last executing test programs:

19.529980331s ago: executing program 3 (id=2350):
syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x16, &(0x7f0000000180), 0x9, 0x50f6, &(0x7f0000000340)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x1100})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x6, 0x11, r1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
read(r2, &(0x7f0000000000), 0x2000)

13.871925661s ago: executing program 3 (id=2369):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
chdir(0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, 0xffffffffffffffff, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10)
accept4(r0, 0x0, 0x0, 0x0)

12.852168326s ago: executing program 4 (id=2370):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xba7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r3}, 0x38)

11.830443892s ago: executing program 3 (id=2373):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)

10.521159779s ago: executing program 2 (id=2376):
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES16], 0x86, 0x2a9, &(0x7f0000000c00)="$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")
r0 = open(&(0x7f0000000000)='./file1\x00', 0x48a41, 0x54)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000000d)

10.26414821s ago: executing program 2 (id=2377):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0)
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2, 0x0, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)

9.992273011s ago: executing program 2 (id=2380):
syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
get_robust_list(r0, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x2060)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close(0x3)

8.521196538s ago: executing program 2 (id=2382):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f00000000c0)=ANY=[], 0x0)
ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, 0x0)

8.475960939s ago: executing program 0 (id=2383):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
chdir(0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, 0xffffffffffffffff, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10)
accept4(r0, 0x0, 0x0, 0x0)

7.913706401s ago: executing program 4 (id=2385):
r0 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
connect$inet(r0, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94)

7.780692682s ago: executing program 4 (id=2386):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nouid32}, {@noload}]}, 0x1, 0x440, &(0x7f0000000280)="$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")
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x498, 0x320, 0x8, 0x7f02ae, 0x0, 0x200, 0x3f0, 0x2e8, 0x2e8, 0x3f0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2d8, 0x2f8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f8)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
fchown(r0, r2, r3)

7.492617523s ago: executing program 0 (id=2387):
socket(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180)=0x7)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000100)={0x18, 0x0, {0x1, @dev, 'macvlan1\x00'}}, 0x1e)

7.180029595s ago: executing program 4 (id=2388):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x2e, 0x0, "8ddbb51a3cfd954e41e8ccb21f650fa6a867fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71bc4b828c7de258b6b9ca1fc52bcc83e2a016a"}, 0xd8)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x1a103e43)
syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x10, 0x4, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "fb6b9acd8f4e1c92833a2f1e90339d18"}]}}}}}}}}, 0x0)

7.001139086s ago: executing program 3 (id=2389):
r0 = syz_io_uring_setup(0x239, &(0x7f00000000c0)={0x0, 0x0, 0x10100, 0x80000000, 0x185}, &(0x7f00000002c0)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x79540, 0x0)
fsopen(0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r7 = fcntl$dupfd(r6, 0x0, r6)
write$sndseq(r7, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick=0x2f, {}, {}, @raw32}, {0x0, 0x2, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x38)
syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1200808, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES64, @ANYRESOCT, @ANYRES8, @ANYRES16], 0x1, 0x1e6, &(0x7f0000000140)="$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")
truncate(&(0x7f0000000000)='./file2\x00', 0x8800000)
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000080)={0x1, 0x7}, 0x2)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0xb, 0x2000, @fd_index, 0x0, 0x0, 0x0, 0x2d, 0x1, {0x3}})
io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0)

6.420153459s ago: executing program 2 (id=2390):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f00000000c0)={[{@space_cache_v1}, {@autodefrag}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@clear_cache}, {@noacl}, {@noenospc_debug}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKArVHV3YPxzZB90a9oyc/Q0H1lRV5/lR+3czuZ9PD6xERD8XxvHbaDO5Wj4Lls2aanrduXBttdwdtjtXdbL3i3FWznJZ623C9SmW8om7eEqkP5zLZZ0xd0zI+PlIfGxj7FatpBz/O6TefM2Jp0r3kdxg40bJfX4QO1k+ove3viwStP/uPp+85fO3Vbu/lczibNTe9o1SHzmus1z2M04dP7PNm8LYW3r539aSv4ljTUl64QwvF/+nzZM3Ne2n3jB6+eOPH2Fy6+etrCa6ZMfHbQL8b+47W73D3t8oL5f8NHz//jyznelufljq1+WJ/MzeMjdTGxsT6ZmwMAAECv0Rv2mn519KsvnfrQ3YteXH5cxXfH/eqk3eorzv5+x/G7rhz/xUuvbH98l4L5/9DSjv/HQ/51uaNdHcKErsQFA0LYrevxJPCz2J2TB4SwV1eqJT9wWCqwOoQvdCX2z1aVKtE3lhiaCvy+PhOYkAqsiYGWVODGGFiSClwYAytSgRkxsDoVODwGQnv+OA6oz4yj5EBNDLQmG3FFPAvhnfrYWmpbrctWBQAAsJ1kZoeV+XdzznXY1gxxermipqcM8QzsohmqUzWkZ7DZaVXRGip6qqG8pxqy41700cMvqLmsp5oLTsMoy8/w4ZDvlA+YuPeP7rpxxE3NL0787rtjj//Kn998d/X+//Tf7zln/nUHFMz/mz56/l/dTUfKCo7/hzC562/MXZ6JdGTjrS15GQAAAIBtcNVjS5+84YCj/s99L99355euvaF89dVf/7+vbLxg71HHDS/r+3ffXlEw/59Q2vn/cZ9In5zM4dG4G2L2gBCa8gNJtQcXBpKj3v0yAQAAAOgNssfjs8fC2zO3ySna6fl0Yf6WrcwfD/xP6Db/5Zv++tkvX/vkiQuH7bPhiv925gdlnx/7u12OXTvy8bf2HPYPDX0Lz/9vKe38/9r826QTa2IvrhwQQt+cwCOxl52BLkNj4OVD8wOZ8a+JG2BxrCpzYkK2qsWxRGsMNKUCy4qV+G22xG75gcyTlW38guw42jMlcgIAAADwiYu7A+Jx+Xj+/z2TD/jS/oNeGvPinvcufG3C0hNOrf3hPrfs+vqAjkljDpxwyBHPFMz/W7fu/P+ueXDB6f0d/UIYWRFCn/QPAx6tTRYGjIG6skzi/tqkrj7pqs6rDWF858DSVb2SWf+/Ir3G4BM1SVUxsNveP900rDNxQ00II3MDz3zz+jGdifmpQLbxb9SEMKRztOnGV/ZNGq9MN35N3xD2zAlkqzq5bwidjVWlq3qwOnMdg3RVt1WHMDAnkK3qwOoQFgYAeqn4r3Rm7oPzFp49e3pHR9sZOzAR9+HXhFntHW2NM+Z0zKwu0qeZqT7nLWN0XuGYSr3yzfOZJYqmDrl9eCnp7O8Em3LbyuzHLzhxMHM/fheq7Bpnc2Xe3dHpIQ/fp7CJkPNNqtiQy3fwkGtzK9nyJBbUH/NXhX6h74J5bWc0njV9/vwzRiV/S83enPyNh5mSbTUqva1qu+tbCS+PoqtlpXzcbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/PQx1v+6qTg118/Uljms7DnX3ipxKPolPDQkJid6WmL6k7PwJ0359/7f2WHPaWSft8fd7zBxx0l9d/pu5JzYeMvlX1//l2oL5/9yPnv/HT534yZ9Zn6HY8f+GeJg/eXzLYf7WGFhW6vH/hmJH87MnBgxNBRbFwCKH+QEAAPhsiLsj497MuFf6urp/uvvImTMOef+XJ0y5+m/Hjjv1rPX7Nlx89bFL/sP6d5asOuLtgvn/otJ+/7+d1v/PLl3/tWLL/O8fSzQVW/8/vcx/dv3/RcXW/08v859d/3/Zp7D+/4JsILVJ3rH+PwAA8Fnwya3/3+Py/ukLBBRk6HF5//QFAgoy9LiMf6kXCNjq9f/ndPxF7aDL54w7dMTcHz+yau8lA2/70vMTf73P0oNG3LvylvdG3Vow/19S2vzfwv0AAACw83jol32/ffG7w+5/6pH3jyy79Lcbbzr+r9oOOOQPA5tPmXx0zfdv+reC+f+y0ub/n/z6f6HY+f9DiwVaii0MaP0/AAAAeqli6//dPPDloavnj7jxsZ+/ectLrb+YOf61f7fkB1+ZPqzp5jXrftMwY33B/H9FafP/eNpFeV7u2JsP65M17UJ6TbuN9dmfDAAAAEDvUB4aGytLzJu3MuphH7/NdZmlQD8qnevp+watWlD+0FVl1Rt/cMm0QxrPPfbMOUdetP77tU/+pHZqY/UZBfP/1aXN//N+l/FA7aT6y96eePCHK0/+4+n7zl87dcvxfwAAAGDHKXW/BAAAAAAAAAAAAAAA8Ol7qnXpQR+MOvqNmXuN+tM3jn3hB4u/+M1H/ubaP5/588Pv26t987ApBb//D5O7yhX7/X+87l/8fcGuebljqz2v/5e5P+WYWxd2LVn4aH0I++QGZp8/+3Mhc23+/XIDq6buP7gzcX66xH0vHv5aZ2JaOnDUiF3e60yMTwVa4yKJX0gH4lUV3+ufCsTlFZ9MB+L2WJEOVGUCl/RPxlGW3lYb6pJtVZbeVs/VhTAgJ5DdVnfXJW2UpQd4VSqQHeDp6UAc4KRMoDzdq1v7Jb2KgbpY9G/6Jb0CAGCnFb8FVoZZ7R1tTfErfLzdvSL/Nspbsuy8wmrLSmz++czSZFOH3D68lHSf9HfRLdcarwzVnUMYVfB1NTdLWdcot08tPWy6XYsMuafV3sqLlEvb2k1XVXxENcmIGmfM6ZhZ2ePAR/ecpbmixyyjCiY7uVnKuzZpCbWU0JcSRlTitimhy/F+eWhs7JPKNS4GG0Kenl4Rpf5eP3edv2Kvgtw8f1tz7aV9Bvd5/9/GX/TQgwMqO06d3HbR7o/988BRM3/8wwdbr/l9wfy/obT5f3XuuN7LXAxgUbyy3sEDQmgtcUQAAADw2fc/z11+x4lz1myYtbri2d/9bnb5cSdWbj7nrnPOvui5+xcfdcm/v3lb4yvKntp04hubzvrrN37ylesePuulw2ecddekdYesb6u+8bt/sfzUIQXz/6Glzf/jHqzMoeBkb8fqeP3/CwaE0HVp/YYk8LM43JMHhLBXV6ollkguqP+1WKIpCfws7jDZP5Zobcmvqm8MrEgFfl+fCaxOBdbEQGYvxU9DZlfOFfUhjOlKTc4vMTeWaEgFjouBoalAYww0pQL9Y2BCKvBm/0ygJRX4xxgI7fnb6s7+mW0FAACwNTLzrMr8uyE9z1tR0VOGsp4y1PaUobynDNU9ZSg2inj/jpihMnXySllOpsp0rTWpWgoyxIvhb3W/CjKE3+bnTBcsaDqef5A936AsP8O4H97RetDX5v1408U/evzIAy88csmVb196dL/BVz77v9vP7dd/U23B/L+ptPl/bf5t0vqaOP/fcv2/JPBI7N6V8dTxoTHw8qH5gcyOgTVxsrs4W1VLpkRm0r44lpgQA0NTgbkxMCEVaJ2cCSwbnB/IzLSzjV+Qbbw9UyInAAAAAJ+4uIMg7qaJ8/+V48I7exz5fvPuVw6cO+7xR847YnrNrtU1/zx+7dLxl1Y/tF/fgvn/hNLm/7G9frmNXRh782r/EO4u29KbbGBEXRKI+zHq4s/j96gL4XM5OziyJdpqkxJVqYbDwzXJL9Sr0lXdW5OsMRDvT3niwVWXdSauqglh35y9L9k2XqhO2qhJB4ZVJYHadGBORRKIe36ygXvKkwBss+xewfiCypzqktXQfbkir7/PyjVB08Mr2AfaTb7ufnO1o1SnH8jsU83auqetoDp2iIK3x2rvtt74bmvwbsv9IpX5hrJ5S6g6lM9smzV9Qcf8+EjuL1kL7KDnOfdXqqWkt8PrcNHH723PqtMdaEp9fDR1X67712FZrO6B2kn1l7098eCVJ//x9H3nr51acjeKiD8UPvjWuQc8l7N5d7TqkHnN9brPkxafJ73x38BQT1sIYfkFs5584l/ef75iffN/OXDs8tvefGz5Tw56YNaIL2y45Msb33r3qIL5f0tp8/+K1G2XD+LGnDcghOE5G/fRuPknDkg+B3MCyafkwMJAcsh9fX3RT04AAADY3rK7O7L7C9ozt8kJ4el5cmH+lq3MH/dXTOg2f6n9HjjmH7536FWvf+Pr63e//NGlT637T2++csS0Qx/Y9PSKla83H/v5pwvm/60fPf/vm+qm4/+O/7ODOP7frZ19V3Tf9AOLtmlXdEF17BCO/3drZ3+3Of7fLcf/Hf/vjuP/PXD8v1s7+9NW8C1pri9dIYTWATfc/ova6cP7XXHOt2as/fnT7zSNe6Hu3KPv/B+HLw7XnLfqzwXz/7mlzf+t/9f9on3Z9f9ai63/N7fY+n+LrP8HAADsUEUWmkvP8wpW7yvIkF69ryBDjwsE9rjEoPX/tnr9v9qTzj7plfq39rpm4u3/+c7pFz5/0onP7tvn+RNuP+GmkVcPf+nLGwrm/4tKm//Hl0O/3NZ7y/p/QycXqWpJDMy1MCAAAAA7o2I7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh0rXhw8Rc3L97noJue/fxNh//rsjWz9v7VAZtHjzm5cfjigWVX/t2/vDVowcI32iadeW3L9OXXbFi5NIT2rnJlSfGyhwaVl4/+wzF33XbFw03TBk85tzpTb2Xm9ot5uWOrH9aHsCznkbqY2FjfeWdLYMoxty6s6Ew8Wh/CPrmB2efP/lxn4sb6EPbLDayauv/gzsT56RL3vXj4a52JaenAUSN2ea8zMT4TKEt397r+SXfL0t29rH8IA3IC2e5+u39+Vdk2/mMmUJ5u4+a6pI0YqItFf1SXtBEDHbFEe98QRlaE0Cdd1a+rk6r6pKv6++qkqj7pqv5rdQjjQwgV6aperEqqqkiPfG1VUlUM7Lb3TzcN60wsqwphZG7gmW9eP6YzcXoqkG3861UhDOl8yaQbv6Myabwy3fhVlSHsGUKoSpf414qkRFW6xCsVIQzMCWQbP7UihIWBz4T44TMz98F5C8+ePb2jo+2MHZioyrRVE2a1d7Q1zpjTMbM61adiynLSm8/7+GN/ftM5Mzpvpw65fXgp6YpMucquLjdX5t0dvbP3PvarNreSLc9HQf0xf1XoF/oumNd2RuNZ0+fPP2NU8rfU7M3J3z6ZaLKtRvWWbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/22Oo13/yQ929IqeST+IDQEJCorclyvM+3Zp29g/ygi/6WzpaGaq7PqALphW5Wcq6Rrk9Bn3Yxxzxx/me0uOIRhVMHAqyNPecZXTBZGJLlpokS9f3uoLJYW5N5V2bNN4vD42NfYpth4b8u7mb961t2LzrMpuu1DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBYAAAAAECYv3UYPRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlwIAAP//WKHPZA==")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r0, 0x0, 0x0, 0x1100f4)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x2, 0x0, 0x0, 0xb)

6.259868779s ago: executing program 0 (id=2391):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
r1 = socket$igmp6(0xa, 0x3, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = userfaultfd(0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
times(0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x41)
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc020aa00, 0x0)
open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x208e02, 0x10)
fcntl$dupfd(r2, 0x0, r2)
syz_mount_image$cramfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x1, 0x157, &(0x7f0000000440)="$eJzsz79rGnEYx/H3V6/WtrZaasEWqkKHHop4KnbroKVSofagpUsnwZxE8EeIEDLGQLYM+QMcIkImcQgZMyRmMlEI5u8QsoVMCfdDEsfs39dy3Od5+NxzP75NVQLgxva91VhbN9ptYyX6Ry8V/h4eHb8hAs8B79Lc3j/Jwar5VGDeATM+e+GUVVp1832eAxXIv4JqrW5o2LsvzSxoZyknUz/D6D1U7YYoHbwsslrdyDh7HxXI+x/67nrwxex76/QJ54ZufDg4/z0ZFxOxg09udorxyDsBm4/ysLGbLnzo+0KuZg9uC3lrfpUcJy6Tw8FsOin90kv6NJNOf81oKU3LzvSLSTG7tYfy07cB/+0+j/PFmIdQWPkH2wK6AgbWfH4qXgOj/Ru9gQhaqwLE8sRv3X3dDFiTSjn0rF8OBly4VRZ/JEmSJEmSJEmSJElPdh8AAP//4Nthfg==")
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x58c}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

