last executing test programs:

3m44.538564059s ago: executing program 0 (id=193):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x1003ff, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000380), 0x401, r0}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20)

3m44.437494684s ago: executing program 0 (id=194):
iopl(0x3)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x20)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0)

3m43.32698334s ago: executing program 0 (id=201):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000203302801c3317800400150004008b80080086800400b2800633018024", @ANYRES8=r0, @ANYRES64=r0], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000)

3m43.326361844s ago: executing program 0 (id=202):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000340)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7, 0x8, 0x5, 0x6, 0x1, "d25b0be968d17777b51ec6707be71748f01d99a6df8e7a37285e8ef24257c03126bb1b885de296fd8c5d16694aea9d45b535ed270e44f8fd177940c170b4792bc6ab1a41309a735b29002da38a3cdb5d1486e331c5ce4f313788f5823e8cb64f1098c3c19f763930cd00ceb31d0478a4b0bbb04fd45eed7e239d86570f9993ab"})

3m43.227253234s ago: executing program 0 (id=204):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x0, {0x1, 0x0, 0x4}, 0x4769c32eaf764bef}, 0x18)
sendmmsg$inet(r0, &(0x7f0000005d00)=[{{&(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, 0x0}}], 0x1, 0x88d0)

3m42.988675278s ago: executing program 0 (id=207):
r0 = syz_open_procfs(0x0, &(0x7f0000002100)='net/igmp\x00')
preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000000)=""/110, 0x6e}], 0x1, 0x1fd, 0x6)

3m42.825473502s ago: executing program 32 (id=207):
r0 = syz_open_procfs(0x0, &(0x7f0000002100)='net/igmp\x00')
preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000000)=""/110, 0x6e}], 0x1, 0x1fd, 0x6)

3m20.675587556s ago: executing program 1 (id=427):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

3m20.335123797s ago: executing program 1 (id=429):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(0x7fffffffe000, 0x1000, 0x2, 0x11, r0, 0x0)
migrate_pages(0x0, 0x9, &(0x7f00000000c0)=0xb, &(0x7f0000000380)=0x102)

3m20.192911175s ago: executing program 1 (id=432):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000101030000000000000000000200000306001240000400002c0001801400018008000100ac1414bb08000200e00000010c0002"], 0x48}, 0x1, 0x0, 0x0, 0x4000814}, 0x20008000)

3m20.075770372s ago: executing program 1 (id=434):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200)

3m20.012401654s ago: executing program 1 (id=435):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$sock_SIOCINQ(r0, 0x541b, 0x0)

3m19.524394103s ago: executing program 1 (id=439):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket(0x200000000000011, 0x2, 0xd)
bind$packet(r0, 0x0, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002f20702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200020095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000040000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3m19.374048918s ago: executing program 33 (id=439):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket(0x200000000000011, 0x2, 0xd)
bind$packet(r0, 0x0, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002f20702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200020095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000040000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

17.007411599s ago: executing program 2 (id=2448):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0x7}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @rand_addr=0x64010101}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @dev={0xfe, 0x80, '\x00', 0x42}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0)

17.006975779s ago: executing program 2 (id=2449):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000140)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x10, 0x5}]}, 0x10)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0x1, @loopback, 0xfffffffc}, 0x1c)
listen(r0, 0x8004)

16.927507584s ago: executing program 2 (id=2450):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r0, 0x8)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)

16.927203342s ago: executing program 2 (id=2451):
r0 = socket$packet(0x11, 0x2, 0x300)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x8010, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/17], 0x1, 0x14e0, &(0x7f0000002a80)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHEJySJIkSXJKSJokSUgMOSUhCTlOksMQksPEYJzPh5yTJq8kSXLKKez/Nb3v+/e9b+93+b7/2/f3Xdes33Xta/aa+1nrWfesmXnu+7mumZ+6Dq/VpHb1RkQk/i3w1w8pQogYIcQgIcQtQohACFEuvlx89vE8ClL+vSdhf64n0250B+xG4vnnbDz/nI3nn7Px/HM2nn/OxvPP2Xj+ORvPn7GcbPvMQrfyyrmL3//Pyfj1P2fj+edsPP+cjeefs/H8czaef87G88/ZeP45G8+fsZzsRr//zOvGrhv9/ccYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjLGe44K/RQoi/7290X4wxxhhjjDHGGPvz+Nw3ugPGGGOMMcYYY4z9zwMhhRJaBCKXyC1iRB4RK24SceJmkVfcIiLiVhEvbhP5xO0ivyggCopCIkEUFkWEESisIBGKoqKYiIo7RHFxp0gUJURJUUo4UVokibtEGXG3KCvuEeXEvaK8uE9UEBVFJVFZ3C+qiKqimnhAVBcPihqipqglaouHRB3xsKgrHhH1xKOivnhMNBCPi4biCdFIPCkai6dEE/G0aCqeEc1Ec9FCtBSt/p/y3xA9xZuil+gtUkQf0Ve8JfqJ/rkHiIFikHhbDBbviCHiXTFUDBPDxXtihHhfjBQfiFFitBgjPhRjxTgxXkwQE8UkkSo+EpPFx2KK+ERMFdPEdDFDpImZYpb4VMwWc8Rc8ZmYJz4X88UCsVAsEuniC7FYLBEZYqlYJpaLTLFCrBSrxGqxRqwV68R6sUFsFJvEZrFFbBXbxHbxpdghdopdYrfYI/aKfeIrsV98LQ6Ib0SW+Pa/mX/+n/K7gQABEiRo0JALckEMxEAsxEIcxEFeyAsRiEA8xEM+yAf5IT8UhIKQAAlQBIoALkUgICgKRSEKUSgOxSEREqEklAQHDpIgCcrA3VAWykI5KAfloTxUgIpQESpDZagCVaAaVIPqUB1qQA2oBbXgIXgIHoa6UBfqQT2oD/WhATSAhtAQGkEjaAyNoQk0gabQFJpBM2gBLaAVtILW0BraQBtoB+2gPbSHDtABkiEZOkJH6ASdoDN0hi7QBbpCV+gG3aE7vAFvwJvwJvSGGrIP9IW+0A/6wQAYCAPhbRgM78A78C4MhWEwHN6D9+B9GAnnYBSMhjEwBqrIcTAeJgDJSZAKqTAZJsMUmAJTYRpMgxmQBjNhFsyC2TAH5sBnMA8+h89hASyARZAO6bAYlkAGZMAyOA+ZsAJWwipYDWtgNayD9bAONsIm2AhbYAtsg23wJXwJO2En7IbdsBf2wlfwFXwNX8NQyIIsOAgH4RAcgsNwGI7AETgKR+EYHIPjcBxOwAk4CafgNJyCs3AWzsF5uAAX4BJcgstwGa7C1ewffplNSy1zyVwyRsbIWBkr42SczCvzyoiMyHgZL/PJfDK/zC8LyoIyQSbIIrKIRImSZCiLyqIyKqOyuCwuE2WiLClLSiedTJJJsowsI8vKsrKcvFeWl/fJCrKibOsqy8qyimznqskHZHVZXdaQNWUtWVvWlnVkHVlX1pX1ZD1ZX9aXDeTjsqHsAwPgSZk9mSZyGDSVw6GZbC5byJbyfXhWtpYjoY1sK9vJ5+VoGAUdZGuXLF+SHeV46CRfkRPgVdlFToKu8nXZTXaXPeQbsqds43rJ3nIq9JF95QzoJ/vLAXKgnA01ZfbEasl35VA5TA6X78lF8L4cKT+Qo+RoOUZ+KMfKcXK8nCAnykkyVX4kJ8uP5RT5iZwqp8npcoZMkzPlLPmpnC3nyLnyMzlPfi7nywVyoVwk0+UXcrFcIjPkUrlMLpeZcoVcKVfJ1XKNXCvXyfVyg9woN8nNcovcKrfJ7fJLuUPulLvkbrlH7pX75Fdyv/xaHpDfyCz5rTwo/yIPye/kYfm9PCJ/kEflj/KY/Ekelz/LE/IXeVKekqflGXlW/irPyfPygrwoL8nf5GV5RV6VXgoFSiqltApULpVbxag8KlbdpOLUzSqvukVF1K0qXt2m8qnbVX5VQBVUhVSCKqyKKKNQWUUqVEVVMRVVd6ji6k6VqEqokqqUcqq0SlJ3qTLqblVW3aPKqXtVeXWfqqAqqkqqsrpfVVFVVTX1gKquHlQ1VE1VS9VWD6k66mFVVz2i6qlHVX31mGqgHlcN1ROqkXpSNVZPqSbqadVUPaOaqeaqhWqpWqlnVWv1nGqj2qp26nnVXr2gOqgXVbJ6SXVUL6tO6hXVWb2quqjXVFf1uuqmuqse6oq6qrzqpXqrFNVH9VVvqX6qvxqgBqpB6m01WL2jhqh31VA1TA1X76kR6n01Un2gRqnRaoz6UI1V49R4NUFNVJNUqvpITVYfqynqEzVVTVPT1QyVpmaqAX+rNPe/kP/xv8gf8vuzb1Pb1Zdqh9qpdqndao/aq/apfWq/2q8OqAMqS2Wpg+qgOqQOqcPqsDqijqij6qg6po6p4+q4OqFOqJPqlLqozqiz6ld1Tp1X59VFdUldUpf/9jUQGrTUSmsd6Fw6t47ReXSsvknH6Zt1Xn2Ljuhbdby+TefTt+v8uoAuqAvpBF1YF9FGo7aadKiL6mI6qu/QxfWdOlGX0CV1Ke10aZ2k7/q386/XXyvdSrfWrXUb3Ua30+10e91ed9AddLJO1h11R91Jd9KddWfdRXfRXXVX3U130z10D91T99S9dC+dolN0X/2W7qf76wF6oB6k39aD9WA9RA/RQ/VQPVwP1yP0CD1Sj9Sj9Cg9Ro/RY/VYPV6P1xP1RJ2qU/VkPVlP0VP0VD1VT9fTdZpO07P0LD1bz9Zz9Vw9T8/T8/V8vVAv1Ok6XS/Wi3WGztDL9DKdqVfoFXqVXqXX6DV6nV6nN+gNepPepLfoLTpTb9fb9Q69Q+/Su/QevUfv0/v0fr1fH9AHdJbO0gf1QX1IH9KH9WF9RB/RR/VRfUwf08f1cX1Cn9An9Ul9Wp/WZ/VZfU6f0xf0BX1JX9KX9WV9VV/NvuwLZCADHeggV5AriAligtggNogL4oK8Qd4gEkSC+CA+yBfcHuQPCgQFg0JBQlA4KBKYAAMbUBAGRYNiQTS4Iyge3BkkBiWCkkGpwAWlg6TgrqBMcHdQNrgnKBfcG5QP7gsqBBWDSkHl4P6gSlA1qBY8EFQPHgxqBDWDWkHt4KGgTvBwUDd4JKgXPBrUDx4LGgSPBw2DJ4JGwZNB4+CpoEnwdNA0eCZoFjQPWgQtg1Z/an3vzxV4zvUyvU2K6WP6mrdMP9PfDDADzSDzthls3jFDzLtmqBlmhpv3zAjzvhlpPjCjzGgzxnxoxppxZryZYCaaSSbVfGQmm4/NFPOJmWqmmelmhkkzM80s86mZbeaYueYzM898buabBWahWWTSzRdmsVliMsxSs8wsN5lmhVlpVpnVZo1Za9aZ9WaD2Wg2mc1mi9lqtpnt5kuzw+w0u8xus8fsNfvMV2a/+docMN+YLPOtOWj+Yg6Z78xh8705Yn4wR82P5pj5yRw3P5sT5hdz0pwyp80Zc9b8as6Z8+aCuWgumd/MZXPFXDU+++I+++UdNWrMhbkwBmMwFmMxDuMwL+bFCEYwHuMxH+bD/JgfC2JBTMAELIJFMBshYVEsilGMYnEsjomYiCWxJDp0mIRJWAbLYFksi+WwHJbH8lgBK2AlrIT34/1YFaviA/gAPogPYk2sibWxNtbBOlgX62I9rIf1sT42wAbYEBtiI2yEjbExNsEm2BSbYjNshi2wBbbCVtgaW2MbbIPtsB22x/bYATtgMiZjR+yInbATdsbO2AW7YFfsit2wG/bAHtgTe2Iv7IUpmIJ9sS/2w344AAfgIByEg3EwDsEhOBSH4nAcjiNwBI7EkTgKR+MY/BDH4jgcjxNwIk7CVEzFyTgZp+AUnIpTcTpOxzRMw1k4C2fjbJyLc3EezsP5OB8X4kJMx3RcjIsxAzNwGS7DTMzElbgSV+NqXItrcT2ux424ETfjZtyKW3E7bscduAN34S7cg3twH+7D/bgfD+ABzMIsPIgH8RAewsN4GI/gETyKR/EYHsPjeBxP4Ak8iSfxNJ7Gs3gWz+E5vIAX8BL+hpfxCl5FjzE2j421N9k4e7PNa2+x/xwXtIVsgi1si1hj89sC/xCjtTbRlrAlbSnrbGmbZO/6Q1zBVrSVbGV7v61iq9pqf4jr2IdtXfuIrWcftbXtQ/8Q17eP2Qb2advQPmMb2ea2sW1pm9inbVP7jG1mm9sWtqVtb1+wHeyLNtm+ZDval/8QL7ZL7Hq7wW60m+x++7W9YC/aY/Yne8n+ZnvZ3naQfdsOtu/YIfZdO9QO+0M8xn5ox9pxdrydYCfaSX+Ip9sZNs3OtLPsp3a2nfOHON1+YefZDDvfLrAL7aLf4+yeMuxSu8wut5l2hV1pV9nVdo1da9f9315X2S12q91m99mv7A670+6yu+0eu/f3OPs8DthvbJb91h61P9pD9jt72B63R+wPv8fZ53fc/mxP2F/sSXvKnrZn7Fn7qz1nz/9+/tnnfsZesVett4KAJCnSFFAuyk0xlIdi6SaKo5spL91CEbqV4uk2yke3U34qQAWpECVQYSpChpAsEYVUlIpRlO6g4nQnJVIJKkmlyFFpSqK7qAzdTWXpHipH91J5uo8qUEWqRJXpfqpCVakaPUDV6UGqQTWpFtWmh6gOPUx16RGqR49SfXqMGtDj1JCeoEb0JDWmp6gJPU1N6RlqRs2pBbWkVvQstabnqA21pXb0PLWnF6gDvUjJ9BJ1pJepE71CnelV6kKvUVd6nbpRd+pBb1BPepN6UW9KoT7Ul96iftSfBtBAGkRv02B6h4bQuzSUhtFweo9G0Ps0kj6gUTSaxtCHNJbG0XiaQBNpEqXSRzSZPqYp9AlNpWk0nWZQGs2kWfQpzaY5NJc+o3n0Oc2nBbSQFlE6fUGLaQll0FJaRsspk1bQylxCCFpDa2kdracNtJE20WbaQltpG22nL2kH7aRdtJv20F7aR1/RfvqaDtA3lEXf0kH6Cx2i7+gwfU9H6Ac6Sj/SMfqJjtPPdIJ+oZN0ik7TGTpLv9I5Ok8X6CJdot/oMl2hq+RJhBDKUIU6DMJcYe4wJswTxoY3hXHhzWHe8JYwEt4axoe3hfnC28P8YYGwYFgoTAgLh0VCE2JoQwrDsGhYLIyGd4TFwzvDxLBEWDIsFbqwdJgU3hWWCe8Oy4b3hOXCe8Py4X1hhbBiWCmsHN4fVgmrhtXCB8Lq4YNhjbBmWCusHT4U1gkfDuuGj4T1wkfDsuFjYYPw8bBh+ETYKHwybBw+FTYJnw6bhs+EzcLmYYuwZdgqfDZsHT4Xtgnbhu3C58P24Qthh/DFMDl8KewYvnzd4ylhn7Bv+Fb4Vuj9I2phdFE0PfpFdHF0STQjujS6LLo8mhldEV0ZXRVdHV0TXRtdF10f3RDdGN0U3RzdEt0a3Rb1vnZu4cBJp5x2gcvlcrsYl8fFuptcnLvZ5XVVl0fcrS7e3ebyudtdflfAFXSFXIIr7Io449BZRy50RV0xF3V3uOLuTpfoSriSrpRzrrRLci1dK9fKtXbPuTaurWvnnnfPuxfcC+5F96J7yXV0L7tO7hXX2b3qurjX3GvuddfNdXc93Buup3vT9XK9XYpLcX1dX9fP9XMD3AA3yA1yg91gN8QNcUPdUDfcDXcj3Ag30o10o9woN8aNcWPdWDfejXcT3USX6lLdZDfZTXFT3FQ31U13012aS3Oz3Cw32812c91cN8/Nc/PdfLfQLXTpLt0tdotdhstwy9wyl+ky3Uq30q12q91at9atd+vdRrfRbXab3Va31W13290Ot8PtcrvcHrfH7XP73H633x1wB1yWy3IH3UF3yB1yh9337oj7wR11P7pj7id33P3sTrhf3El3yp12Z9xZ96s75867C+6iu+R+c5fdFXfVeZca+SgyOfJxZErkk8jUyLTI9MiMSFpkZmRW5NPI7MicyNzIZ5F5kc8j8yMLIgsjiyLpkS8iiyNLIhmRpZFlkeWRzMiKyMrIqsjqyJqI94V3hL6oL+aj/g5f3N/pE30JX9KX8s6X9kn+Ll/G3+3L+nt8OX+vL+/v8xV8RV/JP+Ob+ea+hW/pW/lnfWv/nG/j2/p2/nnf3r/gO/gXfbJ/yXf0L/tO/hXf2b/qu/jXfFf/uu/mu/se/g3f07/pe/nePsX38X39W76f7+8H+IF+kH/bD/bv+CH+XT/UD/PD/Xt+hH/fj/Qf+FF+tB/jP/Rj/Tg/3k/wE/0kn+o/8pP9x36K/8RP9dP8dD/Dp/mZfpb/1M/2c/xc/5mf5z/38/0Cv9Av8un+C7/YL/EZfqlf5pf7TL/Cr/Sr/Gq/xq/16/x6v8Fv9Jv8Zr/Fb/Xb/Hb/pd/hd/pdfrff4/f6ff4rv99/7Q/4b3yW/9Yf9H/xh/x3/rD/3h/xP/ij/kd/zP/kj/uf/Qn/iz/pT/nT/ow/63/15/x5f8Ff9Jf8b/6yv+Kv8t+sMcYYY4z9l6jrHO/zLz4n/7ay9RVC3Lyz0JF/rrk5/1/3/WVC+4gQ4qXeXZ/8+6pRIyUl5W+PzVQiKLZACBG5lp992/v3eIVoJ14QyaKtKPMv++svu1+i69SP3itE7H/IiRHX4mv17/5P6o+bd936C4RILHYtJ4+4Fl+rX/Y/qV+g9XXq5/kuVYg2/yEnTlyLr9VPEs+Jl0XyPzySMcYYY4wxxhj7q/6yUufr3d9m358n6Gs5ucW1+Hr354wxxhhjjDHGGLvxXu3e48Vnk5PbduYNb3jz39zECCH+F7TxP7K50b+ZGGOMMcYYY3+2axf9N7oTxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMs5/r/8e/EbvQ5MsYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYzfa/wkAAP//uyUzjQ==")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x6, 0x11, r1, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x8, 0x1}, 0x1c)
mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0)
mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000007000/0x1000)=nil)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)

