last executing test programs:

4m45.265932674s ago: executing program 0 (id=260):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0xa, 0x0, 0x14, 0x2, 0x0, 0x70bd25, 0x25dfdbfc}, 0x10}}, 0x30004000)

4m45.265696029s ago: executing program 0 (id=261):
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc)

4m45.265594542s ago: executing program 0 (id=262):
r0 = socket$inet6_udp(0x2d, 0x2, 0x0)
accept4(r0, 0x0, 0x0, 0x80000)

4m45.265381056s ago: executing program 0 (id=263):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@nodelalloc}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000240)='./bus\x00', 0x20000, 0x0, 0x0, 0x0, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x200000, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]})
llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000780)=""/142, 0x8e)

4m45.1963344s ago: executing program 0 (id=266):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x76}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

4m44.898094467s ago: executing program 0 (id=273):
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000001cc0)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81", @ANYBLOB="8f83"], 0xfe33)

4m44.862042539s ago: executing program 32 (id=273):
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000001cc0)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81", @ANYBLOB="8f83"], 0xfe33)

2m34.56337635s ago: executing program 1 (id=2364):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x24004040)

2m34.306488888s ago: executing program 1 (id=2366):
syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000000000)='./file0\x00', 0x200800, &(0x7f00000001c0)={[{@ikeep}, {@ikeep}, {@noikeep}, {@nolargeio}, {@nolargeio}]}, 0x1, 0x9657, &(0x7f0000012cc0)="$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")
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x14)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000180)='./bus\x00', 0x200401c, &(0x7f00000000c0)={[{@uid}, {@nls={'nls', 0x3d, 'iso8859-7'}}, {@creator={'creator', 0x3d, "f19ea2da"}}, {@barrier}, {@nodecompose}, {@creator={'creator', 0x3d, "c08dd6d7"}}, {@uid}]}, 0xb, 0x6cf, &(0x7f0000001e00)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35)
pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc)

2m34.093949763s ago: executing program 1 (id=2372):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {}, {}, {0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xa, 0x0, 0xdf}, [@encap={0x1c, 0x4, {0x0, 0x4e23, 0x4e23, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x41}, 0x0)

2m33.788281954s ago: executing program 1 (id=2374):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file1\x00', 0x2000004c, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14f5, &(0x7f0000001580)="$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")
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cb19976d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc10700", "64885973ff030000000000000000d01cd3160000ffffff7f0000000000002000", [0x200]})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)

2m33.309823183s ago: executing program 1 (id=2375):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x401, 0x4002, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1d188}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x84, 0x3}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x58}}, 0x0)

2m33.181763407s ago: executing program 1 (id=2376):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x15, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff1}, {0xfff3, 0x2}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040801}, 0x20000000)

2m33.021129679s ago: executing program 33 (id=2376):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x15, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff1}, {0xfff3, 0x2}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040801}, 0x20000000)

2m28.223046624s ago: executing program 4 (id=2449):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
socket(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa1400"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)

2m27.375590051s ago: executing program 4 (id=2456):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x1, 0x4, 0xa, 0xd, 0x30, 0xffffffffffffffff}]}, &(0x7f0000000180)='syzkaller\x00', 0xc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)

2m27.375431192s ago: executing program 4 (id=2457):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./bus\x00', 0x2000010, &(0x7f0000000580)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRES16], 0x1, 0x6d6, &(0x7f0000001bc0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x275a, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
rmdir(0x0)
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2)

2m27.332988085s ago: executing program 4 (id=2458):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfe, 0x47c, &(0x7f0000000a80)="$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")
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f00000001c0)={[{@gid}, {}]})
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020)

2m27.245039183s ago: executing program 4 (id=2459):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000007c0)={0x1, @pix_mp={0x8, 0x7fffffff, 0x34565348, 0x7, 0x4, [{0x1000000, 0x40}, {0x8, 0x8}, {0x13, 0x9e}, {0x0, 0xffffffee}, {0x9, 0x4}, {0x40009, 0x31cf}, {0x5, 0x7}, {0x7, 0x6}], 0x7, 0x9, 0x2, 0x2}})

2m26.595727459s ago: executing program 4 (id=2480):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r1 = fanotify_init(0xf00, 0x1000)
fanotify_mark(r1, 0x105, 0x10000839, r0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)

2m26.394115493s ago: executing program 34 (id=2480):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r1 = fanotify_init(0xf00, 0x1000)
fanotify_mark(r1, 0x105, 0x10000839, r0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)

54.626808127s ago: executing program 5 (id=4282):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x40)

54.626644519s ago: executing program 5 (id=4283):
r0 = socket$netlink(0x10, 0x3, 0x15)
sendmsg$netlink(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="e000000013000100000000008bcd36aa5f9eca00000000cde73661dc24b5af93b68b1de20326a6936d2605282c7c1933c59770deb1f14f99d9b210deb0f81282f8bd589f7057ffdbc120712b29428f9591bfb7b7638eca2c6e8203184c66f27dd2beafa90f3dbf3751216c5378b94a3bc2bb0a48ad68548d7106b7b8f9a1d2ebeb3ce55779132b4eed82e03e6a418924"], 0xe0}], 0x1}, 0x0)

54.62643421s ago: executing program 5 (id=4284):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2808080, &(0x7f0000000b40)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@numtail}, {@uni_xlateno}, {@shortname_winnt}, {@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@rodir}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@shortname_win95}]}, 0x81, 0x2ae, &(0x7f0000001980)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file5\x00', 0x42, 0x81)

54.56755139s ago: executing program 5 (id=4285):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x222)

54.567289362s ago: executing program 5 (id=4286):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00')
getdents(r0, 0x0, 0x0)

54.458070478s ago: executing program 5 (id=4287):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)

54.415686114s ago: executing program 35 (id=4287):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)

442.08944ms ago: executing program 6 (id=5406):
syz_emit_ethernet(0x3b6, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xdb0b, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb04619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f604d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x3, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e10090cf6164000000020000000000000000000000ffff008879e66485201a0015ca837c7357a0274500f700"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)

441.522268ms ago: executing program 6 (id=5408):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080))

389.580128ms ago: executing program 6 (id=5410):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
getsockopt$sock_int(r0, 0x1, 0x2f, 0x0, &(0x7f0000000440)=0x13)

389.212652ms ago: executing program 3 (id=5411):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

