last executing test programs:

15m28.461254476s ago: executing program 32 (id=420):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc12, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0xb1, [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x101, 0x2, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xc, 0x2, 0xff}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x8, 0x5, {0x5, 0x5, "00f49e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

15m4.557668272s ago: executing program 33 (id=425):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x30, 0xf5, 0x69, 0x20, 0x5ac, 0x219, 0xf072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x55, 0x7, 0x0, 0x3, 0x49, 0x2}}]}}]}}, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4)
shutdown(r0, 0x1)

15m3.700827596s ago: executing program 34 (id=427):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c009900080000007b00000008009f0004200000080026006c0900"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

14m17.626849497s ago: executing program 35 (id=849):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0000010000000008000100000401"], 0x24}}, 0x0)

13m4.81414508s ago: executing program 36 (id=1608):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f0000000040)=0x2b)

11m42.472706342s ago: executing program 5 (id=2519):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)

11m42.39916181s ago: executing program 5 (id=2521):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000040)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x4}}, 0x10)

11m42.39900567s ago: executing program 5 (id=2522):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {}, {0x3, 0x3, 0x3, 0xa, 0x9}, {}, {}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x62, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

11m42.309911764s ago: executing program 5 (id=2525):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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")
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cb19976d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc10700", "64885973ff030000000000000000d01cd3160000ffffff7f0000000000002000", [0x200]})

11m42.113184849s ago: executing program 5 (id=2529):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x8002, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, 0x0)

11m41.802234393s ago: executing program 5 (id=2530):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4)
ppoll(&(0x7f00000000c0)=[{r0, 0x2000}], 0x1, &(0x7f0000000180)={0x0, 0x989680}, 0x0, 0x0)

11m41.675909902s ago: executing program 37 (id=2530):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4)
ppoll(&(0x7f00000000c0)=[{r0, 0x2000}], 0x1, &(0x7f0000000180)={0x0, 0x989680}, 0x0, 0x0)

11m10.881956435s ago: executing program 4 (id=2812):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)

11m10.761886755s ago: executing program 4 (id=2813):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

11m10.651944695s ago: executing program 4 (id=2814):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r1=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x811}, [@map_fd={0x18, 0x1, 0x1, 0x0, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x2, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd0ad}, 0x94)

11m10.560329217s ago: executing program 4 (id=2815):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x41, 0x553, &(0x7f0000000c80)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000340)={0x0, 0x881c, 0x1, 0x2, 0x40000333, 0x0, r0}, &(0x7f00000006c0)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/205, 0xcd}], 0x1})
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0)

11m10.133842268s ago: executing program 4 (id=2817):
r0 = signalfd4(0xffffffffffffffff, &(0x7f00000004c0)={[0x97]}, 0x8, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r1 = io_uring_setup(0x360b, &(0x7f00000000c0)={0x0, 0x2, 0x2, 0x0, 0x9b})
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f0000000000)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
dup2(r0, r1)

11m9.842321444s ago: executing program 4 (id=2818):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000080))

11m9.744297814s ago: executing program 38 (id=2818):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000080))

10m34.93186449s ago: executing program 8 (id=3204):
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4)
sendmsg$tipc(r0, &(0x7f0000000740)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x0, 0x1}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000400)="1b5e", 0x2}], 0x1}, 0x20008040)
syz_open_dev$dri(0x0, 0x1ff, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000034c0)={0x2020, 0x0, 0x0, <r2=>0x0, <r3=>0x0}, 0xcac)
fchown(r1, r2, r3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0xffffffffffffffff, 0x6, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_WANTACK(r5, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota')
chdir(&(0x7f0000000140)='./file1\x00')
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r8, 0x80000300, 0x0, 0x0)
quotactl_fd$Q_GETINFO(r8, 0xffffffff80000500, 0x0, &(0x7f00000002c0))
recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0xc, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x4, @private1, 0x345c}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)

10m33.984645707s ago: executing program 8 (id=3208):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001d40)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffffffffdb5, 0xffd9, 0x0, 0x0, 0x4, 0x0, 0xc}, 0x27)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000001dc0)=ANY=[@ANYBLOB="180200000100000000000000030000008500000041000000180000000200000000000000040000009500"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50)

10m33.842631196s ago: executing program 8 (id=3211):
mkdir(&(0x7f0000000000)='./file1\x00', 0x74)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = open(&(0x7f0000000180)='./file1\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'})

10m33.842327521s ago: executing program 8 (id=3212):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891008, 0x0)

10m33.762366003s ago: executing program 8 (id=3214):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108)

10m33.55327897s ago: executing program 8 (id=3215):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
fallocate(r0, 0x60, 0x2, 0x2)

10m33.440879739s ago: executing program 39 (id=3215):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
fallocate(r0, 0x60, 0x2, 0x2)

10m19.000506294s ago: executing program 9 (id=3371):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r4, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r0}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c)
syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[], 0x0)

10m19.000277797s ago: executing program 9 (id=3372):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0)
mkdirat(r1, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x98)
rename(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0\x00')

10m18.95636329s ago: executing program 9 (id=3374):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0)

10m18.88305213s ago: executing program 9 (id=3375):
inotify_init1(0x800)
syz_mount_image$fuse(0x0, 0x0, 0x1000009, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000008c0), 0x3, 0x5eb, &(0x7f0000000c00)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0)
lsetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000200)='\xa2-\x00', 0x3, 0x1)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
llistxattr(0x0, 0x0, 0x0)

10m18.823065113s ago: executing program 9 (id=3376):
r0 = socket(0x1e, 0x4, 0x0)
getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x89, &(0x7f0000000000), &(0x7f0000000140)=0x4)

10m18.493253462s ago: executing program 9 (id=3377):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000)

10m18.424474392s ago: executing program 40 (id=3377):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000)

8m57.169051898s ago: executing program 7 (id=4528):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x48}]}]}, 0x28}}, 0x0)

8m56.912345164s ago: executing program 7 (id=4529):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x14, 0x38, 0x1, 0x70bd2c, 0x25dfdbff, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804)

8m56.850159216s ago: executing program 7 (id=4532):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x800010, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f696e6c696e655f78617474722c6e6f696e6c696e655f64656e7472792c70726a6a71756f74613d6163746976655f6c6f67733d342c6a71666d743d76667376312c6e6f696e6c696e655f646174612c6e6f5f686561702c636865636b706f696e743d64697361626c652c66617374626f6f742c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c00ac19de274efe59cc5334a78992c33160f2bb29d00ec19e86b62e10e9d54427a6838f1aff0ce27327b707feafcce74234d4abe846a4a55fd26c5918e2ac7a6aa2fd027fd0b881927cefce65dd3d73b0b9185466a67b", @ANYRES32], 0x21, 0x552d, &(0x7f0000000a00)="$eJzs3EtvG1UUAODjpOmbEiEW7DqoQkqk2qrTh2BXoBUP0aoqsGAFju1abmxPFDtOyIoFS8SCf4JAYsWS38CCNTvEAsQOCeS5E2gKlZDixKT5Pml85t65c+beURTpzFgO4NhazH77pRIX4kxEzEfE+Yhiv1JuhZspvBARFyNi7pGtUvb/1XEyIs5GxIVJ8pSzUh764vL40vWf3/712+9PnTj35Tc/zG7VwKy9FBH99bS/1U8x76T4sOxvjLtF7F8blzEd6K+V7TzFrfZqkWGrsTuuUcSrnTQ+X98cTuKDXqM5iZ3ug6J/fZAuOBx3dvMUJzxsbBTtVnu1iN1hXsTOTprX9k7637YzHKU8rTLfx0X6GI12Y+pvb7fTetbXitgcjMr+lDdvtbcncVzG8nLRzHutYh6r+7nT/2svvtMdbG5n4/bGsJsPsuu1+su1+o1qfSNvtUfta9VGv3XjWrbU6U2GVUftRv9mJ887vXatmfeXs6VOs1mt17OlW+3VbmOQ1eu1q7Ur1evL5d7l7I2772e9VrY0ia91B5ujbm+YPcg3snTGcrZSu/rKcnapnr1751527/7t23fuvffhrQ/uvnrnrdfLQf+YVra0cmVlpVq/Ul2pL+/vBhyp9X9aTnqK64d9qcx6AgBHj/ofmIWDq/837kccfP0f6v+pOFL173Gv/w9g/bAv6n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGPrx4Wv3ix2FlP7XNn/TNn1XNmuRMRcRPzxL+bj5J6c82WehSeMX3hsDt9VosgwucapcjsbETfL7fdnD/ouAAAAwNPr608ufp6q9fSxOOsJcZjSQ5u58x9NKV8lIhYWf5pStrnJx/NTSlb8fZ+I7SllKx5gnZ5SsvTI7cS0sv0n83vC6UdCJYW5x8+Y2moBAICZ2VsJHG4VAgAAwGH67IlH1g51HhyySuy+ytx9F1x88/7vl31nUturPwAAADi6KrOeAAAAAHDgivrf7/8BAADA0y39/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH+ycy+5aQNxHID/NrjQl4qq7nuV7uAYPUKXXVYcoJfgCOQKuQBnILscIYIIj4NCRB7EY6xE3yfZgy3zmxkei5mRBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLV9VydvHv5/+2OZttO3l6AwAAAByzrpaz+sUkXX9u7n9tbn1vrouIKCPi2Nh9EB8OMgdNTvXI89WDNlxG1Am7OkbN8SkifqVjG9+6/hQAAADgXRruTqv5YppG6+k06btVtHbCd5gmbcovvzNVXURENbnOlFbu8n5kCqt/38P4mymtnsAaZwpLU27DXGkvUv/d97N243tFkYry6fdn6zsAAHBGg4PivKMQAAAAzulP3w2gCx+ffaKIu6XM/VLgKBXjgwiLfQAAAPB2FX03AAAAAOhcPf4/Zf+/6Gf/v7ix/x8AAAC8Wtr/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC6tq+VsNV9M2+Zstu3k6Q0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADALfvzjgIhEAZhsHd9ZzL3P6w0aGpqUgXCx98YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7M9LCoRAEETBnPG/k77/YSVBzyBCBDQ8qqhFAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7Ny/b9xUHADwZ/t8/QGII6AbghBIDLDQ67W0dEMMoIiBPwEpSq8l9MqPNgOtKqQsbChzFwQjQkigsPUfYOqG1EpdytbhhiKxsByyz845TSUuRLEvyecjPb/vOY7f99lSlK+fEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDR6bxon2aYzieNi373Ht1ay/v4TfebOxoPFrGVxVGfSB8Mr1Q9Rt7lEAAAAODqSsr4PITxMN5eyPu7k9X9aHpPV/N8/N4nLev7Jur/sy9o/a7/9+uilrYE6k3Gyk15aHQ5O70yltX+znG/P/+cRrfzK589ekvyGxB+uvzhK8+sZfXv37vvtPDxWR7YAwP9xquyLoPx9KOv7TSYGwJHRqhTeZf2fdJrNCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAOo/XwTBlHIYTF1jTO3H98a+Vp/Z2NB4tlO3/79kb1nNkp0hDCpdXh4HSNc5l312/cvLI8HA6u1R+8GkJoavR3i+lf+XiGg0No5PrsV/DPeDze1Xcdbz7nPQVxcbPnJZ+DETT4QwkAgEMpLVpW1z9MN5eyfdFCCOMfttf/b1TiMGP9/+iT8/eqY1Xr/35tM5x/vbWrX/Su37j51urV5cuDy4PP3j7Tf6d/9sK5cxd6+bOSnicmAAAA7E27aNX6P17Yuf5/shKHGev/L7/rfz0d6Y98q/7fabro13QmAAAAR9sLr/39V/SU/VG7Hb5aXlu71p9stz6fmWwbSHXXjhWtWv8nC01nBQAAANRhtB5tW/+/WInDjOv/z/748s/VcyYhhBPF+v+plc+HF+ubzlyr48+Jm54jAAAAzTpRtOr6f5q//x9vvfIQhxDefH0SF/8GcKb6P/ngm5+qYyWV9//P1jfFuRR3J9cj77shtLrbvvx7Y4kBAABwKB0vWlbs/5luLn36y8mP2t7/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjbvwEAAP//E41CoA==")
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0)

8m56.542074271s ago: executing program 7 (id=4537):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3813009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='proc\x00', 0x16, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00')

8m56.31202378s ago: executing program 7 (id=4541):
r0 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0</\x00\x8e._\x14zC\x9a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-\xe2\xc7\xd3\xe6M^\x98\x85x\x14\t\xe9Q1\x1dK\x9a\x045\xd3\x17\xb22\x00D(\xd2\xdd\xa0\xff\x1f\x00\x00\n\x00\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xe36g\xfd\xd2\xd4\xe3\x1f\xa6\xc6\xe2\xa6!\x9aE<2`]<\xf2R?8\xb8\xa3\xbf\xc3\x18s\xf7!~0\xc7y\xe2\xb2VP\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\xf4\xd0[\x12\xf5+\x1aS\x02/Yxm\x96\xbfS\x97\x9c/\x1f5i\xc6\x861\x8a\xff\xc3\xe7\xbfU\xd5\xac\xccB=\x8f\xfd26<Z|U6\r\xd7\x18\xad\x1d`\x06\xcfN\a\xf9\xd7 \x1a\xd8\xef\xb6\x9e8Z\t:#r\xa2\xb1h\xc0\xc0a\xa9\xc46A\x01\xac\xe6\xbf !5I\xc9<\x19{)\xa4\xad\v\x923\b\x9d\xbd>,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x4c092, r0, 0x0)
fallocate(r0, 0x3, 0x1, 0xfffffffb)

8m56.10107021s ago: executing program 7 (id=4543):
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
renameat2(r0, &(0x7f0000000140)='./file1\x00', r0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)

8m55.966597703s ago: executing program 41 (id=4543):
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
renameat2(r0, &(0x7f0000000140)='./file1\x00', r0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)

8m25.682129303s ago: executing program 0 (id=4945):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100), 0x4)
recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000002)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000380)={{0x3, 0x0, 0xee01, 0x0, 0xee00, 0x120, 0x4}, 0x0, 0x0, 0x9, 0x5, 0x7, 0x1, 0x7ff, 0x9, 0x800, 0x200, r0, r0})
r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x4, 0x0, 0xb})
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405668, &(0x7f0000000140)={0x1, 0x1, 0x1, "0000087aba10fdfffffbe30b51751ac53051a30000000000020016ebffffff00", 0x34565559})
syz_clone(0x20304000, 0x0, 0x0, 0x0, 0x0, 0x0)

8m24.792220045s ago: executing program 0 (id=4950):
syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000280)='./file0\x00', 0x1810002, &(0x7f0000000240)=ANY=[], 0x5, 0x1d3, &(0x7f0000000d80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)