6.2257143s ago: executing program 4 (id=2392):
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
gettid()
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_open_dev$hiddev(0x0, 0x1, 0xe000)
r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r7, &(0x7f0000000040)=""/52, 0x34)
getdents64(r7, 0xfffffffffffffffe, 0x29)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
io_getevents(0x0, 0x0, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4.667666117s ago: executing program 3 (id=2395):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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")
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0x81, 0x0)
fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='attr/prev\x00')

3.604043042s ago: executing program 0 (id=2397):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
chdir(0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, 0xffffffffffffffff, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10)
accept4(r0, 0x0, 0x0, 0x0)

3.414840593s ago: executing program 1 (id=2398):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000900008500000004000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x2d)
ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000040)=0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000000))

3.412023943s ago: executing program 4 (id=2399):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sched_setscheduler(r0, 0x2, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)

2.152810059s ago: executing program 3 (id=2400):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/1)

2.1519286s ago: executing program 0 (id=2401):
set_mempolicy(0x2, &(0x7f0000000040)=0x4, 0x5)

2.13063819s ago: executing program 1 (id=2402):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}]}, 0x20}}, 0x0)

2.11085964s ago: executing program 2 (id=2403):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0)
rt_sigaction(0x40, &(0x7f0000000380)={0x0, 0x88000001, 0x0, {[0x7]}}, 0x0, 0x8, &(0x7f00000003c0))
syz_clone3(&(0x7f0000006180)={0x100000000, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58)

2.01602662s ago: executing program 0 (id=2404):
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_emit_ethernet(0x7f, &(0x7f0000000300)=ANY=[], 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
listen(r0, 0x0)
accept4$rose(r0, 0x0, 0x0, 0x0)

2.01569774s ago: executing program 1 (id=2405):
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x667, &(0x7f00000002c0)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5)

1.807885411s ago: executing program 1 (id=2406):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x11, 0x3, 0x10)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={<r4=>0xffffffffffffffff}, 0x13f, 0x2}}, 0x20)
capget(&(0x7f0000000300)={0x20080522, r0}, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x2, @loopback}, @in={0x2, 0x4e22, @local}}}, 0x118)

202.199049ms ago: executing program 1 (id=2407):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000700)={0x2, &(0x7f0000000000)=[{0x50, 0x0, 0x0, 0xc6}, {0x6, 0x1}]}, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

0s ago: executing program 1 (id=2408):
syz_emit_ethernet(0x56, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaa86dd6000000000200000a880000000000000000060a600000000002cfe8000000000000000000000000000bb2f0300000000000004017f040100050204530001000502001805020880040103"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x80}}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_emit_ethernet(0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004602002800640000d1219078ac1414bbfffffdff940400004e214e220411907828c0112b00cf0642"], 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x8182, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@id, 0x10, 0x0}, 0x0)
poll(&(0x7f0000000180)=[{r0, 0x10}], 0x1, 0x6)
unshare(0x28000400)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

