZX0sIj0GfrvQn64PTVXK03s71AFbHNqS/z8VGvkPZISv/JBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kMmPXvhQrLUW/e/T19dXpqtXD03XarODs0tTQ1NVRYXhmYqlZn0np25P3q/cqWyMPJILF0r1krVWrG6vHJprrI0X7uU3td/qdSzJ70COnH01K2vchGx+mh/uiR6m3VyFfa3ej0X3b4HGeiOQrcHIKBrTP1BdvmOD+zwE72b9LWrWNj9tgB7I9/tBgBdc/aE83+QVeb/IbvM/0N2OcYHzP9D9pj/h+wabPP8r79teHbXcET8PSK+LPQcbD3rC9gP8t/mmsf/Zw//d3BrbW/ul/QUQW9EvPb+xXevTdZqiyPJ9h/Wt9fea24f7Ub7gU618rSVxwBAdq3dvT7VWvYy7ndPNi5C2B7/QHNusi89Rzmwltt0rUJul65dWL0REcd3ip9rPu+8ceZjYK2wLf6x5muu8RZpew+kz03fm/gnNsT/z4b4J//yXwWy4VYy/gzvlH/5NKdjPf82jz+Du3TtRPvxL78+/hXajH+nOozxygevf9M2/o2IkzvGb8XrS2NtjZ+07WyH8e+8+Py/2tXVP2y8z07xW5JSsTa3UKwur5xLf0dupjQ/Mn5+YmJ8eGx0opjOURdbM9XbPXb889v36/9Am/jt+v9Es03/77D/v/77sxdO3yf+/87s/PkfaxM/0R8RD3UY/8fRr19qV5fEn27T//x94ifbxjqMX33n6YMd7goA7IHq8srsZLlcWlRQUFBYL3R7ZAIetHtJ3+2WAAAAAAAAAAAAAJ3ai8uJu91HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID94PcAAAD//5j81ps=")
openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x10, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b732673618000000fffff2ff0000000000edcce000", [0x1]})
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, 0x0)

6m7.627349171s ago: executing program 6 (id=9750):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

6m7.308403785s ago: executing program 6 (id=9758):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x23, 0x4, 0x9, 0x0, r0}, 0x48)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xff, r1, 0x28dd196b19db6b1d}, 0x38)

6m7.14224513s ago: executing program 36 (id=9758):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x23, 0x4, 0x9, 0x0, r0}, 0x48)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xff, r1, 0x28dd196b19db6b1d}, 0x38)

2m20.622357341s ago: executing program 7 (id=13024):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x4e, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xff}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0x1, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @mcast2}}}}}}, 0x0)

2m20.621799414s ago: executing program 7 (id=13025):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = syz_io_uring_setup(0x7a71, &(0x7f0000000040)={0x0, 0x0, 0x400}, &(0x7f00000001c0), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0x2, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20)

2m19.728071937s ago: executing program 7 (id=13029):
syz_usb_connect(0x3, 0x2d, &(0x7f0000000700)={{0x12, 0x1, 0x201, 0xa9, 0x2a, 0xe0, 0x8, 0x525, 0xa4a4, 0x7494, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x9, 0xd, 0x0, 0xa, [{{0x9, 0x4, 0xf0, 0x7, 0x1, 0xe9, 0x14, 0xb2, 0x9, [], [{{0x9, 0x5, 0xc, 0x9, 0x40, 0x1, 0x7, 0x1}}]}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})

2m18.519504306s ago: executing program 7 (id=13059):
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000001b80)=ANY=[@ANYBLOB='utf8,errors=continue,namecase=1,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYRESDEC=0x0], 0x1, 0x1503, &(0x7f0000000580)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020)

2m18.064437838s ago: executing program 7 (id=13060):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000000000008000200b1ac0000080001"], 0x24}}, 0x0)

2m17.851361496s ago: executing program 7 (id=13061):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f00002727f3f0"], 0x30)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x8], 0x0, 0x0, 0x1}}, 0x40)

2m17.643969264s ago: executing program 37 (id=13061):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f00002727f3f0"], 0x30)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x8], 0x0, 0x0, 0x1}}, 0x40)

42.233964952s ago: executing program 8 (id=14489):
socket$unix(0x1, 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='block_bio_complete\x00', r1, 0x0, 0x1}, 0x18)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1c9, 0x12)
memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x400, &(0x7f0000000080)=ANY=[@ANYBLOB='mpol=b', @ANYRESOCT])
lseek(r0, 0xd0, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x8, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x5, 0xa, &(0x7f00000002c0)=""/10, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x20000005}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0xf, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000300), 0x10, 0x1}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[], 0x48)

41.830541531s ago: executing program 8 (id=14496):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, 0x0)

41.746505166s ago: executing program 8 (id=14499):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000004140)=[{0x0, 0x0, 0x0}], 0x1, 0x0)

41.657790644s ago: executing program 8 (id=14502):
mkdir(&(0x7f00000002c0)='./file0\x00', 0xad32e1886e33d2fb)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]})
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000480)={[{@utf8no}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@tz_utc}, {@uni_xlate}, {@fat=@check_normal}, {@shortname_mixed}, {@fat=@usefree}, {@fat=@discard}, {@shortname_mixed}, {@fat=@quiet}, {@utf8no}]}, 0x0, 0x29f, &(0x7f0000000580)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333c06, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002d40)={0x2020}, 0x2020)

41.585546125s ago: executing program 8 (id=14505):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r1=>0x0})
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x410e, 0x4)
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), 0x4)
sendmsg$can_raw(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d, r1}, 0x10, &(0x7f0000000380)={&(0x7f00000002c0)=@can={{0x3, 0x0, 0x1}, 0x4, 0x2, 0x0, 0x0, "e3997e3df56fe25b"}, 0x10}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

40.973714962s ago: executing program 8 (id=14511):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xff05, 0x0)

40.878081068s ago: executing program 38 (id=14511):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xff05, 0x0)

1.325076987s ago: executing program 9 (id=15101):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="74010000100001000000000000000000fc000000000000000000000000000001e000000200"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000000006c000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000050000000f00000000000000000000000a0000004000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000024000900010000000000000007000000000000000000000000000000010000800000000010000a"], 0x174}}, 0x40000)

1.324802739s ago: executing program 3 (id=15102):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x8000008}, 0x0, {}, 0x67, 0x2, 0x2})

1.268166037s ago: executing program 3 (id=15103):
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000004300)=""/102400, 0x19000)
readv(0xffffffffffffffff, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0})
write(r1, &(0x7f0000000000)="fa", 0xfffffdef)

1.267721002s ago: executing program 9 (id=15104):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x4010)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0})
sendmsg$nl_route(r3, 0x0, 0x20081)
r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r4, &(0x7f0000002780)={0x2020}, 0x5ecfb203)
sendfile(r4, r4, 0x0, 0x9b)

525.637859ms ago: executing program 0 (id=15109):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="26000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB="0000000000000000000df4ffffffffffff"], 0x50)
io_uring_enter(r0, 0x6214, 0x7721, 0x13, 0x0, 0x38)

525.355528ms ago: executing program 0 (id=15110):
mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil)
unshare(0x2c020400)
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0)
msgrcv(r0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000)

397.912276ms ago: executing program 0 (id=15111):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000300)={@val={0xa, 0x800}, @void, @eth={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x6, 0x78, 0x64, 0x0, 0x15, 0x11, 0x0, @broadcast, @multicast1}, {0x4e21, 0x4e24, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x2, "ee0f4b5661102d05db02a08d16e0a6f6c0ff43a33579f14dc4e3708c3323a45e", "ac3442ab4f3feb37f47cf0c8c7343eb9", {"8f280c6f9e975b4dc06efece960a675d", "df23bf3a45c0510d52fec63fd32ae583"}}}}}}}}, 0x8a)

385.936077ms ago: executing program 9 (id=15112):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0xc010}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0)

381.309476ms ago: executing program 3 (id=15113):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)

310.946851ms ago: executing program 0 (id=15114):
setresuid(0x0, 0xee00, 0x0)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000b40)=0x2, 0x4)

310.37746ms ago: executing program 9 (id=15115):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x70bd2a, 0xffffffff, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x3, 0x0, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x86dd}}}]}, 0x38}}, 0x40084c0)

309.963317ms ago: executing program 0 (id=15116):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x613f, 0x81, 0x9cdbee1763468153, 0x3, 0x9}, 0x40}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

258.888286ms ago: executing program 3 (id=15117):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0x38}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48)

258.420644ms ago: executing program 9 (id=15118):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0163014030d9"})

27.581825ms ago: executing program 3 (id=15119):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb, 0x1}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x28)

27.006505ms ago: executing program 0 (id=15120):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
syz_open_pts(0xffffffffffffffff, 0x2800)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x8980, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10)
write$binfmt_format(r4, &(0x7f0000000100)='-1\x00', 0x2)
close_range(r4, 0xffffffffffffffff, 0x0)

26.78126ms ago: executing program 3 (id=15121):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0xe)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
r5 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_int(r5, 0x29, 0x7, 0x0, 0x0)

0s ago: executing program 9 (id=15122):
capset(&(0x7f0000000200)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000400)={0xa, 0x2, 0xac3, @loopback, 0x9}, 0x1c)

kernel console output (not intermixed with test programs):