8m24.691461842s ago: executing program 0 (id=4951):
r0 = socket(0x2, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xffeff034}, {0x6, 0x1, 0x9, 0x6}]}, 0x10)
syz_emit_ethernet(0x7a, &(0x7f0000001bc0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv6={0x86dd, @gre_packet={0xa, 0x6, "0ede48", 0x44, 0x2f, 0x1, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x2}, {0x1}, {0x1}, {0x8, 0x88be, 0x1, {{0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x4f}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x0, {{0xb, 0x2, 0x6, 0x0, 0x1, 0x1, 0x2, 0xf}, 0x2, {0x8, 0x0, 0x3, 0x1e}}}}}}}}}, 0x0)

8m24.280070855s ago: executing program 0 (id=4953):
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x205)
move_mount(r1, 0x0, r0, 0x0, 0x46)

8m24.179977568s ago: executing program 0 (id=4954):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = syz_io_uring_setup(0x21f1, &(0x7f0000000300)={0x0, 0xf36e, 0x10100, 0x0, 0x200}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000580)=<r2=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<'], 0x38}}, 0x80)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x50, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1})
io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0)

8m23.86211681s ago: executing program 0 (id=4958):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r0, 0xe)
setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
bind$l2tp(r1, &(0x7f0000000080)={0x2, 0x0, @broadcast, 0x2}, 0x10)

8m23.668780243s ago: executing program 42 (id=4958):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r0, 0xe)
setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
bind$l2tp(r1, &(0x7f0000000080)={0x2, 0x0, @broadcast, 0x2}, 0x10)

8m0.698565347s ago: executing program 2 (id=5306):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x4, @empty, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000001440)=[@flowinfo={{0x14, 0x29, 0x43, 0x4}}], 0x18}, 0x24004800)

8m0.641102096s ago: executing program 2 (id=5309):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00')
lseek(r0, 0x5, 0x0)
lseek(r0, 0x0, 0x0)

8m0.640898159s ago: executing program 2 (id=5310):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f00000002c0)="ec", 0x1)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x810001, 0x4)

8m0.591816627s ago: executing program 2 (id=5315):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061116d000000000085000000a900000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)

8m0.541956173s ago: executing program 2 (id=5317):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x8, 0x28, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

7m59.660265704s ago: executing program 2 (id=5327):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001880)=ANY=[@ANYBLOB="38000000490001002abd7000fbdbdf250a", @ANYRES32], 0x38}}, 0x0)

7m44.65279719s ago: executing program 43 (id=5327):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001880)=ANY=[@ANYBLOB="38000000490001002abd7000fbdbdf250a", @ANYRES32], 0x38}}, 0x0)

839.986907ms ago: executing program 3 (id=12967):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000c88000/0x3000)=nil, 0x3000, 0x18)

839.801123ms ago: executing program 1 (id=12968):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0xa2e1, @mcast1, 0x800}, 0x20)

839.683148ms ago: executing program 3 (id=12969):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e22, @loopback}, 0x10)
sendmsg$inet(r1, 0x0, 0x40)
close(r1)
socket$kcm(0x10, 0x2, 0x4)

791.877584ms ago: executing program 1 (id=12970):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f0000000440)={&(0x7f0000000180)=@in6={0xa, 0x4e22, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80}, 0x80, 0x0, 0x0, &(0x7f0000000400)=[@timestamping={{0x14, 0x1, 0x25, 0xcc}}], 0x18}, 0x0)

791.681849ms ago: executing program 3 (id=12971):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nouid32}, {@minixdf}]}, 0x1, 0x504, &(0x7f0000001480)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
personality(0x500006)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0xf41ea000)

726.418724ms ago: executing program 1 (id=12972):
r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0, 0x1c}], 0x1}, 0x0)
setreuid(0x0, 0xee00)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[])

724.603856ms ago: executing program 3 (id=12973):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x0)

724.071076ms ago: executing program 1 (id=12974):
syz_emit_vhci(&(0x7f0000001600)=ANY=[@ANYBLOB="040100cd"], 0x10)

638.437189ms ago: executing program 1 (id=12975):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20048000)

637.697498ms ago: executing program 3 (id=12976):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
listen(r0, 0x2)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r2 = dup(r1)
epoll_create(0x1)
r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
open_tree(0xffffffffffffffff, 0x0, 0x89901)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x3)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
shutdown(r1, 0x1)

637.118166ms ago: executing program 1 (id=12977):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000300)={[{@grpid}, {@barrier_val={'barrier', 0x3d, 0x3ff}}, {@stripe={'stripe', 0x3d, 0x7}}, {@grpid}, {@data_ordered}, {@stripe={'stripe', 0x3d, 0xf62}}, {@max_batch_time={'max_batch_time', 0x3d, 0x200000}}, {@dax_always}]}, 0xd, 0x5f6, &(0x7f0000000c00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
getpgrp(0xffffffffffffffff)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0100000004000000040000000800000000000000", @ANYRES32, @ANYRES32, @ANYBLOB], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
unlink(&(0x7f0000000280)='./file1\x00')
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i'])
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x26, 0x10001, 0x12007646, 0x0, 0x0, 0x0, 0x3}}, 0x50)

567.662394ms ago: executing program 6 (id=12978):
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000003c0)={{0x0, 0x0, 0x7fffffffffffffff, 0xa6, 0x6, 0x96, 0xb3a, 0xfffffffa, 0x5, 0x7, 0xfffffffd, 0x1000, 0x0, 0xd, 0x8}})
r0 = openat$apparmor_thread_current(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$apparmor_current(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r'], 0xff)

470.464601ms ago: executing program 6 (id=12979):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x8205, &(0x7f0000001340)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x15}}, {@stripe}, {@grpid}, {@errors_remount}, {@data_err_ignore}, {@noblock_validity}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x13}}]}, 0x1, 0x60a, &(0x7f0000001c40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x27)

418.701712ms ago: executing program 6 (id=12980):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)={0x18, 0x2c, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0)

87.387551ms ago: executing program 6 (id=12981):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="210026bd7000fcdbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="0c002c80080000000200000010002d800a"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4040000)

87.122212ms ago: executing program 6 (id=12982):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)

84.106566ms ago: executing program 3 (id=12983):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x4e)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef", 0x6f}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg$qrtr(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000002c0)=""/8, 0x8}, {&(0x7f0000000700)=""/195, 0xc3}], 0x2, 0x0, 0x0, 0x10000}, 0x38, 0x10020)

0s ago: executing program 6 (id=12984):
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x200000000, 0x83}], 0x1, 0x1, 0x0, 0x0, 0x42})

kernel console output (not intermixed with test programs):