388.950025ms ago: executing program 6 (id=5412):
syz_mount_image$jfs(&(0x7f0000005e00), &(0x7f0000000000)='./file0\x00', 0x8002, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYBLOB="5d29a7ffecbda5c576ef088a", @ANYRESDEC, @ANYRESOCT, @ANYBLOB="a34e8e99beb89d783054bec9e38a6832fc8531daa24f31e0dfe2722ea25f5021ddfb994d2a61ed5f53a5a6ea07b8b061e962fd96849d94c60e66f31a6611a2a1da917d4a8b80dfac608be25c847830f61a30959b5fa34af0694f2cfe37b8167e60fa049595e9a6cda78ef291d801d26e14f3d61c1ceb98844cd1aeacf23af86c44a7be7667f71677fcbf298b90d0ff0771153b40f458e56fcf8fd34eec4974a33ec8ce341ed3edd7355cebf6c7c3e28fcea4cb0167504606c830", @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYRES8=0x0], 0x0, 0x5f51, &(0x7f0000005e40)="$eJzs3c1vHGcdB/DfvvqlNLV6iEqEUJqWl1Ka1xICBdoe4MCFA8oVJXLdKiIFlASUVhFx5QsH/ggQEscKceTEH9ADV278AURKkECVkBg09vM4s5N11knqnXWez0eyZ377zHif8XfHu+uZ2ScAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPjhD358phcRl36VbliL+FwMIvoRK3V9PI6313khIup1jkbEaGlnfvvbcxGvR8QnRyLu3ru1Xt98dp/9+P6f/v6Hnzzzo799PDr1nz/fGLyx13I3b/7233+5/XjbCgAAAKWqqqrqbb/NjzgWEcPYfusPABQgP/9XSb5drVYvUD1YsP6o1epDWzdV091uFhGx2Vynfs3gcDwAHDKb8WnXXaBD8i/aMCKe6boTwELrdd0BDsTde7fWeynfXvP5IF31kc8Fmch/s7d7fcde01na55jM6/G1FYN4fo/+rMypD4ukzmstbf9E/pd22sfTVnqi/P+7/b/Hrs4x2iv/8c6lT8XJ+/+gnX/LQe//87IV/an5lyrnP3yk/AfyBwAAAACABZb//7/W8fHfpSfflH152PHfBz7oEAAAAAAAAAAOiX2M/xexcnz30thhGv+vn8b/22X8PwAAAFhY9Xv12u+O3L9tr89iq2+/2It4trU8UJh0scxq1/0AAAAAAAAAAAAAgJIMd87hvdiLGEXEs6urVVXVX03t+lE96fqHXenbDyXr+o88AADs+ORI81r+5d3vF9Nn/Y1WV1eranlltVqtVpby69nx0nK10nhfm6f1bUvjfbwgHo6r+octN9ZrmvV+eVZ7++fV9zWuBvvo2Hx0mTgAROw8G931jPSUqarnoutXORwO9v+nj/2f/ej6cQoAAAAcvKqqql76OO9j6Zh/v+tOAQBzkZ//28cF1Gq1Wt2sPz66WP1Rqx+vbqqmu90sImKzuU79msFw/ABwyGzGp113gQ7Jv2jDiHih604AC63XdQc4EHfv3VrvpXx7zeeDNL57PhdkIv/N3vZ6ef1p01na55jM6/G1FYN4fo/+HJ1THxZJzr/fzv/STvs4LXfQ+c/LXvnX27nWQX+6lvMftPNveXry70/Nv1Q5/+Ej5T+QPwAAAAAALLD8//81x3/zJgMAAAAAAADAoXP33q31fN1rPv7/hSnLuf7z6ZTz78m/SDn/fiv/r7aWGzTm77x9P/9/3bu1/scb//x8nu43/6U800uPrF56RPTSPfWGafokW/egrdFgXN/TqNcfDNM5P9Xo3bgSV2MjTk8s20+/j/vtZyba656OJtrPTrQPH2g/N9E+Sp87UK3k9pOxHj+Pq/HOdnvdtjRj+5dntFcz2nP+A/t/kXL+w8ZXnf9qau+1prU7H/Uf2O+b02n389aVL/7m9MFvzkxbMdjdtqZ6+0500J/t38kz4/jl9Y1rJ29evnHj2plIk4lbz0aafMZy/qP0tfv3/6Wd9vx3v7m/3vlo/Mj5L4qtGO6Z/0uN+Xp7X5lz37qQ8x+nr5z/O6l9+v5/mPPfe/9/tYP+AAAAAAAAAAAAAAAAwMNUVbV9iehbEXE+Xf/T1bWZAMB85ef/Ksm3q9VqtVqtfvrqpmq6N5tFRPy1uU79muHX034YALDI/hcR/+i6E3RG/gXLn/dXT1/uujPAXF3/4MOfXr56dePa9a57AgAAAAAAAAA8rjz+5/HG+M8vR8Raa7mJ8V/fjuNPOv7nMM/sDjD6GQ/0vYet/njQbww3/mI8fPzvE/Hw8b+HM+5vNKN9PKN9aUb78oz2qRd6NOT8X2yMd17nf6w1/HoJ47+2x7wvQc7/ROPxXOf/ldZyzfyr3x/m/PsT+Z+68f4vTl3/4MPXrrx/+b2N9zZ+du7MmdPnzp+/cOHCqXevXN04vfO9wx4frJx/HvvaeaBlyfnnzOVflpz/l1It/7Lk/L+cavmXJeefX+/Jvyw5//zeR/5lyfm/kmr5lyXn/7VUy78sOf9XUy3/suT8v55q+Zcl5/9aquVflpz/yVTLvyw5/1Opln9Zcv75CJf8y5Lzz2c2yL8sOf+zqZZ/WXL+51It/7Lk/F9PtfzLkvP/RqrlX5ac//lUy78sOf9vplr+Zcn5X0i1/MuS8/9WquVflpz/t1Mt/7Lk/N9ItfzLkvP/TqrlX5ac/3dTLf+y5Py/l2r5lyXn/2aq5V+W+5//b8aMGTN5puu/TAAAAAAAAAAAAABA2zxOJ+56GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+D87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsLe3cXIddb3Az+z3l2vHSAGQv5O/iZZO8ZxnE12/RK/0LqYEEKaQGneKOlLbNe7dhb8Fq9dkjSSjQwlEkZFFVVz0xZQ1OamIqq4oFWKclG16lXTXtCbiqoSF1FlUECq1NdsNec8z7Mzs7Mzu/HYmTnn85Hin3fmzJwzZ56Z3e86310AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg0caPzXyllmVZ/b/8j3VZ9q7639eMr8sv+/A7fYQAAADAlfrf/M83r08XHFjGjRq2+dtb/v678/Pz89lnV/3+yDfm59MV41k2sjrL8uuiV/71iVrjNsHFbKw21PDxUJfdr+py/XCX60e6XD/a5frVXa4f63L9ohOwyJri+zH5nW3O/7quOKXZDdlIft3mNre6WFs9NBS/l5Or5beZHzmazWbHs5lsqmn7Yttavv2rG+v7eiCL+xpq2NeG+gr56fNH4jHUwjne3LSvhfuMfvzRbPxnP33+yJ+cvXxTu9n1NDTdX3GcWzfVj/NL4ZLiWGvZ6nRO4nEONRznhjbPyaqm46zlt6v/vfU431zmca5aOMxr6uJ/zzc952PZUP731/PzNNz4bb10njaEy/7jtizLLiwcdus2i/aVDWVrmy4ZWnh+xooVWb+P+lJ6Xza8onW6cRnrtD6nNzev09bXRHz+N4bbDS9xDI1P04+/OLroeV/pOo3qj3qp10rrGuz1a+UdW4OLns9iXbyeP+gX2q7BzeHxP79l6TXYdu20WYPpcTeswU3d1uDQ6Kr8mNOTUMtvs7AGtzdtvyrfUy2fb2zpvAYnz544PTn37HN3zZ44fGzm2MzJndu3T+3cvXvv3r2TR2ePz0wVf77Ns93/1mZD6TWwKZy7+Bq4vWXbxqU6/63evQ7HOrwO17Vs2+vX4XDrg6tdmxfk4jVdvDYeq5/0sUtD2RKvsfz52Xblr8P0uBteh8MNr8O2n1PavA6Hl/E6rG9zetvyvmYZbviv3TFcrc8F6xrWYOvXI61rsNdfj/TLGhwL6+Kfty39uWBDON4XJlb69ciqRWswPdzw3lO/JH29P7Y3H+3W5c31K64bzc7NzZy5+5nDZ8+e2Z6FcU28v2GttK7XtQ2PKVu0XodWvF4PzN7yws1tLl8XztXYXfU/xpZ8rurb7Lq783OVf3Zrfz6bLt2RhdFj1/p8tvtsXj+fKUt2OJ/1bb40eeVfi6dc2vD+O7LE+2/M/W8V+0t3dXHVyHDx+l2Vzs5I0/tx81M1nL931fJ9vzm5vPfjkfDftX4/vqHD+/H6lm17/X480vrg4vtxrdt3O65M6/M5FtbJ8anO78f1bdbvWOmaHO74fnxbmLVw/u8ISSHlooa1s9S6TfsaHh4Jj2s47qF5ne5s2n4kZLP6vl7e8fbW6dbbivtalR7dgmu1Tsdbtu31Ok3vV0ut01q37769Pa3P51hYFzfs7LxO69u8tuvK3zvXxL82vHeOdluDI6tG68c8khZh8X4/vyauwbuzI9mp7Hg2nV87mq+nWr6viXuWtwZHw3/X+r1yfYc1uLVl216vwfR5bKm1Vxte/OB7oPX5HAvr4sV7Oq/B+jb37ent165bwyVpm4avXVu/v7bU97xubjlNV/N7XvXj/Os9nb83W9/m+N6V5szO5+nOcMl1bc5T6+t3qdfUdHZtztP6cJyX9y59nurHU9/mG/uWuZ4OZFl2/ul78+/3hn9f+fNzP/hu07+7tPs3nfNP3/uTdx/9m5UcPwCD761irC0+1zX8y9Ry/v0fAAAAGAgx9w+Fmcj/AAAAUBox98f/KzyR/wEAAKA0Yu4fDjOpSP5ff9/l2bfOZ6mZPx/E69NpeLDYLnZcp8LH4/ML6pff+9LMv//l+eXteyjLsv958Lfbbr/+wXhchfFwnK98vPnyxTc8v6z9H3p8YbvG/vo3w/3Hx7PcZdCugjuVZdmr138t38/4E5fy+dqDh/L5yIUXLta3eXNf8XG8/RvvL7b/w1D+PXD0cNPt3wjn4UdhTj3U/nzE233n0h0b9nxmYX/xdrVN78kf9otPFvcbf07O1y8W28fzvNTx/9VXX/5OfftnPtT++M8PtT/+l8P9vhTmf36w2L7xOah/HG/35XD8cX/xdnd/+/ttj/+VrxTbn76/2O5QmHH/W8PHm++/PNt4vp6pHW56XNkniu3i/qd+8Lv59fH+4v23Hv/YwUtN56N1fbz2j8X9TLZsHy+P+4n+omX/9ftpXJ9x/y//zqGm89xt/6888sYH6/fbuv87W7Y7/fS2fP8L99f8E5v+6Mtfa7u/eDwH/ux00+M58HB4HYf9v/hkWI/h+v96pbi/1p+ucOjh5vefuP03151vejzBmizLiss/ciyfq8fWrL3uXe9+z4Vb6+cuy15/tLi/bvs/9senmo7/WzcW5yNeHzv6LftfUtz/mS9MnDw1d252uuGs5j8755PF8cTjvT68t7Z+fPDU2admzoxPjU9l2Xh5f4Te2/btMH9SjAsrvf22x8PzefMfvLp2yz98NV7+T48Vl196qPi8dXvY7uvh8nXh+bvS/b+48cb89V17rfi4qcfeAxs2/9veZW0YHn/r1wVxvZ/+wFP5eahfl3/eiK/rKzz+H04X9/O9cF7nw09m3nTjwv4at48/G+HSo8Xr/YrPX3ibi8/rn4bn+1M/Ku4/Hld8vD8MX8d8f33z+11cH987P9R6//lP8bgQ3k+yC8X1cat4vi+9eWPbw4s/hyS7cFP+8e+l+7lpRQ9zKXPPzk0enz157pnJszNzZyfnnn3u4IlT506ePZj/LM+Dn+t2+4X3p7X5+9P0zO5dWf5udaoYV9k7ffynHz8yvWdqy/TM0cPnjp59/PTMmWNH5uaOzEzPbTl89OjMF7rdfnZ6//Yd+3bu2TFxbHZ6/959+3bum5g9eap+GMVBdbF76vMTJ88czG8yt3/Xvu333LNrauLEqemZ/XumpibOdbt9/rlpon7r35o4M3P88NnZEzMTc7PPzezfvm/37h1dfxrgidNH58Ynz5w7OXlububMZPFYxs/mF9c/93W7PeU09y/F17OtasUP4ss+fefu9PNZ61764pJ3VWzS8gNEL4efRfN37z29dzkfx9w/EmZSkfwPAAAAVRBz/2iYifwPAAAApRFz/+owE/kfAAAASiPm/rEwk4rkf/1//X/9f/3/kvX/swd+dkj/v8Iq1f9fs9J71//vSv9f/1//X/+fnuq3/n/M/WuyrJL5HwAAAKog5v61YSbyPwAAAJRGzP3XhZnI/wAAAFAaMfe/K8ykIvlf/1//X/9f/1//v/3+9f8HU6X6/2+D/n8X+v/6//r/+v/0VL/1/2Puf3eYSUXyPwAAAFRBzP3vCTOR/wEAAKA0Yu6/PsxE/gcAAIDSiLl/XZhJRfK//r/+/7Xu/8d96f/r/+v/L5xV/f/e0f/vTP+/C/1//X/9f/1/eqrf+v8x9783zKQi+R8AAACqIOb+94WZyP8AAABQGjH3vz/MRP4HAACA0oi5/4Ywk4rkf/1//X+//1//X/+//f71/weT/n9n+v9d6P/r/+v/6//TU/3W/4+5/wNhJhXJ/wAAAFAFMfffGGYi/wMAAEBpxNz//8JM5H8AAAAojZj714eZlDj/3zm88Hf9f/1//X/9f/3/9vvX/x9M+v+d6f93of+v/6//r/9PT/Vb/z/m/pvCTEqc/wEAAKBqYu6/OcxE/gcAAIDSiLn//4eZyP8AAABQGjH3bwgzqUj+1//X/9f/1//X/2+/f/3/waT/35n+fxf6//r/+v/6//RUv/X/Y+7/YJhJRfI/AAAAVEHM/beEmcj/AAAAUBox998aZiL/AwAAQGnE3D8eZlKR/K//r/+v/6//r//ffv/6/4NJ/78z/f8u9P/1//X/9f/pqX7r/8fcvzHMpCL5HwAAAKog5v5NYSbyPwAAAJRGzP23hZnI/wAAAFAaMfdvDjOpSP7X/9f/1//X/9f/b79//f/BpP/fmf5/F/r/+v/6//r/9FS/9f9j7v9QmElF8j8AAABUQcz9W8JM5H8AAAAojZj7bw8zkf8BAACgNGLu3xpmUpH8r/+v/6//r/+v/99+//r/g0n/vzP9/y70/69yfz48wGV+rdh/x9+Z/r/+P4v1W/8/5v47wkwqkv8BAACgCmLu3xZmIv8DAABAacTcf2eYifwPAAAApRFz/0SYSUXyv/6//r/+v/7/oPf/a/r/NND/70z/vwv9f7//X/9f/5+e6rf+f8z9d4WZVCT/AwAAQBXE3H93mIn8DwAAAKURc/9kmIn8DwAAAKURc/9UmElF8r/+v/6//r/+/6D3/6/+7/+feKi4RP+/f42mv1W9/7+zy/X6/13o/+v/6//r/9NT/db/j7l/e5hJRfI/AAAAVEHM/TvCTOR/AAAAKI2Y+3eGmcj/AAAAUBox9+8KM6lI/tf/1//X/9f/1/9vv3+//38wVb3/343+fxf6//r/+v/6//RUv/X/Y+6/J8ykIvkfAAAAqiDm/t1hJvI/AAAAlEbM/XvCTOR/AAAAKI2Y+/eGmVQk/+v/6//r/w9y/7+m/6//T4vB7v/XV5X+f7v+f6T/r//fz8ev/6//z2L91v+PuX9fmElF8j8AAABUQcz9Hw4zkf8BAACgNGLu/7kwE/kfAAAASiPm/p8PM6lI/r/6/f92zfiC/r/+v/6/3/+v/6//32uD3f/3+//9/n/9/0E+fv1//X8W67f+f8z9+8NMKpL/AQAAoApi7v+FMBP5HwAAAEoj5v6PhJnI/wAAAFAaMfcfCDOpSP73+//1//X/9f/1/9vvX/9/MOn/d6b/34X+v/6//r/+Pz3Vb/3/mPs/GmZSkfwPAAAAVRBz/71hJvI/AAAA9J8V/x92hZj7PxZmIv8DAABAacTcf1+YSUXyv/6//r/+/2D2/wP9f/1/Wlzr/v9IuF7/X/9f/1//X/9f/5/F+q3/H3P/x8NMKpL/AQAAoApi7r8/zET+BwAAgNKIuf8TYSYryP+jPT8qAAAAoJdi7n8gzKQi//7fuf+/Wv9/eQ9F/7/l+Pux/18/pWXq/2d+/7/+v/5/W1el/19/kZfk9/9fHl7mhvr/+v/6//3T/x+tfzGs/89g6rf+f8z9vxhmUpH8DwAAAFUQc/+DYSbyPwAAAJRGzP0PhZnI/wAAAFAaMfd/MsykIvm/v37//3yq/er/Fx/r//v9//r/+v/6/ytzrX///6D1//3+/y70//X/+7H/7/f/M8D6rf8fc/+nwkwqkv8BAACgCmLu/6UwE/kfAAAASiPm/k+Hmcj/AAAAUBox9/9ymElF8n9/9f8bjkv/P6f/r/+v/6//r/+/Mvr/nen/d6H/r/+v/6//T0/1W/8/5v6Hw0wqkv8BAACgCmLufyTMRP4HAACA0oi5/9EwE/kfAAAASiPm/sfCTCqS//X/9f/1//X/9f/b71//fzDp/3em/9+F/r/+v/6//j891W/9/5j7Hw8zaRf81iz3UQIAAAD9JOb+z4SZVOTf/wEAAKAKYu7/lTAT+R8AAABKI+b+z4aZVCT/6//r/+v/6//r/9eN6v+XhP5/Z/r/Xej/6//r/+v/01P91v+Puf+JMJOK5H8AAACogpj7fzXMRP4HAACA0oi5/9fCTOR/AAAAKI2Y+389zKQi+V//X/9f/1//X/+//f71/weT/n9n+v9d6P/r/+v/6//TU/3W/4+5/zfCTCqS/wEAAKAKYu5/MsxE/gcAAIDSiLn/YJiJ/A8AAAClEXP/oTCTiuR//X/9