16.693256987s ago: executing program 2 (id=2453):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x3c}, 0x28)

15.737469936s ago: executing program 2 (id=2456):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@int={0x4, 0x0, 0x0, 0x1, 0x0, 0x37, 0x0, 0x7a, 0x1}]}, {0x0, [0x61, 0x2e, 0x5f]}}, 0x0, 0x2d, 0x0, 0x1}, 0x28)

15.582415619s ago: executing program 34 (id=2456):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@int={0x4, 0x0, 0x0, 0x1, 0x0, 0x37, 0x0, 0x7a, 0x1}]}, {0x0, [0x61, 0x2e, 0x5f]}}, 0x0, 0x2d, 0x0, 0x1}, 0x28)

2.018402271s ago: executing program 3 (id=2635):
r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f00000004c0), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR")
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_SEND(r0, 0xd0009411, &(0x7f0000000180)={{r1}, 0x0, 0x0, 0x6, 0x3, 0x1})

736.045664ms ago: executing program 3 (id=2641):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
modify_ldt$write(0x1, 0x0, 0x0)

664.70676ms ago: executing program 5 (id=2642):
r0 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_mreqn(r0, 0x6a, 0x4, 0x0, &(0x7f00000000c0)=0x5c)

664.499225ms ago: executing program 4 (id=2643):
request_key(&(0x7f00000010c0)='.dead\x00', 0x0, 0x0, 0x0)

602.450476ms ago: executing program 4 (id=2644):
r0 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x6a, 0x10, 0x0, &(0x7f00000003c0)=0x54)

602.119333ms ago: executing program 5 (id=2645):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x480}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0)

601.95345ms ago: executing program 4 (id=2646):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r0, &(0x7f00000000c0), 0x0}, 0x20)

464.011077ms ago: executing program 4 (id=2647):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000ffff26bd7000fddbdf2700000000", @ANYRES32=0x0, @ANYBLOB="100a0500230000001c0012800b00010062726964676500000c000280080003000a04"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c)

463.476828ms ago: executing program 5 (id=2648):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file2\x00', 0x101c08a, &(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC], 0x6, 0x2c1, &(0x7f0000000440)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x105040, 0x198)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f00000001c0)='.\x00', 0x10000100)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000400))

323.393796ms ago: executing program 5 (id=2649):
r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='\x00', 0x1, 0xfffffffffffffffe)
keyctl$update(0x2, r0, &(0x7f0000000140)="c4", 0x1)

322.740054ms ago: executing program 4 (id=2650):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "b928a7020253641e", "e282d495ff61cdd0c6df00e85dc14e09", "7ec8b2c1", "39ab3e87f65cfcb9"}, 0x28)
sendto$inet6(r0, &(0x7f0000000740)="7bdf9a3fcc87b9af689dc4fbb36e31f3498ba86ca470ca148f51b68f", 0x1c, 0x8000, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000)
sendto$inet6(r0, &(0x7f0000000300)="e100000000d6", 0x3e, 0x8040, 0x0, 0x0)
write$binfmt_elf64(r0, 0x0, 0x78)

256.286293ms ago: executing program 5 (id=2651):
r0 = syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file1\x00', 0x208008de, &(0x7f0000000b40)=ANY=[], 0x80, 0x150a, &(0x7f0000002080)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x81)
sendfile(r0, r1, 0x0, 0x800000006)

193.573222ms ago: executing program 3 (id=2652):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file2\x00', 0x80, &(0x7f00000006c0)=ANY=[], 0x7d, 0x1507, &(0x7f0000001800)="$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")
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000002c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x1)
rename(&(0x7f0000000140)='./file2\x00', &(0x7f0000001880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

192.753798ms ago: executing program 5 (id=2653):
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$rds(0xffffffffffffffff, 0x0, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00008a7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
io_uring_setup(0x47, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"})
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close(r4)
r5 = socket$kcm(0x2, 0x2, 0x0)
r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x50800, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r6, 0xc0bc5310, &(0x7f0000000100))
sendmsg$NFNL_MSG_ACCT_GET(r4, 0x0, 0x20008814)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, 0x0, &(0x7f0000000080)=r4}, 0x20)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x541b, 0x0)
r8 = userfaultfd(0x800)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})

86.233071ms ago: executing program 3 (id=2654):
socket(0x10, 0x803, 0x0)
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x88)
socket(0x2, 0x3, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000))

13.585439ms ago: executing program 3 (id=2655):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@struct={0x5, 0x2, 0x0, 0xf, 0x0, 0xffffffff, [{0x1000a, 0x0, 0x80003}, {0xc, 0x80003, 0xfffffffc}]}]}, {0x0, [0x0, 0x0, 0x30, 0x0, 0x2e]}}, 0x0, 0x43, 0x0, 0x7, 0x6}, 0x28)

13.281131ms ago: executing program 3 (id=2656):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201410130f56920ac05190272f0010203010902"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'sit0\x00'})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1a, 0xf, 0x0, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x3a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a4}, 0x94)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x3)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0)
syz_emit_ethernet(0xa1, &(0x7f0000000680)={@local, @random="7f9cc9043860", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "1b9646", 0x6b, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x20, 0x0, 0x0, 0x3, {[@timestamp={0x8, 0xa, 0x5}, @exp_fastopen={0xfe, 0x4}]}}, {"07ba9b3d1232374337a71724b55e8fe795bb204cb36fb25e2cba74ad74f6cec23a04e0a51dd123c23e46ea2b861877459eee686ca173da58841705ce812893bd5e1b5db6b1ce53"}}}}}}}, 0x0)

0s ago: executing program 4 (id=2657):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000140)=0x881)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000000a80)='h'})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

kernel console output (not intermixed with test programs):

 usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  180.387374][ T8702] 8021q: adding VLAN 0 to HW filter on device bond0
[  180.421390][ T8704] SET target dimension over the limit!
[  180.444691][    T9] usb 5-1: Using ep0 maxpacket: 32
[  180.450178][    T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  180.453877][    T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  180.471457][    T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  180.475078][    T9] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  180.479770][    T9] usb 5-1: Product: syz
[  180.481162][    T9] usb 5-1: Manufacturer: syz
[  180.493836][    T9] hub 5-1:4.0: USB hub found
[  180.626445][ T8709] netlink: 'syz.2.1188': attribute type 21 has an invalid length.
[  180.714481][    T9] hub 5-1:4.0: config failed, hub has too many ports! (err -19)
[  180.923013][ T8717] TCP: TCP_TX_DELAY enabled
[  180.981144][ T8719] loop2: detected capacity change from 0 to 512
[  180.997819][ T8719] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0022]
[  181.003463][ T8719] System zones: 1-12
[  181.011249][ T8719] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.1193: Directory hole found for htree index block 0
[  181.018129][ T8719] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  181.023731][ T8719] EXT4-fs (loop2): Remounting filesystem read-only
[  181.026865][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  181.026883][    C1] EXT4-fs (loop2): initial error at time 202: dx_probe:791: inode 2
[  181.026897][    C1] EXT4-fs (loop2): last error at time 202: dx_probe:791: inode 2
[  181.035245][    T9] usb 5-1: USB disconnect, device number 12
[  181.038544][ T8719] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117
[  181.042684][ T8719] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  181.065008][ T8719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.066566][ T8725] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  181.132856][ T5692] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.534983][ T1284] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  181.593700][ T8736] loop3: detected capacity change from 0 to 40427
[  181.598082][ T8736] F2FS-fs: heap/no_heap options were deprecated
[  181.624688][ T8736] F2FS-fs (loop3): Encrypt feature is off
[  181.686969][ T1284] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  181.702977][ T1284] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  181.724562][ T1284] usb 3-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00
[  181.728199][ T1284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.763000][ T8747] loop3: detected capacity change from 0 to 128
[  181.766639][ T1284] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx
[  181.799816][ T8747] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  181.823127][ T8747] EXT4-fs error (device loop3): swap_inode_boot_loader:388: inode #5: comm syz.3.1204: iget: checksum invalid
[  181.861043][ T6118] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  181.940398][ T8756] syzkaller1: entered promiscuous mode
[  181.942747][ T8756] syzkaller1: entered allmulticast mode
[  182.161902][ T8762] loop3: detected capacity change from 0 to 4096
[  182.201350][ T8764] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  182.203489][ T5756] usb 3-1: USB disconnect, device number 23
[  182.240883][ T2417] usb 3-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2
[  182.254517][ T2417] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw
[  182.803572][ T8772] loop2: detected capacity change from 0 to 2048
[  182.858546][ T8772] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.939498][ T5692] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.071994][ T8778] loop2: detected capacity change from 0 to 256
[  183.405498][ T8788] Line length is too long: Should be less than 4094
[  183.496889][   T32] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  183.641335][ T8786] loop3: detected capacity change from 0 to 32768
[  183.646033][ T8786] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1220 (8786)
[  183.658198][   T32] usb 5-1: Using ep0 maxpacket: 16
[  183.666961][   T32] usb 5-1: unable to get BOS descriptor or descriptor too short
[  183.676465][   T32] usb 5-1: config 3 has an invalid interface number: 227 but max is 0
[  183.685050][   T32] usb 5-1: config 3 has no interface number 0
[  183.689234][   T32] usb 5-1: config 3 interface 227 altsetting 1 has an endpoint descriptor with address 0xC3, changing to 0x83
[  183.694575][   T32] usb 5-1: config 3 interface 227 altsetting 1 bulk endpoint 0xD has invalid maxpacket 8
[  183.698116][   T32] usb 5-1: config 3 interface 227 has no altsetting 0
[  183.705508][ T8786] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  183.709666][ T8786] BTRFS info (device loop3): using blake2b checksum algorithm
[  183.713914][   T32] usb 5-1: New USB device found, idVendor=eb1a, idProduct=a313, bcdDevice=f8.c6
[  183.720319][   T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.731580][   T32] usb 5-1: Product: syz
[  183.733222][   T32] usb 5-1: Manufacturer: syz
[  183.737058][   T32] usb 5-1: SerialNumber: syz
[  183.760498][ T8783] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  183.806335][ T8786] BTRFS info (device loop3): enabling ssd optimizations
[  183.808986][ T8786] BTRFS info (device loop3): turning on async discard
[  183.811926][ T8786] BTRFS info (device loop3): enabling free space tree
[  183.814163][ T8786] BTRFS info (device loop3): use zstd compression, level 3
[  183.961396][ T6118] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  183.998185][   T32] em28xx 5-1:3.227: error: skipping audio endpoint 0x83, because it uses bulk transfers !
[  184.015183][   T32] usb 5-1: USB disconnect, device number 13
[  184.332874][ T8816] loop3: detected capacity change from 0 to 512
[  184.380846][ T8816] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.411958][ T8816] EXT4-fs error (device loop3): ext4_get_inode_usage:888: inode #12: comm syz.3.1227: corrupted xattr block 6: invalid header
[  184.423268][ T8816] EXT4-fs (loop3): Remounting filesystem read-only
[  184.461186][ T6118] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.462594][ T1110] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  184.474183][ T1110] __quota_error: 357 callbacks suppressed
[  184.474198][ T1110] Quota error (device loop3): write_blk: dquota write failed
[  184.481872][ T1110] Quota error (device loop3): free_dqentry: Can't write quota data block 5
[  184.597127][ T8823] veth0_macvtap: entered allmulticast mode
[  184.833175][ T8833] Cannot find del_set index 1 as target
[  184.946734][   T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  184.962130][ T8843] erofs (device nbd3): cannot find valid erofs superblock
[  185.097686][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  185.101804][   T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  185.105977][   T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  185.109818][   T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  185.118953][   T10] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  185.122601][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.324565][   T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  185.474703][   T24] usb 4-1: Using ep0 maxpacket: 8
[  185.478842][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  185.482807][   T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 15
[  185.489775][   T24] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  185.493384][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.496676][   T24] usb 4-1: Product: syz
[  185.498727][   T24] usb 4-1: Manufacturer: syz
[  185.500562][   T24] usb 4-1: SerialNumber: syz
[  185.505146][   T24] usb 4-1: config 0 descriptor??
[  185.544983][   T24] usb 5-1: USB disconnect, device number 14
[  185.717205][ T1284] usb 4-1: USB disconnect, device number 22
[  186.100032][ T8853] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size.
[  187.179227][ T8890] loop3: detected capacity change from 0 to 32768
[  187.194007][ T8890] JBD2: Ignoring recovery information on journal
[  187.220771][ T8890] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  187.376691][ T6118] ocfs2: Unmounting device (7,3) on (node local)
[  187.585543][ T8896] loop3: detected capacity change from 0 to 2048
[  187.593082][ T8896] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  187.603045][ T6362] udevd[6362]: incorrect nilfs2 checksum on /dev/loop3
[  187.640804][ T8899] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  187.908612][ T8898] loop4: detected capacity change from 0 to 40427
[  187.932139][ T8898] F2FS-fs (loop4): build fault injection rate: 25
[  187.937242][ T8898] F2FS-fs (loop4): build fault injection type: 0x3b4c63
[  187.947869][ T8898] F2FS-fs (loop4): invalid crc value
[  187.956691][ T8898] F2FS-fs (loop4): inject kmalloc in f2fs_kmalloc of f2fs_build_segment_manager+0x30d2/0x4a30
[  187.967387][ T8898] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-12)
[  188.161280][ T8916] loop2: detected capacity change from 0 to 4096
[  188.167335][ T8916] EXT4-fs: Ignoring removed mblk_io_submit option
[  188.202215][ T8916] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  188.212391][ T8916] EXT4-fs (loop2): Test dummy encryption mode enabled
[  188.227919][ T8916] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2842c199, mo2=0002]
[  188.233470][ T8916] System zones: 0-5
[  188.260244][ T8916] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  188.325772][ T5692] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.587119][ T8929] net_ratelimit: 165 callbacks suppressed
[  188.587138][ T8929] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  188.588941][ T8914] loop3: detected capacity change from 0 to 32768
[  188.657110][ T8914]  loop3: p1 p3 < >
[  188.818941][ T8935] loop4: detected capacity change from 0 to 32768
[  188.838184][ T8935] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  189.060139][ T7139] udevd[7139]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  189.083466][ T6362] udevd[6362]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  189.091684][ T8931] loop2: detected capacity change from 0 to 32768
[  189.107117][ T8931] 
[  189.107117][ T8931]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  189.107117][ T8931] 
[  189.581874][ T8935] syz.4.1277 (8935) used greatest stack depth: 19688 bytes left
[  189.653240][ T5692] 
[  189.653240][ T5692]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  189.653240][ T5692] 
[  189.671679][ T5692] 
[  189.671679][ T5692]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  189.671679][ T5692] 
[  189.867701][ T8952] ubi0: attaching mtd0
[  189.884260][ T8952] ubi0: scanning is finished
[  189.891738][ T8952] ubi0: empty MTD device detected
[  189.968342][ T6803] ocfs2: Unmounting device (7,4) on (node local)
[  190.083218][ T8956] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1286'.
[  190.175046][ T8962] team0: Device wg0 is of different type
[  190.188125][ T8962] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[  190.270884][ T8952] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  190.273947][ T8952] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  190.277063][ T8968] loop3: detected capacity change from 0 to 512
[  190.279103][ T8952] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  190.279155][ T8952] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  190.279165][ T8952] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  190.279173][ T8952] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  190.279182][ T8952] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 890083939
[  190.296181][ T8952] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  190.307185][ T8969] ubi0: background thread "ubi_bgt0d" started, PID 8969
[  190.308757][ T8968] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1291: bg 0: block 393: padding at end of block bitmap is not set
[  190.318029][ T8968] loop3: lost filesystem error report for type 5 error -117
[  190.324461][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  190.329924][    C0] EXT4-fs (loop3): initial error at time 212: ext4_validate_block_bitmap:441
[  190.333273][    C0] EXT4-fs (loop3): last error at time 212: ext4_validate_block_bitmap:441
[  190.345544][ T8968] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  190.352864][ T8968] loop3: lost filesystem error report for type 5 error -117
[  190.353801][ T8968] EXT4-fs (loop3): 2 truncates cleaned up
[  190.360008][ T8968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.388054][ T6118] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.572193][ T8982] loop3: detected capacity change from 0 to 4096
[  190.581453][ T8982] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  190.584603][ T8982] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal
[  190.675165][ T8966] loop4: detected capacity change from 0 to 40427
[  190.677989][ T8966] F2FS-fs (loop4): Small segment_count (20 < 1 * 24)
[  190.678031][ T8966] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  190.678229][ T8966] F2FS-fs (loop4): build fault injection rate: 16
[  190.678238][ T8966] F2FS-fs (loop4): build fault injection type: 0x7698c
[  190.678770][ T8966] F2FS-fs (loop4): invalid crc value
[  190.685788][ T8966] F2FS-fs (loop4): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21c/0xd00
[  190.686228][ T8966] F2FS-fs (loop4): SIT is corrupted node# 2 vs 7
[  190.692027][ T8966] loop4: lost filesystem error report for type 5 error -117
[  190.692042][ T8966] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117)
[  191.086048][ T9007] loop3: detected capacity change from 0 to 128
[  191.145408][ T9010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1307'.
[  191.168796][ T9007] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  191.192084][ T9007] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  191.338396][ T9013] xt_hashlimit: size too large, truncated to 1048576
[  191.381257][   T33] audit: type=1800 audit(213.318:385): pid=9011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1306" name="file1" dev="loop3" ino=94 res=0 errno=0
[  191.670752][ T9020] loop2: detected capacity change from 0 to 128
[  191.729009][ T9020] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  191.736112][ T9020] hpfs: filesystem error: improperly stopped
[  191.738280][ T9020] hpfs: You really don't want any checks? You are crazy...
[  191.741413][ T9020] hpfs: hpfs_map_sector(): read error
[  191.743140][ T9020] hpfs: code page support is disabled
[  191.751060][ T9020] hpfs: hpfs_map_4sectors(): unaligned read
[  191.753118][ T9020] hpfs: hpfs_map_4sectors(): unaligned read
[  191.755698][ T9020] hpfs: filesystem error: unable to find root dir
[  191.826979][ T1284] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  191.984928][ T1284] usb 4-1: Using ep0 maxpacket: 8
[  191.997730][ T1284] usb 4-1: New USB device found, idVendor=0409, idProduct=0063, bcdDevice=ff.7b
[  192.003292][ T1284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.005656][ T9030] ptrace attach of "/syz-executor exec"[6803] was attempted by ""[9030]
[  192.007668][ T1284] usb 4-1: Product: syz
[  192.010728][ T1284] usb 4-1: Manufacturer: syz
[  192.012680][ T1284] usb 4-1: SerialNumber: syz
[  192.027416][ T1284] usb 4-1: config 0 descriptor??
[  192.033593][ T1284] upd78f0730 4-1:0.0: upd78f0730 converter detected
[  192.047870][ T1284] usb 4-1: upd78f0730 converter now attached to ttyUSB0
[  192.202652][ T9038] input: syz1 as /devices/virtual/input/input9
[  192.257553][ T1284] usb 4-1: USB disconnect, device number 23
[  192.268676][ T1284] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0
[  192.276458][ T1284] upd78f0730 4-1:0.0: device disconnected
[  192.534222][ T9042] loop4: detected capacity change from 0 to 32768
[  192.546746][ T9042] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  192.614816][ T9042] syz.4.1320 (9042) used greatest stack depth: 19208 bytes left
[  192.653040][ T6803] ocfs2: Unmounting device (7,4) on (node local)
[  192.776772][ T9046] syzkaller0: entered promiscuous mode
[  192.781776][ T9046] syzkaller0: entered allmulticast mode
[  192.953334][ T9054] netlink: 1404 bytes leftover after parsing attributes in process `syz.3.1325'.
[  192.993337][ T9058] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1327'.
[  193.208033][ T9070] binder: 9069:9070 ioctl c038586a 200000000180 returned -22
[  193.335764][ T9076] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1336'.
[  193.392732][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1337'.
[  193.466900][ T9080] tmpfs: Bad value for 'grpquota_inode_hardlimit'
[  193.593480][   T24] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  193.697549][   T24] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  194.030992][ T9103] nbd: must specify a size in bytes for the device
[  194.228853][ T9102] loop3: detected capacity change from 0 to 32768
[  194.258716][ T9102] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  194.301000][ T9102] XFS (loop3): Starting recovery (logdev: internal)
[  194.329689][ T9102] XFS (loop3): Ending recovery (logdev: internal)
[  194.382487][ T6118] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  194.653580][ T1376] ieee802154 phy0 wpan0: encryption failed: -22
[  194.656119][ T1376] ieee802154 phy1 wpan1: encryption failed: -22
[  194.677924][ T9138] tipc: Started in network mode
[  194.683459][ T9138] tipc: Node identity 5f0000000000000008, cluster identity 4711
[  195.954528][   T24] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[  196.106558][   T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  196.110357][   T24] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  196.115917][   T24] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00
[  196.121408][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.241617][ T9222] bridge0: port 3(veth0) entered blocking state
[  196.247567][ T9222] bridge0: port 3(veth0) entered disabled state
[  196.250485][ T9222] veth0: entered allmulticast mode
[  196.255433][ T9222] veth0: entered promiscuous mode
[  196.436945][ T9228] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1361'.
[  196.440554][ T9228] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1361'.
[  196.551879][   T24] dvb_ttusb_budget: ttusb_init_controller: error
[  196.562596][   T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  196.642348][   T24] DVB: Unable to find symbol stv0299_attach()
[  196.671707][   T24] DVB: Unable to find symbol tda8083_attach()
[  196.675976][   T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  196.715026][ T5695] Bluetooth: hci0: command 0x0406 tx timeout
[  197.557268][ T9249] loop4: detected capacity change from 0 to 131072
[  197.563949][ T9249] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0)
[  197.567599][ T9249] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  197.572063][ T9249] F2FS-fs (loop4): invalid crc value
[  197.625894][ T9249] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  197.637406][ T9249] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  197.639849][ T9249] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  198.733216][    T9] usb 4-1: USB disconnect, device number 24
[  199.078366][ T9280] kAFS: Can only specify source 'none' with -o dyn
[  199.414585][ T1284] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  199.566189][ T1284] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  199.571974][ T1284] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  199.580622][ T1284] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  199.587903][ T1284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.635146][ T9292] loop2: detected capacity change from 0 to 32768
[  199.802926][ T1284] usb 5-1: usb_control_msg returned -32
[  199.809507][ T1284] usbtmc 5-1:16.0: can't read capabilities
[  200.246313][ T9302] loop3: detected capacity change from 0 to 32768
[  200.263339][ T9302] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  200.287535][ T9302] XFS (loop3): Ending clean mount
[  200.313982][ T6118] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  200.393759][ T1284] usb 5-1: USB disconnect, device number 15
[  200.710514][ T9326] netlink: 'syz.3.1400': attribute type 64 has an invalid length.
[  200.718149][ T9326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1400'.
[  200.722141][ T9326] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  201.104779][ T9340] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1405'.
[  201.228949][ T9346] loop4: detected capacity change from 0 to 1024
[  201.242298][ T9346] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  201.595436][ T9352] loop4: detected capacity change from 0 to 32768
[  202.691986][ T9377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1421'.
[  202.731010][ T9379] loop3: detected capacity change from 0 to 512
[  202.733697][ T9379] EXT4-fs: Ignoring removed nobh option
[  202.740547][ T9379] fscrypt (loop3, inode 2): Error -61 getting encryption context
[  202.747032][ T9379] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61
[  202.749796][ T9379] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #13: comm syz.3.1422: inode has both inline data and extents flags
[  202.753841][ T9379] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  202.754223][ T9379] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1422: couldn't read orphan inode 13 (err -117)
[  202.757329][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  202.757341][    C0] EXT4-fs (loop3): initial error at time 224: ext4_orphan_get:1399: inode 13
[  202.757355][    C0] EXT4-fs (loop3): last error at time 224: ext4_orphan_get:1399: inode 13
[  202.769325][ T9379] loop3: lost filesystem error report for type 5 error -117
[  202.770432][ T9379] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.780822][ T9379] EXT4-fs (loop3): shut down requested (2)
[  202.808711][ T6118] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.936037][ T9385] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1424'.
[  202.949862][ T9385] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1424'.
[  203.090069][ T9391] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1427'.
[  203.456299][ T9410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1436'.
[  203.463590][ T9410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1436'.
[  203.543421][ T9393] loop3: detected capacity change from 0 to 32768
[  203.601280][ T9393] lbmIODone: I/O error in JFS log
[  203.609220][ T9393] *** Log Format Error ! ***
[  203.613254][ T9417] hpfs: hpfs_map_sector(): read error
[  203.618486][ T9393] lmLogInit: exit(-22)
[  203.623580][ T9393] lmLogOpen: exit(-22)
[  203.626039][ T9393] jfs_mount_rw failed, return code = -22
[  203.841468][ T9421] loop2: detected capacity change from 0 to 32768
[  203.848031][ T9421] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1441 (9421)
[  203.859358][ T9421] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  203.863382][ T9421] BTRFS info (device loop2): using crc32c checksum algorithm
[  204.007621][ T9421] BTRFS info (device loop2): enabling ssd optimizations
[  204.010202][ T9421] BTRFS info (device loop2): turning on async discard
[  204.014212][ T9421] BTRFS info (device loop2): enabling free space tree
[  204.165605][ T9449] loop4: detected capacity change from 0 to 256