op3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  751.908550][T19093] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  751.942341][T26168] binder: 26167:26168 ioctl c018620c 2000000000c0 returned -22
[  752.144976][T26190] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7998'.
[  752.228330][ T1271] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  752.378421][ T1271] usb 4-1: Using ep0 maxpacket: 32
[  752.384937][ T1271] usb 4-1: config 1 has an invalid interface number: 44 but max is 0
[  752.388853][ T1271] usb 4-1: config 1 has no interface number 0
[  752.391302][ T1271] usb 4-1: config 1 interface 44 has no altsetting 0
[  752.395937][ T1271] usb 4-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c8.7b
[  752.402527][ T1271] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  752.405840][ T1271] usb 4-1: Product: syz
[  752.407863][ T1271] usb 4-1: Manufacturer: syz
[  752.409367][ T1271] usb 4-1: SerialNumber: syz
[  752.676225][ T1271] gspca_main: dtcs033-2.14.0 probing 0547:7303
[  752.681159][ T1271] usb 4-1: USB disconnect, device number 58
[  753.223744][T26222] loop3: detected capacity change from 0 to 512
[  753.244067][T26222] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.8012: casefold flag without casefold feature
[  753.262061][T26222] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.8012: couldn't read orphan inode 15 (err -117)
[  753.268007][T26222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  753.340818][T19093] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  753.445118][T26238] loop3: detected capacity change from 0 to 2048
[  753.454228][T26238] EXT4-fs warning (device loop3): ext4_multi_mount_protect:318: fsck is running on the filesystem
[  753.470734][T26238] EXT4-fs warning (device loop3): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132791, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4
[  753.846567][   T47] usb 4-1: new full-speed USB device number 59 using dummy_hcd
[  754.054139][   T47] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  754.059095][   T47] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  754.064114][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  754.071674][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  754.078085][   T47] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  754.085368][   T47] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  754.090121][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  754.094926][   T47] usb 4-1: Product: syz
[  754.098004][   T47] usb 4-1: Manufacturer: syz
[  754.100843][   T47] usb 4-1: SerialNumber: syz
[  754.107206][   T47] usb 4-1: config 0 descriptor??
[  754.315773][   T47] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  754.319584][   T47] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  754.527154][   T47] radio-si470x 4-1:0.0: software version 0, hardware version 0
[  754.529805][   T47] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  754.548115][   T47] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  754.747437][   T47] radio-si470x 4-1:0.0: submitting int urb failed (-90)
[  754.867280][T26290] afs: Unknown parameter 'A~|vN'
[  755.090228][T26292] overlayfs: failed to clone upperpath
[  755.350455][   T47] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71
[  755.354178][   T47] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22
[  755.361555][   T47] usb 4-1: USB disconnect, device number 59
[  755.799193][   T33] audit: type=1800 audit(2000000069.629:9204): pid=26316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.8055" name="nullb0" dev="tmpfs" ino=2197 res=0 errno=0
[  756.073127][T26326] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  756.546677][T14821] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  756.698511][T14821] usb 4-1: config 0 has an invalid interface number: 83 but max is 0
[  756.702036][T14821] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  756.708707][T14821] usb 4-1: config 0 has no interface number 0
[  756.711574][T14821] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61
[  756.715320][T14821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  756.720734][T14821] usb 4-1: config 0 descriptor??
[  756.725291][T14821] ttusbir 4-1:0.83: cannot find expected altsetting
[  756.927340][T14821] usb 4-1: USB disconnect, device number 60
[  757.746828][ T6950] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  757.896752][ T6950] usb 4-1: Using ep0 maxpacket: 32
[  757.916082][ T6950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  757.922606][ T6950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  757.930636][ T6950] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  757.934321][ T6950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  757.939718][ T6950] usb 4-1: config 0 descriptor??
[  758.353302][ T6950] nintendo 0003:057E:200E.0036: unknown main item tag 0x0
[  758.358294][ T6950] nintendo 0003:057E:200E.0036: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.3-1/input0
[  758.418708][ T6950] nintendo 0003:057E:200E.0036: Failed charging grip handshake
[  758.422262][ T6950] nintendo 0003:057E:200E.0036: Failed to initialize controller; ret=-110
[  758.429766][ T6950] nintendo 0003:057E:200E.0036: probe - fail = -110
[  758.432025][ T6950] nintendo 0003:057E:200E.0036: probe with driver nintendo failed with error -110
[  758.547596][T14821] usb 4-1: USB disconnect, device number 61
[  758.825484][   T33] audit: type=1326 audit(2000000072.649:9205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26431 comm="syz.1.8111" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  758.835383][   T33] audit: type=1326 audit(2000000072.649:9206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26431 comm="syz.1.8111" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  758.847574][   T33] audit: type=1326 audit(2000000072.649:9207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26431 comm="syz.1.8111" exe="/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  758.860176][   T33] audit: type=1326 audit(2000000072.649:9208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26431 comm="syz.1.8111" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  758.871055][   T33] audit: type=1326 audit(2000000072.659:9209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26431 comm="syz.1.8111" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  758.881140][   T33] audit: type=1326 audit(2000000072.659:9210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26431 comm="syz.1.8111" exe="/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  758.891602][   T33] audit: type=1326 audit(2000000072.659:9211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26431 comm="syz.1.8111" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  758.901951][   T33] audit: type=1326 audit(2000000072.659:9212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26431 comm="syz.1.8111" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  759.546563][T26477] CIFS: iocharset name too long
[  760.564744][T26508] loop3: detected capacity change from 0 to 32768
[  760.568061][T26508] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.8146 (26508)
[  760.573561][T26508] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  760.582686][T26508] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  760.585600][T26508] BTRFS info (device loop3): using free-space-tree
[  760.767725][T19093] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  761.658707][T26569] MPI: mpi too large (16392 bits)
[  761.756470][   T47] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  762.178926][   T47] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  762.183254][   T47] usb 4-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53
[  762.187381][   T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  762.192794][   T47] usb 4-1: config 0 descriptor??
[  762.197312][   T47] option 4-1:0.0: GSM modem (1-port) converter detected
[  762.400165][   T47] usb 4-1: USB disconnect, device number 62
[  762.402946][   T47] option 4-1:0.0: device disconnected
[  764.173214][T26666] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8213'.
[  766.672925][T26718] loop3: detected capacity change from 0 to 256
[  766.725012][T26718] FAT-fs (loop3): Directory bread(block 64) failed
[  766.743158][T26718] FAT-fs (loop3): Directory bread(block 65) failed
[  766.746518][T26718] FAT-fs (loop3): Directory bread(block 66) failed
[  766.749186][T26718] FAT-fs (loop3): Directory bread(block 67) failed
[  766.751975][T26718] FAT-fs (loop3): Directory bread(block 68) failed
[  766.754352][T26718] FAT-fs (loop3): Directory bread(block 69) failed
[  766.762259][T26718] FAT-fs (loop3): Directory bread(block 70) failed
[  766.764429][T26718] FAT-fs (loop3): Directory bread(block 71) failed
[  766.772359][T26718] FAT-fs (loop3): Directory bread(block 72) failed
[  766.774837][T26718] FAT-fs (loop3): Directory bread(block 73) failed
[  766.789080][   T33] audit: type=1800 audit(2000000080.619:9213): pid=26718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8233" name="file1" dev="loop3" ino=1048814 res=0 errno=0
[  767.864878][T26742] loop3: detected capacity change from 0 to 1024
[  767.925807][T26742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  767.936978][T26742] ext4 filesystem being mounted at /783/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  767.956108][T26742] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.8244: lblock 3 mapped to illegal pblock 3 (length 3)
[  768.165694][T26742] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  768.170195][T26742] EXT4-fs (loop3): This should not happen!! Data will be lost
[  768.170195][T26742] 
[  768.207088][T15483] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 8: comm kworker/u9:9: lblock 8 mapped to illegal pblock 8 (length 8)
[  768.220857][T15483] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  768.224740][T15483] EXT4-fs (loop3): This should not happen!! Data will be lost
[  768.224740][T15483] 
[  768.230165][T19093] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  769.854109][T26809] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  771.482078][T26854] loop3: detected capacity change from 0 to 8
[  771.485565][T26854] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  771.672742][T26856] loop3: detected capacity change from 0 to 32768
[  771.681602][T26856] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  771.695815][   T12] (kworker/u8:0,12,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2
[  771.715087][T19093] ocfs2: Unmounting device (7,3) on (node local)
[  772.850449][   T33] audit: type=1804 audit(2000000086.659:9214): pid=26885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.8302" name="bus" dev="tmpfs" ino=5517 res=1 errno=0
[  773.165601][T26899] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  773.496667][ T6950] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  773.667011][ T6950] usb 4-1: Using ep0 maxpacket: 8
[  773.678876][ T6950] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7
[  773.686046][ T6950] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  773.690573][ T6950] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  773.693431][ T6950] usb 4-1: Product: syz
[  773.694818][ T6950] usb 4-1: Manufacturer: syz
[  773.696631][ T6950] usb 4-1: SerialNumber: syz
[  774.003236][ T6950] usb 4-1: Handspring Visor / Palm OS: No valid connect info available
[  774.009312][ T6950] usb 4-1: Handspring Visor / Palm OS: port 79, is for unknown use
[  774.013915][ T6950] usb 4-1: Handspring Visor / Palm OS: port 0, is for Debugger use
[  774.017748][ T6950] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2
[  774.068244][T26924] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8319'.
[  774.131715][ T6950] usb 4-1: palm_os_3_probe - error -71 getting bytes available request
[  774.134918][ T6950] visor 4-1:1.0: Handspring Visor / Palm OS converter detected
[  774.141599][ T6950] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  774.148129][ T6950] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  774.152156][ T6950] usb 4-1: USB disconnect, device number 63
[  774.155707][ T6950] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  774.160379][ T6950] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  774.164891][ T6950] visor 4-1:1.0: device disconnected
[  774.585771][T26950] kernel read not supported for file / lhOb~h3JyxvL=QRnFGrqςû~QV7"qHd0%NnyD (pid: 26950 comm: syz.1.8332)
[  774.593278][   T33] audit: type=1800 audit(2000000088.419:9215): pid=26950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8332" name=BD16206C684F62EDF17EE501D168FEB51D9093339E8F064AC7C879FB78D0EEC3FC76F74CAA3D51E452FA6EC1B746477282A5F28F71F0CF82C3BB7E517F567F37B6B7227148E11197C964309DFA86F888B989FD254E6E79B503831CDD4402 dev="mqueue" ino=77592 res=0 errno=0
[  775.233713][T26964] loop3: detected capacity change from 0 to 40427
[  775.243006][T26964] F2FS-fs (loop3): invalid crc value
[  775.282080][T26964] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  775.295135][T26964] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  775.314796][T19093] syz-executor: attempt to access beyond end of device
[  775.314796][T19093] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  775.327004][T19093] CPU: 0 UID: 0 PID: 19093 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  775.327021][T19093] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  775.327026][T19093] Call Trace:
[  775.327030][T19093]  <TASK>
[  775.327034][T19093]  dump_stack_lvl+0x189/0x250
[  775.327052][T19093]  ? __pfx_dump_stack_lvl+0x10/0x10
[  775.327061][T19093]  ? __pfx_queue_work_on+0x10/0x10
[  775.327071][T19093]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  775.327081][T19093]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  775.327094][T19093]  f2fs_handle_critical_error+0x37c/0x540
[  775.327108][T19093]  f2fs_write_end_io+0x886/0xb60
[  775.327127][T19093]  __submit_merged_bio+0x27a/0x6a0
[  775.327138][T19093]  __submit_merged_write_cond+0x255/0x530
[  775.327150][T19093]  f2fs_write_data_pages+0x261d/0x3000
[  775.327174][T19093]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  775.327201][T19093]  ? __mod_zone_page_state+0xd7/0x140
[  775.327217][T19093]  ? folios_put_refs+0x560/0x640
[  775.327231][T19093]  ? __lock_acquire+0xab9/0xd20
[  775.327246][T19093]  ? do_raw_spin_lock+0x121/0x290
[  775.327260][T19093]  ? do_raw_spin_unlock+0x4d/0x240
[  775.327269][T19093]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  775.327279][T19093]  do_writepages+0x32e/0x550
[  775.327319][T19093]  ? do_raw_spin_unlock+0x4d/0x240
[  775.327331][T19093]  filemap_fdatawrite+0x199/0x240
[  775.327342][T19093]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  775.327371][T19093]  ? do_raw_spin_unlock+0x4d/0x240
[  775.327381][T19093]  f2fs_sync_dirty_inodes+0x31f/0x830
[  775.327399][T19093]  f2fs_write_checkpoint+0x95a/0x1df0
[  775.327419][T19093]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  775.327453][T19093]  ? kill_f2fs_super+0x298/0x6c0
[  775.327466][T19093]  kill_f2fs_super+0x2c3/0x6c0
[  775.327479][T19093]  ? __pfx_kill_f2fs_super+0x10/0x10
[  775.327488][T19093]  ? radix_tree_delete_item+0x2b6/0x400
[  775.327501][T19093]  ? shrinker_free+0x2ce/0x3e0
[  775.327510][T19093]  deactivate_locked_super+0xbc/0x130
[  775.327521][T19093]  cleanup_mnt+0x425/0x4c0
[  775.327530][T19093]  ? lockdep_hardirqs_on+0x9c/0x150
[  775.327540][T19093]  task_work_run+0x1d4/0x260
[  775.327552][T19093]  ? __pfx_task_work_run+0x10/0x10
[  775.327560][T19093]  ? __x64_sys_umount+0x122/0x160
[  775.327573][T19093]  ? exit_to_user_mode_loop+0x40/0x110
[  775.327587][T19093]  exit_to_user_mode_loop+0xec/0x110
[  775.327597][T19093]  do_syscall_64+0x2bd/0x3b0
[  775.327606][T19093]  ? lockdep_hardirqs_on+0x9c/0x150
[  775.327614][T19093]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  775.327622][T19093]  ? exc_page_fault+0x9f/0xf0
[  775.327631][T19093]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  775.327638][T19093] RIP: 0033:0x7f44ae58ff17
[  775.327647][T19093] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  775.327654][T19093] RSP: 002b:00007ffed8ad6f78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  775.327664][T19093] RAX: 0000000000000000 RBX: 00007f44ae611c05 RCX: 00007f44ae58ff17
[  775.327669][T19093] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed8ad7030
[  775.327674][T19093] RBP: 00007ffed8ad7030 R08: 0000000000000000 R09: 0000000000000000
[  775.327678][T19093] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffed8ad80c0
[  775.327683][T19093] R13: 00007f44ae611c05 R14: 00000000000bd414 R15: 00007ffed8ad8100
[  775.327695][T19093]  </TASK>
[  775.327699][T19093] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  775.516824][   T33] audit: type=1326 audit(2000000089.339:9216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26986 comm="syz.1.8349" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x0
[  776.089194][T26996] netlink: 392 bytes leftover after parsing attributes in process `syz.3.8351'.
[  777.169979][T27021] loop3: detected capacity change from 0 to 1764
[  777.501143][T27053] loop3: detected capacity change from 0 to 16
[  777.504883][T27053] erofs (device loop3): mounted with root inode @ nid 36.
[  777.583270][T27061] loop3: detected capacity change from 0 to 128
[  777.597879][T27061] affs: No valid root block on device loop3
[  777.683006][T27069] netlink: 'syz.6.8383': attribute type 10 has an invalid length.
[  777.699415][T27069] 8021q: adding VLAN 0 to HW filter on device batadv0
[  777.704190][T27069] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  777.709880][T27069] netlink: 'syz.6.8383': attribute type 10 has an invalid length.
[  777.713053][T27069] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8383'.
[  777.717990][T27069] batadv0: entered promiscuous mode
[  777.720224][T27069] batadv0: entered allmulticast mode
[  777.723844][T27069] bond0: (slave batadv0): Releasing backup interface
[  777.738358][T27069] bridge0: port 3(batadv0) entered blocking state
[  777.741351][T27069] bridge0: port 3(batadv0) entered disabled state
[  777.906842][ T6950] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  778.057079][ T6950] usb 4-1: Using ep0 maxpacket: 16
[  778.116043][ T6950] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35
[  778.124171][ T6950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  778.133092][ T6950] usb 4-1: Product: syz
[  778.134815][ T6950] usb 4-1: Manufacturer: syz
[  778.138997][ T6950] usb 4-1: SerialNumber: syz
[  778.172439][ T6950] usb 4-1: config 0 descriptor??
[  778.293522][   T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  778.297057][   T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  778.300608][ T6950] as10x_usb: device has been detected
[  778.302842][ T6950] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led))
[  778.325475][ T6950] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))...
[  778.372063][ T6950] as10x_usb: error during firmware upload part1
[  778.375517][ T6950] Registered device Sky IT Digital Key (green led)
[  778.453381][T27067] loop3: detected capacity change from 0 to 8
[  778.464914][ T6950] usb 4-1: USB disconnect, device number 64
[  778.483062][ T6950] Unregistered device Sky IT Digital Key (green led)
[  778.485068][ T6950] as10x_usb: device has been disconnected
[  779.212870][T27099] loop3: detected capacity change from 0 to 1024