f/1//X/9//b71/8fTPr/nen/d6H/r/+v/6//T0/1W/8/5v7DYSYVyf8AAABQBTH3/2aYifwPAAAApRFz/5EwE/kfAAAASiPm/ukwk4rkf/1//X/9f/1//f/2+9f/H0z6/53p/3eh/6//r/+v/09P9Vv/P+b+mTCTiuR/AAAAqIKY+4+Gmcj/AAAAUBox9x8LM5H/AQAAoDRi7n8qzKQi+V//X/9f/1//X/+//f71/wdTCfv/Iyu9j070/7vQ/9f/1//X/6en+q3/H3P/bJhJRfI/AAAAVEHM/Z8LM5H/AQAAoDRi7v98mIn8DwAAAKURc//xMJOK5H/9f/1//X/9f/3/9vvX/x9MJej/35r5/f/6//r/A3n8+v/6/yzWb/3/mPtPhJlUJP8DAABAFcTcfzLMRP4HAACA0oi5/1SYifwPAAAApRFz/+kwk4rkf/1//X/9f/1//f/2+9f/H0wl6P9fWX+9C/3/LvT/9f/1//X/6al+6//H3P90mElF8j8AAABUQcz9Z8JM5H8AAAAojZj758JM5P//Y+8+dj25ijiO/xeWsRcI3sDvwopnYM2GPSIHkzE5J5MzmJxzzjnnnHPOeIHQVBUebk/3jN0zPn3q89mUZenOuZI1i5+srxoAAACmkbv/nnFLk/0/Q/9/7Xk/qP8/6f/1/xvvX1r/f/XF9P/n/TXU/y/T/18Z+v91+v8Nl6n/v/P//nz9/2V0e//++n/9P2eN1v/n7j/3F+JOd6w/qMn+BwAAgA7O7f5rTveKW+x/AAAAmEbu/nvHLfY/AAAAHN11+Q+5++8TtzTZ/zP0/+f/oP7/pP/X/2+87/v/+v+Z6f/X6f83+P6//l//r/9nV6P1/7n77xu3NNn/AAAA0EHu/vvFLfY/AAAATCN3//3jFvsfAAAAppG7/wFxS5P9r//X/+v/9f/6/+X39f/HpP9fp//foP/X/+v/9f/sarT+P3f/A+OWJvsfAAAAOsjd/6C4xf4HAACAaeTuf3DcYv8DAADANHL3Xx+3NNn/+v+L7P+vv3E1ILzy/f/pZv2//l//r//X/591kf39dRf6ef1/0P/r//X/+n/9PzsYrf/P3f+QuKXJ/gcAAIAOcvc/NG6x/wEAAGAaufsfFrfY/wAAADCN3P0Pj1ua7H/9v+//6//1//r/5ff1/8fk+//r9P8b9P/6f/2//p9djdb/5+5/RNzSZP8DAABAB7n7Hxm32P8AAAAwjdz9j4pb7H8AAACYRu7+R8ctTfa//l//r//X/+v/l9/X/x+T/n+d/n+D/l//r//X/7Or0fr/3P03xC1N9j8AAAB0kLv/MXGL/Q8AAADTyN3/2LjF/gcAAIBp5O5/XNzSZP/r/wfp/6899zP6f/2//l//r/+/bfT/6/T/G/T/+n/9v/6fXY3W/+fuf3zc0mT/AwAAQAe5+58Qt9j/AAAAMI3c/U+MW+x/AAAAmEbu/ifFLU32v/5/kP4/fkb/r//X/+v/9f+3jf5/nf5/g/5f/6//1/+zq9H6/9z9T45bmux/AAAA6CB3/1PiFvsfAAAAppG7/6lxi/0PAAAA08jd/7S4pcn+1//r//X/+n/9//L7+v9j0v+v0/9v0P/r//X/+n92NVr/n7v/6XFLk/0PAAAAHeTuf0bcYv8DAADANHL3PzNusf8BAABgGrn7nxW3NNn/+n/9v/5f/6//X35f/39M+v91+v8N+n/9v/5f/8+uRuv/c/c/O25psv8BAACgg9z9z4lb7H8AAACYRu7+G+MW+x8AAACmkbv/uXFLk/2v/9f/6//1//r/5ff1/8ek/1+n/9+g/9f/6//1/+xqtP4/d//z4pYm+x8AAAA6yN3//LjF/gcAAIBp5O5/Qdxi/wMAAMA0cve/MG5psv/1//p//b/+X/+//L7+/5j0/+v0/xv0//p//b/+n12N1v/n7n9R3NJk/wMAAEAHuftfHLfY/wAAADCN3P0viVvsfwAAAJhG7v6Xxi1N9r/+X/+v/x+0/7+D/j/p//X/l0L/v07/v0H/r//X/+v/2dVo/X/u/pfFLU32PwAAAHSQu//lcYv9DwAAANPI3f+KuMX+BwAAgGnk7n9l3NJk/+v/9f/6/0H7f9//L/p//f+l0P+vu7T+/+53vcdd9P/6f/2//l//z603Wv+fu/9VcUuT/Q8AAAAd5O5/ddxi/wMAAMA0cvffFLfY/wAAADCN3P2viVua7H/9v/5f/6//1/8vv6//Pyb9/zrf/9+g/9f/6//1/+xqtP4/d/9r45Ym+x8AAAA6yN3/urjF/gcAAIBp5O5/fdxi/wMAAMA0cve/IW5psv/1//p//b/+X/+//L7+/5j0/+v0/xv0//p//b/+n12N1v/n7n9j3NJk/wMAAEAHufvfFLfY/wAAADCN3P1vjlvsfwAAAJhG7v63xC1N9r/+X/+v/9f/6/+X39f/H5P+f53+f4P+X/+v/7+V/f9Vp5P+nwWj9f+5+98atzTZ/wAAANBB7v63xS32PwAAAEwjd//b4xb7HwAAAKaRu/8dcUuT/a//1//r//X/+v/l9/X/x6T/X6f/36D/1//r/33/n12N1v/n7n9n3NJk/wMAAEAHufvfFbfY/wAAADCN3P3vjlvsfwAAAJhG7v73xC1N9r/+X/8/Xf9/w91OJ/3/6vv6f/3/zPT/6/T/G/T/+n/9v/6fXY3W/+fuf2/c0mT/AwAAQAe5+98Xt9j/AAAAMI3c/e+PW+x/AAAAmEbu/g/ELU32v/5f/z9d/+/7//p//X9r+v91+v8N+n/9v/5f/8+uRuv/c/d/MG5psv8BAACgg9z9H4pb7H8AAACYRu7+D8ct9j8AAABMI3f/R+KWJvtf/6//1//r//X/y+/r/49J/79O/7/hSvb/t/jX+v993N6/v/5f/89Zo/X/ufs/Grc02f8AAADQQe7+j8Ut9j8AAABMI3f/x+MW+x8AAACmkbv/E3FLk/2v/9f/6//1//r/5ff1/8ek/1+n/9/g+//6f/2//p9djdb/5+7/ZNzSZP8DAABAB7n7PxW32P8AAAAwjdz9n45b7H8AAACYRu7+z8QtTfa//l//r//X/+v/l9/X/x+T/n+d/n+D/l//r//X/7Or0fr/3P2fjVua7H8AAADoIHf/5+IW+x8AAACmkbv/83GL/Q8AAADTyN3/hbilyf7X/+v/b9HPX33S/+v/9f/6/4PT/6/T/2/Q/+v/9f/6f3Y1Wv+fu/+LcUuT/Q8AAAAd5O7/Utxi/wMAAMA0cvd/OW6x/wEAAGAaufu/Erc02f/6f/2/7//r//X/y+/r/49J/79O/79B/6//1//r/9nVaP1/7v6vxi1N9j8AAAB0kLv/a3GL/Q8AAADTyN3/9bjF/gcAAIBp5O7/RtzSZP/r//X/+n/9v/5/+X39/zHp/9fp/zfo//X/+n/9P7sarf/P3f/NuKXJ/gcAAIAOcvd/K26x/wEAAGAaufu/HbfY/wAAADCN3P3fiVua7H/9v/5f/6//1/8vv6//Pyb9/zr9/wb9v/5f/6//Z1ej9f+5+78btzTZ/wAAANBB7v7vxS32PwAAAEwjd//34xb7HwAAAKaRu/8HcUuT/a//1//r//X/+v/l9/X/x6T/X6f/33Co/v8a/f9gv7/+X//PWaP1/7n7fxi3NNn/AAAA0EHu/h/FLfY/AAAATCN3/4/jFvsfAAAAppG7/ydxS5P9r/+fuP//739S/b/+X/+v/29G/79O/7/hUP2/7/+P9vvr//X/nDVa/5+7/6dxS5P9DwAAAB3k7v9Z3GL/AwAAwDRy9/88brH/AQAAYBq5+38RtzTZ//r/ift/3//X/1/gff2//n9m+v91+v8N+n/9v/5f/8+uRuv/c/f/Mm5psv8BAACgg9z9v4pb7H8AAACYRu7+X8ct9j8AAABMI3f/b+KWJvtf/6//1//r//X/y+/r/49J/79O/79B/6//1//r/9nVaP1/7v7fxi1N9j8AAAB0kLv/d3GL/Q8AAADTyN3/+7jF/gcAAIBp5O7/Q9zSZP/r//X/+n/9v/5/+X39/zHp/9fp/zfo//X/+n/9P7sarf/P3f/HuKXJ/gcAAIAOcvf/KW6x/wEAAGAaufv/HLfY/wAAADCN3P1/iVsudv/fdDl+qytH/z9//3/L361n/3+V/v//3tf/6/9npv9fp/+/0MPxkP7/XD9/0v/r//X/7GO0/j93/1/jFv//HwAAAKaRu/9vcYv9DwAAANPI3f/3uMX+BwAAgGnk7v9H3NJk/+v/5+//ff/f9//1//r/TvT/6/T/G/T/vv+v/9f/s6vR+v/c/f+MW5rsfwAAAOggd/+/4hb7HwAAAKaRu//fcYv9DwAAANPI3X9z3NJk/+v/9f/6f/2//n/5ff3/Men/1+n/N+j/9f/6f/0/uxqt/8/d/58AAAD//yHfefk=")