[  204.171850][ T9449] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  204.200869][ T9449] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  204.213332][   T33] audit: type=1800 audit(226.178:386): pid=9451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1449" name="trace_pipe" dev="tracefs" ino=3804 res=0 errno=0
[  204.218276][ T5692] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  204.588774][ T9458] fuse: Bad value for 'fd'
[  207.143272][ T9522] loop3: detected capacity change from 0 to 2048
[  207.148080][ T9522] EXT4-fs: Ignoring removed i_version option
[  207.173674][ T9522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.234574][ T9522] overlayfs: failed to verify upper (/file0, ino=12, err=-28)
[  207.237318][ T9522] overlayfs: failed to verify index dir 'upper' xattr
[  207.239441][ T9522] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[  207.246211][ T9506] loop4: detected capacity change from 0 to 32768
[  207.260641][ T9506] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1468 (9506)
[  207.303365][ T6118] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.303955][ T9506] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  207.319153][ T9506] BTRFS info (device loop4): using crc32c checksum algorithm
[  207.404649][ T9506] BTRFS info (device loop4): setting nodatasum
[  207.407374][ T9506] BTRFS info (device loop4): enabling ssd optimizations
[  207.411695][ T9506] BTRFS info (device loop4): disabling tree log
[  207.417872][ T9506] BTRFS info (device loop4): turning on async discard
[  207.421874][ T9506] BTRFS info (device loop4): enabling free space tree
[  207.430605][ T9506] BTRFS info (device loop4): enabling auto defrag
[  207.549091][ T6803] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  207.814798][ T1284] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  207.964825][ T1284] usb 4-1: Using ep0 maxpacket: 16
[  207.968251][ T1284] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  207.976658][ T1284] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  207.985729][ T1284] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  207.991451][ T1284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.997012][ T1284] usb 4-1: Product: syz
[  207.999969][ T1284] usb 4-1: Manufacturer: syz
[  208.002612][ T1284] usb 4-1: SerialNumber: syz
[  208.011970][ T1284] usb 4-1: 0:2 : does not exist
[  208.053704][ T9559] CIFS: bad ip= option (1270.0.1)
[  208.057174][ T9559] CIFS: Attempting to mount (null)
[  208.209521][ T9561] netlink: 4256 bytes leftover after parsing attributes in process `syz.2.1479'.
[  208.212645][ T9561] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1479'.
[  208.219069][ T9561] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1479'.
[  208.225479][ T1284] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  208.275714][ T1284] usb 4-1: USB disconnect, device number 25
[  208.344792][ T6362] udevd[6362]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  208.417068][ T9569] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1483'.
[  208.903236][ T9559] CIFS: VFS: Error connecting to socket. Aborting operation.
[  208.925220][ T9559] CIFS: VFS: cifs_mount failed w/return code = -4
[  208.956480][ T9582] netlink: 766 bytes leftover after parsing attributes in process `syz.3.1489'.
[  209.180923][ T9596] loop3: detected capacity change from 0 to 8
[  209.212348][ T9594] team0 (unregistering): Port device team_slave_0 removed
[  209.230695][ T9594] team0 (unregistering): Port device team_slave_1 removed
[  209.465208][ T9607] netlink: 'syz.4.1502': attribute type 2 has an invalid length.
[  209.534017][ T9607] : entered promiscuous mode
[  209.965397][ T9631] loop3: detected capacity change from 0 to 512
[  209.975338][ T9631] ptrace attach of "/syz-executor exec"[9632] was attempted by "/syz-executor exec"[9631]
[  210.283120][ T9645] loop4: detected capacity change from 0 to 256
[  210.290181][ T9645] exFAT-fs (loop4): failed to read boot sector
[  210.296950][ T9645] exFAT-fs (loop4): failed to recognize exfat type
[  210.310404][ T9647] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1518'.
[  210.464236][ T9654] x_tables: duplicate underflow at hook 3
[  211.066782][ T9681] openvswitch: netlink: VXLAN extension 248 out of range max 1
[  211.183058][ T9684] loop3: detected capacity change from 0 to 1024
[  211.188746][ T9684] EXT4-fs (loop3): The Hurd can't support 64-bit file systems
[  211.346080][ T9690] tipc: Enabling <eth:lo> not permitted
[  211.348681][ T9690] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  212.458985][ T9699] loop4: detected capacity change from 0 to 32768
[  212.515326][ T9699] (syz.4.1541,9699,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  212.528245][ T9711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1547'.
[  212.583164][ T9699] (syz.4.1541,9699,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  212.610634][ T9699] (syz.4.1541,9699,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  212.627502][ T9699] JBD2: Ignoring recovery information on journal
[  212.726395][ T9699] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  212.833347][ T9729] IPv6: sit1: Disabled Multicast RS
[  212.844032][ T9729] sit1: entered allmulticast mode
[  213.443923][ T6803] ocfs2: Unmounting device (7,4) on (node local)
[  213.672683][ T9747] loop3: detected capacity change from 0 to 32768
[  213.716510][ T9747] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1564 (9747)
[  213.748021][ T9747] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  213.761443][ T9747] BTRFS info (device loop3): using sha256 checksum algorithm
[  213.767521][ T9747] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  213.841792][ T9769] netlink: 'syz.2.1568': attribute type 6 has an invalid length.
[  213.881096][ T9747] BTRFS info (device loop3): rebuilding free space tree
[  214.078451][ T9747] BTRFS info (device loop3): disabling free space tree
[  214.086154][ T9747] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  214.120402][ T9747] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  214.220809][ T9747] BTRFS info (device loop3): enabling ssd optimizations
[  214.223681][ T9747] BTRFS info (device loop3): enabling disk space caching
[  214.236471][ T9747] BTRFS info (device loop3): force clearing of disk cache
[  214.239346][ T9747] BTRFS info (device loop3): enabling auto defrag
[  214.241828][ T9747] BTRFS info (device loop3): max_inline set to 428
[  214.430816][ T9773] loop2: detected capacity change from 0 to 40427
[  214.435014][ T9773] F2FS-fs (loop2): invalid crc_offset: 4177530876
[  214.453741][ T9773] F2FS-fs (loop2): Wrong journal entry on segno 65538
[  214.475731][ T9773] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117)
[  214.547205][ T6118] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  214.605478][ T9755] loop4: detected capacity change from 0 to 32768
[  214.866921][ T9755] read_mapping_page failed!
[  214.950014][ T9755] ERROR: (device loop4): txCommit: 
[  214.950014][ T9755] 
[  215.138764][ T9790] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1575'.
[  215.289123][ T9795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1576'.
[  215.304018][ T9795] ip6tnl1: entered allmulticast mode
[  215.320342][ T9795] loop2: detected capacity change from 0 to 512
[  215.342656][ T9795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.766258][ T9806] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present
[  215.786455][ T9806] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  215.791499][ T9806] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1576: Failed to acquire dquot type 0
[  215.821704][ T9795] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present
[  215.861310][ T9795] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  215.865070][ T9795] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1576: Failed to acquire dquot type 0
[  215.917220][ T5692] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.014709][ T1284] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  216.101756][ T9823] lo: entered allmulticast mode
[  216.183819][ T1284] usb 1-1: Dual-Role OTG device on HNP port
[  216.191110][ T1284] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02
[  216.199509][ T1284] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.229297][ T1284] gspca_main: spca501-2.14.0 probing 0000:0000
[  216.233384][ T1284] gspca_spca501: reg write: error -32
[  216.245724][ T1284] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05
[  216.257239][ T9829] netlink: 'syz.3.1587': attribute type 1 has an invalid length.
[  216.261161][ T1284] spca501 1-1:1.0: probe with driver spca501 failed with error -22
[  216.273647][ T1284] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  216.397731][ T9829] 8021q: adding VLAN 0 to HW filter on device bond1
[  216.482114][ T9836] bond1: (slave geneve2): making interface the new active one
[  216.493543][ T9836] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  216.861195][ T9840] loop3: detected capacity change from 0 to 32768
[  216.888302][ T9847] xt_hashlimit: max too large, truncated to 1048576
[  216.896061][ T9840] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  216.898300][ T9847] xt_limit: Overflow, try lower: 0/0
[  216.916605][ T9840] XFS (loop3): Ending clean mount
[  216.953560][ T6118] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  218.747228][ T9892] nbd4: detected capacity change from 0 to 127
[  218.823082][ T9894] block nbd4: NBD_DISCONNECT
[  218.826759][ T9894] block nbd4: Disconnected due to user request.
[  218.872237][ T9894] block nbd4: shutting down sockets
[  218.940115][    C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  218.943893][    C0] Buffer I/O error on dev nbd4, logical block 0, async page read
[  218.951134][    C0] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2
[  218.954983][    C0] Buffer I/O error on dev nbd4, logical block 1, async page read
[  218.957952][    C0] Buffer I/O error on dev nbd4, logical block 2, async page read
[  218.960890][    C0] Buffer I/O error on dev nbd4, logical block 3, async page read
[  218.972025][   T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  218.976403][   T52] Buffer I/O error on dev nbd4, logical block 0, async page read
[  218.982874][   T52] Buffer I/O error on dev nbd4, logical block 1, async page read
[  218.986104][   T52] Buffer I/O error on dev nbd4, logical block 2, async page read
[  218.989375][   T52] Buffer I/O error on dev nbd4, logical block 3, async page read
[  218.998821][   T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  219.002650][   T52] Buffer I/O error on dev nbd4, logical block 0, async page read
[  219.010313][   T52] Buffer I/O error on dev nbd4, logical block 1, async page read
[  219.021289][   T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  219.025708][   T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  219.030078][   T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  219.034609][   T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  219.039238][   T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  219.043077][ T6362] ldm_validate_partition_table(): Disk read failed.
[  219.046612][   T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  219.050859][ T6362] Dev nbd4: unable to read RDB block 0
[  219.054479][ T6362]  nbd4: unable to read partition table
[  219.071735][ T6362] ldm_validate_partition_table(): Disk read failed.
[  219.076598][ T6362] Dev nbd4: unable to read RDB block 0
[  219.081579][ T6362]  nbd4: unable to read partition table
[  219.433386][ T9907] loop4: detected capacity change from 0 to 32768
[  219.465491][ T9907] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  219.518557][ T9907] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid bg_blkno of 0
[  219.528143][ T9907] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  219.531803][ T9907] OCFS2: File system is now read-only.
[  219.533861][ T9907] (syz.4.1615,9907,1):ocfs2_search_chain:1935 ERROR: status = -30
[  219.537450][ T9907] (syz.4.1615,9907,1):ocfs2_search_chain:2058 ERROR: status = -30
[  219.540448][ T9907] (syz.4.1615,9907,1):ocfs2_claim_suballoc_bits:2145 ERROR: status = -30
[  219.543660][ T9907] (syz.4.1615,9907,1):ocfs2_claim_suballoc_bits:2198 ERROR: status = -30
[  219.547028][ T9907] (syz.4.1615,9907,1):__ocfs2_claim_clusters:2579 ERROR: status = -30
[  219.550282][ T9907] (syz.4.1615,9907,1):__ocfs2_claim_clusters:2587 ERROR: status = -30
[  219.553413][ T9907] (syz.4.1615,9907,1):ocfs2_block_group_alloc_contig:553 ERROR: status = -30
[  219.556894][ T9907] (syz.4.1615,9907,1):ocfs2_block_group_alloc:827 ERROR: status = -30
[  219.560317][ T9907] (syz.4.1615,9907,1):ocfs2_block_group_alloc:880 ERROR: status = -30
[  219.564221][ T9907] (syz.4.1615,9907,1):ocfs2_reserve_suballoc_bits:955 ERROR: status = -30
[  219.567584][ T9907] (syz.4.1615,9907,1):ocfs2_reserve_suballoc_bits:972 ERROR: status = -30
[  219.570825][ T9907] (syz.4.1615,9907,1):ocfs2_reserve_new_metadata_blocks:1112 ERROR: status = -30
[  219.574525][ T9907] (syz.4.1615,9907,1):ocfs2_reserve_new_metadata_blocks:1135 ERROR: status = -30
[  219.578875][ T9907] (syz.4.1615,9907,1):ocfs2_expand_inline_dir:2875 ERROR: status = -30
[  219.582126][ T9907] (syz.4.1615,9907,1):ocfs2_extend_dir:3239 ERROR: status = -30
[  219.589407][ T9907] (syz.4.1615,9907,1):ocfs2_prepare_dir_for_insert:4357 ERROR: status = -30
[  219.592840][ T9907] (syz.4.1615,9907,1):ocfs2_mknod:302 ERROR: status = -30
[  219.595674][ T9907] (syz.4.1615,9907,1):ocfs2_mknod:506 ERROR: status = -30
[  219.598437][ T9907] (syz.4.1615,9907,1):ocfs2_mkdir:662 ERROR: status = -30
[  219.713326][ T6803] ocfs2: Unmounting device (7,4) on (node local)
[  219.947349][ T9922] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  219.957440][ T9922] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[  219.961655][ T9922] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  219.970581][ T9922] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[  220.286475][ T9937] netlink: 'syz.4.1627': attribute type 1 has an invalid length.
[  220.594593][   T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  220.744821][   T24] usb 5-1: Using ep0 maxpacket: 16
[  220.750722][   T24] usb 5-1: too many configurations: 123, using maximum allowed: 8
[  220.755994][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  220.767148][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  220.774259][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  220.786068][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  220.791534][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  220.797658][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  220.805491][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  220.815033][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  220.825870][   T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  220.834070][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[  220.838941][   T24] usb 5-1: SerialNumber: syz
[  220.850281][   T24] usb 5-1: config 0 descriptor??
[  220.868672][   T24] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input10
[  221.078379][ T5033] bcm5974 5-1:0.0: could not read from device
[  221.119162][ T5033] bcm5974 5-1:0.0: could not read from device
[  221.128063][   T24] usb 5-1: USB disconnect, device number 16
[  221.149838][ T5033] bcm5974 5-1:0.0: could not read from device
[  221.219082][   T33] audit: type=1400 audit(243.188:387): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=9959 comm="syz.2.1638" name="unknown" offset=16
[  221.481180][ T9975] loop2: detected capacity change from 0 to 1024
[  221.661502][ T9985] syzkaller1: entered promiscuous mode
[  221.663426][ T9985] syzkaller1: entered allmulticast mode
[  221.877541][ T9990] loop4: detected capacity change from 0 to 1024
[  222.104274][ T9997] loop4: detected capacity change from 0 to 256
[  222.314202][T10007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1658'.
[  222.882191][T10036] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0)
[  223.104690][T10043] usb 1-1: USB disconnect, device number 3
[  223.459936][T10047] loop4: detected capacity change from 0 to 128
[  223.506653][T10047] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  224.087236][T10054] loop2: detected capacity change from 0 to 32768
[  224.260904][T10054] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  224.442932][T10054] XFS (loop2): Ending clean mount
[  225.354897][ T6803] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  226.086287][ T5692] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  226.138268][T10087] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1686'.
[  227.967837][T10126] loop4: detected capacity change from 0 to 4096
[  227.988847][T10126] NILFS (loop4): invalid segment: Checksum error in segment payload
[  227.992235][T10126] NILFS (loop4): trying rollback from an earlier position
[  228.021685][T10126] NILFS (loop4): recovery complete
[  228.031780][T10127] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  228.081701][T10126] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 239 already freed
[  228.097399][T10126] NILFS (loop4): error -2 preparing GC: cannot delete virtual blocks from DAT file
[  228.326797][T10133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  228.535553][T10148] loop2: detected capacity change from 0 to 2048
[  228.565270][T10149] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  228.586693][    T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  228.710299][T10155] loop2: detected capacity change from 0 to 512
[  228.717902][T10155] ext4: Bad value for 'min_batch_time'
[  228.754516][    T9] usb 5-1: Using ep0 maxpacket: 8
[  228.760118][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  228.767503][    T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  228.771553][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.785355][    T9] usb 5-1: config 0 descriptor??
[  228.786972][T10155] loop2: detected capacity change from 0 to 512
[  229.010469][    T9] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  229.335416][   T24] usb 5-1: USB disconnect, device number 17
[  229.335485][    C0] iowarrior 5-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19
[  229.917466][T10183] input: syz0 as /devices/virtual/input/input11
[  230.342430][T10204] loop4: detected capacity change from 0 to 512
[  230.356471][T10204] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  230.383357][T10204] EXT4-fs (loop4): 1 truncate cleaned up
[  230.387302][T10204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  231.327091][ T6803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.785508][    T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  231.824620][ T1284] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[  231.934557][    T9] usb 4-1: Using ep0 maxpacket: 32
[  231.943658][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  231.948640][    T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 17955, setting to 1024
[  231.953021][    T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 28, changing to 7
[  231.960228][    T9] usb 4-1: config 1 interface 2 has no altsetting 0
[  231.966171][    T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  231.969387][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.974730][    T9] usb 4-1: Product: syz
[  231.976500][    T9] usb 4-1: Manufacturer: syz
[  231.981756][    T9] usb 4-1: SerialNumber: syz
[  231.989569][ T1284] usb 5-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40
[  231.993441][ T1284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.001726][ T1284] usb 5-1: Product: syz
[  232.007202][ T1284] usb 5-1: Manufacturer: syz
[  232.013300][ T1284] usb 5-1: SerialNumber: syz
[  232.033596][T10239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  232.234148][ T1284] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  232.279158][ T1284] usb 5-1: USB disconnect, device number 18
[  232.283004][    T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  232.286591][    T9] usb 4-1: 2:1 : unsupported sample bitwidth 10 in 255 bytes
[  232.289342][    T9] usb 4-1: selecting invalid altsetting 0
[  232.327460][    T9] usb 4-1: USB disconnect, device number 26
[  232.399929][ T5694] udevd[5694]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  232.433691][ T6362] udevd[6362]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[  233.070664][T10255] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  233.233133][T10257] loop2: detected capacity change from 0 to 4096
[  233.275931][T10257] ntfs3(loop2): Failed to load $Extend (-22).
[  233.278173][T10257] ntfs3(loop2): Failed to initialize $Extend.
[  233.894520][   T33] audit: type=1800 audit(255.778:388): pid=10260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1755" name="file0" dev="loop2" ino=0 res=0 errno=0
[  236.050150][T10333] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  236.409902][T10338] loop2: detected capacity change from 0 to 32768
[  236.731607][T10322] ceph: No mds server is up or the cluster is laggy
[  237.069322][T10373] loop3: detected capacity change from 0 to 1024
[  237.127360][T10373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  237.137189][T10380] loop2: detected capacity change from 0 to 256
[  237.157646][T10373] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  237.185801][T10373] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  237.190787][T10373] EXT4-fs (loop3): This should not happen!! Data will be lost
[  237.190787][T10373] 
[  237.200589][T10373] EXT4-fs (loop3): Total free blocks count 0
[  237.228582][T10373] EXT4-fs (loop3): Free/Dirty block details
[  237.236771][T10373] EXT4-fs (loop3): free_blocks=20480
[  237.240685][T10373] EXT4-fs (loop3): dirty_blocks=80
[  237.243022][T10373] EXT4-fs (loop3): Block reservation details
[  237.250554][T10373] EXT4-fs (loop3): i_reserved_data_blocks=5
[  237.279026][ T1106] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28
[  237.287768][T10385] loop2: detected capacity change from 0 to 1024
[  237.288435][ T6118] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  237.333775][T10385] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  237.519855][ T5692] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.299808][T10408] loop2: detected capacity change from 0 to 131072
[  239.304042][T10408] F2FS-fs (loop2): Invalid log sectorsize (67108873)
[  239.307513][T10408] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  239.311232][T10408] F2FS-fs (loop2): invalid crc value
[  239.360632][T10408] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  239.375673][T10408] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  239.378164][T10408] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  240.194343][T10455] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1839'.
[  241.174207][T10458] loop3: detected capacity change from 0 to 1024
[  241.222091][T10458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.248186][T10458] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 623: comm syz.3.1840: Attempting to read directory block (623) that is past i_size (638464)
[  241.312678][ T6118] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.356186][T10463] loop2: detected capacity change from 0 to 256
[  241.656282][T10469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1842'.
[  241.820516][T10478] netlink: 'syz.4.1847': attribute type 6 has an invalid length.
[  241.895974][T10480] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000
[  242.204133][T10503] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  242.308627][T10506] loop3: detected capacity change from 0 to 512