[  779.217382][T27099] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  779.221333][T27099] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  779.225390][T27099] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  779.231431][T27099] EXT4-fs error (device loop3): ext4_get_journal_inode:5796: inode #5: comm syz.3.8396: unexpected bad inode w/o EXT4_IGET_BAD
[  779.238909][T27099] EXT4-fs (loop3): no journal found
[  779.241222][T27099] EXT4-fs (loop3): can't get journal size
[  779.247058][T27099] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  779.256747][T27099] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1314: inode #12: block 16: comm syz.3.8396: path /815/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0
[  779.284663][T19093] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  780.362261][   T33] audit: type=1326 audit(2000000094.189:9217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27128 comm="syz.3.8408" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ae58ebe9 code=0x7ffc0000
[  780.374047][   T33] audit: type=1326 audit(2000000094.199:9218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27128 comm="syz.3.8408" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ae58ebe9 code=0x7ffc0000
[  780.381516][   T33] audit: type=1326 audit(2000000094.199:9219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27128 comm="syz.3.8408" exe="/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f44ae58ebe9 code=0x7ffc0000
[  780.391300][   T33] audit: type=1326 audit(2000000094.199:9220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27128 comm="syz.3.8408" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ae58ebe9 code=0x7ffc0000
[  780.398360][   T33] audit: type=1326 audit(2000000094.199:9221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27128 comm="syz.3.8408" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ae58ebe9 code=0x7ffc0000
[  780.484817][T27135] loop3: detected capacity change from 0 to 128
[  780.492336][T27135] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  780.496743][T27135] ext4 filesystem being mounted at /821/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  780.503874][T27135] fscrypt (loop3, inode 12): Unsupported encryption flags (0xff)
[  780.518650][T19093] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  780.803867][T27150] loop3: detected capacity change from 0 to 256
[  780.830245][T27150] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  781.417046][   T12] batman_adv: batadv0: IGMP Querier appeared
[  781.597181][ T6950] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  781.776742][ T6950] usb 4-1: Using ep0 maxpacket: 8
[  781.787097][ T6950] usb 4-1: config 2 has an invalid interface number: 2 but max is 0
[  781.789763][ T6950] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  781.793247][ T6950] usb 4-1: config 2 has no interface number 0
[  781.813884][ T6950] usb 4-1: config 2 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  781.821473][ T6950] usb 4-1: New USB device found, idVendor=1bbb, idProduct=0203, bcdDevice=1c.35
[  781.824770][ T6950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  782.150957][   T47] usb 4-1: USB disconnect, device number 65
[  782.956907][   T47] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  783.106660][   T47] usb 4-1: Using ep0 maxpacket: 32
[  783.111193][   T47] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10
[  783.115712][   T47] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[  783.120149][   T47] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  783.131014][   T47] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  783.134782][   T47] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  783.138538][   T47] usb 4-1: Product: syz
[  783.140225][   T47] usb 4-1: Manufacturer: syz
[  783.142011][   T47] usb 4-1: SerialNumber: syz
[  783.152245][   T47] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input51
[  783.362131][ T5891] usb 4-1: USB disconnect, device number 66
[  783.374242][ T5891] appletouch 4-1:1.0: input: appletouch disconnected
[  783.524810][T27245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8461'.
[  784.576565][ T6953] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  784.726571][ T6953] usb 4-1: Using ep0 maxpacket: 8
[  784.738081][ T6953] usb 4-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  784.741418][ T6953] usb 4-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 1024
[  784.744683][ T6953] usb 4-1: config 1 interface 0 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  784.756701][ T6953] usb 4-1: config 1 interface 0 has no altsetting 0
[  784.762071][ T6953] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  784.765743][ T6953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  784.776488][ T6953] usb 4-1: Product: syz
[  784.778133][ T6953] usb 4-1: Manufacturer: syz
[  784.779892][ T6953] usb 4-1: SerialNumber: syz
[  784.795299][T27277] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  784.800284][T27277] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  785.024655][ T6953] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  785.032733][ T6953] usb 4-1: USB disconnect, device number 67
[  785.419988][T27312] overlayfs: failed to clone upperpath
[  786.566048][T27359] overlayfs: failed to resolve './file0': -2
[  786.840986][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810feef400: rx timeout, send abort
[  787.343902][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810feef400: abort rx timeout. Force session deactivation
[  787.453450][T27395] loop3: detected capacity change from 0 to 16
[  787.463295][T27395] erofs (device loop3): mounted with root inode @ nid 36.
[  787.580545][T27398] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8530'.
[  787.678967][T27402] loop3: detected capacity change from 0 to 256
[  787.688369][T27402] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  787.766305][T27406] loop3: detected capacity change from 0 to 512
[  787.773061][T27406] EXT4-fs: Ignoring removed orlov option
[  787.775450][T27406] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  787.780990][T27406] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  787.784202][T27406] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.8534: corrupted in-inode xattr: e_value size too large
[  787.790924][T27406] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.8534: couldn't read orphan inode 15 (err -117)
[  787.802289][T27406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  787.838401][T19093] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  788.822602][T27423] loop3: detected capacity change from 0 to 32768
[  788.841687][T27423] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  788.879601][T27423] XFS (loop3): Ending clean mount
[  788.898610][T27423] XFS (loop3): Quotacheck needed: Please wait.
[  788.956262][T27423] XFS (loop3): Quotacheck: Done.
[  788.984450][T19093] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  789.646714][   T47] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  789.848052][T27480] overlayfs: failed to clone upperpath
[  790.019761][   T47] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  790.022477][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  790.026435][   T47] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  790.029534][   T47] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  790.032093][   T47] usb 4-1: Manufacturer: syz
[  790.034917][   T47] usb 4-1: config 0 descriptor??
[  790.076621][   T47] rc_core: IR keymap rc-hauppauge not found
[  790.080515][   T47] Registered IR keymap rc-empty
[  790.082577][   T47] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  790.097448][   T47] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input52
[  790.244101][    C1] igorplugusb 4-1:0.0: Error: urb status = -32
[  790.245812][ T6950] usb 4-1: USB disconnect, device number 68
[  790.246252][    C1] igorplugusb 4-1:0.0: submit urb failed: -19
[  790.456532][T27495] cgroup: none used incorrectly
[  792.782583][T27552] loop3: detected capacity change from 0 to 256
[  792.797298][T27552] FAT-fs (loop3): Directory bread(block 64) failed
[  792.800471][T27552] FAT-fs (loop3): Directory bread(block 65) failed
[  792.802739][T27552] FAT-fs (loop3): Directory bread(block 66) failed
[  792.805481][T27552] FAT-fs (loop3): Directory bread(block 67) failed
[  792.809354][T27552] FAT-fs (loop3): Directory bread(block 68) failed
[  792.811643][T27552] FAT-fs (loop3): Directory bread(block 69) failed
[  792.813820][T27552] FAT-fs (loop3): Directory bread(block 70) failed
[  792.816076][T27552] FAT-fs (loop3): Directory bread(block 71) failed
[  792.823566][T27552] FAT-fs (loop3): Directory bread(block 72) failed
[  792.825713][T27552] FAT-fs (loop3): Directory bread(block 73) failed
[  793.917456][T27582] loop3: detected capacity change from 0 to 512
[  793.922759][T27582] EXT4-fs: Ignoring removed i_version option
[  794.032815][T27582] EXT4-fs (loop3): 1 orphan inode deleted
[  794.037118][T27582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  794.581683][T19093] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  795.028522][T27621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8615'.
[  796.326803][ T6950] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  796.480317][ T6950] usb 4-1: unable to get BOS descriptor or descriptor too short
[  796.484840][ T6950] usb 4-1: config 5 has an invalid interface number: 58 but max is 0
[  796.488901][ T6950] usb 4-1: config 5 has no interface number 0
[  796.491490][ T6950] usb 4-1: config 5 interface 58 has no altsetting 0
[  796.496045][ T6950] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= a.af
[  796.499785][ T6950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  796.502817][ T6950] usb 4-1: Product: syz
[  796.504427][ T6950] usb 4-1: Manufacturer: syz
[  796.506271][ T6950] usb 4-1: SerialNumber: syz
[  796.727563][ T6950] usb 4-1: USB disconnect, device number 69
[  796.798486][   T33] audit: type=1326 audit(2000000110.629:9222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27684 comm="syz.6.8643" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  796.812509][   T33] audit: type=1326 audit(2000000110.629:9223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27684 comm="syz.6.8643" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  796.825379][   T33] audit: type=1326 audit(2000000110.639:9224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27684 comm="syz.6.8643" exe="/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  796.835975][   T33] audit: type=1326 audit(2000000110.639:9225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27684 comm="syz.6.8643" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  796.843661][   T33] audit: type=1326 audit(2000000110.639:9226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27684 comm="syz.6.8643" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  800.074707][T27759] loop3: detected capacity change from 0 to 32768
[  800.079595][T27759] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.8675 (27759)
[  800.096709][T27759] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  800.100043][T27759] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  800.102829][T27759] BTRFS info (device loop3): using free-space-tree
[  800.230280][T27786] netlink: 'syz.1.8681': attribute type 9 has an invalid length.
[  800.687985][T19093] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  801.242658][T27822] loop3: detected capacity change from 0 to 1024
[  801.245927][T27822] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  801.260273][T27822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  801.268533][T27822] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.8698: missing EA_INODE flag
[  801.280099][T27822] EXT4-fs (loop3): Remounting filesystem read-only
[  801.294776][T19093] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  803.158958][T27928] loop3: detected capacity change from 0 to 16
[  803.162606][T27928] erofs (device loop3): mounted with root inode @ nid 36.
[  803.454049][T27940] loop3: detected capacity change from 0 to 64
[  803.518013][T27945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8753'.
[  804.542049][T27991] syz.3.8773 (27991): /proc/27990/oom_adj is deprecated, please use /proc/27990/oom_score_adj instead.
[  804.625449][T28001] loop3: detected capacity change from 0 to 8
[  804.753960][T28010] loop3: detected capacity change from 0 to 64
[  804.765674][T28010] syz.3.8783: attempt to access beyond end of device
[  804.765674][T28010] loop3: rw=2049, sector=268435468, nr_sectors = 2 limit=64
[  804.888827][T28016] loop3: detected capacity change from 0 to 256
[  804.897568][T28016] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x467a0815, utbl_chksum : 0xe619d30d)
[  804.902341][T28016] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  805.226692][ T6953] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  805.391236][ T6953] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  805.398277][ T6953] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  805.401383][ T6953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  805.403894][ T6953] usb 4-1: Product: syz
[  805.413820][ T6953] usb 4-1: Manufacturer: syz
[  805.415363][ T6953] usb 4-1: SerialNumber: syz
[  805.716994][   T33] audit: type=1326 audit(2000000120.539:9227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28081 comm="syz.6.8818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  805.746940][   T33] audit: type=1326 audit(2000000120.539:9228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28081 comm="syz.6.8818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  805.770262][   T33] audit: type=1326 audit(2000000120.539:9229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28081 comm="syz.6.8818" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  805.779826][   T33] audit: type=1326 audit(2000000120.539:9230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28081 comm="syz.6.8818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  805.788615][   T33] audit: type=1326 audit(2000000120.539:9231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28081 comm="syz.6.8818" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  805.797066][   T33] audit: type=1326 audit(2000000120.539:9232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28081 comm="syz.6.8818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  806.499886][T28107] overlayfs: failed to clone upperpath
[  806.512242][ T6953] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42
[  806.516437][ T6953] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[  806.519402][ T6953] cdc_ncm 4-1:1.0: setting rx_max = 2048
[  807.109306][ T6953] cdc_ncm 4-1:1.0: setting tx_max = 88
[  807.121410][ T6953] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  807.137768][ T6953] usb 4-1: USB disconnect, device number 70
[  807.141383][ T6953] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP)
[  807.838799][T28139] loop3: detected capacity change from 0 to 32768
[  807.841533][T28139] XFS: noikeep mount option is deprecated.
[  807.847997][T28139] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  807.858402][T28139] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  807.865690][T28139] XFS (loop3): Starting recovery (logdev: internal)
[  807.879879][T28139] XFS (loop3): Ending recovery (logdev: internal)
[  807.914203][T19093] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  808.112426][T28165] loop3: detected capacity change from 0 to 2048
[  808.121404][T28166] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  808.131285][T28165] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  808.146880][T28165] Remounting filesystem read-only
[  808.204346][T28170] loop3: detected capacity change from 0 to 256
[  808.244405][T28172] loop3: detected capacity change from 0 to 1024
[  808.247408][T28172] EXT4-fs: inline encryption not supported
[  808.251184][T28172] EXT4-fs (loop3): orphan cleanup on readonly fs
[  808.254677][T28172] EXT4-fs (loop3): 1 truncate cleaned up
[  808.268097][T28172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  808.292260][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  808.294461][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  808.300727][T19093] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  808.773437][T28201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8868'.
[  808.778095][T28201] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8868'.
[  808.838869][T28197] loop3: detected capacity change from 0 to 4096
[  809.952015][   T33] audit: type=1326 audit(2000000124.779:9233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28216 comm="syz.3.8876" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ae58ebe9 code=0x7fc00000
[  811.367051][T28297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8911'.
[  811.544859][T28307] loop3: detected capacity change from 0 to 256
[  811.575282][T28307] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  811.585392][T28307] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  812.036539][ T6953] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  812.198366][ T6953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  812.202941][ T6953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  812.209212][ T6953] usb 4-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00
[  812.212965][ T6953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  812.217541][ T6953] usb 4-1: config 0 descriptor??
[  812.629628][ T6953] kye 0003:0458:5019.0037: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  812.635577][ T6953] kye 0003:0458:5019.0037: hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.3-1/input0
[  812.641665][ T6953] kye 0003:0458:5019.0037: tablet-enabling feature report not found
[  812.644458][ T6953] kye 0003:0458:5019.0037: tablet enabling failed
[  812.835005][ T6953] usb 4-1: USB disconnect, device number 71
[  813.563917][T28376] loop3: detected capacity change from 0 to 32768
[  813.587060][T28376] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  813.616881][T28376] XFS (loop3): Ending clean mount
[  813.625361][T28376] XFS (loop3): Quotacheck needed: Please wait.
[  813.680537][T28376] XFS (loop3): Quotacheck: Done.
[  813.717610][T19093] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  813.842695][T28400] loop3: detected capacity change from 0 to 64
[  816.318784][T28461] loop3: detected capacity change from 0 to 32768
[  816.321584][T28461] XFS: noikeep mount option is deprecated.
[  816.327718][T28461] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  816.345720][T28461] XFS (loop3): Ending clean mount
[  816.351529][T28461] XFS (loop3): Quotacheck needed: Please wait.
[  816.412689][T28461] XFS (loop3): Quotacheck: Done.
[  816.456483][T19093] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  816.976778][   T24] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  817.142303][   T24] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  817.146311][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  817.150174][   T24] usb 4-1: Product: syz
[  817.152021][   T24] usb 4-1: Manufacturer: syz
[  817.154067][   T24] usb 4-1: SerialNumber: syz
[  817.160578][   T24] usb 4-1: config 0 descriptor??
[  817.382402][   T24] usb 4-1: f81604_read: reg: 105 failed: -EPROTO
[  817.385052][   T24] f81604 4-1:0.0: Setting termination of CH#0 failed: -EPROTO
[  817.391766][   T24] f81604 4-1:0.0: probe with driver f81604 failed with error -71
[  817.397912][   T24] usb 4-1: USB disconnect, device number 72
[  818.582979][T28559] dummy0: entered promiscuous mode
[  818.628994][T28559] dummy0: entered allmulticast mode
