last executing test programs:

2m33.017511523s ago: executing program 0 (id=152):
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0xa, 0xffffffffffffffff, 0x4}, 0x38)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340))
ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})

2m32.948975581s ago: executing program 0 (id=154):
prctl$PR_SCHED_CORE(0x4d, 0x0, 0x0, 0x0, 0x0)

2m32.899447366s ago: executing program 0 (id=158):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0)
read$dsp(r0, &(0x7f00000001c0)=""/4096, 0x1000)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0x15)

2m32.267083016s ago: executing program 0 (id=167):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000240)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1df}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)

2m32.168844959s ago: executing program 0 (id=168):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x46, &(0x7f0000000ac0)={@multicast, @random="d3a702259f3a", @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x10, 0x11, 0xff, @private0, @local, {[], {0x4e1d, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x6}}}}}}}}, 0x0)
recvmmsg(r0, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2b, 0x0)

2m31.890262879s ago: executing program 0 (id=169):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x34, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x9}]}, 0x34}}, 0x4044)

2m31.831076272s ago: executing program 32 (id=169):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x34, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x9}]}, 0x34}}, 0x4044)

1.62939858s ago: executing program 3 (id=1977):
r0 = socket(0x2, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000740)={'veth1_vlan\x00', &(0x7f0000000700)=@ethtool_wolinfo={0x5, 0x5, 0x7, "c291a86d31dd"}})

1.500629741s ago: executing program 3 (id=1979):
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0)

1.297536574s ago: executing program 2 (id=1980):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x12c}, 0x1, 0x0, 0x0, 0x845}, 0x8000)

1.297400711s ago: executing program 3 (id=1981):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)

1.160157835s ago: executing program 2 (id=1982):
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000001380)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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")

1.158440615s ago: executing program 3 (id=1983):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200200, 0x0, 0x0, 0xffffffff})
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', 0x0})

890.177534ms ago: executing program 3 (id=1984):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5e5c, &(0x7f0000005d80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x101002, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)
truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc)

890.027531ms ago: executing program 2 (id=1985):
r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

889.826163ms ago: executing program 2 (id=1986):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r1, &(0x7f0000000400)=[{0x0}, {&(0x7f00000002c0)="b0", 0x1}], 0x2)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
syz_usb_disconnect(r0)

284.082077ms ago: executing program 1 (id=1992):
r0 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@dgm={0x25, 0xa, 0x4}, 0x80, 0x0}, 0x4008000)

283.890057ms ago: executing program 1 (id=1993):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000005000000000000000100000d0a0003000000000003"], &(0x7f0000000f40)=""/4086, 0x31, 0xff6, 0x5}, 0x28)

188.517788ms ago: executing program 1 (id=1994):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x200000, 0x81, 0xffffffff, 0xfffffffe})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

188.267957ms ago: executing program 1 (id=1995):
io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002700090025bd7000ffd3008001000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000)

113.684987ms ago: executing program 1 (id=1996):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "9f2b"}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x72, 0x2, {0x800, 0x42b, 0x4, 0x10000}}]}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840)