[  242.331640][T10506] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1860: inode has both inline data and extents flags
[  242.358207][T10506] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  242.358551][T10506] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1860: couldn't read orphan inode 15 (err -117)
[  242.366708][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  242.366729][    C0] EXT4-fs (loop3): initial error at time 264: ext4_orphan_get:1399: inode 15
[  242.366753][    C0] EXT4-fs (loop3): last error at time 264: ext4_orphan_get:1399: inode 15
[  242.399695][T10506] loop3: lost filesystem error report for type 5 error -117
[  242.402385][T10506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  243.097173][ T6118] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.797356][T10548] loop3: detected capacity change from 0 to 4096
[  243.821947][T10548] ntfs3(loop3): Failed to load $Extend (-22).
[  243.824620][T10548] ntfs3(loop3): Failed to initialize $Extend.
[  243.962203][T10553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1880'.
[  243.967487][T10553] netlink: 'syz.4.1880': attribute type 3 has an invalid length.
[  244.063055][T10558] program syz.3.1882 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  244.744027][T10576] loop3: detected capacity change from 0 to 512
[  244.755340][T10576] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1889: invalid indirect mapped block 256 (level 2)
[  244.760815][T10576] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  244.761682][T10576] EXT4-fs (loop3): 2 truncates cleaned up
[  244.765588][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  244.765605][    C1] EXT4-fs (loop3): initial error at time 266: ext4_free_branches:1023: inode 11
[  244.765633][    C1] EXT4-fs (loop3): last error at time 266: ext4_free_branches:1023: inode 11
[  244.782044][T10576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  244.789935][T10578] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  244.789935][T10578] The task syz.2.1887 (10578) triggered the difference, watch for misbehavior.
[  244.801008][T10576] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1889: bg 0: block 5: invalid block bitmap
[  244.839738][ T6118] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.907578][T10580] Set syz1 is full, maxelem 4 reached
[  245.198595][T10594] netlink: 'syz.3.1897': attribute type 1 has an invalid length.
[  245.228479][T10596] tls_set_device_offload: netdev not found
[  245.408821][T10602] loop4: detected capacity change from 0 to 2048
[  245.444905][T10602] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  245.459961][T10602] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  246.013023][ T2417] pvrusb2: request_firmware fatal error with code=-110
[  246.016559][ T2417] pvrusb2: Failure uploading firmware1
[  246.020156][ T2417] pvrusb2: Device initialization was not successful.
[  246.023301][ T2417] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  246.029923][ T2417] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  246.089418][ T5756] pvrusb2: Device being rendered inoperable
[  246.375804][T10623] loop2: detected capacity change from 0 to 1764
[  246.608696][T10628] loop2: detected capacity change from 0 to 2048
[  246.620511][T10628] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  246.848826][T10636] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1915'.
[  247.015401][T10638] loop2: detected capacity change from 0 to 4096
[  247.069729][T10641] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  247.250007][ T4988] Bluetooth: hci0: unexpected event for opcode 0x042f
[  247.345588][T10652] mmap: syz.3.1921 (10652) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  247.581077][T10666] loop3: detected capacity change from 0 to 16
[  247.605910][T10666] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  247.717958][T10674] loop4: detected capacity change from 0 to 512
[  247.796169][T10674] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  247.810075][T10674] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities
[  248.414837][ T5756] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  248.451774][T10688] loop4: detected capacity change from 0 to 32768
[  248.485104][   T33] audit: type=1800 audit(270.448:389): pid=10688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1940" name="bus" dev="loop4" ino=7 res=0 errno=0
[  248.574549][ T5756] usb 3-1: Using ep0 maxpacket: 8
[  248.578818][ T5756] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  248.585135][ T5756] usb 3-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6
[  248.588200][ T5756] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.591039][ T5756] usb 3-1: Product: syz
[  248.592326][ T5756] usb 3-1: Manufacturer: syz
[  248.593914][ T5756] usb 3-1: SerialNumber: syz
[  248.597103][ T5756] usb 3-1: config 0 descriptor??
[  248.602329][ T5756] gspca_main: t613-2.14.0 probing 17a1:0128
[  248.806309][ T5756] gspca_t613: unknown sensor 0000
[  248.811957][ T5756] t613 3-1:0.0: probe with driver t613 failed with error -22
[  248.817034][ T5756] usb 3-1: USB disconnect, device number 24
[  249.204828][   T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  249.354760][   T24] usb 4-1: Using ep0 maxpacket: 8
[  249.362167][   T24] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  249.368859][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.380798][   T24] usb 4-1: Product: syz
[  249.384133][   T24] usb 4-1: Manufacturer: syz
[  249.389992][   T24] usb 4-1: SerialNumber: syz
[  249.400663][   T24] usb 4-1: config 0 descriptor??
[  249.551382][T10729] loop2: detected capacity change from 0 to 4096
[  249.589872][T10733] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  249.618871][T10729] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=32, inode=11, rec_len=24, name_len=77
[  249.625726][   T24] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  249.636195][T10729] Remounting filesystem read-only
[  249.831340][    C1] raw-gadget.0 gadget.3: ignoring, device is not running
[  249.836272][   T24] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  249.849388][   T24] usb 4-1: USB disconnect, device number 27
[  249.987774][T10750] loop2: detected capacity change from 0 to 512
[  249.991401][T10750] EXT4-fs: Ignoring removed nomblk_io_submit option
[  249.993817][T10750] EXT4-fs: Ignoring removed nomblk_io_submit option
[  250.004712][T10750] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  250.030566][T10750] EXT4-fs (loop2): 1 truncate cleaned up
[  250.035081][T10750] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  250.098393][ T5692] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.422513][T10758] loop3: detected capacity change from 0 to 1024
[  250.436115][    T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  250.446201][T10758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  250.558013][ T6118] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.597158][    T9] usb 3-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01
[  250.609347][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.636227][T10762] netlink: 'syz.3.1973': attribute type 2 has an invalid length.
[  250.815212][T10768] loop4: detected capacity change from 0 to 1024
[  251.036550][    T9] dln2 3-1:1.0: failed to initialize hardware
[  251.042110][T10776] loop3: detected capacity change from 0 to 4096
[  251.061377][    T9] dln2 3-1:1.0: probe with driver dln2 failed with error -110
[  251.073637][T10777] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  251.161609][T10779] loop4: detected capacity change from 0 to 4096
[  251.199006][T10779] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  251.239537][T10779] ntfs3(loop4): Failed to initialize $Extend/$ObjId.
[  251.723754][T10807] loop4: detected capacity change from 0 to 64
[  251.912003][T10811] 9pnet: p9_errstr2errno: server reported unknown error tun
[  251.980883][T10809]  loop3: p1 p3 < >
[  252.480466][T10834] netlink: 5720 bytes leftover after parsing attributes in process `syz.3.2006'.
[  252.486893][T10834] netlink: 5720 bytes leftover after parsing attributes in process `syz.3.2006'.
[  252.700212][T10840] set_capacity_and_notify: 2 callbacks suppressed
[  252.700231][T10840] loop4: detected capacity change from 0 to 4096
[  252.715471][T10840] EXT4-fs (loop4): Test dummy encryption mode enabled
[  252.871092][T10840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  252.946011][T10840] syz.4.2009 (10840) used greatest stack depth: 19200 bytes left
[  252.958143][ T6803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.269694][ T5756] usb 3-1: USB disconnect, device number 25
[  254.235714][T10847] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2012'.
[  254.383298][T10853] loop2: detected capacity change from 0 to 256
[  254.393595][T10853] FAT-fs (loop2): Directory bread(block 1285) failed
[  254.403059][T10853] FAT-fs (loop2): Directory bread(block 1286) failed
[  254.409320][T10853] FAT-fs (loop2): Directory bread(block 1287) failed
[  254.412653][T10853] FAT-fs (loop2): Directory bread(block 1288) failed
[  254.436633][T10853] FAT-fs (loop2): FAT read failed (blocknr 1281)
[  254.717384][T10865] loop4: detected capacity change from 0 to 764
[  254.749541][T10865] Symlink component flag not implemented
[  254.754064][T10865] Symlink component flag not implemented
[  254.855325][T10867] netlink: 'syz.4.2020': attribute type 3 has an invalid length.
[  254.961608][T10869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2021'.
[  255.662849][T10892] loop2: detected capacity change from 0 to 16
[  255.671124][T10892] erofs (device loop2): algorithm 1 isn't enabled on this kernel
[  256.022237][T10902] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.075893][ T1376] ieee802154 phy0 wpan0: encryption failed: -22
[  256.078308][ T1376] ieee802154 phy1 wpan1: encryption failed: -22
[  256.259722][T10904] loop2: detected capacity change from 0 to 8192
[  256.288770][T10904] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  256.485392][T10914] loop4: detected capacity change from 0 to 128
[  256.508512][T10914] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  256.532818][T10920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2043'.
[  256.566730][ T6803] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  256.662296][T10924] vlan0: entered promiscuous mode
[  256.835841][T10933] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2048'.
[  257.402045][T10938] ip_tables: iptables: counters copy to user failed while replacing table
[  257.842223][   T33] audit: type=1800 audit(279.808:390): pid=10942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2051" name="zoned" dev="configfs" ino=25770 res=0 errno=0
[  258.161783][T10960] loop3: detected capacity change from 0 to 2048
[  258.202829][T10960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  258.219535][T10960] EXT4-fs error (device loop3): __ext4_new_inode:1081: comm syz.3.2057: reserved inode found cleared - inode=1
[  258.307352][   T33] audit: type=1800 audit(280.278:391): pid=10971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2062" name="dbroot" dev="configfs" ino=25814 res=0 errno=0
[  258.392894][T10975] loop2: detected capacity change from 0 to 4096
[  258.586721][T10983] loop2: detected capacity change from 0 to 512
[  258.597684][T10983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  259.698009][T11004] loop4: detected capacity change from 0 to 2048
[  259.761231][T11004] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  259.979183][ T5692] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.274551][    T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  260.294672][ T5756] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  260.444629][ T5756] usb 3-1: Using ep0 maxpacket: 16
[  260.453340][ T5756] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[  260.464648][ T5756] usb 3-1: config 0 interface 0 has no altsetting 0
[  260.466530][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  260.470685][ T5756] usb 3-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[  260.479251][ T5756] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.492342][ T5756] usb 3-1: config 0 descriptor??
[  260.494227][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  260.509461][    T9] usb 5-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00
[  260.528147][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  260.540840][    T9] usb 5-1: Product: syz
[  260.544277][    T9] usb 5-1: Manufacturer: syz
[  260.568539][    T9] mos7840 5-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected
[  260.924706][ T5756] holtek_mouse 0003:04D9:A067.0004: unknown main item tag 0x6
[  260.928009][ T5756] holtek_mouse 0003:04D9:A067.0004: unknown main item tag 0x0
[  260.931130][ T5756] holtek_mouse 0003:04D9:A067.0004: item fetching failed at offset 8/40
[  260.935635][ T5756] holtek_mouse 0003:04D9:A067.0004: hid parse failed: -22
[  260.938661][ T5756] holtek_mouse 0003:04D9:A067.0004: probe with driver holtek_mouse failed with error -22
[  261.118458][ T5756] usb 3-1: USB disconnect, device number 26
[  261.582952][    T9] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71
[  261.591080][    T9] usb 5-1: USB disconnect, device number 19
[  261.598732][    T9] mos7840 5-1:1.0: device disconnected
[  262.288762][T11053] loop2: detected capacity change from 0 to 4096
[  262.310521][T11054] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  262.400318][T10963] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap
[  262.474652][ T5756] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[  262.631455][ T5756] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  262.635260][ T5756] usb 5-1: config 0 has no interface number 0
[  262.639839][T11068] bond0: entered promiscuous mode
[  262.640110][ T5756] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  262.641434][T11068] bond_slave_0: entered promiscuous mode
[  262.641531][T11068] bond_slave_1: entered promiscuous mode
[  262.646280][ T5756] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.652932][ T5756] usb 5-1: Product: syz
[  262.653931][T11068] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  262.655659][ T5756] usb 5-1: Manufacturer: syz
[  262.662487][ T5756] usb 5-1: SerialNumber: syz
[  262.667801][ T5756] usb 5-1: config 0 descriptor??
[  262.673753][ T5756] usb 5-1: selecting invalid altsetting 1
[  262.676813][ T5756] dvb_ttusb_budget: ttusb_init_controller: error
[  262.681731][ T5756] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  262.715021][ T5756] DVB: Unable to find symbol stv0299_attach()
[  262.746501][ T5756] DVB: Unable to find symbol tda8083_attach()
[  262.749163][ T5756] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  262.880463][    T9] usb 5-1: USB disconnect, device number 20
[  263.061555][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2114'.
[  263.551084][T11104] loop2: detected capacity change from 0 to 2048
[  263.604819][T11104] Alternate GPT is invalid, using primary GPT.
[  263.607443][T11104]  loop2: p2 p3 p7
[  263.750163][T11117] ima: policy update failed
[  263.754556][   T33] audit: type=1802 audit(285.718:392): pid=11117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.2128" res=0 errno=0
[  263.812383][ T6362] udevd[6362]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  263.816484][ T5694] udevd[5694]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory
[  263.817027][ T7139] udevd[7139]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  263.867622][   T33] audit: type=1326 audit(285.838:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11118 comm="syz.2.2127" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66f79e0d9 code=0x7ffc0000
[  263.876754][   T33] audit: type=1326 audit(285.848:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11118 comm="syz.2.2127" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66f79e0d9 code=0x7ffc0000
[  263.891476][   T33] audit: type=1326 audit(285.848:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11118 comm="syz.2.2127" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66f79e0d9 code=0x7ffc0000
[  263.899264][   T33] audit: type=1326 audit(285.848:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11118 comm="syz.2.2127" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb66f79e0d9 code=0x7ffc0000
[  263.906429][   T33] audit: type=1326 audit(285.848:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11118 comm="syz.2.2127" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb66f79e0d9 code=0x7ffc0000
[  263.925648][   T33] audit: type=1326 audit(285.898:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11118 comm="syz.2.2127" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb66f75e90e code=0x7ffc0000
[  263.934740][   T33] audit: type=1326 audit(285.908:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11118 comm="syz.2.2127" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb66f75e90e code=0x7ffc0000
[  263.944013][   T33] audit: type=1326 audit(285.908:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11118 comm="syz.2.2127" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb66f75e90e code=0x7ffc0000
[  263.952433][   T33] audit: type=1326 audit(285.908:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11118 comm="syz.2.2127" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb66f75e90e code=0x7ffc0000
[  264.245036][    T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  264.406381][    T9] usb 5-1: Using ep0 maxpacket: 16
[  264.411123][    T9] usb 5-1: config 1 has an invalid interface number: 2 but max is 0
[  264.414794][    T9] usb 5-1: config 1 has no interface number 0
[  264.417120][    T9] usb 5-1: config 1 interface 2 has no altsetting 0
[  264.421527][    T9] usb 5-1: New USB device found, idVendor=2013, idProduct=0245, bcdDevice=61.15
[  264.426270][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.429461][    T9] usb 5-1: Product: syz
[  264.431214][    T9] usb 5-1: Manufacturer: syz
[  264.433124][    T9] usb 5-1: SerialNumber: syz
[  264.648346][    T9] dvb-usb: found a 'Pinnacle PCTV 73e SE' in cold state, will try to load a firmware
[  264.686675][    T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  264.689736][    T9] dib0700: firmware download failed at 7 with -22
[  264.698323][    T9] usb 5-1: USB disconnect, device number 21
[  264.824609][ T5756] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  264.976668][ T5756] usb 4-1: unable to get BOS descriptor or descriptor too short
[  264.983051][ T5756] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40
[  264.987308][ T5756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.990366][ T5756] usb 4-1: Product: syz
[  264.992002][ T5756] usb 4-1: Manufacturer: syz
[  264.993642][ T5756] usb 4-1: SerialNumber: syz
[  265.122882][T11144] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  265.229843][ T5756] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  265.234824][ T5756] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  265.316165][ T5756] usb 4-1: USB disconnect, device number 28
[  265.317509][T11156] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2144'.
[  265.324189][T11155] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  265.402453][ T6362] udevd[6362]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  265.520945][T11166] loop2: detected capacity change from 0 to 4096
[  265.559845][T11170] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  265.561669][T11166] NILFS (loop2): corrupt root inode
[  265.787612][T11177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2154'.
[  265.822620][T11179] CIFS: VFS: UNC: missing delimiter between hostname and share name
[  265.826785][T11179] CIFS: VFS: Malformed UNC in devname
[  265.852345][T11181] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2156'.
[  265.910480][    T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  266.065536][    T9] usb 3-1: Using ep0 maxpacket: 16
[  266.069739][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  266.073815][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  266.077732][    T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  266.085423][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  266.088980][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.092030][    T9] usb 3-1: Product: syz
[  266.093826][    T9] usb 3-1: Manufacturer: syz
[  266.096323][    T9] usb 3-1: SerialNumber: syz
[  266.156670][ T5756] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  266.304519][ T5756] usb 4-1: Using ep0 maxpacket: 16
[  266.308445][ T5756] usb 4-1: config 127 has an invalid interface number: 124 but max is 0
[  266.311153][    T9] cdc_ncm 3-1:1.0: invalid descriptor buffer length
[  266.313636][    T9] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[  266.314112][ T5756] usb 4-1: config 127 has no interface number 0
[  266.318794][ T5756] usb 4-1: config 127 interface 124 has no altsetting 0
[  266.325904][ T5756] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87
[  266.326848][    T9] cdc_ncm 3-1:1.0: bind() failure
[  266.329107][ T5756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.332924][ T5756] usb 4-1: Product: syz
[  266.334326][ T5756] usb 4-1: Manufacturer: syz
[  266.336473][ T5756] usb 4-1: SerialNumber: syz
[  266.339888][    T9] usb 3-1: USB disconnect, device number 27
[  266.958420][T11191] loop2: detected capacity change from 0 to 512
[  266.992864][T11191] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.2161: inode has both inline data and extents flags
[  266.999273][T11191] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  266.999502][T11191] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2161: couldn't read orphan inode 15 (err -117)
[  267.006368][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  267.006389][    C0] EXT4-fs (loop2): initial error at time 288: ext4_orphan_get:1399: inode 15
[  267.006403][    C0] EXT4-fs (loop2): last error at time 288: ext4_orphan_get:1399: inode 15
[  267.017272][T11191] loop2: lost filesystem error report for type 5 error -117
[  267.018517][T11191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.177240][ T5756] usb 4-1: reset high-speed USB device number 29 using dummy_hcd
[  267.373315][ T5692] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.533062][T11207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2164'.
[  267.627606][ T5756] usb 4-1: failed to restore interface 124 altsetting 11 (error=-71)
[  267.650426][ T5756] usb 4-1: USB disconnect, device number 29
[  267.712013][T11209] loop2: detected capacity change from 0 to 32768
[  267.716217][T11209] (syz.2.2165,11209,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  267.720728][T11209] (syz.2.2165,11209,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  267.743436][T11209] JBD2: Ignoring recovery information on journal
[  267.779836][T11209] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  267.814168][T11209] (syz.2.2165,11209,0):ocfs2_verify_group_and_input:432 ERROR: add a group which is in the current volume.
[  267.818298][T11209] (syz.2.2165,11209,0):ocfs2_group_add:513 ERROR: status = -22
[  267.878000][ T5692] ocfs2: Unmounting device (7,2) on (node local)
[  267.996052][T11215] loop2: detected capacity change from 0 to 128
[  268.003528][T11215] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  268.008705][T11215] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  268.012575][T11215] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  268.018360][T11215] UDF-fs: Scanning with blocksize 512 failed