[  819.639586][T28592] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[  819.644074][T28591] netdevsim netdevsim6 netdevsim0: left promiscuous mode
[  820.355734][T28606] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  820.455984][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811da6c000: rx timeout, send abort
[  820.958936][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811da6c000: abort rx timeout. Force session deactivation
[  821.067525][T28639] loop3: detected capacity change from 0 to 1024
[  821.105257][T27728] hfsplus: b-tree write err: -5, ino 4
[  821.850310][T28653] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9072'.
[  821.897030][T28646] loop3: detected capacity change from 0 to 40427
[  821.901265][T28646] F2FS-fs (loop3): Image doesn't support compression
[  821.904080][T28646] F2FS-fs (loop3): build fault injection rate: 690
[  821.911515][T28646] F2FS-fs (loop3): invalid crc value
[  821.970417][T28646] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  821.981603][T28646] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  822.219515][T28668] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  822.545051][T28681] loop3: detected capacity change from 0 to 2048
[  822.550915][T28681] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  822.555171][T28681] NILFS (loop3): too large filesystem blocksize: 2 ^ 347668480 KiB
[  822.611529][T28685] loop3: detected capacity change from 0 to 512
[  822.615459][T28685] EXT4-fs: Ignoring removed orlov option
[  822.622684][T28685] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  822.632437][T28685] EXT4-fs (loop3): orphan cleanup on readonly fs
[  822.647004][T28685] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.9085: bg 0: block 248: padding at end of block bitmap is not set
[  822.678433][T28685] Quota error (device loop3): write_blk: dquota write failed
[  822.681731][T28685] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  822.685955][T28685] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.9085: Failed to acquire dquot type 1
[  822.698613][T28685] EXT4-fs (loop3): 1 truncate cleaned up
[  822.708845][T28685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  822.757869][T19093] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  822.964121][T28694] macvlan2: entered allmulticast mode
[  822.965989][T28694] veth1_vlan: entered allmulticast mode
[  823.137883][T28700] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[  823.140619][T28700] netdevsim netdevsim6 netdevsim0: entered allmulticast mode
[  823.198334][T28692] loop3: detected capacity change from 0 to 32768
[  823.224771][T28692] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  823.259925][T28692] XFS (loop3): Ending clean mount
[  823.274996][T28692] XFS (loop3): Quotacheck needed: Please wait.
[  823.365195][T28692] XFS (loop3): Quotacheck: Done.
[  823.407933][T28718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9096'.
[  823.497468][T19093] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  823.969794][T28730] loop3: detected capacity change from 0 to 32768
[  824.040166][T28736] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9106'.
[  824.317724][ T6950] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  825.080920][ T6950] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  825.092396][ T6950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  825.101849][ T6950] usb 4-1: Product: syz
[  825.104383][ T6950] usb 4-1: Manufacturer: syz
[  825.106946][ T6950] usb 4-1: SerialNumber: syz
[  825.115685][ T6950] usb 4-1: config 0 descriptor??
[  825.121035][ T6950] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  825.267958][T28763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9117'.
[  825.271061][T28763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9117'.
[  825.526660][ T6950] input: sonixb as /devices/platform/dummy_hcd.3/usb4/4-1/input/input53
[  825.732530][ T6953] usb 4-1: USB disconnect, device number 73
[  826.290389][T28796] input: syz0 as /devices/virtual/input/input54
[  826.340742][T28798] loop3: detected capacity change from 0 to 2048
[  826.343862][T28798] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  826.351856][T28799] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  826.391026][T28801] program syz.3.9134 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  827.697156][T28842] loop3: detected capacity change from 0 to 32768
[  827.701133][T28842] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.9151 (28842)
[  827.707618][T28842] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  827.711137][T28842] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  827.713821][T28842] BTRFS info (device loop3): using free-space-tree
[  827.753256][T28842] BTRFS info (device loop3): setting incompat feature flag for DEFAULT_SUBVOL (0x2)
[  827.795902][T19093] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  828.076270][T28865] overlayfs: failed to clone upperpath
[  828.085165][T28869] loop3: detected capacity change from 0 to 128
[  828.121408][T28869] ERROR: Domain '<kernel> /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /usr/sbin/sshd /usr/sbin/sshd /bin/sh /syz-executor /syz-executor /newroot/971/file2 /newroot/971/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  828.226142][T28877] loop3: detected capacity change from 0 to 512
[  828.270272][T28877] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.9161: casefold flag without casefold feature
[  828.274611][T28877] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.9161: couldn't read orphan inode 15 (err -117)
[  828.280688][T28877] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  828.299732][T19093] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  828.688751][   T33] audit: type=1326 audit(2000000143.519:9234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28891 comm="syz.1.9167" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  828.700373][   T33] audit: type=1326 audit(2000000143.519:9235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28891 comm="syz.1.9167" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  828.716614][   T33] audit: type=1326 audit(2000000143.529:9236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28891 comm="syz.1.9167" exe="/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  828.725405][   T33] audit: type=1326 audit(2000000143.529:9237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28891 comm="syz.1.9167" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  828.734345][   T33] audit: type=1326 audit(2000000143.529:9238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28891 comm="syz.1.9167" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  829.337476][T28931] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9185'.
[  831.801936][T28978] afs: Unknown parameter 'A~|vN'
[  832.186644][ T6953] usb 4-1: new full-speed USB device number 74 using dummy_hcd
[  832.341112][ T6953] usb 4-1: config 0 has an invalid interface number: 133 but max is 0
[  832.344269][ T6953] usb 4-1: config 0 has no interface number 0
[  832.353418][ T6953] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  832.357087][ T6953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  832.360158][ T6953] usb 4-1: Product: syz
[  832.361703][ T6953] usb 4-1: Manufacturer: syz
[  832.363269][ T6953] usb 4-1: SerialNumber: syz
[  832.369128][ T6953] usb 4-1: config 0 descriptor??
[  832.430078][T28994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9213'.
[  832.704756][T29015] 9pnet_fd: Insufficient options for proto=fd
[  832.991315][ T6953] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected
[  832.995824][ T6953] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81
[  833.000007][ T6953] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1
[  833.003069][ T6953] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2
[  833.009498][ T6953] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  833.233905][ T6953] usb 4-1: USB disconnect, device number 74
[  833.239452][ T6953] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  833.244003][ T6953] keyspan 4-1:0.133: device disconnected
[  833.845851][T29052] overlayfs: failed to clone upperpath
[  833.902957][T29056] loop3: detected capacity change from 0 to 1024
[  834.276836][ T5313] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  834.426680][ T5313] usb 4-1: Using ep0 maxpacket: 32
[  834.442520][ T5313] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  834.446224][ T5313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  834.455292][ T5313] usb 4-1: config 0 descriptor??
[  834.722590][ T5313] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  834.727308][ T5313] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  834.730824][ T5313] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  834.733141][ T5313] usb 4-1: media controller created
[  834.745668][ T5313] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  834.964993][ T5313] az6027: usb out operation failed. (-71)
[  834.968231][ T5313] az6027: usb out operation failed. (-71)
[  834.970573][ T5313] stb0899_attach: Driver disabled by Kconfig
[  834.973084][ T5313] az6027: no front-end attached
[  834.973084][ T5313] 
[  834.979962][ T5313] az6027: usb out operation failed. (-71)
[  834.982203][ T5313] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  834.986310][ T5313] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input55
[  834.991540][ T5313] dvb-usb: schedule remote query interval to 400 msecs.
[  834.993770][ T5313] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  834.999621][ T5313] usb 4-1: USB disconnect, device number 75
[  835.031743][ T5313] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  835.039924][T29084] overlayfs: failed to clone upperpath
[  835.649108][T29112] bridge0: port 2(bridge_slave_1) entered disabled state
[  836.393492][T29129] loop3: detected capacity change from 0 to 32768
[  836.416890][T15507] read_mapping_page failed!
[  836.419184][T15507] ERROR: (device loop3): txCommit: 
[  836.419184][T15507] 
[  836.426312][T15507] ERROR: (device loop3): remounting filesystem as read-only
[  836.429163][T15507] jfs_write_inode: jfs_commit_inode failed!
[  837.369958][T29154] /dev/nullb0: Can't lookup blockdev
[  838.036709][T29170] loop3: detected capacity change from 0 to 8
[  838.043900][T29170] SQUASHFS error: Unable to read inode 0xe3
[  838.246753][T29179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9298'.
[  838.977000][T29203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9310'.
[  839.085058][T29207] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  839.122896][T29201] loop3: detected capacity change from 0 to 32768
[  839.127193][T29201] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.9309 (29201)
[  839.135002][T29201] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  839.140222][T29201] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  839.144273][T29201] BTRFS info (device loop3): using free-space-tree
[  839.289233][   T33] audit: type=1804 audit(2000000154.119:9239): pid=29201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.9309" name="/newroot/1002/file0/file1" dev="loop3" ino=260 res=1 errno=0
[  839.360876][T29201] btrfs: Unknown parameter '01777777777777777777777	Z* m.Dc8'@C9G9?9S{1Jլ5æԌqqY糔'
[  839.461729][T19093] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  839.989076][T29268] random: crng reseeded on system resumption
[  840.461492][   T33] audit: type=1326 audit(2000000155.279:9240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29269 comm="syz.6.9332" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ad8ebe9 code=0x7fc00000
[  840.915131][   T33] audit: type=1326 audit(2000000155.739:9241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29269 comm="syz.6.9332" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7c0ad8ebe9 code=0x7fc00000
[  841.155370][T29282] loop3: detected capacity change from 0 to 32768
[  841.180605][T29282] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  841.201499][T29282] XFS (loop3): Ending clean mount
[  841.219100][T19093] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  841.308359][T29312] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9348'.
[  841.398524][   T33] audit: type=1800 audit(2000000156.229:9242): pid=29316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.9349" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0
[  841.419617][T29318] loop3: detected capacity change from 0 to 512
[  841.438263][T29318] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  841.447272][T29318] ext4 filesystem being mounted at /1006/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  841.460893][T29318] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  841.508396][T19093] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  841.993953][T29333] loop3: detected capacity change from 0 to 131072
[  841.999304][T29333] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  842.001986][T29333] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  842.005947][T29333] F2FS-fs (loop3): invalid crc value
[  842.040439][T29333] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  842.045136][T29333] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  842.048166][T29333] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  842.380921][T29347] loop3: detected capacity change from 0 to 4096
[  842.384740][T29347] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  842.404703][T29347] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  842.411399][T29347] ntfs3(loop3): ino=1a, mi_enum_attr
[  842.413996][T29347] ntfs3(loop3): Failed to initialize $Extend/$ObjId.
[  842.492407][T29355] overlayfs: failed to clone upperpath
[  842.501043][T29357] loop3: detected capacity change from 0 to 16
[  842.505117][T29357] erofs (device loop3): mounted with root inode @ nid 36.
[  842.523870][T29357] overlayfs: failed to get redirect (-117)
[  842.843970][T29365] netlink: 830 bytes leftover after parsing attributes in process `syz.1.9367'.
[  842.876650][   T47] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  843.039139][   T47] usb 4-1: config 3 has an invalid interface number: 56 but max is 0
[  843.042104][   T47] usb 4-1: config 3 has no interface number 0
[  843.044199][   T47] usb 4-1: config 3 interface 56 has no altsetting 0
[  843.048765][   T47] usb 4-1: New USB device found, idVendor=03f0, idProduct=2101, bcdDevice=80.cc
[  843.051779][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  843.054364][   T47] usb 4-1: Product: syz
[  843.055673][   T47] usb 4-1: Manufacturer: syz
[  843.057292][   T47] usb 4-1: SerialNumber: syz
[  843.267252][   T47] safe_serial 4-1:3.56: safe_serial converter detected
[  843.269611][   T47] safe_serial 4-1:3.56: probe with driver safe_serial failed with error -22
[  843.274573][   T47] usb 4-1: USB disconnect, device number 76
[  843.630460][   T33] audit: type=1326 audit(2000000158.459:9243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29380 comm="syz.1.9375" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c2bf2add9 code=0x7ffc0000
[  843.640953][   T33] audit: type=1326 audit(2000000158.459:9244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29380 comm="syz.1.9375" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  843.666523][   T33] audit: type=1326 audit(2000000158.459:9245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29380 comm="syz.1.9375" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  843.676044][   T33] audit: type=1326 audit(2000000158.469:9246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29380 comm="syz.1.9375" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c2bf2add9 code=0x7ffc0000
[  843.689580][   T33] audit: type=1326 audit(2000000158.469:9247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29380 comm="syz.1.9375" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  843.698741][   T33] audit: type=1326 audit(2000000158.469:9248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29380 comm="syz.1.9375" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c2bf2add9 code=0x7ffc0000
[  844.050698][T29400] loop3: detected capacity change from 0 to 4096
[  844.065867][T29400] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  844.086944][T29400] ntfs3(loop3): Failed to load $Secure (-22).
[  844.089809][T29400] ntfs3(loop3): Failed to initialize $Secure (-22).
[  844.223593][T29406] loop3: detected capacity change from 0 to 2048
[  844.245296][T29406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  844.268336][T29406] ext4 filesystem being mounted at /1020/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  844.315390][T19093] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  844.874576][T29440] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9403'.
[  844.878736][T29440] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9403'.
[  845.680101][T29480] usb usb1: usbfs: process 29480 (syz.3.9421) did not claim interface 0 before use
[  846.361529][T29505] input: syz0 as /devices/virtual/input/input56
[  848.230325][T29663] loop3: detected capacity change from 0 to 256
[  848.232884][T29663] exfat: Deprecated parameter 'namecase'
[  848.238187][T29663] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  848.296966][T29665] loop3: detected capacity change from 0 to 128
[  848.321457][T29665] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  848.347190][T29665] ext4 filesystem being mounted at /1033/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  848.404422][T19093] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  848.706658][   T47] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  848.856646][   T47] usb 4-1: Using ep0 maxpacket: 16
[  848.860645][   T47] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  848.865097][   T47] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  848.869645][   T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  848.875633][   T47] usb 4-1: config 0 descriptor??
[  848.880781][   T47] pxrc 4-1:0.0: Could not find endpoint
[  849.088336][   T47] usb 4-1: USB disconnect, device number 77
[  850.712168][   T33] kauditd_printk_skb: 94 callbacks suppressed
[  850.712183][   T33] audit: type=1326 audit(2000000165.539:9343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29771 comm="syz.6.9502" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  850.724621][   T33] audit: type=1326 audit(2000000165.539:9344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29771 comm="syz.6.9502" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  850.731827][   T33] audit: type=1326 audit(2000000165.559:9345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29771 comm="syz.6.9502" exe="/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  850.739755][   T33] audit: type=1326 audit(2000000165.569:9346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29771 comm="syz.6.9502" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  850.747569][   T33] audit: type=1326 audit(2000000165.569:9347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29771 comm="syz.6.9502" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  852.161189][T29807] loop3: detected capacity change from 0 to 8
[  852.163805][T29807] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  852.174031][T29807] cramfs: Error -3 while decompressing!
[  852.176128][T29807] cramfs: ffffffff99be75b8(16)->ffff88811c3f3000(4096)
[  852.181450][T29807] cramfs: Error -3 while decompressing!
[  852.183882][T29807] cramfs: ffffffff99be75b8(16)->ffff88811c3f3000(4096)
[  852.188780][   T33] audit: type=1800 audit(2000000167.019:9348): pid=29807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9515" name="file0" dev="loop3" ino=244 res=0 errno=0