ryption failed: -22
[  378.329228][ T1425] ieee802154 phy1 wpan1: encryption failed: -22
[  378.620481][ T7610] netlink: 'syz.0.930': attribute type 10 has an invalid length.
[  378.628442][ T7610] netlink: 40 bytes leftover after parsing attributes in process `syz.0.930'.
[  379.527848][ T7620] loop3: detected capacity change from 0 to 512
[  380.253326][ T7620] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  380.862006][ T7620] EXT4-fs error (device loop3): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  381.576097][ T7620] EXT4-fs (loop3): Remounting filesystem read-only
[  381.587748][ T7620] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.935: invalid indirect mapped block 1 (level 1)
[  381.607283][ T7620] EXT4-fs (loop3): Remounting filesystem read-only
[  381.614767][ T7620] EXT4-fs (loop3): 1 truncate cleaned up
[  381.624887][ T7620] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,dioread_nolock,. Quota mode: none.
[  382.240287][ T7651] loop2: detected capacity change from 0 to 8
[  382.843470][ T7656] netlink: 'syz.0.943': attribute type 10 has an invalid length.
[  382.852582][ T7656] netlink: 40 bytes leftover after parsing attributes in process `syz.0.943'.
[  383.539166][ T7664] loop2: detected capacity change from 0 to 512
[  384.652563][ T7664] EXT4-fs (loop2): Ignoring removed oldalloc option
[  385.055942][ T7664] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.945: Parent and EA inode have the same ino 15
[  385.465658][ T7664] EXT4-fs (loop2): Remounting filesystem read-only
[  385.480824][ T7664] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.945: Parent and EA inode have the same ino 15
[  385.493358][ T7688] tmpfs: Unknown parameter 'usrquota'
[  385.545284][ T7664] EXT4-fs (loop2): Remounting filesystem read-only
[  385.566534][ T7664] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.945: inode #261888: comm syz.2.945: iget: illegal inode #
[  385.615160][ T7664] EXT4-fs (loop2): Remounting filesystem read-only
[  385.649910][ T7664] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.945: error while reading EA inode 261888 err=-117
[  385.726835][ T7664] EXT4-fs (loop2): Remounting filesystem read-only
[  385.749699][ T7664] EXT4-fs (loop2): 1 orphan inode deleted
[  385.830191][ T7664] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x0000000000000040,noauto_da_alloc,jqfmt=vfsv1,oldalloc,init_itable,. Quota mode: none.
[  385.942102][ T7698] binder: 7697:7698 ioctl 4018f50b 200000c0 returned -22
[  386.016818][ T7699] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  386.053498][ T7699] loop3: detected capacity change from 0 to 128
[  386.108825][ T7699] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  387.014879][ T7711] loop4: detected capacity change from 0 to 8
[  388.066243][ T7720] loop3: detected capacity change from 0 to 4096
[  388.215314][ T7720] ntfs3: Unknown parameter '@'
[  388.808789][ T7720] loop3: detected capacity change from 0 to 256
[  389.055076][ T7720] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0aabff0a, utbl_chksum : 0xe619d30d)
[  390.130414][ T7744] netlink: 68 bytes leftover after parsing attributes in process `syz.0.971'.
[  390.556554][ T7746] loop3: detected capacity change from 0 to 8
[  390.663439][ T7746] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  390.763486][ T7746] cramfs: Error -3 while decompressing!
[  390.769378][ T7746] cramfs: ffffffff96bbb238(27)->ffff888072c2d000(4096)
[  390.776553][ T7746] cramfs: Error -3 while decompressing!
[  390.782180][ T7746] cramfs: ffffffff96bbb238(27)->ffff888072c2d000(4096)
[  390.861674][   T26] audit: type=1800 audit(2000000003.550:25): pid=7746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.970" name="file0" dev="loop3" ino=244 res=0 errno=0
[  391.286315][ T7753] loop3: detected capacity change from 0 to 256
[  395.097784][ T7776] loop4: detected capacity change from 0 to 4096
[  395.881175][ T7776] ntfs3: loop4: MFT: r=1f, expect seq=1 instead of 0!
[  397.201553][ T7792] loop3: detected capacity change from 0 to 4096
[  402.548546][ T7827] loop2: detected capacity change from 0 to 64
[  402.606708][ T7828] loop3: detected capacity change from 0 to 256
[  405.134954][ T4297] attempt to access beyond end of device
[  405.134954][ T4297] loop2: rw=1, want=66, limit=64
[  405.172591][ T4297] buffer_io_error: 6 callbacks suppressed
[  405.172608][ T4297] Buffer I/O error on dev loop2, logical block 65, lost async page write
[  405.229793][ T4297] attempt to access beyond end of device
[  405.229793][ T4297] loop2: rw=1, want=67, limit=64
[  405.246121][ T4297] Buffer I/O error on dev loop2, logical block 66, lost async page write
[  405.255226][ T4297] attempt to access beyond end of device
[  405.255226][ T4297] loop2: rw=1, want=68, limit=64
[  405.310292][ T4297] Buffer I/O error on dev loop2, logical block 67, lost async page write
[  405.329141][ T4297] attempt to access beyond end of device
[  405.329141][ T4297] loop2: rw=1, want=69, limit=64
[  405.353389][ T4297] Buffer I/O error on dev loop2, logical block 68, lost async page write
[  405.398371][ T4297] attempt to access beyond end of device
[  405.398371][ T4297] loop2: rw=1, want=73, limit=64
[  405.443308][ T4297] Buffer I/O error on dev loop2, logical block 72, lost async page write
[  405.480170][ T4297] attempt to access beyond end of device
[  405.480170][ T4297] loop2: rw=1, want=74, limit=64
[  405.831602][ T4297] Buffer I/O error on dev loop2, logical block 73, lost async page write
[  405.872150][ T4297] attempt to access beyond end of device
[  405.872150][ T4297] loop2: rw=1, want=77, limit=64
[  405.942358][ T4297] Buffer I/O error on dev loop2, logical block 76, lost async page write
[  405.983883][ T4297] attempt to access beyond end of device
[  405.983883][ T4297] loop2: rw=1, want=78, limit=64
[  406.054898][ T4297] Buffer I/O error on dev loop2, logical block 77, lost async page write
[  406.096875][ T4297] attempt to access beyond end of device
[  406.096875][ T4297] loop2: rw=1, want=165, limit=64
[  406.973877][ T7864] loop2: detected capacity change from 0 to 4096
[  407.108283][ T7864] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  407.168412][ T7864] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  407.222010][ T7864] ntfs3: loop2: Failed to load $Extend.
[  410.047977][ T7889] loop4: detected capacity change from 0 to 1024
[  410.185880][ T7889] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback.
[  411.264010][ T7901] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11
[  416.032488][ T7940] loop2: detected capacity change from 0 to 4096
[  416.707047][ T7946] loop2: detected capacity change from 0 to 4096
[  418.061279][ T7965] loop3: detected capacity change from 0 to 128
[  418.087260][ T7965] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  418.880177][    T7] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  421.260213][    T7] usb 4-1: unable to get BOS descriptor or descriptor too short
[  421.302032][ T7984] loop4: detected capacity change from 0 to 1024
[  421.380259][    T7] usb 4-1: unable to read config index 0 descriptor/start: -71
[  421.387878][    T7] usb 4-1: can't read configurations, error -71
[  422.986009][ T8003] loop2: detected capacity change from 0 to 1024
[  424.515798][ T8018] loop3: detected capacity change from 0 to 8
[  427.756223][ T8040] loop3: detected capacity change from 0 to 4096
[  431.107206][ T4735] hfsplus: b-tree write err: -5, ino 4
[  433.108190][ T8082] loop2: detected capacity change from 0 to 4096
[  433.437922][ T8085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  434.322282][ T8099] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1059'.
[  438.868198][ T8137] IPVS: Error connecting to the multicast addr
[  439.155506][ T8139] loop4: detected capacity change from 0 to 4096
[  439.443401][ T8144] loop3: detected capacity change from 0 to 4096
[  439.856919][ T1425] ieee802154 phy0 wpan0: encryption failed: -22
[  439.863249][ T1425] ieee802154 phy1 wpan1: encryption failed: -22
[  440.067404][ T8151] loop4: detected capacity change from 0 to 1024
[  440.264539][ T8151] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,barrier=0x0000000000000000,nodelalloc,acl,errors=remount-ro,. Quota mode: none.
[  441.336908][ T8150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  447.372524][ T8199] loop4: detected capacity change from 0 to 8
[  448.773276][ T8210] loop4: detected capacity change from 0 to 1024
[  448.905556][ T8212] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1091'.
[  448.967654][ T8210] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,barrier=0x0000000000000000,nodelalloc,acl,errors=remount-ro,. Quota mode: none.
[  449.216370][ T8209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  451.878619][ T8234] loop4: detected capacity change from 0 to 512
[  452.017109][ T8234] EXT4-fs (loop4): Ignoring removed oldalloc option
[  452.127408][ T8234] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.1097: Parent and EA inode have the same ino 15
[  452.147243][ T8234] EXT4-fs (loop4): Remounting filesystem read-only
[  452.154195][ T8234] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.1097: Parent and EA inode have the same ino 15
[  452.173094][ T8234] EXT4-fs (loop4): Remounting filesystem read-only
[  452.179685][ T8234] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1097: inode #261888: comm syz.4.1097: iget: illegal inode #
[  452.199670][ T8234] EXT4-fs (loop4): Remounting filesystem read-only
[  452.207375][ T8234] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1097: error while reading EA inode 261888 err=-117
[  452.225518][ T8234] EXT4-fs (loop4): Remounting filesystem read-only
[  452.232347][ T8234] EXT4-fs (loop4): 1 orphan inode deleted
[  452.238090][ T8234] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x0000000000000040,noauto_da_alloc,jqfmt=vfsv1,oldalloc,init_itable,. Quota mode: none.
[  455.193173][ T8265] loop4: detected capacity change from 0 to 8
[  455.275382][ T8267] loop3: detected capacity change from 0 to 64
[  456.193023][ T8273] loop4: detected capacity change from 0 to 4096
[  456.418296][ T4735] attempt to access beyond end of device
[  456.418296][ T4735] loop3: rw=1, want=66, limit=64
[  456.525077][ T4735] Buffer I/O error on dev loop3, logical block 65, lost async page write
[  456.537964][ T4735] attempt to access beyond end of device
[  456.537964][ T4735] loop3: rw=1, want=67, limit=64
[  456.549338][ T4735] Buffer I/O error on dev loop3, logical block 66, lost async page write
[  456.578839][ T4735] attempt to access beyond end of device
[  456.578839][ T4735] loop3: rw=1, want=68, limit=64
[  456.618939][ T4735] Buffer I/O error on dev loop3, logical block 67, lost async page write
[  456.650142][ T4735] attempt to access beyond end of device
[  456.650142][ T4735] loop3: rw=1, want=69, limit=64
[  456.774078][ T8277] loop4: detected capacity change from 0 to 512
[  456.795937][ T4735] Buffer I/O error on dev loop3, logical block 68, lost async page write
[  456.855440][ T8277] EXT4-fs (loop4): Ignoring removed oldalloc option
[  456.871704][ T4735] attempt to access beyond end of device
[  456.871704][ T4735] loop3: rw=1, want=73, limit=64
[  456.909505][ T8277] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.1106: Parent and EA inode have the same ino 15
[  456.926486][ T8277] EXT4-fs (loop4): Remounting filesystem read-only
[  456.933180][ T8277] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.1106: Parent and EA inode have the same ino 15
[  456.950548][ T8277] EXT4-fs (loop4): Remounting filesystem read-only
[  456.957119][ T8277] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1106: inode #261888: comm syz.4.1106: iget: illegal inode #
[  456.977207][ T8277] EXT4-fs (loop4): Remounting filesystem read-only
[  456.983786][ T8277] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1106: error while reading EA inode 261888 err=-117
[  456.998123][ T8277] EXT4-fs (loop4): Remounting filesystem read-only
[  457.004839][ T8277] EXT4-fs (loop4): 1 orphan inode deleted
[  457.010676][ T8277] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x0000000000000040,noauto_da_alloc,jqfmt=vfsv1,oldalloc,init_itable,. Quota mode: none.
[  457.103723][ T4735] Buffer I/O error on dev loop3, logical block 72, lost async page write
[  457.184827][ T4735] attempt to access beyond end of device
[  457.184827][ T4735] loop3: rw=1, want=74, limit=64
[  457.420479][ T4735] Buffer I/O error on dev loop3, logical block 73, lost async page write
[  457.462682][ T4735] attempt to access beyond end of device
[  457.462682][ T4735] loop3: rw=1, want=77, limit=64
[  457.489002][ T4735] Buffer I/O error on dev loop3, logical block 76, lost async page write
[  457.535569][ T4735] attempt to access beyond end of device
[  457.535569][ T4735] loop3: rw=1, want=78, limit=64
[  457.567015][ T4735] Buffer I/O error on dev loop3, logical block 77, lost async page write
[  457.599437][ T4735] attempt to access beyond end of device
[  457.599437][ T4735] loop3: rw=1, want=165, limit=64
[  458.399705][ T8291] loop3: detected capacity change from 0 to 4096
[  459.640286][ T8303] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1112'.
[  463.378740][ T8323] loop4: detected capacity change from 0 to 64
[  463.481031][ T8324] loop3: detected capacity change from 0 to 64
[  464.636737][  T155] attempt to access beyond end of device
[  464.636737][  T155] loop4: rw=1, want=66, limit=64
[  464.795683][  T155] Buffer I/O error on dev loop4, logical block 65, lost async page write
[  464.807159][ T5263] attempt to access beyond end of device
[  464.807159][ T5263] loop3: rw=1, want=66, limit=64
[  464.853343][ T5263] Buffer I/O error on dev loop3, logical block 65, lost async page write
[  464.880129][  T155] attempt to access beyond end of device
[  464.880129][  T155] loop4: rw=1, want=67, limit=64
[  465.502097][ T5263] attempt to access beyond end of device
[  465.502097][ T5263] loop3: rw=1, want=67, limit=64
[  465.523317][  T155] Buffer I/O error on dev loop4, logical block 66, lost async page write
[  465.660859][ T5263] Buffer I/O error on dev loop3, logical block 66, lost async page write
[  465.727333][  T155] attempt to access beyond end of device
[  465.727333][  T155] loop4: rw=1, want=68, limit=64
[  465.837584][ T5263] attempt to access beyond end of device
[  465.837584][ T5263] loop3: rw=1, want=68, limit=64
[  465.901755][  T155] Buffer I/O error on dev loop4, logical block 67, lost async page write
[  465.992717][ T5263] Buffer I/O error on dev loop3, logical block 67, lost async page write
[  466.029254][  T155] attempt to access beyond end of device
[  466.029254][  T155] loop4: rw=1, want=69, limit=64
[  466.165102][ T8342] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1124'.
[  466.174307][ T5263] attempt to access beyond end of device
[  466.174307][ T5263] loop3: rw=1, want=69, limit=64
[  466.195250][  T155] Buffer I/O error on dev loop4, logical block 68, lost async page write
[  466.231613][ T5263] Buffer I/O error on dev loop3, logical block 68, lost async page write
[  466.248439][  T155] attempt to access beyond end of device
[  466.248439][  T155] loop4: rw=1, want=73, limit=64
[  466.266068][ T5263] attempt to access beyond end of device
[  466.266068][ T5263] loop3: rw=1, want=73, limit=64
[  466.277524][ T5263] Buffer I/O error on dev loop3, logical block 72, lost async page write
[  466.286159][ T5263] Buffer I/O error on dev loop3, logical block 73, lost async page write
[  472.846242][ T8389] loop2: detected capacity change from 0 to 512
[  472.925411][ T8389] EXT4-fs (loop2): Ignoring removed oldalloc option
[  473.090844][ T8389] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.1135: Parent and EA inode have the same ino 15
[  473.107870][ T8389] EXT4-fs (loop2): Remounting filesystem read-only
[  473.114603][ T8389] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.1135: Parent and EA inode have the same ino 15
[  473.128286][ T8389] EXT4-fs (loop2): Remounting filesystem read-only
[  473.135051][ T8389] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1135: inode #261888: comm syz.2.1135: iget: illegal inode #
[  473.166462][ T8389] EXT4-fs (loop2): Remounting filesystem read-only
[  473.173091][ T8389] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1135: error while reading EA inode 261888 err=-117
[  473.188140][ T8389] EXT4-fs (loop2): Remounting filesystem read-only
[  473.195229][ T8389] EXT4-fs (loop2): 1 orphan inode deleted
[  473.201893][ T8389] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x0000000000000040,noauto_da_alloc,jqfmt=vfsv1,oldalloc,init_itable,. Quota mode: none.
[  475.627274][ T8406] loop3: detected capacity change from 0 to 4096
[  475.965725][ T8406] ntfs3: Unknown parameter '@'
[  477.364035][ T8406] loop3: detected capacity change from 0 to 256
[  477.465445][ T8406] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0aabff0a, utbl_chksum : 0xe619d30d)
[  478.004543][ T8432] loop3: detected capacity change from 0 to 256
[  480.016523][ T8450] loop3: detected capacity change from 0 to 8
[  485.347246][ T8496] loop2: detected capacity change from 0 to 1024
[  486.832438][ T8514] loop4: detected capacity change from 0 to 64
[  486.857153][ T8501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  487.017622][ T8517] team0: Device ipvlan1 failed to register rx_handler
[  487.781380][ T1273] handle_bad_sector: 8 callbacks suppressed
[  487.781400][ T1273] attempt to access beyond end of device
[  487.781400][ T1273] loop4: rw=1, want=66, limit=64
[  487.942136][ T1273] buffer_io_error: 6 callbacks suppressed
[  487.942366][ T1273] Buffer I/O error on dev loop4, logical block 65, lost async page write
[  488.195292][ T1273] attempt to access beyond end of device
[  488.195292][ T1273] loop4: rw=1, want=67, limit=64
[  488.500162][ T1273] Buffer I/O error on dev loop4, logical block 66, lost async page write
[  488.529184][ T1273] attempt to access beyond end of device
[  488.529184][ T1273] loop4: rw=1, want=68, limit=64
[  488.590061][ T1273] Buffer I/O error on dev loop4, logical block 67, lost async page write
[  488.639169][ T1273] attempt to access beyond end of device
[  488.639169][ T1273] loop4: rw=1, want=69, limit=64
[  488.710098][ T1273] Buffer I/O error on dev loop4, logical block 68, lost async page write
[  488.740369][ T1273] attempt to access beyond end of device
[  488.740369][ T1273] loop4: rw=1, want=73, limit=64
[  488.772539][ T1273] Buffer I/O error on dev loop4, logical block 72, lost async page write
[  488.806061][ T1273] attempt to access beyond end of device
[  488.806061][ T1273] loop4: rw=1, want=74, limit=64
[  488.850214][ T1273] Buffer I/O error on dev loop4, logical block 73, lost async page write
[  488.858734][ T1273] attempt to access beyond end of device
[  488.858734][ T1273] loop4: rw=1, want=77, limit=64
[  488.880197][ T1273] Buffer I/O error on dev loop4, logical block 76, lost async page write
[  488.889401][ T1273] attempt to access beyond end of device
[  488.889401][ T1273] loop4: rw=1, want=78, limit=64
[  488.987914][ T1273] Buffer I/O error on dev loop4, logical block 77, lost async page write
[  489.038351][ T1273] attempt to access beyond end of device
[  489.038351][ T1273] loop4: rw=1, want=165, limit=64
[  489.953806][ T8535] loop3: detected capacity change from 0 to 8
[  490.101274][ T4268] hfsplus: b-tree write err: -5, ino 4
[  492.760725][ T8565] IPVS: Error connecting to the multicast addr
[  495.196868][ T8583] loop2: detected capacity change from 0 to 4096
[  495.353795][ T8589] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12
[  495.440926][ T8583] ntfs3: Unknown parameter '@'
[  496.765369][ T8583] loop2: detected capacity change from 0 to 256
[  497.205588][ T8608] loop4: detected capacity change from 0 to 512
[  497.995138][ T8608] EXT4-fs (loop4): Ignoring removed oldalloc option
[  498.017176][ T8583] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0aabff0a, utbl_chksum : 0xe619d30d)
[  498.084367][ T8608] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.1189: Parent and EA inode have the same ino 15
[  498.142967][ T8608] EXT4-fs (loop4): Remounting filesystem read-only
[  498.185950][ T8608] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.1189: Parent and EA inode have the same ino 15