ocess `syz.3.12208'.
[  955.849115][ T2000] batman_adv: batadv0: Removing interface: batadv_slave_1
[  956.019527][ T2011] loop7: detected capacity change from 0 to 2048
[  956.069123][ T2011]  loop7: p1 < > p3 p4 < >
[  956.072692][ T2011] loop7: p3 start 4284289 is beyond EOD, truncated
[  956.133974][ T2017] netlink: 88 bytes leftover after parsing attributes in process `syz.3.12216'.
[  956.332658][T28867] usb 8-1: new full-speed USB device number 20 using dummy_hcd
[  956.488198][T28867] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  956.494455][T28867] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  956.506310][T28867] usb 8-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  956.509976][T28867] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  956.523481][T28867] usb 8-1: Product: syz
[  956.525150][T28867] usb 8-1: Manufacturer: syz
[  956.526657][T28867] usb 8-1: SerialNumber: syz
[  956.533278][T28867] usb 8-1: config 0 descriptor??
[  956.817696][    C1] operation not supported error, dev loop7, sector 0 op 0x9:(WRITE_ZEROES) flags 0x20000800 phys_seg 0 prio class 2
[  957.053612][T28867] hub 8-1:0.0: bad descriptor, ignoring hub
[  957.056070][T28867] hub 8-1:0.0: probe with driver hub failed with error -5
[  957.061203][T28867] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  957.079664][T28867] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -2
[  957.095601][T28867] usb 8-1: USB disconnect, device number 20
[  957.143866][ T2053] netlink: 'syz.0.12233': attribute type 8 has an invalid length.
[  957.507560][ T2075] netlink: 240 bytes leftover after parsing attributes in process `syz.7.12244'.
[  957.511373][ T2075] NCSI netlink: No device for ifindex 1024
[  957.661853][ T2084] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  958.104600][ T2103] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  959.173239][ T2122] 9pnet_fd: Insufficient options for proto=fd
[  959.346904][ T2137] openvswitch: netlink: EtherType 50a is less than min 600
[  959.352667][T21729] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  959.500345][T21729] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023
[  959.537050][T21729] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[  959.549398][T21729] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  959.554630][T21729] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  959.557674][T21729] usb 8-1: Product: syz
[  959.559193][T21729] usb 8-1: Manufacturer: syz
[  959.561253][T21729] usb 8-1: SerialNumber: syz
[  959.906646][T21729] cdc_ncm 8-1:1.0: bind() failure
[  959.913727][T21729] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found
[  959.916568][T21729] cdc_ncm 8-1:1.1: bind() failure
[  959.927369][T21729] usb 8-1: USB disconnect, device number 21
[  960.108104][ T2163] openvswitch: netlink: Tunnel attr 5 has unexpected len 4 expected 0
[  960.720283][ T2180] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.12288'.
[  961.733435][ T2220] loop7: detected capacity change from 0 to 8
[  961.759062][ T2222] overlayfs: failed to clone upperpath
[  962.024167][ T2245] netlink: 68 bytes leftover after parsing attributes in process `syz.3.12317'.
[  962.458139][ T2278] futex_wake_op: syz.3.12331 tries to shift op by -1; fix this program
[  963.684692][ T2284] loop7: detected capacity change from 0 to 131072
[  963.688926][ T2284] F2FS-fs (loop7): QUOTA feature is enabled, so ignore qf_name
[  963.705688][ T2300] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.12343'.
[  963.749160][ T2284] F2FS-fs (loop7): Bad quota inode 2:2048
[  963.751106][ T2284] F2FS-fs (loop7): Failed to enable quota tracking (type=2, err=-2). Please run fsck to fix.
[  963.754456][ T2284] F2FS-fs (loop7): Cannot turn on quotas: error -2
[  963.756504][ T2284] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  963.760735][ T2284] F2FS-fs (loop7): Mounted with checkpoint version = 1b41e955
[  967.656156][ T2388] loop7: detected capacity change from 0 to 128
[  967.661070][ T2388] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  967.684979][ T2388] hpfs: filesystem error: improperly stopped
[  967.687272][ T2388] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  967.691026][ T2388] hpfs: You really don't want any checks? You are crazy...
[  967.693880][ T2388] hpfs: hpfs_map_sector(): read error
[  967.701881][ T2388] hpfs: code page support is disabled
[  967.717559][ T2388] hpfs: hpfs_map_4sectors(): unaligned read
[  967.719974][ T2388] hpfs: hpfs_map_4sectors(): unaligned read
[  967.728278][ T2388] hpfs: filesystem error: unable to find root dir
[  969.188144][ T2422] netlink: 'syz.0.12392': attribute type 16 has an invalid length.
[  969.991823][T21729] page_pool_release_retry() stalled pool shutdown: id 80, 3329 inflight 302 sec
[  970.104169][ T2491] overlayfs: failed to clone lowerpath
[  970.112106][ T2491] trusted_key: encrypted_key: insufficient parameters specified
[  970.117661][ T2491] trusted_key: encrypted_key: insufficient parameters specified
[  971.060346][ T2522] overlayfs: failed to clone upperpath
[  971.118003][T21518] usb 8-1: new full-speed USB device number 22 using dummy_hcd
[  971.268606][T21518] usb 8-1: config 0 has an invalid interface number: 3 but max is 0
[  971.274766][T21518] usb 8-1: config 0 has no interface number 0
[  971.276723][T21518] usb 8-1: config 0 interface 3 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  971.289379][T21518] usb 8-1: config 0 interface 3 altsetting 0 endpoint 0xB has invalid maxpacket 2015, setting to 64
[  971.295472][T21518] usb 8-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=a1.a3
[  971.305617][T21518] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  971.312017][T21518] usb 8-1: config 0 descriptor??
[  971.314547][ T2509] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  971.319506][T21518] keyspan 8-1:0.3: Keyspan 4 port adapter converter detected
[  971.322768][T21518] keyspan 8-1:0.3: found no endpoint descriptor for endpoint 81
[  971.325677][T21518] keyspan 8-1:0.3: found no endpoint descriptor for endpoint 88
[  971.329732][T21518] keyspan 8-1:0.3: found no endpoint descriptor for endpoint 1
[  971.337551][T21518] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  971.341137][T21518] keyspan 8-1:0.3: found no endpoint descriptor for endpoint 2
[  971.344533][T21518] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  971.348648][T21518] keyspan 8-1:0.3: found no endpoint descriptor for endpoint 4
[  971.352821][T21518] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  971.357316][T21518] keyspan 8-1:0.3: found no endpoint descriptor for endpoint 6
[  971.360456][T21518] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  971.533055][T21518] usb 8-1: USB disconnect, device number 22
[  971.551049][T21518] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  971.560499][T21518] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  971.569173][T21518] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  971.577149][T21518] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  971.581531][T21518] keyspan 8-1:0.3: device disconnected
[  972.623280][T21729] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  972.767940][T21729] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 252, using maximum allowed: 30
[  972.773810][T21729] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  972.779282][T21729] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 252
[  972.784581][T21729] usb 8-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00
[  972.789887][T21729] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  972.796596][T21729] usb 8-1: config 0 descriptor??
[  973.196910][T21729] logitech 0003:046D:CA04.000E: hidraw0: USB HID v0.05 Device [HID 046d:ca04] on usb-dummy_hcd.7-1/input0
[  973.201284][T21729] logitech 0003:046D:CA04.000E: no inputs found
[  973.386204][T21518] usb 8-1: USB disconnect, device number 23
[  973.559700][   T33] kauditd_printk_skb: 119 callbacks suppressed
[  973.559716][   T33] audit: type=1326 audit(1200.738:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2616 comm="syz.3.12467" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[  973.582029][   T33] audit: type=1326 audit(1200.738:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2616 comm="syz.3.12467" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[  973.603739][   T33] audit: type=1326 audit(1200.759:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2616 comm="syz.3.12467" exe="/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[  973.620895][   T33] audit: type=1326 audit(1200.759:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2616 comm="syz.3.12467" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[  973.632766][   T33] audit: type=1326 audit(1200.759:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2616 comm="syz.3.12467" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[  973.800563][ T2631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12472'.
[  974.815889][ T2654] loop7: detected capacity change from 0 to 256
[  974.833951][ T2654] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  976.602289][   T33] audit: type=1326 audit(1203.929:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2683 comm="syz.3.12489" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[  976.619907][   T33] audit: type=1326 audit(1203.929:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2683 comm="syz.3.12489" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[  976.632770][   T33] audit: type=1326 audit(1203.940:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2683 comm="syz.3.12489" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[  976.643051][   T33] audit: type=1326 audit(1203.940:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2683 comm="syz.3.12489" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7e49b8ec63 code=0x7ffc0000
[  976.652160][   T33] audit: type=1326 audit(1203.940:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2683 comm="syz.3.12489" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7e49b8d6df code=0x7ffc0000
[  976.783355][ T2697] macsec0: entered promiscuous mode
[  976.785565][ T2697] macsec0: entered allmulticast mode
[  976.793564][ T2697] veth1_macvtap: entered allmulticast mode
[  976.797789][ T2697] macsec0: left promiscuous mode
[  976.800168][ T2697] macsec0: left allmulticast mode
[  976.802402][ T2697] veth1_macvtap: left allmulticast mode
[  976.893958][ T2708] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000000004D0xffffffffffffffff
[  977.500215][ T2723] loop7: detected capacity change from 0 to 4096
[  977.503373][ T2723] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512).
[  977.509781][ T2723] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  977.513955][ T2723] ntfs3(loop7): Failed to load $MFT (-2).
[  977.561979][ T2725] program syz.7.12503 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  977.853577][T21729] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  978.006593][T21729] usb 8-1: Using ep0 maxpacket: 16
[  978.015626][ T2744] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12511'.
[  978.024079][T21729] usb 8-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01
[  978.032843][T21729] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  978.045961][T21729] usb 8-1: Product: syz
[  978.047714][T21729] usb 8-1: Manufacturer: syz
[  978.049324][T21729] usb 8-1: SerialNumber: syz
[  978.052474][T21729] usb 8-1: config 0 descriptor??
[  978.058784][T21729] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected.
[  978.257672][T21729] pwc: Warning: more than 1 configuration available.
[  978.270577][T21729] pwc: Failed to set LED on/off time (-71)
[  978.279243][T21729] pwc: send_video_command error -71
[  978.285116][T21729] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  978.289254][T21729] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71
[  978.298893][T21729] usb 8-1: USB disconnect, device number 24
[  979.045714][ T2805] loop7: detected capacity change from 0 to 4096
[  979.099594][ T2805] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  979.117398][ T2805] ntfs3(loop7): ino=9, ntfs_sync_fs failed, -22.
[  979.273297][T28744] ntfs3(loop7): ino=9, ntfs_sync_fs failed, -22.
[  979.585055][ T2828] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12543'.
[  979.590194][ T2828] IPVS: Unknown mcast interface: ipvlan1
[  980.287815][ T2849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12549'.
[  980.291440][ T2849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12549'.
[  980.295819][ T2849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12549'.
[  981.483143][T21729] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[  981.628268][T21729] usb 8-1: config index 0 descriptor too short (expected 45, got 36)
[  981.639309][T21729] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  981.647802][T21729] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  981.657605][T21729] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  981.665278][T21729] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  981.676092][T21729] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  981.684563][T21729] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  981.700045][T21729] usb 8-1: config 0 descriptor??
[  981.705581][ T2907] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  982.098112][T21729] plantronics 0003:047F:FFFF.000F: reserved main item tag 0xd
[  982.121916][T21729] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  982.353641][T21729] usb 8-1: USB disconnect, device number 25
[  983.060784][ T2960] loop7: detected capacity change from 0 to 4096
[  983.096032][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  983.098999][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  984.666871][ T3003] netlink: 6 bytes leftover after parsing attributes in process `syz.7.12609'.
[  984.671166][ T3006] openvswitch: netlink: Flow key attr not present in new flow.
[  984.739151][ T3013] loop7: detected capacity change from 0 to 512
[  984.760699][ T3013] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  984.763993][ T3013] EXT4-fs (loop7): orphan cleanup on readonly fs
[  984.767302][ T3013] EXT4-fs error (device loop7): ext4_quota_enable:7128: inode #15: comm syz.7.12615: iget: bad i_size value: 360287970189639690
[  984.772813][ T3013] EXT4-fs error (device loop7): ext4_quota_enable:7131: comm syz.7.12615: Bad quota inode: 15, type: 2
[  984.777224][ T3013] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix.
[  984.789275][ T3013] EXT4-fs (loop7): Cannot turn on quotas: error -117
[  984.793767][ T3013] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  984.818489][ T3016] tmpfs: Bad value for 'mpol'
[  984.823561][T28744] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  985.990958][ T3071] loop7: detected capacity change from 0 to 2048
[  985.996061][ T3071] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found!
[  986.007984][ T3071] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found!
[  986.092972][ T3076] program syz.7.12643 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  986.566001][ T3094] fuse: Unknown parameter 'smackfsdef'
[  986.589669][T21518] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  986.733815][T21518] usb 8-1: Using ep0 maxpacket: 32
[  986.738478][T21518] usb 8-1: config 0 has no interfaces?
[  986.745070][T21518] usb 8-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=f0.bb
[  986.748963][T21518] usb 8-1: New USB device strings: Mfr=193, Product=2, SerialNumber=3
[  986.753530][T21518] usb 8-1: Product: syz
[  986.755345][T21518] usb 8-1: Manufacturer: syz
[  986.757230][T21518] usb 8-1: SerialNumber: syz
[  986.762440][T21518] usb 8-1: config 0 descriptor??
[  986.957868][T21518] usb 8-1: USB disconnect, device number 26
[  987.242075][ T3109] netlink: 'syz.3.12659': attribute type 4 has an invalid length.
[  988.413488][ T3137] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  988.593791][ T3149] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12678'.
[  988.851403][ T3163] loop7: detected capacity change from 0 to 2048
[  988.855777][ T3163] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024)
[  988.882028][ T3164] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  989.084625][ T3174] netlink: 'syz.3.12688': attribute type 3 has an invalid length.
[  989.659188][ T3158] ceph: No mds server is up or the cluster is laggy