[  852.444308][   T33] audit: type=1326 audit(2000000167.269:9349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29811 comm="syz.3.9517" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ae58ebe9 code=0x7ffc0000
[  852.452868][   T33] audit: type=1326 audit(2000000167.269:9350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29811 comm="syz.3.9517" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ae58ebe9 code=0x7ffc0000
[  852.464675][   T33] audit: type=1326 audit(2000000167.269:9351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29811 comm="syz.3.9517" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f44ae58ebe9 code=0x7ffc0000
[  852.474471][   T33] audit: type=1326 audit(2000000167.269:9352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29811 comm="syz.3.9517" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ae58ebe9 code=0x7ffc0000
[  852.565246][T29820] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9521'.
[  853.902825][T29864] vivid-002: disconnect
[  854.658485][T29862] vivid-002: reconnect
[  855.413909][T29890] loop3: detected capacity change from 0 to 512
[  855.426169][T29890] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.9553: casefold flag without casefold feature
[  855.436333][T29890] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.9553: couldn't read orphan inode 15 (err -117)
[  855.468416][T29890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  855.477154][T29896] netlink: 'syz.6.9555': attribute type 8 has an invalid length.
[  855.612925][T19093] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  855.860497][T29940] loop3: detected capacity change from 0 to 1024
[  855.869189][T29940] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  855.877376][T29940] EXT4-fs error (device loop3): __ext4_remount:6736: comm syz.3.9576: Abort forced by user
[  855.885929][T29940] EXT4-fs (loop3): Remounting filesystem read-only
[  855.889241][T29940] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  855.921774][T19093] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  856.112531][T29949] rtc_cmos 00:04: Alarms can be up to one day in the future
[  856.220685][ T6950] rtc_cmos 00:04: Alarms can be up to one day in the future
[  856.230655][ T6950] rtc_cmos 00:04: Alarms can be up to one day in the future
[  856.234823][ T6950] rtc_cmos 00:04: Alarms can be up to one day in the future
[  856.245412][ T6950] rtc_cmos 00:04: Alarms can be up to one day in the future
[  856.249654][ T6950] rtc rtc0: __rtc_set_alarm: err=-22
[  856.288087][T29962] loop3: detected capacity change from 0 to 512
[  856.291142][T29962] EXT4-fs: Ignoring removed orlov option
[  856.295776][T29962] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.9586: Attempting to read directory block (0) that is past i_size (256)
[  856.316222][T29962] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  856.323880][T29962] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  856.356085][T19093] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  856.445511][T29966] loop3: detected capacity change from 0 to 4096
[  856.450562][T29966] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  856.559908][T29968] loop3: detected capacity change from 0 to 512
[  856.562491][T29968] EXT4-fs: Ignoring removed orlov option
[  856.565025][T29968] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  856.571093][T29968] EXT4-fs (loop3): orphan cleanup on readonly fs
[  856.574909][T29968] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.9588: bg 0: block 248: padding at end of block bitmap is not set
[  856.580853][T29968] __quota_error: 2 callbacks suppressed
[  856.580863][T29968] Quota error (device loop3): write_blk: dquota write failed
[  856.585234][T29968] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  856.590180][T29968] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.9588: Failed to acquire dquot type 1
[  856.595040][T29968] EXT4-fs (loop3): 1 truncate cleaned up
[  856.605274][T29968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  856.613140][T29968] EXT4-fs: Ignoring removed orlov option
[  856.615736][T29968] EXT4-fs: can't change dax mount option while remounting
[  856.634930][T19093] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  856.690676][T29971] overlayfs: metacopy with no lower data found - abort lookup (/file1)
[  856.704892][   T33] audit: type=1326 audit(2000000171.529:9355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29974 comm="syz.1.9591" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  856.713567][   T33] audit: type=1326 audit(2000000171.529:9356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29974 comm="syz.1.9591" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  856.730355][   T33] audit: type=1326 audit(2000000171.539:9357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29974 comm="syz.1.9591" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  856.738170][   T33] audit: type=1326 audit(2000000171.539:9358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29974 comm="syz.1.9591" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  856.745036][   T33] audit: type=1326 audit(2000000171.539:9359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29974 comm="syz.1.9591" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  856.753570][   T33] audit: type=1326 audit(2000000171.549:9360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29974 comm="syz.1.9591" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  856.763469][   T33] audit: type=1326 audit(2000000171.549:9361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29974 comm="syz.1.9591" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  856.772690][   T33] audit: type=1326 audit(2000000171.549:9362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29974 comm="syz.1.9591" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  858.280752][T30026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9614'.
[  858.446766][T15443] wlan1: Trigger new scan to find an IBSS to join
[  858.468445][T30039] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  858.931704][T30058] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9627'.
[  859.636637][   T47] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[  859.796765][   T47] usb 4-1: Using ep0 maxpacket: 16
[  859.801055][   T47] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  859.804957][   T47] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  859.810493][   T47] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  859.814072][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  859.817390][   T47] usb 4-1: Product: syz
[  859.819035][   T47] usb 4-1: Manufacturer: syz
[  859.820895][   T47] usb 4-1: SerialNumber: syz
[  860.056777][   T47] usb 4-1: cannot find UAC_HEADER
[  860.081089][   T47] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  860.092583][   T47] usb 4-1: USB disconnect, device number 78
[  860.791132][T30124] loop3: detected capacity change from 0 to 256
[  860.798614][T30124] exfat: Deprecated parameter 'utf8'
[  860.800451][T30124] exfat: Deprecated parameter 'namecase'
[  860.802262][T30124] exfat: Deprecated parameter 'utf8'
[  860.804046][T30124] exfat: Deprecated parameter 'utf8'
[  860.809176][T30124] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e8072e, utbl_chksum : 0xe619d30d)
[  860.848332][T30128] loop3: detected capacity change from 0 to 1024
[  860.858724][T30128] hfsplus: bad catalog entry type
[  860.874600][T29564] hfsplus: b-tree write err: -5, ino 4
[  861.486733][T29552] wlan1: Trigger new scan to find an IBSS to join
[  862.675105][T30204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9692'.
[  862.679562][T30204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9692'.
[  862.826028][T30211] vlan2: entered promiscuous mode
[  862.828891][T30211] macvtap0: entered promiscuous mode
[  864.294232][T30224] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9700'.
[  864.450157][T29648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  865.232828][T30244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9710'.
[  865.235794][T30244] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9710'.
[  865.334883][T30250] cgroup: noprefix used incorrectly
[  865.651424][   T33] kauditd_printk_skb: 10 callbacks suppressed
[  865.651443][   T33] audit: type=1326 audit(2000000180.479:9373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30268 comm="syz.6.9722" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  865.670819][   T33] audit: type=1326 audit(2000000180.479:9374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30268 comm="syz.6.9722" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  865.682108][   T33] audit: type=1326 audit(2000000180.479:9375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30268 comm="syz.6.9722" exe="/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  865.689726][   T33] audit: type=1326 audit(2000000180.479:9376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30268 comm="syz.6.9722" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  865.698825][   T33] audit: type=1326 audit(2000000180.479:9377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30268 comm="syz.6.9722" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  866.408230][T30290] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  866.572086][   T33] audit: type=1326 audit(2000000181.399:9378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30297 comm="syz.1.9735" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  866.596475][   T33] audit: type=1326 audit(2000000181.399:9379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30297 comm="syz.1.9735" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  866.605610][   T33] audit: type=1326 audit(2000000181.409:9380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30297 comm="syz.1.9735" exe="/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  866.625095][   T33] audit: type=1326 audit(2000000181.409:9381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30297 comm="syz.1.9735" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  866.637644][   T33] audit: type=1326 audit(2000000181.409:9382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30297 comm="syz.1.9735" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  866.715676][T30309] 9pnet_fd: Insufficient options for proto=fd
[  869.713469][T30403] 9pnet_fd: Insufficient options for proto=fd
[  869.732428][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  869.734800][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  870.921149][   T33] audit: type=1326 audit(2000000185.749:9383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30447 comm="syz.6.9800" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  870.930296][   T33] audit: type=1326 audit(2000000185.749:9384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30447 comm="syz.6.9800" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  870.940196][   T33] audit: type=1326 audit(2000000185.749:9385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30447 comm="syz.6.9800" exe="/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  870.956633][   T33] audit: type=1326 audit(2000000185.749:9386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30447 comm="syz.6.9800" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  871.120356][   T33] audit: type=1326 audit(2000000185.949:9387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30463 comm="syz.3.9807" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ae58ebe9 code=0x7ffc0000
[  871.129159][   T33] audit: type=1326 audit(2000000185.959:9388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30463 comm="syz.3.9807" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ae58ebe9 code=0x7ffc0000
[  871.139944][   T33] audit: type=1326 audit(2000000185.969:9389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30463 comm="syz.3.9807" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44ae58ebe9 code=0x7ffc0000
[  871.149434][   T33] audit: type=1326 audit(2000000185.969:9390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30463 comm="syz.3.9807" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ae58ebe9 code=0x7ffc0000
[  871.158153][   T33] audit: type=1326 audit(2000000185.969:9391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30463 comm="syz.3.9807" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ae58ebe9 code=0x7ffc0000
[  871.165532][   T33] audit: type=1326 audit(2000000185.979:9392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30463 comm="syz.3.9807" exe="/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f44ae58ebe9 code=0x7ffc0000
[  872.168746][T30515] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9828'.
[  872.171738][T30515] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9828'.
[  872.178244][T30515] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9828'.
[  872.181279][T30515] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9828'.
[  876.993427][ T5236] Bluetooth: hci2: unexpected event 0x3e length: 283 > 260
[  876.993457][ T5236] Bluetooth: hci2: unexpected subevent 0x0d length: 282 > 260
[  877.000592][ T5236] Bluetooth: hci2: adv larger than maximum supported
[  877.000674][ T5236] Bluetooth: hci2: adv larger than maximum supported
[  878.519514][ T5236] Bluetooth: hci2: unexpected event for opcode 0x0401
[  879.412073][T30777] netlink: 'syz.1.9949': attribute type 2 has an invalid length.
[  879.432557][T30777] : entered promiscuous mode
[  879.558953][T30787] kAFS: Can only specify source 'none' with -o dyn
[  880.029944][ T5236] Bluetooth: hci2: unexpected event for opcode 0x2029
[  880.162870][T30809] netlink: 'syz.6.9963': attribute type 1 has an invalid length.
[  880.168400][T30809] netlink: 'syz.6.9963': attribute type 2 has an invalid length.
[  880.171487][T30809] netlink: 52 bytes leftover after parsing attributes in process `syz.6.9963'.
[  883.341022][T30929] /dev/nullb0: Can't lookup blockdev
[  884.050029][ T5236] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  884.053716][ T5236] Bluetooth: hci2: Injecting HCI hardware error event
[  884.061486][ T5236] Bluetooth: hci2: hardware error 0x00
[  884.697921][   T33] kauditd_printk_skb: 5 callbacks suppressed
[  884.697933][   T33] audit: type=1326 audit(2000000199.529:9398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30967 comm="syz.1.10032" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x0
[  885.111570][T30989] overlayfs: failed to clone upperpath
[  886.131406][ T5236] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  887.271666][T31070] netlink: 'syz.3.10080': attribute type 25 has an invalid length.
[  887.274246][T31070] netlink: 'syz.3.10080': attribute type 7 has an invalid length.
[  887.458089][   T33] audit: type=1326 audit(2000000202.279:9399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31082 comm="syz.3.10086" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44ae58ebe9 code=0x0
[  889.944059][T31153] netlink: 'syz.3.10117': attribute type 1 has an invalid length.
[  889.977853][T31153] 8021q: adding VLAN 0 to HW filter on device bond3
[  890.000687][T31153] vlan3: entered allmulticast mode
[  890.003001][T31153] veth1: entered allmulticast mode
[  890.008702][T31153] bond3: (slave vlan3): making interface the new active one
[  890.013038][T31153] bond3: (slave vlan3): Enslaving as an active interface with an up link
[  893.379060][ T5891] IPVS: starting estimator thread 0...
[  893.379589][T31262] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  893.467281][T31264] IPVS: using max 37 ests per chain, 88800 per kthread
[  893.531364][T31270] netlink: 17 bytes leftover after parsing attributes in process `syz.6.10168'.
[  893.535114][T31270] netlink: zone id is out of range
[  893.554697][T31270] netlink: zone id is out of range
[  893.558297][T31270] netlink: zone id is out of range
[  893.566648][T31270] netlink: zone id is out of range
[  893.568774][T31270] netlink: zone id is out of range
[  893.570500][T31270] netlink: zone id is out of range
[  893.572260][T31270] netlink: zone id is out of range
[  893.574065][T31270] netlink: zone id is out of range
[  893.575732][T31270] netlink: zone id is out of range
[  893.698447][T31276] netlink: 104 bytes leftover after parsing attributes in process `syz.6.10171'.
[  894.853832][T31314] 9pnet_fd: Insufficient options for proto=fd
[  896.618131][T29648] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  897.243976][T31381] netlink: 'syz.1.10216': attribute type 2 has an invalid length.
[  899.409782][T31467] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10256'.
[  900.224465][T31502] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10272'.
[  901.387209][T31556] 9pnet_fd: Insufficient options for proto=fd
[  901.614345][T31576] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  901.621111][   T33] audit: type=1326 audit(2000000216.449:9400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31564 comm="syz.1.10301" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x0
[  902.253597][T31588] netlink: 420 bytes leftover after parsing attributes in process `syz.3.10310'.
[  902.258285][T31588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10310'.
[  902.262261][T31588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10310'.
[  902.266240][T31588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10310'.
[  903.177961][T31628] netlink: 3176 bytes leftover after parsing attributes in process `syz.1.10329'.
[  903.523541][T31656] netlink: 'syz.6.10342': attribute type 10 has an invalid length.
[  903.526476][T31656] netdevsim netdevsim6 netdevsim0: left promiscuous mode
[  903.528893][T31656] netdevsim netdevsim6 netdevsim0: left allmulticast mode
[  903.533382][T31656] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  906.325412][T31793] netlink: 'syz.6.10409': attribute type 5 has an invalid length.
[  906.357851][T31793] batman_adv: batadv0: Adding interface: vxlan0
[  906.360187][T31793] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  906.369067][T31793] batman_adv: batadv0: Interface activated: vxlan0
[  906.402150][T31582] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  906.405444][T31582] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  906.409773][T31582] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  906.412699][T31582] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  908.192144][T31833] overlayfs: failed to clone lowerpath
[  908.268654][T31834] overlayfs: failed to clone upperpath
[  908.384473][T31837] netlink: 'syz.3.10425': attribute type 1 has an invalid length.
[  911.801819][T31958] overlayfs: failed to clone lowerpath
[  914.002447][T32068] netlink: 27 bytes leftover after parsing attributes in process `syz.3.10531'.
[  914.824014][T32092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10542'.
[  915.296835][T32125] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10559'.
[  917.398101][T32290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10633'.
[  919.189887][T32339] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10661'.
[  919.709433][T32355] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10669'.
[  922.195188][T32471] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.10723'.
[  923.072379][T32506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10738'.
[  923.131995][T32507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10738'.
[  925.700084][T32564] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  928.606898][T15486] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  928.752409][T32661] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10804'.