[  498.245691][ T8608] EXT4-fs (loop4): Remounting filesystem read-only
[  498.266743][ T8608] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1189: inode #261888: comm syz.4.1189: iget: illegal inode #
[  498.319746][ T8608] EXT4-fs (loop4): Remounting filesystem read-only
[  498.343589][ T8608] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1189: error while reading EA inode 261888 err=-117
[  498.454056][ T8608] EXT4-fs (loop4): Remounting filesystem read-only
[  498.465310][ T8608] EXT4-fs (loop4): 1 orphan inode deleted
[  498.479776][ T8608] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x0000000000000040,noauto_da_alloc,jqfmt=vfsv1,oldalloc,init_itable,. Quota mode: none.
[  500.630194][ T8646] loop2: detected capacity change from 0 to 1024
[  501.413816][ T1425] ieee802154 phy0 wpan0: encryption failed: -22
[  501.420812][ T1425] ieee802154 phy1 wpan1: encryption failed: -22
[  501.614029][ T8646] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback.
[  502.071203][ T8665] netlink: 'syz.2.1201': attribute type 10 has an invalid length.
[  502.079166][ T8665] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1201'.
[  502.089280][ T8665] bridge0: port 3(hsr0) entered blocking state
[  502.095909][ T8665] bridge0: port 3(hsr0) entered disabled state
[  502.103197][ T8665] device hsr0 entered promiscuous mode
[  502.110902][ T8665] bridge0: port 3(hsr0) entered blocking state
[  502.117142][ T8665] bridge0: port 3(hsr0) entered forwarding state
[  507.301574][ T8703] loop4: detected capacity change from 0 to 8
[  507.990975][ T8703] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  508.017804][ T8702] cramfs: Error -3 while decompressing!
[  508.023518][ T8702] cramfs: ffffffff96bb7238(27)->ffff8880599d5000(4096)
[  508.030493][ T8702] cramfs: Error -3 while decompressing!
[  508.036056][ T8702] cramfs: ffffffff96bb7238(27)->ffff8880599d5000(4096)
[  508.043264][   T26] audit: type=1800 audit(2000000008.370:26): pid=8702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1214" name="file0" dev="loop4" ino=244 res=0 errno=0
[  511.807288][ T8724] loop4: detected capacity change from 0 to 512
[  512.146960][ T8736] loop2: detected capacity change from 0 to 4096
[  512.185662][ T8724] EXT4-fs (loop4): Ignoring removed oldalloc option
[  512.204734][ T8736] ntfs3: Unknown parameter '@'
[  512.360880][ T8724] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.1222: Parent and EA inode have the same ino 15
[  512.375788][ T8724] EXT4-fs (loop4): Remounting filesystem read-only
[  512.383021][ T8724] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.1222: Parent and EA inode have the same ino 15
[  512.396705][ T8724] EXT4-fs (loop4): Remounting filesystem read-only
[  512.403382][ T8724] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1222: inode #261888: comm syz.4.1222: iget: illegal inode #
[  512.418255][ T8724] EXT4-fs (loop4): Remounting filesystem read-only
[  512.424826][ T8724] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1222: error while reading EA inode 261888 err=-117
[  512.438738][ T8724] EXT4-fs (loop4): Remounting filesystem read-only
[  512.445605][ T8724] EXT4-fs (loop4): 1 orphan inode deleted
[  512.450986][ T8736] loop2: detected capacity change from 0 to 256
[  512.451475][ T8724] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x0000000000000040,noauto_da_alloc,jqfmt=vfsv1,oldalloc,init_itable,. Quota mode: none.
[  512.558405][ T8736] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0aabff0a, utbl_chksum : 0xe619d30d)
[  512.822598][ T8736] loop2: detected capacity change from 0 to 4096
[  512.842344][ T8736] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  513.037592][ T8736] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  515.499520][ T8759] loop3: detected capacity change from 0 to 4096
[  515.554919][ T8759] ntfs3: Unknown parameter '@'
[  515.731477][ T8759] loop3: detected capacity change from 0 to 256
[  516.127773][ T8761] loop2: detected capacity change from 0 to 4096
[  516.607110][ T8759] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0aabff0a, utbl_chksum : 0xe619d30d)
[  516.639243][ T8761] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  516.732791][ T8774] binder: 8773:8774 ioctl 4018f50b 200000c0 returned -22
[  516.803336][ T8775] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  522.278748][ T8814] loop3: detected capacity change from 0 to 512
[  522.286918][ T8811] loop2: detected capacity change from 0 to 4096
[  522.406507][ T8814] EXT4-fs (loop3): Unrecognized mount option "hash" or missing value
[  523.315912][ T8811] Process accounting resumed
[  523.319224][ T8814] loop3: detected capacity change from 0 to 512
[  523.389211][ T8814] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  523.532829][ T8814] EXT4-fs (loop3): 1 truncate cleaned up
[  523.538593][ T8814] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=abort,nombcache,data=journal,nolazytime,noblock_validity,quota,mb_optimize_scan=0x0000000000000001,nodelalloc,,errors=continue. Quota mode: writeback.
[  525.268677][ T8840] binder: 8839:8840 ioctl c0306201 0 returned -14
[  527.440861][ T8863] loop4: detected capacity change from 0 to 4096
[  528.319424][ T8866] loop2: detected capacity change from 0 to 4096
[  528.382748][ T8866] ntfs3: Unknown parameter '@'
[  529.703090][ T8878] loop2: detected capacity change from 0 to 64
[  530.600947][ T5263] attempt to access beyond end of device
[  530.600947][ T5263] loop2: rw=1, want=66, limit=64
[  530.629581][ T5263] Buffer I/O error on dev loop2, logical block 65, lost async page write
[  530.660865][ T5263] attempt to access beyond end of device
[  530.660865][ T5263] loop2: rw=1, want=67, limit=64
[  530.711374][ T5263] Buffer I/O error on dev loop2, logical block 66, lost async page write
[  530.775003][ T5263] attempt to access beyond end of device
[  530.775003][ T5263] loop2: rw=1, want=68, limit=64
[  530.816412][ T5263] Buffer I/O error on dev loop2, logical block 67, lost async page write
[  530.886276][ T5263] attempt to access beyond end of device
[  530.886276][ T5263] loop2: rw=1, want=69, limit=64
[  530.896853][ T5263] Buffer I/O error on dev loop2, logical block 68, lost async page write
[  530.906085][ T5263] attempt to access beyond end of device
[  530.906085][ T5263] loop2: rw=1, want=73, limit=64
[  530.916582][ T5263] Buffer I/O error on dev loop2, logical block 72, lost async page write
[  530.925079][ T5263] attempt to access beyond end of device
[  530.925079][ T5263] loop2: rw=1, want=74, limit=64
[  531.116894][ T5263] Buffer I/O error on dev loop2, logical block 73, lost async page write
[  531.125471][ T5263] attempt to access beyond end of device
[  531.125471][ T5263] loop2: rw=1, want=77, limit=64
[  531.157851][ T5263] Buffer I/O error on dev loop2, logical block 76, lost async page write
[  531.605390][ T5263] attempt to access beyond end of device
[  531.605390][ T5263] loop2: rw=1, want=78, limit=64
[  531.828466][ T5263] Buffer I/O error on dev loop2, logical block 77, lost async page write
[  532.040526][ T5263] attempt to access beyond end of device
[  532.040526][ T5263] loop2: rw=1, want=165, limit=64
[  534.358550][ T8641] libceph: connect (1)[c::]:6789 error -101
[  534.375997][ T8641] libceph: mon0 (1)[c::]:6789 connect error
[  534.641759][ T8920] loop3: detected capacity change from 0 to 4096
[  534.681304][ T8920] ntfs3: Unknown parameter '@'
[  534.693737][ T8641] libceph: connect (1)[c::]:6789 error -101
[  534.699976][ T8641] libceph: mon0 (1)[c::]:6789 connect error
[  534.773175][ T8914] ceph: No mds server is up or the cluster is laggy
[  534.871240][ T8920] loop3: detected capacity change from 0 to 256
[  534.981574][ T8920] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0aabff0a, utbl_chksum : 0xe619d30d)
[  535.023812][ T8929] loop2: detected capacity change from 0 to 64
[  535.330487][ T8935] binder: 8934:8935 ioctl 4018f50b 200000c0 returned -22
[  536.038966][  T145] attempt to access beyond end of device
[  536.038966][  T145] loop2: rw=1, want=66, limit=64
[  536.067776][  T145] Buffer I/O error on dev loop2, logical block 65, lost async page write
[  536.104142][  T145] attempt to access beyond end of device
[  536.104142][  T145] loop2: rw=1, want=67, limit=64
[  536.140193][  T145] Buffer I/O error on dev loop2, logical block 66, lost async page write
[  536.158369][  T145] attempt to access beyond end of device
[  536.158369][  T145] loop2: rw=1, want=68, limit=64
[  536.184176][  T145] Buffer I/O error on dev loop2, logical block 67, lost async page write
[  536.202326][  T145] attempt to access beyond end of device
[  536.202326][  T145] loop2: rw=1, want=69, limit=64
[  536.225620][  T145] Buffer I/O error on dev loop2, logical block 68, lost async page write
[  536.272607][  T145] attempt to access beyond end of device
[  536.272607][  T145] loop2: rw=1, want=73, limit=64
[  536.283658][  T145] Buffer I/O error on dev loop2, logical block 72, lost async page write
[  536.304412][  T145] attempt to access beyond end of device
[  536.304412][  T145] loop2: rw=1, want=74, limit=64
[  536.320508][  T145] Buffer I/O error on dev loop2, logical block 73, lost async page write
[  536.329199][  T145] attempt to access beyond end of device
[  536.329199][  T145] loop2: rw=1, want=77, limit=64
[  536.340311][  T145] Buffer I/O error on dev loop2, logical block 76, lost async page write
[  536.422643][  T145] attempt to access beyond end of device
[  536.422643][  T145] loop2: rw=1, want=78, limit=64
[  536.460086][  T145] Buffer I/O error on dev loop2, logical block 77, lost async page write
[  536.503435][  T145] attempt to access beyond end of device
[  536.503435][  T145] loop2: rw=1, want=165, limit=64
[  538.873940][ T8983] loop4: detected capacity change from 0 to 1024
[  539.474510][ T8989] loop2: detected capacity change from 0 to 4096
[  540.501926][ T4269] hfsplus: b-tree write err: -5, ino 4
[  543.127733][ T9015] loop4: detected capacity change from 0 to 256
[  544.590217][ T9029] loop4: detected capacity change from 0 to 64
[  544.611683][ T9033] loop3: detected capacity change from 0 to 1024
[  546.131915][ T8906] hfsplus: b-tree write err: -5, ino 4
[  546.157576][ T5263] attempt to access beyond end of device
[  546.157576][ T5263] loop4: rw=1, want=66, limit=64
[  546.220626][ T5263] Buffer I/O error on dev loop4, logical block 65, lost async page write
[  546.338581][ T5263] attempt to access beyond end of device
[  546.338581][ T5263] loop4: rw=1, want=67, limit=64
[  546.425711][ T5263] Buffer I/O error on dev loop4, logical block 66, lost async page write
[  546.488571][ T5263] attempt to access beyond end of device
[  546.488571][ T5263] loop4: rw=1, want=68, limit=64
[  546.556802][ T5263] Buffer I/O error on dev loop4, logical block 67, lost async page write
[  546.565641][ T5263] attempt to access beyond end of device
[  546.565641][ T5263] loop4: rw=1, want=69, limit=64
[  546.578024][ T5263] Buffer I/O error on dev loop4, logical block 68, lost async page write
[  546.586677][ T5263] attempt to access beyond end of device
[  546.586677][ T5263] loop4: rw=1, want=73, limit=64
[  546.604718][ T5263] Buffer I/O error on dev loop4, logical block 72, lost async page write
[  546.629423][ T5263] attempt to access beyond end of device
[  546.629423][ T5263] loop4: rw=1, want=74, limit=64
[  546.658492][ T5263] Buffer I/O error on dev loop4, logical block 73, lost async page write
[  546.684543][ T5263] attempt to access beyond end of device
[  546.684543][ T5263] loop4: rw=1, want=77, limit=64
[  546.742137][ T5263] Buffer I/O error on dev loop4, logical block 76, lost async page write
[  546.764765][ T5263] attempt to access beyond end of device
[  546.764765][ T5263] loop4: rw=1, want=78, limit=64
[  546.887378][ T5263] Buffer I/O error on dev loop4, logical block 77, lost async page write
[  547.104830][ T5263] attempt to access beyond end of device
[  547.104830][ T5263] loop4: rw=1, want=165, limit=64
[  550.487566][ T9079] loop3: detected capacity change from 0 to 64
[  551.805990][ T4735] attempt to access beyond end of device
[  551.805990][ T4735] loop3: rw=1, want=66, limit=64
[  551.887116][ T4735] Buffer I/O error on dev loop3, logical block 65, lost async page write
[  551.918098][ T4735] attempt to access beyond end of device
[  551.918098][ T4735] loop3: rw=1, want=67, limit=64
[  551.960832][ T4735] Buffer I/O error on dev loop3, logical block 66, lost async page write
[  551.978948][ T4735] attempt to access beyond end of device
[  551.978948][ T4735] loop3: rw=1, want=68, limit=64
[  552.016552][ T4735] Buffer I/O error on dev loop3, logical block 67, lost async page write
[  552.027239][ T4735] attempt to access beyond end of device
[  552.027239][ T4735] loop3: rw=1, want=69, limit=64
[  552.271462][ T9096] IPVS: Error connecting to the multicast addr
[  552.491501][ T4735] Buffer I/O error on dev loop3, logical block 68, lost async page write
[  552.500518][ T4735] attempt to access beyond end of device
[  552.500518][ T4735] loop3: rw=1, want=73, limit=64
[  552.524149][ T4735] Buffer I/O error on dev loop3, logical block 72, lost async page write
[  552.539116][ T4735] attempt to access beyond end of device
[  552.539116][ T4735] loop3: rw=1, want=74, limit=64
[  552.554752][ T4735] Buffer I/O error on dev loop3, logical block 73, lost async page write
[  552.563736][ T4735] attempt to access beyond end of device
[  552.563736][ T4735] loop3: rw=1, want=77, limit=64
[  552.578893][ T4735] Buffer I/O error on dev loop3, logical block 76, lost async page write
[  552.587775][ T4735] attempt to access beyond end of device
[  552.587775][ T4735] loop3: rw=1, want=78, limit=64
[  552.604809][ T4735] Buffer I/O error on dev loop3, logical block 77, lost async page write
[  552.614857][ T4735] attempt to access beyond end of device
[  552.614857][ T4735] loop3: rw=1, want=165, limit=64
[  552.837477][ T9104] loop2: detected capacity change from 0 to 256
[  554.758311][ T9121] loop4: detected capacity change from 0 to 8
[  555.959638][ T9132] loop2: detected capacity change from 0 to 64
[  557.660932][ T9151] IPVS: Error connecting to the multicast addr
[  557.685538][ T4355] attempt to access beyond end of device
[  557.685538][ T4355] loop2: rw=1, want=66, limit=64
[  557.734322][ T4355] Buffer I/O error on dev loop2, logical block 65, lost async page write
[  557.752642][ T4355] attempt to access beyond end of device
[  557.752642][ T4355] loop2: rw=1, want=67, limit=64
[  558.960345][ T4355] Buffer I/O error on dev loop2, logical block 66, lost async page write
[  558.969331][ T4355] attempt to access beyond end of device
[  558.969331][ T4355] loop2: rw=1, want=68, limit=64
[  558.980281][ T4355] Buffer I/O error on dev loop2, logical block 67, lost async page write
[  558.988767][ T4355] attempt to access beyond end of device
[  558.988767][ T4355] loop2: rw=1, want=69, limit=64
[  559.009850][ T4355] Buffer I/O error on dev loop2, logical block 68, lost async page write
[  559.025847][ T4355] attempt to access beyond end of device
[  559.025847][ T4355] loop2: rw=1, want=73, limit=64
[  559.038858][ T4355] Buffer I/O error on dev loop2, logical block 72, lost async page write
[  559.063051][ T4355] attempt to access beyond end of device
[  559.063051][ T4355] loop2: rw=1, want=74, limit=64
[  559.088134][ T4355] Buffer I/O error on dev loop2, logical block 73, lost async page write
[  559.247927][ T4355] attempt to access beyond end of device
[  559.247927][ T4355] loop2: rw=1, want=77, limit=64
[  559.305688][ T4355] Buffer I/O error on dev loop2, logical block 76, lost async page write
[  559.494561][ T4355] attempt to access beyond end of device
[  559.494561][ T4355] loop2: rw=1, want=78, limit=64
[  559.665701][ T4355] Buffer I/O error on dev loop2, logical block 77, lost async page write
[  559.816180][ T4355] attempt to access beyond end of device
[  559.816180][ T4355] loop2: rw=1, want=165, limit=64
[  560.144202][ T9174] loop2: detected capacity change from 0 to 256
[  561.243431][ T9161] loop4: detected capacity change from 0 to 4096
[  561.336236][ T9178] loop2: detected capacity change from 0 to 4096
[  561.500897][ T9178] ntfs3: Unknown parameter '@'
[  561.658552][ T9178] loop2: detected capacity change from 0 to 256
[  561.718192][ T9178] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0aabff0a, utbl_chksum : 0xe619d30d)
[  561.952610][ T9178] loop2: detected capacity change from 0 to 4096
[  562.176469][ T9178] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  562.880742][ T1425] ieee802154 phy0 wpan0: encryption failed: -22
[  562.887150][ T1425] ieee802154 phy1 wpan1: encryption failed: -22
[  563.481618][ T9202] loop3: detected capacity change from 0 to 8
[  564.371032][ T9178] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  564.742847][ T9209] loop4: detected capacity change from 0 to 1024
[  565.278575][ T9218] loop2: detected capacity change from 0 to 512
[  566.144710][ T9218] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 768
[  567.275752][ T9239] loop4: detected capacity change from 0 to 64
[  569.310589][   T26] audit: type=1326 audit(2000000012.020:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.1.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a37680819 code=0x7ffc0000
[  569.679738][   T26] audit: type=1326 audit(2000000012.050:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.1.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a37680819 code=0x7ffc0000
[  570.115243][   T26] audit: type=1326 audit(2000000012.050:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.1.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a37680819 code=0x7ffc0000
[  570.323333][   T26] audit: type=1326 audit(2000000012.050:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.1.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f7a37680819 code=0x7ffc0000
[  570.366426][   T26] audit: type=1326 audit(2000000012.050:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.1.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a37680819 code=0x7ffc0000
[  571.612022][   T26] audit: type=1326 audit(2000000013.110:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9262 comm="syz.4.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9462e0819 code=0x7ffc0000
[  571.635505][   T26] audit: type=1326 audit(2000000013.110:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9262 comm="syz.4.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9462e0819 code=0x7ffc0000
[  571.658070][   T26] audit: type=1326 audit(2000000013.110:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9262 comm="syz.4.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc9462e0819 code=0x7ffc0000
[  571.683475][   T26] audit: type=1326 audit(2000000013.110:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9262 comm="syz.4.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9462e0819 code=0x7ffc0000
[  571.710429][   T26] audit: type=1326 audit(2000000013.110:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9262 comm="syz.4.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9462e0819 code=0x7ffc0000
[  571.938570][ T9272] loop2: detected capacity change from 0 to 4096
[  572.703456][ T9272] ntfs3: Unknown parameter '@'
[  572.846123][ T9272] loop2: detected capacity change from 0 to 256
[  574.372278][ T9293] loop4: detected capacity change from 0 to 512
[  574.714195][ T9272] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0aabff0a, utbl_chksum : 0xe619d30d)
[  574.728619][ T9293] EXT4-fs (loop4): Number of reserved GDT blocks insanely large: 768
[  575.250179][ T4368] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  576.140767][ T9314] loop4: detected capacity change from 0 to 4096
[  576.241632][ T9314] ntfs3: Unknown parameter '@'
[  576.822132][ T9319] loop4: detected capacity change from 0 to 256
[  576.837586][ T9321] loop3: detected capacity change from 0 to 1024
[  576.845247][ T4368] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  576.879585][ T9319] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0aabff0a, utbl_chksum : 0xe619d30d)
[  577.238246][ T9325] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13
[  577.277651][ T9322] netlink: 'syz.0.1387': attribute type 10 has an invalid length.
[  577.277677][ T9322] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1387'.