[  268.025065][T11215] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  268.028977][T11215] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  268.032263][T11215] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  268.036485][T11215] UDF-fs: Scanning with blocksize 1024 failed
[  268.040166][T11215] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  268.043837][T11215] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  268.048068][T11215] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  268.050716][T11215] UDF-fs: Scanning with blocksize 2048 failed
[  268.053449][T11215] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  268.057829][T11215] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  268.060946][T11215] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  268.063326][T11215] UDF-fs: Scanning with blocksize 4096 failed
[  268.065526][T11215] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1)
[  268.101198][T11217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2168'.
[  269.071237][T11284] netlink: 364 bytes leftover after parsing attributes in process `syz.3.2200'.
[  269.078288][T11284] netlink: 364 bytes leftover after parsing attributes in process `syz.3.2200'.
[  269.569540][T11315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2206'.
[  269.579828][T11315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2206'.
[  269.661080][T11321] loop2: detected capacity change from 0 to 512
[  269.699773][T11321] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  269.716556][T11321] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2208'.
[  269.719405][T11321] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2208'.
[  269.742419][ T5692] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.159443][T11347] openvswitch: netlink: Message has 5 unknown bytes.
[  270.205897][    T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  270.289667][T11353] loop4: detected capacity change from 0 to 2048
[  270.309151][T11354] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  270.334597][   T10] usb 4-1: new full-speed USB device number 30 using dummy_hcd
[  270.357832][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  270.361139][    T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  270.366641][    T9] usb 3-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00
[  270.370869][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.489713][   T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  270.501458][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  270.516600][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  270.523572][   T10] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  270.527430][T11360] loop4: detected capacity change from 0 to 4096
[  270.527679][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.535340][   T10] usb 4-1: Product: syz
[  270.544167][   T10] usb 4-1: Manufacturer: syz
[  270.546321][   T10] usb 4-1: SerialNumber: syz
[  270.551625][   T10] usb 4-1: config 0 descriptor??
[  270.555958][T11343] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  270.570143][T11360] ntfs3(loop4): ino=3, ntfs_set_state failed, -22.
[  270.572471][T11360] ntfs3(loop4): Failed to initialize $Extend/$ObjId.
[  270.598838][    T9] ttusb_dec_send_command: result bulk message failed: error -22
[  270.606641][    T9] ttusb-dec 3-1:1.0: probe with driver ttusb-dec failed with error -22
[  270.608155][ T9517] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22.
[  270.611682][    T9] usb 3-1: USB disconnect, device number 28
[  270.623953][ T6803] ntfs3(loop4): ino=3, ntfs_set_state failed, -22.
[  270.628879][ T6803] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  270.639228][ T6803] ntfs3(loop4): ino=3, ntfs_set_state failed, -22.
[  270.644656][   T10] rc_core: IR keymap rc-streamzap not found
[  270.646849][ T9517] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22.
[  270.649028][   T10] Registered IR keymap rc-empty
[  270.653167][   T10] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  270.671121][   T10] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12
[  270.779271][ T5756] usb 4-1: USB disconnect, device number 30
[  271.846439][    T9] usb 4-1: new full-speed USB device number 31 using dummy_hcd
[  271.936495][ T1284] usb 5-1: new full-speed USB device number 22 using dummy_hcd
[  272.000968][    T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  272.006644][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.015245][    T9] usb 4-1: config 0 descriptor??
[  272.023784][    T9] cp210x 4-1:0.0: cp210x converter detected
[  272.029301][T11390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2235'.
[  272.096885][ T1284] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023
[  272.108822][ T1284] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 185, changing to 4
[  272.116584][ T1284] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  272.121913][ T1284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.127287][ T1284] usb 5-1: Product: syz
[  272.128692][ T1284] usb 5-1: Manufacturer: syz
[  272.134307][ T1284] usb 5-1: SerialNumber: syz
[  272.356095][ T1284] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  272.361681][ T1284] usb 5-1: 2:1 : invalid channels 0
[  272.414895][ T1284] usb 5-1: USB disconnect, device number 22
[  272.470810][    T9] usb 4-1: cp210x converter now attached to ttyUSB0
[  272.472218][ T6362] udevd[6362]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  272.647834][    T9] usb 4-1: USB disconnect, device number 31
[  272.657961][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  272.666881][    T9] cp210x 4-1:0.0: device disconnected
[  273.084533][ T1284] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  273.254632][ T1284] usb 3-1: Using ep0 maxpacket: 8
[  273.260426][ T1284] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  273.265839][ T1284] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  273.269870][ T1284] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  273.273780][ T1284] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  273.285209][ T1284] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  273.288838][ T1284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.511274][ T1284] usb 3-1: GET_CAPABILITIES returned 0
[  273.513452][ T1284] usbtmc 3-1:16.0: can't read capabilities
[  273.718675][ T1284] usb 3-1: USB disconnect, device number 29
[  274.463220][T11444] loop2: detected capacity change from 0 to 32768
[  274.467523][T11444] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2260 (11444)
[  274.484485][T11444] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  274.488386][T11444] BTRFS info (device loop2): using sha256 checksum algorithm
[  274.502066][T11452] xt_l2tp: missing protocol rule (udp|l2tpip)
[  274.572637][T11444] BTRFS info (device loop2): enabling ssd optimizations
[  274.577372][T11444] BTRFS info (device loop2): turning on async discard
[  274.580098][T11444] BTRFS info (device loop2): enabling free space tree
[  274.593292][T11467] netlink: 288 bytes leftover after parsing attributes in process `syz.4.2263'.
[  274.641818][ T5692] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  275.134496][    T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  275.287078][    T9] usb 3-1: Using ep0 maxpacket: 16
[  275.290443][    T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 6: 255, using maximum allowed: 30
[  275.297219][    T9] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  275.313888][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[  275.317734][    T9] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00
[  275.321242][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.343594][    T9] usb 3-1: config 0 descriptor??
[  275.344932][T11488] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  275.406804][T11493] i2c i2c-0: delete_device: Can't find device in list
[  275.787557][    T9] uclogic 0003:5543:0042.0005: unknown main item tag 0x0
[  275.792052][    T9] uclogic 0003:5543:0042.0005: unknown main item tag 0x0
[  275.800604][    T9] uclogic 0003:5543:0042.0005: unknown main item tag 0x0
[  275.805030][    T9] uclogic 0003:5543:0042.0005: unknown main item tag 0x0
[  275.813821][    T9] uclogic 0003:5543:0042.0005: unknown main item tag 0x0
[  275.819052][    T9] uclogic 0003:5543:0042.0005: unknown main item tag 0x0
[  275.823556][    T9] uclogic 0003:5543:0042.0005: unknown main item tag 0x0
[  275.830787][    T9] uclogic 0003:5543:0042.0005: unknown main item tag 0x0
[  275.837830][    T9] uclogic 0003:5543:0042.0005: unknown main item tag 0x0
[  275.844811][    T9] uclogic 0003:5543:0042.0005: unknown main item tag 0x0
[  275.849188][    T9] uclogic 0003:5543:0042.0005: unbalanced collection at end of report description
[  275.856785][    T9] uclogic 0003:5543:0042.0005: parse failed
[  275.863162][    T9] uclogic 0003:5543:0042.0005: probe with driver uclogic failed with error -22
[  275.969000][    T9] usb 3-1: USB disconnect, device number 30
[  276.584543][    T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  276.734435][    T9] usb 4-1: Using ep0 maxpacket: 32
[  276.736156][T11528] loop2: detected capacity change from 0 to 8192
[  276.737858][    T9] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  276.739387][T11528] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  276.743847][    T9] usb 4-1: config 0 has no interface number 0
[  276.757662][    T9] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  276.766946][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.773800][    T9] usb 4-1: Product: syz
[  276.778172][    T9] usb 4-1: Manufacturer: syz
[  276.780984][    T9] usb 4-1: SerialNumber: syz
[  276.787001][    T9] usb 4-1: config 0 descriptor??
[  277.018478][T11529] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1050)
[  277.024328][T11529] FAT-fs (loop2): Filesystem has been set read-only
[  277.028653][T11529] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1050)
[  277.031529][T11529] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1050)
[  279.053635][    T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  279.072049][    T9] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  279.097232][    T9] usb 4-1: USB disconnect, device number 32
[  279.651750][T11540] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  279.660007][T11538] loop4: detected capacity change from 0 to 32768
[  279.673159][T11538] (syz.4.2295,11538,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  279.694812][T11538] (syz.4.2295,11538,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  279.713925][T11538] (syz.4.2295,11538,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdde57c9f, computed 0x5b96c28. Applying ECC.
[  279.740391][T11538] (syz.4.2295,11538,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdde57c9f, computed 0x5b96c28
[  279.765513][T11538] (syz.4.2295,11538,0):ocfs2_validate_inode_block:1475 ERROR: Checksum failed for dinode 25
[  279.772914][T11538] (syz.4.2295,11538,0):ocfs2_read_locked_inode:633 ERROR: status = -5
[  279.776114][T11538] (syz.4.2295,11538,0):_ocfs2_get_system_file_inode:141 ERROR: status = -5
[  279.779809][T11538] (syz.4.2295,11538,0):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  279.783392][T11538] (syz.4.2295,11538,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 6, possibly corrupt fs?
[  279.783409][T11538] (syz.4.2295,11538,0):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  279.792782][T11538] (syz.4.2295,11538,0):ocfs2_initialize_super:2195 ERROR: status = -22
[  279.796476][T11538] (syz.4.2295,11538,0):ocfs2_fill_super:1177 ERROR: status = -22
[  280.032494][   T33] kauditd_printk_skb: 54 callbacks suppressed
[  280.032505][   T33] audit: type=1326 audit(301.998:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11551 comm="syz.4.2301" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f007339e0d9 code=0x0
[  280.244620][ T5756] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  280.344715][ T1284] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[  280.394737][ T5756] usb 3-1: Using ep0 maxpacket: 16
[  280.408086][ T5756] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[  280.411433][ T5756] usb 3-1: config 0 has no interface number 0
[  280.418896][ T5756] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  280.427805][ T5756] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.430895][ T5756] usb 3-1: Product: syz
[  280.432628][ T5756] usb 3-1: Manufacturer: syz
[  280.435259][ T5756] usb 3-1: SerialNumber: syz
[  280.439923][ T5756] usb 3-1: config 0 descriptor??
[  280.445834][ T5756] hub 3-1:0.132: bad descriptor, ignoring hub
[  280.448516][ T5756] hub 3-1:0.132: probe with driver hub failed with error -5
[  280.456452][ T5756] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input13
[  280.481257][T11570] netlink: 'syz.3.2310': attribute type 5 has an invalid length.
[  280.501754][ T1284] usb 5-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[  280.505442][ T1284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.509830][ T1284] usb 5-1: Product: syz
[  280.513202][ T1284] usb 5-1: Manufacturer: syz
[  280.517026][ T1284] usb 5-1: SerialNumber: syz
[  280.543273][ T1284] usb 5-1: config 0 descriptor??
[  280.549233][ T1284] gspca_main: spca508-2.14.0 probing 041e:4018
[  280.640727][   T33] audit: type=1800 audit(302.608:457): pid=11572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.2311" name="/" dev="debugfs" ino=1 res=0 errno=0
[  280.755737][ T1284] gspca_spca508: reg_read err -32
[  280.760447][ T1284] gspca_spca508: reg_read err -32
[  280.763763][ T1284] gspca_spca508: reg_read err -32
[  280.968424][ T1284] gspca_spca508: reg_read err -71
[  280.973503][ T1284] gspca_spca508: reg write: error -71
[  280.982740][ T1284] spca508 5-1:0.0: probe with driver spca508 failed with error -71
[  281.006792][ T1284] usb 5-1: USB disconnect, device number 23
[  281.192610][ T5756] usb 3-1: USB disconnect, device number 31
[  281.635054][T11581] vim2m vim2m.0: Fourcc format (0x47524247) invalid.
[  281.780298][T11594] netlink: 'syz.2.2320': attribute type 1 has an invalid length.
[  281.783340][T11594] nbd: illegal input index 393222
[  282.437357][T11614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2329'.
[  282.538199][T11586] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  282.550278][T11620] loop2: detected capacity change from 0 to 8
[  282.553157][T11620] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  282.565717][T11620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2332'.
[  282.896056][    T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  282.933127][T11654] loop4: detected capacity change from 0 to 128
[  282.952787][T11654] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  282.959261][   T33] audit: type=1326 audit(304.928:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11657 comm="syz.3.2346" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f9399e0d9 code=0x7ffc0000
[  282.977294][   T33] audit: type=1326 audit(304.938:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11657 comm="syz.3.2346" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f9399e0d9 code=0x7ffc0000
[  282.986325][   T33] audit: type=1326 audit(304.938:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11657 comm="syz.3.2346" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f9399e0d9 code=0x7ffc0000
[  282.994924][   T33] audit: type=1326 audit(304.938:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11657 comm="syz.3.2346" exe="/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f7f9399e0d9 code=0x7ffc0000
[  283.003149][   T33] audit: type=1326 audit(304.938:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11657 comm="syz.3.2346" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f9399e0d9 code=0x7ffc0000
[  283.016146][   T33] audit: type=1326 audit(304.938:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11657 comm="syz.3.2346" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f9399e0d9 code=0x7ffc0000
[  283.029083][ T6803] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  283.049511][   T33] audit: type=1326 audit(304.938:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11657 comm="syz.3.2346" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f9399e0d9 code=0x7ffc0000
[  283.058877][   T33] audit: type=1326 audit(304.938:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11657 comm="syz.3.2346" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7f9399e0d9 code=0x7ffc0000
[  283.078486][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  283.087641][    T9] usb 3-1: config 0 has no interfaces?
[  283.092361][T11660] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2347'.
[  283.099761][    T9] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice= 0.00
[  283.103623][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  283.107619][    T9] usb 3-1: Product: syz
[  283.111016][    T9] usb 3-1: Manufacturer: syz
[  283.118292][    T9] usb 3-1: config 0 descriptor??
[  283.300509][T11674] loop4: detected capacity change from 0 to 8
[  283.315734][T11674] SQUASHFS error: lzo decompression failed, data probably corrupt
[  283.319227][T11674] SQUASHFS error: Failed to read block 0x91: -5
[  283.321788][T11674] SQUASHFS error: Unable to read metadata cache entry [8f]
[  283.325181][T11674] SQUASHFS error: Unable to read inode 0x11f
[  283.330004][ T5756] usb 3-1: USB disconnect, device number 32
[  283.896141][T11686] loop4: detected capacity change from 0 to 32768
[  283.913141][T11686] (syz.4.2358,11686,1):ocfs2_journal_addressable:1934 ERROR: The journal cannot address the entire volume. Enable the 'block64' journal option with tunefs.ocfs2
[  283.913202][T11686] (syz.4.2358,11686,1):ocfs2_check_volume:2429 ERROR: status = -27
[  283.926199][T11686] (syz.4.2358,11686,1):ocfs2_mount_volume:1763 ERROR: status = -27
[  283.952305][T11686] (syz.4.2358,11686,1):ocfs2_fill_super:1177 ERROR: status = -27
[  284.058679][T11691] netlink: 'syz.2.2360': attribute type 1 has an invalid length.
[  284.205719][T11697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2365'.
[  284.308844][T11703] loop4: detected capacity change from 0 to 1024
[  284.337780][T11703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  284.425013][T11703] EXT4-fs error (device loop4): ext4_get_first_dir_block:3560: inode #11: comm syz.4.2366: directory missing '..'
[  284.467460][T11703] EXT4-fs (loop4): Remounting filesystem read-only
[  284.567893][ T6803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.316859][T11728] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2375'.
[  285.559823][T11732] loop2: detected capacity change from 0 to 128
[  285.562499][T11732] EXT4-fs: Ignoring removed i_version option
[  285.564610][T11732] EXT4-fs: Ignoring removed oldalloc option
[  285.589431][T11732] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  285.641250][T11732] EXT4-fs error (device loop2): dx_make_map:1296: inode #2: block 33: comm syz.2.2377: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[  285.667029][T11732] EXT4-fs error (device loop2) in do_split:2027: Corrupt filesystem
[  285.694043][T11732] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 33: comm syz.2.2377: bad entry in directory: inode out of bounds - offset=2012, inode=128, rec_len=36, size=1024 fake=1
[  285.754342][ T5692] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  286.232632][T11750] netlink: 300 bytes leftover after parsing attributes in process `syz.3.2385'.
[  287.234617][   T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  287.241422][T11742] loop4: detected capacity change from 0 to 256
[  287.248321][T11742] vfat: Unknown parameter 'nonultail'
[  287.398982][   T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  287.407810][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.420331][   T10] usb 4-1: Product: syz
[  287.421949][   T10] usb 4-1: Manufacturer: syz
[  287.428348][   T10] usb 4-1: SerialNumber: syz
[  287.583949][T11769] loop2: detected capacity change from 0 to 1024
[  287.592986][T11769] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  287.611123][T11769] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[  287.625532][T11769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  287.756570][ T5692] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.858988][   T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  287.873935][   T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  288.302782][T11788] loop2: detected capacity change from 0 to 512
[  288.371086][T11788] EXT4-fs (loop2): 1 orphan inode deleted
[  288.374179][T11788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  288.384836][   T36] __quota_error: 2 callbacks suppressed
[  288.384846][   T36] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  288.390049][   T36] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u10:1: Failed to release dquot type 1
[  288.488785][ T5692] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.151449][T11800] netlink: 'syz.4.2404': attribute type 39 has an invalid length.
[  289.218394][   T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  289.231331][   T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  289.237901][   T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  289.246786][   T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  289.269985][   T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  289.279297][   T10] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  289.286725][   T10] usb 4-1: USB disconnect, device number 33
[  289.522159][T11806] loop4: detected capacity change from 0 to 32768
[  289.527741][T11806] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2407 (11806)
[  289.547899][T11806] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  289.553844][T11806] BTRFS info (device loop4): using blake2b checksum algorithm
[  289.629042][T11806] BTRFS info (device loop4): enabling ssd optimizations
[  289.631683][T11806] BTRFS info (device loop4): turning on async discard
[  289.636398][T11806] BTRFS info (device loop4): enabling free space tree
[  289.638882][T11806] BTRFS info (device loop4): use zstd compression, level 3
[  289.727792][ T6803] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  290.500365][T11858] loop4: detected capacity change from 0 to 512
[  290.507131][T11858] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  290.514472][T11858] EXT4-fs (loop4): Cannot use DAX on a filesystem that may contain inline data
[  290.978553][T11865] loop4: detected capacity change from 0 to 2048
[  290.988850][T11865] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  291.090399][T11867] syzkaller1: entered promiscuous mode
[  291.098912][T11867] syzkaller1: entered allmulticast mode
[  291.493686][T11887] raw_sendmsg: syz.4.2435 forgot to set AF_INET. Fix it!
[  291.614503][   T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  291.764574][   T10] usb 3-1: Using ep0 maxpacket: 8
[  291.768508][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  291.774797][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  291.778105][   T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  291.782209][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.782265][T11903] vivid-003: disconnect
[  291.791330][   T10] usb 3-1: config 0 descriptor??
[  291.793110][T11902] vivid-003: reconnect
[  292.012563][   T10] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  292.114517][ T5771] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  292.210086][   T10] usb 3-1: USB disconnect, device number 33