113.242291ms ago: executing program 1 (id=1997):
syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x3010846, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'cp932'}}, {@uid}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@discard}, {@errors_continue}, {@noquota}, {}, {@errors_remount}, {@errors_continue}, {@nodiscard}, {@iocharset={'iocharset', 0x3d, 'macroman'}}]}, 0x1, 0x6313, &(0x7f0000002080)="$eJzs3c1vHGcdB/Df7JtfStuoh6pECLlteCmleS0hUKDtAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFEiCMn/oAeuHLjDyCSgwTqAXXQ2M/jjKe7XjuJd3Yzn4/kzPzmmfE+k++Od9cz4ycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPjhD358roiIK79KC05EfC76Eb2Ilapei4iVtRP1bV6IneZ4PiKGSxHV9jv/PBvxekR8/EzE9v0769Xi84fsx/f//I8//OSpH/39T8Mz//3Lrf4bk9a7ffu3//nr3YffXwAAAOiisizLIn3MPxkRg/TZHgB48uXX/zLJy9VzV2/OWX/UarVavYB1XTne3XoREZv1bar3DE7HA8CC2YxP2u4CLZJ/pw0i4qm2OwHMtaLtDnAstu/fWS9SvkX99WBttz1fC7Iv/81i7/6OSdNpmteYzOr5tRX9eG5Cf1Zm1Id5kvPvNfO/sts+Susdd/6zMin/0e6tT52T8+838294cvLvjc2/q3L+gyPl35c/AAAAAADMsfz7/xMtn/9devRdOZSDzv+uzagPAAAAAAAAAPC4HXX8v0Fj/L89xv8DAACAuVV9Vq/87pkHyyb9LbZq+eUi4unG+kDHpJtlVtvuBwAAAAAAAAAAAAB0yWD3Gt7LRcQwIp5eXS3Lsvqqa9ZH9ajbL7qu7z90Wds/5AEAYNfHzzTu5S8iliPicvpbf8PV1dWyXF5ZLVfLlaX8fna0tFyu1D7X5mm1bGl0iDfEg1FZfbPl2nZ10z4vT2tvfr/qsUZl/xAdm40WAweAiNh9Ndqe9Ir0P69Xi6ksn42W3+SwIA44/llQjn8Oo+3nKQAAAHD8yrIsi/TnvE+mc/69tjsFAMxEfv1vnhdQq9VqtVr95NV15Xh360VEbNa3qd4zGI4fABbMZnzSdhdokfw7bRARL7TdCWCuFW13gGOxff/OepHyLeqvB2l893wtyL78N4ud7fL246bTNK8xmdXzayv68dyE/jw/oz7Mk5x/r5n/ld32UVrv0fMv9/2asK1rjCblX+3niRb607acf7+Zf8NxH/+zshW9sfl3Vc5/cKT8+/IHAAAAAIA5ln//f2Kuzv+OHnZ3pjro/O/a2C2Ory8AAAAAAAAA8Lhs37+znu97zef/vzBmPfd/Pply/oX8Oynn32vk/9XGev3a/L23H+T/7/t31v9461+fz9PD5r+UZ4r0zCrSM6JIj1QM0vRR9u6ztob9UfVIw6LXH6Rrfsrhu3EtrsdGnN23bi/9fzxoP7evverpcKe97O+2n9/XPthrz9tf2Nc+TFcXlSu5/XSsx8/jeryz0161LU3Z/+Up7eWU9px/3/HfSdtpOnjw9WxVr6blRWNaufdR7zPHfX067nHeuvbF35w91j05nK3o7+1bXbV/L7XQn53/k6dG8cubGzdO375669aNc5Em+5aejzR5zPLxP0xfez//X95tzz/368frvY9GR85/XmzFYGL+L9fmq/19ZcZ9a0POf5S+cv7vpPbxx/8i5z/5+H+1hf4AAAAAAAAAAAAAAADAQcqy3LlF9K2IuJju/2nr3kwAYLby63+Z5OWzqvszfjy1esHrYs76M9P603K++qNWL2JdV473Zr2IiL/Vt6neM/x63DcDAObZpxHxz7Y7QWvk32H57/1V01NtdwaYqZsffPjTq9evb9y42XZPAAAAAAAAAICHlcf/XKuN/3yqLMu7jfX2jf/6dqw96vifgzyzN8DohIGq+0ffp4Ns9Ub9Xm248Rdj0vjfw725g8b/Hkx5vOGU9tGU9qUp7ctT2sfe6FGT83+xNt75qYg42Rh+vQvjvzbHvO+CnP9Ltedzlf9XGuvV8y9/v8j59/blf+bW+784c/ODD1+79v7V9zbe2/jZhXPnzl64ePHSpUtn3r12fePs7r8t9vh45fzz2NeuA+2WnH/OXP7dkvP/Uqrl3y05/y+nWv7dkvPP7/fk3y05//zZR/7dkvN/JdXy75ac/9dSLf9uyfm/murp+U/7jSaLJOf/9VQ7/rsl5/9aquXfLTn/06mWf7fk/M+k+pD5rxx3v5iNnH8+w+X475acf76yQf7dkvM/n2r5d0vO/0Kq5d8tOf/XUy3/bsn5fyPV8u+WnP/FVMu/W3L+30y1/Lsl538p1fLvlpz/t1It/27J+X871fLvlpz/G6mWf7fk/L+Tavl3S87/u6mWf7fk/L+Xavl3S87/zVTLv1se/P1/M2bMmMkzbf9kAgAAAAAAAAAAAACaZnE5cdv7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyfHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh7+5i5Drr+4GfffXaIYmBkL+Tv4GNY0JINtm1nfiFNsWE14a3EgiFvmC73rVZ6tjGa5dAI9k0UCJhVFTRNly0BYTa3FTkggtaAcoFaoXUCtoL2gsEQuUiqgIKSJVoBdlqznmeZ2dmZ2d2vePdM+d8PpL985w5M+eZM8+cmd+uv3MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGh2y+vmPjmUZVnjT/7X9ix7QePfWye358tevdkjBAAAANbrl/nfz12fFhxexY2a1vmnl337K4uLi4vZe0f+bOyzi4vpisksG9uSZfl10VM/fN9Q8zrBY9nE0HDT5eEemx/pcf1oj+vHelw/3uP6LT2un+hx/bIdsMzW4ucx+Z3tzv+5vdil2Q3ZWH7d7g63emxoy/Bw/FlObii/zeLYiWw+O5XNZTMt6xfrDuXrf+2WxrbenMVtDTdta2djhvz00eNxDENhH+9u2dbSfUY/fm02+bOfPnr8b84/e1On2nM3tNxfMc7bdzXG+fGwpBjrULYl7ZM4zuGmce7s8JyMtIxzKL9d49/t43xuleMcWRrmhmp/ziey4fzf38n302jzj/XSftoZlv381izLLi0Nu32dZdvKhrNtLUuGl56fiWJGNu6jMZVelI2uaZ7esop52qizu1vnaftrIj7/t4Tbja4whuan6ccfG2963n+xeCXzNGo86pVeK+1zsN+vlbLMwTgvvpM/6Mc7zsHd4fE/etvKc7Dj3OkwB9PjbpqDu3rNweHxkXzM6UkYym+zNAf3tKw/km9pKK/P3NZ9Dk6ff/js9MJHPnrX/MPHTs6dnDu9b8+emX379x88eHD6xPypuZni7yvc2+W3LRtOr4FdYd/F18Ar29ZtnqqLXxhfdvy90tfhRJfX4fa2dfv9Ohxtf3BDG/OCXD6ni9fGuxs7feLycLbCayx/fu5Y/+swPe6m1+Fo0+uw43tKh9fh6Cpeh411zt6xus8so01/Oo1h5feC9c3B7U1zsP3zSPsc7PfnkbLMwYkwL753x8rvBTvDeB+fWuvnkZFlczA93HDsaSxJn/cnDual07y8uXHFNePZhYW5c3c/cuz8+XN7slA2xIub5kr7fN3W9JiyZfN1eM3z9fD8yx6/ucPy7WFfTdzV+Gtixeeqsc49d3d/rvJ3t877s2Xp3iyUPtvo/dnp3byxP8ez7HPf/NiDX3/0c69bcX82+s2PT6//s3jqS5uOv2MrHH9j3/98sb10V4+NjI0Wr9+RtHfGWo7HrU/VaH7sGsq3/dz06o7HY+HPRh+Pb+hyPN7Rtm6/j8dj7Q8uHo+Hev20Y33an8+JME9OzXQ/HjfW2bF3rXNytOvx+NZQh8L+f1XoFFJf1DR3Vpq3aVujo2PhcY3GLbTO030t64+F3qyxrSf3hg+FaZSrm6e331qsP9J0u2ij5ulk27r9nqfpZ18rzdOhXj99uzLtz+dEmBc37Os+TxvrPH3P+o+dW+M/m46d473m4NjIeGPMY2kS5sf7bHFrnIN3Z8ezM9mpbDa/djyfT0P5tqbuXd2xcjz82ehj5Y4uc/D2tnX7PQfT+9hKc29odPmD74P253MizIsn7u0+BxvrvP5Afz+73l4sWfpRdNNn1/afr630M6+b23bT1ZorjZE0Hss3D3T/2WxjnVMH19pndt9Pd4Yl13TYT+2v35VeU7PZxuynHWGczx5ceT81xtNY57OHVjmfDmdZdvFD9+c/7w2/X7l44btfafm9S6ff6Vz80P0/ufbEP65l/AAMvueLsq14r2v6zdRqfv8PAAAADITY9w+Hmuj/AQAAoDJi3x//V3ii/wcAAIDKiH3/aKhJFfr/P+q9yo7XPzv//MUsJfMXg3h92g0PFOvFjOtMuDy5uKSx/P4vzf33P1xc3fCGsyz7xQN/2HH9HQ/EcRUmwzifekPr8mW+cteqtn30oYtpu8359c+H+4+PZ7XToFMEdybLsq9d/+l8O5Pvu5zXpx84mtcHLz3+WGOd5w4Vl+Ptn3lxsf5fhvDv4RPHWm7/TNgPPwp15i2d90e83Zcvv2rngfcsbS/ebmjXdfnDfuL9xf3G78n5zGPF+nE/rzT+r3/qyS831n/kFZ3Hf3G48/ifDPf7pVD/56XF+s3PQeNyvN0nwvjj9uLt7v7iNzqO/6lPFuuffWOx3tFQ4/ZvD5d3v/HZ+eb99cjQsZbHlb2pWC9uf+a7f5JfH+8v3n/7+CeOXG7ZH+3z4+l/K+5num39uDxuJ/r7tu037qd5fsbtP/nHR1v2c6/tP/XgMy9t3G/79u9sW+/sh+7It790f63f2PRXn/h0x+3F8Rz+u7Mtj+fwO8PrOGz/ifeH+Riu/9+nivtr/3aFo+9sPf7E9T+//WLL44ne/LNi+0+95mRet0xs3XbNC6697tLLG/suy76zpbi/Xts/+ddnWsb/hRuL/RGvjxn99u2vJG7/3IenTp9ZuDA/m/bqo9fn353z1mI8cbzXh2Nr++UjZ85/YO7c5MzkTJZNVvcr9K7YF0P9SVEudV97cdkR9I6HwvN58198bdtt//qpuPzf310sv/yW4n3rlWG9z4Tl28Pzt7btL/fELTfmr++hp8MIF5d/X/B67Nz9Xwd7fb9vLjz+9s8Fcb6ffckH8v3QuC5/34iv63WO//uzxf18NezXxfDNzLtuXNpe8/rxuxEuv6t4va97/4XDXHxe/zY832/7UXH/cVzx8X4/fI75xo7W412cH1+9ONx+//m3eFwKx5PsUnF9XCvu78vP3dhxePF7SLJLN+WX/zTdz01repgrWfjIwvSp+dMXHpk+P7dwfnrhIx898vCZC6fPH8m/y/PIB3vdfun4tC0/Ps3O7b8ny49WZ4pylW32+M8+dHz2wMxts3Mnjl04cf6hs3PnTh5fWDg+N7tw27ETJ+Y+3Ov287P37dl7aN+BvVMn52fvO3jo0L5DU/OnzzSGUQyqh/0zvz91+tyR/CYL991zaM+9994zM/Xwmdm5+w7MzExd6HX7/L1pqnHrP5g6N3fq2Pn5h+emFuY/OnffnkP79+/t+W2AD589sTA5fe7C6ekLC3PnpovHMnk+X9x47+t1e6pp4QfF59l2Q8UX8WXvuHN/+n7Whi99bMW7KlZp+wLRZ8N30XzrhWcPruZy7PvHQk2q0P8DAAAAudj3j4ea6P8BAACgMmLfvyXURP8PAAAAlRH7/olQ038JqEn/X7n8/46Lq9q+/L/8f/P+kv+vWf7/XWXL/xfHC/n//lhv/r4O+f9VrSj/L/8v/y//L/9PH5Qt/x/7/q1Z5vf/AAAAUFGx798WaqL/BwAAgMqIff81oSb6fwAAAKiM2Pe/INSkJv2//L/8v/y//L/8f+fty/8PJvn/7kqW/59oXyD/v/n5/6xe+f9L/Rz/JuT/tzZfkP+njMqW/499/7WhJjXp/wEAAKAOYt9/XaiJ/h8AAAAqI/b914ea6P8BAACgMmLfvz3UpCb9v/z/uvL/KXM1uPn/Ysvy//L/8v/y/1Uh/99dyfL/y8j/b37+3/n/Byr/30L+nzIqW/4/9v0vDDWpSf8PAAAAdRD7/heFmuj/AQAAoHxGr+xmse9/cajJsv7/CjcAAAAAbLrY99+QtQXBa/L7f/l/5/8v7fn/x+T/y5H/b743+f/O+f+RTP6/POT/u5P/76Ef+f9L8v/y//L/8v9EZcv/531/NpG9JNSkJv0/AAAA1EHs+28MNdH/AwAAQGXEvv//hZro/wEAAKAyYt+/I9SkJv2//H9l8v8/b37qKpH/d/7/kuT/nf8/cv7/wSD/3538fw/O/y//L/8v/09fLXTslDYv/x/7/ptCTWrS/wMAAEAdxL7/5lAT/T8AAABURuz7/3+oif4fAAAAKiP2/TtDTWrS/8v/lyn/P7E8/x+To3U8/7/8v/x/UOb8/4T8f+nI/3cn/9+D/L/8v/y//D99tfCD4vNsu83K/8e+/6WhJjXp/wEAAKAOYt//slAT/T8AAABURuz7Xx5qov8HAACAyoh9/2SoSU36/7Xk/4cuyf+v5Cqf/398Fef/byH/vyn5/1H5/0Kd8v+Z/H/pyP93J//fg/y//L/8v/w/fVW2/H/s+28JNalJ/w8AAAB1EPv+XaEm+n8AAACojNj33xpqov8HAACAyoh9/+5Qk5r0/87/PxD5/0z+fyDy/87/H8j/dyb/vzHk/7uT/+9B/l/+X/5f/p++Klv+P/b9rwg1qUn/DwAAAHUQ+/7bQk30/wAAAFAZse9/ZaiJ/h8AAAAqI/b9t4ea1KT/l/+X/5f/l/+X/++8/Q3P/1+S/+8H+f/u5P97kP+X/5f/l/+nr8qW/499/6tCTWrS/wMAAEAdxL7/jlAT/T8AAABURuz77ww10f8DAABAZcS+fyrUpCb9v/y//H818///If/fZfvy/yXN/zv/f1/I/3cn/9+D/L/8fz/y/2Nhgfy//D+bnv+Pn9fi5dj33xVqUpP+HwAAAOog9v13h5ro/wEAAKAyYt8/HWqi/wcAAIDKiH3/TKhJTfp/+X/5/2rm/53/v9v215X/f/nS/cr/F+T/y0X+vzv5/x76mf/fIv9f2/z/us7/Pyb/T6Vsdv6//XLs+/eEmtSk/wcAAIA6iH3/3lAT/T8AAABURuz794Wa6P8BAACgMmLff0+oSU36f/l/+X/5f/l/5//vvH35/8Ek/99d//P/8SHK/zv/v/x/f/L/zv9PtZQt/x/7/ntDTWrS/wMAAEAdxL5/f6iJ/h8AAAAqI/b9B0JN9P8AAABQGbHvPxhqUpP+X/5f/l/+X/5f/r/z9uX/B5P8f3fO/9+D/L/8/wDn/xtzS/6fsilb/j/2/YdCTWrS/wMAAEAdxL7/1aEm+n8AAACojNj3/0qoif4fAAAASmj8im4V+/5fDTWpSf8v/y//L/8v/7/J+f+xXvn/cfl/+f81kP/vTv6/B/l/+f8Bzv+vcP7/a8PV8v9sirLl/2Pff1+oSU36fwAAAKiD2Pf/WqiJ/h8AAAAqI/b9rwk10f8DAABAZcS+/3CoSU36f/n/Dcr/x4Wlzf/HJLP8f75A/t/5/+X/B5b8f3fy/z3I/8v/Vy//3+/z/7e/TSfy/3RStvx/7PtfG2pSk/4fAAAA6iD2/feHmuj/AQAAoDJi3/+6UBP9PwAAAFRG7PtfH2pSk/5f/t/5/zf//P9jLWOX/1+6nfx/Qf5f/n8t5P+7k//vQf5f/l/+3/n/6auy5f9j3/+GUJOa9P8AAABQB7Hvf2Ooif4fAAAAKiP2/W8KNdH/AwAAQGXEvv/NoSY16f/l/+X/Nz//7/z/8v8F+X/5/36Q/+9O/r8H+X/5f/l/+X/6qmz5/9j3/3qoSU36fwAAAKiD2Pc/EGqi/wcAAIDKiH3/W0JN9P8AAABQGbHvf2uoSU36f/l/+X/5f/l/+f/O25f/H0zy/90NWP7/l9eF5fL/Bfn/co9/rfn/0bbLVyX//8OV8v+LW9pvL//P1VC2/H/s+98WalKT/h8AAADqIPb9bw810f8DAABAZcS+/x2hJvp/AAAAqIzY9/9GqElN+n/5/8Y4ltLL8v/y//kC+X/5f/n/gSX/313K/z/X6Z2rSTny/87/30b+v9zjd/5/+X+WK1v+P/b97ww1qUn/DwAAAHUQ+/4HQ030/wAAAFAZse9/V6iJ/h8AAAAqI/b97w41qUn/L//v/P/y//L/8v+dty//P5jk/7sbsPP/y/+3kf8v9/ivSv7/P+X/GWxly//Hvv+hUJOa9P8AAABQB7Hvf0+oif4fAAAAKiP2/b8ZaqL/BwAAgMqIff97Q01q0v/L/w9K/n9S/n+N+f/xsEz+X/5f/r9e5P+7k//vQf5f/r9s+f8NOP9/7IDk/7kaypb/j33/+0JNVt//T6x6TQAAAOBqav91UhL7/t8KNanJ7/8BAACgDmLf/9uhJvp/AAAAqIzY9/9OqElN+n/5/0HJ/zv/f+b8//L/bY9H/l/+v5ONy//HI8+a8v9bem1f/l/+X/5/cMc/qPn/SP6fq6Fs+f/Y9/9uqElN+n8AAACog9j3vz/URP8PAAAAA6HT/8luF/v+I6Em+n8AAACojNj3Hw01qUn/L/8v/y//X9L8/5/v+ufvffvtR/fI/8v/y/+vyYae/7/x4nf+f/l/+f9E/l/+X/6fdmXL/8e+/1ioyVLj91Yn+AcAAIDBFvv+3ws1qcnv/wEAAKAOYt9/PNRE/w8AAACVEfv+2VCTmvT/8v+bmP8fzbJM/l/+v4Ln/4/7Y5Dy/1NbBij/Hw+68v8dbWj+/z1LOXH5/7Xm/8c7Lm3P/w/J/7eQ/1/z+L+VZdmGjf/iv8j/y//Trmz5/9j3z4Wa1KT/BwAAgDoIff/wiaIuXaH/BwAAgMqIff/JUBP9PwAAAFRG7Ps/EGpSk/5f/t/5/+X/5f+d/7/z9kub/3f+/67k/7srT/6/M+f/l/8f5PE7/7/8P8uVLf8f+/75UJOa9P8AAABQB7Hv/2CoWbZ1k0cEAAAA/8fenURZWpd3HL8FRbr7cHJOdllkkeyzyiYbFmGVRXJOtlmwYZNzkpCQgcyD3TiPOM8DelTEAQdQRFQUZ8EJRRxRcQZxwglRaQ9dz/PU9NZ7q7pv1X3v///5LHyaguJeONjNr4tvvyxa7v7L4hZf/wcAAIAmHJvNavf/Q9zSyf7X/+v/m+z/j+n/x15/Kv3/X1248dej/9f/L5L+f5z+fw79v/5f/6//Z6Gm1v/n7v/HuKWT/Q8AAAA9yN1/edxi/wMAAEAzcvf/U9xi/wMAAEAzcvf/c9zSyf7X/+v/m+z///z+v3v4z/T/e73+VPp/z//f/Luq/18c/f84/f8c+n/9v/5f/89CTa3/z93/L3FLJ/sfAAAAepC7/1/jFvsfAAAAmpG7/4q4xf4HAACAZuTu/7e4pZP9v6P/X5v12f9nxqv/b6n/9/z/PV9f/6//b9nR9v9XPvI9n/5f/6//D/p//b/+n52m1v/n7v/3uKWT/Q8AAAA9yN3/H3GL/Q8AAADNyN3/n3GL/Q8AAADNyN3/X3FLJ/vf8/89/1//r//X/yf9fws8/39cT/3/FXdeePkDN/7BTQd5ff2//l//r/9nsabW/+fu/++4pZP9DwAAAD3I3f8/cYv9DwAAAM3I3f+/cYv9DwAAACvoxOBHc/f/X9zSyf7X/+v/9f/R/x/X//fe/3v+fxv0/+OW3f8P/Xi5lef/t9//X7aQd7q89z9G/6//Z7ep9f+5+/8/bulk/wMAAEAPcvc/Km6x/wEAAGC65v2HZTvk7j8Zt9j/AAAA0Izc/afilk72v/7/8Pv/3+j/V6P/9/x//b/+vwn6/3HL7v/n0f+33/8fpmW/f/2//p/dptb/5+6/Mm7pZP8DAABAD3L3Pzpusf8BAACgGbn7HxO32P8AAADQjNz9j41bOtn/+n/P/9f/6/+Pvv/f+M5W/7/5d1X/vzj6/3H6/zn0/+faz1+g/9f/6//Z6oD9/0Mj320vpP/P3f+4uKWT/Q8AAAA9yN3/+LjF/gcAAIBm5O5/Qtxi/wMAAEAzcvc/MW7pZP/r//X/+n/9/1n3/7v/0TvD8/+H6f+Phv5/3GT6/7X1wQ/r/1e+//f8f/2//p9tpvb8/9z9T4pbOtn/AAAA0IPc/U+OW0b2/4F/Mh8AAABYqtz9T4lbfP0fAAAAVl5WZ7n7nxq3dLL/9f/6f/2//v/on/+/+v3/TVven/5/WvT/4ybT/+9B/6//X+X3r//X/7Pb1Pr/3P1Pi1s62f8AAADQg9z9V8Ut9j8AAAA0I3f/0+MW+x8AAACakbv/GXFLJ/t/uP/f/P2T7v93RsIz/X/S/7fd/+efUf8/2v9f7Pn/fdL/j9P/z6H/1//r//fq/0/M+3z9P0Om1v/n7n9m3NLJ/gcAAIAe5O5/Vtxi/wMAAEAzcvc/O26x/wEAAKAZufufE7d0sv89/1//r/9fvf7f8/83LPP5/7Mj7//X9f/7tNz+f+3h/BFU/39271//r/9f5fffZP9/wWz78/9HfhUA/T9Dptb/5+5/btzSyf4HAACAHuTuf17cYv8DAADAatj63w4MPStuNqvd//y4xf4HAACAZuTuf0Hc0s7+H31Wp/5f/6//P/Pp+n/9/0D/vz6bTv/v+f/75fn/4/T/c+j/D6OfX2+s/796r8+fQv9/8vCe//8n8z5f/8+Qbf3/LZsfX1b/n7v/hXFLO/sfAAAAupe7/0Vxi/0PAAAAzcjd/+K4xf4HAACAZuTuf0nc0sn+P/T+f+RXH9D/6/8n0v97/r/+f/D1p/X8f/3/fun/x+n/59D/e/6/5//r/zl3W/6VcVv/v8Wy+v/c/S+NWzrZ/wAAANCD3P0vi1vsfwAAAGhG7v6r4xb7HwAAAJqRu//lcUsn+9/z//X/+n/9v/5/+PX1/6vpnPr78/T/Rf+v/9f/6//1/yzA1Pr/7bu/v/0PAAAAPXjFmf89Hj9fb/8DAABAi3L3vzJusf8BAACgGbn7XxW3dLL/9f+H2//nx/X/+v+Z/l//r/8/Et0+/39t6Eei3fbo/2//21N/uf0j+n/9v/5f/6//Z59+b+T3TaL/P735b5e5+18dt3Sy/wEAAKAHufuviVvsfwAAAGhG7v7XxC32PwAAADQjd/+1ccsB9/9Y8zBl+n/P/9f/6//1/8Ovr/9fTd32//vk+f9z6P/1//p//T8LNYn+f8tv5+5/bdzi6/8AAADQjNz9r4tb7H8AAABoRu7+18ct9j8AAAA0I3f/G+KWTva//l//r//X/+v/h19f/7+a9P/j9P9zrFL/f+059P/rwx9edj9/rpb9/vX/+n92m1r/n7v/urilk/0PAAAAPcjd/8a4xf4HAACAZuTuf1PcYv8DAABAM3L3vzlu6WT/6//1//p//b/+f/j19f+rSf8/Tv8/m82uH3kDQ/3/6WPT7P89/39y71//r/9nt6n1/7n73xK3dLL/AQAAoAe5+6+PW+x/AAAAaEbu/hviFvsfAAAAmpG7/61xSyf7X/+v/9f/6//1/8Ovr/9fTfr/cfr/OVbp+f/6/8m9f/2//p/dptb/5+5/W9zSyf4HAACAHuTuvzFusf8BAACgGbn73x632P8AAADQjNz9N8Utnex//b/+X/+v/x/o/8/8X13/r/9fRYfX/8/0//p//f8c+n/9v/6fnabW/+fuf0fc0sn+BwAAgB7k7r85brH/AQAAoBm5+98Zt9j/AAAA0Izc/e+KWzrZ//p//b/+X//v+f/Dr6//X02e/z9O/z+H/l//r//X/7NQw/3/yaX1/7n73x23dLL/AQAAoAe5+2+JW+x/AAAAaEbu/vfELfY/AAAANCN3/3vjlk72v/6/qf7/9OnTJ7d93sH7/9lM/6//1/9vGOj/73rwmt+t315A/398pv9fOP3/OP3/HPr/Nvv/82YN9f8n9vx8/T9TNLXn/+fuvzVu6WT/AwAAQA9y978vbrH/AQAAoBm5+98ft9j/AAAA0Izc/R+IWzrZ//r/pvr/ssTn/9936cD7WFD//zsz/b/+3/P/9f9z6P/H6f/n0P+32f97/r/+n6WZWv+fu/+DcUsn+x8AAAB6kLv/Q3GL/Q8AAADNyN3/4bjF/gcAAIBm5O7/SNzSyf7X/+v/F9z/e/6//l//vwf9/9FYpf5/feBj+n/9v/5/se8//+1e/6//Zzmm1v/n7v9o3NLJ/gcAAIAe5O6/LW6x/wEAAKAZuftvj1vsfwAAAGhG7v6PxS2d7H/9v/5f/7+a/f/xbf3/+TP9/+Yfr//v21T6/4su+os7PP9f/6//X37/7/n/+n+Wa2r9f+7+j8ctnex/AAAA6EHu/k/ELfY/AAAANCN3/yfjFvsfAAAAmpG7/1NxSyf7f3f/f8Fso1DdMNT/R6Om/99C/7/9/ev/h//58Px//b/+//BNpf8/29fX/+v/9f+r+/4P1P//0e7P1//Toqn1/7n774hbOtn/AAAA0IPc/Z+OW+x/AAAAaEbu/s/ELfY/AAAANCN3/51xSyf73/P/9f/6f/3/wvv/m+/d+Ib+fxv9/9E4y/7+T2+Nb+j/g/5f/6//7/f5/+fr/1mcqfX/ufs/G7d0sv8BAACgB7n774pb7H8AAABoRu7+z8Ut9j8AAAA0I3f/5+OWTva//l//r//X/3v+//Dr6/9Xk+f/j9P/l51/aRv66f+PD31w2f38uVr2+2+m//f8fxZoav1/7v4vxC2d7H8AAADoQe7+L8Yt9j8AAAA0I3f/l+IW+x8AAACakbv/y3FLJ/tf/6//b7//v1T/v+P19f/6/5bp//NH9GH6/zn66f8HLbufX/X3r//X/7Pb1Pr/3P13xy2d7H8AAADoQe7+r8Qt9j8AAAA0I3f/V+MW+x8AAACakbv/a3FLJ/tf/99X/78267H/9/x//b/+vyf6/3H6/zn0//p//b/+n4WaWv+fu/+etfUu9z8AAACsqr/+47+/e79/7D1n/vf47Otxy8Wz0/v8MjYAAAAwcY/s/rX12ewbZ37L1/8BAACgRbn7vxm3dLL/9f999f99Pv9f/6//1//3ZKi/H/o+ei/6/6D/1//r//X/+n8WYGr9f+7+b8UtW4bf+oH/KgEAAIApyd3/7bilk6//AwAAQA9y938nbtm1//1ygAAAALCqcvd/N27p5Ov/+v+J9/+zQ+r/44/T/2/Q/+v/h15f/7+aPP9/3Dn2/6fX9P/6/xH6f/2//p+dptb/5+6/N27pZP8DAABAo7b9jELu/vviFvsfAAAAmpG7/3txi/0PAAAAzcjdf3/c0sn+1/8fef+fqfohPv//RH3L8/877/+vOj74+vp//X/L9P/jPP9/Dv1/K/3/Mf2//p9pmFr/n7v/+3FLJ/sfAAAAepC7/wdxi/0PAAAAzcjd/8O4xf4HAACAZuTu/1Hc0sn+1/9P/Pn/Z9X/7+P5//r/Pvr/PV6/nf7/9y88ddslf3PDdfp/Nh1l/5//LBxx/3/soH/OrfT/c+j/W+n/Pf9f/89ELL7/X9/2wYP2/7n7fxy3dLL/AQAAoAe5+x+IW+x/AAAAaEbu/p/ELfY/AAAANCN3/0/jlk72v/5f/z+V/j//Xi+h/z911v3/idlstpT+P5vi3vt/z//X/+/m+f/j9P9z6P/1//p//T8Ltfj+f/sHD9r/5+7/WdzSyf4HAACAHuTu/3nckvt/7cA/dQ8AAABMTO7+X8Qtvv4PAAAAzcjd/2Dc0sn+1//r/6fS/yfP/9/8vLae/39Jxal99v9/WN/S/x8u/f84/f8c+n/9v/5f/89CTa3/z93/y7ilk/0PAAAAPcjd/1DcYv8DAABAM3L3/ypusf8BAACgGbn7fx23dLL/9f+t9v9ZxOv/9f9T6f89/9/z/4+G/n+c/n8O/b/+X/+v/2ehptb/5+7/bQAAAP//QGRbLw==")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

38.080313ms ago: executing program 2 (id=1998):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x40, 0xfffffffffffffffe, 0x4}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x68}}, 0x0)

325.49µs ago: executing program 2 (id=1999):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, r3, 0x25, 0x2, @val=@netfilter={0x3, 0x1, 0x0, 0x1}}, 0x20)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0xd2, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "008000", 0x9c, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "08744845e02104431ad54d214a692f70998e39e2e092b7a629caad2671b0f478", "4b87d5455d736b7920997cd606850cf7dba04158a941a98f8c74c54e903d5be35c06c65ee8ab0354fc5c409451c999f3", "9219fdaabe9ee6f7e93f8e72ab42b7f10edee7e9f774040d99abf45b", {"c82926411ff99a160100000000000096", "5b8b7b770e1eaf5eeb1abc0ed34d494e"}}}}}}}}, 0x0)