313.550421ms ago: executing program 3 (id=5413):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000040)=ANY=[@ANYBLOB="c4000000130001000000000000000000fe8000000000000000000000000000aa00000000000000000000ffffe000000200000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="001000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000004000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00100008"], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0)

313.336484ms ago: executing program 2 (id=5414):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000002c0)=&(0x7f0000000180))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

313.202959ms ago: executing program 3 (id=5415):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8a}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70)

313.124122ms ago: executing program 2 (id=5416):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

250.962394ms ago: executing program 3 (id=5417):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000001c0)={0x0, 0x7}, 0x2)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x20200, 0x41)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
writev(r0, &(0x7f0000000480)=[{&(0x7f0000002640)="91eb51a7914356", 0x7}], 0x1)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c)

184.892823ms ago: executing program 2 (id=5418):
socket$netlink(0x10, 0x3, 0xb)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000340)={0x1, [<r1=>0x0]}, &(0x7f0000000380)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000003c0)={r1, 0x4}, &(0x7f0000000400)=0x8)
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000540)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@sys_tz}, {@zero_size_dir}, {@fmask={'fmask', 0x3d, 0x6}}, {@sys_tz}, {@keep_last_dots}, {@fmask={'fmask', 0x3d, 0x3c}}, {@gid}, {@umask={'umask', 0x3d, 0x1}}]}, 0x1, 0x1541, &(0x7f00000034c0)="$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")
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r2 = open(&(0x7f00000000c0)='.\x00', 0x800, 0x50)
getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0xb)
sendmsg$nl_route(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mount$9p_unix(0x0, 0x0, 0x0, 0x802ca2, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xe8c}, 0x2a, 0xfffffffffffffff9)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0xa}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000091}, 0x2000800c)
mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='acl,fsc=u'])
openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x141842, 0x0)
openat(r2, &(0x7f0000000040)='./file1\x00', 0x111080, 0x16)
r6 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40088a01, &(0x7f0000000040)=0x80000000)
openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2)

184.433147ms ago: executing program 3 (id=5419):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000080)={[{@nombcache}, {@dioread_lock}, {@nodiscard}, {@nomblk_io_submit}, {@noblock_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f00000010c0)="$eJzs3M1vFGUYAPBnZtsiX7YifvChVtHY+NHSgsrBgxpNPGhiogc81rYQZKGG1kQI0WoMHg2Jd+PRxL/Ak16MejLxqndDQgwX0NOa2Z1pt8t2ocu2g+zvlwy873z0fZ6deXffmbfbAPrWaPZPErEjIv6IiOFGdfUOo43/rl05P/PPlfMzSdRqb/+d1Pe7euX8TLFrcdz2vDKWRqSfJ7GvTbsLZ8+dnK5W587k9YnFUx9MLJw99+yJU9PH547PnZ46cuTwockXnp96rid5ZjFd3fvx/P49r7978c2Zoxff++W7pMi/JY9VlrpucrTTxidqta5/8O1oZ1M5GSgxENalEhHZ6Rqs9//hqMTKyRuO1z4rNThgQ9Vqtdr2tTcv1YA7WBJlRwCUo/igz+5/i2WThh63hcsvN26Asryv5Utjy0Ck+T6DLfe3vTQaEUeX/v06W6LTcwgAgB75IRv/PNNu/JfG/U373Z3PDY1ExD0RsSsi7o2I3RFxX0R93wci4sF1tt86SXL9+Ce91FViNykb/72Yz22tHv8Vo78YqeS1nfX8B5NjJ6pzB/PXZCwGt2T1yQ5t/Pjq71+uta15/JctWfvFWDCP49LAltXHzE4vTt9Kzs0ufxqxd6Bd/snyTEASEXsiYm+XbZx46tv9a227cf4d9GCeqfZNxJON878ULfkXks7zkxN3RXXu4ERxVVzv198uvLVW+7eUfw9k539b2+t/Of+RpHm+dmH9bVz484s172m6vf6Hknfq5aF83UfTi4tnJiOGkjcaQTevn1o5tqgX+2f5jx1o3/93xcorsS8isov4oYh4OCIeyWN/NCIei4gDHfL/+ZXH3+8+/42V5T+7rvO/UhiK1jXtC5WTP32/qtGR9eSfnf/D9dJYvuZm3v9uJq7urmYAAAD4/0kjYkck6fhyOU3Hxxu/L787tqXV+YXFp4/Nf3h6tvEdgZEYTIsnXcNNz0Mn89v6oj7VUj+UPzf+qrK1Xh+fma/Olp089Lnta/T/zF+VsqMDNpzva0H/0v+hf+n/0L/0f+hfbfr/1jLiADZfu8//T0qIA9h8Lf1/edrvpRJiATaX+3/oX/o/9C/9H/rSwta48ZfkFTagUPx9hXLDqES3h0da/mt4xxQG84vhdonn5HS1xDclAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHvovAAD//+qG390=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000001c0)='2', 0x1, 0x8000c61)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0)
pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x1fff8, 0x100000002})

180.187211ms ago: executing program 2 (id=5420):
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0xc0041)
r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000340)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)

143.690497ms ago: executing program 3 (id=5421):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000008940)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
fallocate(r0, 0x0, 0x7351, 0x8001)
ioctl$FITRIM(r0, 0x40406f06, &(0x7f0000000400)={0x6, 0x6, 0x100})

69.456685ms ago: executing program 6 (id=5422):
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)

69.283215ms ago: executing program 6 (id=5423):
sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x24008040)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0)

108.06µs ago: executing program 2 (id=5424):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={0x0}}, 0x0)
recvmmsg$unix(r1, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001600)=""/4086, 0x10b8c}], 0x1}}], 0x1, 0x0, 0x0)

0s ago: executing program 2 (id=5425):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=@allocspi={0x100, 0x16, 0x1, 0x70bd2a, 0x25dfdbfc, {{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@multicast2, 0x4e24, 0x0, 0x4e21, 0x1, 0xa, 0x0, 0x20, 0x2c}, {@in=@loopback, 0x4d2, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x38}, {0x7, 0x8, 0x2, 0x3, 0x40, 0x2, 0x77, 0x7fffffffffffffff}, {0x4, 0x2, 0x8, 0x7fffffff}, {0x4, 0x2}, 0x70bd25, 0x3505, 0xa, 0x4, 0xac}, 0x2, 0x9}, [@tfcpad={0x8, 0x28, 0xeb88}]}, 0x100}}, 0x10)

kernel console output (not intermixed with test programs):