[  577.310142][ T4368] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  577.482045][ T4368] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  577.493897][ T4368] usb 2-1: config 0 interface 0 has no altsetting 0
[  577.547333][ T9314] loop4: detected capacity change from 0 to 4096
[  577.680562][ T9314] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  577.891307][ T4368] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  577.924191][ T4368] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  577.948300][ T4368] usb 2-1: config 0 interface 0 has no altsetting 0
[  578.796859][ T9314] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  578.804010][ T4368] usb 2-1: unable to read config index 2 descriptor/start: -71
[  578.844713][ T4368] usb 2-1: can't read configurations, error -71
[  579.093064][ T9337] bridge0: port 3(hsr0) entered disabled state
[  579.099388][ T9337] bridge0: port 2(bridge_slave_1) entered disabled state
[  579.106581][ T9337] bridge0: port 1(bridge_slave_0) entered disabled state
[  580.027673][ T9335] loop2: detected capacity change from 0 to 4096
[  580.318937][ T9335] ntfs3: Unknown parameter '@'
[  581.138490][ T9335] loop2: detected capacity change from 0 to 256
[  581.366125][ T9335] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0aabff0a, utbl_chksum : 0xe619d30d)
[  586.231054][ T9403] IPVS: Error connecting to the multicast addr
[  586.614639][ T9408] netlink: 'syz.0.1405': attribute type 10 has an invalid length.
[  586.647585][ T9408] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1405'.
[  587.461535][ T9416] loop3: detected capacity change from 0 to 24
[  587.501331][ T9416] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  587.677787][ T9416] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  592.099615][ T9461] loop2: detected capacity change from 0 to 512
[  592.199856][ T9461] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 768
[  592.842394][ T9471] binder: 9470:9471 ioctl 4018f50b 200000c0 returned -22
[  592.915963][ T9472] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  592.951715][ T9472] loop3: detected capacity change from 0 to 128
[  593.295865][ T9472] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  593.602122][ T9476] loop3: detected capacity change from 0 to 1024
[  595.211920][  T145] hfsplus: b-tree write err: -5, ino 4
[  596.058076][ T9492] loop4: detected capacity change from 0 to 64
[  597.935290][ T9501] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  597.935290][ T9501]    program syz.3.1434 not setting count and/or reply_len properly
[  597.966110][ T9501] loop3: detected capacity change from 0 to 64
[  598.011744][  T145] attempt to access beyond end of device
[  598.011744][  T145] loop4: rw=1, want=66, limit=64
[  598.187042][  T145] Buffer I/O error on dev loop4, logical block 65, lost async page write
[  598.376682][  T145] attempt to access beyond end of device
[  598.376682][  T145] loop4: rw=1, want=67, limit=64
[  598.503692][  T145] Buffer I/O error on dev loop4, logical block 66, lost async page write
[  598.513137][  T145] attempt to access beyond end of device
[  598.513137][  T145] loop4: rw=1, want=68, limit=64
[  598.523639][  T145] Buffer I/O error on dev loop4, logical block 67, lost async page write
[  598.548786][  T145] attempt to access beyond end of device
[  598.548786][  T145] loop4: rw=1, want=69, limit=64
[  598.563699][  T145] Buffer I/O error on dev loop4, logical block 68, lost async page write
[  598.572272][ T1108] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  598.579959][  T145] attempt to access beyond end of device
[  598.579959][  T145] loop4: rw=1, want=73, limit=64
[  599.379429][  T145] Buffer I/O error on dev loop4, logical block 72, lost async page write
[  599.388058][  T145] attempt to access beyond end of device
[  599.388058][  T145] loop4: rw=1, want=74, limit=64
[  599.398579][  T145] Buffer I/O error on dev loop4, logical block 73, lost async page write
[  599.407130][  T145] attempt to access beyond end of device
[  599.407130][  T145] loop4: rw=1, want=77, limit=64
[  599.419174][  T145] Buffer I/O error on dev loop4, logical block 76, lost async page write
[  599.435799][  T145] attempt to access beyond end of device
[  599.435799][  T145] loop4: rw=1, want=78, limit=64
[  599.446769][  T145] Buffer I/O error on dev loop4, logical block 77, lost async page write
[  599.473099][  T145] attempt to access beyond end of device
[  599.473099][  T145] loop4: rw=1, want=165, limit=64
[  599.675978][ T9509] binder: 9506:9509 ioctl 4018f50b 200000c0 returned -22
[  601.534882][ T9518] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  601.545787][ T9518] loop3: detected capacity change from 0 to 128
[  601.913003][ T9518] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  605.140960][ T9544] loop3: detected capacity change from 0 to 4096
[  605.238402][ T9554] loop2: detected capacity change from 0 to 512
[  605.316546][ T9554] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 768
[  605.363139][ T9555] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  605.432674][ T9544] NILFS (loop3): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed
[  605.567496][ T9561] loop4: detected capacity change from 0 to 4096
[  605.603060][ T9560] binder: 9559:9560 ioctl 4018f50b 200000c0 returned -22
[  606.039468][ T9563] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  609.619090][ T9609] binder: 9608:9609 ioctl 4018f50b 200000c0 returned -22
[  609.693550][ T9610] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  609.724820][ T9610] loop4: detected capacity change from 0 to 128
[  609.895800][ T9610] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  610.158247][ T9616] loop4: detected capacity change from 0 to 1024
[  610.189386][ T9612] loop2: detected capacity change from 0 to 4096
[  610.243446][ T9612] ntfs3: Unknown parameter '@'
[  610.268357][ T9618] device geneve1 entered promiscuous mode
[  610.470605][ T9612] loop2: detected capacity change from 0 to 256
[  610.494690][ T9607] loop3: detected capacity change from 0 to 32768
[  610.584961][ T9607] XFS: noikeep mount option is deprecated.
[  610.716062][ T9612] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0aabff0a, utbl_chksum : 0xe619d30d)
[  610.942883][ T9607] XFS (loop3): Mounting V5 Filesystem
[  611.132853][ T9607] XFS (loop3): Ending clean mount
[  611.156894][ T9607] XFS (loop3): Quotacheck needed: Please wait.
[  611.241148][ T9607] XFS (loop3): Quotacheck: Done.
[  611.250905][ T5263] hfsplus: b-tree write err: -5, ino 4
[  611.557604][ T4167] XFS (loop3): Unmounting Filesystem
[  612.636864][ T9614] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input14
[  614.877169][ T9672] loop2: detected capacity change from 0 to 2048
[  617.335408][ T9672] EXT4-fs: error -4 creating inode table initialization thread
[  617.343846][ T9672] EXT4-fs (loop2): mount failed
[  617.370004][ T9681] loop3: detected capacity change from 0 to 64
[  617.424169][ T9675] loop4: detected capacity change from 0 to 4096
[  617.723186][ T8906] attempt to access beyond end of device
[  617.723186][ T8906] loop3: rw=1, want=66, limit=64
[  617.751588][ T8906] Buffer I/O error on dev loop3, logical block 65, lost async page write
[  618.001225][ T9675] ntfs3: Unknown parameter '@'
[  618.028400][ T8906] attempt to access beyond end of device
[  618.028400][ T8906] loop3: rw=1, want=67, limit=64
[  618.173514][ T8906] Buffer I/O error on dev loop3, logical block 66, lost async page write
[  618.199891][ T9675] loop4: detected capacity change from 0 to 256
[  618.230285][ T8906] attempt to access beyond end of device
[  618.230285][ T8906] loop3: rw=1, want=68, limit=64
[  618.285920][ T8906] Buffer I/O error on dev loop3, logical block 67, lost async page write
[  618.294495][ T8906] attempt to access beyond end of device
[  618.294495][ T8906] loop3: rw=1, want=69, limit=64
[  618.304981][ T8906] Buffer I/O error on dev loop3, logical block 68, lost async page write
[  618.312839][ T9675] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0aabff0a, utbl_chksum : 0xe619d30d)
[  618.317177][ T8906] attempt to access beyond end of device
[  618.317177][ T8906] loop3: rw=1, want=73, limit=64
[  618.336730][ T8906] Buffer I/O error on dev loop3, logical block 72, lost async page write
[  618.345280][ T8906] attempt to access beyond end of device
[  618.345280][ T8906] loop3: rw=1, want=74, limit=64
[  618.357297][ T8906] Buffer I/O error on dev loop3, logical block 73, lost async page write
[  618.366115][ T8906] attempt to access beyond end of device
[  618.366115][ T8906] loop3: rw=1, want=77, limit=64
[  618.376711][ T9690] loop2: detected capacity change from 0 to 4096
[  618.427416][ T8906] Buffer I/O error on dev loop3, logical block 76, lost async page write
[  618.452601][ T8906] attempt to access beyond end of device
[  618.452601][ T8906] loop3: rw=1, want=78, limit=64
[  618.469727][ T8906] Buffer I/O error on dev loop3, logical block 77, lost async page write
[  618.512380][ T8906] attempt to access beyond end of device
[  618.512380][ T8906] loop3: rw=1, want=165, limit=64
[  618.609822][ T9690] ntfs3: Unknown parameter 'nocase'
[  621.026732][ T9716] loop4: detected capacity change from 0 to 1024
[  623.110698][ T9717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  623.139160][ T5263] hfsplus: b-tree write err: -5, ino 4
[  624.241437][ T1425] ieee802154 phy0 wpan0: encryption failed: -22
[  624.262346][ T1425] ieee802154 phy1 wpan1: encryption failed: -22
[  624.310683][ T9747] loop2: detected capacity change from 0 to 64
[  626.207062][ T9761] loop4: detected capacity change from 0 to 1024
[  629.718482][ T9779] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  629.718482][ T9779]    program syz.2.1508 not setting count and/or reply_len properly
[  629.756855][ T9779] loop2: detected capacity change from 0 to 64
[  631.716900][ T9780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  632.738910][ T9798] ISOFS: Unable to identify CD-ROM format.
[  633.362518][ T9799] loop2: detected capacity change from 0 to 512
[  633.672450][ T9799] EXT4-fs (loop2): Ignoring removed oldalloc option
[  635.404939][ T9799] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.1516: Parent and EA inode have the same ino 15
[  635.514364][ T9835] loop4: detected capacity change from 0 to 1024
[  635.710053][ T9799] EXT4-fs (loop2): Remounting filesystem read-only
[  635.716755][ T9799] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.1516: Parent and EA inode have the same ino 15
[  635.755088][ T9836] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  635.755088][ T9836]    program syz.1.1526 not setting count and/or reply_len properly
[  635.818765][ T9799] EXT4-fs (loop2): Remounting filesystem read-only
[  635.844747][ T9799] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1516: inode #261888: comm syz.2.1516: iget: illegal inode #
[  637.043348][ T9799] EXT4-fs (loop2): Remounting filesystem read-only
[  637.070152][ T9799] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1516: error while reading EA inode 261888 err=-117
[  637.084095][ T9799] EXT4-fs (loop2): Remounting filesystem read-only
[  637.106711][ T9799] EXT4-fs (loop2): 1 orphan inode deleted
[  637.115177][ T9799] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x0000000000000040,noauto_da_alloc,jqfmt=vfsv1,oldalloc,init_itable,. Quota mode: none.
[  637.689584][ T9846] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  637.689584][ T9846]    program syz.1.1529 not setting count and/or reply_len properly
[  642.852897][ T9888] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  642.852897][ T9888]    program syz.1.1539 not setting count and/or reply_len properly
[  643.492503][ T9883] loop4: detected capacity change from 0 to 4096
[  643.695979][ T9883] ntfs3: Unknown parameter '@
'
[  644.265325][ T9883] loop4: detected capacity change from 0 to 256
[  644.593711][ T9902] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  644.593711][ T9902]    program syz.1.1543 not setting count and/or reply_len properly
[  644.944308][ T9883] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0aabff0a, utbl_chksum : 0xe619d30d)
[  646.306566][ T9917] loop4: detected capacity change from 0 to 64
[  646.737827][ T9922] loop3: detected capacity change from 0 to 8
[  647.809110][ T5259] attempt to access beyond end of device
[  647.809110][ T5259] loop4: rw=1, want=66, limit=64
[  647.836496][ T5259] Buffer I/O error on dev loop4, logical block 65, lost async page write
[  647.846401][ T5259] attempt to access beyond end of device
[  647.846401][ T5259] loop4: rw=1, want=67, limit=64
[  647.878449][ T5259] Buffer I/O error on dev loop4, logical block 66, lost async page write
[  647.911051][ T5259] attempt to access beyond end of device
[  647.911051][ T5259] loop4: rw=1, want=68, limit=64
[  648.116026][ T5259] Buffer I/O error on dev loop4, logical block 67, lost async page write
[  648.125220][ T5259] attempt to access beyond end of device
[  648.125220][ T5259] loop4: rw=1, want=69, limit=64
[  648.144097][ T5259] Buffer I/O error on dev loop4, logical block 68, lost async page write
[  648.411972][ T5259] attempt to access beyond end of device
[  648.411972][ T5259] loop4: rw=1, want=73, limit=64
[  648.516158][ T5259] Buffer I/O error on dev loop4, logical block 72, lost async page write
[  648.596709][ T5259] attempt to access beyond end of device
[  648.596709][ T5259] loop4: rw=1, want=74, limit=64
[  648.790087][ T5259] Buffer I/O error on dev loop4, logical block 73, lost async page write
[  648.811310][ T5259] attempt to access beyond end of device
[  648.811310][ T5259] loop4: rw=1, want=77, limit=64
[  648.851644][ T5259] Buffer I/O error on dev loop4, logical block 76, lost async page write
[  648.876155][ T5259] attempt to access beyond end of device
[  648.876155][ T5259] loop4: rw=1, want=78, limit=64
[  648.907404][ T5259] Buffer I/O error on dev loop4, logical block 77, lost async page write
[  648.968819][ T5259] attempt to access beyond end of device
[  648.968819][ T5259] loop4: rw=1, want=165, limit=64
[  649.180700][ T9931] loop3: detected capacity change from 0 to 4096
[  649.872096][ T9945] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  649.872096][ T9945]    program syz.4.1553 not setting count and/or reply_len properly
[  649.898204][ T9945] loop4: detected capacity change from 0 to 64
[  651.591389][ T9959] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  651.591389][ T9959]    program syz.4.1558 not setting count and/or reply_len properly
[  653.037274][ T9968] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  653.107034][ T9971] loop3: detected capacity change from 0 to 128
[  653.237076][ T9972] loop4: detected capacity change from 0 to 8
[  653.267886][ T9971] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  654.023935][ T9979] loop2: detected capacity change from 0 to 64
[  654.474296][  T145] attempt to access beyond end of device
[  654.474296][  T145] loop2: rw=1, want=66, limit=64
[  654.523489][  T145] Buffer I/O error on dev loop2, logical block 65, lost async page write
[  654.554907][ T9985] loop4: detected capacity change from 0 to 8
[  654.597818][  T145] attempt to access beyond end of device
[  654.597818][  T145] loop2: rw=1, want=67, limit=64
[  655.709372][  T145] Buffer I/O error on dev loop2, logical block 66, lost async page write
[  655.810407][  T145] attempt to access beyond end of device
[  655.810407][  T145] loop2: rw=1, want=68, limit=64
[  655.824111][  T145] Buffer I/O error on dev loop2, logical block 67, lost async page write
[  655.872535][ T9993] loop3: detected capacity change from 0 to 64
[  655.878958][  T145] attempt to access beyond end of device
[  655.878958][  T145] loop2: rw=1, want=69, limit=64
[  655.900054][  T145] Buffer I/O error on dev loop2, logical block 68, lost async page write
[  655.921014][  T145] attempt to access beyond end of device
[  655.921014][  T145] loop2: rw=1, want=73, limit=64
[  655.963673][  T145] Buffer I/O error on dev loop2, logical block 72, lost async page write
[  655.986108][  T145] attempt to access beyond end of device
[  655.986108][  T145] loop2: rw=1, want=74, limit=64
[  655.999444][  T145] Buffer I/O error on dev loop2, logical block 73, lost async page write
[  656.010769][  T145] attempt to access beyond end of device
[  656.010769][  T145] loop2: rw=1, want=77, limit=64
[  656.025644][  T145] Buffer I/O error on dev loop2, logical block 76, lost async page write
[  656.101855][  T145] attempt to access beyond end of device
[  656.101855][  T145] loop2: rw=1, want=78, limit=64
[  656.355670][  T145] Buffer I/O error on dev loop2, logical block 77, lost async page write
[  656.559663][  T145] attempt to access beyond end of device
[  656.559663][  T145] loop2: rw=1, want=165, limit=64
[  656.927930][T10003] loop4: detected capacity change from 0 to 1024
[  657.286798][T10007] loop2: detected capacity change from 0 to 256
[  657.759144][T10010] loop3: detected capacity change from 0 to 1024
[  657.891835][T10010] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,lazytime,noblock_validity,,errors=continue. Quota mode: none.
[  657.963788][ T4735] hfsplus: b-tree write err: -5, ino 4
[  657.997104][T10010] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  658.050238][T10010] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4096 with max blocks 1 with error 28
[  658.064985][T10010] EXT4-fs (loop3): This should not happen!! Data will be lost
[  658.064985][T10010] 
[  658.076150][T10010] EXT4-fs (loop3): Total free blocks count 0
[  658.083755][T10010] EXT4-fs (loop3): Free/Dirty block details
[  658.090635][T10010] EXT4-fs (loop3): free_blocks=68451041280
[  658.096614][T10010] EXT4-fs (loop3): dirty_blocks=32
[  658.102114][T10010] EXT4-fs (loop3): Block reservation details
[  658.108189][T10010] EXT4-fs (loop3): i_reserved_data_blocks=2
[  658.214538][T10010] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28
[  658.274106][T10022] loop4: detected capacity change from 0 to 64
[  658.283540][T10010] EXT4-fs (loop3): This should not happen!! Data will be lost
[  658.283540][T10010] 
[  660.047719][T10034] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  660.047719][T10034]    program syz.1.1582 not setting count and/or reply_len properly
[  660.067144][ T4395] attempt to access beyond end of device
[  660.067144][ T4395] loop4: rw=1, want=66, limit=64
[  660.078593][ T4395] Buffer I/O error on dev loop4, logical block 65, lost async page write
[  660.088487][ T4395] attempt to access beyond end of device
[  660.088487][ T4395] loop4: rw=1, want=67, limit=64
[  660.099275][ T4395] Buffer I/O error on dev loop4, logical block 66, lost async page write
[  660.137441][ T4395] attempt to access beyond end of device
[  660.137441][ T4395] loop4: rw=1, want=68, limit=64
[  660.159520][T10036] loop3: detected capacity change from 0 to 64
[  660.160815][ T4395] Buffer I/O error on dev loop4, logical block 67, lost async page write
[  660.200135][ T4395] attempt to access beyond end of device
[  660.200135][ T4395] loop4: rw=1, want=69, limit=64
[  660.244277][ T4395] Buffer I/O error on dev loop4, logical block 68, lost async page write
[  660.276098][ T4395] attempt to access beyond end of device
[  660.276098][ T4395] loop4: rw=1, want=73, limit=64
[  660.294261][ T4395] Buffer I/O error on dev loop4, logical block 72, lost async page write
[  660.319405][ T4395] attempt to access beyond end of device
[  660.319405][ T4395] loop4: rw=1, want=74, limit=64
[  660.339289][ T4395] Buffer I/O error on dev loop4, logical block 73, lost async page write
[  660.348095][ T4395] attempt to access beyond end of device
[  660.348095][ T4395] loop4: rw=1, want=77, limit=64
[  660.363337][ T4395] Buffer I/O error on dev loop4, logical block 76, lost async page write
[  660.372402][ T4395] attempt to access beyond end of device
[  660.372402][ T4395] loop4: rw=1, want=78, limit=64
[  660.531251][ T4395] Buffer I/O error on dev loop4, logical block 77, lost async page write
[  660.559521][ T4395] attempt to access beyond end of device
[  660.559521][ T4395] loop4: rw=1, want=165, limit=64
[  661.210925][ T9778] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  661.460460][ T9778] usb 4-1: Using ep0 maxpacket: 8