[  292.215924][T11878] iowarrior 3-1:0.0: Error -19 while submitting URB
[  292.264519][ T5771] usb 5-1: Using ep0 maxpacket: 32
[  292.268504][ T5771] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  292.271832][ T5771] usb 5-1: config 1 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  292.277886][ T5771] usb 5-1: config 1 interface 0 has no altsetting 0
[  292.283141][ T5771] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  292.287702][ T5771] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.291491][ T5771] usb 5-1: Product: syz
[  292.293396][ T5771] usb 5-1: Manufacturer: syz
[  292.296600][ T5771] usb 5-1: SerialNumber: syz
[  292.510609][ T5771] cdc_ether 5-1:1.0: skipping garbage
[  292.512744][ T5771] usb 5-1: No union descriptors
[  292.518708][ T5771] usb 5-1: USB disconnect, device number 24
[  293.002343][T11926] loop2: detected capacity change from 0 to 256
[  293.015396][T11926] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d)
[  293.035010][   T33] audit: type=1800 audit(314.998:468): pid=11926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2451" name="file1" dev="loop2" ino=1048647 res=0 errno=0
[  293.065708][   T33] audit: type=1800 audit(315.028:469): pid=11926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2451" name="file1" dev="loop2" ino=1048647 res=0 errno=0
[  294.201818][T11934] loop4: detected capacity change from 0 to 32768
[  294.222341][T11934] (syz.4.2455,11934,1):ocfs2_init_local_system_inodes:496 ERROR: status=-22, sysfile=7, slot=0
[  294.225593][T11934] (syz.4.2455,11934,1):ocfs2_init_local_system_inodes:505 ERROR: status = -22
[  294.228308][T11934] (syz.4.2455,11934,1):ocfs2_mount_volume:1757 ERROR: status = -22
[  294.247024][T11934] (syz.4.2455,11934,1):ocfs2_fill_super:1177 ERROR: status = -22
[  294.479189][T11942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2459'.
[  294.505082][ T5695] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  294.523447][ T5695] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  294.542624][ T5695] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  294.559256][ T5695] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  294.564787][T11946] syzkaller0: entered promiscuous mode
[  294.567205][T11946] syzkaller0: entered allmulticast mode
[  294.569745][ T5695] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  294.968479][T11977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2471'.
[  295.019173][T11979] loop4: detected capacity change from 0 to 1024
[  295.023254][T11979] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (47942!=20869)
[  295.041032][T11979] EXT4-fs (loop4): orphan cleanup on readonly fs
[  295.044899][T11979] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix.
[  295.054499][T11979] EXT4-fs (loop4): Cannot turn on quotas: error -13
[  295.057060][T11979] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2472: couldn't read orphan inode 12 (err -116)
[  295.068511][T11979] loop4: lost filesystem error report for type 5 error -116
[  295.080951][T11979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  295.145427][ T6803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.423656][T11943] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.429823][T11943] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.436295][T11943] bridge_slave_0: entered allmulticast mode
[  295.440907][T11943] bridge_slave_0: entered promiscuous mode
[  295.446819][T11943] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.451310][T11943] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.455813][T11943] bridge_slave_1: entered allmulticast mode
[  295.460350][T11943] bridge_slave_1: entered promiscuous mode
[  295.504814][T11943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  295.511434][T11943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  295.547693][T11943] team0: Port device team_slave_0 added
[  295.553144][T11943] team0: Port device team_slave_1 added
[  295.586250][T11943] batman_adv: batadv0: Adding interface: batadv_slave_0
[  295.588947][T11943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  295.600380][T11943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  295.607422][T11943] batman_adv: batadv0: Adding interface: batadv_slave_1
[  295.611438][T11943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  295.622660][T11943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  295.681323][T11943] hsr_slave_0: entered promiscuous mode
[  295.684738][T11943] hsr_slave_1: entered promiscuous mode
[  295.687779][T11943] debugfs: 'hsr0' already exists in 'hsr'
[  295.690079][T11943] Cannot create hsr debugfs directory
[  295.800863][T12014] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10)
[  295.803527][T12014] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  295.815495][T12014] vhci_hcd vhci_hcd.0: Device attached
[  295.822998][ T5695] Bluetooth: hci2: unexpected subevent 0x0e length: 30 > 15
[  295.826085][T12020] vhci_hcd: connection closed
[  295.829567][ T5695] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  295.843767][ T5757] vhci_hcd vhci_hcd.4: stop threads
[  295.849354][ T5757] vhci_hcd vhci_hcd.4: release socket
[  295.852923][ T5757] vhci_hcd vhci_hcd.4: disconnect device
[  296.019685][T11943] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  296.026450][T11943] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  296.031733][T11943] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  296.037875][T11943] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  296.041475][T11943] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  296.052769][T11943] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  296.057715][T11943] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  296.068675][T11943] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  296.103587][T11943] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.106590][T11943] bridge0: port 2(bridge_slave_1) entered forwarding state
[  296.111476][T11943] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.116548][T11943] bridge0: port 1(bridge_slave_0) entered forwarding state
[  296.155472][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.161220][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.219383][T11943] 8021q: adding VLAN 0 to HW filter on device bond0
[  296.235721][T11943] 8021q: adding VLAN 0 to HW filter on device team0
[  296.245671][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.248876][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  296.259549][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.261842][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  296.414157][T12059] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2490'.
[  296.419219][T12059] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2490'.
[  296.634655][ T5695] Bluetooth: hci0: command tx timeout
[  296.686831][T12079] loop4: detected capacity change from 0 to 64
[  296.715736][T11943] 8021q: adding VLAN 0 to HW filter on device batadv0
[  296.733016][T12079] Trying to free block not in datazone
[  296.952478][T11943] veth0_vlan: entered promiscuous mode
[  296.960434][T11943] veth1_vlan: entered promiscuous mode
[  296.990071][T11943] veth0_macvtap: entered promiscuous mode
[  296.999619][T11943] veth1_macvtap: entered promiscuous mode
[  297.031440][T11943] batman_adv: batadv0: Interface activated: batadv_slave_0
[  297.046164][T11943] batman_adv: batadv0: Interface activated: batadv_slave_1
[  297.057700][ T5749] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  297.062681][ T5749] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  297.075744][ T5749] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  297.079269][ T5749] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  297.267518][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.278284][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.371630][ T9508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.379455][ T9508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.448776][   T33] audit: type=1800 audit(319.418:470): pid=12098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2502" name="iface_name" dev="configfs" ino=29174 res=0 errno=0
[  297.672708][T12114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2509'.
[  297.682754][T12114] macsec2: entered promiscuous mode
[  297.684657][T12114] batadv0: entered promiscuous mode
[  297.688040][T12114] macsec2: entered allmulticast mode
[  297.690238][T12114] batadv0: entered allmulticast mode
[  297.692544][T12114] 8021q: adding VLAN 0 to HW filter on device macsec2
[  297.699763][T12114] batadv0: left allmulticast mode
[  297.701414][T12114] batadv0: left promiscuous mode
[  297.895742][   T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  297.945446][T12127] loop4: detected capacity change from 0 to 8
[  297.955412][T12127] SQUASHFS error: xz decompression failed, data probably corrupt
[  297.958521][T12127] SQUASHFS error: Failed to read block 0x108: -5
[  297.961289][T12127] SQUASHFS error: Unable to read metadata cache entry [106]
[  297.964259][T12127] SQUASHFS error: Unable to read inode 0x11f
[  298.044934][   T10] usb 4-1: Using ep0 maxpacket: 8
[  298.049966][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  298.057410][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  298.064104][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  298.068813][   T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  298.068983][T12129] netlink: 'syz.4.2515': attribute type 1 has an invalid length.
[  298.071628][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.083467][   T10] usb 4-1: config 0 descriptor??
[  298.719442][ T5695] Bluetooth: hci0: command tx timeout
[  299.079939][ T5415] usb 4-1: USB disconnect, device number 34
[  300.112560][T12167] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2529'.
[  300.117854][T12167] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2529'.
[  300.796358][ T5695] Bluetooth: hci0: command tx timeout
[  300.815058][   T33] audit: type=1326 audit(322.788:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12201 comm="syz.5.2546" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaebf9e0d9 code=0x7ffc0000
[  300.823767][   T33] audit: type=1326 audit(322.788:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12201 comm="syz.5.2546" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaebf9e0d9 code=0x7ffc0000
[  300.832441][   T33] audit: type=1326 audit(322.788:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12201 comm="syz.5.2546" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaebf9e0d9 code=0x7ffc0000
[  300.841377][   T33] audit: type=1326 audit(322.788:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12201 comm="syz.5.2546" exe="/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fbaebf9e0d9 code=0x7ffc0000
[  300.864625][   T33] audit: type=1326 audit(322.788:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12201 comm="syz.5.2546" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaebf9e0d9 code=0x7ffc0000
[  300.871726][   T33] audit: type=1326 audit(322.788:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12201 comm="syz.5.2546" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaebf9e0d9 code=0x7ffc0000
[  300.886900][   T33] audit: type=1326 audit(322.788:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12201 comm="syz.5.2546" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaebf9e0d9 code=0x7ffc0000
[  300.893765][   T33] audit: type=1326 audit(322.788:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12201 comm="syz.5.2546" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbaebf9e0d9 code=0x7ffc0000
[  300.911848][   T33] audit: type=1326 audit(322.788:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12201 comm="syz.5.2546" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbaebf9e0d9 code=0x7ffc0000
[  300.982497][T12207] loop5: detected capacity change from 0 to 256
[  301.492906][T12230] ieee802154 phy0 wpan0: encryption failed: -22
[  301.733627][T12244] libceph: resolve '400' (ret=-3): failed
[  301.780407][T12247] device-mapper: ioctl: Unable to rename non-existent device,  to j
[  301.876138][ T1284] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  302.036572][ T1284] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  302.039948][ T1284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  302.045703][ T1284] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  302.049153][ T1284] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  302.051637][ T1284] usb 5-1: Manufacturer: syz
[  302.057695][ T1284] usb 5-1: config 0 descriptor??
[  302.097640][T12269] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2576'.
[  302.105672][ T1284] rc_core: IR keymap rc-hauppauge not found
[  302.108557][ T1284] Registered IR keymap rc-empty
[  302.110804][ T1284] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  302.116919][ T1284] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input14
[  302.213833][T12274] loop5: detected capacity change from 0 to 512
[  302.244209][T12274] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  302.299437][T11943] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.496508][T12285] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2582'.
[  302.710209][ T1284] usb 5-1: USB disconnect, device number 25
[  303.204618][ T5695] Bluetooth: hci0: command tx timeout
[  303.275081][T12294] i2c i2c-0: delete_device: Can't parse I2C address
[  303.663012][T12316] loop5: detected capacity change from 0 to 136
[  303.694544][T12316] Attempt to read inode for relocated directory
[  303.786953][ T5415] usb 4-1: new full-speed USB device number 35 using dummy_hcd
[  303.825494][T12322] loop4: detected capacity change from 0 to 1756
[  303.843271][T12322] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  303.852397][T12322] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  303.868360][T12322] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  303.878614][T12322] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  303.883412][T12322] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1)
[  303.949283][ T5415] usb 4-1: not running at top speed; connect to a high speed hub
[  303.959566][ T5415] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  303.964093][ T5415] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  303.973169][ T5415] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.998027][ T5415] uvcvideo 4-1:1.0: Found UVC 1.00 device <unnamed> (046d:0825)
[  304.006474][ T5415] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770.
[  304.190548][ T5415] usb 4-1: USB disconnect, device number 35
[  304.241765][   T33] audit: type=1800 audit(326.208:480): pid=12333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2602" name="c_chmask" dev="configfs" ino=30348 res=0 errno=0
[  306.657788][T12374] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled!
[  307.303092][T12415] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2631'.
[  309.072914][T12432] syzkaller1: entered promiscuous mode
[  309.079472][T12432] syzkaller1: entered allmulticast mode
[  309.364252][T12446] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2645'.
[  309.470087][T12451] loop5: detected capacity change from 0 to 256
[  309.482961][   T33] audit: type=1800 audit(331.448:481): pid=12451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2648" name="file2" dev="loop5" ino=1048663 res=0 errno=0
[  309.616652][T12455] netlink: 'syz.4.2650': attribute type 39 has an invalid length.
[  309.629758][T12457] loop5: detected capacity change from 0 to 256
[  309.646272][T12457] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[  309.670699][T12457] exFAT-fs (loop5): start_clu is invalid cluster(0x0)
[  309.997838][T12470] ==================================================================
[  309.997876][T12470] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1183/0x1e40
[  309.997913][T12470] Write of size 8 at addr ffffc9000484a3f8 by task syz.5.2653/12470
[  309.997929][T12470] 
[  309.997942][T12470] CPU: 0 UID: 0 PID: 12470 Comm: syz.5.2653 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  309.997963][T12470] Tainted: [L]=SOFTLOCKUP
[  309.997969][T12470] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  309.997979][T12470] Call Trace:
[  309.997986][T12470]  <TASK>
[  309.997995][T12470]  dump_stack_lvl+0xe8/0x150
[  309.998016][T12470]  print_address_description+0x55/0x1e0
[  309.998036][T12470]  ? sys_imageblit+0x1183/0x1e40
[  309.998054][T12470]  print_report+0x58/0x70
[  309.998068][T12470]  kasan_report+0x117/0x150
[  309.998091][T12470]  ? sys_imageblit+0x1183/0x1e40
[  309.998110][T12470]  sys_imageblit+0x1183/0x1e40
[  309.998133][T12470]  drm_fbdev_shmem_defio_imageblit+0x2c/0x110
[  309.998157][T12470]  cw_putcs+0x1626/0x18e0
[  309.998190][T12470]  ? __pfx_cw_putcs+0x10/0x10
[  309.998209][T12470]  ? fb_get_color_depth+0x162/0x280
[  309.998229][T12470]  fbcon_putcs+0x3c5/0x5a0
[  309.998243][T12470]  ? __pfx_cw_putcs+0x10/0x10
[  309.998260][T12470]  do_update_region+0x389/0x440
[  309.998282][T12470]  redraw_screen+0xa3d/0x1020
[  309.998300][T12470]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  309.998381][T12470]  ? __pfx_redraw_screen+0x10/0x10
[  309.998398][T12470]  ? _raw_spin_unlock_irqrestore+0x74/0x80
[  309.998419][T12470]  ? tty_do_resize+0xe1/0x130
[  309.998431][T12470]  vc_do_resize+0xffc/0x1550
[  309.998453][T12470]  ? __pfx_vc_do_resize+0x10/0x10
[  309.998470][T12470]  ? fbcon_do_set_font+0x70f/0x1d00
[  309.998488][T12470]  fbcon_do_set_font+0x93f/0x1d00
[  309.998509][T12470]  fbcon_set_font+0x6f5/0x970
[  309.998559][T12470]  con_font_op+0xc37/0xfe0
[  309.998582][T12470]  ? __pfx_con_font_op+0x10/0x10
[  309.998598][T12470]  ? __might_fault+0xaf/0x130
[  309.998610][T12470]  ? __might_fault+0xaf/0x130
[  309.998632][T12470]  vt_ioctl+0x1b93/0x20d0
[  309.998650][T12470]  ? vt_ioctl+0x91/0x20d0
[  309.998666][T12470]  ? __pfx_vt_ioctl+0x10/0x10
[  309.998688][T12470]  ? __rcu_read_unlock+0x83/0xe0
[  309.998703][T12470]  ? tty_jobctrl_ioctl+0x378/0xba0
[  309.998721][T12470]  ? __fget_files+0x2a/0x420
[  309.998743][T12470]  tty_ioctl+0x920/0xdd0
[  309.998754][T12470]  ? __pfx_tty_ioctl+0x10/0x10
[  309.998765][T12470]  __se_sys_ioctl+0xfc/0x170
[  309.998783][T12470]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.998797][T12470]  do_syscall_64+0x174/0x580
[  309.998816][T12470]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.998832][T12470] RIP: 0033:0x7fbaebf9e0d9
[  309.998854][T12470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  309.998868][T12470] RSP: 002b:00007fbaece8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  309.998886][T12470] RAX: ffffffffffffffda RBX: 00007fbaec226180 RCX: 00007fbaebf9e0d9
[  309.998898][T12470] RDX: 00002000000001c0 RSI: 0000000000004b72 RDI: 0000000000000008
[  309.998909][T12470] RBP: 00007fbaec035024 R08: 0000000000000000 R09: 0000000000000000
[  309.998918][T12470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  309.998927][T12470] R13: 00007fbaec226218 R14: 00007fbaec226180 R15: 00007ffc55a8ca58
[  309.998945][T12470]  </TASK>
[  309.998950][T12470] 
[  309.998957][T12470] The buggy address belongs to a vmalloc virtual mapping
[  309.998973][T12470] Memory state around the buggy address:
[  309.998982][T12470]  ffffc9000484a280: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  309.998993][T12470]  ffffc9000484a300: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  309.999003][T12470] >ffffc9000484a380: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  309.999012][T12470]                                                                 ^
[  309.999023][T12470]  ffffc9000484a400: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  309.999032][T12470]  ffffc9000484a480: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  309.999041][T12470] ==================================================================
[  309.999105][T12470] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  309.999139][T12470] CPU: 0 UID: 0 PID: 12470 Comm: syz.5.2653 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  309.999161][T12470] Tainted: [L]=SOFTLOCKUP
[  309.999167][T12470] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  309.999176][T12470] Call Trace:
[  309.999183][T12470]  <TASK>
[  309.999189][T12470]  vpanic+0x56c/0xa60
[  309.999211][T12470]  ? __pfx_vpanic+0x10/0x10
[  309.999230][T12470]  ? __pfx___schedule+0x10/0x10
[  309.999245][T12470]  panic+0xc5/0xd0
[  309.999263][T12470]  ? __pfx_panic+0x10/0x10
[  309.999279][T12470]  ? preempt_schedule_thunk+0x16/0x40
[  309.999293][T12470]  ? sys_imageblit+0x1183/0x1e40
[  309.999312][T12470]  check_panic_on_warn+0x89/0xb0
[  309.999331][T12470]  ? sys_imageblit+0x1183/0x1e40
[  309.999352][T12470]  end_report+0x73/0x170
[  309.999371][T12470]  ? sys_imageblit+0x1183/0x1e40
[  309.999391][T12470]  kasan_report+0x128/0x150
[  309.999411][T12470]  ? sys_imageblit+0x1183/0x1e40
[  309.999428][T12470]  sys_imageblit+0x1183/0x1e40
[  309.999449][T12470]  drm_fbdev_shmem_defio_imageblit+0x2c/0x110
[  309.999469][T12470]  cw_putcs+0x1626/0x18e0
[  309.999501][T12470]  ? __pfx_cw_putcs+0x10/0x10
[  309.999551][T12470]  ? fb_get_color_depth+0x162/0x280
[  309.999571][T12470]  fbcon_putcs+0x3c5/0x5a0
[  309.999585][T12470]  ? __pfx_cw_putcs+0x10/0x10
[  309.999603][T12470]  do_update_region+0x389/0x440
[  309.999624][T12470]  redraw_screen+0xa3d/0x1020
[  309.999646][T12470]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  309.999666][T12470]  ? __pfx_redraw_screen+0x10/0x10
[  309.999685][T12470]  ? _raw_spin_unlock_irqrestore+0x74/0x80
[  309.999706][T12470]  ? tty_do_resize+0xe1/0x130
[  309.999718][T12470]  vc_do_resize+0xffc/0x1550
[  309.999738][T12470]  ? __pfx_vc_do_resize+0x10/0x10
[  309.999754][T12470]  ? fbcon_do_set_font+0x70f/0x1d00
[  309.999771][T12470]  fbcon_do_set_font+0x93f/0x1d00
[  309.999796][T12470]  fbcon_set_font+0x6f5/0x970
[  309.999815][T12470]  con_font_op+0xc37/0xfe0
[  309.999836][T12470]  ? __pfx_con_font_op+0x10/0x10
[  309.999863][T12470]  ? __might_fault+0xaf/0x130
[  309.999878][T12470]  ? __might_fault+0xaf/0x130
[  309.999900][T12470]  vt_ioctl+0x1b93/0x20d0
[  309.999918][T12470]  ? vt_ioctl+0x91/0x20d0
[  309.999936][T12470]  ? __pfx_vt_ioctl+0x10/0x10
[  309.999957][T12470]  ? __rcu_read_unlock+0x83/0xe0
[  309.999972][T12470]  ? tty_jobctrl_ioctl+0x378/0xba0
[  309.999988][T12470]  ? __fget_files+0x2a/0x420
[  310.000005][T12470]  tty_ioctl+0x920/0xdd0
[  310.000015][T12470]  ? __pfx_tty_ioctl+0x10/0x10
[  310.000029][T12470]  __se_sys_ioctl+0xfc/0x170
[  310.000045][T12470]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.000061][T12470]  do_syscall_64+0x174/0x580
[  310.000078][T12470]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.000095][T12470] RIP: 0033:0x7fbaebf9e0d9
[  310.000108][T12470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  310.000125][T12470] RSP: 002b:00007fbaece8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  310.000141][T12470] RAX: ffffffffffffffda RBX: 00007fbaec226180 RCX: 00007fbaebf9e0d9
[  310.000154][T12470] RDX: 00002000000001c0 RSI: 0000000000004b72 RDI: 0000000000000008
[  310.000165][T12470] RBP: 00007fbaec035024 R08: 0000000000000000 R09: 0000000000000000
[  310.000182][T12470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  310.000191][T12470] R13: 00007fbaec226218 R14: 00007fbaec226180 R15: 00007ffc55a8ca58
[  310.000209][T12470]  </TASK>
[  310.000900][T12470] Kernel Offset: disabled