  205.352913][ T3559] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.362929][T15480] 8021q: adding VLAN 0 to HW filter on device team0
[  205.377020][ T3559] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.379793][ T3559] bridge0: port 1(bridge_slave_0) entered forwarding state
[  205.382735][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.385153][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state
[  205.446642][T15480] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.476491][ T5912] usb 4-1: Using ep0 maxpacket: 32
[  205.480971][ T5912] usb 4-1: config 0 interface 0 has no altsetting 0
[  205.490001][ T5912] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  205.493243][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.502315][ T5912] usb 4-1: Product: syz
[  205.504092][ T5912] usb 4-1: Manufacturer: syz
[  205.505968][ T5912] usb 4-1: SerialNumber: syz
[  205.508534][ T5912] usb 4-1: config 0 descriptor??
[  205.576908][T15480] veth0_vlan: entered promiscuous mode
[  205.584568][T15480] veth1_vlan: entered promiscuous mode
[  205.601958][T15480] veth0_macvtap: entered promiscuous mode
[  205.606595][T15480] veth1_macvtap: entered promiscuous mode
[  205.616547][T15480] batman_adv: batadv0: Interface activated: batadv_slave_0
[  205.626886][T15480] batman_adv: batadv0: Interface activated: batadv_slave_1
[  205.633186][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  205.643831][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  205.653491][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  205.663844][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.692797][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.699981][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.713586][ T3559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.716867][ T3559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.915624][ T5912] gs_usb 4-1:0.0: Configuring for 1 interfaces
[  205.994088][ T5884] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  206.113683][   T54] Bluetooth: hci1: command tx timeout
[  206.143839][ T5884] usb 6-1: Using ep0 maxpacket: 32
[  206.149712][ T5884] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  206.155914][ T5884] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[  206.159956][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.175530][ T5884] usb 6-1: config 0 descriptor??
[  206.205366][ T5912] gs_usb 4-1:0.0: Couldn't register candev for channel 0 (-EINVAL)
[  206.208964][ T5912] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22
[  206.410828][ T5912] usb 4-1: USB disconnect, device number 22
[  206.586750][ T5884] zydacron 0003:13EC:0006.0010: unknown main item tag 0x0
[  206.589475][ T5884] zydacron 0003:13EC:0006.0010: unknown main item tag 0x0
[  206.592451][ T5884] zydacron 0003:13EC:0006.0010: unknown main item tag 0x0
[  206.596658][ T5884] zydacron 0003:13EC:0006.0010: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.5-1/input0
[  206.788353][ T7995] usb 6-1: USB disconnect, device number 2
[  206.980919][T15934] loop3: detected capacity change from 0 to 256
[  207.175839][T15964] erspan1: entered promiscuous mode
[  207.177767][T15964] erspan1: entered allmulticast mode
[  207.559876][T15977] loop5: detected capacity change from 0 to 764
[  207.569233][T15977] rock: directory entry would overflow storage
[  207.576518][T15977] rock: sig=0x5245, size=8, remaining=5
[  207.866005][T15990] loop5: detected capacity change from 0 to 1024
[  207.919959][ T1090] hfsplus: b-tree write err: -5, ino 4
[  207.947863][T15995] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  207.984611][T15997] loop5: detected capacity change from 0 to 1764
[  208.164357][   T54] Bluetooth: hci1: command tx timeout
[  208.553575][T16036] loop5: detected capacity change from 0 to 32768
[  208.559039][T16036] bcachefs (/dev/loop5): error validating superblock: Invalid superblock section journal_v2: journal bucket 9 before first bucket 256
[  208.559039][T16036] journal_v2 (size 40):
[  208.559039][T16036] Buckets:  9-16 24-25
[  208.559039][T16036] 
[  208.568656][T16036] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal
[  208.652551][T16041] loop5: detected capacity change from 0 to 256
[  208.655841][T16041] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  208.659824][T16041] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  208.662953][T16041] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  208.665547][T16041] UDF-fs: Scanning with blocksize 512 failed
[  208.668112][T16041] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  208.672241][T16041] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  208.741986][T16048] loop5: detected capacity change from 0 to 4096
[  208.753473][T16050] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  208.763950][   T33] audit: type=1800 audit(1756145934.316:424): pid=16048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2557" name="file1" dev="loop5" ino=15 res=0 errno=0
[  208.773531][T16048] NILFS error (device loop5): nilfs_readdir: zero-length directory entry
[  208.777611][T16048] Remounting filesystem read-only
[  208.835950][   T33] audit: type=1326 audit(1756145934.386:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16055 comm="syz.5.2559" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831ad8ebe9 code=0x7ffc0000
[  208.846570][   T33] audit: type=1326 audit(1756145934.386:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16055 comm="syz.5.2559" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831ad8ebe9 code=0x7ffc0000
[  208.855829][   T33] audit: type=1326 audit(1756145934.396:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16055 comm="syz.5.2559" exe="/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f831ad8ebe9 code=0x7ffc0000
[  208.865281][   T33] audit: type=1326 audit(1756145934.396:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16055 comm="syz.5.2559" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831ad8ebe9 code=0x7ffc0000
[  208.876813][   T33] audit: type=1326 audit(1756145934.396:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16055 comm="syz.5.2559" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831ad8ebe9 code=0x7ffc0000
[  208.887309][   T33] audit: type=1326 audit(1756145934.396:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16055 comm="syz.5.2559" exe="/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f831ad8ebe9 code=0x7ffc0000
[  208.897038][   T33] audit: type=1326 audit(1756145934.396:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16055 comm="syz.5.2559" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831ad8ebe9 code=0x7ffc0000
[  208.910934][   T33] audit: type=1326 audit(1756145934.396:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16055 comm="syz.5.2559" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831ad8ebe9 code=0x7ffc0000
[  209.029814][T16073] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2567'.
[  209.034267][T16073] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2567'.
[  209.069684][T16075] loop3: detected capacity change from 0 to 256
[  209.365688][T16086] loop5: detected capacity change from 0 to 32768
[  209.373189][T16086] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  209.384440][T16086] XFS (loop5): Ending clean mount
[  209.403940][T15480] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  209.743716][ T5912] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  209.895582][ T5912] usb 6-1: config 0 has an invalid interface number: 120 but max is 0
[  209.899276][ T5912] usb 6-1: config 0 has no interface number 0
[  209.901852][ T5912] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  209.907460][ T5912] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  209.911229][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.916293][ T5912] usb 6-1: config 0 descriptor??
[  209.921672][ T5912] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.120/input/input15
[  209.976470][   T33] audit: type=1326 audit(1756145935.526:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16114 comm="syz.3.2575" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe39c18ebe9 code=0x7ffc0000
[  210.104414][T16117] loop3: detected capacity change from 0 to 40427
[  210.108629][T16117] F2FS-fs (loop3): Wrong segment_count / block_count (31 > 0)
[  210.111848][T16117] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  210.115801][T16117] F2FS-fs (loop3): invalid crc value
[  210.123238][ T5891] usb 6-1: USB disconnect, device number 3
[  210.140338][T16117] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  210.144279][T16117] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  210.146666][T16117] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  210.234959][   T54] Bluetooth: hci1: command tx timeout
[  211.554304][T16169] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2593'.
[  211.558163][T16169] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2593'.
[  211.561920][T16169] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2593'.
[  211.566547][T16169] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2593'.
[  212.186760][T16199] fuse: Bad value for 'fd'
[  212.230433][T16205] netlink: 'syz.3.2607': attribute type 1 has an invalid length.
[  212.314572][   T54] Bluetooth: hci1: command tx timeout
[  212.319716][T16227] No source specified
[  213.249869][T16259] openvswitch: netlink: IP tunnel dst address not specified
[  213.800872][T16287] bridge3: entered allmulticast mode
[  216.074146][ T5884] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  216.225699][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  216.229885][ T5884] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  216.234795][ T5884] usb 6-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00
[  216.238680][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.243403][ T5884] usb 6-1: config 0 descriptor??