0s ago: executing program 3 (id=2000):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x40000)

kernel console output (not intermixed with test programs):

acity change from 0 to 1024
[  136.269868][   T33] audit: type=1800 audit(2000000018.570:20): pid=7780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.732" name="file1" dev="loop1" ino=20 res=0 errno=0
[  136.295579][   T33] audit: type=1800 audit(2000000018.581:21): pid=7780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.732" name="file1" dev="loop1" ino=20 res=0 errno=0
[  136.297768][ T7023] hfsplus: b-tree write err: -5, ino 25
[  136.314788][ T7023] hfsplus: b-tree write err: -5, ino 4
[  136.317096][ T7023] hfsplus: b-tree write err: -5, ino 2
[  136.319425][ T7023] hfsplus: b-tree write err: -5, ino 20
[  136.486378][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  136.489223][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  136.610211][   T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  136.695378][   T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  136.752543][   T10] usb 2-1: Using ep0 maxpacket: 32
[  136.756156][   T10] usb 2-1: config 0 has no interfaces?
[  136.757873][   T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  136.760846][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.768629][   T10] usb 2-1: config 0 descriptor??
[  136.847842][   T24] usb 4-1: Using ep0 maxpacket: 8
[  136.851406][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  136.854982][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  136.859576][   T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  136.862963][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.867535][   T24] usb 4-1: config 0 descriptor??
[  136.967715][   T10] usb 2-1: USB disconnect, device number 6
[  137.259339][   T24] magicmouse 0003:05AC:0265.0005: unknown main item tag 0x0
[  137.261780][   T24] magicmouse 0003:05AC:0265.0005: unknown main item tag 0x0
[  137.263993][   T24] magicmouse 0003:05AC:0265.0005: unknown main item tag 0x0
[  137.266206][   T24] magicmouse 0003:05AC:0265.0005: unknown main item tag 0x0
[  137.270586][   T24] magicmouse 0003:05AC:0265.0005: unknown main item tag 0x0
[  137.273055][   T24] magicmouse 0003:05AC:0265.0005: unknown main item tag 0x0
[  137.275372][   T24] magicmouse 0003:05AC:0265.0005: unknown main item tag 0x0
[  137.278352][   T24] magicmouse 0003:05AC:0265.0005: unknown main item tag 0x0
[  137.281236][   T24] magicmouse 0003:05AC:0265.0005: unknown main item tag 0x0
[  137.283514][   T24] magicmouse 0003:05AC:0265.0005: unknown main item tag 0x0
[  137.287668][   T24] magicmouse 0003:05AC:0265.0005: hidraw0: USB HID v0.08 Device [HID 05ac:0265] on usb-dummy_hcd.3-1/input0
[  137.458002][   T24] usb 4-1: USB disconnect, device number 13
[  137.512820][ T7808] overlayfs: conflicting options: userxattr,redirect_dir=on
[  137.762694][   T10] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  137.916533][   T10] usb 3-1: config 0 has an invalid interface number: 20 but max is 0
[  137.918972][   T10] usb 3-1: config 0 has no interface number 0
[  137.921005][   T10] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  137.939579][   T10] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  137.952208][   T10] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.00
[  137.963009][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.966313][   T10] usb 3-1: Product: syz
[  137.967839][   T10] usb 3-1: Manufacturer: syz
[  137.969270][   T10] usb 3-1: SerialNumber: syz
[  137.977221][   T10] usb 3-1: config 0 descriptor??
[  137.987108][ T7810] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  137.992856][   T10] ums-sddr09 3-1:0.20: USB Mass Storage device detected
[  138.011336][ T7836] loop1: detected capacity change from 0 to 128
[  138.062421][   T10] ums-sddr09 3-1:0.20: probe with driver ums-sddr09 failed with error -22
[  138.196013][   T10] usb 3-1: USB disconnect, device number 10
[  138.294281][ T7851] netlink: 'syz.1.766': attribute type 21 has an invalid length.
[  138.297564][ T7851] netlink: 128 bytes leftover after parsing attributes in process `syz.1.766'.
[  138.300979][ T7851] netlink: 3 bytes leftover after parsing attributes in process `syz.1.766'.
[  139.805288][ T7886] loop1: detected capacity change from 0 to 32768
[  141.029455][ T7910] netlink: 'syz.3.789': attribute type 5 has an invalid length.
[  141.104652][ T7916] loop1: detected capacity change from 0 to 1024
[  141.125242][ T7916] EXT4-fs: Ignoring removed orlov option
[  141.147403][ T7916] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.190019][ T7916] EXT4-fs error (device loop1): ext4_free_inode:354: comm syz.1.794: bit already cleared for inode 15
[  141.233235][ T5933] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.642067][ T7933] loop3: detected capacity change from 0 to 32768
[  141.686034][ T7933] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  141.716281][ T7933] XFS (loop3): Ending clean mount
[  141.730356][ T7933] XFS (loop3): Quotacheck needed: Please wait.
[  141.790602][ T7933] XFS (loop3): Quotacheck: Done.
[  141.831408][ T6270] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  141.980991][ T7966] loop1: detected capacity change from 0 to 32768
[  142.057221][ T7966] jfs_strtoUCS: char2uni returned -22.
[  142.078024][ T7966] charset = cp932, char = 0xf7
[  142.477863][   T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  142.629902][   T10] usb 3-1: Using ep0 maxpacket: 32
[  142.645169][   T10] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  142.648350][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.656029][   T10] usb 3-1: Product: syz
[  142.660320][   T10] usb 3-1: Manufacturer: syz
[  142.662106][   T10] usb 3-1: SerialNumber: syz
[  142.689760][   T10] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  143.089560][   T10] gspca_topro: reg_w err -71
[  143.116159][   T10] gspca_topro: Sensor soi763a
[  143.160496][   T10] usb 3-1: USB disconnect, device number 11
[  144.242329][ T8006] loop3: detected capacity change from 0 to 32768
[  144.251525][ T8006] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.829 (8006)
[  144.261284][ T8006] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  144.264481][ T8006] BTRFS info (device loop3): using crc32c checksum algorithm
[  144.375869][ T8006] BTRFS info (device loop3): enabling ssd optimizations
[  144.378141][ T8006] BTRFS info (device loop3): turning on async discard
[  144.380608][ T8006] BTRFS info (device loop3): enabling free space tree
[  144.538030][ T6270] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  144.819770][ T8032] loop3: detected capacity change from 0 to 32768
[  144.826204][ T8032] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.834 (8032)
[  144.836473][ T8032] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  144.840040][ T8032] BTRFS info (device loop3): using crc32c checksum algorithm
[  144.842552][ T8032] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  144.902201][ T8032] BTRFS info (device loop3): rebuilding free space tree
[  144.921050][ T8032] BTRFS info (device loop3): disabling free space tree
[  144.935536][ T8032] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  144.941690][ T8032] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  144.958064][ T8032] BTRFS info (device loop3): enabling ssd optimizations
[  144.963843][ T8032] BTRFS info (device loop3): turning off barriers
[  144.966509][ T8032] BTRFS info (device loop3): enabling disk space caching
[  144.969330][ T8032] BTRFS info (device loop3): force clearing of disk cache
[  144.972224][ T8032] BTRFS info (device loop3): force lzo compression, level 1
[  144.990517][ T8032] BTRFS info (device loop3): max_inline set to 0
[  145.082213][ T6270] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  145.640159][   T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  145.783553][   T10] usb 3-1: Using ep0 maxpacket: 16
[  145.824284][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01
[  145.831790][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.835628][   T10] usb 3-1: Product: syz
[  145.837516][   T10] usb 3-1: Manufacturer: syz
[  145.839505][   T10] usb 3-1: SerialNumber: syz
[  145.856786][   T10] usb 3-1: config 0 descriptor??
[  145.869387][   T10] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected.
[  146.057300][   T10] pwc: Warning: more than 1 configuration available.
[  146.064123][   T10] pwc: Failed to set LED on/off time (-71)
[  146.067287][   T10] pwc: send_video_command error -71
[  146.068575][ T5955] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  146.070083][   T10] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  146.076535][   T10] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71
[  146.086664][   T10] usb 3-1: USB disconnect, device number 12
[  146.221149][ T5955] usb 4-1: Using ep0 maxpacket: 8
[  146.230948][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  146.237702][ T5955] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  146.242338][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.253125][ T5955] usb 4-1: config 0 descriptor??
[  146.477751][ T5955] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  146.765849][   T33] audit: type=1326 audit(2000000029.593:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8103 comm="syz.2.856" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c9a59c799 code=0x0
[  146.850790][ T8110] netlink: 810 bytes leftover after parsing attributes in process `syz.2.860'.
[  146.899254][ T8114] xt_cgroup: path and classid specified
[  146.902448][ T8116] loop1: detected capacity change from 0 to 256
[  146.920323][ T8116] FAT-fs (loop1): unable to read block(17179869180) for building NFS inode
[  146.939605][   T10] usb 4-1: USB disconnect, device number 14
[  147.625922][ T8129] netlink: 88 bytes leftover after parsing attributes in process `syz.3.868'.
[  147.629760][ T8129] netlink: 48 bytes leftover after parsing attributes in process `syz.3.868'.
[  147.983460][ T5955] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  148.436714][ T5955] usb 4-1: unable to get BOS descriptor or descriptor too short
[  148.442623][ T5955] usb 4-1: not running at top speed; connect to a high speed hub
[  148.449110][ T5955] usb 4-1: config 2 has an invalid interface number: 212 but max is 1
[  148.454158][ T5955] usb 4-1: config 2 has an invalid interface number: 226 but max is 1
[  148.457392][ T5955] usb 4-1: config 2 has no interface number 0
[  148.460183][ T5955] usb 4-1: config 2 has no interface number 1
[  148.462706][ T5955] usb 4-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  148.467555][ T5955] usb 4-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  148.472630][ T5955] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64
[  148.477374][ T5955] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10
[  148.482162][ T5955] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  148.486083][ T5955] usb 4-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  148.492049][ T5955] usb 4-1: config 2 interface 212 has no altsetting 0
[  148.502706][ T5955] usb 4-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce
[  148.506286][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.509614][ T5955] usb 4-1: Product: syz
[  148.511462][ T5955] usb 4-1: Manufacturer: syz
[  148.513522][ T5955] usb 4-1: SerialNumber: syz
[  148.741363][ T5955] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.226/input/input8
[  148.756391][ T5955] usb 4-1: USB disconnect, device number 15
[  149.056007][ T8150] tipc: Failed to remove unknown binding: 66,0,0/0:2553933388/2553933390
[  149.059182][ T8150] tipc: Failed to remove unknown binding: 66,0,0/0:2553933388/2553933389
[  149.063495][ T8150] tipc: Failed to remove unknown binding: 66,0,0/0:2553933388/2553933390
[  149.066680][ T8150] tipc: Failed to remove unknown binding: 66,0,0/0:2553933388/2553933389
[  149.325252][ T8156] netlink: 72 bytes leftover after parsing attributes in process `syz.3.879'.
[  149.329569][ T8156] netlink: 104 bytes leftover after parsing attributes in process `syz.3.879'.
[  149.345883][   T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  149.507620][   T10] usb 2-1: Using ep0 maxpacket: 16
[  149.513654][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  149.518770][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  149.524101][   T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  149.529486][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.547616][   T10] usb 2-1: config 0 descriptor??
[  149.945393][   T10] HID 045e:07da: Invalid code 65791 type 1
[  149.952800][   T10] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0006/input/input9
[  149.968050][   T10] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  150.050531][ T5955] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  150.194932][ T5955] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  150.199666][ T5955] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  150.203484][ T5955] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  150.207977][ T5955] usb 4-1: config 0 interface 0 has no altsetting 0
[  150.211883][ T5955] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  150.215625][ T5955] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  150.219061][ T5955] usb 4-1: config 0 interface 0 has no altsetting 0
[  150.222336][ T5955] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  150.225788][ T5955] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  150.230027][ T5955] usb 4-1: config 0 interface 0 has no altsetting 0
[  150.233721][ T5955] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  150.237285][ T5955] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  150.241212][ T5955] usb 4-1: config 0 interface 0 has no altsetting 0
[  150.244677][ T5955] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  150.247721][ T5955] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  150.251977][ T5955] usb 4-1: config 0 interface 0 has no altsetting 0
[  150.255072][ T5955] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  150.257959][ T5955] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  150.262473][ T5955] usb 4-1: config 0 interface 0 has no altsetting 0
[  150.265677][ T5955] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  150.268807][ T5955] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  150.272661][ T5955] usb 4-1: config 0 interface 0 has no altsetting 0
[  150.275867][ T5955] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  150.279143][ T5955] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  150.283104][ T5955] usb 4-1: config 0 interface 0 has no altsetting 0
[  150.287505][ T5955] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  150.290421][ T5955] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  150.293545][ T5955] usb 4-1: Product: syz
[  150.295215][ T5955] usb 4-1: Manufacturer: syz
[  150.297068][ T5955] usb 4-1: SerialNumber: syz
[  150.301348][ T5955] usb 4-1: config 0 descriptor??
[  150.310067][ T5955] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0
[  150.536540][   T10] usb 2-1: USB disconnect, device number 7
[  150.607469][    C1] usb 4-1: yurex_control_callback - control failed: -71
[  150.607755][ T5924] usb 4-1: USB disconnect, device number 16
[  150.613871][ T8177] yurex 4-1:0.0: yurex_write - failed to send bulk msg, error -19
[  150.626192][ T5924] yurex 4-1:0.0: USB YUREX #0 now disconnected
[  150.771770][ T8181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.890'.
[  151.915124][   T33] audit: type=1326 audit(2000000035.000:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.1.901" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f230679c799 code=0x0
[  152.747628][   T33] audit: type=1326 audit(2000000035.882:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.1.906" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230679c799 code=0x7ffc0000
[  152.765234][   T33] audit: type=1326 audit(2000000035.882:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.1.906" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230679c799 code=0x7ffc0000
[  152.785038][   T33] audit: type=1326 audit(2000000035.903:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.1.906" exe="/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f230679c799 code=0x7ffc0000
[  152.803856][   T33] audit: type=1326 audit(2000000035.903:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.1.906" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230679c799 code=0x7ffc0000
[  152.812029][   T33] audit: type=1326 audit(2000000035.903:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz.1.906" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230679c799 code=0x7ffc0000
[  152.965364][ T8221] loop1: detected capacity change from 0 to 8
[  153.140867][ T8231] netlink: 'syz.2.914': attribute type 1 has an invalid length.
[  153.143565][ T8231] netlink: 236 bytes leftover after parsing attributes in process `syz.2.914'.
[  153.243017][ T8219] loop3: detected capacity change from 0 to 32768
[  153.250463][ T8219] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.905 (8219)
[  153.267490][ T8219] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  153.272115][ T8219] BTRFS info (device loop3): using sha256 checksum algorithm
[  153.311089][ T8219] BTRFS info (device loop3): enabling ssd optimizations
[  153.313399][ T8219] BTRFS info (device loop3): turning on async discard
[  153.315645][ T8219] BTRFS info (device loop3): enabling free space tree
[  153.350567][ T6270] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  153.380524][ T8260] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.214547][ T5924] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  154.358277][ T5924] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  154.366407][ T5924] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  154.369516][ T5924] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  154.372309][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.379514][ T8279] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  154.383760][ T5924] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  155.231759][   T10] usb 2-1: USB disconnect, device number 8
[  155.647195][    T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  155.833760][    T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  155.837524][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  155.843125][    T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  155.846772][    T9] usb 3-1: config 1 has no interface number 1
[  155.887552][    T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  155.903282][    T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  155.906293][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.912505][    T9] usb 3-1: Product: syz
[  155.914160][    T9] usb 3-1: Manufacturer: syz
[  155.916020][    T9] usb 3-1: SerialNumber: syz
[  156.193936][    T9] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  156.199331][    T9] usb 3-1: MIDIStreaming interface descriptor not found
[  156.294660][    T9] usb 3-1: USB disconnect, device number 13
[  156.360859][ T8322] loop1: detected capacity change from 0 to 64
[  156.419598][ T8324] netlink: 'syz.1.947': attribute type 1 has an invalid length.
[  156.432747][ T8324] netlink: 'syz.1.947': attribute type 2 has an invalid length.
[  156.762044][ T8342] loop1: detected capacity change from 0 to 1024
[  156.929159][    T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  156.962440][ T8356] [U] 
[  157.103621][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  157.108424][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  157.130944][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  157.150114][    T9] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  157.153890][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.167322][    T9] usb 4-1: Product: syz
[  157.169055][    T9] usb 4-1: Manufacturer: syz
[  157.172875][    T9] usb 4-1: SerialNumber: syz
[  157.178290][    T9] usb 4-1: config 0 descriptor??
[  157.296712][   T10] hid_parser_main: 30 callbacks suppressed