VM DIAGNOSIS:
10:34:17  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff3559c60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=000000000003cc71 RDI=000000000003cc72 RBP=dffffc0000000000 RSP=ffffc9000370ec08
R8 =ffff8881692f0237 R9 =1ffff1102d25e046 R10=dffffc0000000000 R11=ffffffff85673550
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff9aace100 R15=0000000000000000
RIP=ffffffff856735c7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fbaece8a6c0 ffffffff 00c00000
GS =0000 ffff88818d95d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7f93c27dac CR3=0000000117ec4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 00007f7f9475d560
XMM02=00007f7f93bf25e8 00007f7f93bf2618 XMM03=00007f7f93bf2600 00007f7f93bf25e0
XMM04=00007f7f9475d020 00007f7f93bf25c0 XMM05=00007f7f93bf25d0 00007f7f93bf2610
XMM06=00007f7f93bf25f8 00007f7f93bf25c8 XMM07=00007f7f93bf2600 00007f7f93bf25e0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff816c84dc RBX=0000000000000000 RCX=ffff8881bd61bb80 RDX=0000000000010000
RSI=0000000000000008 RDI=ffffffff937152e0 RBP=0000000000000000 RSP=ffffc90000a08fc0
R8 =ffffffff937152e7 R9 =1ffffffff26e2a5c R10=dffffc0000000000 R11=fffffbfff26e2a5d
R12=0000000000000000 R13=0000000000000000 R14=0000000000000001 R15=dffffc0000000000
RIP=ffffffff816c84dd RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fbaeceab6c0 ffffffff 00c00000
GS =0000 ffff8882a8f5d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f00741556c8 CR3=0000000117ec4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=000000000000002d 0000000000002f2e
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffffff0000 XMM09=313a312d342f312d 342f346273752f33
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