[  216.528646][   T33] kauditd_printk_skb: 4 callbacks suppressed
[  216.528661][   T33] audit: type=1326 audit(1756145942.076:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16361 comm="syz.2.2670" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea70b8ebe9 code=0x7ffc0000
[  216.541646][   T33] audit: type=1326 audit(1756145942.076:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16361 comm="syz.2.2670" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea70b8ebe9 code=0x7ffc0000
[  216.551785][   T33] audit: type=1326 audit(1756145942.086:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16361 comm="syz.2.2670" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fea70b8ebe9 code=0x7ffc0000
[  216.571146][   T33] audit: type=1326 audit(1756145942.086:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16361 comm="syz.2.2670" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea70b8ebe9 code=0x7ffc0000
[  216.580707][   T33] audit: type=1326 audit(1756145942.086:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16361 comm="syz.2.2670" exe="/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fea70b8ebe9 code=0x7ffc0000
[  216.590108][   T33] audit: type=1326 audit(1756145942.086:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16361 comm="syz.2.2670" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea70b8ebe9 code=0x7ffc0000
[  216.613424][T16366] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.2672'.
[  216.654651][ T5884] kye 0003:0458:4018.0011: unknown main item tag 0x0
[  216.657815][ T5884] kye 0003:0458:4018.0011: unknown main item tag 0x0
[  216.660714][ T5884] kye 0003:0458:4018.0011: unknown main item tag 0x0
[  216.663545][ T5884] kye 0003:0458:4018.0011: unknown main item tag 0x0
[  216.667677][ T5884] kye 0003:0458:4018.0011: unknown main item tag 0x0
[  216.670517][ T5884] kye 0003:0458:4018.0011: unknown main item tag 0x0
[  216.673229][ T5884] kye 0003:0458:4018.0011: unknown main item tag 0x0
[  216.677941][ T5884] kye 0003:0458:4018.0011: hidraw0: USB HID v0.00 Device [HID 0458:4018] on usb-dummy_hcd.5-1/input0
[  216.701235][T16379] netlink: 'syz.2.2676': attribute type 4 has an invalid length.
[  216.807954][T16389] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2680'.
[  216.858923][ T5884] usb 6-1: USB disconnect, device number 4
[  216.953283][T16413] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  216.968962][T16415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2688'.
[  216.973310][T16415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2688'.
[  217.432045][T16436] loop5: detected capacity change from 0 to 256
[  217.438521][T16436] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  217.442985][T16436] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  217.449605][T16436] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  217.481699][T16441] use of bytesused == 0 is deprecated and will be removed in the future,
[  217.485684][T16441] use the actual size instead.
[  217.704598][T16457] loop5: detected capacity change from 0 to 32768
[  217.709835][T16457] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  217.730534][T16457] XFS (loop5): Ending clean mount
[  217.887453][T16470] dvmrp0: entered allmulticast mode
[  217.890083][T15480] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  217.896235][T16470] dvmrp0: left allmulticast mode
[  218.289475][T16492] batman_adv: batadv0: Adding interface: dummy0
[  218.291917][T16492] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.301837][T16492] batman_adv: batadv0: Interface activated: dummy0
[  218.312064][T16492] batadv0: mtu less than device minimum
[  218.315772][T16492] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  218.320201][T16492] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  218.324138][T16492] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  218.328003][T16492] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  218.332237][T16492] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  218.337025][T16492] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  218.341680][T16492] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  218.346548][T16492] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  218.351387][T16492] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  218.526460][ T1091] Bluetooth: hci3: Frame reassembly failed (-84)
[  218.528658][ T1091] Bluetooth: hci3: Frame reassembly failed (-84)
[  218.530960][ T1090] Bluetooth: hci3: Frame reassembly failed (-84)
[  219.770017][T16523] dvmrp8: entered allmulticast mode
[  219.774698][T16523] dvmrp8: left allmulticast mode
[  220.080307][T16543] bpf: Bad value for 'mode'
[  220.108821][ T5852] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11
[  220.563706][   T54] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  221.116893][ T5912] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  221.289785][ T5912] usb 6-1: config 0 has an invalid interface number: 64 but max is 0
[  221.297183][ T5912] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  221.305989][ T5912] usb 6-1: config 0 has no interface number 0
[  221.315890][ T5912] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  221.321432][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.328346][ T5912] usb 6-1: Product: syz
[  221.329738][ T5912] usb 6-1: Manufacturer: syz
[  221.334204][ T5912] usb 6-1: SerialNumber: syz
[  221.338344][ T5912] usb 6-1: config 0 descriptor??
[  221.344530][ T5912] usb 6-1: Found UVC 0.00 device syz (046d:0823)
[  221.346676][ T5912] usb 6-1: No valid video chain found.
[  221.361607][T16597] netlink: 372 bytes leftover after parsing attributes in process `syz.2.2747'.
[  221.550566][ T5891] usb 6-1: USB disconnect, device number 5
[  221.956667][   T33] audit: type=1326 audit(1756145947.506:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16618 comm="syz.3.2754" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe39c18ebe9 code=0x0
[  222.356524][ T5912] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  222.503854][ T5912] usb 6-1: Using ep0 maxpacket: 16
[  222.509014][ T5912] usb 6-1: config 0 has an invalid interface number: 214 but max is 0
[  222.514000][ T5912] usb 6-1: config 0 has no interface number 0
[  222.521660][ T5912] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  222.526410][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.530365][ T5912] usb 6-1: Product: syz
[  222.531992][ T5912] usb 6-1: Manufacturer: syz
[  222.539102][ T5912] usb 6-1: SerialNumber: syz
[  222.541651][ T5912] usb 6-1: config 0 descriptor??
[  222.746142][ T5912] usb 6-1: USB disconnect, device number 6
[  223.284157][T16711] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2776'.
[  223.329274][T16717] netlink: 'syz.2.2779': attribute type 6 has an invalid length.
[  223.333139][T16717] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2779'.
[  223.362126][T16724] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2782'.
[  223.615308][ T7995] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  223.814068][ T7995] usb 6-1: Using ep0 maxpacket: 16
[  223.817556][ T7995] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[  223.820637][ T7995] usb 6-1: config 0 has no interface number 0
[  223.822558][ T7995] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  223.826399][ T7995] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  223.830331][ T7995] usb 6-1: config 0 interface 41 has no altsetting 0
[  223.834148][ T7995] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  223.838165][ T7995] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.840882][ T7995] usb 6-1: Product: syz
[  223.842239][ T7995] usb 6-1: Manufacturer: syz
[  223.844893][ T7995] usb 6-1: SerialNumber: syz
[  223.847311][ T7995] usb 6-1: config 0 descriptor??
[  223.849638][T16721] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  223.852862][T16721] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  223.882480][T16746] 9p: Unknown access argument 18446744073709551615: -34
[  224.057900][ T7995] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71
[  224.064347][ T7995] usb 6-1: USB disconnect, device number 7
[  224.692656][T16792] net_ratelimit: 10 callbacks suppressed
[  224.692667][T16792] openvswitch: netlink: Message has 4 unknown bytes.
[  225.075608][T16803] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  225.094997][T16805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2813'.
[  225.098037][T16805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2813'.
[  225.571947][T16827] netlink: 'syz.3.2823': attribute type 1 has an invalid length.
[  225.668305][   T33] audit: type=1326 audit(1756145951.216:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16821 comm="syz.2.2821" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea70b8ebe9 code=0x7ffc0000
[  225.690020][   T33] audit: type=1326 audit(1756145951.216:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16821 comm="syz.2.2821" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea70b8ebe9 code=0x7ffc0000
[  225.712444][   T33] audit: type=1326 audit(1756145951.216:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16821 comm="syz.2.2821" exe="/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fea70b8ebe9 code=0x7ffc0000
[  225.726711][   T33] audit: type=1326 audit(1756145951.216:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16821 comm="syz.2.2821" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea70b8ebe9 code=0x7ffc0000
[  225.738709][   T33] audit: type=1326 audit(1756145951.216:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16821 comm="syz.2.2821" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea70b8ebe9 code=0x7ffc0000
[  225.767828][   T33] audit: type=1326 audit(1756145951.216:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16821 comm="syz.2.2821" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fea70b8ebe9 code=0x7ffc0000