[  661.612488][ T9778] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  661.688856][ T9778] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  662.248544][ T9778] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  662.261598][ T9778] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  662.271722][ T9778] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  662.351220][T10062] loop2: detected capacity change from 0 to 8
[  662.960503][ T9778] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  663.381792][T10074] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  663.381792][T10074]    program syz.0.1595 not setting count and/or reply_len properly
[  663.454785][ T9778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  663.467171][ T9778] usb 4-1: Product: syz
[  663.471722][ T9778] usb 4-1: Manufacturer: syz
[  663.476337][ T9778] usb 4-1: SerialNumber: syz
[  663.491415][ T9778] usb 4-1: config 0 descriptor??
[  663.506690][T10078] loop4: detected capacity change from 0 to 8
[  663.640432][ T9778] iowarrior 4-1:0.0: no interrupt-in endpoint found
[  663.713754][T10078] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  663.763989][T10078] cramfs: Error -3 while decompressing!
[  663.769817][T10078] cramfs: ffffffff96bbb238(27)->ffff8880538fc000(4096)
[  663.777034][T10078] cramfs: Error -3 while decompressing!
[  663.782739][T10078] cramfs: ffffffff96bbb238(27)->ffff8880538fc000(4096)
[  663.804751][   T26] kauditd_printk_skb: 22 callbacks suppressed
[  663.804789][   T26] audit: type=1800 audit(2000000016.960:59): pid=10078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1592" name="file0" dev="loop4" ino=244 res=0 errno=0
[  664.053572][ T9778] usb 4-1: USB disconnect, device number 9
[  664.203587][T10085] binder: 10084:10085 ioctl 4018f50b 200000c0 returned -22
[  664.250428][T10088] loop2: detected capacity change from 0 to 256
[  664.897798][T10099] loop3: detected capacity change from 0 to 64
[  665.289046][ T8906] attempt to access beyond end of device
[  665.289046][ T8906] loop3: rw=1, want=66, limit=64
[  665.302472][ T8906] Buffer I/O error on dev loop3, logical block 65, lost async page write
[  665.311447][ T8906] attempt to access beyond end of device
[  665.311447][ T8906] loop3: rw=1, want=67, limit=64
[  665.322846][ T8906] Buffer I/O error on dev loop3, logical block 66, lost async page write
[  665.335029][ T8906] attempt to access beyond end of device
[  665.335029][ T8906] loop3: rw=1, want=68, limit=64
[  665.346649][ T8906] Buffer I/O error on dev loop3, logical block 67, lost async page write
[  665.356391][ T8906] attempt to access beyond end of device
[  665.356391][ T8906] loop3: rw=1, want=69, limit=64
[  665.368326][ T8906] Buffer I/O error on dev loop3, logical block 68, lost async page write
[  665.385305][ T8906] attempt to access beyond end of device
[  665.385305][ T8906] loop3: rw=1, want=73, limit=64
[  665.396306][ T8906] Buffer I/O error on dev loop3, logical block 72, lost async page write
[  665.405097][ T8906] attempt to access beyond end of device
[  665.405097][ T8906] loop3: rw=1, want=74, limit=64
[  665.417594][ T8906] Buffer I/O error on dev loop3, logical block 73, lost async page write
[  665.426544][ T8906] attempt to access beyond end of device
[  665.426544][ T8906] loop3: rw=1, want=77, limit=64
[  665.437337][ T8906] Buffer I/O error on dev loop3, logical block 76, lost async page write
[  665.445980][ T8906] attempt to access beyond end of device
[  665.445980][ T8906] loop3: rw=1, want=78, limit=64
[  665.483277][ T8906] Buffer I/O error on dev loop3, logical block 77, lost async page write
[  665.502871][ T8906] attempt to access beyond end of device
[  665.502871][ T8906] loop3: rw=1, want=165, limit=64
[  665.815408][T10120] binder: 10116:10120 ioctl 4018f50b 200000c0 returned -22
[  666.522609][T10124] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  666.522609][T10124]    program syz.4.1609 not setting count and/or reply_len properly
[  666.547098][T10124] loop4: detected capacity change from 0 to 64
[  668.892550][T10149] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  668.892550][T10149]    program syz.3.1617 not setting count and/or reply_len properly
[  668.912043][T10149] loop3: detected capacity change from 0 to 64
[  669.852414][T10163] binder: 10161:10163 ioctl 4018f50b 200000c0 returned -22
[  670.494256][T10171] loop2: detected capacity change from 0 to 8
[  672.560134][ T8641] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  672.647780][T10189] loop4: detected capacity change from 0 to 128
[  672.653899][T10188] loop2: detected capacity change from 0 to 256
[  672.690927][T10188] exfat: Bad value for 'gid'
[  672.809770][T10189] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  672.870957][T10189] ext4 filesystem being mounted at /314/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  672.873935][T10192] loop3: detected capacity change from 0 to 4096
[  672.902951][    C1] vkms_vblank_simulate: vblank timer overrun
[  672.943857][ T8641] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  672.971552][ T8641] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  673.005166][T10192] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  673.032610][ T8641] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  673.054393][T10197] loop2: detected capacity change from 0 to 512
[  673.087240][ T8641] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  673.138371][T10197] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 768
[  673.230783][ T8641] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  673.287633][ T8641] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  673.287820][ T8641] usb 2-1: Manufacturer: syz
[  673.327643][ T8641] usb 2-1: config 0 descriptor??
[  673.840118][ T8641] appleir 0003:05AC:8243.0001: unknown main item tag 0x0
[  673.848823][ T8641] appleir 0003:05AC:8243.0001: No inputs registered, leaving
[  674.132635][ T8641] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[  674.154868][ T8641] usb 2-1: USB disconnect, device number 15
[  674.272652][T10206] binder: 10205:10206 ioctl 4018f50b 200000c0 returned -22
[  674.387581][T10208] loop4: detected capacity change from 0 to 128
[  674.712025][T10208] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  675.100204][T10217] loop2: detected capacity change from 0 to 4096
[  675.147796][T10218] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input15
[  676.575278][T10228] loop4: detected capacity change from 0 to 512
[  676.628004][T10228] EXT4-fs (loop4): Ignoring removed oldalloc option
[  676.653264][T10228] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.1646: Parent and EA inode have the same ino 15
[  676.653705][T10228] EXT4-fs (loop4): Remounting filesystem read-only
[  676.653783][T10228] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.1646: Parent and EA inode have the same ino 15
[  676.654238][T10228] EXT4-fs (loop4): Remounting filesystem read-only
[  676.654257][T10228] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1646: inode #261888: comm syz.4.1646: iget: illegal inode #
[  676.654594][T10228] EXT4-fs (loop4): Remounting filesystem read-only
[  676.654610][T10228] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1646: error while reading EA inode 261888 err=-117
[  676.654926][T10228] EXT4-fs (loop4): Remounting filesystem read-only
[  676.655032][T10228] EXT4-fs (loop4): 1 orphan inode deleted
[  676.655052][T10228] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x0000000000000040,noauto_da_alloc,jqfmt=vfsv1,oldalloc,init_itable,. Quota mode: none.
[  677.989805][T10247] loop3: detected capacity change from 0 to 256
[  678.558110][T10253] loop2: detected capacity change from 0 to 512
[  678.640813][T10253] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 768
[  679.274654][T10270] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  679.274654][T10270]    program syz.4.1657 not setting count and/or reply_len properly
[  679.294651][T10270] loop4: detected capacity change from 0 to 64
[  680.408473][T10277] loop2: detected capacity change from 0 to 8
[  680.477372][T10277] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  680.501362][T10277] cramfs: Error -3 while decompressing!
[  680.507007][T10277] cramfs: ffffffff96bb7238(27)->ffff888057176000(4096)
[  680.514592][T10277] cramfs: Error -3 while decompressing!
[  680.520385][T10277] cramfs: ffffffff96bb7238(27)->ffff888057176000(4096)
[  680.539575][   T26] audit: type=1800 audit(2000000000.100:60): pid=10277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1660" name="file0" dev="loop2" ino=244 res=0 errno=0
[  681.472878][T10292] loop2: detected capacity change from 0 to 256
[  681.585792][T10297] virtio-fs: tag <(null)> not found
[  682.068477][T10302] input: syz0 as /devices/virtual/input/input16
[  682.589648][T10308] loop3: detected capacity change from 0 to 512
[  682.796904][T10308] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 768
[  684.524211][T10331] loop4: detected capacity change from 0 to 8
[  684.606606][T10331] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  684.691869][T10331] cramfs: Error -3 while decompressing!
[  684.697505][T10331] cramfs: ffffffff96bbb238(27)->ffff88804e21c000(4096)
[  684.704621][T10331] cramfs: Error -3 while decompressing!
[  684.710250][T10331] cramfs: ffffffff96bbb238(27)->ffff88804e21c000(4096)
[  684.753103][   T26] audit: type=1800 audit(2000000000.950:61): pid=10331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1676" name="file0" dev="loop4" ino=244 res=0 errno=0
[  686.100995][ T1425] ieee802154 phy0 wpan0: encryption failed: -22
[  686.107347][ T1425] ieee802154 phy1 wpan1: encryption failed: -22
[  686.399694][T10350] loop3: detected capacity change from 0 to 256
[  687.025154][T10360] loop2: detected capacity change from 0 to 512
[  687.347051][T10360] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 768
[  690.117768][T10377] loop4: detected capacity change from 0 to 8
[  691.275507][T10387] loop3: detected capacity change from 0 to 8
[  691.465180][T10387] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  691.498581][T10387] cramfs: Error -3 while decompressing!
[  691.504278][T10387] cramfs: ffffffff96bb7238(27)->ffff888051926000(4096)
[  691.511505][T10387] cramfs: Error -3 while decompressing!
[  691.517123][T10387] cramfs: ffffffff96bb7238(27)->ffff888051926000(4096)
[  691.534537][   T26] audit: type=1800 audit(2000000000.230:62): pid=10387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1692" name="file0" dev="loop3" ino=244 res=0 errno=0
[  693.417867][T10399] loop4: detected capacity change from 0 to 8
[  694.039779][T10402] loop2: detected capacity change from 0 to 512
[  694.358502][T10402] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 768
[  696.902222][T10416] loop3: detected capacity change from 0 to 512
[  697.177458][T10427] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  697.177458][T10427]    program syz.1.1693 not setting count and/or reply_len properly
[  697.462129][T10428] binder: 10425:10428 ioctl 4018f50b 200000c0 returned -22
[  697.556387][T10430] loop2: detected capacity change from 0 to 128
[  698.010680][T10416] EXT4-fs (loop3): Ignoring removed oldalloc option
[  698.021522][T10430] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  698.091075][T10416] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.1703: Parent and EA inode have the same ino 15
[  698.322620][T10416] EXT4-fs (loop3): Remounting filesystem read-only
[  698.329260][T10416] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.1703: Parent and EA inode have the same ino 15
[  698.345137][T10416] EXT4-fs (loop3): Remounting filesystem read-only
[  698.351726][T10416] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.1703: inode #261888: comm syz.3.1703: iget: illegal inode #
[  698.365841][T10416] EXT4-fs (loop3): Remounting filesystem read-only
[  698.372636][T10416] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1703: error while reading EA inode 261888 err=-117
[  698.386106][T10416] EXT4-fs (loop3): Remounting filesystem read-only
[  698.392812][T10416] EXT4-fs (loop3): 1 orphan inode deleted
[  698.398554][T10416] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x0000000000000040,noauto_da_alloc,jqfmt=vfsv1,oldalloc,init_itable,. Quota mode: none.
[  698.495702][T10446] loop2: detected capacity change from 0 to 64
[  698.819986][    C0] hrtimer: interrupt took 54899 ns
[  699.226609][T10452] loop4: detected capacity change from 0 to 512
[  699.506582][T10452] EXT4-fs (loop4): Number of reserved GDT blocks insanely large: 768
[  700.243404][T10458] loop2: detected capacity change from 0 to 1024
[  701.603204][T10458] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,barrier=0x0000000000000000,nodelalloc,acl,errors=remount-ro,. Quota mode: none.
[  703.182384][T10475] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  703.182384][T10475]    program syz.4.1717 not setting count and/or reply_len properly
[  703.371882][T10475] loop4: detected capacity change from 0 to 64
[  703.530227][T10479] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  703.530227][T10479]    program syz.1.1716 not setting count and/or reply_len properly
[  703.840664][T10482] binder: 10481:10482 ioctl 4018f50b 200000c0 returned -22
[  704.322876][T10457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  706.104447][T10498] fuse: Bad value for 'fd'
[  706.209360][T10500] loop3: detected capacity change from 0 to 128
[  706.358875][T10506] device bridge0 entered promiscuous mode
[  706.365552][T10505] device bridge0 left promiscuous mode
[  707.694220][T10521] binder: 10514:10521 ioctl 4018f50b 200000c0 returned -22
[  707.876927][T10523] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  708.184685][T10521] loop2: detected capacity change from 0 to 128
[  708.434381][T10525] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  708.434381][T10525]    program syz.0.1731 not setting count and/or reply_len properly
[  708.552414][T10521] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  709.001014][T10522] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  709.001014][T10522]    program syz.1.1732 not setting count and/or reply_len properly
[  709.221732][T10528] loop3: detected capacity change from 0 to 512
[  710.194098][T10534] loop4: detected capacity change from 0 to 8192
[  710.258100][T10528] EXT4-fs (loop3): Unrecognized mount option "hash" or missing value
[  710.270714][T10534]  loop4: p1 < > p2 < p5 > p3 p4
[  710.327361][T10534] loop4: p3 start 83890176 is beyond EOD, truncated
[  710.349626][T10528] loop3: detected capacity change from 0 to 512
[  710.380581][T10534] loop4: p4 size 16776960 extends beyond EOD, truncated
[  710.403784][T10534] loop4: p5 size 16776960 extends beyond EOD, truncated
[  710.411681][T10528] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  711.192587][T10528] EXT4-fs (loop3): 1 truncate cleaned up
[  711.198280][T10528] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=abort,nombcache,data=journal,nolazytime,noblock_validity,quota,mb_optimize_scan=0x0000000000000001,nodelalloc,,errors=continue. Quota mode: writeback.
[  711.506513][T10558] fuse: Bad value for 'fd'
[  713.321610][T10569] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  713.321610][T10569]    program syz.2.1744 not setting count and/or reply_len properly
[  713.347400][T10569] loop2: detected capacity change from 0 to 64
[  714.802145][T10574] binder: 10573:10574 ioctl 4018f50b 200000c0 returned -22
[  715.351624][T10585] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  715.351624][T10585]    program syz.0.1747 not setting count and/or reply_len properly
[  716.762957][T10603] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  716.762957][T10603]    program syz.2.1751 not setting count and/or reply_len properly
[  716.790930][T10603] loop2: detected capacity change from 0 to 64
[  717.434051][T10612] device ipvlan2 entered promiscuous mode
[  717.906880][T10617] fuse: Bad value for 'fd'
[  719.696736][T10625] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  719.696736][T10625]    program syz.0.1761 not setting count and/or reply_len properly
[  720.009378][T10628] binder: 10626:10628 ioctl 4018f50b 200000c0 returned -22
[  720.021158][T10628] loop2: detected capacity change from 0 to 128
[  720.885480][T10628] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  721.083913][T10638] loop4: detected capacity change from 0 to 4096
[  721.544158][T10651] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1767'.
[  722.937896][T10661] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  722.937896][T10661]    program syz.3.1768 not setting count and/or reply_len properly
[  723.188263][T10638] Zero length message leads to an empty skb
[  723.551643][T10661] loop3: detected capacity change from 0 to 64
[  723.808934][   T26] audit: type=1800 audit(2000000004.910:63): pid=10669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1764" name="bus" dev="loop4" ino=0 res=0 errno=0
[  724.908886][T10673] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  724.908886][T10673]    program syz.1.1772 not setting count and/or reply_len properly
[  725.458811][T10677] binder: 10676:10677 ioctl 4018f50b 200000c0 returned -22
[  727.583522][T10699] loop3: detected capacity change from 0 to 4096
[  727.756494][T10699] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  729.660640][T10699] ntfs3: loop3: Failed to load $Extend.
[  729.957805][   T26] audit: type=1800 audit(2000000004.000:64): pid=10729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1781" name="file1" dev="loop3" ino=30 res=0 errno=0
[  730.008459][T10731] netlink: 'syz.0.1789': attribute type 1 has an invalid length.
[  730.016342][T10731] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1789'.
[  730.972776][T10740] netlink: 'syz.1.1793': attribute type 4 has an invalid length.
[  731.543888][T10754] binder: 10752:10754 ioctl 4018f50b 200000c0 returned -22
[  731.556475][T10754] loop3: detected capacity change from 0 to 128
[  731.678494][T10754] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  732.380004][ T9778] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  733.536530][ T9778] usb 1-1: Using ep0 maxpacket: 32
[  733.658900][T10774] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  733.658900][T10774]    program syz.4.1804 not setting count and/or reply_len properly
[  733.700434][ T9778] usb 1-1: config 0 has an invalid interface number: 9 but max is 0
[  733.884562][ T9778] usb 1-1: config 0 has no interface number 0
[  734.330273][ T9778] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  734.349616][ T9778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  734.367093][T10761] loop3: detected capacity change from 0 to 40427
[  734.415231][ T9778] usb 1-1: Product: syz
[  734.435494][ T9778] usb 1-1: Manufacturer: syz
[  734.449393][ T9778] usb 1-1: SerialNumber: syz
[  734.471822][T10761] F2FS-fs (loop3): Unrecognized mount option "memory=normal" or missing value
[  734.514993][ T9778] usb 1-1: config 0 descriptor??
[  734.576686][ T9778] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  736.415952][T10810] loop3: detected capacity change from 0 to 2048
[  738.440362][T10802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  738.731184][ T9778] gspca_topro: reg_w err -110
[  739.560079][ T9778] gspca_topro: Sensor soi763a
[  740.798869][ T9778] usb 1-1: USB disconnect, device number 7
[  741.314853][T10843] loop4: detected capacity change from 0 to 64
[  742.759238][T10849] loop3: detected capacity change from 0 to 64
[  743.794418][T10864] loop3: detected capacity change from 0 to 128
[  745.844265][T10879] loop2: detected capacity change from 0 to 2048
[  747.098866][ T1425] ieee802154 phy0 wpan0: encryption failed: -22
[  747.105205][ T1425] ieee802154 phy1 wpan1: encryption failed: -22
[  749.035835][T10880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  749.322642][T10894] loop2: detected capacity change from 0 to 64
[  752.107064][T10924] loop3: detected capacity change from 0 to 4096
[  752.494442][T10924] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[  752.899788][T10925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  753.667496][T10936] loop2: detected capacity change from 0 to 2048
[  756.292762][T10953] dccp_invalid_packet: P.Data Offset(0) too small