[  157.296723][   T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  157.318849][   T10] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  157.938011][ T1269] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  158.483453][ T1269] usb 2-1: config 9 has an invalid interface number: 239 but max is 0
[  158.499493][ T1269] usb 2-1: config 9 has no interface number 0
[  158.507499][ T1269] usb 2-1: config 9 interface 239 altsetting 7 bulk endpoint 0xE has invalid maxpacket 16
[  158.518669][ T1269] usb 2-1: config 9 interface 239 has no altsetting 0
[  158.537274][ T1269] usb 2-1: New USB device found, idVendor=0bfd, idProduct=011a, bcdDevice=e9.99
[  158.544686][ T1269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.553716][ T1269] usb 2-1: Product: syz
[  158.556956][ T1269] usb 2-1: Manufacturer: syz
[  158.561005][ T1269] usb 2-1: SerialNumber: syz
[  158.575507][ T8384] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  158.822985][ T1269] kvaser_usb 2-1:9.239: error -ENODEV: Cannot get usb endpoint(s)
[  158.832717][ T1269] usb 2-1: USB disconnect, device number 9
[  159.450059][ T8404] loop3: detected capacity change from 0 to 4096
[  159.459632][ T8406] netlink: 16 bytes leftover after parsing attributes in process `syz.1.984'.
[  159.472602][ T8404] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  159.488503][ T8404] ntfs3(loop3): ino=3, mi_enum_attr
[  159.715881][ T8404] ntfs3(loop3): MFT: r=b, expect seq=b instead of 0!
[  159.726495][ T8404] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  159.740487][ T8404] ntfs3(loop3): Failed to load $Extend (-22).
[  159.749799][ T8404] ntfs3(loop3): Failed to initialize $Extend.
[  160.509669][ T1269] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  160.530258][ T8421] netlink: 28 bytes leftover after parsing attributes in process `syz.3.991'.
[  160.535545][ T8421] netlink: 'syz.3.991': attribute type 7 has an invalid length.
[  160.538973][ T8421] netlink: 'syz.3.991': attribute type 8 has an invalid length.
[  160.541827][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.991'.
[  160.560539][ T8421] erspan0: entered promiscuous mode
[  160.563648][ T8421] gretap0: entered promiscuous mode
[  160.567483][ T8421] erspan0: left promiscuous mode
[  160.570712][ T8421] gretap0: left promiscuous mode
[  160.661861][ T1269] usb 2-1: Using ep0 maxpacket: 8
[  160.664752][ T1269] usb 2-1: config 162 has an invalid interface number: 84 but max is 2
[  160.667635][ T1269] usb 2-1: config 162 has an invalid interface number: 3 but max is 2
[  160.679202][ T1269] usb 2-1: config 162 has no interface number 0
[  160.688290][ T1269] usb 2-1: config 162 has no interface number 1
[  160.690426][ T1269] usb 2-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  160.703920][ T1269] usb 2-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  160.708422][ T1269] usb 2-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  160.715397][ T1269] usb 2-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[  160.719633][ T1269] usb 2-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[  160.723453][ T1269] usb 2-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  160.729290][ T1269] usb 2-1: config 162 interface 84 has no altsetting 0
[  160.732247][ T1269] usb 2-1: config 162 interface 2 has no altsetting 0
[  160.736795][ T1269] usb 2-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23
[  160.740600][ T1269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.743753][ T1269] usb 2-1: Product: syz
[  160.745395][ T1269] usb 2-1: Manufacturer: syz
[  160.747290][ T1269] usb 2-1: SerialNumber: syz
[  161.010931][ T8434] comedi: valid board names for 8255 driver are:
[  161.017862][ T5199] Bluetooth: hci3: Opcode 0x0c03 failed: -71
[  161.027001][ T8434]  8255
[  161.029421][ T8434] comedi: valid board names for vmk80xx driver are:
[  161.032251][ T1269] usb 2-1: USB disconnect, device number 10
[  161.040849][ T8434]  vmk80xx
[  161.051774][ T8434] comedi: valid board names for usbduxsigma driver are:
[  161.061298][ T8434]  usbduxsigma
[  161.064516][ T8434] comedi: valid board names for usbduxfast driver are:
[  161.067540][ T8434]  usbduxfast
[  161.073810][ T8434] comedi: valid board names for usbdux driver are:
[  161.078327][ T8434]  usbdux
[  161.079589][ T8434] comedi: valid board names for ni6501 driver are:
[  161.082029][ T8434]  ni6501
[  161.083093][ T8434] comedi: valid board names for dt9812 driver are:
[  161.085219][ T8434]  dt9812
[  161.086174][ T8434] comedi: valid board names for ni_labpc_cs driver are:
[  161.088632][ T8434]  ni_labpc_cs
[  161.089839][ T8434] comedi: valid board names for ni_daq_700 driver are:
[  161.094744][ T8434]  ni_daq_700
[  161.096271][ T8434] comedi: valid board names for labpc_pci driver are:
[  161.098947][ T8434]  labpc_pci
[  161.099917][ T8434] comedi: valid board names for adl_pci9118 driver are:
[  161.102504][ T8434]  pci9118dg
[  161.103695][ T8434]  pci9118hg
[  161.104929][ T8434]  pci9118hr
[  161.106144][ T8434] comedi: valid board names for 8255_pci driver are:
[  161.108364][ T8434]  8255_pci
[  161.111298][ T8434] comedi: valid board names for s526 driver are:
[  161.113960][ T8434]  s526
[  161.115142][ T8434] comedi: valid board names for multiq3 driver are:
[  161.117704][ T8434]  multiq3
[  161.119744][ T8434] comedi: valid board names for pcmuio driver are:
[  161.122436][ T8434]  pcmuio48
[  161.123815][ T8434]  pcmuio96
[  161.125191][ T8434] comedi: valid board names for pcmmio driver are:
[  161.127676][ T8434]  pcmmio
[  161.129128][ T8434] comedi: valid board names for pcmda12 driver are:
[  161.131249][ T8434]  pcmda12
[  161.132365][ T8434] comedi: valid board names for pcmad driver are:
[  161.134653][ T8434]  pcmad12
[  161.135816][ T8434]  pcmad16
[  161.136971][ T8434] comedi: valid board names for ni_labpc driver are:
[  161.139991][ T8434]  lab-pc-1200
[  161.141489][ T8434]  lab-pc-1200ai
[  161.142967][ T8434]  lab-pc+
[  161.144035][ T8434] comedi: valid board names for atmio16 driver are:
[  161.146422][ T8434]  atmio16
[  161.147413][ T8434]  atmio16d
[  161.148909][ T8434] comedi: valid board names for ni_at_ao driver are:
[  161.151085][ T8434]  at-ao-6
[  161.152079][ T8434]  at-ao-10
[  161.153269][ T8434] comedi: valid board names for ni_at_a2150 driver are:
[  161.155861][ T8434]  ni_at_a2150
[  161.157466][ T8434] comedi: valid board names for adq12b driver are:
[  161.159605][ T8434]  adq12b
[  161.160563][ T8434] comedi: valid board names for mpc624 driver are:
[  161.162707][ T8434]  mpc624
[  161.163793][ T8434] comedi: valid board names for c6xdigio driver are:
[  161.165931][ T8434]  c6xdigio
[  161.167659][ T8434] comedi: valid board names for aio_iiro_16 driver are:
[  161.170195][ T8434]  aio_iiro_16
[  161.171656][ T8434] comedi: valid board names for aio_aio12_8 driver are:
[  161.174488][ T8434]  aio_aio12_8
[  161.175936][ T8434]  aio_ai12_8
[  161.177510][ T8434]  aio_ao12_4
[  161.178828][ T8434] comedi: valid board names for fl512 driver are:
[  161.180932][ T8434]  fl512
[  161.181848][ T8434] comedi: valid board names for dmm32at driver are:
[  161.183975][ T8434]  dmm32at
[  161.185101][ T8434] comedi: valid board names for dt282x driver are:
[  161.187585][ T8434]  dt2821
[  161.188637][ T8434]  dt2821-f
[  161.189775][ T8434]  dt2821-g
[  161.190781][ T8434]  dt2823
[  161.191825][ T8434]  dt2824-pgh
[  161.193019][ T8434]  dt2824-pgl
[  161.194218][ T8434]  dt2825
[  161.197329][ T8434]  dt2827
[  161.198375][ T8434]  dt2828
[  161.199295][ T8434]  dt2829
[  161.200412][ T8434]  dt21-ez
[  161.201722][ T8434]  dt23-ez
[  161.202846][ T8434]  dt24-ez
[  161.204061][ T8434]  dt24-ez-pgl
[  161.205678][ T8434] comedi: valid board names for dt2817 driver are:
[  161.208058][ T8434]  dt2817
[  161.209264][ T8434] comedi: valid board names for dt2815 driver are:
[  161.211328][ T8434]  dt2815
[  161.212281][ T8434] comedi: valid board names for dt2814 driver are:
[  161.214618][ T8434]  dt2814
[  161.216087][ T8434] comedi: valid board names for dt2811 driver are:
[  161.218570][ T8434]  dt2811-pgh
[  161.219756][ T8434]  dt2811-pgl
[  161.220941][ T8434] comedi: valid board names for dt2801 driver are:
[  161.223412][ T8434]  dt2801
[  161.225099][ T8434] comedi: valid board names for das6402 driver are:
[  161.227290][ T8434]  das6402-12
[  161.228444][ T8434]  das6402-16
[  161.229554][ T8434] comedi: valid board names for das1800 driver are:
[  161.231687][ T8434]  das-1701st
[  161.232934][ T8434]  das-1701st-da
[  161.234595][ T8434]  das-1702st
[  161.235729][ T8434]  das-1702st-da
[  161.237219][ T8434]  das-1702hr
[  161.238690][ T8434]  das-1702hr-da
[  161.240015][ T8434]  das-1701ao
[  161.241187][ T8434]  das-1702ao
[  161.243596][ T8434]  das-1801st
[  161.244806][ T8434]  das-1801st-da
[  161.246069][ T8434]  das-1802st
[  161.247195][ T8434]  das-1802st-da
[  161.248460][ T8434]  das-1802hr
[  161.249601][ T8434]  das-1802hr-da
[  161.250853][ T8434]  das-1801hc
[  161.252026][ T8434]  das-1802hc
[  161.253623][ T8434]  das-1801ao
[  161.254770][ T8434]  das-1802ao
[  161.255912][ T8434] comedi: valid board names for das800 driver are:
[  161.257971][ T8434]  das-800
[  161.259100][ T8434]  cio-das800
[  161.260252][ T8434]  das-801
[  161.261234][ T8434]  cio-das801
[  161.262836][ T8434]  das-802
[  161.263879][ T8434]  cio-das802
[  161.265014][ T8434]  cio-das802/16
[  161.266212][ T8434] comedi: valid board names for isa-das08 driver are:
[  161.268300][ T8434]  isa-das08
[  161.269432][ T8434]  das08-pgm
[  161.270576][ T8434]  das08-pgh
[  161.272369][ T8434]  das08-pgl
[  161.273648][ T8434]  das08-aoh
[  161.275260][ T8434]  das08-aol
[  161.276603][ T8434]  das08-aom
[  161.277808][ T8434]  das08/jr-ao
[  161.279110][ T8434]  das08jr-16-ao
[  161.280535][ T8434]  pc104-das08
[  161.282233][ T8434]  das08jr/16
[  161.284181][ T8434] comedi: valid board names for das16m1 driver are:
[  161.286822][ T8434]  das16m1
[  161.288170][ T8434] comedi: valid board names for dac02 driver are:
[  161.291065][ T8434]  dac02
[  161.292116][ T8434] comedi: valid board names for rti802 driver are:
[  161.294640][ T8434]  rti802
[  161.295623][ T8434] comedi: valid board names for rti800 driver are:
[  161.297823][ T8434]  rti800
[  161.298821][ T8434]  rti815
[  161.299871][ T8434] comedi: valid board names for pcm3724 driver are:
[  161.304296][ T8434]  pcm3724
[  161.305771][ T8434] comedi: valid board names for pcl818 driver are:
[  161.307913][ T8434]  pcl818l
[  161.308903][ T8434]  pcl818h
[  161.310199][ T8434]  pcl818hd
[  161.311314][ T8434]  pcl818hg
[  161.312527][ T8434]  pcl818
[  161.314201][ T8434]  pcl718
[  161.315319][ T8434]  pcm3718
[  161.316450][ T8434] comedi: valid board names for pcl816 driver are:
[  161.318712][ T8434]  pcl816
[  161.320506][ T8434]  pcl814b
[  161.321656][ T8434] comedi: valid board names for pcl812 driver are:
[  161.323867][ T8434]  pcl812
[  161.324844][ T8434]  pcl812pg
[  161.326075][ T8434]  acl8112pg
[  161.327250][ T8434]  acl8112dg
[  161.328408][ T8434]  acl8112hg
[  161.329994][ T8434]  a821pgl
[  161.331371][ T8434]  a821pglnda
[  161.332803][ T8434]  a821pgh
[  161.333992][ T8434]  a822pgl
[  161.335092][ T8434]  a822pgh
[  161.336096][ T8434]  a823pgl
[  161.337177][ T8434]  a823pgh
[  161.338506][ T8434]  pcl813
[  161.339774][ T8434]  pcl813b
[  161.340914][ T8434]  acl8113
[  161.342100][ T8434]  iso813
[  161.343116][ T8434]  acl8216
[  161.344629][ T8434]  a826pg
[  161.345818][ T8434] comedi: valid board names for pcl730 driver are:
[  161.348560][ T8434]  pcl730
[  161.349623][ T8434]  iso730
[  161.350571][ T8434]  acl7130
[  161.351654][ T8434]  pcm3730
[  161.352826][ T8434]  pcl725
[  161.353821][ T8434]  p8r8dio
[  161.355031][ T8434]  acl7225b
[  161.356238][ T8434]  p16r16dio
[  161.357913][ T8434]  pcl733
[  161.358987][ T8434]  pcl734
[  161.360060][ T8434]  opmm-1616-xt
[  161.361342][ T8434]  pearl-mm-p
[  161.362593][ T8434]  ir104-pbf
[  161.363759][ T8434] comedi: valid board names for pcl726 driver are:
[  161.366277][ T8434]  pcl726
[  161.368450][ T8434]  pcl727
[  161.369883][ T8434]  pcl728
[  161.371293][ T8434]  acl6126
[  161.372723][ T8434]  acl6128
[  161.374203][ T8434] comedi: valid board names for pcl724 driver are:
[  161.377748][ T8434]  pcl724
[  161.379197][ T8434]  pcl722
[  161.380575][ T8434]  pcl731
[  161.381948][ T8434]  acl7122
[  161.383410][ T8434]  acl7124
[  161.384825][ T8434]  pet48dio
[  161.387028][ T8434]  pcmio48
[  161.388504][ T8434]  onyx-mm-dio
[  161.390023][ T8434] comedi: valid board names for pcl711 driver are:
[  161.392852][ T8434]  pcl711
[  161.394260][ T8434]  pcl711b
[  161.395990][ T8434]  acl8112hg
[  161.397781][ T8434]  acl8112dg
[  161.399422][ T8434] comedi: valid board names for amplc_pc263 driver are:
[  161.402357][ T8434]  pc263
[  161.403711][ T8434] comedi: valid board names for amplc_pc236 driver are:
[  161.409732][ T8434]  pc36at
[  161.411663][ T8434] comedi: valid board names for amplc_dio200 driver are:
[  161.415234][ T8434]  pc212e
[  161.416621][ T8434]  pc214e
[  161.417976][ T8434]  pc215e
[  161.419510][ T8434]  pc218e
[  161.420874][ T8434]  pc272e
[  161.422277][ T8434] comedi: valid board names for comedi_parport driver are:
[  161.425978][ T8434]  comedi_parport
[  161.427676][ T8434] comedi: valid board names for comedi_test driver are:
[  161.430733][ T8434]  comedi_test
[  161.432318][ T8434] comedi: valid board names for comedi_bond driver are:
[  161.435679][ T8434]  comedi_bond
[  161.582710][ T8439] openvswitch: netlink: VXLAN extension message has 12 unknown bytes.
[  161.683708][ T8441] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  162.112641][ T8451] loop1: detected capacity change from 0 to 64
[  162.430259][   T33] audit: type=1800 audit(2000000046.033:29): pid=8451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1005" name="file1" dev="loop1" ino=5 res=0 errno=0
[  163.553629][ T8476] loop1: detected capacity change from 0 to 256
[  163.576249][ T8476] FAT-fs (loop1): Directory bread(block 64) failed
[  163.589021][ T8476] FAT-fs (loop1): Directory bread(block 65) failed
[  163.591686][ T8476] FAT-fs (loop1): Directory bread(block 66) failed
[  163.593787][ T8476] FAT-fs (loop1): Directory bread(block 67) failed
[  163.601915][ T8476] FAT-fs (loop1): Directory bread(block 68) failed
[  163.604240][ T8476] FAT-fs (loop1): Directory bread(block 69) failed
[  163.607273][ T8476] FAT-fs (loop1): Directory bread(block 70) failed
[  163.609993][ T8476] FAT-fs (loop1): Directory bread(block 71) failed
[  163.612306][ T8476] FAT-fs (loop1): Directory bread(block 72) failed
[  163.614465][ T8476] FAT-fs (loop1): Directory bread(block 73) failed
[  164.410727][ T8491] loop3: detected capacity change from 0 to 1024
[  164.438511][ T8491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.468042][ T8491] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: comm syz.3.1023: inode #36616: comm syz.3.1023: iget: illegal inode #
[  164.475357][ T8491] EXT4-fs (loop3): Remounting filesystem read-only
[  164.478083][ T8491] EXT4-fs warning (device loop3): ext4_xattr_block_set:2200: inode #19: comm syz.3.1023: dec ref error=-30
[  164.512832][ T6270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.648661][ T8500] loop3: detected capacity change from 0 to 512
[  164.665318][ T8500] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  164.667754][ T8500] UDF-fs: Scanning with blocksize 512 failed
[  164.674596][ T8500] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  164.677341][ T8500] UDF-fs: Scanning with blocksize 1024 failed
[  164.679889][ T8500] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  164.682457][ T8500] UDF-fs: Scanning with blocksize 2048 failed
[  164.684769][ T8500] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  164.688582][ T8500] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  164.855389][ T8512] loop3: detected capacity change from 0 to 8
[  164.867845][ T8512] SQUASHFS error: zlib decompression failed, data probably corrupt
[  164.870308][ T8512] SQUASHFS error: Failed to read block 0x9b: -5
[  164.872657][ T8512] SQUASHFS error: Unable to read metadata cache entry [99]
[  164.875545][ T8512] SQUASHFS error: Unable to read inode 0x104
[  164.978727][ T8519] loop3: detected capacity change from 0 to 1024
[  165.118244][ T8527] loop3: detected capacity change from 0 to 4096
[  165.127648][ T8527] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  165.162477][ T8527] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  165.191246][ T8532] loop1: detected capacity change from 0 to 2048
[  165.239579][ T8532] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  166.184743][ T8544] mmap: syz.1.1046 (8544): VmData 41652224 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data.
[  166.698872][ T8557] openvswitch: netlink: Duplicate or invalid key (type 0).
[  166.703927][ T8557] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.927456][ T8575] loop3: detected capacity change from 0 to 164
[  166.954878][ T8575] Unsupported NM flag settings (240)
[  166.959172][    T9] iguanair 4-1:0.0: failed to get version
[  166.962108][    T9] iguanair 4-1:0.0: probe with driver iguanair failed with error -110
[  166.968714][    T9] usb 4-1: USB disconnect, device number 17
[  166.975561][ T5812] udevd[5812]: setting owner of /dev/bus/usb/004/017 to uid=0, gid=0 failed: No such file or directory
[  167.111352][ T5813] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  167.255770][ T5813] usb 2-1: Using ep0 maxpacket: 32
[  167.259864][ T5813] usb 2-1: unable to get BOS descriptor or descriptor too short
[  167.267102][ T5813] usb 2-1: New USB device found, idVendor=0582, idProduct=00c4, bcdDevice= 0.40
[  167.274941][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.278235][ T5813] usb 2-1: Product: syz
[  167.279959][ T5813] usb 2-1: Manufacturer: syz
[  167.281736][ T5813] usb 2-1: SerialNumber: syz
[  167.349045][    T9] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  167.496443][ T8600] autofs: Unknown parameter 'no9 PG!8E	'
[  167.522928][    T9] usb 4-1: config 1 has an invalid interface number: 146 but max is 0
[  167.525577][    T9] usb 4-1: config 1 has no interface number 0
[  167.527559][    T9] usb 4-1: config 1 interface 146 has no altsetting 0
[  167.549497][    T9] usb 4-1: New USB device found, idVendor=413c, idProduct=b097, bcdDevice=52.59
[  167.555803][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.563335][    T9] usb 4-1: Product: syz
[  167.565565][    T9] usb 4-1: Manufacturer: syz
[  167.567138][    T9] usb 4-1: SerialNumber: syz
[  167.576872][    T9] r8152-cfgselector 4-1: Unknown version 0x0000
[  167.777795][    T9] r8152 4-1:1.146: Expected endpoints are not found
[  167.787887][    T9] r8152-cfgselector 4-1: USB disconnect, device number 18
[  168.039458][ T8614] x_tables: ip_tables: osf match: only valid for protocol 6
[  168.458119][   T24] usb 2-1: USB disconnect, device number 11
[  168.500933][ T8640] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1091'.
[  168.563822][ T8643] loop3: detected capacity change from 0 to 512
[  168.581705][ T8643] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  168.585278][ T8643] EXT4-fs (loop3): orphan cleanup on readonly fs
[  168.589108][ T8643] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  168.608360][ T8643] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  168.610964][ T8643] EXT4-fs error (device loop3): __ext4_iget:5378: inode #16: block 127754: comm syz.3.1092: invalid block
[  168.614679][ T8643] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  168.615189][ T8643] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1092: couldn't read orphan inode 16 (err -117)
[  168.618203][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  168.618213][    C0] EXT4-fs (loop3): initial error at time 2000000052: __ext4_iget:5378: inode 16: block 127754
[  168.618228][    C0] EXT4-fs (loop3): last error at time 2000000052: __ext4_iget:5378: inode 16: block 127754
[  168.631538][ T8643] loop3: lost filesystem error report for type 5 error -117
[  168.639499][ T8643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  168.691737][ T6270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.802608][ T8646] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1093'.