[  993.229604][T21729] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[  993.372268][T21729] usb 8-1: Using ep0 maxpacket: 8
[  993.376540][T21729] usb 8-1: config 0 has an invalid interface number: 186 but max is 0
[  993.382116][T21729] usb 8-1: config 0 has no interface number 0
[  993.386638][T21729] usb 8-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  993.394957][T21729] usb 8-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  993.399719][T21729] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  993.404359][T21729] usb 8-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  993.416642][T21729] usb 8-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  993.420810][T21729] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  993.425187][T21729] usb 8-1: Product: syz
[  993.427822][T21729] usb 8-1: Manufacturer: syz
[  993.432278][T21729] usb 8-1: SerialNumber: syz
[  993.437274][T21729] usb 8-1: config 0 descriptor??
[  993.643954][T21729] iowarrior 8-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0
[  993.652040][T21729] usb 8-1: USB disconnect, device number 27
[  995.147284][ T3329] loop7: detected capacity change from 0 to 128
[  995.192013][ T3329] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  995.268406][T28744] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  997.099921][ T3413] loop7: detected capacity change from 0 to 128
[  997.105115][ T3413] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  997.109629][ T3413] hpfs: filesystem error: improperly stopped
[  997.113137][ T3413] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  997.122224][ T3413] hpfs: You really don't want any checks? You are crazy...
[  997.125787][ T3413] hpfs: hpfs_map_sector(): read error
[  997.127566][ T3413] hpfs: code page support is disabled
[  997.130395][ T3413] hpfs: hpfs_map_4sectors(): unaligned read
[  997.132510][ T3413] hpfs: hpfs_map_4sectors(): unaligned read
[  997.134843][ T3413] hpfs: filesystem error: unable to find root dir
[  997.143860][ T3413] hpfs: hpfs_map_4sectors(): unaligned read
[  997.149817][ T3413] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib
[  999.302755][ T3510] netlink: 'syz.3.12815': attribute type 21 has an invalid length.
[  999.305881][ T3510] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12815'.
[  999.449585][ T3519] netlink: 'syz.0.12820': attribute type 13 has an invalid length.
[  999.453041][ T3519] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.12820'.
[  999.649487][ T3533] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  999.658370][ T3533] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  999.916688][ T3547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12834'.
[  999.954863][T28867] usb 8-1: new high-speed USB device number 28 using dummy_hcd
[ 1000.052275][ T3553] netlink: 'syz.0.12837': attribute type 3 has an invalid length.
[ 1000.054743][ T3553] netlink: 766 bytes leftover after parsing attributes in process `syz.0.12837'.
[ 1000.107962][T28867] usb 8-1: config index 0 descriptor too short (expected 23569, got 27)
[ 1000.111331][T28867] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1000.130106][T28867] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 1000.133785][T28867] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 1000.144041][T28867] usb 8-1: Manufacturer: syz
[ 1000.149268][T28867] usb 8-1: config 0 descriptor??
[ 1000.211939][T28867] rc_core: IR keymap rc-hauppauge not found
[ 1000.214297][T28867] Registered IR keymap rc-empty
[ 1000.217276][T28867] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[ 1000.223589][T28867] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input17
[ 1000.727805][ T3579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12848'.
[ 1000.731145][ T3579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12848'.
[ 1000.920549][T28868] usb 8-1: USB disconnect, device number 28
[ 1002.725508][ T3651] loop7: detected capacity change from 0 to 2048
[ 1002.798373][ T3651] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[ 1002.804952][ T3651] UDF-fs: Scanning with blocksize 512 failed
[ 1002.976050][ T3651] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1003.114110][ T3651] UDF-fs: error (device loop7): udf_truncate_tail_extent: Extent after EOF in inode 818
[ 1003.180630][T20512] kworker/u9:39: attempt to access beyond end of device
[ 1003.180630][T20512] loop7: rw=1, sector=2048, nr_sectors = 2 limit=2048
[ 1003.189044][T20512] Buffer I/O error on dev loop7, logical block 1024, lost async page write
[ 1003.192480][T20512] kworker/u9:39: attempt to access beyond end of device
[ 1003.192480][T20512] loop7: rw=1, sector=2048, nr_sectors = 2 limit=2048
[ 1003.203257][T20512] Buffer I/O error on dev loop7, logical block 1024, lost async page write
[ 1003.206876][T20512] kworker/u9:39: attempt to access beyond end of device
[ 1003.206876][T20512] loop7: rw=1, sector=2048, nr_sectors = 2 limit=2048
[ 1003.220563][T20512] Buffer I/O error on dev loop7, logical block 1024, lost async page write
[ 1003.232992][T20512] kworker/u9:39: attempt to access beyond end of device
[ 1003.232992][T20512] loop7: rw=1, sector=2048, nr_sectors = 2 limit=2048
[ 1003.238356][T20512] Buffer I/O error on dev loop7, logical block 1024, lost async page write
[ 1003.243137][T20512] kworker/u9:39: attempt to access beyond end of device
[ 1003.243137][T20512] loop7: rw=1, sector=2050, nr_sectors = 2 limit=2048
[ 1003.248768][T20512] Buffer I/O error on dev loop7, logical block 1025, lost async page write
[ 1003.254907][T20512] kworker/u9:39: attempt to access beyond end of device
[ 1003.254907][T20512] loop7: rw=1, sector=2050, nr_sectors = 2 limit=2048
[ 1003.260902][T20512] Buffer I/O error on dev loop7, logical block 1025, lost async page write
[ 1003.264714][T20512] kworker/u9:39: attempt to access beyond end of device
[ 1003.264714][T20512] loop7: rw=1, sector=2050, nr_sectors = 2 limit=2048
[ 1003.271429][T20512] Buffer I/O error on dev loop7, logical block 1025, lost async page write
[ 1003.274866][T20512] kworker/u9:39: attempt to access beyond end of device
[ 1003.274866][T20512] loop7: rw=1, sector=2050, nr_sectors = 2 limit=2048
[ 1003.281024][T20512] Buffer I/O error on dev loop7, logical block 1025, lost async page write
[ 1003.284784][T20512] kworker/u9:39: attempt to access beyond end of device
[ 1003.284784][T20512] loop7: rw=1, sector=2052, nr_sectors = 2 limit=2048
[ 1003.301813][T20512] Buffer I/O error on dev loop7, logical block 1026, lost async page write
[ 1003.307830][T20512] kworker/u9:39: attempt to access beyond end of device
[ 1003.307830][T20512] loop7: rw=1, sector=2052, nr_sectors = 2 limit=2048
[ 1003.317281][T20512] Buffer I/O error on dev loop7, logical block 1026, lost async page write
[ 1003.529858][ T3685] MPI: mpi too large (130952 bits)
[ 1003.701935][ T3698] loop7: detected capacity change from 0 to 128
[ 1003.704487][ T3698] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1003.711990][ T3698] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1003.733532][  T504] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1003.769841][ T3702] loop7: detected capacity change from 0 to 512
[ 1003.773523][ T3702] journal_path: Non-blockdev passed as './bus'
[ 1003.776602][ T3702] EXT4-fs: error: could not find journal device path
[ 1004.081417][ T3719] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[ 1004.278238][ T3733] loop7: detected capacity change from 0 to 1024
[ 1004.326201][ T3737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12922'.
[ 1004.455794][T20508] hfsplus: b-tree write err: -5, ino 4
[ 1005.958163][ T3768] loop7: detected capacity change from 0 to 32768
[ 1005.961540][ T3768] XFS: attr2 mount option is deprecated.
[ 1005.983063][ T3768] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1006.028128][ T3768] XFS (loop7): Ending clean mount
[ 1006.035476][ T3768] XFS (loop7): Quotacheck needed: Please wait.
[ 1006.082369][ T3768] XFS (loop7): Quotacheck: Done.
[ 1006.190691][ T3802] netlink: 'syz.3.12944': attribute type 1 has an invalid length.
[ 1006.372656][T28744] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1006.980664][ T3845] openvswitch: netlink: IP tunnel TTL not specified.
[ 1007.106514][ T3850] 9pnet_fd: Insufficient options for proto=fd
[ 1007.522329][ T3854] loop7: detected capacity change from 0 to 32768
[ 1007.526398][ T3854] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.12967 (3854)
[ 1007.534372][ T3854] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1007.540956][ T3854] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[ 1007.578871][ T3854] BTRFS info (device loop7): enabling ssd optimizations
[ 1007.581685][ T3854] BTRFS info (device loop7): enabling free space tree
[ 1007.609337][T28744] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1008.226765][ T3893] netlink: 'syz.3.12979': attribute type 1 has an invalid length.
[ 1008.229690][ T3893] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1008.318256][T21518] usb 8-1: new high-speed USB device number 29 using dummy_hcd
[ 1008.472561][T21518] usb 8-1: Using ep0 maxpacket: 8
[ 1008.479946][T21518] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1008.484622][T21518] usb 8-1: config 7 has an invalid interface number: 58 but max is 0
[ 1008.488137][T21518] usb 8-1: config 7 has no interface number 0
[ 1008.492949][T21518] usb 8-1: config 7 interface 58 altsetting 3 endpoint 0xE has an invalid bInterval 0, changing to 7
[ 1008.499056][T21518] usb 8-1: No eUSB2 isoc ep 14 companion for config 7 interface 58 altsetting 3
[ 1008.502873][T21518] usb 8-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1008.509537][T21518] usb 8-1: config 7 interface 58 has no altsetting 0
[ 1008.515316][T21518] usb 8-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f
[ 1008.526241][T21518] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1008.532842][T21518] usb 8-1: Product: syz
[ 1008.534756][T21518] usb 8-1: Manufacturer: syz
[ 1008.539591][T21518] usb 8-1: SerialNumber: syz
[ 1008.743448][T21518] usb 8-1: USB disconnect, device number 29
[ 1008.927712][T21518] page_pool_release_retry() stalled pool shutdown: id 88, 3329 inflight 241 sec
[ 1009.076469][ T3924] openvswitch: netlink: Flow key attribute not present in set flow.
[ 1009.187955][   T33] kauditd_printk_skb: 13 callbacks suppressed
[ 1009.187967][   T33] audit: type=1326 audit(4195542.138:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3929 comm="syz.3.12997" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[ 1009.200081][   T33] audit: type=1326 audit(4195542.138:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3929 comm="syz.3.12997" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[ 1009.210510][   T33] audit: type=1326 audit(4195542.149:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3929 comm="syz.3.12997" exe="/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[ 1009.221961][   T33] audit: type=1326 audit(4195542.149:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3929 comm="syz.3.12997" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[ 1009.230724][   T33] audit: type=1326 audit(4195542.149:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3929 comm="syz.3.12997" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[ 1009.239187][   T33] audit: type=1326 audit(4195542.149:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3929 comm="syz.3.12997" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[ 1009.248338][   T33] audit: type=1326 audit(4195542.149:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3929 comm="syz.3.12997" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[ 1009.256378][   T33] audit: type=1326 audit(4195542.149:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3929 comm="syz.3.12997" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[ 1009.265882][   T33] audit: type=1326 audit(4195542.149:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3929 comm="syz.3.12997" exe="/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[ 1009.274347][   T33] audit: type=1326 audit(4195542.149:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3929 comm="syz.3.12997" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[ 1009.326417][ T3934] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[ 1009.344974][ T3936] overlayfs: conflicting options: nfs_export=on,index=off
[ 1009.400720][ T3942] loop7: detected capacity change from 0 to 512
[ 1009.411866][ T3942] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1009.419182][ T3942] EXT4-fs (loop7): 1 truncate cleaned up
[ 1009.422477][ T3942] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1009.484206][T28744] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1009.633505][ T3957] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.13008'.
[ 1009.800280][ T3969] loop7: detected capacity change from 0 to 8192
[ 1009.808784][ T3969] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1011.139671][T28868] usb 8-1: new high-speed USB device number 30 using dummy_hcd
[ 1011.314134][T28868] usb 8-1: Using ep0 maxpacket: 8
[ 1011.319516][T28868] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1011.324186][T28868] usb 8-1: config 9 has an invalid interface number: 240 but max is 0
[ 1011.327663][T28868] usb 8-1: config 9 has no interface number 0
[ 1011.333038][T28868] usb 8-1: config 9 interface 240 has no altsetting 0
[ 1011.338871][T28868] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=74.94
[ 1011.342994][T28868] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1011.346344][T28868] usb 8-1: Product: syz
[ 1011.351291][T28868] usb 8-1: Manufacturer: syz
[ 1011.353337][T28868] usb 8-1: SerialNumber: syz
[ 1011.562651][T28868] usbtest 8-1:9.240: couldn't get endpoints, -22
[ 1011.565516][T28868] usbtest 8-1:9.240: probe with driver usbtest failed with error -22
[ 1011.573002][T28868] usb 8-1: USB disconnect, device number 30
[ 1012.094102][ T4065] loop7: detected capacity change from 0 to 256
[ 1012.097274][ T4065] exfat: Deprecated parameter 'utf8'
[ 1012.104144][ T4065] exfat: Deprecated parameter 'namecase'
[ 1012.106720][ T4065] exfat: Deprecated parameter 'utf8'
[ 1012.116732][ T4065] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d)
[ 1012.207503][ T4067] overlayfs: failed to clone upperpath
[ 1013.028780][ T4071] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13064'.
[ 1013.636274][ T4086] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1013.664663][ T4086] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1013.673216][ T4086] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1013.693680][ T4086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1013.708614][ T4086] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1013.810308][   T13] bridge_slave_1: left allmulticast mode
[ 1013.818548][   T13] bridge_slave_1: left promiscuous mode
[ 1013.823552][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1013.845283][   T13] bridge_slave_0: left allmulticast mode
[ 1013.847712][   T13] bridge_slave_0: left promiscuous mode
[ 1013.850085][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1013.968765][   T13] batman_adv: batadv0: Removing interface: ip6gretap1
[ 1014.254159][   T13] dvmrp8 (unregistering): left allmulticast mode
[ 1014.741270][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1014.747225][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1014.752626][   T13] bond0 (unregistering): (slave team0): Releasing backup interface
[ 1014.758992][   T13] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[ 1014.764341][   T13] bond0 (unregistering): Released all slaves
[ 1014.989646][ T4085] chnl_net:caif_netlink_parms(): no params data found
[ 1015.083677][ T4122] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1015.086696][ T4122] IPv6: NLM_F_CREATE should be set when creating new route
[ 1015.089690][ T4122] IPv6: NLM_F_CREATE should be set when creating new route
[ 1015.092768][ T4122] IPv6: NLM_F_CREATE should be set when creating new route
[ 1015.138763][   T13] hsr_slave_0: left promiscuous mode
[ 1015.141024][   T13] hsr_slave_1: left promiscuous mode
[ 1015.143234][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1015.146807][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1015.793731][ T4086] Bluetooth: hci1: command tx timeout
[ 1015.823490][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1015.897627][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1016.688734][ T4085] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1016.692334][ T4085] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1016.694992][ T4085] bridge_slave_0: entered allmulticast mode