[  756.774212][T10962] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  756.774212][T10962]    program syz.1.1855 not setting count and/or reply_len properly
[  758.145288][T10952] loop4: detected capacity change from 0 to 32768
[  759.318362][T10986] capability: warning: `syz.0.1864' uses deprecated v2 capabilities in a way that may be insecure
[  759.923632][T10998] loop3: detected capacity change from 0 to 2048
[  760.907532][T10998] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  764.246759][T11029] device vlan2 entered promiscuous mode
[  764.264946][T11029] device syz_tun entered promiscuous mode
[  764.285946][T11029] device syz_tun left promiscuous mode
[  765.280767][T11037] TCP: tcp_parse_options: Illegal window scaling value 248 > 14 received
[  765.586631][T11041] loop3: detected capacity change from 0 to 4096
[  765.666739][T11045] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  766.260414][T11046] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  767.047309][T11061] loop2: detected capacity change from 0 to 1024
[  767.057246][T11064] loop3: detected capacity change from 0 to 256
[  767.080543][T11064] exfat: Deprecated parameter 'namecase'
[  767.111798][T11064] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  767.535818][ T8641] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  768.077907][T11073] loop4: detected capacity change from 0 to 512
[  768.821850][T11073] EXT4-fs (loop4): Ignoring removed oldalloc option
[  768.877571][T11077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1893'.
[  769.084691][T11073] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.1892: Parent and EA inode have the same ino 15
[  769.217980][T11073] EXT4-fs (loop4): Remounting filesystem read-only
[  769.311991][T11073] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.1892: Parent and EA inode have the same ino 15
[  769.506844][T11073] EXT4-fs (loop4): Remounting filesystem read-only
[  769.530073][T11073] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1892: inode #261888: comm syz.4.1892: iget: illegal inode #
[  769.637609][T11073] EXT4-fs (loop4): Remounting filesystem read-only
[  769.648088][T11073] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1892: error while reading EA inode 261888 err=-117
[  769.670137][ T8641] usb 4-1: Using ep0 maxpacket: 32
[  769.689785][T11073] EXT4-fs (loop4): Remounting filesystem read-only
[  769.707149][T11073] EXT4-fs (loop4): 1 orphan inode deleted
[  769.729966][T11073] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x0000000000000040,noauto_da_alloc,jqfmt=vfsv1,oldalloc,init_itable,. Quota mode: none.
[  769.950578][ T8641] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  769.959670][T11072] loop2: detected capacity change from 0 to 32768
[  769.969778][ T8641] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  769.998368][ T8641] usb 4-1: Product: syz
[  770.063359][ T8641] usb 4-1: Manufacturer: syz
[  770.081901][T11072] (syz.2.1891,11072,0):ocfs2_fill_super:991 ERROR: superblock probe failed!
[  770.097995][ T8641] usb 4-1: SerialNumber: syz
[  770.103115][T11072] (syz.2.1891,11072,0):ocfs2_fill_super:1177 ERROR: status = -22
[  770.145407][ T8641] usb 4-1: config 0 descriptor??
[  770.194111][ T8641] usb 4-1: can't set config #0, error -71
[  770.239878][ T8641] usb 4-1: USB disconnect, device number 10
[  771.415458][T11099] loop3: detected capacity change from 0 to 512
[  771.613934][T11099] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[  771.743984][T11099] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,norecovery,bsddf,,errors=continue. Quota mode: writeback.
[  771.815024][T11099] ext4 filesystem being mounted at /376/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  771.923583][T11112] tipc: Started in network mode
[  771.928591][T11112] tipc: Node identity ffffffff, cluster identity 4711
[  771.951311][T11112] tipc: Node number set to 4294967295
[  772.169065][T11115] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  773.643701][T11130] loop3: detected capacity change from 0 to 128
[  773.705623][T11130] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  775.409293][T11146] IPVS: Scheduler module ip_vs_ not found
[  776.272817][T11151] loop4: detected capacity change from 0 to 1024
[  776.874916][T11151] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,barrier=0x0000000000000000,nodelalloc,acl,errors=remount-ro,. Quota mode: none.
[  777.974408][T11174] loop2: detected capacity change from 0 to 8
[  778.107948][T11167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  779.278489][T11181] loop2: detected capacity change from 0 to 1024
[  779.396268][T11183] hub 1-0:1.0: USB hub found
[  779.404538][T11183] hub 1-0:1.0: 1 port detected
[  779.999666][T11181] fuse: Bad value for 'fd'
[  780.148997][ T4395] hfsplus: b-tree write err: -5, ino 4
[  780.256586][T11185] binder_alloc: 11184: binder_alloc_buf, no vma
[  781.335994][T11194] loop3: detected capacity change from 0 to 128
[  781.419671][T11194] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  781.919171][T11203] loop2: detected capacity change from 0 to 1024
[  782.498253][T11203] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,barrier=0x0000000000000000,nodelalloc,acl,errors=remount-ro,. Quota mode: none.
[  783.191729][T11225] binder: BINDER_SET_CONTEXT_MGR already set
[  783.244530][T11225] binder: 11223:11225 ioctl 4018620d 20004a80 returned -16
[  783.325681][T11202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  783.359134][T11229] binder: 11223:11229 unknown command 0
[  783.493497][T11229] binder: 11223:11229 ioctl c0306201 200004c0 returned -22
[  784.717270][T11246] binder: 11245:11246 ioctl 4018f50b 200000c0 returned -22
[  787.852936][T11278] binder_alloc: 11277: binder_alloc_buf, no vma
[  790.386780][T11283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  790.740438][T11293] loop2: detected capacity change from 0 to 512
[  790.841270][T11296] binder: 11294:11296 ioctl 4018f50b 200000c0 returned -22
[  790.928293][T11300] loop4: detected capacity change from 0 to 128
[  790.994504][T11300] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  791.063456][T11293] EXT4-fs (loop2): Ignoring removed oldalloc option
[  792.550123][T11293] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.1954: Parent and EA inode have the same ino 15
[  792.910441][T11293] EXT4-fs (loop2): Remounting filesystem read-only
[  792.944601][T11293] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.1954: Parent and EA inode have the same ino 15
[  792.978171][T11293] EXT4-fs (loop2): Remounting filesystem read-only
[  792.995214][T11293] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1954: inode #261888: comm syz.2.1954: iget: illegal inode #
[  793.029659][T11293] EXT4-fs (loop2): Remounting filesystem read-only
[  793.048621][T11293] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1954: error while reading EA inode 261888 err=-117
[  793.076935][T11293] EXT4-fs (loop2): Remounting filesystem read-only
[  793.094034][T11293] EXT4-fs (loop2): 1 orphan inode deleted
[  793.114260][T11293] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x0000000000000040,noauto_da_alloc,jqfmt=vfsv1,oldalloc,init_itable,. Quota mode: none.
[  794.569928][T11331] loop4: detected capacity change from 0 to 4096
[  796.276340][T11343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1968'.
[  796.445851][T11343] device ip6gretap1 entered promiscuous mode
[  798.213779][T11359] loop4: detected capacity change from 0 to 1024
[  798.960994][T11365] loop3: detected capacity change from 0 to 64
[  799.737383][T11359] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,barrier=0x0000000000000000,nodelalloc,acl,errors=remount-ro,. Quota mode: none.
[  800.475735][ T5772] Bluetooth: hci4: command 0x0406 tx timeout
[  801.002059][T11358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  802.754915][T11398] loop3: detected capacity change from 0 to 4096
[  802.951334][T11398] ntfs3: Unknown parameter '@'
[  803.026088][T11406] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  804.179273][T11398] loop3: detected capacity change from 0 to 256
[  805.017065][T11398] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0aabff0a, utbl_chksum : 0xe619d30d)
[  805.263230][T11432] loop2: detected capacity change from 0 to 64
[  805.426053][T11398] loop3: detected capacity change from 0 to 4096
[  805.509242][T11398] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  805.557071][T11398] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  805.721827][T11434] loop4: detected capacity change from 0 to 64
[  805.763890][T11436] loop3: detected capacity change from 0 to 1024
[  805.835684][T11436] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,barrier=0x0000000000000000,nodelalloc,acl,errors=remount-ro,. Quota mode: none.
[  806.665923][T11435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  808.225996][T11451] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  808.225996][T11451]    program syz.0.1995 not setting count and/or reply_len properly
[  808.469802][ T1425] ieee802154 phy0 wpan0: encryption failed: -22
[  808.476155][ T1425] ieee802154 phy1 wpan1: encryption failed: -22
[  808.942524][T11457] loop2: detected capacity change from 0 to 8
[  809.975235][T11467] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  811.303459][T11475] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  811.303459][T11475]    program syz.2.2000 not setting count and/or reply_len properly
[  811.334308][T11475] loop2: detected capacity change from 0 to 64
[  812.938172][T11491] loop4: detected capacity change from 0 to 1024
[  813.003391][T11480] loop3: detected capacity change from 0 to 32768
[  813.276935][T11491] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,barrier=0x0000000000000000,nodelalloc,acl,errors=remount-ro,. Quota mode: none.
[  813.502894][T11480] XFS (loop3): Mounting V5 Filesystem
[  814.665629][T11480] XFS (loop3): Ending clean mount
[  814.924624][T11480] XFS (loop3): Quotacheck needed: Please wait.
[  815.063556][T11490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  815.155057][T11480] XFS (loop3): Quotacheck: Done.
[  815.404190][ T4167] XFS (loop3): Unmounting Filesystem
[  815.513183][T11533] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  815.513183][T11533]    program syz.2.2017 not setting count and/or reply_len properly
[  819.897844][T11568] loop3: detected capacity change from 0 to 4096
[  820.065495][T11568] ntfs3: Unknown parameter '@'
[  820.227089][T11574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  820.993248][T11568] loop3: detected capacity change from 0 to 256
[  821.054124][T11568] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0aabff0a, utbl_chksum : 0xe619d30d)
[  821.339853][T11568] loop3: detected capacity change from 0 to 4096
[  821.443613][T11568] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  821.708819][T11568] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  821.790971][T11583] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  821.790971][T11583]    program syz.1.2030 not setting count and/or reply_len properly
[  825.668109][T11607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  826.222807][T11619] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  826.222807][T11619]    program syz.0.2042 not setting count and/or reply_len properly
[  827.108881][T11638] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  827.108881][T11638]    program syz.1.2046 not setting count and/or reply_len properly
[  829.192338][T11658] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  829.192338][T11658]    program syz.4.2050 not setting count and/or reply_len properly
[  829.222915][T11658] loop4: detected capacity change from 0 to 64
[  831.056057][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  832.014332][T11676] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  832.023901][T11676] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  832.032700][T11676] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  832.041442][T11676] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  832.082564][T11676] bond0: (slave vxlan0): Enslaving as an active interface with an up link
[  833.241574][T11688] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  833.241574][T11688]    program syz.2.2059 not setting count and/or reply_len properly
[  835.179065][T11705] loop4: detected capacity change from 0 to 512
[  835.267930][T11705] EXT4-fs (loop4): Ignoring removed oldalloc option
[  835.362389][T11705] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.2062: Parent and EA inode have the same ino 15
[  835.410734][T11705] EXT4-fs (loop4): Remounting filesystem read-only
[  835.417379][T11705] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.2062: Parent and EA inode have the same ino 15
[  835.747073][T11715] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  835.747073][T11715]    program syz.3.2065 not setting count and/or reply_len properly
[  835.778003][T11715] loop3: detected capacity change from 0 to 64
[  836.305141][T11705] EXT4-fs (loop4): Remounting filesystem read-only
[  836.332957][T11705] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2062: inode #261888: comm syz.4.2062: iget: illegal inode #
[  836.410560][T11705] EXT4-fs (loop4): Remounting filesystem read-only
[  836.480030][T11705] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2062: error while reading EA inode 261888 err=-117
[  836.612960][T11705] EXT4-fs (loop4): Remounting filesystem read-only
[  836.630092][T11705] EXT4-fs (loop4): 1 orphan inode deleted
[  836.649996][T11705] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x0000000000000040,noauto_da_alloc,jqfmt=vfsv1,oldalloc,init_itable,. Quota mode: none.
[  838.059074][T11726] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  840.020870][T11761] binder: 11760:11761 ioctl 4018f50b 200000c0 returned -22
[  840.366907][T11763] loop4: detected capacity change from 0 to 128
[  840.517150][T11763] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  842.725438][T11791] netlink: 'syz.1.2089': attribute type 1 has an invalid length.
[  842.781777][T11791] 8021q: adding VLAN 0 to HW filter on device bond1
[  842.866428][T11793] 8021q: adding VLAN 0 to HW filter on device bond1
[  842.899852][T11793] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address
[  842.968189][T11793] bond1: (slave ip6tnl1): Error -95 calling set_mac_address
[  843.156992][T11799] loop3: detected capacity change from 0 to 512
[  843.342028][T11799] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  843.367682][T11808] binder: 11807:11808 ioctl 4018f50b 200000c0 returned -22
[  843.440483][T11799] ext4 filesystem being mounted at /407/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  845.064779][T11832] binder: BINDER_SET_CONTEXT_MGR already set
[  845.071300][T11832] binder: 11829:11832 ioctl 4018620d 20004a80 returned -16
[  846.358455][T11842] sg_write: data in/out 21359463/88 bytes for SCSI command 0x82-- guessing data in;
[  846.358455][T11842]    program syz.1.2104 not setting count and/or reply_len properly
[  846.744370][T11849] loop3: detected capacity change from 0 to 4096
[  846.926657][T11849] ntfs3: Unknown parameter '@'
[  847.567210][T11849] loop3: detected capacity change from 0 to 256
[  847.605950][T11853] binder: 11852:11853 ioctl 4018f50b 200000c0 returned -22
[  847.765279][T11849] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0aabff0a, utbl_chksum : 0xe619d30d)
[  849.506924][T11875] binder: BINDER_SET_CONTEXT_MGR already set
[  849.582533][T11875] binder: 11874:11875 ioctl 4018620d 20004a80 returned -16
[  851.450849][T11888] overlayfs: missing 'workdir'
[  851.999159][T11880] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  851.999159][T11880]    program syz.3.2116 not setting count and/or reply_len properly
[  852.011948][T11896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2121'.
[  852.073608][T11894] loop3: detected capacity change from 0 to 64
[  854.717438][T11923] loop4: detected capacity change from 0 to 4096
[  854.864415][T11923] NILFS (loop4): invalid segment: Checksum error in segment payload
[  854.872872][T11923] NILFS (loop4): trying rollback from an earlier position
[  854.886943][T11923] NILFS (loop4): invalid segment: Inconsistency found
[  854.893872][T11923] NILFS (loop4): error -22 while searching super root
[  854.914468][T11925] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  854.914468][T11925]    program syz.0.2128 not setting count and/or reply_len properly
[  855.857286][T11935] overlayfs: missing 'lowerdir'
[  857.425367][T11951] loop4: detected capacity change from 0 to 4096
[  857.478402][T11951] ntfs3: Unknown parameter '@'
[  858.124096][T11951] loop4: detected capacity change from 0 to 256
[  858.396721][T11951] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0aabff0a, utbl_chksum : 0xe619d30d)
[  859.487904][T11968] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  859.487904][T11968]    program syz.1.2142 not setting count and/or reply_len properly
[  860.029051][T11974] loop3: detected capacity change from 0 to 64
[  860.342310][T11971] loop4: detected capacity change from 0 to 4096
[  860.717724][T11982] overlayfs: missing 'lowerdir'
[  861.016154][   T26] audit: type=1800 audit(2000000024.200:65): pid=11987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2150" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  861.170012][T11971] ntfs3: loop4: MFT: r=1f, expect seq=1 instead of 0!
[  862.369082][T12003] loop3: detected capacity change from 0 to 512
[  863.430909][T12003] EXT4-fs (loop3): Ignoring removed oldalloc option
[  863.589048][T12003] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.2151: Parent and EA inode have the same ino 15
[  863.614439][T12003] EXT4-fs (loop3): Remounting filesystem read-only
[  863.621594][T12003] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.2151: Parent and EA inode have the same ino 15
[  863.640901][T12003] EXT4-fs (loop3): Remounting filesystem read-only
[  863.647664][T12003] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.2151: inode #261888: comm syz.3.2151: iget: illegal inode #
[  863.668679][T12003] EXT4-fs (loop3): Remounting filesystem read-only
[  863.675677][T12003] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.2151: error while reading EA inode 261888 err=-117
[  863.693890][T12003] EXT4-fs (loop3): Remounting filesystem read-only
[  863.718363][T12003] EXT4-fs (loop3): 1 orphan inode deleted
[  863.748098][T12003] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x0000000000000040,noauto_da_alloc,jqfmt=vfsv1,oldalloc,init_itable,. Quota mode: none.
[  863.916527][T12007] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  863.916527][T12007]    program syz.2.2156 not setting count and/or reply_len properly
[  865.241020][T12034] overlayfs: missing 'lowerdir'
[  865.372663][T12037] loop4: detected capacity change from 0 to 16
[  865.645361][T12037] erofs: (device loop4): mounted with root inode @ nid 36.
[  867.129517][T12054] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  867.129517][T12054]    program syz.4.2169 not setting count and/or reply_len properly
[  867.148822][T12054] loop4: detected capacity change from 0 to 64
[  868.115831][T12072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2176'.
[  868.683028][T12078] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  868.692047][T12078] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  868.997132][T12081] loop4: detected capacity change from 0 to 512
[  869.210260][T12081] EXT4-fs (loop4): Unrecognized mount option "hash" or missing value
[  869.910701][ T1425] ieee802154 phy0 wpan0: encryption failed: -22
[  869.917080][ T1425] ieee802154 phy1 wpan1: encryption failed: -22
[  869.966281][T12081] loop4: detected capacity change from 0 to 512
[  869.992463][T12085] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  870.139362][T12085] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  870.400783][T12081] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  870.865644][T12102] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  870.865644][T12102]    program syz.2.2183 not setting count and/or reply_len properly
[  871.330835][T12081] EXT4-fs (loop4): 1 truncate cleaned up