[  169.250492][ T8664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1102'.
[  169.340221][   T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  169.350477][ T1269] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  169.482914][   T24] usb 2-1: Using ep0 maxpacket: 32
[  169.487317][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  169.492128][ T1269] usb 4-1: Using ep0 maxpacket: 8
[  169.494520][   T24] usb 2-1: New USB device found, idVendor=04b4, idProduct=931d, bcdDevice= 0.40
[  169.497498][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.500069][   T24] usb 2-1: Product: syz
[  169.502206][   T24] usb 2-1: Manufacturer: syz
[  169.503880][   T24] usb 2-1: SerialNumber: syz
[  169.505817][ T1269] usb 4-1: unable to get BOS descriptor or descriptor too short
[  169.512629][ T1269] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  169.515434][ T1269] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.517844][ T1269] usb 4-1: Product: syz
[  169.524394][ T1269] usb 4-1: Manufacturer: syz
[  169.526272][ T1269] usb 4-1: SerialNumber: syz
[  169.732238][   T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  169.740211][ T1269] usb 4-1: selecting invalid altsetting 1
[  169.781192][   T24] usb 2-1: USB disconnect, device number 12
[  169.815599][ T1269] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  169.829337][ T1269] usb 4-1: USB disconnect, device number 19
[  169.840238][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  169.851469][ T6201] udevd[6201]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  170.332440][ T8681] loop1: detected capacity change from 0 to 64
[  170.368715][ T8681] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  170.392439][ T8681] BFS-fs: bfs_readdir(): Bad f_pos=00000001 for loop1:00000002
[  170.487239][ T8691] Device name not specified.
[  170.487239][ T8691] 
[  170.573608][ T8699] loop1: detected capacity change from 0 to 8
[  170.593930][ T8699] SQUASHFS error: zlib decompression failed, data probably corrupt
[  170.596623][ T8699] SQUASHFS error: Failed to read block 0x9b: -5
[  170.599486][ T8699] SQUASHFS error: Unable to read metadata cache entry [99]
[  170.602395][ T8699] SQUASHFS error: Unable to read inode 0x127
[  170.607159][ T5813] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  170.754792][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  170.758720][ T5813] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  170.777466][ T5813] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 200
[  170.783704][ T8713] Bluetooth: MGMT ver 1.23
[  170.785388][ T5813] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  170.796347][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.799188][   T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  170.804256][ T5813] usb 3-1: Product: syz
[  170.806384][ T5813] usb 3-1: Manufacturer: syz
[  170.808427][ T5813] usb 3-1: SerialNumber: syz
[  170.816190][ T5813] usb 3-1: config 0 descriptor??
[  170.819201][ T8685] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  170.829393][ T5813] ums-isd200 3-1:0.0: USB Mass Storage device detected
[  170.944681][   T10] usb 4-1: Using ep0 maxpacket: 32
[  170.966165][   T10] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[  170.975814][   T10] usb 4-1: config 0 has no interface number 0
[  170.986085][   T10] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  170.998950][   T10] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  171.002635][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.025562][   T10] usb 4-1: Product: syz
[  171.033313][   T10] usb 4-1: Manufacturer: syz
[  171.035185][   T10] usb 4-1: SerialNumber: syz
[  171.039165][ T5813] scsi host6: usb-storage 3-1:0.0
[  171.046883][   T10] usb 4-1: config 0 descriptor??
[  171.052830][   T10] radio-si470x 4-1:0.35: could not find interrupt in endpoint
[  171.057941][   T10] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5
[  171.066494][ T5813] usb 3-1: USB disconnect, device number 14
[  171.133392][ T8733] loop1: detected capacity change from 0 to 512
[  171.136852][ T8733] EXT4-fs: Ignoring removed nomblk_io_submit option
[  171.159310][ T8733] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  171.162464][ T8733] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[  171.169156][ T8733] EXT4-fs (loop1): orphan cleanup on readonly fs
[  171.172172][ T8733] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0
[  171.175318][ T8733] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  171.180581][ T8733] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  171.184089][ T8733] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1134: bg 0: block 40: padding at end of block bitmap is not set
[  171.190054][ T8733] loop1: lost filesystem error report for type 5 error -117
[  171.195156][ T8733] EXT4-fs (loop1): Remounting filesystem read-only
[  171.198311][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  171.198327][    C1] EXT4-fs (loop1): initial error at time 2000000055: ext4_validate_block_bitmap:441
[  171.198344][    C1] EXT4-fs (loop1): last error at time 2000000055: ext4_validate_block_bitmap:441
[  171.214808][ T8733] EXT4-fs (loop1): 1 truncate cleaned up
[  171.218536][ T8733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  171.237478][ T5933] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.254120][   T10] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  171.560432][ T8736] loop1: detected capacity change from 0 to 65536
[  171.566334][   T10] radio-raremono 4-1:0.35: raremono_cmd_main failed (-71)
[  171.571881][   T10] radio-raremono 4-1:0.35: V4L2 device registered as radio48
[  171.583239][   T10] usb 4-1: USB disconnect, device number 20
[  171.585954][   T10] radio-raremono 4-1:0.35: Thanko's Raremono disconnected
[  171.596558][ T8736] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  171.609574][ T8736] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x1a9/0x1590, inode 0x20 dinode
[  171.612827][ T8736] XFS (loop1): Unmount and run xfs_repair
[  171.614620][ T8736] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  171.617260][ T8736] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 ff ff ff ff  INA.............
[  171.620732][ T8736] 00000010: ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  171.623419][ T8736] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 7a bb 44 4d  ..e.....4.Xhz.DM
[  171.626064][ T8736] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 4b  4.Xhz.DM.......K
[  171.629236][ T8736] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  171.632196][ T8736] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  171.635714][ T8736] 00000060: ff ff ff ff b4 5c 6c 62 00 00 00 00 00 00 00 07  .....\lb........
[  171.639079][ T8736] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[  171.642276][ T8736] loop1: lost filesystem error report for type 5 error -117
[  171.642334][ T8736] XFS (loop1): Failed to read root inode 0x20, error 117
[  171.800651][ T8750] netlink: 'syz.2.1137': attribute type 1 has an invalid length.
[  171.803805][ T8750] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1137'.
[  171.818608][ T8750] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1137'.
[  171.822735][ T8750] netlink: 'syz.2.1137': attribute type 1 has an invalid length.
[  171.830678][ T8750] netlink: 'syz.2.1137': attribute type 8 has an invalid length.
[  171.833084][ T8750] netlink: 606 bytes leftover after parsing attributes in process `syz.2.1137'.
[  172.124791][ T8770] loop3: detected capacity change from 0 to 128
[  172.405537][ T8787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1154'.
[  172.451140][ T8791] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1155'.
[  172.474589][ T8793] dvmrp1: left allmulticast mode
[  172.949376][ T8825] netlink: 'syz.2.1172': attribute type 10 has an invalid length.
[  172.971447][ T8825] team0: Port device dummy0 added
[  172.977907][   T24] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  172.984147][ T8825] netlink: 'syz.2.1172': attribute type 10 has an invalid length.
[  172.995897][ T8825] team0: Port device dummy0 removed
[  172.999850][ T8825] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  173.146288][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  173.155787][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 4
[  173.174621][   T24] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  173.183325][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.192654][   T24] usb 2-1: Product: syz
[  173.196216][   T24] usb 2-1: Manufacturer: syz
[  173.204051][   T24] usb 2-1: SerialNumber: syz
[  173.252683][   T24] usb 2-1: config 0 descriptor??
[  173.262607][   T24] usb 2-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07
[  173.335232][   T33] audit: type=1804 audit(2000000057.487:30): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1176" name="/newroot/389/cgroup.controllers" dev="tmpfs" ino=2017 res=1 errno=0
[  173.343195][   T33] audit: type=1800 audit(2000000057.487:31): pid=8835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1176" name="cgroup.controllers" dev="tmpfs" ino=2017 res=0 errno=0
[  173.484417][   T24] usb 2-1: USB disconnect, device number 13
[  173.504923][ T6202] udevd[6202]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory
[  173.989077][    T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  174.069437][ T8854] netlink: 'syz.1.1184': attribute type 21 has an invalid length.
[  174.071900][ T8854] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1184'.
[  174.075226][ T8854] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1184'.
[  174.080020][ T8854] netlink: 'syz.1.1184': attribute type 21 has an invalid length.
[  174.083269][ T8854] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1184'.
[  174.088854][ T8854] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1184'.
[  174.143993][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  174.150214][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  174.157349][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  174.162455][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  174.165691][    T9] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  174.168642][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.172595][    T9] usb 4-1: config 0 descriptor??
[  174.278934][ T8864] loop1: detected capacity change from 0 to 2048
[  174.284407][ T8864] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  174.291330][ T8864] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  174.370789][    T9] hdpvr 4-1:0.0: firmware version 0x1e dated &S1;OX^	wΖg/n#
[  174.566644][    T9] hdpvr 4-1:0.0: device init failed
[  174.568772][    T9] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12
[  174.583473][    T9] usb 4-1: USB disconnect, device number 21
[  174.701354][   T33] audit: type=1326 audit(2000000058.914:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8889 comm="syz.2.1201" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c9a59c799 code=0x0
[  175.385013][ T8910] comedi comedi3: 8255: I/O port conflict (0x40404f26,4)
[  175.439012][ T8914] netlink: 'syz.3.1213': attribute type 3 has an invalid length.
[  175.467099][ T8918] netlink: 'syz.3.1214': attribute type 1 has an invalid length.
[  175.469647][ T8918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1214'.
[  175.472573][ T8918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1214'.
[  175.481630][ T8918] netlink: 'syz.3.1214': attribute type 2 has an invalid length.
[  175.520247][ T8920] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1216'.
[  175.893834][ T1269] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  176.038225][ T1269] usb 2-1: config 0 has an invalid interface number: 200 but max is 0
[  176.041274][ T1269] usb 2-1: config 0 has no interface number 0
[  176.044048][ T1269] usb 2-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xD8, changing to 0x88
[  176.048975][ T1269] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x88 has an invalid bInterval 0, changing to 10
[  176.054271][ T1269] usb 2-1: config 0 interface 200 has no altsetting 0
[  176.277030][ T1269] usb 2-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39
[  176.280279][ T1269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.283198][ T1269] usb 2-1: Product: syz
[  176.285107][ T1269] usb 2-1: Manufacturer: syz
[  176.286884][ T1269] usb 2-1: SerialNumber: syz
[  176.290462][ T1269] usb 2-1: config 0 descriptor??
[  176.497235][ T1269] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.200/input/input11
[  176.506478][    C0] usb 2-1: hanwang_irq - nonzero urb status received: -71
[  176.510036][    C0] usb 2-1: hanwang_irq - nonzero urb status received: -71
[  176.510676][ T1269] usb 2-1: USB disconnect, device number 14
[  176.512763][    C0] usb 2-1: hanwang_irq - usb_submit_urb failed with result -19
[  177.101895][ T8950] block device autoloading is deprecated and will be removed.
[  177.437900][ T8956] loop1: detected capacity change from 0 to 32768
[  177.450375][ T8956] XFS (loop1): sunit and swidth options incompatible with the noalign option
[  177.545898][   T33] audit: type=1326 audit(2000000061.906:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8964 comm="syz.1.1234" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230679c799 code=0x7ffc0000
[  177.556989][   T33] audit: type=1326 audit(2000000061.906:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8964 comm="syz.1.1234" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230679c799 code=0x7ffc0000
[  177.564553][   T33] audit: type=1326 audit(2000000061.917:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8964 comm="syz.1.1234" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230679c799 code=0x7ffc0000
[  177.572992][   T33] audit: type=1326 audit(2000000061.917:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8964 comm="syz.1.1234" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230679c799 code=0x7ffc0000
[  177.580917][   T33] audit: type=1326 audit(2000000061.917:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8964 comm="syz.1.1234" exe="/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f230679c799 code=0x7ffc0000
[  177.587881][   T33] audit: type=1326 audit(2000000061.917:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8964 comm="syz.1.1234" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230679c799 code=0x7ffc0000
[  177.595664][   T33] audit: type=1326 audit(2000000061.917:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8964 comm="syz.1.1234" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230679c799 code=0x7ffc0000
[  177.603199][   T33] audit: type=1326 audit(2000000061.927:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8964 comm="syz.1.1234" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f230679c799 code=0x7ffc0000
[  177.610621][   T33] audit: type=1326 audit(2000000061.927:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8964 comm="syz.1.1234" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f230679c799 code=0x7ffc0000
[  177.681422][ T8968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1236'.
[  177.685892][ T8968] validate_nla: 2 callbacks suppressed
[  177.686017][ T8968] netlink: 'syz.3.1236': attribute type 14 has an invalid length.
[  177.690312][ T8968] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1236'.
[  177.912816][ T5813] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  178.055844][ T5813] usb 2-1: Using ep0 maxpacket: 16
[  178.063485][ T8976] loop3: detected capacity change from 0 to 32768
[  178.073463][ T5813] usb 2-1: unable to get BOS descriptor or descriptor too short
[  178.082741][ T5813] usb 2-1: config 5 has an invalid interface number: 63 but max is 0
[  178.086820][ T5813] usb 2-1: config 5 has no interface number 0
[  178.091448][ T5813] usb 2-1: config 5 interface 63 has no altsetting 0
[  178.100362][ T5813] usb 2-1: New USB device found, idVendor=08d1, idProduct=0001, bcdDevice=77.88
[  178.104646][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.108256][ T5813] usb 2-1: Product: syz
[  178.110529][ T5813] usb 2-1: Manufacturer: syz
[  178.112519][ T5813] usb 2-1: SerialNumber: syz
[  178.138516][ T8976] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  178.283602][ T6270] ocfs2: Unmounting device (7,3) on (node local)
[  178.374765][ T5813] catc 2-1:5.63: Can't set altsetting 1.
[  178.381307][ T5813] catc 2-1:5.63: probe with driver catc failed with error -5
[  178.405031][ T5813] usb 2-1: USB disconnect, device number 15
[  179.298133][ T8990] loop1: detected capacity change from 0 to 1024
[  179.302158][ T8990] EXT4-fs: inline encryption not supported
[  179.311468][ T8990] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  179.340198][ T8990] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 2: comm syz.1.1245: lblock 2 mapped to illegal pblock 2 (length 1)
[  179.346007][ T8990] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  179.347246][ T8990] EXT4-fs (loop1): Remounting filesystem read-only
[  179.352539][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  179.352550][    C1] EXT4-fs (loop1): initial error at time 2000000063: ext4_map_blocks:776: inode 3: block 2
[  179.352566][    C1] EXT4-fs (loop1): last error at time 2000000063: ext4_map_blocks:776: inode 3: block 2
[  179.364654][ T8990] Quota error (device loop1): qtree_write_dquot: dquota write failed
[  179.369598][ T8990] EXT4-fs (loop1): 1 orphan inode deleted
[  179.417837][ T8990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.549141][ T5933] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.378744][ T9020] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1258'.
[  180.897991][ T9048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1272'.
[  180.915535][ T5957] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  180.919460][ T9048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1272'.
[  180.923500][ T5957] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  180.929438][ T5957] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  180.936556][ T5957] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  180.942481][ T9048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1272'.
[  180.949069][ T9048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1272'.
[  181.849804][ T9066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1279'.
[  182.393054][ T9072] loop3: detected capacity change from 0 to 32768
[  182.451258][ T9072] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  182.479906][ T9072] XFS (loop3): Ending clean mount
[  182.498902][ T6270] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  182.811958][ T9095] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  183.256720][ T1269] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  183.287416][ T9116] loop1: detected capacity change from 0 to 256
[  183.388993][ T9116] FAT-fs (loop1): Directory bread(block 64) failed
[  183.391833][ T9116] FAT-fs (loop1): Directory bread(block 65) failed
[  183.394194][ T9116] FAT-fs (loop1): Directory bread(block 66) failed
[  183.396337][ T9116] FAT-fs (loop1): Directory bread(block 67) failed
[  183.398644][ T9116] FAT-fs (loop1): Directory bread(block 68) failed
[  183.403618][ T9116] FAT-fs (loop1): Directory bread(block 69) failed
[  183.405984][ T9116] FAT-fs (loop1): Directory bread(block 70) failed
[  183.408143][ T9116] FAT-fs (loop1): Directory bread(block 71) failed
[  183.410603][ T9116] FAT-fs (loop1): Directory bread(block 72) failed
[  183.413060][ T9116] FAT-fs (loop1): Directory bread(block 73) failed
[  183.432628][ T1269] usb 4-1: config 0 has an invalid interface number: 3 but max is 2
[  183.435335][ T1269] usb 4-1: config 0 has an invalid interface number: 176 but max is 2
[  183.441512][ T1269] usb 4-1: config 0 has no interface number 1
[  183.447368][ T1269] usb 4-1: config 0 has no interface number 2
[  183.451201][ T1269] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  183.458538][ T1269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.486380][ T1269] usb 4-1: config 0 descriptor??
[  183.690589][ T1269] usb 4-1: Could not set interface, error -71