[ 1016.698537][ T4085] bridge_slave_0: entered promiscuous mode
[ 1016.712452][ T4085] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1016.719551][ T4085] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1016.722380][ T4085] bridge_slave_1: entered allmulticast mode
[ 1016.730874][ T4085] bridge_slave_1: entered promiscuous mode
[ 1016.794138][ T4085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1016.807723][ T4085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1016.911402][ T4160] : Can't lookup blockdev
[ 1017.678527][ T4085] team0: Port device team_slave_0 added
[ 1017.692126][ T4085] team0: Port device team_slave_1 added
[ 1017.789812][ T4086] Bluetooth: hci1: command tx timeout
[ 1017.845581][ T4085] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1017.848818][ T4085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1017.864603][ T4085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1017.888102][ T4085] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1017.890912][ T4085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1017.903049][ T4085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1018.002923][ T4177] can: request_module (can-proto-3) failed.
[ 1018.035164][ T4085] hsr_slave_0: entered promiscuous mode
[ 1018.038469][ T4085] hsr_slave_1: entered promiscuous mode
[ 1018.041498][ T4085] debugfs: 'hsr0' already exists in 'hsr'
[ 1018.046404][ T4085] Cannot create hsr debugfs directory
[ 1018.298758][ T4185] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13110'.
[ 1018.493989][   T33] kauditd_printk_skb: 1 callbacks suppressed
[ 1018.494003][   T33] audit: type=1326 audit(4195551.870:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4181 comm="syz.3.13110" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[ 1018.511484][   T33] audit: type=1326 audit(4195551.870:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4181 comm="syz.3.13110" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[ 1018.519595][   T33] audit: type=1326 audit(4195551.881:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4181 comm="syz.3.13110" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[ 1018.548401][   T33] audit: type=1326 audit(4195551.902:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4181 comm="syz.3.13110" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[ 1018.553735][ T4085] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1018.564531][ T4085] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1018.567051][   T33] audit: type=1326 audit(4195551.902:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4181 comm="syz.3.13110" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[ 1018.587704][ T4085] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1018.592778][ T4085] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1018.680196][ T4085] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1018.697273][ T4085] 8021q: adding VLAN 0 to HW filter on device team0
[ 1018.704760][T20483] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1018.707612][T20483] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1018.725495][T20483] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1018.728425][T20483] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1018.926390][ T4085] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1019.023692][ T4211] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1019.041090][ T4211] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1019.269123][ T4085] veth0_vlan: entered promiscuous mode
[ 1019.293975][ T4085] veth1_vlan: entered promiscuous mode
[ 1019.345018][ T4085] veth0_macvtap: entered promiscuous mode
[ 1019.356112][ T4085] veth1_macvtap: entered promiscuous mode
[ 1019.374143][ T4085] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1019.390098][ T4085] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1019.402652][T28792] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1019.414486][T28792] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1019.420999][T28792] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1019.437108][T28792] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1019.526868][T31756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1019.530358][T31756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1019.565931][T31756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1019.568476][T31756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1019.758669][ T4086] Bluetooth: hci1: command tx timeout
[ 1020.107762][ T4259] loop8: detected capacity change from 0 to 4096
[ 1020.137491][ T4259] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512).
[ 1020.171904][ T4259] ntfs3(loop8): ino=5, "/" ntfs_readdir
[ 1020.174775][ T4259] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[ 1020.694156][ T4274] loop8: detected capacity change from 0 to 256
[ 1020.697437][ T4274] exfat: Deprecated parameter 'namecase'
[ 1020.705591][ T4276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13143'.
[ 1020.708618][ T4274] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[ 1020.725966][   T33] audit: type=1326 audit(4195554.243:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4273 comm="syz.8.13141" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba8078ec29 code=0x0
[ 1020.874219][ T4279] block device autoloading is deprecated and will be removed.
[ 1021.221511][ T4293] netlink: 'syz.3.13149': attribute type 1 has an invalid length.
[ 1021.224548][ T4293] netlink: 'syz.3.13149': attribute type 1 has an invalid length.
[ 1021.740110][ T4086] Bluetooth: hci1: command tx timeout
[ 1021.932183][ T4311] loop8: detected capacity change from 0 to 32768
[ 1021.943822][ T4311] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.13158 (4311)
[ 1021.958267][ T4311] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1021.963545][ T4311] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm
[ 1022.009291][ T4311] BTRFS info (device loop8): rebuilding free space tree
[ 1022.033538][ T4311] BTRFS info (device loop8): disabling free space tree
[ 1022.036132][ T4311] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1022.039859][ T4311] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1022.049029][ T4311] BTRFS info (device loop8): enabling ssd optimizations
[ 1022.051756][ T4311] BTRFS info (device loop8): using spread ssd allocation scheme
[ 1022.054969][ T4311] BTRFS info (device loop8): force clearing of disk cache
[ 1022.057865][ T4311] BTRFS info (device loop8): enabling auto defrag
[ 1022.077546][ T4085] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1022.270367][ T4352] loop8: detected capacity change from 0 to 512
[ 1022.338541][ T4352] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1022.364821][ T4085] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1022.448709][ T4359] loop8: detected capacity change from 0 to 128
[ 1026.452940][ T4481] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13222'.
[ 1026.464775][ T4481] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13222'.
[ 1027.131968][ T4495] fuse: Bad value for 'fd'
[ 1027.229535][ T4497] overlayfs: failed to clone upperpath
[ 1027.500367][ T4503] netlink: 'syz.8.13231': attribute type 10 has an invalid length.
[ 1027.505622][ T4503] batman_adv: batadv0: Adding interface: wlan0
[ 1027.508142][ T4503] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1027.520362][ T4503] batman_adv: batadv0: Interface activated: wlan0
[ 1027.572998][ T4507] No source specified
[ 1027.599215][T28868] page_pool_release_retry() stalled pool shutdown: id 80, 3329 inflight 363 sec
[ 1027.749110][ T4519] loop8: detected capacity change from 0 to 8
[ 1027.755115][ T4519] Dev loop8: unable to read RDB block 8
[ 1027.757529][ T4519]  loop8: unable to read partition table
[ 1027.760782][ T4519] loop8: partition table beyond EOD, truncated
[ 1027.779484][ T4519] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5)
[ 1028.093434][   T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 1028.256070][   T10] usb 9-1: Using ep0 maxpacket: 32
[ 1028.261880][   T10] usb 9-1: config 7 has an invalid interface number: 41 but max is 0
[ 1028.274201][   T10] usb 9-1: config 7 has no interface number 0
[ 1028.278359][   T10] usb 9-1: config 7 interface 41 has no altsetting 0
[ 1028.324800][   T10] usb 9-1: New USB device found, idVendor=0499, idProduct=5005, bcdDevice=e6.1d
[ 1028.331566][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1028.334767][   T10] usb 9-1: Product: syz
[ 1028.336544][   T10] usb 9-1: Manufacturer: syz
[ 1028.338296][   T10] usb 9-1: SerialNumber: syz
[ 1028.875051][   T10] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[ 1028.893557][   T10] snd-usb-audio 9-1:7.41: probe with driver snd-usb-audio failed with error -2
[ 1028.904875][   T10] usb 9-1: USB disconnect, device number 2
[ 1029.295784][ T4568] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.13262'.
[ 1029.590599][ T4574] loop8: detected capacity change from 0 to 40427
[ 1029.597322][ T4574] F2FS-fs (loop8): invalid crc value
[ 1029.649024][ T4574] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[ 1029.653188][ T4574] F2FS-fs (loop8): Start checkpoint disabled!
[ 1029.657257][ T4574] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[ 1030.124169][   T33] audit: type=1800 audit(4195793.114:565): pid=4588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.13265" name="bus" dev="loop8" ino=10 res=0 errno=0
[ 1030.174758][ T4588] syz.8.13265: attempt to access beyond end of device
[ 1030.174758][ T4588] loop8: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[ 1030.214730][ T4588] syz.8.13265: attempt to access beyond end of device
[ 1030.214730][ T4588] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1030.242651][ T4593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13270'.
[ 1030.261343][ T4588] syz.8.13265: attempt to access beyond end of device
[ 1030.261343][ T4588] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1030.289766][ T4588] syz.8.13265: attempt to access beyond end of device
[ 1030.289766][ T4588] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1030.316855][ T4588] syz.8.13265: attempt to access beyond end of device
[ 1030.316855][ T4588] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1030.370264][ T4588] syz.8.13265: attempt to access beyond end of device
[ 1030.370264][ T4588] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[ 1030.375361][ T4588] syz.8.13265: attempt to access beyond end of device
[ 1030.375361][ T4588] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1030.425017][ T4588] syz.8.13265: attempt to access beyond end of device
[ 1030.425017][ T4588] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[ 1030.487283][ T4588] syz.8.13265: attempt to access beyond end of device
[ 1030.487283][ T4588] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[ 1030.527105][ T4588] syz.8.13265: attempt to access beyond end of device
[ 1030.527105][ T4588] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[ 1031.686011][T20537] CPU: 1 UID: 0 PID: 20537 Comm: kworker/u10:39 Not tainted syzkaller #0 PREEMPT(full) 
[ 1031.686038][T20537] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1031.686047][T20537] Workqueue: writeback wb_workfn (flush-7:8)
[ 1031.686072][T20537] Call Trace:
[ 1031.686079][T20537]  <TASK>
[ 1031.686086][T20537]  dump_stack_lvl+0x189/0x250
[ 1031.686109][T20537]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1031.686125][T20537]  ? __pfx_queue_work_on+0x10/0x10
[ 1031.686137][T20537]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1031.686166][T20537]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1031.686197][T20537]  f2fs_handle_critical_error+0x37c/0x540
[ 1031.686225][T20537]  f2fs_write_end_io+0x886/0xb60
[ 1031.686256][T20537]  __submit_merged_bio+0x27a/0x6a0
[ 1031.686282][T20537]  __submit_merged_write_cond+0x255/0x530
[ 1031.686309][T20537]  f2fs_write_data_pages+0x261d/0x3000
[ 1031.686388][T20537]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1031.686417][T20537]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[ 1031.686466][T20537]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[ 1031.686498][T20537]  ? trace_f2fs_writepages+0x7f/0x200
[ 1031.686519][T20537]  ? f2fs_write_node_pages+0x478/0x6e0
[ 1031.686543][T20537]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[ 1031.686576][T20537]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1031.686591][T20537]  do_writepages+0x32e/0x550
[ 1031.686615][T20537]  ? reacquire_held_locks+0x127/0x1d0
[ 1031.686630][T20537]  ? writeback_sb_inodes+0x384/0x1010
[ 1031.686657][T20537]  __writeback_single_inode+0x145/0xff0
[ 1031.686675][T20537]  ? do_raw_spin_unlock+0x4d/0x240
[ 1031.686696][T20537]  writeback_sb_inodes+0x6c7/0x1010
[ 1031.686721][T20537]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1031.686758][T20537]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1031.686817][T20537]  ? rcu_is_watching+0x15/0xb0
[ 1031.686841][T20537]  wb_writeback+0x43b/0xaf0
[ 1031.686867][T20537]  ? queue_io+0x321/0x590
[ 1031.686886][T20537]  ? __pfx_wb_writeback+0x10/0x10
[ 1031.686912][T20537]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1031.686937][T20537]  wb_workfn+0x409/0xef0
[ 1031.686967][T20537]  ? __pfx_wb_workfn+0x10/0x10
[ 1031.686988][T20537]  ? __lock_acquire+0xab9/0xd20
[ 1031.687017][T20537]  ? process_scheduled_works+0x9ef/0x17b0
[ 1031.687038][T20537]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1031.687056][T20537]  ? process_scheduled_works+0x9ef/0x17b0
[ 1031.687069][T20537]  ? process_scheduled_works+0x9ef/0x17b0
[ 1031.687085][T20537]  process_scheduled_works+0xae1/0x17b0
[ 1031.687128][T20537]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1031.687164][T20537]  worker_thread+0x8a0/0xda0
[ 1031.687182][T20537]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1031.687211][T20537]  ? __kthread_parkme+0x7b/0x200
[ 1031.687237][T20537]  kthread+0x711/0x8a0
[ 1031.687257][T20537]  ? __pfx_worker_thread+0x10/0x10
[ 1031.687271][T20537]  ? __pfx_kthread+0x10/0x10
[ 1031.687290][T20537]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1031.687310][T20537]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1031.687347][T20537]  ? __pfx_kthread+0x10/0x10
[ 1031.687367][T20537]  ret_from_fork+0x439/0x7d0
[ 1031.687385][T20537]  ? __pfx_ret_from_fork+0x10/0x10
[ 1031.687406][T20537]  ? __switch_to_asm+0x39/0x70
[ 1031.687422][T20537]  ? __switch_to_asm+0x33/0x70
[ 1031.687438][T20537]  ? __pfx_kthread+0x10/0x10
[ 1031.687455][T20537]  ret_from_fork_asm+0x1a/0x30
[ 1031.687489][T20537]  </TASK>
[ 1031.687496][T20537] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[ 1031.833389][T20537] CPU: 1 UID: 0 PID: 20537 Comm: kworker/u10:39 Not tainted syzkaller #0 PREEMPT(full) 
[ 1031.833410][T20537] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1031.833420][T20537] Workqueue: writeback wb_workfn (flush-7:8)
[ 1031.833443][T20537] Call Trace:
[ 1031.833449][T20537]  <TASK>
[ 1031.833456][T20537]  dump_stack_lvl+0x189/0x250
[ 1031.833477][T20537]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1031.833493][T20537]  ? __pfx_queue_work_on+0x10/0x10
[ 1031.833506][T20537]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1031.833527][T20537]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1031.833574][T20537]  f2fs_handle_critical_error+0x37c/0x540
[ 1031.833600][T20537]  f2fs_write_end_io+0x886/0xb60
[ 1031.833631][T20537]  __submit_merged_bio+0x27a/0x6a0
[ 1031.833673][T20537]  __submit_merged_write_cond+0x255/0x530
[ 1031.833701][T20537]  f2fs_write_data_pages+0x261d/0x3000
[ 1031.833746][T20537]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1031.833781][T20537]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[ 1031.833828][T20537]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[ 1031.833860][T20537]  ? trace_f2fs_writepages+0x7f/0x200
[ 1031.833879][T20537]  ? f2fs_write_node_pages+0x478/0x6e0
[ 1031.833901][T20537]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[ 1031.833933][T20537]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1031.833948][T20537]  do_writepages+0x32e/0x550
[ 1031.833970][T20537]  ? reacquire_held_locks+0x127/0x1d0
[ 1031.833985][T20537]  ? writeback_sb_inodes+0x384/0x1010
[ 1031.834011][T20537]  __writeback_single_inode+0x145/0xff0
[ 1031.834028][T20537]  ? do_raw_spin_unlock+0x4d/0x240