[  871.390547][T12081] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=abort,nombcache,data=journal,nolazytime,noblock_validity,quota,mb_optimize_scan=0x0000000000000001,nodelalloc,,errors=continue. Quota mode: writeback.
[  871.480469][T12104] loop3: detected capacity change from 0 to 2048
[  871.708547][T12104] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  873.232510][T12130] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  873.241526][T12130] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  875.959500][T12160] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  875.959500][T12160]    program syz.3.2197 not setting count and/or reply_len properly
[  875.978603][T12160] loop3: detected capacity change from 0 to 64
[  877.182259][T12153] loop4: detected capacity change from 0 to 4096
[  877.302072][T12153] ntfs3: Unknown parameter '@'
[  877.483090][T12168] loop3: detected capacity change from 0 to 1024
[  877.516974][T12153] loop4: detected capacity change from 0 to 256
[  877.599277][T12153] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0aabff0a, utbl_chksum : 0xe619d30d)
[  877.694038][   T26] audit: type=1800 audit(2000000040.880:66): pid=12168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2202" name="bus" dev="loop3" ino=26 res=0 errno=0
[  877.836978][T12005] hfsplus: b-tree write err: -5, ino 4
[  877.978217][T12153] loop4: detected capacity change from 0 to 4096
[  878.132306][T12175] loop3: detected capacity change from 0 to 1024
[  878.954767][T12153] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  878.970092][T12175] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback.
[  879.072689][T12153] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  879.236395][T12189] overlayfs: failed to resolve './file0': -2
[  879.325967][T12191] netlink: 'syz.3.2206': attribute type 10 has an invalid length.
[  879.333962][T12191] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2206'.
[  880.244645][T12203] loop3: detected capacity change from 0 to 512
[  880.385585][T12203] EXT4-fs (loop3): Ignoring removed oldalloc option
[  880.688900][T12203] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.2213: Parent and EA inode have the same ino 15
[  880.844748][T12203] EXT4-fs (loop3): Remounting filesystem read-only
[  880.894140][T12203] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.2213: Parent and EA inode have the same ino 15
[  881.000741][T12203] EXT4-fs (loop3): Remounting filesystem read-only
[  881.026454][T12203] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.2213: inode #261888: comm syz.3.2213: iget: illegal inode #
[  881.066370][T12203] EXT4-fs (loop3): Remounting filesystem read-only
[  881.113483][T12203] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.2213: error while reading EA inode 261888 err=-117
[  881.299685][ T4253] Bluetooth: hci4: command 0x0405 tx timeout
[  881.302390][T12203] EXT4-fs (loop3): Remounting filesystem read-only
[  881.341774][T12203] EXT4-fs (loop3): 1 orphan inode deleted
[  881.347731][T12203] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x0000000000000040,noauto_da_alloc,jqfmt=vfsv1,oldalloc,init_itable,. Quota mode: none.
[  882.547372][T12216] loop4: detected capacity change from 0 to 40427
[  882.595908][T12216] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  882.609507][T12216] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  882.621688][ T4211] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  882.683171][T12216] F2FS-fs (loop4): Found nat_bits in checkpoint
[  882.786986][T12216] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  882.806772][T12216] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  882.870009][ T4211] usb 2-1: Using ep0 maxpacket: 8
[  882.934809][   T26] audit: type=1804 audit(2000000046.120:67): pid=12216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2216" name="/newroot/409/bus/file0" dev="loop4" ino=10 res=1 errno=0
[  882.990182][ T4211] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  883.008502][ T4211] usb 2-1: config 0 has no interface number 0
[  883.028142][ T4211] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping
[  883.055258][ T4211] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping
[  883.086098][ T4211] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  883.117168][ T4211] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  883.144544][ T4211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  883.169712][ T4211] usb 2-1: config 0 descriptor??
[  883.425369][ T4211] ldusb 2-1:0.55: Interrupt in endpoint not found
[  883.683117][ T4211] usb 2-1: USB disconnect, device number 16
[  883.976803][T12246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2227'.
[  884.018647][T12246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2227'.
[  886.731196][T12266] loop3: detected capacity change from 0 to 256
[  887.354898][T12284] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001)
[  887.363710][T12284] FAT-fs (loop3): Filesystem has been set read-only
[  888.126011][T12292] netlink: 'syz.2.2239': attribute type 10 has an invalid length.
[  888.133927][T12292] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2239'.
[  893.717239][T12332] loop4: detected capacity change from 0 to 32768
[  894.002360][T12332] XFS: noikeep mount option is deprecated.
[  894.616242][T12350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  895.893762][T12371] loop3: detected capacity change from 0 to 256
[  896.153151][T12371] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d)
[  896.155863][T12379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2269'.
[  896.603184][T12371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  896.643763][T12371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  896.871285][T12371] bond0 (unregistering): Released all slaves
[  898.488510][T12403] loop4: detected capacity change from 0 to 4096
[  899.108425][T12399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  899.342711][T12403] ntfs3: Unknown parameter '@'
[  899.471055][T12402] loop4: detected capacity change from 0 to 256
[  899.687713][T12402] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0aabff0a, utbl_chksum : 0xe619d30d)
[  899.733949][T12413] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.2279'.
[  899.770450][T12415] device veth0_vlan left promiscuous mode
[  899.784362][T12415] device vlan0 entered promiscuous mode
[  899.806892][T12415] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2280'.
[  899.859205][T12415] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  900.018409][T12402] loop4: detected capacity change from 0 to 4096
[  900.699514][T12402] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  900.813557][T12402] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  902.889036][T12451] overlayfs: failed to resolve './file0': -2
[  904.187302][T12455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  905.367804][T12472] input: syz0 as /devices/virtual/input/input17
[  908.510594][T12507] loop3: detected capacity change from 0 to 512
[  910.323737][T12503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  910.356041][T12507] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  910.557347][T12520] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2311'.
[  910.584303][T12520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2311'.
[  910.820958][T12524] loop3: detected capacity change from 0 to 1024
[  911.095407][T12524] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback.
[  913.000555][T12557] input: syz0 as /devices/virtual/input/input18
[  913.193907][T12563] loop4: detected capacity change from 0 to 64
[  913.394374][T12552] loop3: detected capacity change from 0 to 32768
[  913.535398][T12552] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2319 (12552)
[  913.595809][T12566] loop4: detected capacity change from 0 to 1024
[  913.608647][T12552] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  913.626379][T12552] BTRFS info (device loop3): use zlib compression, level 3
[  913.638454][T12552] BTRFS info (device loop3): using free space tree
[  913.646120][T12552] BTRFS info (device loop3): has skinny extents
[  913.700177][T12566] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,barrier=0x0000000000000000,nodelalloc,acl,errors=remount-ro,. Quota mode: none.
[  915.143515][T12565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  916.363104][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  916.770591][T12552] BTRFS error (device loop3): open_ctree failed
[  917.216925][T12624] loop4: detected capacity change from 0 to 64
[  918.400629][ T4355] attempt to access beyond end of device
[  918.400629][ T4355] loop4: rw=1, want=66, limit=64
[  918.433714][ T4355] Buffer I/O error on dev loop4, logical block 65, lost async page write
[  918.442799][ T4355] attempt to access beyond end of device
[  918.442799][ T4355] loop4: rw=1, want=67, limit=64
[  918.478843][ T4355] Buffer I/O error on dev loop4, logical block 66, lost async page write
[  918.509988][ T4355] attempt to access beyond end of device
[  918.509988][ T4355] loop4: rw=1, want=68, limit=64
[  918.535487][ T4355] Buffer I/O error on dev loop4, logical block 67, lost async page write
[  918.555132][ T4355] attempt to access beyond end of device
[  918.555132][ T4355] loop4: rw=1, want=69, limit=64
[  918.595804][ T4355] Buffer I/O error on dev loop4, logical block 68, lost async page write
[  918.614527][ T4355] attempt to access beyond end of device
[  918.614527][ T4355] loop4: rw=1, want=73, limit=64
[  918.625146][ T4355] Buffer I/O error on dev loop4, logical block 72, lost async page write
[  918.633866][ T4355] attempt to access beyond end of device
[  918.633866][ T4355] loop4: rw=1, want=74, limit=64
[  918.644405][ T4355] Buffer I/O error on dev loop4, logical block 73, lost async page write
[  918.652929][ T4355] attempt to access beyond end of device
[  918.652929][ T4355] loop4: rw=1, want=77, limit=64
[  918.663457][ T4355] Buffer I/O error on dev loop4, logical block 76, lost async page write
[  918.672009][ T4355] attempt to access beyond end of device
[  918.672009][ T4355] loop4: rw=1, want=78, limit=64
[  918.731427][ T4355] Buffer I/O error on dev loop4, logical block 77, lost async page write
[  918.790678][ T4355] attempt to access beyond end of device
[  918.790678][ T4355] loop4: rw=1, want=165, limit=64
[  919.173910][T12648] loop4: detected capacity change from 0 to 1024
[  919.710679][   T26] audit: type=1326 audit(2000000082.770:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12652 comm="syz.3.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4500137819 code=0x7ffc0000
[  919.908632][T12648] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback.
[  920.179482][   T26] audit: type=1326 audit(2000000082.790:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12652 comm="syz.3.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f4500137819 code=0x7ffc0000
[  920.277556][T12659] loop3: detected capacity change from 0 to 1024
[  920.320186][   T26] audit: type=1326 audit(2000000082.810:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12652 comm="syz.3.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4500137819 code=0x7ffc0000
[  923.451853][T12691] loop4: detected capacity change from 0 to 2048
[  923.786386][T12695] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  924.403410][T12671] loop3: detected capacity change from 0 to 32768
[  924.466116][T12671] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2350 (12671)
[  924.694994][T12671] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  924.749363][T12671] BTRFS info (device loop3): using free space tree
[  924.770140][T12671] BTRFS info (device loop3): has skinny extents
[  924.886265][T12707] loop4: detected capacity change from 0 to 1024
[  925.162560][T12707] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback.
[  925.366487][T12706] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  925.366487][T12706]    program syz.1.2362 not setting count and/or reply_len properly
[  926.324556][T12671] BTRFS error (device loop3): open_ctree failed
[  927.841415][T12761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2371'.
[  930.060760][T12769] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  930.060760][T12769]    program syz.1.2375 not setting count and/or reply_len properly
[  931.557250][ T1425] ieee802154 phy0 wpan0: encryption failed: -22
[  931.601250][ T1425] ieee802154 phy1 wpan1: encryption failed: -22
[  932.548586][T12809] loop4: detected capacity change from 0 to 512
[  932.610104][T12809] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  932.659713][T12809] EXT4-fs (loop4): 1 truncate cleaned up
[  932.669768][T12809] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nouid32,noload,,errors=continue. Quota mode: none.
[  935.129891][T12818] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  935.129891][T12818]    program syz.3.2389 not setting count and/or reply_len properly
[  935.161263][T12818] loop3: detected capacity change from 0 to 64
[  935.804623][   T26] audit: type=1326 audit(2000000098.950:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12827 comm="syz.4.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9462e0819 code=0x7fc00000
[  935.828162][   T26] audit: type=1326 audit(2000000098.950:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12827 comm="syz.4.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9462e0819 code=0x7fc00000
[  935.853261][T12841] loop3: detected capacity change from 0 to 1024
[  935.859732][   T26] audit: type=1326 audit(2000000098.950:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12827 comm="syz.4.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9462e0819 code=0x7fc00000
[  936.115371][   T26] audit: type=1326 audit(2000000098.950:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12827 comm="syz.4.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9462e0819 code=0x7fc00000
[  936.156144][   T26] audit: type=1326 audit(2000000098.950:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12827 comm="syz.4.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9462e0819 code=0x7fc00000
[  936.280775][T12841] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  936.320432][   T26] audit: type=1326 audit(2000000098.950:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12827 comm="syz.4.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9462e0819 code=0x7fc00000
[  936.469340][   T26] audit: type=1326 audit(2000000098.950:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12827 comm="syz.4.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9462e0819 code=0x7fc00000
[  936.589941][   T26] audit: type=1326 audit(2000000098.950:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12827 comm="syz.4.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9462e0819 code=0x7fc00000
[  936.647488][   T26] audit: type=1326 audit(2000000098.950:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12827 comm="syz.4.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9462e0819 code=0x7fc00000
[  936.719948][   T26] audit: type=1326 audit(2000000098.950:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12827 comm="syz.4.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9462e0819 code=0x7fc00000
[  938.447042][ T4167] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[  938.555216][ T4167] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11
[ 1045.419806][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1045.426821][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P4213/1:b..l
[ 1045.435281][    C1] 	(detected by 1, t=10503 jiffies, g=51573, q=9)
[ 1045.441677][    C1] task:kworker/0:5     state:R  running task     stack:23584 pid: 4213 ppid:     2 flags:0x00004000
[ 1045.453341][    C1] Workqueue: events_power_efficient gc_worker
[ 1045.459401][    C1] Call Trace:
[ 1045.462659][    C1]  <TASK>
[ 1045.465572][    C1]  __schedule+0x12c4/0x45b0
[ 1045.470067][    C1]  ? __lock_acquire+0x1295/0x1ff0
[ 1045.475083][    C1]  ? mark_lock+0x98/0x340
[ 1045.479402][    C1]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 1045.485383][    C1]  ? release_firmware_map_entry+0x190/0x190
[ 1045.491282][    C1]  ? mark_lock+0x98/0x340
[ 1045.495593][    C1]  ? preempt_schedule_irq+0xec/0x1c0
[ 1045.500865][    C1]  preempt_schedule_irq+0xf7/0x1c0
[ 1045.505962][    C1]  ? __cond_resched+0x20/0x20
[ 1045.510642][    C1]  irqentry_exit+0x53/0x80
[ 1045.515059][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1045.521047][    C1] RIP: 0010:gc_worker+0xcda/0x14b0
[ 1045.526149][    C1] Code: e0 00 00 00 e8 57 ca 2e f9 e9 71 fe ff ff e8 1d f2 e4 f8 eb 05 e8 16 f2 e4 f8 e8 f1 22 a3 01 89 c3 31 ff 89 c6 e8 66 f5 e4 f8 <85> db 4c 8b bc 24 88 00 00 00 74 15 e8 65 a7 cf f8 84 c0 74 18 e8
[ 1045.545735][    C1] RSP: 0018:ffffc900031bfb00 EFLAGS: 00000293
[ 1045.551783][    C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff888029d45940
[ 1045.559738][    C1] RDX: ffff888029d45940 RSI: 0000000000000001 RDI: 0000000000000000
[ 1045.567693][    C1] RBP: ffffc900031bfc50 R08: ffffffff889b819a R09: fffffbfff2131034
[ 1045.575669][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 000000000007e9f3
[ 1045.583624][    C1] R13: dffffc0000000000 R14: ffff88802ba00000 R15: 0000000000004000
[ 1045.591581][    C1]  ? gc_worker+0xcda/0x14b0
[ 1045.596110][    C1]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 1045.602087][    C1]  ? init_conntrack+0x1740/0x1740
[ 1045.607097][    C1]  ? do_raw_spin_unlock+0x137/0x8b0
[ 1045.612283][    C1]  process_one_work+0x8a1/0x10c0
[ 1045.617242][    C1]  ? worker_detach_from_pool+0x260/0x260
[ 1045.622863][    C1]  ? _raw_spin_lock_irqsave+0x120/0x120
[ 1045.628411][    C1]  ? kthread_data+0x4e/0xc0
[ 1045.632908][    C1]  ? wq_worker_running+0x97/0x170
[ 1045.637914][    C1]  worker_thread+0xaca/0x1280
[ 1045.642590][    C1]  kthread+0x3f6/0x4f0
[ 1045.646636][    C1]  ? rcu_lock_release+0x20/0x20
[ 1045.651488][    C1]  ? kthread_blkcg+0xd0/0xd0
[ 1045.656108][    C1]  ret_from_fork+0x1f/0x30
[ 1045.660539][    C1]  </TASK>
[ 1045.663556][    C1] rcu: rcu_preempt kthread starved for 10526 jiffies! g51573 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[ 1045.674730][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1045.684683][    C1] rcu: RCU grace-period kthread stack dump:
[ 1045.690568][    C1] task:rcu_preempt     state:R  running task     stack:27064 pid:   15 ppid:     2 flags:0x00004000
[ 1045.701332][    C1] Call Trace:
[ 1045.704632][    C1]  <TASK>
[ 1045.707556][    C1]  __schedule+0x12c4/0x45b0
[ 1045.712062][    C1]  ? _raw_spin_unlock_irqrestore+0x8b/0x130
[ 1045.717942][    C1]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 1045.723827][    C1]  ? __mod_timer+0xa8e/0xeb0
[ 1045.728403][    C1]  ? release_firmware_map_entry+0x190/0x190
[ 1045.734275][    C1]  ? mod_timer_pending+0x20/0x20
[ 1045.739194][    C1]  ? lockdep_softirqs_off+0x420/0x420
[ 1045.744558][    C1]  schedule+0x11b/0x1f0
[ 1045.748705][    C1]  schedule_timeout+0x1b9/0x300
[ 1045.753539][    C1]  ? console_conditional_schedule+0x40/0x40
[ 1045.759450][    C1]  ? update_process_times+0x200/0x200
[ 1045.764816][    C1]  ? prepare_to_swait_event+0x321/0x340
[ 1045.770361][    C1]  rcu_gp_fqs_loop+0x2bf/0x1080
[ 1045.775203][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1045.780390][    C1]  ? lockdep_hardirqs_on+0x94/0x130
[ 1045.785579][    C1]  ? rcu_gp_init+0xdae/0x1140
[ 1045.790245][    C1]  ? rcu_gp_init+0x1140/0x1140
[ 1045.795003][    C1]  ? finish_swait+0xc5/0x1d0
[ 1045.799587][    C1]  rcu_gp_kthread+0xa4/0x360
[ 1045.804158][    C1]  ? _raw_spin_unlock+0x40/0x40
[ 1045.808993][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[ 1045.814173][    C1]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[ 1045.820059][    C1]  ? __kthread_parkme+0x15c/0x1c0
[ 1045.825071][    C1]  kthread+0x3f6/0x4f0
[ 1045.829122][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[ 1045.834218][    C1]  ? kthread_blkcg+0xd0/0xd0
[ 1045.838789][    C1]  ret_from_fork+0x1f/0x30
[ 1045.843230][    C1]  </TASK>
[ 1045.846230][    C1] rcu: Stack dump where RCU GP kthread last ran:
[ 1045.852526][    C1] Sending NMI from CPU 1 to CPUs 0:
[ 1045.857733][    C0] NMI backtrace for cpu 0 skipped: idling at acpi_idle_do_entry+0x10f/0x340