[  183.712352][ T1269] usb 4-1: USB disconnect, device number 22
[  184.543045][ T9138] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  184.659910][ T9137] netlink: 'syz.1.1307': attribute type 18 has an invalid length.
[  184.663095][ T9137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1307'.
[  184.678387][ T9137] netlink: 'syz.1.1307': attribute type 18 has an invalid length.
[  184.681449][ T9137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1307'.
[  184.807921][ T9146] loop1: detected capacity change from 0 to 512
[  184.821391][ T9146] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  184.826078][ T9146] EXT4-fs (loop1): orphan cleanup on readonly fs
[  184.833737][ T9146] __quota_error: 1 callbacks suppressed
[  184.833750][ T9146] Quota error (device loop1): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6).
[  184.842426][ T1269] usb 4-1: new low-speed USB device number 23 using dummy_hcd
[  184.848908][ T9146] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  184.859968][ T9146] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  184.877048][ T9146] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1311: bg 0: block 15: invalid block bitmap
[  184.881560][ T9146] loop1: lost filesystem error report for type 5 error -117
[  184.881943][ T9146] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  184.887818][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  184.887853][    C1] EXT4-fs (loop1): initial error at time 2000000069: ext4_validate_block_bitmap:432
[  184.887869][    C1] EXT4-fs (loop1): last error at time 2000000069: ext4_validate_block_bitmap:432
[  184.897872][ T9146] loop1: lost filesystem error report for type 5 error -117
[  184.898812][ T9146] EXT4-fs (loop1): 1 truncate cleaned up
[  184.904366][ T9146] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  184.913122][ T9146] loop1: Can't mount, would change RO state
[  184.934105][ T5933] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.992208][ T1269] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  184.996443][ T1269] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  185.006618][ T1269] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  185.012821][ T9156] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  185.020261][ T1269] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  185.028505][ T1269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.047149][ T9138] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  185.051865][ T1269] hub 4-1:1.0: bad descriptor, ignoring hub
[  185.056378][ T1269] hub 4-1:1.0: probe with driver hub failed with error -5
[  185.067057][ T1269] cdc_wdm 4-1:1.0: skipping garbage
[  185.069242][ T1269] cdc_wdm 4-1:1.0: skipping garbage
[  185.075683][ T1269] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  185.086407][ T1269] cdc_wdm 4-1:1.0: Unknown control protocol
[  185.171047][ T9166] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  185.419122][ T1269] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  185.566126][ T1269] usb 2-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96
[  185.569676][ T1269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.572926][ T1269] usb 2-1: Product: syz
[  185.574973][ T1269] usb 2-1: Manufacturer: syz
[  185.576976][ T1269] usb 2-1: SerialNumber: syz
[  185.580851][ T1269] usb 2-1: config 0 descriptor??
[  185.777255][ T1269] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-32
[  185.779788][ T1269] peak_usb 2-1:0.0: unable to read PCAN-USB FD firmware info (err -32)
[  185.830330][ T1269] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -32
[  185.840131][ T1269] usb 2-1: USB disconnect, device number 16
[  186.727079][ T9210] loop1: detected capacity change from 0 to 32768
[  186.734153][ T9210] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1341 (9210)
[  186.765121][ T9210] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  186.769147][ T9210] BTRFS info (device loop1): using crc32c checksum algorithm
[  186.797671][ T9210] BTRFS info (device loop1): rebuilding free space tree
[  186.812649][ T9210] BTRFS info (device loop1): allowing degraded mounts
[  186.815486][ T9210] BTRFS info (device loop1): enabling ssd optimizations
[  186.818318][ T9210] BTRFS info (device loop1): enabling free space tree
[  186.821395][ T9210] BTRFS info (device loop1): force clearing of disk cache
[  186.824376][ T9210] BTRFS info (device loop1): use zstd compression, level 3
[  186.827335][ T9210] BTRFS info (device loop1): max_inline set to 0
[  186.865344][ T5933] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  186.963867][ T9231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1343'.
[  187.248556][   T10] usb 4-1: USB disconnect, device number 23
[  187.918593][ T9256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1353'.
[  187.992921][ T9259] loop1: detected capacity change from 0 to 4096
[  188.222053][ T9275] loop3: detected capacity change from 0 to 16
[  188.242966][ T9275] erofs (device loop3): mounted with root inode @ nid 36.
[  188.379534][ T9286] loop1: detected capacity change from 0 to 128
[  188.507138][ T9297] xfrm0: entered promiscuous mode
[  188.508764][ T9297] xfrm0: entered allmulticast mode
[  188.565996][ T9301] loop1: detected capacity change from 0 to 1024
[  188.583395][   T33] audit: type=1800 audit(2000000073.496:42): pid=9301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1373" name="file1" dev="loop1" ino=20 res=0 errno=0
[  188.620570][   T51] hfsplus: b-tree write err: -5, ino 25
[  188.627684][   T51] hfsplus: b-tree write err: -5, ino 4
[  188.636439][   T51] hfsplus: b-tree write err: -5, ino 2
[  188.638292][   T51] hfsplus: b-tree write err: -5, ino 20
[  188.683438][ T9306] loop3: detected capacity change from 0 to 256
[  189.519417][ T9318] xt_hashlimit: max too large, truncated to 1048576
[  189.816030][ T9340] loop3: detected capacity change from 0 to 256
[  189.852163][ T9340] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4711949a, utbl_chksum : 0xe619d30d)
[  189.905922][   T33] audit: type=1800 audit(2000000074.882:43): pid=9340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1389" name="file1" dev="loop3" ino=1048641 res=0 errno=0
[  190.360343][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1395'.
[  190.365022][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1395'.
[  190.368984][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1395'.
[  190.375860][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1395'.
[  190.379803][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1395'.
[  190.383973][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1395'.
[  190.398258][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1395'.
[  190.402560][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1395'.
[  191.112890][ T9378] loop1: detected capacity change from 0 to 64
[  191.263800][ T9380] loop1: detected capacity change from 0 to 32768
[  191.286193][ T9380] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  191.298006][ T9380] XFS (loop1): Ending clean mount
[  191.323059][ T5933] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  191.438006][ T9390] IPVS: length: 94 != 8
[  191.575287][ T9398] loop1: detected capacity change from 0 to 1024
[  191.578349][ T9398] hfsplus: Filesystem is marked locked, mounting read-only.
[  191.586954][ T9398] hfsplus: filesystem is marked locked, leaving read-only.
[  191.614633][ T9348] Bluetooth: hci1: unexpected event for opcode 0x2041
[  191.911542][ T9420] can0: slcan on ttyS3.
[  192.063561][ T9420] can0 (unregistered): slcan off ttyS3.
[  192.110875][ T9348] Bluetooth: hci2: command 0x0406 tx timeout
[  192.157397][ T9426] loop3: detected capacity change from 0 to 4096
[  192.167423][ T9426] EXT4-fs (loop3): Test dummy encryption mode enabled
[  192.206445][ T9426] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103]
[  192.209994][ T9426] System zones: 0-5
[  192.216225][ T9426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.284101][ T9426] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-lib)))"
[  192.319501][ T6270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.623665][ T9435] __nla_validate_parse: 45 callbacks suppressed
[  192.623681][ T9435] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1425'.
[  192.773681][ T9441] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1424'.
[  192.776518][ T9441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1424'.
[  194.163064][ T9476] netlink: 'syz.2.1442': attribute type 5 has an invalid length.
[  194.544068][   T10] IPVS: starting estimator thread 0...
[  194.555585][   T33] audit: type=1326 audit(2000000079.753:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.2.1447" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c9a59c799 code=0x7ffc0000
[  194.562168][   T33] audit: type=1326 audit(2000000079.763:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.2.1447" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c9a59c799 code=0x7ffc0000
[  194.589765][   T33] audit: type=1326 audit(2000000079.763:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.2.1447" exe="/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f8c9a59c799 code=0x7ffc0000
[  194.606512][   T33] audit: type=1326 audit(2000000079.763:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.2.1447" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c9a59c799 code=0x7ffc0000
[  194.621032][   T33] audit: type=1326 audit(2000000079.763:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.2.1447" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8c9a59c799 code=0x7ffc0000
[  194.632897][ T9492] IPVS: using max 83 ests per chain, 199200 per kthread
[  194.638718][   T33] audit: type=1326 audit(2000000079.763:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.2.1447" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c9a59c799 code=0x7ffc0000
[  194.646072][   T33] audit: type=1326 audit(2000000079.763:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.2.1447" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8c9a55cfce code=0x7ffc0000
[  194.652895][   T33] audit: type=1326 audit(2000000079.763:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.2.1447" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8c9a55cfce code=0x7ffc0000
[  194.659653][   T33] audit: type=1326 audit(2000000079.763:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.2.1447" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c9a59c799 code=0x7ffc0000
[  194.901663][ T9498] loop1: detected capacity change from 0 to 8
[  194.916160][ T9498] SQUASHFS error: lzo decompression failed, data probably corrupt
[  194.919517][ T9498] SQUASHFS error: Failed to read block 0x91: -5
[  194.922344][ T9498] SQUASHFS error: Unable to read metadata cache entry [8f]
[  194.925376][ T9498] SQUASHFS error: Unable to read inode 0x11f
[  195.006490][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  195.008481][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  195.089776][ T9508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1455'.
[  195.093903][ T9508] netlink: 'syz.3.1455': attribute type 1 has an invalid length.
[  195.106534][ T9508] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1455'.
[  195.274867][ T9510] loop3: detected capacity change from 0 to 32768
[  195.312300][ T9510] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  195.325223][ T9510] XFS (loop3): Ending clean mount
[  195.332158][ T9510] XFS (loop3): Quotacheck needed: Please wait.
[  195.334838][ T9503] loop1: detected capacity change from 0 to 40427
[  195.341434][ T9503] F2FS-fs: heap/no_heap options were deprecated
[  195.356880][ T9510] XFS (loop3): Quotacheck: Done.
[  195.374294][ T9503] F2FS-fs (loop1): build fault injection rate: 16
[  195.376884][ T9503] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  195.399580][ T9503] F2FS-fs (loop1): invalid crc value
[  195.404637][ T6270] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  195.412829][ T9503] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of build_sit_entries+0x26c/0x1f10
[  195.436262][    C1] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  195.515152][ T9531] 9p: Bad value for 'rfdno'
[  195.576611][ T9503] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  195.607479][ T9503] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  195.633262][ T9503] F2FS-fs (loop1): inject dquot initialize in f2fs_dquot_initialize of f2fs_create+0x1cf/0x6a0
[  195.714197][ T9544] loop3: detected capacity change from 0 to 64
[  195.726740][ T9544] minix: block size(59136) > page size(4096) not supported by filesystem
[  195.740664][ T9544] MINIX-fs: file system does not have enough zmap blocks allocated. Refusing to mount.
[  195.743944][ T9544] MINIX-fs: bad superblock
[  195.936825][ T9554] input: syz0 as /devices/virtual/input/input12
[  196.469273][ T9563] loop3: detected capacity change from 0 to 40427
[  196.476965][ T9563] F2FS-fs (loop3): invalid crc value
[  196.537343][ T9563] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  196.540971][ T9563] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  196.561099][ T9563] syz.3.1475: attempt to access beyond end of device
[  196.561099][ T9563] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  196.572552][ T9563] CPU: 1 UID: 0 PID: 9563 Comm: syz.3.1475 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  196.572569][ T9563] Tainted: [L]=SOFTLOCKUP
[  196.572572][ T9563] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  196.572577][ T9563] Call Trace:
[  196.572581][ T9563]  <TASK>
[  196.572585][ T9563]  dump_stack_lvl+0xe8/0x150
[  196.572600][ T9563]  f2fs_handle_critical_error+0x37c/0x540
[  196.572615][ T9563]  f2fs_write_end_io+0xcdb/0xff0
[  196.572634][ T9563]  __submit_merged_bio+0x256/0x700
[  196.572646][ T9563]  f2fs_submit_merged_write+0x284/0x390
[  196.572660][ T9563]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  196.572699][ T9563]  f2fs_sync_node_pages+0x14bf/0x1680
[  196.572718][ T9563]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  196.572745][ T9563]  f2fs_write_checkpoint+0xeb8/0x26a0
[  196.572770][ T9563]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  196.572781][ T9563]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  196.572804][ T9563]  ? down_write+0x16d/0x200
[  196.572812][ T9563]  ? __pfx_down_write+0x10/0x10
[  196.572819][ T9563]  ? uplift_priority+0xdb/0x730
[  196.572827][ T9563]  ? __pfx_folio_mark_accessed+0x10/0x10
[  196.572840][ T9563]  f2fs_issue_checkpoint+0x456/0x790
[  196.572854][ T9563]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  196.572863][ T9563]  ? from_kgid+0x1ca/0x660
[  196.572888][ T9563]  ? f2fs_sync_fs+0x1f0/0x400
[  196.572899][ T9563]  f2fs_unlink+0x653/0xb30
[  196.572911][ T9563]  ? __pfx_f2fs_unlink+0x10/0x10
[  196.572920][ T9563]  ? __pfx_f2fs_empty_dir+0x10/0x10
[  196.572928][ T9563]  ? down_write+0x16d/0x200
[  196.572941][ T9563]  vfs_rmdir+0x3fd/0x6e0
[  196.572953][ T9563]  filename_rmdir+0x292/0x520
[  196.572964][ T9563]  ? __pfx_filename_rmdir+0x10/0x10
[  196.572976][ T9563]  ? do_getname+0x151/0x250
[  196.572985][ T9563]  __se_sys_rmdir+0x2e/0x140
[  196.572995][ T9563]  do_syscall_64+0x14d/0xf80
[  196.573003][ T9563]  ? trace_irq_disable+0x3b/0x150
[  196.573012][ T9563]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.573022][ T9563]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.573031][ T9563] RIP: 0033:0x7f21b919c799
[  196.573039][ T9563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  196.573045][ T9563] RSP: 002b:00007f21b9fe5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[  196.573054][ T9563] RAX: ffffffffffffffda RBX: 00007f21b9415fa0 RCX: 00007f21b919c799
[  196.573074][ T9563] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400
[  196.573079][ T9563] RBP: 00007f21b9232c99 R08: 0000000000000000 R09: 0000000000000000
[  196.573083][ T9563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  196.573087][ T9563] R13: 00007f21b9416038 R14: 00007f21b9415fa0 R15: 00007ffe4b56f498
[  196.573099][ T9563]  </TASK>
[  196.573102][ T9563] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  196.687806][   T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  196.707397][ T9563] CPU: 0 UID: 0 PID: 9563 Comm: syz.3.1475 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  196.707422][ T9563] Tainted: [L]=SOFTLOCKUP
[  196.707427][ T9563] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  196.707434][ T9563] Call Trace:
[  196.707439][ T9563]  <TASK>
[  196.707445][ T9563]  dump_stack_lvl+0xe8/0x150
[  196.707470][ T9563]  f2fs_handle_critical_error+0x37c/0x540
[  196.707493][ T9563]  f2fs_write_end_io+0xcdb/0xff0
[  196.707524][ T9563]  __submit_merged_bio+0x256/0x700
[  196.707545][ T9563]  f2fs_submit_merged_write+0x284/0x390
[  196.707564][ T9563]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  196.707592][ T9563]  f2fs_sync_node_pages+0x14bf/0x1680
[  196.707623][ T9563]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  196.707693][ T9563]  f2fs_write_checkpoint+0xeb8/0x26a0
[  196.707742][ T9563]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  196.707760][ T9563]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  196.707801][ T9563]  ? down_write+0x16d/0x200
[  196.707817][ T9563]  ? __pfx_down_write+0x10/0x10
[  196.707831][ T9563]  ? uplift_priority+0xdb/0x730
[  196.707846][ T9563]  ? __pfx_folio_mark_accessed+0x10/0x10
[  196.707867][ T9563]  f2fs_issue_checkpoint+0x456/0x790
[  196.707893][ T9563]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  196.707910][ T9563]  ? from_kgid+0x1ca/0x660
[  196.707953][ T9563]  ? f2fs_sync_fs+0x1f0/0x400
[  196.707971][ T9563]  f2fs_unlink+0x653/0xb30
[  196.707989][ T9563]  ? __pfx_f2fs_unlink+0x10/0x10
[  196.708006][ T9563]  ? __pfx_f2fs_empty_dir+0x10/0x10
[  196.708020][ T9563]  ? down_write+0x16d/0x200
[  196.708044][ T9563]  vfs_rmdir+0x3fd/0x6e0
[  196.708063][ T9563]  filename_rmdir+0x292/0x520
[  196.708084][ T9563]  ? __pfx_filename_rmdir+0x10/0x10
[  196.708104][ T9563]  ? do_getname+0x151/0x250
[  196.708125][ T9563]  __se_sys_rmdir+0x2e/0x140
[  196.708143][ T9563]  do_syscall_64+0x14d/0xf80
[  196.708157][ T9563]  ? trace_irq_disable+0x3b/0x150
[  196.708173][ T9563]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.708189][ T9563]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.708201][ T9563] RIP: 0033:0x7f21b919c799
[  196.708215][ T9563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  196.708224][ T9563] RSP: 002b:00007f21b9fe5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[  196.708239][ T9563] RAX: ffffffffffffffda RBX: 00007f21b9415fa0 RCX: 00007f21b919c799
[  196.708247][ T9563] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400
[  196.708255][ T9563] RBP: 00007f21b9232c99 R08: 0000000000000000 R09: 0000000000000000
[  196.708263][ T9563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  196.708271][ T9563] R13: 00007f21b9416038 R14: 00007f21b9415fa0 R15: 00007ffe4b56f498
[  196.708293][ T9563]  </TASK>
[  196.708300][ T9563] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  196.902228][   T10] usb 2-1: Using ep0 maxpacket: 32
[  196.906185][   T10] usb 2-1: config 32 has an invalid interface number: 85 but max is 0
[  196.909570][   T10] usb 2-1: config 32 has no interface number 0
[  196.912131][   T10] usb 2-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  196.916533][   T10] usb 2-1: config 32 interface 85 has no altsetting 0
[  196.928276][   T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  196.931295][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.934401][   T10] usb 2-1: Product: syz
[  196.945943][   T10] usb 2-1: Manufacturer: syz
[  196.947848][   T10] usb 2-1: SerialNumber: syz
[  197.064883][ T9584] loop3: detected capacity change from 0 to 1024
[  197.074012][ T9584] EXT4-fs warning (device loop3): ext4_multi_mount_protect:288: Invalid MMP block in superblock
[  197.364026][    T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  197.526172][    T9] usb 4-1: Using ep0 maxpacket: 16
[  197.530158][    T9] usb 4-1: config 1 has an invalid interface number: 36 but max is 0
[  197.533180][    T9] usb 4-1: config 1 has no interface number 0
[  197.535358][    T9] usb 4-1: config 1 interface 36 has no altsetting 0