[ 1031.834049][T20537]  writeback_sb_inodes+0x6c7/0x1010
[ 1031.834073][T20537]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1031.834108][T20537]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1031.834164][T20537]  ? rcu_is_watching+0x15/0xb0
[ 1031.834188][T20537]  wb_writeback+0x43b/0xaf0
[ 1031.834212][T20537]  ? queue_io+0x321/0x590
[ 1031.834232][T20537]  ? __pfx_wb_writeback+0x10/0x10
[ 1031.834257][T20537]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1031.834281][T20537]  wb_workfn+0x409/0xef0
[ 1031.834337][T20537]  ? __pfx_wb_workfn+0x10/0x10
[ 1031.834358][T20537]  ? __lock_acquire+0xab9/0xd20
[ 1031.834388][T20537]  ? process_scheduled_works+0x9ef/0x17b0
[ 1031.834407][T20537]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1031.834427][T20537]  ? process_scheduled_works+0x9ef/0x17b0
[ 1031.834439][T20537]  ? process_scheduled_works+0x9ef/0x17b0
[ 1031.834452][T20537]  process_scheduled_works+0xae1/0x17b0
[ 1031.834491][T20537]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1031.834523][T20537]  worker_thread+0x8a0/0xda0
[ 1031.834541][T20537]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1031.834568][T20537]  ? __kthread_parkme+0x7b/0x200
[ 1031.834593][T20537]  kthread+0x711/0x8a0
[ 1031.834614][T20537]  ? __pfx_worker_thread+0x10/0x10
[ 1031.834627][T20537]  ? __pfx_kthread+0x10/0x10
[ 1031.834646][T20537]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1031.834666][T20537]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1031.834679][T20537]  ? __pfx_kthread+0x10/0x10
[ 1031.834697][T20537]  ret_from_fork+0x439/0x7d0
[ 1031.834716][T20537]  ? __pfx_ret_from_fork+0x10/0x10
[ 1031.834737][T20537]  ? __switch_to_asm+0x39/0x70
[ 1031.834753][T20537]  ? __switch_to_asm+0x33/0x70
[ 1031.834774][T20537]  ? __pfx_kthread+0x10/0x10
[ 1031.834793][T20537]  ret_from_fork_asm+0x1a/0x30
[ 1031.834827][T20537]  </TASK>
[ 1031.976732][T20537] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[ 1032.787698][ T4655] usb usb8: usbfs: process 4655 (syz.8.13296) did not claim interface 0 before use
[ 1033.844795][ T4696] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13313'.
[ 1034.059564][ T4709] loop8: detected capacity change from 0 to 512
[ 1034.070933][ T4709] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1034.077401][ T4709] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem
[ 1034.099252][ T4709] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[ 1034.102618][ T4709] System zones: 0-2, 18-18, 34-35
[ 1034.110206][ T4709] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[ 1034.120512][ T4709] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended
[ 1034.134932][ T4709] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[ 1034.146419][ T4709] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[ 1034.202574][ T4085] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1034.917163][ T4732] netlink: 'syz.0.13331': attribute type 3 has an invalid length.
[ 1035.077580][ T4744] xt_l2tp: wrong L2TP version: 1
[ 1035.130106][ T4748] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13339'.
[ 1035.310017][ T4762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13346'.
[ 1035.822463][ T4778] loop8: detected capacity change from 0 to 32768
[ 1035.841472][ T4778] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1035.872470][ T4778] XFS (loop8): Ending clean mount
[ 1035.898272][ T4778] XFS (loop8): Metadata CRC error detected at xfs_agfl_read_verify+0x126/0x1f0, xfs_agfl block 0x3 
[ 1035.907264][ T4778] XFS (loop8): Unmount and run xfs_repair
[ 1035.909592][ T4778] XFS (loop8): First 128 bytes of corrupted metadata buffer:
[ 1035.917942][ T4778] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed  XAF.......G...N.
[ 1035.921486][ T4778] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00  .b..1...........
[ 1035.925907][ T4778] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08  .;..............
[ 1035.929582][ T4778] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c  ................
[ 1035.933725][ T4778] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[ 1035.937570][ T4778] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[ 1035.941160][ T4778] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[ 1035.945673][ T4778] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[ 1035.950580][ T4778] XFS (loop8): metadata I/O error in "xfs_alloc_read_agfl+0x202/0x410" at daddr 0x3 len 1 error 74
[ 1035.956579][ T4778] XFS (loop8): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[ 1035.964734][ T4778] XFS (loop8): Please unmount the filesystem and rectify the problem(s)
[ 1035.997756][ T4085] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1036.416315][ T4816] loop8: detected capacity change from 0 to 4096
[ 1036.422433][ T4816] ntfs3(loop8): Different NTFS sector size (2048) and media sector size (512).
[ 1036.447103][ T4816] ntfs3(loop8): Failed to initialize $Extend/$ObjId.
[ 1036.545496][ T4825] loop8: detected capacity change from 0 to 64
[ 1036.578558][ T4827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13370'.
[ 1036.808582][ T4837] loop8: detected capacity change from 0 to 2048
[ 1036.818312][ T4837] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1038.297810][ T4873] loop8: detected capacity change from 0 to 2048
[ 1038.303943][ T4873] hpfs: hpfs_map_sector(): read error
[ 1038.387002][ T4875] loop8: detected capacity change from 0 to 64
[ 1038.394683][ T4875] BFS-fs: bfs_fill_super(): loop8 is unclean, continuing
[ 1038.891811][ T4890] loop8: detected capacity change from 0 to 8
[ 1038.910597][ T4890] Filesystem uses "unknown" compression. This is not supported
[ 1040.082927][ T4915] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13406'.
[ 1040.283929][ T4929] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[ 1040.295956][   T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 1040.476507][   T10] usb 9-1: Using ep0 maxpacket: 8
[ 1040.491454][   T10] usb 9-1: config 0 has an invalid interface number: 52 but max is 0
[ 1040.494477][   T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1040.507293][   T10] usb 9-1: config 0 has no interface number 0
[ 1040.516392][   T10] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1040.521003][   T10] usb 9-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1040.530859][   T10] usb 9-1: config 0 interface 52 has no altsetting 0
[ 1040.542223][   T10] usb 9-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[ 1040.545823][   T10] usb 9-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[ 1040.548779][   T10] usb 9-1: Manufacturer: syz
[ 1040.565585][   T10] usb 9-1: config 0 descriptor??
[ 1040.574678][   T10] hub 9-1:0.52: bad descriptor, ignoring hub
[ 1040.577114][   T10] hub 9-1:0.52: probe with driver hub failed with error -5
[ 1040.884803][   T10] input: syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.52/input/input18
[ 1040.958145][ T4952] netlink: 'syz.0.13424': attribute type 10 has an invalid length.
[ 1040.965541][ T4952] veth0_vlan: entered allmulticast mode
[ 1041.143525][ T5983] usb 9-1: USB disconnect, device number 3
[ 1041.560237][ T4968] loop8: detected capacity change from 0 to 128
[ 1041.567963][ T4968] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1041.584427][ T4968] EXT4-fs error (device loop8): dx_make_map:1296: inode #2: block 20: comm syz.8.13433: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[ 1041.593139][ T4968] EXT4-fs error (device loop8) in do_split:2029: Corrupt filesystem
[ 1041.624317][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[ 1041.627912][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[ 1041.632390][ T4085] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1042.197108][ T5007] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[ 1042.279802][ T5013] : renamed from bond_slave_0
[ 1044.537316][ T5066] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[ 1045.811170][ T5983] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 1045.976042][ T5983] usb 9-1: Using ep0 maxpacket: 32
[ 1045.980187][ T5983] usb 9-1: config 0 has an invalid interface number: 85 but max is 0
[ 1045.997298][ T5983] usb 9-1: config 0 has no interface number 0
[ 1045.999935][ T5983] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1046.004873][ T5983] usb 9-1: config 0 interface 85 has no altsetting 0
[ 1046.013275][ T5983] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1046.017011][ T5983] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1046.021099][ T5983] usb 9-1: Product: syz
[ 1046.022914][ T5983] usb 9-1: Manufacturer: syz
[ 1046.024839][ T5983] usb 9-1: SerialNumber: syz
[ 1046.032468][ T5983] usb 9-1: config 0 descriptor??
[ 1046.103021][ T5133] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13507'.
[ 1046.107477][ T5133] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13507'.
[ 1046.720801][ T5983] appletouch 9-1:0.85: Geyser mode initialized.
[ 1046.731185][ T5983] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.85/input/input19
[ 1046.927174][ T5983] usb 9-1: USB disconnect, device number 4
[ 1046.929685][    C0] appletouch 9-1:0.85: atp_complete: usb_submit_urb failed with result -19
[ 1047.396172][ T5983] appletouch 9-1:0.85: input: appletouch disconnected
[ 1047.598207][ T5172] tipc: Trying to set illegal importance in message
[ 1047.869850][ T5189] netlink: 136 bytes leftover after parsing attributes in process `syz.8.13532'.
[ 1048.521955][ T5247] loop8: detected capacity change from 0 to 512
[ 1048.541859][ T5247] EXT4-fs (loop8): orphan cleanup on readonly fs
[ 1048.563130][ T5247] EXT4-fs warning (device loop8): ext4_xattr_inode_get:556: inode #11: comm syz.8.13559: EA inode hash validation failed
[ 1048.572865][ T5247] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[ 1048.580443][ T5247] EXT4-fs (loop8): 1 orphan inode deleted
[ 1048.585125][ T5247] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1048.611097][ T4085] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1048.696858][ T5256] netlink: 64535 bytes leftover after parsing attributes in process `syz.8.13563'.
[ 1049.222927][ T5275] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13570'.
[ 1049.680734][ T5292] overlayfs: failed to clone upperpath
[ 1050.730616][ T5309] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13585'.
[ 1052.140994][ T5347] loop8: detected capacity change from 0 to 32768
[ 1052.771975][ T5384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13615'.
[ 1052.816057][ T5384] : (slave dummy0): Releasing backup interface
[ 1052.876499][ T5389] loop8: detected capacity change from 0 to 2048
[ 1052.930985][ T5389]  loop8: p3 p4 < >
[ 1052.932718][ T5389] loop8: p3 start 11362048 is beyond EOD, truncated
[ 1053.207828][ T5415] loop8: detected capacity change from 0 to 512
[ 1053.211666][ T5415] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1053.218453][ T5415] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c0a8, mo2=0002]
[ 1053.224451][ T5415] System zones: 1-12
[ 1053.227839][ T5415] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: inode #11: comm syz.8.13630: iget: bogus i_mode (700)
[ 1053.245080][ T5415] EXT4-fs (loop8): Remounting filesystem read-only
[ 1053.249185][ T5415] EXT4-fs (loop8): 1 orphan inode deleted
[ 1053.255331][ T5415] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1053.275378][ T4085] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1053.515919][ T5421] loop8: detected capacity change from 0 to 32768
[ 1053.520219][ T5421] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.13632 (5421)
[ 1053.528940][ T5421] BTRFS info (device loop8): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 1053.533389][ T5421] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm
[ 1053.571447][ T5421] BTRFS info (device loop8): enabling ssd optimizations
[ 1053.574666][ T5421] BTRFS info (device loop8): turning on sync discard
[ 1053.577543][ T5421] BTRFS info (device loop8): enabling free space tree
[ 1053.580389][ T5421] BTRFS info (device loop8): use lzo compression, level 1
[ 1053.750238][ T4085] BTRFS info (device loop8): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 1054.043452][ T5448] 9pnet: p9_errstr2errno: server reported unknown error @cF	S+
[ 1054.208771][ T5452] netlink: 116 bytes leftover after parsing attributes in process `syz.8.13640'.
[ 1054.301528][ T5456] loop8: detected capacity change from 0 to 2048
[ 1054.307226][ T5456] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1054.311941][ T5456] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[ 1054.319808][ T5456] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1054.419350][ T5459] loop8: detected capacity change from 0 to 128
[ 1054.423037][ T5459] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[ 1054.428784][ T5459] hpfs: filesystem error: improperly stopped
[ 1054.602134][ T5459] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1054.632782][ T5459] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories
[ 1054.640105][ T5459] hpfs: You really don't want any checks? You are crazy...
[ 1054.644437][ T5459] hpfs: hpfs_map_sector(): read error
[ 1054.646603][ T5459] hpfs: code page support is disabled
[ 1054.649200][ T5459] hpfs: hpfs_map_4sectors(): unaligned read
[ 1054.655148][ T5459] hpfs: hpfs_map_4sectors(): unaligned read
[ 1054.657627][ T5459] hpfs: filesystem error: unable to find root dir
[ 1054.741889][ T5465] gre1: entered promiscuous mode
[ 1054.776670][ T5467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13644'.
[ 1055.251603][ T5489] netlink: 'syz.3.13656': attribute type 11 has an invalid length.
[ 1055.266200][ T5477] loop8: detected capacity change from 0 to 32768
[ 1055.278766][ T5477] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1055.307401][ T5477] XFS (loop8): Ending clean mount
[ 1055.315477][ T5477] XFS (loop8): Quotacheck needed: Please wait.
[ 1055.367749][ T5477] XFS (loop8): Quotacheck: Done.
[ 1055.463086][ T4085] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1055.821959][ T5515] openvswitch: netlink: IPv4 tun info is not correct
[ 1057.635297][ T5542] netlink: 'syz.8.13673': attribute type 32 has an invalid length.
[ 1057.639381][ T5542] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13673'.
[ 1057.645561][ T5542] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[ 1058.286633][ T5559] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[ 1059.112658][ T5575] overlay: Bad value for 'workdir'
[ 1060.904965][ T5634] overlayfs: failed to resolve './file0': -2
[ 1061.416345][ T5634] loop8: detected capacity change from 0 to 32768
[ 1061.765597][ T5648] netlink: 'syz.0.13715': attribute type 28 has an invalid length.
[ 1061.831674][ T5650] netlink: 'syz.0.13716': attribute type 21 has an invalid length.
[ 1061.835635][ T5650] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13716'.
[ 1063.575278][ T5698] netlink: 'syz.3.13738': attribute type 10 has an invalid length.
[ 1063.589422][ T5698] bond0: left promiscuous mode
[ 1063.591478][ T5698] bond_slave_0: left promiscuous mode
[ 1063.599103][ T5698] bond_slave_1: left promiscuous mode
[ 1063.651945][ T5703] netlink: 152 bytes leftover after parsing attributes in process `syz.8.13740'.
[ 1063.656137][ T5703] tipc: Started in network mode
[ 1063.658548][ T5703] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711
[ 1063.668921][ T5703] tipc: Enabled bearer <udp:syz0>, priority 10
[ 1063.962019][ T5730] __vm_enough_memory: pid: 5730, comm: syz.3.13753, bytes: 21199733374976 not enough memory for the allocation
[ 1064.024046][ T5983] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[ 1064.177475][ T5983] usb 9-1: Using ep0 maxpacket: 32
[ 1064.187529][ T5983] usb 9-1: config 0 has an invalid interface number: 16 but max is 0
[ 1064.190832][ T5983] usb 9-1: config 0 has no interface number 0
[ 1064.193474][ T5983] usb 9-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1064.198269][ T5983] usb 9-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[ 1064.207074][ T5983] usb 9-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[ 1064.211014][ T5983] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1064.216909][ T5983] usb 9-1: Product: syz
[ 1064.219239][ T5983] usb 9-1: Manufacturer: syz
[ 1064.221121][ T5983] usb 9-1: SerialNumber: syz
[ 1064.228263][ T5983] usb 9-1: config 0 descriptor??
[ 1064.234551][ T5718] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1064.237871][ T5718] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1064.244698][ T5983] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[ 1064.449657][ T5983] usb 9-1: USB disconnect, device number 5