[  929.337881][T32703] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10825'.
[  929.432581][T32709] veth0_to_team: entered promiscuous mode
[  929.435007][T32709] veth0_to_team: entered allmulticast mode
[  929.491551][T32712] bridge0: port 3(veth0_to_bridge) entered blocking state
[  929.494456][T32712] bridge0: port 3(veth0_to_bridge) entered disabled state
[  929.497379][T32712] veth0_to_bridge: entered allmulticast mode
[  929.501072][T32712] veth0_to_bridge: entered promiscuous mode
[  929.503771][T32712] bridge0: port 3(veth0_to_bridge) entered blocking state
[  929.506750][T32712] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  930.781794][T32767] netlink: 'syz.6.10852': attribute type 1 has an invalid length.
[  931.173758][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  931.175822][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  932.389993][  T366] 9pnet_fd: Insufficient options for proto=fd
[  932.493239][  T373] netlink: 'syz.6.10886': attribute type 1 has an invalid length.
[  932.500170][  T373] net_ratelimit: 77 callbacks suppressed
[  932.500187][  T373] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  932.564817][  T379] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10889'.
[  932.572516][  T379] netlink: 32 bytes leftover after parsing attributes in process `syz.6.10889'.
[  932.576201][  T379] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10889'.
[  932.581184][  T379] netlink: 32 bytes leftover after parsing attributes in process `syz.6.10889'.
[  932.597833][  T379] netlink: 'syz.6.10889': attribute type 10 has an invalid length.
[  932.600513][  T379] syz_tun: entered promiscuous mode
[  932.608728][  T379] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  932.807441][  T391] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  932.812877][  T391] bridge0: port 3(veth0_to_bridge) entered disabled state
[  932.816049][  T391] bridge0: port 2(bridge_slave_1) entered disabled state
[  932.819241][  T391] bridge0: port 1(bridge_slave_0) entered disabled state
[  933.181331][  T409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10904'.
[  933.941447][  T453] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10924'.
[  934.753018][  T504] ref_ctr_offset mismatch. inode: 0x278a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4
[  936.827890][  T568] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10977'.
[  936.831965][  T568] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10977'.
[  937.111714][   T33] audit: type=1326 audit(2000000251.939:9401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=581 comm="syz.3.10983" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ae58ebe9 code=0x7ffc0000
[  937.125999][   T33] audit: type=1326 audit(2000000251.939:9402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=581 comm="syz.3.10983" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ae58ebe9 code=0x7ffc0000
[  937.139709][   T33] audit: type=1326 audit(2000000251.939:9403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=581 comm="syz.3.10983" exe="/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f44ae58ebe9 code=0x7ffc0000
[  937.149588][   T33] audit: type=1326 audit(2000000251.939:9404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=581 comm="syz.3.10983" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ae58ebe9 code=0x7ffc0000
[  937.161121][   T33] audit: type=1326 audit(2000000251.939:9405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=581 comm="syz.3.10983" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ae58ebe9 code=0x7ffc0000
[  937.171257][   T33] audit: type=1326 audit(2000000251.939:9406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=581 comm="syz.3.10983" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f44ae58ebe9 code=0x7ffc0000
[  937.183715][   T33] audit: type=1326 audit(2000000251.939:9407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=581 comm="syz.3.10983" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ae58ebe9 code=0x7ffc0000
[  937.194768][   T33] audit: type=1326 audit(2000000251.939:9408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=581 comm="syz.3.10983" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ae58ebe9 code=0x7ffc0000
[  937.207191][   T33] audit: type=1326 audit(2000000251.939:9409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=581 comm="syz.3.10983" exe="/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f44ae58ebe9 code=0x7ffc0000
[  937.218532][   T33] audit: type=1326 audit(2000000251.939:9410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=581 comm="syz.3.10983" exe="/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000
[  937.363831][  T594] netlink: 136 bytes leftover after parsing attributes in process `syz.3.10988'.
[  937.369624][  T596] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10989'.
[  937.862500][  T622] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11002'.
[  939.632424][  T681] netlink: 'syz.3.11029': attribute type 12 has an invalid length.
[  939.635047][  T681] netlink: 'syz.3.11029': attribute type 29 has an invalid length.
[  939.638486][  T681] netlink: 148 bytes leftover after parsing attributes in process `syz.3.11029'.
[  939.642022][  T681] netlink: 'syz.3.11029': attribute type 2 has an invalid length.
[  939.644472][  T681] netlink: 23 bytes leftover after parsing attributes in process `syz.3.11029'.
[  939.879249][  T688] netlink: 140 bytes leftover after parsing attributes in process `syz.3.11032'.
[  943.389345][  T835] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  944.004000][  T878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11119'.
[  944.010099][  T878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11119'.
[  944.013411][  T878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11119'.
[  944.652254][  T925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11137'.
[  944.692811][  T933] netlink: 'syz.6.11139': attribute type 2 has an invalid length.
[  944.695493][  T933] netlink: 119 bytes leftover after parsing attributes in process `syz.6.11139'.
[  945.436309][  T984] overlayfs: failed to resolve './file0': -2
[  946.759106][ T1088] bridge0: entered allmulticast mode
[  946.775122][ T1088] pim6reg: entered allmulticast mode
[  946.779315][ T1088] pim6reg: left allmulticast mode
[  946.781787][ T1088] bridge0: left allmulticast mode
[  946.822859][   T33] kauditd_printk_skb: 6 callbacks suppressed
[  946.822875][   T33] audit: type=1326 audit(2000000261.649:9417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1095 comm="syz.3.11205" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ae58ebe9 code=0x7ffc0000
[  946.837305][   T33] audit: type=1326 audit(2000000261.649:9418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1095 comm="syz.3.11205" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ae58ebe9 code=0x7ffc0000
[  946.850505][   T33] audit: type=1326 audit(2000000261.679:9419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1095 comm="syz.3.11205" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ae58ebe9 code=0x7ffc0000
[  946.867285][   T33] audit: type=1326 audit(2000000261.679:9420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1095 comm="syz.3.11205" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ae58ebe9 code=0x7ffc0000
[  946.885636][   T33] audit: type=1326 audit(2000000261.679:9421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1095 comm="syz.3.11205" exe="/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f44ae58ebe9 code=0x7ffc0000
[  946.908703][   T33] audit: type=1326 audit(2000000261.679:9422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1095 comm="syz.3.11205" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ae58ebe9 code=0x7ffc0000
[  946.921968][   T33] audit: type=1326 audit(2000000261.679:9423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1095 comm="syz.3.11205" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ae58ebe9 code=0x7ffc0000
[  946.933795][   T33] audit: type=1326 audit(2000000261.679:9424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1095 comm="syz.3.11205" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f44ae58ebe9 code=0x7ffc0000
[  946.951952][   T33] audit: type=1326 audit(2000000261.679:9425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1095 comm="syz.3.11205" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f44ae58ebe9 code=0x7ffc0000
[  947.226263][ T1109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11208'.
[  947.231303][ T1109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11208'.
[  948.755054][ T1137] overlayfs: failed to clone upperpath
[  949.486171][ T1166] netlink: 6 bytes leftover after parsing attributes in process `syz.6.11233'.
[  950.152889][ T1183] netlink: 220 bytes leftover after parsing attributes in process `syz.6.11241'.
[  952.478925][ T1313] fuse: Bad value for 'fd'
[  953.624389][ T1339] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11309'.
[  955.660749][ T1422] bond0: (slave syz_tun): Releasing backup interface
[  958.333649][ T1501] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  958.339333][ T1501] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  958.343810][ T1501] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  958.346106][ T1501] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  958.359163][ T1501] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  958.362061][ T1501] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  958.378361][ T1501] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  958.380641][ T1501] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  958.384125][ T1501] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  958.386658][ T1501] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  960.087050][T29651] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  962.526832][ T1752] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11496'.
[  962.530769][ T1749] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11496'.
[  962.758872][ T1764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11505'.
[  963.783566][ T1787] netlink: 'syz.3.11514': attribute type 21 has an invalid length.
[  963.787916][ T1787] netlink: 'syz.3.11514': attribute type 1 has an invalid length.
[  964.415456][ T1806] netlink: 180 bytes leftover after parsing attributes in process `syz.1.11522'.
[  965.492369][ T1830] 8021q: adding VLAN 0 to HW filter on device bond1
[  965.514655][ T1830] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  965.526273][ T1830] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  965.531133][ T1830] bond1: (slave macvlan4): Enslaving as a backup interface with an up link
[  965.538114][ T1830] bridge0: port 1() entered disabled state
[  965.543201][ T1830] bridge_slave_1: left allmulticast mode
[  965.545797][ T1830] bridge_slave_1: left promiscuous mode
[  965.550206][ T1830] bridge0: port 2(bridge_slave_1) entered disabled state
[  965.558781][ T1830] bond0: (slave bond_slave_0): Releasing backup interface
[  965.563921][ T1830] bond0: (slave bond_slave_1): Releasing backup interface
[  965.572795][ T1830] team0: Port device team_slave_0 removed
[  965.577887][ T1830] team0: Port device team_slave_1 removed
[  965.581653][ T1830] batman_adv: batadv0: Removing interface: batadv_slave_0
[  965.585638][ T1830] batman_adv: batadv0: Removing interface: batadv_slave_1
[  965.591684][ T1830] bond1: (slave ip6gretap1): Releasing backup interface
[  965.594773][ T1830] bond1: (slave ip6gretap1): the permanent HWaddr of slave - c2:66:db:cd:8f:4d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  965.596644][   T13] net_ratelimit: 67 callbacks suppressed
[  965.596654][   T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  965.622261][ T1830] bond1: (slave macvlan4): Removing an active aggregator
[  965.626295][ T1830] bond1: (slave macvlan4): Releasing backup interface
[  966.215035][ T1872] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  966.220291][ T1872] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  966.995908][   T33] audit: type=1326 audit(2000000281.819:9426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1889 comm="syz.6.11559" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7c0ad8ebe9 code=0x0
[  967.078457][ T1893] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11560'.
[  967.149679][ T1897] overlayfs: failed to clone upperpath
[  967.949207][ T1909] netlink: 'syz.6.11567': attribute type 1 has an invalid length.
[  968.280307][ T1933] netlink: 'syz.1.11579': attribute type 4 has an invalid length.
[  969.183907][ T1954] kAFS: Can only specify source 'none' with -o dyn
[  969.635262][ T1960] overlayfs: failed to clone upperpath
[  972.461820][   T33] audit: type=1326 audit(2000000287.289:9427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2032 comm="syz.6.11620" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  972.486870][   T33] audit: type=1326 audit(2000000287.289:9428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2032 comm="syz.6.11620" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  972.497227][   T33] audit: type=1326 audit(2000000287.299:9429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2032 comm="syz.6.11620" exe="/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  972.545165][   T33] audit: type=1326 audit(2000000287.369:9430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2032 comm="syz.6.11620" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  972.555953][   T33] audit: type=1326 audit(2000000287.369:9431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2032 comm="syz.6.11620" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  972.726739][ T2037] bridge0: entered allmulticast mode
[  972.732828][ T2037] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11622'.
[  972.740763][ T2037] bridge0: port 3(batadv0) entered disabled state
[  972.752563][ T2037] bridge_slave_1: left allmulticast mode
[  972.754925][ T2037] bridge_slave_1: left promiscuous mode
[  972.761124][ T2037] bridge0: port 2(bridge_slave_1) entered disabled state
[  972.770786][ T2037] bridge_slave_0: left allmulticast mode
[  972.773279][ T2037] bridge_slave_0: left promiscuous mode
[  972.775866][ T2037] bridge0: port 1(bridge_slave_0) entered disabled state
[  972.819926][ T2037] bridge0 (unregistering): left allmulticast mode
[  974.311477][ T2105] overlayfs: failed to clone upperpath
[  974.580318][ T2113] sctp: [Deprecated]: syz.3.11657 (pid 2113) Use of int in max_burst socket option deprecated.
[  974.580318][ T2113] Use struct sctp_assoc_value instead
[  976.370669][ T2229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11711'.
[  976.401419][ T2231] netlink: 'syz.6.11713': attribute type 11 has an invalid length.
[  977.502751][ T2279] overlayfs: failed to clone upperpath
[  977.963507][ T2289] erspan1: entered allmulticast mode
[  978.034386][   T33] audit: type=1326 audit(2000000292.859:9432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2292 comm="syz.6.11740" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  978.046210][   T33] audit: type=1326 audit(2000000292.859:9433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2292 comm="syz.6.11740" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  978.061524][   T33] audit: type=1326 audit(2000000292.879:9434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2292 comm="syz.6.11740" exe="/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  978.071807][   T33] audit: type=1326 audit(2000000292.879:9435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2292 comm="syz.6.11740" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  978.082344][   T33] audit: type=1326 audit(2000000292.879:9436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2292 comm="syz.6.11740" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  978.093307][   T33] audit: type=1326 audit(2000000292.889:9437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2292 comm="syz.6.11740" exe="/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  978.103798][   T33] audit: type=1326 audit(2000000292.889:9438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2292 comm="syz.6.11740" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  978.152035][ T2296] futex_wake_op: syz.6.11741 tries to shift op by -1; fix this program
[  978.375566][ T2315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11751'.
[  978.379509][ T2315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11751'.
[  978.383138][ T2315] netlink: 'syz.3.11751': attribute type 18 has an invalid length.
[  978.500854][ T2321] netlink: 56 bytes leftover after parsing attributes in process `syz.3.11753'.
[  978.547046][ T2327] tmpfs: Bad value for 'mpol'
[  979.302314][ T2382] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  979.745093][ T2418] netlink: 'syz.6.11798': attribute type 4 has an invalid length.
[  979.825937][   T33] audit: type=1326 audit(2000000294.649:9439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2422 comm="syz.6.11800" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  979.844492][   T33] audit: type=1326 audit(2000000294.649:9440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2422 comm="syz.6.11800" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  979.861289][   T33] audit: type=1326 audit(2000000294.669:9441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2422 comm="syz.6.11800" exe="/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[  985.132181][ T2587] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  987.230186][   T33] kauditd_printk_skb: 16 callbacks suppressed
[  987.230196][   T33] audit: type=1326 audit(2000000302.059:9458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2677 comm="syz.1.11889" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  987.256759][   T33] audit: type=1326 audit(2000000302.069:9459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2677 comm="syz.1.11889" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  987.264673][   T33] audit: type=1326 audit(2000000302.069:9460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2677 comm="syz.1.11889" exe="/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  987.296528][   T33] audit: type=1326 audit(2000000302.069:9461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2677 comm="syz.1.11889" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c2bf2add9 code=0x7ffc0000
[  987.305787][   T33] audit: type=1326 audit(2000000302.069:9462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2677 comm="syz.1.11889" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c2bf2add9 code=0x7ffc0000
[  987.346621][   T33] audit: type=1326 audit(2000000302.069:9463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2677 comm="syz.1.11889" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c2bf2add9 code=0x7ffc0000
[  987.353711][   T33] audit: type=1326 audit(2000000302.069:9464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2677 comm="syz.1.11889" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c2bf2add9 code=0x7ffc0000
[  987.376909][   T33] audit: type=1326 audit(2000000302.069:9465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2677 comm="syz.1.11889" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c2bf2add9 code=0x7ffc0000
[  987.384711][   T33] audit: type=1326 audit(2000000302.069:9466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2677 comm="syz.1.11889" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c2bf2add9 code=0x7ffc0000
[  987.413238][   T33] audit: type=1326 audit(2000000302.069:9467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2677 comm="syz.1.11889" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c2bf2add9 code=0x7ffc0000