[  197.541846][    T9] usb 4-1: New USB device found, idVendor=0df6, idProduct=0072, bcdDevice=e6.1c
[  197.544847][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.547489][    T9] usb 4-1: Product: syz
[  197.548968][    T9] usb 4-1: Manufacturer: syz
[  197.550497][    T9] usb 4-1: SerialNumber: syz
[  197.679132][   T10] appletouch 2-1:32.85: Geyser mode initialized.
[  197.682911][   T10] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:32.85/input/input13
[  197.690119][    C0] appletouch 2-1:32.85: appletouch: OVERFLOW with data length 64, actual length is 64
[  197.774286][    T9] ax88179_178a 4-1:1.36: probe with driver ax88179_178a failed with error -22
[  197.782642][    T9] usb 4-1: USB disconnect, device number 24
[  198.460009][ T9623] loop3: detected capacity change from 0 to 512
[  198.477198][ T9623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.495897][ T9623] ext4 filesystem being mounted at /394/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.513636][ T9623] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 73 (only 1 groups)
[  198.550875][ T6270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.618170][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  198.618185][   T33] audit: type=1326 audit(2000000084.025:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9630 comm="syz.3.1504" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b919c799 code=0x7ffc0000
[  198.652307][   T33] audit: type=1326 audit(2000000084.025:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9630 comm="syz.3.1504" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b919c799 code=0x7ffc0000
[  198.673006][   T33] audit: type=1326 audit(2000000084.025:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9630 comm="syz.3.1504" exe="/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f21b919c799 code=0x7ffc0000
[  198.690700][   T33] audit: type=1326 audit(2000000084.025:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9630 comm="syz.3.1504" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b919c799 code=0x7ffc0000
[  198.707500][   T33] audit: type=1326 audit(2000000084.025:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9630 comm="syz.3.1504" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21b919c799 code=0x7ffc0000
[  199.350467][   T10] usb 2-1: USB disconnect, device number 17
[  199.738503][ T9659] loop1: detected capacity change from 0 to 40427
[  199.742441][ T9659] F2FS-fs (loop1): invalid crc value
[  199.774835][ T9659] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  199.778410][ T9659] F2FS-fs (loop1): Start checkpoint disabled!
[  199.786976][ T9659] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[  199.790930][   T10] appletouch 2-1:32.85: input: appletouch disconnected
[  199.793197][ T9659] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  199.819442][ T7039] kworker/u10:17: attempt to access beyond end of device
[  199.819442][ T7039] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  199.827773][ T7039] CPU: 1 UID: 0 PID: 7039 Comm: kworker/u10:17 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  199.827788][ T7039] Tainted: [L]=SOFTLOCKUP
[  199.827790][ T7039] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  199.827795][ T7039] Workqueue: writeback wb_workfn (flush-7:1)
[  199.827810][ T7039] Call Trace:
[  199.827814][ T7039]  <TASK>
[  199.827818][ T7039]  dump_stack_lvl+0xe8/0x150
[  199.827830][ T7039]  f2fs_handle_critical_error+0x37c/0x540
[  199.827841][ T7039]  f2fs_write_end_io+0xcdb/0xff0
[  199.827858][ T7039]  __submit_merged_bio+0x256/0x700
[  199.827869][ T7039]  __submit_merged_write_cond+0x3c9/0x4e0
[  199.827880][ T7039]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  199.827896][ T7039]  f2fs_write_data_pages+0x2975/0x35e0
[  199.827906][ T7039]  ? unwind_next_frame+0xa5/0x23c0
[  199.827915][ T7039]  ? lock_release+0x4b/0x3d0
[  199.827935][ T7039]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  199.827949][ T7039]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  199.827967][ T7039]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  199.827984][ T7039]  ? __lock_acquire+0x6b5/0x2cf0
[  199.827998][ T7039]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  199.828007][ T7039]  do_writepages+0x32e/0x550
[  199.828021][ T7039]  ? reacquire_held_locks+0x104/0x190
[  199.828030][ T7039]  ? writeback_sb_inodes+0x477/0x1a20
[  199.828041][ T7039]  __writeback_single_inode+0x133/0x11a0
[  199.828050][ T7039]  ? do_raw_spin_unlock+0x4d/0x210
[  199.828059][ T7039]  writeback_sb_inodes+0x992/0x1a20
[  199.828078][ T7039]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  199.828086][ T7039]  ? do_raw_spin_lock+0x12b/0x2f0
[  199.828106][ T7039]  ? rcu_is_watching+0x15/0xb0
[  199.828120][ T7039]  wb_writeback+0x456/0xb70
[  199.828131][ T7039]  ? queue_io+0x2c1/0x4a0
[  199.828142][ T7039]  ? __pfx_wb_writeback+0x10/0x10
[  199.828150][ T7039]  ? do_raw_spin_lock+0x12b/0x2f0
[  199.828162][ T7039]  wb_workfn+0x414/0xf50
[  199.828171][ T7039]  ? look_up_lock_class+0x57/0x110
[  199.828184][ T7039]  ? __pfx_wb_workfn+0x10/0x10
[  199.828192][ T7039]  ? do_raw_spin_lock+0x12b/0x2f0
[  199.828200][ T7039]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  199.828231][ T7039]  ? process_scheduled_works+0xa8d/0x18c0
[  199.828242][ T7039]  ? process_scheduled_works+0xa8d/0x18c0
[  199.828251][ T7039]  process_scheduled_works+0xb6e/0x18c0
[  199.828270][ T7039]  ? __pfx_process_scheduled_works+0x10/0x10
[  199.828282][ T7039]  ? assign_work+0x3d5/0x5e0
[  199.828292][ T7039]  worker_thread+0xa53/0xfc0
[  199.828310][ T7039]  kthread+0x388/0x470
[  199.828318][ T7039]  ? __pfx_worker_thread+0x10/0x10
[  199.828326][ T7039]  ? __pfx_kthread+0x10/0x10
[  199.828333][ T7039]  ret_from_fork+0x51e/0xb90
[  199.828343][ T7039]  ? __pfx_ret_from_fork+0x10/0x10
[  199.828351][ T7039]  ? __switch_to+0xc7d/0x1450
[  199.828365][ T7039]  ? __pfx_kthread+0x10/0x10
[  199.828373][ T7039]  ret_from_fork_asm+0x1a/0x30
[  199.828388][ T7039]  </TASK>
[  199.828849][ T7039] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  200.285410][ T9686] loop3: detected capacity change from 0 to 8
[  200.308366][ T9686] SQUASHFS error: lzo decompression failed, data probably corrupt
[  200.311392][ T9686] SQUASHFS error: Failed to read block 0x91: -5
[  200.313802][ T9686] SQUASHFS error: Unable to read metadata cache entry [8f]
[  200.316058][ T9686] SQUASHFS error: Unable to read inode 0x11f
[  200.438775][ T9686] loop3: detected capacity change from 0 to 32768
[  200.442479][ T9686] btrfs: Unknown parameter 'uid<00000000000000000000'
[  200.913265][   T33] audit: type=1326 audit(2000000086.440:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9698 comm="syz.1.1533" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230679c799 code=0x7ffc0000
[  200.943310][   T33] audit: type=1326 audit(2000000086.451:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9698 comm="syz.1.1533" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230679c799 code=0x7ffc0000
[  200.964566][   T33] audit: type=1326 audit(2000000086.451:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9698 comm="syz.1.1533" exe="/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f230679c799 code=0x7ffc0000
[  200.988681][   T33] audit: type=1326 audit(2000000086.451:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9698 comm="syz.1.1533" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230679c799 code=0x7ffc0000
[  201.002083][   T33] audit: type=1326 audit(2000000086.451:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9698 comm="syz.1.1533" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230679c799 code=0x7ffc0000
[  201.269653][ T1269] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  201.281572][ T9705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1536'.
[  201.422509][ T1269] usb 2-1: Using ep0 maxpacket: 32
[  201.426871][ T1269] usb 2-1: config 0 has an invalid interface number: 231 but max is 0
[  201.430515][ T1269] usb 2-1: config 0 has no interface number 0
[  201.433570][ T1269] usb 2-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  201.437633][ T1269] usb 2-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  201.446178][ T1269] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  201.449777][ T1269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.453989][ T1269] usb 2-1: Product: syz
[  201.456156][ T1269] usb 2-1: Manufacturer: syz
[  201.457632][ T1269] usb 2-1: SerialNumber: syz
[  201.460785][ T1269] usb 2-1: config 0 descriptor??
[  201.462918][ T9701] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  201.465311][ T9701] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  201.475840][ T1269] plusb 2-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, c6:40:3f:6d:8f:b2
[  201.784385][ T5813] usb 2-1: USB disconnect, device number 18
[  201.789444][ T5813] plusb 2-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  201.867679][ T9717] loop3: detected capacity change from 0 to 4096
[  201.871053][ T9717] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  202.853783][ T9739] netlink: 'syz.3.1545': attribute type 4 has an invalid length.
[  203.846142][ T9768] netlink: 'syz.1.1558': attribute type 9 has an invalid length.
[  203.848640][ T9768] netlink: 'syz.1.1558': attribute type 11 has an invalid length.
[  203.851070][ T9768] netlink: 'syz.1.1558': attribute type 12 has an invalid length.
[  203.855899][ T9768] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.1558'.
[  203.870905][ T9768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1558'.
[  203.886694][ T9770] vim2m vim2m.0: Fourcc format (0x42474752) invalid.
[  204.020916][ T9780] loop1: detected capacity change from 0 to 64
[  204.039505][ T9780] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  204.606948][ T9803] loop1: detected capacity change from 0 to 128
[  204.715701][ T9806] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1576'.
[  204.730587][ T9806] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.735880][ T9806] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.114803][ T9848] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  206.310176][ T9852] loop1: detected capacity change from 0 to 32768
[  206.313005][ T9852] XFS (loop1): Cannot mount filesystem with identical rtdev and ddev/logdev.
[  206.417755][ T9863] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1601'.
[  206.420832][ T9863] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1601'.
[  206.429076][ T9863] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1601'.
[  206.786091][   T33] kauditd_printk_skb: 5 callbacks suppressed
[  206.786101][   T33] audit: type=1326 audit(2000000092.613:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9873 comm="syz.1.1607" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230679c799 code=0x7ffc0000
[  206.798090][   T33] audit: type=1326 audit(2000000092.613:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9873 comm="syz.1.1607" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230679c799 code=0x7ffc0000
[  206.806402][   T33] audit: type=1326 audit(2000000092.623:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9873 comm="syz.1.1607" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230679c799 code=0x7ffc0000
[  206.813027][   T33] audit: type=1326 audit(2000000092.623:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9873 comm="syz.1.1607" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230679c799 code=0x7ffc0000
[  206.825192][   T33] audit: type=1326 audit(2000000092.623:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9873 comm="syz.1.1607" exe="/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f230679c799 code=0x7ffc0000
[  206.832709][   T33] audit: type=1326 audit(2000000092.623:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9873 comm="syz.1.1607" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230679c799 code=0x7ffc0000
[  206.842026][   T33] audit: type=1326 audit(2000000092.623:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9873 comm="syz.1.1607" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230679c799 code=0x7ffc0000
[  206.849467][   T33] audit: type=1326 audit(2000000092.634:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9873 comm="syz.1.1607" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f230679c799 code=0x7ffc0000
[  206.857381][   T33] audit: type=1326 audit(2000000092.634:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9873 comm="syz.1.1607" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f230679c799 code=0x7ffc0000
[  207.469199][ T9888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1614'.
[  207.746558][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1619'.
[  207.750731][ T9900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1619'.
[  207.779818][ T5957] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  207.797403][ T5957] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  207.800961][ T5957] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  207.823535][ T5957] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  207.951795][ T9912] loop3: detected capacity change from 0 to 512
[  207.966335][ T9912] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  207.993945][ T9912] EXT4-fs (loop3): 1 orphan inode deleted
[  207.996673][ T9912] EXT4-fs (loop3): 1 truncate cleaned up
[  208.000401][ T9912] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.011736][ T9912] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #12: block 7: comm syz.3.1625: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0
[  208.026344][ T9912] EXT4-fs (loop3): Remounting filesystem read-only
[  208.049558][ T6270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.476256][ T9927] netlink: 'syz.2.1630': attribute type 4 has an invalid length.
[  208.485102][   T24] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  208.493631][ T9927] netlink: 'syz.2.1630': attribute type 4 has an invalid length.
[  208.634093][   T24] usb 4-1: Using ep0 maxpacket: 16
[  208.640743][   T24] usb 4-1: config 0 has no interfaces?
[  208.655294][   T24] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  208.659029][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.677452][   T24] usb 4-1: Product: syz
[  208.679177][   T24] usb 4-1: Manufacturer: syz
[  208.684709][   T24] usb 4-1: SerialNumber: syz
[  208.699160][   T24] usb 4-1: config 0 descriptor??
[  208.936191][ T9919] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1627'.
[  208.944319][    T9] usb 4-1: USB disconnect, device number 25
[  209.014056][   T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  209.159113][   T10] usb 2-1: config 219 has an invalid interface number: 151 but max is 0
[  209.162429][   T10] usb 2-1: config 219 has no interface number 0
[  209.165051][   T10] usb 2-1: config 219 interface 151 has no altsetting 0
[  209.170047][   T10] usb 2-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=2d.d8
[  209.173551][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.177172][   T10] usb 2-1: Product: syz
[  209.178860][   T10] usb 2-1: Manufacturer: syz
[  209.180644][   T10] usb 2-1: SerialNumber: syz
[  209.383852][   T10] usbsevseg 2-1:219.151: USB 7 Segment device now attached
[  209.390333][   T10] usb 2-1: USB disconnect, device number 19
[  209.393711][   T10] usbsevseg 2-1:219.151: USB 7 Segment now disconnected
[  209.728800][   T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  209.881026][   T10] usb 4-1: Using ep0 maxpacket: 32
[  209.891523][   T10] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  209.895095][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.921618][   T10] usb 4-1: config 0 descriptor??
[  209.933290][ T9963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1647'.
[  209.936202][ T9963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1647'.
[  210.120582][   T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  210.125779][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  210.136213][   T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  210.141638][   T10] usb 4-1: media controller created
[  210.154296][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  210.317840][   T10] az6027: usb out operation failed. (-71)
[  210.323342][   T10] az6027: usb out operation failed. (-71)
[  210.325558][   T10] stb0899_attach: Driver disabled by Kconfig
[  210.327653][   T10] az6027: no front-end attached
[  210.327653][   T10] 
[  210.330436][   T10] az6027: usb out operation failed. (-71)
[  210.332595][   T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  210.336758][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14
[  210.343691][   T10] dvb-usb: schedule remote query interval to 400 msecs.
[  210.346145][   T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  210.353360][   T10] usb 4-1: USB disconnect, device number 26
[  210.396377][   T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  211.094295][ T9994] loop3: detected capacity change from 0 to 8192
[  211.308584][T10008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1667'.
[  211.319245][T10008] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1667'.
[  211.416900][ T5199] Bluetooth: hci1: unexpected event for opcode 0x2006
[  211.456607][T10016] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1672'.
[  212.475327][T10067] loop3: detected capacity change from 0 to 164
[  212.482761][T10067] Unable to read rock-ridge attributes
[  212.985083][T10088] IPVS: persistence engine module ip_vs_pe_@ not found
[  214.038584][T10125] veth2: entered allmulticast mode
[  214.253910][T10133] netlink: 'syz.1.1722': attribute type 4 has an invalid length.
[  214.297765][T10135] loop3: detected capacity change from 0 to 1024
[  214.313119][T10135] hfsplus: b-tree write err: -5, ino 2
[  214.337360][ T7027] hfsplus: b-tree write err: -5, ino 25
[  214.339971][ T7027] hfsplus: b-tree write err: -5, ino 4
[  214.342282][ T7027] hfsplus: b-tree write err: -5, ino 2
[  214.344574][ T7027] hfsplus: b-tree write err: -5, ino 26
[  214.413067][T10143] tmpfs: Bad value for 'nr_inodes'
[  214.491789][T10152] batadv0: entered promiscuous mode
[  215.415116][T10165] vlan2: entered promiscuous mode
[  215.417543][T10165] vlan2: entered allmulticast mode
[  215.419615][T10165] hsr_slave_1: entered allmulticast mode
[  216.034610][T10206] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1755'.
[  216.225512][T10195] loop1: detected capacity change from 0 to 32768
[  216.234609][T10195] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1750 (10195)
[  216.243818][T10195] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  216.272979][T10195] BTRFS info (device loop1): using sha256 checksum algorithm
[  216.366855][T10195] BTRFS info (device loop1): checking UUID tree
[  216.380801][T10195] BTRFS info (device loop1): allowing degraded mounts
[  216.383546][T10195] BTRFS info (device loop1): enabling free space tree
[  216.403378][T10195] BTRFS info (device loop1): enabling auto defrag
[  216.414562][T10195] BTRFS info (device loop1): force zstd compression, level 3
[  216.465624][ T5933] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  216.481892][T10244] loop3: detected capacity change from 0 to 128
[  216.485863][T10244] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  216.502968][T10244] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  216.703098][T10257] xt_ipcomp: unknown flags 1D
[  216.818190][T10267] loop1: detected capacity change from 0 to 512
[  216.828331][T10267] EXT4-fs (loop1): orphan cleanup on readonly fs
[  216.832621][T10271] overlayfs: failed to clone upperpath
[  216.835880][T10267] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #4: comm syz.1.1777: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  216.842624][T10267] loop1: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117
[  216.852583][T10267] EXT4-fs error (device loop1): ext4_quota_enable:7195: comm syz.1.1777: Bad quota inode: 4, type: 1
[  216.855889][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  216.855899][    C0] EXT4-fs (loop1): last error at time 2000000103: ext4_ext_check_inode:521: inode 4