[ 1064.612063][   T33] audit: type=1326 audit(4195829.311:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5768 comm="syz.3.13770" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[ 1064.621665][   T33] audit: type=1326 audit(4195829.322:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5768 comm="syz.3.13770" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[ 1064.630447][   T33] audit: type=1326 audit(4195829.322:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5768 comm="syz.3.13770" exe="/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[ 1064.649426][   T33] audit: type=1326 audit(4195829.322:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5768 comm="syz.3.13770" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[ 1064.661449][   T33] audit: type=1326 audit(4195829.322:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5768 comm="syz.3.13770" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[ 1064.670987][   T33] audit: type=1326 audit(4195829.322:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5768 comm="syz.3.13770" exe="/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[ 1064.685411][   T33] audit: type=1326 audit(4195829.322:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5768 comm="syz.3.13770" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[ 1064.696163][   T33] audit: type=1326 audit(4195829.322:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5768 comm="syz.3.13770" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[ 1064.729085][   T47] tipc: Node number set to 4269801514
[ 1065.154937][ T5783] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1065.238232][ T5785] loop8: detected capacity change from 0 to 4096
[ 1065.560442][ T5785] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1065.627312][ T4085] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1065.986329][   T47] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[ 1066.138766][   T47] usb 9-1: config 0 has an invalid interface number: 142 but max is 0
[ 1066.142032][   T47] usb 9-1: config 0 has no interface number 0
[ 1066.146707][   T47] usb 9-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=62.09
[ 1066.164243][   T47] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1066.207347][   T47] usb 9-1: config 0 descriptor??
[ 1066.409343][   T47] usb 9-1: string descriptor 0 read error: -71
[ 1066.428798][   T10] page_pool_release_retry() stalled pool shutdown: id 88, 3329 inflight 302 sec
[ 1066.434837][   T47] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.142/input/input20
[ 1066.450776][   T47] usb 9-1: USB disconnect, device number 6
[ 1067.032785][ T5860] overlayfs: failed to clone upperpath
[ 1067.392891][   T47] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 1067.539793][   T47] usb 9-1: Using ep0 maxpacket: 32
[ 1067.543870][   T47] usb 9-1: config 0 has an invalid interface number: 35 but max is 0
[ 1067.547005][   T47] usb 9-1: config 0 has no interface number 0
[ 1067.552926][   T47] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[ 1067.556613][   T47] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1067.560501][   T47] usb 9-1: Product: syz
[ 1067.562200][   T47] usb 9-1: Manufacturer: syz
[ 1067.564059][   T47] usb 9-1: SerialNumber: syz
[ 1067.569864][   T47] usb 9-1: config 0 descriptor??
[ 1067.579952][   T47] radio-si470x 9-1:0.35: could not find interrupt in endpoint
[ 1067.582923][   T47] radio-si470x 9-1:0.35: probe with driver radio-si470x failed with error -5
[ 1067.773481][   T47] radio-raremono 9-1:0.35: this is not Thanko's Raremono.
[ 1067.777539][   T47] usbhid 9-1:0.35: couldn't find an input interrupt endpoint
[ 1067.782150][   T47] usb 9-1: USB disconnect, device number 7
[ 1068.041363][ T5920] overlayfs: failed to clone upperpath
[ 1068.394749][ T5935] netlink: 'syz.0.13843': attribute type 10 has an invalid length.
[ 1068.420044][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1068.430782][ T5935] : (slave batadv0): Enslaving as an active interface with an up link
[ 1068.544888][ T5939] trusted_key: encrypted_key: master key parameter 'u' is invalid
[ 1068.945490][ T5968] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1069.925966][ T6008] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[ 1070.159330][ T6012] netlink: 'syz.3.13869': attribute type 1 has an invalid length.
[ 1070.162078][ T6012] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1070.305676][ T6027] loop8: detected capacity change from 0 to 256
[ 1070.315761][ T6027] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x7c732dc0, utbl_chksum : 0xe619d30d)
[ 1070.354742][ T6029] sctp: [Deprecated]: syz.3.13877 (pid 6029) Use of int in max_burst socket option.
[ 1070.354742][ T6029] Use struct sctp_assoc_value instead
[ 1070.402089][   T33] audit: type=1326 audit(4195835.390:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6032 comm="syz.3.13879" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e49b8ec29 code=0x0
[ 1070.478571][ T6037] netlink: 'syz.8.13881': attribute type 4 has an invalid length.
[ 1070.664889][ T6047] loop7: detected capacity change from 256 to 0
[ 1070.903690][   T10] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 1071.044762][   T10] usb 9-1: Using ep0 maxpacket: 16
[ 1071.055478][   T10] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1071.060266][   T10] usb 9-1: unable to read config index 0 descriptor/start: -71
[ 1071.065478][   T10] usb 9-1: can't read configurations, error -71
[ 1071.614932][ T6057] Bluetooth: MGMT ver 1.23
[ 1073.565830][ T6123] overlayfs: failed to clone upperpath
[ 1074.275689][ T6143] nftables ruleset with unbound chain
[ 1074.431539][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13935'.
[ 1075.125419][ T6174] netlink: 'syz.0.13944': attribute type 3 has an invalid length.
[ 1075.128780][ T6174] netlink: 'syz.0.13944': attribute type 2 has an invalid length.
[ 1076.700823][ T6220] loop8: detected capacity change from 0 to 512
[ 1076.706226][ T6220] EXT4-fs: journaled quota format not specified
[ 1076.829422][   T33] audit: type=1326 audit(4195842.140:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.3.13966" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[ 1076.859959][   T33] audit: type=1326 audit(4195842.161:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.3.13966" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[ 1076.868395][   T33] audit: type=1326 audit(4195842.161:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.3.13966" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[ 1076.884011][   T33] audit: type=1326 audit(4195842.161:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.3.13966" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[ 1076.898328][   T33] audit: type=1326 audit(4195842.161:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.3.13966" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[ 1076.912053][   T33] audit: type=1326 audit(4195842.161:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.3.13966" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[ 1076.929033][   T33] audit: type=1326 audit(4195842.161:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.3.13966" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[ 1076.940668][   T33] audit: type=1326 audit(4195842.161:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.3.13966" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[ 1076.948153][   T33] audit: type=1326 audit(4195842.161:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.3.13966" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[ 1076.961373][   T33] audit: type=1326 audit(4195842.161:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.3.13966" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7e49b8ec29 code=0x7ffc0000
[ 1077.093410][   T47] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[ 1077.264399][   T47] usb 9-1: Using ep0 maxpacket: 32
[ 1077.277249][   T47] usb 9-1: New USB device found, idVendor=04e2, idProduct=1403, bcdDevice=1c.b2
[ 1077.283290][   T47] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1077.286428][   T47] usb 9-1: Product: syz
[ 1077.288187][   T47] usb 9-1: Manufacturer: syz
[ 1077.290077][   T47] usb 9-1: SerialNumber: syz
[ 1077.306049][   T47] usb 9-1: config 0 descriptor??
[ 1077.318166][   T47] xr_serial 9-1:0.0: invalid descriptor buffer length
[ 1077.475249][ T6262] netlink: 'syz.0.13982': attribute type 21 has an invalid length.
[ 1077.519995][   T10] usb 9-1: USB disconnect, device number 10
[ 1078.773382][ T6313] CIFS: iocharset name too long
[ 1079.150512][   T47] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[ 1079.293280][   T47] usb 9-1: Using ep0 maxpacket: 32
[ 1079.297721][   T47] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1079.301854][   T47] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1079.308506][   T47] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1079.312416][   T47] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1079.315520][   T47] usb 9-1: Product: syz
[ 1079.317170][   T47] usb 9-1: Manufacturer: syz
[ 1079.319107][   T47] usb 9-1: SerialNumber: syz
[ 1079.324032][   T47] usb 9-1: config 0 descriptor??
[ 1079.714666][   T10] usb 9-1: USB disconnect, device number 11
[ 1080.241206][ T6359] loop8: detected capacity change from 0 to 136
[ 1080.308369][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14027'.
[ 1080.312066][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14027'.
[ 1080.365399][ T6363] hsr0 speed is unknown, defaulting to 1000
[ 1080.368389][ T6363] hsr0 speed is unknown, defaulting to 1000
[ 1080.377357][ T6363] hsr0 speed is unknown, defaulting to 1000
[ 1080.388464][ T6363] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[ 1080.414538][ T6363] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[ 1080.436634][ T6365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14029'.
[ 1080.476949][ T6363] hsr0 speed is unknown, defaulting to 1000
[ 1080.480458][ T6363] hsr0 speed is unknown, defaulting to 1000
[ 1080.483232][ T6363] hsr0 speed is unknown, defaulting to 1000
[ 1080.495635][ T6363] hsr0 speed is unknown, defaulting to 1000
[ 1080.504348][ T6363] hsr0 speed is unknown, defaulting to 1000
[ 1080.628974][ T6370] loop8: detected capacity change from 0 to 1024
[ 1080.633189][ T6370] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1080.647679][    C0] Dead loop on virtual device ipvlan1, fix it urgently!
[ 1080.652680][ T6370] EXT4-fs (loop8): revision level too high, forcing read-only mode
[ 1080.657364][ T6370] EXT4-fs (loop8): orphan cleanup on readonly fs
[ 1080.660576][ T6370] EXT4-fs error (device loop8): ext4_quota_enable:7124: comm syz.8.14031: Bad quota inum: 458752, type: 1
[ 1080.675059][ T6370] EXT4-fs warning (device loop8): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=458752). Please run e2fsck to fix.
[ 1080.681602][ T6370] EXT4-fs (loop8): Cannot turn on quotas: error -117
[ 1080.686936][ T6370] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1080.711503][ T4085] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1080.984518][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14036'.
[ 1081.672621][ T6421] vxcan1: entered allmulticast mode
[ 1081.675658][ T6421] vxcan1: left allmulticast mode
[ 1082.870413][ T6457] loop8: detected capacity change from 0 to 8192
[ 1083.743376][ T6483] loop8: detected capacity change from 0 to 32768
[ 1083.750269][ T6483] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.14081 (6483)
[ 1083.766908][ T6483] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1083.771361][ T6483] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm
[ 1083.783244][ T6503] overlayfs: failed to resolve './file0': -2
[ 1083.868993][ T6483] BTRFS info (device loop8): rebuilding free space tree
[ 1083.898166][ T6483] BTRFS info (device loop8): disabling free space tree
[ 1083.901019][ T6483] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1083.905865][ T6483] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1083.919110][ T6483] BTRFS info (device loop8): enabling ssd optimizations
[ 1083.927351][ T6483] BTRFS info (device loop8): force clearing of disk cache
[ 1083.930298][ T6483] BTRFS info (device loop8): enabling auto defrag
[ 1083.942380][ T6483] BTRFS info (device loop8): doing ref verification
[ 1083.945356][ T6483] BTRFS info (device loop8): max_inline set to 4096
[ 1084.076471][ T4085] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1084.860136][ T6553] loop8: detected capacity change from 0 to 32768
[ 1084.879135][ T6553] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1084.896696][ T6553] XFS (loop8): Ending clean mount
[ 1084.901013][ T6553] XFS (loop8): Quotacheck needed: Please wait.
[ 1084.951090][ T6553] XFS (loop8): Quotacheck: Done.
[ 1085.059424][ T4085] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1085.514526][T28868] page_pool_release_retry() stalled pool shutdown: id 80, 3329 inflight 423 sec
[ 1085.740626][ T6610] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14126'.
[ 1085.796366][ T6612] loop8: detected capacity change from 0 to 4096
[ 1085.800881][ T6612] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[ 1085.802868][ T6617] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14126'.
[ 1085.815033][ T6617] netlink: 34 bytes leftover after parsing attributes in process `syz.0.14126'.
[ 1085.831454][ T6612] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[ 1085.842331][ T6612] ntfs3(loop8): Failed to load $Extend (-22).
[ 1085.849115][ T6612] ntfs3(loop8): Failed to initialize $Extend.
[ 1086.237363][ T6633] netlink: 76 bytes leftover after parsing attributes in process `syz.0.14135'.
[ 1086.241317][ T6633] netlink: 76 bytes leftover after parsing attributes in process `syz.0.14135'.
[ 1086.285318][ T5983] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[ 1086.458078][ T5983] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1086.466097][ T5983] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[ 1086.470918][ T5983] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1086.474406][ T5983] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[ 1086.480504][ T5983] usb 9-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[ 1086.483835][ T5983] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1086.487689][ T5983] usb 9-1: Product: syz
[ 1086.489532][ T5983] usb 9-1: Manufacturer: syz
[ 1086.491097][ T5983] usb 9-1: SerialNumber: syz
[ 1086.494313][ T5983] usb 9-1: config 0 descriptor??
[ 1086.499654][ T5983] ums-isd200 9-1:0.0: USB Mass Storage device detected
[ 1086.698254][ T5983] scsi host6: usb-storage 9-1:0.0
[ 1086.704955][ T5983] usb 9-1: USB disconnect, device number 12
[ 1086.895419][ T6658] netlink: 'syz.3.14144': attribute type 10 has an invalid length.
[ 1086.898505][ T6658] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14144'.
[ 1086.901890][ T6658] dummy0: entered promiscuous mode
[ 1086.905685][ T6658] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[ 1087.045258][   T33] kauditd_printk_skb: 3 callbacks suppressed
[ 1087.045274][   T33] audit: type=1800 audit(4195852.869:588): pid=6666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.14147" name="nullb0" dev="tmpfs" ino=4226 res=0 errno=0
[ 1088.797816][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14172'.
[ 1089.937706][ T6748] loop8: detected capacity change from 0 to 32768
[ 1089.978728][ T6748] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[ 1090.009048][   T33] audit: type=1800 audit(4195855.976:589): pid=6748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.14179" name="file1" dev="loop8" ino=17058 res=0 errno=0
[ 1090.045121][ T6756] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14182'.
[ 1090.387248][ T6761] netlink: 60 bytes leftover after parsing attributes in process `syz.8.14179'.
[ 1090.519834][ T6762] (syz.8.14179,6762,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[ 1090.818019][ T4085] ocfs2: Unmounting device (7,8) on (node local)
[ 1091.488840][ T6797] netlink: 48 bytes leftover after parsing attributes in process `syz.0.14197'.
[ 1091.493551][ T6797] netlink: 48 bytes leftover after parsing attributes in process `syz.0.14197'.
[ 1091.711003][ T6808] hugetlbfs: syz.8.14202 (6808): Using mlock ulimits for SHM_HUGETLB is obsolete
[ 1092.133476][ T6820] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609)