[  988.916310][ T2798] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.11937'.
[  989.821274][ T2845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11953'.
[  989.951849][ T2853] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.11957'.
[  990.042430][ T2872] tipc: Started in network mode
[  990.044182][ T2872] tipc: Node identity ., cluster identity 4711
[  990.047466][ T2872] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  990.416858][ T2891] overlayfs: failed to clone upperpath
[  991.319868][ T2938] netlink: 'syz.3.11985': attribute type 1 has an invalid length.
[  992.613913][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  992.616017][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  992.648333][   T33] kauditd_printk_skb: 135 callbacks suppressed
[  992.648349][   T33] audit: type=1326 audit(2000000307.479:9603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2982 comm="syz.3.12004" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44ae58ebe9 code=0x0
[  994.479103][ T3063] trusted_key: encrypted_key: insufficient parameters specified
[  996.342774][   T33] audit: type=1326 audit(2000000311.169:9604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3138 comm="syz.1.12079" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  996.355136][   T33] audit: type=1326 audit(2000000311.169:9605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3138 comm="syz.1.12079" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  996.364678][   T33] audit: type=1326 audit(2000000311.169:9606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3138 comm="syz.1.12079" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  996.380948][   T33] audit: type=1326 audit(2000000311.169:9607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3138 comm="syz.1.12079" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  996.392239][   T33] audit: type=1326 audit(2000000311.169:9608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3138 comm="syz.1.12079" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  996.405084][   T33] audit: type=1326 audit(2000000311.169:9609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3138 comm="syz.1.12079" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  996.413131][   T33] audit: type=1326 audit(2000000311.169:9610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3138 comm="syz.1.12079" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  996.427236][   T33] audit: type=1326 audit(2000000311.169:9611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3138 comm="syz.1.12079" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  996.439923][   T33] audit: type=1326 audit(2000000311.169:9612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3138 comm="syz.1.12079" exe="/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[  997.444546][ T3172] vlan4: entered allmulticast mode
[  997.450241][ T3172] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  998.785893][ T3205] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12107'.
[  999.832189][ T3276] 9pnet_fd: Insufficient options for proto=fd
[ 1002.956089][ T3369] orangefs_mount: mount request failed with -4
[ 1003.170498][   T33] kauditd_printk_skb: 71 callbacks suppressed
[ 1003.170513][   T33] audit: type=1326 audit(2000000317.999:9684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3418 comm="syz.1.12203" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x0
[ 1005.554410][ T3503] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1005.795390][ T3511] netlink: 277 bytes leftover after parsing attributes in process `syz.1.12239'.
[ 1006.373025][ T3555] overlayfs: failed to clone upperpath
[ 1007.413733][ T3616] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.12290'.
[ 1008.206153][ T3656] geneve2: entered promiscuous mode
[ 1008.209802][ T3656] geneve2: entered allmulticast mode
[ 1008.212793][ T5853] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1008.218719][ T5853] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1008.222864][ T5853] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1008.226317][ T5853] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1008.453211][ T3674] 9pnet_fd: Insufficient options for proto=fd
[ 1009.105630][ T3700] overlayfs: failed to clone lowerpath
[ 1012.774344][ T3798] futex_wake_op: syz.1.12366 tries to shift op by 32; fix this program
[ 1015.461723][ T3866] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12395'.
[ 1015.472581][ T3866] vlan4: entered promiscuous mode
[ 1015.474754][ T3866] erspan0: entered promiscuous mode
[ 1015.531551][ T3872] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12398'.
[ 1015.546681][ T3872] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12398'.
[ 1015.935880][ T3897] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[ 1015.947419][ T3897] CIFS mount error: No usable UNC path provided in device string!
[ 1015.947419][ T3897] 
[ 1015.952372][ T3897] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1016.443617][ T3926] sctp: [Deprecated]: syz.1.12423 (pid 3926) Use of int in maxseg socket option.
[ 1016.443617][ T3926] Use struct sctp_assoc_value instead
[ 1016.600961][ T3936] befs: Bad value for 'gid'
[ 1016.602923][ T3936] befs: Bad value for 'gid'
[ 1016.853792][ T3959] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12439'.
[ 1016.859274][ T3959] sch_tbf: burst 0 is lower than device lo mtu (14) !
[ 1017.092792][ T3970] vlan0: entered promiscuous mode
[ 1017.094482][ T3970] macvtap0: entered promiscuous mode
[ 1017.265568][ T3974] netlink: 72 bytes leftover after parsing attributes in process `syz.3.12446'.
[ 1017.363534][ T3978] vti0: entered promiscuous mode
[ 1019.335048][ T4059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12485'.
[ 1019.819122][ T4070] netlink: 'syz.3.12489': attribute type 6 has an invalid length.
[ 1020.090406][ T4087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12496'.
[ 1020.155830][ T4087] vlan5: entered allmulticast mode
[ 1020.161491][ T4087] bond4: entered allmulticast mode
[ 1020.200612][ T4094] syz.1.12500: attempt to access beyond end of device
[ 1020.200612][ T4094] loop3: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1020.207491][ T4094] SQUASHFS error: Failed to read block 0x0: -5
[ 1021.607354][   T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1021.610911][   T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1021.619903][   T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1021.623771][   T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1021.941338][ T4179] kernel read not supported for file /file1 (pid: 4179 comm: syz.6.12541)
[ 1021.945087][   T33] audit: type=1800 audit(2000000336.769:9685): pid=4179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.12541" name="file1" dev="mqueue" ino=99134 res=0 errno=0
[ 1022.589064][ T4215] netlink: 148 bytes leftover after parsing attributes in process `syz.6.12558'.
[ 1022.592711][ T4215] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[ 1023.123072][ T4252] overlayfs: failed to clone upperpath
[ 1023.572559][ T4265] overlayfs: failed to clone upperpath
[ 1023.852155][ T4284] team_slave_0: entered promiscuous mode
[ 1023.854246][ T4284] team_slave_1: entered promiscuous mode
[ 1024.925627][ T4303] overlayfs: failed to clone upperpath
[ 1025.563783][ T4345] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12616'.
[ 1029.645016][ T4466] 9pnet_fd: Insufficient options for proto=fd
[ 1030.635759][ T4484] overlayfs: failed to clone upperpath
[ 1031.318650][ T4509] sch_fq: defrate 4294967295 ignored.
[ 1031.569314][ T4526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12690'.
[ 1032.678924][ T4561] netlink: 260 bytes leftover after parsing attributes in process `syz.3.12707'.
[ 1033.804479][ T4591] netlink: 666 bytes leftover after parsing attributes in process `syz.3.12719'.
[ 1034.475357][ T4627] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.12736'.
[ 1036.630845][   T33] audit: type=1326 audit(2000000351.459:9686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="syz.1.12758" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[ 1036.650722][   T33] audit: type=1326 audit(2000000351.459:9687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="syz.1.12758" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[ 1036.669246][   T33] audit: type=1326 audit(2000000351.459:9688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="syz.1.12758" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[ 1036.677255][   T33] audit: type=1326 audit(2000000351.459:9689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="syz.1.12758" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[ 1036.684388][   T33] audit: type=1326 audit(2000000351.459:9690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="syz.1.12758" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[ 1036.693030][   T33] audit: type=1326 audit(2000000351.459:9691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="syz.1.12758" exe="/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[ 1036.700058][   T33] audit: type=1326 audit(2000000351.459:9692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="syz.1.12758" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[ 1036.708591][   T33] audit: type=1326 audit(2000000351.459:9693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="syz.1.12758" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[ 1036.715688][   T33] audit: type=1326 audit(2000000351.459:9694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="syz.1.12758" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[ 1036.724034][   T33] audit: type=1326 audit(2000000351.459:9695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4678 comm="syz.1.12758" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c2bf8ebe9 code=0x7ffc0000
[ 1037.300525][ T4698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12766'.
[ 1037.885315][ T4732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12783'.
[ 1039.279026][ T4767] netlink: 'syz.1.12799': attribute type 10 has an invalid length.
[ 1039.282519][ T4767] batman_adv: batadv0: Adding interface: macvtap0
[ 1039.284780][ T4767] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1039.298612][ T4767] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active
[ 1041.183483][ T4838] netlink: 'syz.6.12824': attribute type 6 has an invalid length.
[ 1045.434497][ T4973] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12880'.
[ 1045.527055][ T4977] fuse: Bad value for 'fd'
[ 1045.894537][ T4995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12891'.
[ 1046.811463][   T33] kauditd_printk_skb: 10 callbacks suppressed
[ 1046.811479][   T33] audit: type=1326 audit(2000000361.639:9706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5023 comm="syz.6.12904" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[ 1046.826220][   T33] audit: type=1326 audit(2000000361.639:9707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5023 comm="syz.6.12904" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[ 1046.840172][   T33] audit: type=1326 audit(2000000361.649:9708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5023 comm="syz.6.12904" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[ 1046.852569][   T33] audit: type=1326 audit(2000000361.649:9709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5023 comm="" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[ 1046.866584][   T33] audit: type=1326 audit(2000000361.649:9710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5023 comm="" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ad8ebe9 code=0x7ffc0000
[ 1046.939053][ T5028] /dev/nullb0: Can't lookup blockdev
[ 1047.074866][ T5036] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12910'.
[ 1047.583062][ T5045] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1048.009431][ T5066] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[ 1052.176645][ T5192] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1052.180042][ T5192] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[ 1052.184193][ T5192] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1052.241533][ T5193] fuse: Bad value for 'fd'
[ 1052.446471][ T5197] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12981'.
[ 1052.647568][T15460] ------------[ cut here ]------------
[ 1052.650829][T15460] WARNING: CPU: 1 PID: 15460 at io_uring/io_uring.c:2981 io_ring_exit_work+0x4ed/0x930
[ 1052.656088][T15460] Modules linked in:
[ 1052.659255][T15460] CPU: 1 UID: 0 PID: 15460 Comm: kworker/u10:26 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[ 1052.664730][T15460] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1052.669517][T15460] Workqueue: iou_exit io_ring_exit_work
[ 1052.672202][T15460] RIP: 0010:io_ring_exit_work+0x4ed/0x930
[ 1052.675313][T15460] Code: c6 05 08 aa 61 0e 01 48 c7 c7 00 50 e2 8b be 24 00 00 00 48 c7 c2 a0 4f e2 8b e8 ce 1d 72 00 e9 7b fe ff ff e8 74 43 94 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 e9 5f ff ff ff 89 d9 80 e1
[ 1052.684247][T15460] RSP: 0018:ffffc900034cf8e0 EFLAGS: 00010293
[ 1052.687068][T15460] RAX: ffffffff812b683c RBX: 0000000100012574 RCX: ffff888106e0d640
[ 1052.690339][T15460] RDX: 0000000000000000 RSI: fffffffffffffffc RDI: 0000000000000000
[ 1052.693619][T15460] RBP: ffffc900034cfa70 R08: ffffc900034cf867 R09: 1ffff92000699f0c
[ 1052.696937][T15460] R10: dffffc0000000000 R11: fffff52000699f0d R12: 0000000100012570
[ 1052.700138][T15460] R13: ffff88803e154310 R14: ffff88803e154480 R15: dffffc0000000000
[ 1052.703292][T15460] FS:  0000000000000000(0000) GS:ffff8881a3c24000(0000) knlGS:0000000000000000
[ 1052.707029][T15460] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1052.709785][T15460] CR2: 00007fd8fe916440 CR3: 00000000292e8000 CR4: 00000000000006f0
[ 1052.712969][T15460] Call Trace:
[ 1052.714381][T15460]  <TASK>
[ 1052.715613][T15460]  ? __pfx_io_ring_exit_work+0x10/0x10
[ 1052.718014][T15460]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1052.720179][T15460]  ? process_scheduled_works+0x9ef/0x17b0
[ 1052.722468][T15460]  ? process_scheduled_works+0x9ef/0x17b0
[ 1052.724796][T15460]  process_scheduled_works+0xae1/0x17b0
[ 1052.727272][T15460]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1052.729727][T15460]  worker_thread+0x8a0/0xda0
[ 1052.731711][T15460]  kthread+0x711/0x8a0
[ 1052.733445][T15460]  ? __pfx_worker_thread+0x10/0x10
[ 1052.735653][T15460]  ? __pfx_kthread+0x10/0x10
[ 1052.737730][T15460]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1052.739922][T15460]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1052.742129][T15460]  ? __pfx_kthread+0x10/0x10
[ 1052.744508][T15460]  ret_from_fork+0x3fc/0x770
[ 1052.746894][T15460]  ? __pfx_ret_from_fork+0x10/0x10
[ 1052.749167][T15460]  ? __switch_to_asm+0x39/0x70
[ 1052.751254][T15460]  ? __switch_to_asm+0x33/0x70
[ 1052.753336][T15460]  ? __pfx_kthread+0x10/0x10
[ 1052.755375][T15460]  ret_from_fork_asm+0x1a/0x30
[ 1052.757583][T15460]  </TASK>
[ 1052.758938][T15460] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1052.762081][T15460] CPU: 1 UID: 0 PID: 15460 Comm: kworker/u10:26 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[ 1052.767358][T15460] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1052.771635][T15460] Workqueue: iou_exit io_ring_exit_work
[ 1052.773957][T15460] Call Trace:
[ 1052.775444][T15460]  <TASK>
[ 1052.776684][T15460]  dump_stack_lvl+0x99/0x250
[ 1052.778335][T15460]  ? __asan_memcpy+0x40/0x70
[ 1052.779894][T15460]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1052.781724][T15460]  ? __pfx__printk+0x10/0x10
[ 1052.783436][T15460]  vpanic+0x281/0x750
[ 1052.784856][T15460]  ? __pfx__printk+0x10/0x10
[ 1052.786743][T15460]  ? __pfx_vpanic+0x10/0x10
[ 1052.788655][T15460]  ? is_bpf_text_address+0x26/0x2b0
[ 1052.790795][T15460]  panic+0xb9/0xc0
[ 1052.792352][T15460]  ? __pfx_panic+0x10/0x10
[ 1052.794212][T15460]  __warn+0x31b/0x4b0
[ 1052.795898][T15460]  ? io_ring_exit_work+0x4ed/0x930
[ 1052.798001][T15460]  ? io_ring_exit_work+0x4ed/0x930
[ 1052.800022][T15460]  report_bug+0x2be/0x4f0
[ 1052.801758][T15460]  ? io_ring_exit_work+0x4ed/0x930
[ 1052.803824][T15460]  ? io_ring_exit_work+0x4ed/0x930
[ 1052.805933][T15460]  ? io_ring_exit_work+0x4ef/0x930
[ 1052.808021][T15460]  handle_bug+0x84/0x160
[ 1052.809768][T15460]  exc_invalid_op+0x1a/0x50
[ 1052.811661][T15460]  asm_exc_invalid_op+0x1a/0x20
[ 1052.813470][T15460] RIP: 0010:io_ring_exit_work+0x4ed/0x930
[ 1052.815354][T15460] Code: c6 05 08 aa 61 0e 01 48 c7 c7 00 50 e2 8b be 24 00 00 00 48 c7 c2 a0 4f e2 8b e8 ce 1d 72 00 e9 7b fe ff ff e8 74 43 94 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 e9 5f ff ff ff 89 d9 80 e1
[ 1052.823249][T15460] RSP: 0018:ffffc900034cf8e0 EFLAGS: 00010293
[ 1052.825854][T15460] RAX: ffffffff812b683c RBX: 0000000100012574 RCX: ffff888106e0d640
[ 1052.829179][T15460] RDX: 0000000000000000 RSI: fffffffffffffffc RDI: 0000000000000000
[ 1052.832637][T15460] RBP: ffffc900034cfa70 R08: ffffc900034cf867 R09: 1ffff92000699f0c
[ 1052.835979][T15460] R10: dffffc0000000000 R11: fffff52000699f0d R12: 0000000100012570
[ 1052.839311][T15460] R13: ffff88803e154310 R14: ffff88803e154480 R15: dffffc0000000000
[ 1052.842004][T15460]  ? io_ring_exit_work+0x4ec/0x930
[ 1052.843968][T15460]  ? __pfx_io_ring_exit_work+0x10/0x10
[ 1052.846143][T15460]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1052.848205][T15460]  ? process_scheduled_works+0x9ef/0x17b0
[ 1052.850489][T15460]  ? process_scheduled_works+0x9ef/0x17b0
[ 1052.852643][T15460]  process_scheduled_works+0xae1/0x17b0
[ 1052.854677][T15460]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1052.856799][T15460]  worker_thread+0x8a0/0xda0
[ 1052.858525][T15460]  kthread+0x711/0x8a0
[ 1052.859922][T15460]  ? __pfx_worker_thread+0x10/0x10
[ 1052.861713][T15460]  ? __pfx_kthread+0x10/0x10
[ 1052.863238][T15460]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1052.864928][T15460]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1052.866733][T15460]  ? __pfx_kthread+0x10/0x10
[ 1052.868589][T15460]  ret_from_fork+0x3fc/0x770
[ 1052.870446][T15460]  ? __pfx_ret_from_fork+0x10/0x10
[ 1052.872450][T15460]  ? __switch_to_asm+0x39/0x70
[ 1052.874390][T15460]  ? __switch_to_asm+0x33/0x70
[ 1052.876303][T15460]  ? __pfx_kthread+0x10/0x10
[ 1052.878131][T15460]  ret_from_fork_asm+0x1a/0x30
[ 1052.880063][T15460]  </TASK>
[ 1052.882012][T15460] Kernel Offset: disabled
[ 1052.883724][T15460] Rebooting in 86400 seconds..

VM DIAGNOSIS:
02:22:18  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000a02 RCX=0000000000000000 RDX=ffffc90009e00000
RSI=ffffffff84cf77d2 RDI=ffffffff99d0c9b0 RBP=ffffc90009e07670 RSP=ffffc90009e07558
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=ffffffff81a53600
R12=dffffc0000000000 R13=ffffffff84cf77d2 R14=ffffffff99d0c9b0 R15=1ffff920013c0ebc
RIP=ffffffff81a65d89 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7c0bae56c0 CR3=000000012bd1e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f7c0ae12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bcc05 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffc900034cf270 RSP=ffffc900034cf098
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e7247 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd8fe916440 CR3=00000000292e8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=3d64695f72657375 2c30303030343030 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=00007f7c2c187478 00007f7c2c1874c0
XMM06=00007f7c2c1874b8 00007f7c2c1874b0 XMM07=00007f7c2c1874a8 00007f7c2c1874a0
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007f7c2c012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