[  216.877190][T10267] loop1: lost filesystem error report for type 5 error -117
[  216.877452][T10267] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  216.885693][T10267] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  216.888668][T10267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  216.905209][ T5933] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.918802][T10277] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1781'.
[  217.042712][T10287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1785'.
[  217.608842][T10308] loop1: detected capacity change from 0 to 32768
[  217.615815][T10308] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1795 (10308)
[  217.629410][T10308] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  217.632465][T10308] BTRFS info (device loop1): using crc32c checksum algorithm
[  217.740790][T10308] BTRFS info (device loop1): enabling ssd optimizations
[  217.743302][T10308] BTRFS info (device loop1): turning on flush-on-commit
[  217.745528][T10308] BTRFS info (device loop1): enabling free space tree
[  217.747925][T10308] BTRFS info (device loop1): enabling auto defrag
[  217.760548][T10308] BTRFS info (device loop1): use lzo compression, level 1
[  217.763439][T10308] BTRFS info (device loop1): max_inline set to 4096
[  217.826622][ T5933] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  218.891130][T10353] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  218.922455][T10353] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING
[  220.231714][T10374] loop1: detected capacity change from 0 to 512
[  220.241581][T10374] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  220.245173][T10374] EXT4-fs (loop1): orphan cleanup on readonly fs
[  220.248507][ T5956] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  220.253229][T10374] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  220.261618][T10374] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  220.264792][T10374] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #13: comm syz.1.1816: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  220.272525][T10374] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  220.273295][T10374] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1816: couldn't read orphan inode 13 (err -117)
[  220.282026][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  220.282051][    C1] EXT4-fs (loop1): last error at time 2000000106: ext4_ext_check_inode:521: inode 13
[  220.288975][T10374] loop1: lost filesystem error report for type 5 error -117
[  220.291132][T10374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  220.324024][ T5933] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.407519][ T5956] usb 4-1: Using ep0 maxpacket: 32
[  220.420504][ T5956] usb 4-1: unable to get BOS descriptor or descriptor too short
[  220.431489][ T5956] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7
[  220.444527][ T5956] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40
[  220.448335][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.451922][ T5956] usb 4-1: Product: syz
[  220.453827][ T5956] usb 4-1: Manufacturer: syz
[  220.455765][ T5956] usb 4-1: SerialNumber: syz
[  220.693545][ T5956] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  220.697958][ T5956] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  220.700840][ T5956] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  220.728272][ T5956] usb 4-1: USB disconnect, device number 27
[  221.550497][T10409] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method
[  221.606736][T10412] loop3: detected capacity change from 0 to 512
[  221.650134][T10412] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.947681][    T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  221.991027][T10425] bridge1: entered promiscuous mode
[  221.993086][T10425] bridge1: entered allmulticast mode
[  221.997138][T10425] team0: Port device bridge1 added
[  222.003182][T10425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1838'.
[  222.006225][T10425] bridge_slave_1: left allmulticast mode
[  222.008181][T10425] bridge_slave_1: left promiscuous mode
[  222.011828][T10425] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.016855][T10425] bridge_slave_0: left allmulticast mode
[  222.018968][T10425] bridge_slave_0: left promiscuous mode
[  222.021643][T10425] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.118372][    T9] usb 4-1: Using ep0 maxpacket: 16
[  222.121881][    T9] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  222.124814][    T9] usb 4-1: config 0 has no interface number 0
[  222.127230][    T9] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  222.132119][    T9] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  222.137678][    T9] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  222.140771][    T9] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  222.143904][    T9] usb 4-1: Product: syz
[  222.145511][    T9] usb 4-1: SerialNumber: syz
[  222.148952][    T9] usb 4-1: config 0 descriptor??
[  222.162140][    T9] cm109 4-1:0.8: invalid payload size 0, expected 4
[  222.169582][    T9] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input16
[  222.434920][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  222.434986][ T5956] usb 4-1: USB disconnect, device number 28
[  222.437562][    C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  222.489120][ T5956] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  222.828516][T10436] loop1: detected capacity change from 0 to 65
[  222.835922][T10436] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway
[  223.083892][ T6270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.225675][T10440] loop1: detected capacity change from 0 to 32768
[  223.257763][   T33] audit: type=1800 audit(2000000109.318:78): pid=10440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1844" name="file1" dev="loop1" ino=7 res=0 errno=0
[  223.863861][ T5956] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  224.066282][ T5956] usb 4-1: Using ep0 maxpacket: 8
[  224.079179][ T5956] usb 4-1: config 1 has an invalid interface number: 92 but max is 0
[  224.082318][ T5956] usb 4-1: config 1 has no interface number 0
[  224.115599][ T5956] usb 4-1: config 1 interface 92 has no altsetting 0
[  224.171613][ T5956] usb 4-1: New USB device found, idVendor=0856, idProduct=ac22, bcdDevice=58.52
[  224.175240][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.178463][ T5956] usb 4-1: Product: syz
[  224.186547][ T5956] usb 4-1: Manufacturer: syz
[  224.188477][ T5956] usb 4-1: SerialNumber: syz
[  224.446389][ T5956] mos7840 4-1:1.92: required endpoints missing
[  224.463116][ T5956] usb 4-1: USB disconnect, device number 29
[  224.557939][   T33] audit: type=1326 audit(2000000110.535:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10468 comm="syz.2.1856" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c9a59c799 code=0x7ffc0000
[  224.597598][   T33] audit: type=1326 audit(2000000110.535:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10468 comm="syz.2.1856" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c9a59c799 code=0x7ffc0000
[  224.608753][   T33] audit: type=1326 audit(2000000110.563:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10468 comm="syz.2.1856" exe="/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f8c9a59c799 code=0x7ffc0000
[  224.625454][   T33] audit: type=1326 audit(2000000110.563:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10468 comm="syz.2.1856" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c9a59c799 code=0x7ffc0000
[  224.634355][   T33] audit: type=1326 audit(2000000110.563:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10468 comm="syz.2.1856" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c9a59c799 code=0x7ffc0000
[  224.647115][T10477] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1858'.
[  224.651976][T10477] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1858'.
[  227.423810][T10547] loop1: detected capacity change from 0 to 32768
[  227.426874][T10547] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1886 (10547)
[  227.452331][T10547] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  227.462424][T10547] BTRFS info (device loop1): using blake2b checksum algorithm
[  227.792710][T10547] BTRFS info (device loop1): enabling ssd optimizations
[  227.795509][T10547] BTRFS info (device loop1): turning on async discard
[  227.798074][T10547] BTRFS info (device loop1): enabling free space tree
[  227.915344][ T5933] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  228.076020][T10577] loop3: detected capacity change from 0 to 2048
[  228.095339][T10577] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  228.454548][T10592] netlink: 'syz.3.1895': attribute type 10 has an invalid length.
[  228.489632][T10597] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  228.492080][T10597] batadv_slave_0: entered promiscuous mode
[  228.854986][   T33] audit: type=1326 audit(2000000114.559:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.2.1911" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c9a59c799 code=0x7ffc0000
[  228.874548][   T33] audit: type=1326 audit(2000000114.568:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.2.1911" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c9a59c799 code=0x7ffc0000
[  228.893109][   T33] audit: type=1326 audit(2000000114.568:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.2.1911" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c9a59c799 code=0x7ffc0000
[  228.906363][T10609] loop3: detected capacity change from 0 to 40427
[  228.908960][   T33] audit: type=1326 audit(2000000114.568:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.2.1911" exe="/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f8c9a59c799 code=0x7ffc0000
[  228.920073][T10609] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  228.922654][T10609] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  228.930847][   T33] audit: type=1326 audit(2000000114.568:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.2.1911" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c9a59c799 code=0x7ffc0000
[  228.941899][   T33] audit: type=1326 audit(2000000114.568:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.2.1911" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c9a59c799 code=0x7ffc0000
[  228.961763][   T33] audit: type=1326 audit(2000000114.568:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.2.1911" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c9a59c799 code=0x7ffc0000
[  228.983399][   T33] audit: type=1326 audit(2000000114.568:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.2.1911" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8c9a59c799 code=0x7ffc0000
[  228.999552][   T33] audit: type=1326 audit(2000000114.568:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.2.1911" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8c9a59c799 code=0x7ffc0000
[  229.017876][T10609] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  229.033634][T10609] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  229.036818][T10609] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  229.054955][    T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  229.223827][    T9] usb 2-1: Using ep0 maxpacket: 16
[  229.231038][    T9] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be
[  229.245125][    T9] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  229.255806][    T9] usb 2-1: Product: syz
[  229.257364][    T9] usb 2-1: Manufacturer: syz
[  229.277597][    T9] usb 2-1: SerialNumber: syz
[  229.286429][    T9] usb 2-1: config 0 descriptor??
[  229.357141][T10659] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1926'.
[  229.515684][    T9] peak_usb 2-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels)
[  229.750282][    T9] peak_usb 2-1:0.0 can0: sending command failure: -22
[  229.755445][    T9] peak_usb 2-1:0.0 can0: sending command failure: -22
[  229.768049][    T9] peak_usb 2-1:0.0 can0: sending command failure: -22
[  229.825446][T10695] ip6gretap0: refused to change device tx_queue_len
[  229.833429][    T9] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -22
[  229.972643][ T1269] usb 2-1: USB disconnect, device number 20
[  230.323147][T10720] dummy0: entered allmulticast mode
[  230.328091][T10720] dummy0: left allmulticast mode
[  230.476548][T10729] overlayfs: missing 'lowerdir'
[  231.400396][T10743] netlink: 'syz.2.1960': attribute type 1 has an invalid length.
[  231.432047][T10743] 8021q: adding VLAN 0 to HW filter on device bond1
[  231.464324][T10743] bond1: entered allmulticast mode
[  231.748901][T10752] loop3: detected capacity change from 0 to 512
[  231.773107][T10752] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  231.833295][T10752] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  231.851776][T10752] EXT4-fs (loop3): 1 truncate cleaned up
[  231.856887][T10752] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  231.918690][ T6270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.363248][T10800] 9p: Bad value for 'rfdno'
[  233.486141][T10799] loop3: detected capacity change from 0 to 32768
[  233.533601][   T33] audit: type=1800 audit(2000000118.929:93): pid=10799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1984" name="file1" dev="loop3" ino=7 res=0 errno=0
[  233.558567][T10804] netlink: 'syz.1.1987': attribute type 1 has an invalid length.
[  233.561718][T10804] netlink: 'syz.1.1987': attribute type 7 has an invalid length.
[  233.572819][T10804] netlink: 'syz.1.1987': attribute type 8 has an invalid length.
[  233.578746][T10804] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1987'.
[  234.177688][T10799] ERROR: (device loop3): dbAdjCtl: the maximum free buddy is not the old root
[  234.177688][T10799] 
[  234.182268][T10799] ERROR: (device loop3): remounting filesystem as read-only
[  234.279755][ T6270] ------------[ cut here ]------------
[  234.282336][ T6270] kernel BUG at fs/jfs/inode.c:175!
[  234.284383][ T6270] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  234.287033][ T6270] CPU: 1 UID: 0 PID: 6270 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  234.292078][ T6270] Tainted: [L]=SOFTLOCKUP
[  234.293629][ T6270] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  234.297428][ T6270] RIP: 0010:jfs_evict_inode+0x438/0x440
[  234.299592][ T6270] Code: fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 b3 83 d8 fe e9 16 fe ff ff e8 e9 45 6e fe 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  234.307296][ T6270] RSP: 0018:ffffc9000aa0faa0 EFLAGS: 00010293
[  234.309716][ T6270] RAX: ffffffff83575ba7 RBX: ffff8881a9648430 RCX: ffff88811351d7c0
[  234.312977][ T6270] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881a9648430
[  234.316294][ T6270] RBP: 0000000000000001 R08: ffffffff90119ab7 R09: 1ffffffff2023356
[  234.319611][ T6270] R10: dffffc0000000000 R11: ffffffff835737d0 R12: dffffc0000000000
[  234.322812][ T6270] R13: dffffc0000000000 R14: ffff8881a96480b8 R15: ffff8881a9648430
[  234.325997][ T6270] FS:  000055556b16b500(0000) GS:ffff8882a9460000(0000) knlGS:0000000000000000
[  234.329623][ T6270] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  234.332409][ T6270] CR2: 00007f8c9b34da08 CR3: 000000016c188000 CR4: 00000000000006f0
[  234.335671][ T6270] Call Trace:
[  234.337090][ T6270]  <TASK>
[  234.338307][ T6270]  ? evict+0x612/0xb10
[  234.339989][ T6270]  ? __pfx_jfs_evict_inode+0x10/0x10
[  234.342144][ T6270]  evict+0x61e/0xb10
[  234.343850][ T6270]  ? __pfx_evict+0x10/0x10
[  234.345892][ T6270]  ? do_raw_spin_lock+0x12b/0x2f0
[  234.347908][ T6270]  evict_inodes+0x75a/0x7f0
[  234.349790][ T6270]  ? __pfx_evict_inodes+0x10/0x10
[  234.351883][ T6270]  generic_shutdown_super+0xaa/0x2d0
[  234.354241][ T6270]  kill_block_super+0x44/0x90
[  234.356185][ T6270]  deactivate_locked_super+0xbc/0x130
[  234.358359][ T6270]  cleanup_mnt+0x437/0x4d0
[  234.360121][ T6270]  ? _raw_spin_unlock_irq+0x23/0x50
[  234.362242][ T6270]  task_work_run+0x1d9/0x270
[  234.364097][ T6270]  ? __pfx_task_work_run+0x10/0x10
[  234.366184][ T6270]  exit_to_user_mode_loop+0xed/0x480
[  234.368360][ T6270]  ? rcu_is_watching+0x15/0xb0
[  234.370346][ T6270]  do_syscall_64+0x32d/0xf80
[  234.372252][ T6270]  ? trace_irq_disable+0x3b/0x150
[  234.374289][ T6270]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.376710][ T6270]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  234.378945][ T6270] RIP: 0033:0x7f21b919d9d7
[  234.380692][ T6270] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  234.388029][ T6270] RSP: 002b:00007ffe4b56e708 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  234.392088][ T6270] RAX: 0000000000000000 RBX: 00007f21b9232050 RCX: 00007f21b919d9d7
[  234.395211][ T6270] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe4b56e7c0
[  234.398306][ T6270] RBP: 00007ffe4b56e7c0 R08: 00007ffe4b56f7c0 R09: 00000000ffffffff
[  234.401522][ T6270] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe4b56f850
[  234.404609][ T6270] R13: 00007f21b9232050 R14: 000000000003a5ec R15: 00007ffe4b56f890
[  234.407631][ T6270]  </TASK>
[  234.408909][ T6270] Modules linked in:
[  234.411348][ T6270] ---[ end trace 0000000000000000 ]---
[  234.480898][T10825] loop1: detected capacity change from 0 to 32768
[  234.496309][ T6270] RIP: 0010:jfs_evict_inode+0x438/0x440
[  234.498621][ T6270] Code: fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 b3 83 d8 fe e9 16 fe ff ff e8 e9 45 6e fe 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  234.506577][ T6270] RSP: 0018:ffffc9000aa0faa0 EFLAGS: 00010293
[  234.524634][ T6270] RAX: ffffffff83575ba7 RBX: ffff8881a9648430 RCX: ffff88811351d7c0
[  234.527844][ T6270] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881a9648430
[  234.531025][ T6270] RBP: 0000000000000001 R08: ffffffff90119ab7 R09: 1ffffffff2023356
[  234.535980][ T6270] R10: dffffc0000000000 R11: ffffffff835737d0 R12: dffffc0000000000
[  234.539437][ T6270] R13: dffffc0000000000 R14: ffff8881a96480b8 R15: ffff8881a9648430
[  234.542754][ T6270] FS:  000055556b16b500(0000) GS:ffff88818de60000(0000) knlGS:0000000000000000
[  234.547340][ T6270] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  234.550096][ T6270] CR2: 00007f8c9a7e7158 CR3: 000000016c188000 CR4: 00000000000006f0
[  234.553455][ T6270] Kernel panic - not syncing: Fatal exception
[  234.556714][ T6270] Kernel Offset: disabled
[  234.558530][ T6270] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:32:50  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=1ffff110478c812d RCX=0000000000080000 RDX=ffffc90009fd7000
RSI=00000000000221ba RDI=00000000000221bb RBP=ffffc900031c7700 RSP=ffffc900031c75c0
R8 =ffffffff90119ab7 R9 =1ffffffff2023356 R10=dffffc0000000000 R11=fffffbfff2023357
R12=ffff88823c640968 R13=dffffc0000000000 R14=ffff88812103bf80 R15=0000000000000001
RIP=ffffffff81b9bf3a RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f8c987f66c0 ffffffff 00c00000
GS =0000 ffff88818de60000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2fb1bff8 CR3=00000001a0776000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=00007f8c9a7ec5e8 00007f8c9a7ec618 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=00007f8c9a7ec5d0 00007f8c9a7ec610
XMM06=00007f8c9a7ec5f8 00007f8c9a7ec5c8 XMM07=00007f8c9a7ec600 00007f8c9a7ec5e0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000049 RBX=0000000000000049 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000aa0f2f0
R8 =ffff888168868237 R9 =1ffff1102d10d046 R10=dffffc0000000000 R11=ffffffff8540a0d0
R12=dffffc0000000000 R13=ffffffff9a2b6a60 R14=ffffffff9a5ce900 R15=0000000000000000
RIP=ffffffff8540a14c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556b16b500 ffffffff 00c00000
GS =0000 ffff8882a9460000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8c9b34da08 CR3=000000016c188000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 0000000000000000
XMM02=1a900300306e6170 7701ffffffffffff XMM03=0300100001c00302 100001b003401000
XMM04=0000000000000000 00007f1fcfbece80 XMM05=0120808010000180 0401000000080606
XMM06=015d8a00080001e0 0300100001d00300 XMM07=100001c003021000 01b0034010001a90
XMM08=0300306e61707701 ffffffffffffffff XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