[ 1092.151927][ T6820] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[ 1092.421596][   T33] audit: type=1326 audit(4195858.517:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.8.14212" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8078ec29 code=0x7ffc0000
[ 1092.454247][   T33] audit: type=1326 audit(4195858.517:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.8.14212" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8078ec29 code=0x7ffc0000
[ 1092.476700][   T33] audit: type=1326 audit(4195858.527:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.8.14212" exe="/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fba8078ec29 code=0x7ffc0000
[ 1092.502948][   T33] audit: type=1326 audit(4195858.527:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.8.14212" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8078ec29 code=0x7ffc0000
[ 1092.518751][   T33] audit: type=1326 audit(4195858.527:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.8.14212" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8078ec29 code=0x7ffc0000
[ 1092.530731][   T33] audit: type=1326 audit(4195858.527:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.8.14212" exe="/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fba8078ec29 code=0x7ffc0000
[ 1092.590894][ T6836] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14216'.
[ 1092.596831][ T6834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14215'.
[ 1092.625272][ T6836] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14216'.
[ 1092.628208][ T6836] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14216'.
[ 1092.709633][   T33] audit: type=1326 audit(4195858.527:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.8.14212" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8078ec29 code=0x7ffc0000
[ 1093.249224][   T33] audit: type=1326 audit(4195859.378:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz.3.14227" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e49b8ec29 code=0x0
[ 1094.717832][ T6933] netlink: 'syz.8.14260': attribute type 1 has an invalid length.
[ 1094.721493][ T6933] netlink: 224 bytes leftover after parsing attributes in process `syz.8.14260'.
[ 1094.731845][ T6935] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14261'.
[ 1095.167966][   T33] audit: type=1326 audit(4195861.393:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.8.14279" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba8078ec29 code=0x0
[ 1095.179693][ T6976] overlayfs: failed to clone upperpath
[ 1095.185922][ T6976] overlayfs: failed to clone upperpath
[ 1095.250101][ T6979] netlink: 'syz.3.14281': attribute type 2 has an invalid length.
[ 1095.253491][ T6979] netlink: 'syz.3.14281': attribute type 8 has an invalid length.
[ 1095.256571][ T6979] netlink: 1148 bytes leftover after parsing attributes in process `syz.3.14281'.
[ 1095.668959][ T6985] o2cb: This node has not been configured.
[ 1095.671963][ T6985] o2cb: Cluster check failed. Fix errors before retrying.
[ 1095.675189][ T6985] (syz.3.14283,6985,0):user_dlm_register:674 ERROR: status = -22
[ 1095.678553][ T6985] (syz.3.14283,6985,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1"
[ 1096.053167][ T6991] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14286'.
[ 1096.294083][ T7000] __nla_validate_parse: 2 callbacks suppressed
[ 1096.294096][ T7000] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14291'.
[ 1096.315739][ T7000] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14291'.
[ 1096.323743][ T7000] (unnamed net_device) (uninitialized): option ad_select: invalid value (3)
[ 1097.366618][ T7035] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.14306'.
[ 1098.065491][ T5983] IPVS: starting estimator thread 0...
[ 1098.173421][ T7053] IPVS: using max 37 ests per chain, 88800 per kthread
[ 1098.696891][ T7096] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14333'.
[ 1098.796536][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14337'.
[ 1100.570520][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[ 1100.575477][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[ 1100.651323][ T7157] @0: renamed from bond_slave_1 (while UP)
[ 1101.377474][ T7219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14389'.
[ 1101.431809][ T5983] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[ 1101.973849][ T5983] usb 9-1: Using ep0 maxpacket: 32
[ 1101.979027][ T5983] usb 9-1: config 0 has an invalid interface number: 152 but max is 0
[ 1101.981484][ T5983] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1101.985273][ T5983] usb 9-1: config 0 has no interface number 0
[ 1101.987300][ T5983] usb 9-1: config 0 interface 152 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[ 1101.990423][ T5983] usb 9-1: config 0 interface 152 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 11
[ 1101.994953][ T5983] usb 9-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice= 6.d2
[ 1101.997918][ T5983] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1102.001742][ T5983] usb 9-1: config 0 descriptor??
[ 1102.005999][ T5983] s2255 9-1:0.152: Could not find bulk-in endpoint
[ 1102.008193][ T5983] Sensoray 2255 driver load failed: 0xfffffff4
[ 1102.010348][ T5983] s2255 9-1:0.152: probe with driver s2255 failed with error -12
[ 1102.199526][ T5983] usb 9-1: USB disconnect, device number 13
[ 1102.596760][ T7235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14396'.
[ 1102.636741][ T7235] netlink: 'syz.3.14396': attribute type 1 has an invalid length.
[ 1103.145851][ T7256] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[ 1103.542656][T26473] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1103.568167][ T5983] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1103.573835][T26473] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1103.711876][ T7274] tmpfs: Bad value for 'mpol'
[ 1103.887175][ T7278] befs: (nullb0): No write support. Marking filesystem read-only
[ 1103.911571][ T7278] befs: (nullb0): invalid magic header
[ 1104.004870][ T5983] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1104.091441][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14420'.
[ 1104.095291][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14420'.
[ 1104.269806][ T5983] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1105.026980][ T7314] netlink: 'syz.3.14432': attribute type 30 has an invalid length.
[ 1105.483849][ T7352] netlink: 642 bytes leftover after parsing attributes in process `syz.8.14449'.
[ 1105.860980][ T5983] usb 9-1: new full-speed USB device number 14 using dummy_hcd
[ 1106.032254][ T5983] usb 9-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1106.037215][ T5983] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1106.054027][ T5983] usb 9-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00
[ 1106.057633][ T5983] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1106.067013][ T5983] usb 9-1: config 0 descriptor??
[ 1106.233936][ T7376] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[ 1106.237890][ T7376] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[ 1106.304504][ T7380] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14462'.
[ 1106.343026][ T7382] tipc: New replicast peer: 0.0.0.0
[ 1106.345331][ T7382] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1106.350481][ T7382] tipc: New replicast peer: 255.255.255.255
[ 1106.463613][ T5983] elecom 0003:056E:00FD.0010: unknown main item tag 0x0
[ 1106.465826][ T5983] elecom 0003:056E:00FD.0010: unknown main item tag 0x0
[ 1106.468067][ T5983] elecom 0003:056E:00FD.0010: unknown main item tag 0x0
[ 1106.495902][ T5983] elecom 0003:056E:00FD.0010: hidraw0: USB HID v1.01 Device [HID 056e:00fd] on usb-dummy_hcd.8-1/input0
[ 1106.668610][ T5983] usb 9-1: USB disconnect, device number 14
[ 1107.536743][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1107.598694][ T5983] tipc: Node number set to 4278255617
[ 1107.800504][ T7416] openvswitch: netlink: Actions may not be safe on all matching packets
[ 1108.044355][ T7426] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.14482'.
[ 1108.434444][ T7442] netlink: 'syz.3.14490': attribute type 10 has an invalid length.
[ 1108.437253][ T7442] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14490'.
[ 1108.440621][ T7442] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[ 1108.577731][ T7447] tmpfs: Bad value for 'mpol'
[ 1108.970214][ T7471] cgroup: Unknown subsys name 'cpuset'
[ 1109.927226][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1109.936566][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1109.941733][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1109.950922][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1109.966374][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1110.076398][ T7497] hsr0 speed is unknown, defaulting to 1000
[ 1110.332085][ T7497] chnl_net:caif_netlink_parms(): no params data found
[ 1110.738622][ T7497] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1110.741680][ T7497] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1110.744791][ T7497] bridge_slave_0: entered allmulticast mode
[ 1110.750588][ T7497] bridge_slave_0: entered promiscuous mode
[ 1110.755469][ T7497] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1110.758633][ T7497] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1110.761724][ T7497] bridge_slave_1: entered allmulticast mode
[ 1110.765620][ T7497] bridge_slave_1: entered promiscuous mode
[ 1110.808182][ T7497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1110.821247][ T7497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1110.859464][ T7497] team0: Port device team_slave_0 added
[ 1110.866511][ T7497] team0: Port device team_slave_1 added
[ 1110.896681][ T7497] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1110.901095][ T7497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1110.913060][ T7497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1110.921391][ T7497] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1110.923964][ T7497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1110.935218][ T7497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1110.980057][ T7497] hsr_slave_0: entered promiscuous mode
[ 1110.982909][ T7497] hsr_slave_1: entered promiscuous mode
[ 1110.986326][ T7497] debugfs: 'hsr0' already exists in 'hsr'
[ 1110.989351][ T7497] Cannot create hsr debugfs directory
[ 1111.236097][ T7543] netlink: 'syz.3.14532': attribute type 21 has an invalid length.
[ 1111.245612][ T7543] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14532'.
[ 1111.345763][ T7497] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1111.361668][ T7497] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1111.371679][ T7497] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1111.384881][ T7497] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1111.538713][ T7497] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1111.564805][ T7497] 8021q: adding VLAN 0 to HW filter on device team0
[ 1111.583128][T20512] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1111.586264][T20512] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1111.603456][T20512] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1111.606452][T20512] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1111.856355][ T7497] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1111.958407][ T5945] Bluetooth: hci1: command tx timeout
[ 1112.136932][ T7497] veth0_vlan: entered promiscuous mode
[ 1112.161179][ T7497] veth1_vlan: entered promiscuous mode
[ 1112.192331][ T7497] veth0_macvtap: entered promiscuous mode
[ 1112.199506][ T7497] veth1_macvtap: entered promiscuous mode
[ 1112.219800][ T7497] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1112.230205][ T7497] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1112.242306][T26473] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1112.254339][T26473] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1112.258117][ T5980] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1112.296420][ T5980] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1112.455611][T20519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1112.458966][T20519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1112.522322][T20537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1112.529869][T20537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1112.618412][ T7608] netlink: 288 bytes leftover after parsing attributes in process `syz.3.14555'.
[ 1112.816950][ T7623] loop9: detected capacity change from 0 to 2048
[ 1112.833380][ T7623] NILFS (loop9): invalid segment: Inconsistency found
[ 1112.838353][ T7623] NILFS (loop9): trying rollback from an earlier position
[ 1112.858581][ T7623] NILFS (loop9): recovery complete
[ 1112.862964][ T7626] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1113.180709][ T7638] loop9: detected capacity change from 0 to 512
[ 1113.184887][ T7638] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 1113.221414][ T7638] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[ 1113.242840][ T7638] EXT4-fs (loop9): 1 truncate cleaned up
[ 1113.247005][ T7638] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1113.308461][ T7497] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1113.611912][ T7658] netlink: 'syz.0.14575': attribute type 9 has an invalid length.
[ 1113.618626][ T7658] netlink: 211988 bytes leftover after parsing attributes in process `syz.0.14575'.
[ 1113.938189][ T5945] Bluetooth: hci1: command tx timeout
[ 1115.385843][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1115.712223][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14581'.
[ 1116.658716][ T7700] loop9: detected capacity change from 0 to 2048
[ 1116.697261][ T7700] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1116.707795][ T7700] EXT4-fs error (device loop9): ext4_find_extent:939: inode #2: comm syz.9.14590: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[ 1116.732734][ T7700] EXT4-fs (loop9): Remounting filesystem read-only
[ 1116.760704][ T7497] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1116.781870][ T7706] netlink: 'syz.0.14593': attribute type 1 has an invalid length.
[ 1117.672556][ T5945] Bluetooth: hci1: command tx timeout
[ 1118.918238][ T7813] loop9: detected capacity change from 0 to 512
[ 1118.932833][ T7813] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 1118.939302][ T7813] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 1118.947781][ T7813] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.14639: bad orphan inode 131083
[ 1118.952979][ T7813] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1119.004063][ T7497] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1119.273384][   T10] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[ 1119.429004][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 1119.432905][   T10] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1119.439724][   T10] usb 10-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00
[ 1119.443289][   T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1119.448852][   T10] usb 10-1: config 0 descriptor??
[ 1119.451569][ T7822] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1119.649293][ T7822] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14642'.
[ 1119.877535][ T7847] /dev/nullb0: Can't lookup blockdev
[ 1120.190373][   T10] usbhid 10-1:0.0: can't add hid device: -71
[ 1120.205340][   T10] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[ 1120.219242][   T10] usb 10-1: USB disconnect, device number 2
[ 1120.325915][ T7866] 9pnet_fd: p9_fd_create_unix (7866): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[ 1120.614596][ T7886] netlink: 'syz.3.14673': attribute type 46 has an invalid length.
[ 1120.660089][ T7886] netlink: 'syz.3.14673': attribute type 19 has an invalid length.
[ 1120.772858][ T7889] netlink: 'syz.9.14675': attribute type 1 has an invalid length.
[ 1120.775831][ T7889] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1121.024955][ T7905] loop9: detected capacity change from 0 to 1024
[ 1121.028550][ T7905] EXT4-fs: Ignoring removed nobh option
[ 1121.030846][ T7905] EXT4-fs: Ignoring removed bh option
[ 1121.050481][ T7905] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1121.059173][   T33] audit: type=1800 audit(4195888.573:599): pid=7905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.14682" name="file1" dev="loop9" ino=15 res=0 errno=0
[ 1121.088413][ T7497] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1121.231749][ T7920] loop9: detected capacity change from 0 to 2048
[ 1121.239995][ T7920] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1122.178226][ T7944] netlink: 'syz.3.14698': attribute type 3 has an invalid length.
[ 1122.507345][ T7947] loop9: detected capacity change from 0 to 32768
[ 1122.556554][   T33] audit: type=1800 audit(4195890.147:600): pid=7947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.14699" name="file1" dev="loop9" ino=4 res=0 errno=0
[ 1122.627771][ T7960] netlink: ct family unspecified
[ 1122.630121][ T7960] openvswitch: netlink: Actions may not be safe on all matching packets
[ 1123.327595][ T7964] loop9: detected capacity change from 0 to 40427
[ 1123.335093][ T7964] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[ 1123.338311][ T7964] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[ 1123.344617][ T7964] F2FS-fs (loop9): invalid crc value
[ 1123.412938][ T7964] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1123.420748][ T7964] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[ 1123.423959][ T7964] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[ 1124.149582][   T10] page_pool_release_retry() stalled pool shutdown: id 88, 3329 inflight 362 sec
[ 1124.362408][ T7993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14717'.
[ 1124.754767][ T8007] loop9: detected capacity change from 0 to 512
[ 1124.782659][ T8007] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1124.842858][ T7497] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1125.297741][ T8047] netlink: 108 bytes leftover after parsing attributes in process `syz.3.14739'.
[ 1125.369008][T28868] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[ 1125.514816][T28868] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1125.518739][T28868] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1125.523928][T28868] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1125.527715][T28868] usb 10-1: config 1 has no interface number 1
[ 1125.530244][T28868] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1125.544198][T28868] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1125.548880][T28868] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1125.552657][T28868] usb 10-1: Product: syz
[ 1125.554350][T28868] usb 10-1: Manufacturer: syz
[ 1125.556605][T28868] usb 10-1: SerialNumber: syz
[ 1125.772630][T28868] usb 10-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[ 1125.775547][T28868] usb 10-1: MIDIStreaming interface descriptor not found
[ 1125.819699][T28868] usb 10-1: USB disconnect, device number 3
[ 1126.746205][ T8116] input: syz1 as /devices/virtual/input/input21
[ 1129.015335][ T8164] hfs: can't find a HFS filesystem on dev nullb0
[ 1129.105688][ T8171] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14795'.
[ 1129.280428][ T8181] overlayfs: failed to clone upperpath
[ 1129.466368][ T8179] loop9: detected capacity change from 0 to 32768
[ 1129.473867][ T8179] non-latin1 character 0xffff found in JFS file name
[ 1129.479509][ T8179] mount with iocharset=utf8 to access
[ 1129.581713][   T47] delete_channel: no stack
[ 1129.885283][ T8210] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[ 1129.941592][   T10] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[ 1130.105820][   T10] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1130.115291][   T10] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1130.118974][   T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1130.126099][   T10] usb 10-1: config 0 descriptor??
[ 1130.527801][   T10] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[ 1130.699549][ T8244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14824'.
[ 1130.777063][   T47] usb 10-1: USB disconnect, device number 4
[ 1131.236645][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 1131.314687][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14839'.
[ 1131.350080][ T8276] loop9: detected capacity change from 0 to 2048
[ 1131.365560][ T8277] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1131.725303][ T8290] netlink: 24 bytes leftover after parsing attributes in process `syz.9.14843'.
[ 1132.476402][ T8318] netlink: 104 bytes leftover after parsing attributes in process `syz.9.14857'.
[ 1134.149541][ T8368] openvswitch: netlink: Message has 8 unknown bytes.
[ 1134.153714][ T8366] overlayfs: failed to clone upperpath
[ 1134.158218][ T8368] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1134.193493][ T8370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14880'.
[ 1134.296629][ T8383] overlayfs: cannot append lower layer
[ 1134.349744][ T8386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14888'.
[ 1134.693376][T28868] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[ 1134.837784][T28868] usb 10-1: Using ep0 maxpacket: 8
[ 1134.842123][T28868] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1134.845471][T28868] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[ 1134.851369][T28868] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[ 1134.855456][T28868] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[ 1134.860327][T28868] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1134.864025][T28868] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1134.872283][T28868] usb 10-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[ 1134.877044][T28868] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1134.880398][T28868] usb 10-1: Product: syz
[ 1134.882546][T28868] usb 10-1: Manufacturer: syz
[ 1134.884322][T28868] usb 10-1: SerialNumber: syz
[ 1134.888879][T28868] usb 10-1: config 0 descriptor??
[ 1134.891686][ T8374] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1134.904796][T28868] ati_remote 10-1:0.0: ati_remote_probe: Unexpected endpoint_out
[ 1135.098407][T28868] usb 10-1: USB disconnect, device number 5
[ 1135.403028][ T8418] (unnamed net_device) (uninitialized): down delay (2) is not a multiple of miimon (100), value rounded to 0 ms
[ 1135.408105][ T8418] (unnamed net_device) (uninitialized): peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms
[ 1135.433453][ T8418] 8021q: adding VLAN 0 to HW filter on device bond10
[ 1135.517914][ T8429] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1135.520779][ T8429] IPv6: NLM_F_CREATE should be set when creating new route
[ 1135.523883][ T8429] IPv6: NLM_F_CREATE should be set when creating new route
[ 1135.526765][ T8429] IPv6: NLM_F_CREATE should be set when creating new route
[ 1135.531309][ T8429] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1135.649124][ T8441] netlink: 'syz.0.14911': attribute type 27 has an invalid length.
[ 1135.735898][ T8441] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1135.841959][ T8441] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1135.875742][ T8441] veth0_vlan: left allmulticast mode
[ 1135.943367][ T8441] bond0: left allmulticast mode
[ 1135.945006][ T8441] bond0: left promiscuous mode
[ 1135.952035][ T8441] ip6erspan0: left promiscuous mode
[ 1135.956745][ T8441] bond5: left promiscuous mode
[ 1135.958407][ T8441] wireguard0: left promiscuous mode
[ 1135.966915][ T8441] bridge2: left promiscuous mode
[ 1135.969049][ T8441] bridge2: left allmulticast mode
[ 1136.080596][ T8441] ipip0: left promiscuous mode
[ 1136.173522][ T8446] 8021q: adding VLAN 0 to HW filter on device 
[ 1136.179155][ T8446] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1136.428325][ T4727] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1136.436500][ T4727] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[ 1136.441024][ T4727] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[ 1136.444601][ T4727] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1136.450178][ T4727] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[ 1136.456931][ T4727] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[ 1136.470050][ T4727] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1136.475372][ T4727] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[ 1136.483992][ T4727] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[ 1136.493419][ T4727] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1136.496429][ T4727] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[ 1136.499175][ T4727] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[ 1136.559301][ T8469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14921'.
[ 1136.626906][ T8474] loop9: detected capacity change from 0 to 128
[ 1136.634483][ T8474] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1136.635716][ T8475] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1136.647324][ T8475] overlayfs: failed to set xattr on upper
[ 1136.649587][ T8475] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1136.652254][ T8475] overlayfs: ...falling back to uuid=null.
[ 1136.663345][ T8474] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1136.715280][  T504] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1138.647587][ T8450] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[ 1138.797456][ T8450] usb 10-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1138.804863][ T8450] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1138.829562][ T8450] usb 10-1: config 0 descriptor??
[ 1138.845496][ T8450] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 1139.224760][ T8450] gspca_stv06xx: I2C: Read error writing address: -71
[ 1139.233821][ T8450] usb 10-1: USB disconnect, device number 6
[ 1140.299433][ T8573] macvtap1: entered promiscuous mode
[ 1140.301761][ T8573] vlan0: entered promiscuous mode
[ 1140.304234][ T8573] macvtap1: entered allmulticast mode
[ 1140.309383][ T8573] vlan0: entered allmulticast mode
[ 1140.311684][ T8573] veth0_vlan: entered allmulticast mode
[ 1140.320340][ T8573] vlan0: left allmulticast mode
[ 1140.323471][ T8573] veth0_vlan: left allmulticast mode
[ 1140.326588][ T8573] vlan0: left promiscuous mode
[ 1140.376418][ T8577] ref_ctr_offset mismatch. inode: 0x210 offset: 0x0 ref_ctr_offset(old): 0x200000000100 ref_ctr_offset(new): 0x0
[ 1141.697609][ T8610] vlan2: entered allmulticast mode
[ 1141.833791][ T8623] hsr0 speed is unknown, defaulting to 1000
[ 1142.676999][T21766] page_pool_release_retry() stalled pool shutdown: id 80, 3329 inflight 483 sec
[ 1144.128885][T21766] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[ 1144.277302][T21766] usb 10-1: Using ep0 maxpacket: 16
[ 1144.281278][T21766] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1144.285793][T21766] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1144.293518][T21766] usb 10-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[ 1144.298200][T21766] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1144.304134][T21766] usb 10-1: config 0 descriptor??
[ 1144.706948][T21766] apple 0003:05AC:024B.0012: unknown global tag 0xe
[ 1144.709629][T21766] apple 0003:05AC:024B.0012: item 0 1 1 14 parsing failed
[ 1144.717659][T21766] apple 0003:05AC:024B.0012: parse failed
[ 1144.720102][T21766] apple 0003:05AC:024B.0012: probe with driver apple failed with error -22
[ 1144.893599][ T5983] usb 10-1: USB disconnect, device number 7
[ 1145.776131][T21766] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[ 1146.134776][T21766] usb 10-1: config 0 has an invalid interface number: 57 but max is 0
[ 1146.137653][T21766] usb 10-1: config 0 has no interface number 0
[ 1146.144293][T21766] usb 10-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=c6.63
[ 1146.150229][T21766] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1146.155553][T21766] usb 10-1: config 0 descriptor??
[ 1146.166036][T21766] gspca_main: mr97310a-2.14.0 probing 093a:010f
[ 1146.168415][T21766] gspca_mr97310a: reg write [21] error -22
[ 1146.170929][T21766] mr97310a 10-1:0.57: probe with driver mr97310a failed with error -22
[ 1146.380723][T21766] usb 10-1: USB disconnect, device number 8
[ 1146.396770][ T8734] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1146.542594][ T8741] bond0: Error: Cannot enslave bond to itself.
[ 1146.928622][ T8773] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15062'.
[ 1147.031466][ T8779] vlan0: entered promiscuous mode
[ 1147.033648][ T8779] vlan0: left allmulticast mode
[ 1147.035528][ T8779] veth0_vlan: left allmulticast mode
[ 1147.150953][ T8788] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15069'.
[ 1147.157865][ T8785] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1147.160686][ T8785] overlayfs: failed to set xattr on upper
[ 1147.163366][ T8785] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1147.173391][ T8785] overlayfs: ...falling back to index=off.
[ 1147.175733][ T8785] overlayfs: ...falling back to uuid=null.
[ 1147.183279][ T8785] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[ 1147.203994][ T8789] loop9: detected capacity change from 0 to 4096
[ 1147.284296][   T33] audit: type=1800 audit(4196172.103:601): pid=8789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.15068" name="file1" dev="loop9" ino=33 res=0 errno=0
[ 1148.573370][ T8813] loop9: detected capacity change from 0 to 32768
[ 1148.757107][ T8813] JBD2: Ignoring recovery information on journal
[ 1148.761996][ T8813] jbd2_journal_bmap: journal block not found at offset 32 on loop9-75
[ 1148.773016][ T8813] JBD2: bad block at offset 32
[ 1148.783867][ T8813] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[ 1148.818412][ T7497] ocfs2: Unmounting device (7,9) on (node local)
[ 1149.265919][ T8860] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15101'.
[ 1150.265070][ T8888] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.15113'.
[ 1150.382515][ T8902] @0: renamed from bond_slave_1 (while UP)
[ 1151.384877][   T13] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2
[ 1151.388694][   T13] ref_tracker: netdev@ffff88804409a610 has 1/1 users at
[ 1151.388694][   T13]      batadv_hard_if_event+0xf0f/0x1730
[ 1151.388694][   T13]      notifier_call_chain+0x1b6/0x3e0
[ 1151.388694][   T13]      register_netdevice+0x1608/0x1ae0
[ 1151.388694][   T13]      veth_newlink+0x5cc/0xa50
[ 1151.388694][   T13]      rtnl_newlink_create+0x310/0xb00
[ 1151.388694][   T13]      rtnl_newlink+0x16d6/0x1c70
[ 1151.388694][   T13]      rtnetlink_rcv_msg+0x7cf/0xb70
[ 1151.388694][   T13]      netlink_rcv_skb+0x208/0x470
[ 1151.388694][   T13]      netlink_unicast+0x82f/0x9e0
[ 1151.388694][   T13]      netlink_sendmsg+0x805/0xb30
[ 1151.388694][   T13]      __sock_sendmsg+0x21c/0x270
[ 1151.388694][   T13]      __sys_sendto+0x3bd/0x520
[ 1151.388694][   T13]      __x64_sys_sendto+0xde/0x100
[ 1151.388694][   T13]      do_syscall_64+0xfa/0x3b0
[ 1151.388694][   T13]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1151.388694][   T13] 
[ 1158.674794][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[ 1158.677412][ T1364] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
06:00:10  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff820b8a92 RBX=0000000000000038 RCX=ffff8880412d8000 RDX=ffffc9000ac59000
RSI=00000000000000a2 RDI=ffffffff8be2bce0 RBP=00000000000000a2 RSP=ffffc90003bef9e0
R8 =ffffc90003befad7 R9 =0000000000000000 R10=ffffc90003befaa0 R11=fffff5200077df5b
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff8be2bce0 R15=0000200000358e80
RIP=ffffffff81bfada1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f5c323cb6c0 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5c323cafc8 CR3=0000000023c02000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f5c317a7498 00007f5c317a7470 XMM03=00007f5c317a74a8 00007f5c317a74a0
XMM04=00007f5c3230d100 00007f5c317a7460 XMM05=00007f5c317a7478 00007f5c317a74c0
XMM06=00007f5c317a74b8 00007f5c317a74b0 XMM07=00007f5c317a74a8 00007f5c317a74a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f5c31612fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000061 RBX=0000000000000061 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000106eb0
R8 =ffff888020830237 R9 =1ffff11004106046 R10=dffffc0000000000 R11=ffffffff854fada0
R12=dffffc0000000000 R13=ffffffff99b0292b R14=ffffffff99df7460 R15=0000000000000000
RIP=ffffffff854fae1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30613ff8 CR3=0000000023654000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8133c59e ffffffff8133c59e
XMM02=00000008000003b7 ffffffff8133c59e XMM03=0000004300000085 00000102000004b7
XMM04=9500000043000000 8500000102000004 XMM05=b700000008000003 b7fffffff8000002
XMM06=07000000000000a2 bf00000000fff88a XMM07=7b00000000000008 b700000000000000
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f5c31612fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