[  225.786717][   T33] audit: type=1326 audit(1756145951.216:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16821 comm="syz.2.2821" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea70b8ebe9 code=0x7ffc0000
[  225.806080][   T33] audit: type=1326 audit(1756145951.216:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16821 comm="syz.2.2821" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea70b8ebe9 code=0x7ffc0000
[  226.706588][T16855] netlink: 'syz.3.2836': attribute type 5 has an invalid length.
[  226.721639][T16857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2837'.
[  226.772863][T16851] loop5: detected capacity change from 0 to 32768
[  226.832484][T16851] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  226.832508][T16851]   allowing incompatible features above 0.0: (unknown version)
[  226.832516][T16851]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  226.848616][T16851] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  226.851382][T16851] bcachefs (loop5): initializing new filesystem
[  226.858707][T16851] bcachefs (loop5): going read-write
[  226.872466][T16851] bcachefs (loop5): marking superblocks
[  226.877209][T16851] bcachefs (loop5): initializing freespace
[  226.880927][T16851] bcachefs (loop5): done initializing freespace
[  226.884669][T16851] bcachefs (loop5): reading snapshots table
[  226.887090][T16851] bcachefs (loop5): reading snapshots done
[  226.895264][T16851] bcachefs (loop5): done starting filesystem
[  227.565193][T15480] bcachefs (loop5): shutting down
[  227.567323][T15480] bcachefs (loop5): going read-only
[  227.569301][T15480] bcachefs (loop5): finished waiting for writes to stop
[  227.572002][T15480] bcachefs (loop5): flushing journal and stopping allocators, journal seq 2
[  227.590575][T15480] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3
[  227.594448][T15480] bcachefs (loop5): clean shutdown complete, journal seq 4
[  227.597226][T15480] bcachefs (loop5): marking filesystem clean
[  227.604881][T15480] bcachefs (loop5): shutdown complete
[  228.802568][T16953] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2869'.
[  228.808118][T16953] sock: sock_set_timeout: `syz.3.2869' (pid 16953) tries to set negative timeout
[  228.895208][ T5884] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  229.043863][ T5884] usb 6-1: Using ep0 maxpacket: 16
[  229.049422][ T5884] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[  229.052132][ T5884] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  229.055869][ T5884] usb 6-1: config 0 has no interface number 0
[  229.059690][ T5884] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  229.062642][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.066179][ T5884] usb 6-1: Product: syz
[  229.067680][ T5884] usb 6-1: Manufacturer: syz
[  229.069369][ T5884] usb 6-1: SerialNumber: syz
[  229.071933][ T5884] usb 6-1: config 0 descriptor??
[  229.076410][ T5884] usb 6-1: Found UVC 0.00 device syz (046d:08f3)
[  229.079130][ T5884] usb 6-1: No valid video chain found.
[  229.276857][ T5313] usb 6-1: USB disconnect, device number 8
[  230.053836][ T5313] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  230.216598][ T5313] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  230.220246][ T5313] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  230.224565][ T5313] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  230.228957][ T5313] usb 6-1: config 220 has no interface number 2
[  230.231634][ T5313] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  230.237667][ T5313] usb 6-1: config 220 interface 0 has no altsetting 0
[  230.240545][ T5313] usb 6-1: config 220 interface 76 has no altsetting 0
[  230.243486][ T5313] usb 6-1: config 220 interface 1 has no altsetting 0
[  230.249648][ T5313] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  230.253686][ T5313] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.257282][ T5313] usb 6-1: Product: syz
[  230.259049][ T5313] usb 6-1: Manufacturer: syz
[  230.260997][ T5313] usb 6-1: SerialNumber: syz
[  230.470321][ T5313] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  230.472567][ T5313] usb 6-1: No valid video chain found.
[  230.474798][ T5313] usb 6-1: selecting invalid altsetting 0
[  230.479510][ T5313] usb 6-1: selecting invalid altsetting 0
[  230.481803][ T5313] usbtest 6-1:220.1: probe with driver usbtest failed with error -22
[  230.486158][ T5313] usb 6-1: USB disconnect, device number 9
[  230.768806][T17039] 9pnet_fd: Insufficient options for proto=fd
[  231.332083][T17057] netlink: 'syz.5.2905': attribute type 29 has an invalid length.
[  231.336585][T17057] netlink: 'syz.5.2905': attribute type 29 has an invalid length.
[  232.463992][T17129] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  232.630873][T17143] loop5: detected capacity change from 0 to 32768
[  232.638361][T17143] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  232.647348][T17143] XFS (loop5): Ending clean mount
[  232.649773][T17143] XFS (loop5): Quotacheck needed: Please wait.
[  232.655216][T17143] XFS (loop5): Quotacheck: Done.
[  232.776925][T15480] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  233.007634][T17172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2948'.
[  233.155283][ T5912] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  233.381413][T17188] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  233.385065][T17188] IPv6: NLM_F_CREATE should be set when creating new route
[  233.695705][ T5912] usb 6-1: config index 0 descriptor too short (expected 45, got 36)
[  233.699562][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  233.704723][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  233.709479][ T5912] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  233.715179][ T5912] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  233.719136][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.724265][ T5912] usb 6-1: config 0 descriptor??
[  233.727010][T17167] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  234.135888][ T5912] plantronics 0003:047F:FFFF.0012: reserved main item tag 0xd
[  234.140638][ T5912] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  234.395076][ T5912] usb 6-1: USB disconnect, device number 10
[  235.010161][T17286] loop5: detected capacity change from 0 to 32768
[  235.012934][T17286] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2991 (17286)
[  235.019666][T17286] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  235.022983][T17286] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  235.033295][T17286] BTRFS info (device loop5): enabling ssd optimizations
[  235.035767][T17286] BTRFS info (device loop5): enabling free space tree
[  235.047542][T15480] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  235.167558][T17312] loop5: detected capacity change from 0 to 2048
[  235.189483][T17315] hsr0: entered promiscuous mode
[  235.192250][T17315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2995'.
[  235.198467][T17315] hsr_slave_0: left promiscuous mode
[  235.201349][T17315] hsr_slave_1: left promiscuous mode
[  235.211240][T17315] hsr0 (unregistering): left promiscuous mode
[  235.393338][T17332] loop5: detected capacity change from 0 to 32768
[  235.436452][T17332] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  235.436465][T17332]   allowing incompatible features above 0.0: (unknown version)
[  235.436470][T17332]   features: 
[  235.448525][T17332] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  235.451608][T17332] bcachefs (loop5): initializing new filesystem
[  235.458902][T17332] bcachefs (loop5): going read-write
[  235.462282][T17332] bcachefs (loop5): marking superblocks
[  235.466882][T17332] bcachefs (loop5): initializing freespace
[  235.469881][T17332] bcachefs (loop5): done initializing freespace
[  235.472702][T17332] bcachefs (loop5): reading snapshots table
[  235.475006][T17332] bcachefs (loop5): reading snapshots done
[  235.482210][T17332] bcachefs (loop5): done starting filesystem
[  235.718461][T15480] bcachefs (loop5): shutting down
[  235.720631][T15480] bcachefs (loop5): going read-only
[  235.725119][T15480] bcachefs (loop5): finished waiting for writes to stop
[  235.735901][T15480] bcachefs (loop5): flushing journal and stopping allocators, journal seq 3
[  235.763023][T15480] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 4
[  235.767858][T15480] bcachefs (loop5): clean shutdown complete, journal seq 5
[  235.771028][T15480] bcachefs (loop5): marking filesystem clean
[  235.781416][T15480] bcachefs (loop5): shutdown complete
[  235.977682][T17387] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  235.996083][T17391] openvswitch: netlink: Multiple metadata blocks provided
[  236.011841][T17393] overlayfs: failed to clone upperpath
[  237.363582][T17450] vlan0: entered promiscuous mode
[  238.297361][T17482] loop5: detected capacity change from 0 to 32768
[  238.302600][T17482] JBD2: Ignoring recovery information on journal
[  238.316002][T17482] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  238.334730][T15480] ocfs2: Unmounting device (7,5) on (node local)
[  238.432731][   T33] audit: type=1804 audit(1756145963.976:453): pid=17506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3072" name="/newroot/125/file0" dev="tmpfs" ino=661 res=1 errno=0
[  238.486625][T17509] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3073'.
[  238.489624][T17509] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3073'.
[  238.492701][T17509] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3073'.
[  238.497908][T17509] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3073'.
[  238.501044][T17509] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3073'.
[  238.527522][T17511] cifs: Bad value for 'port'
[  238.559441][T17513] loop5: detected capacity change from 0 to 256
[  238.565298][T17513] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  238.787430][T17524] loop5: detected capacity change from 0 to 32768
[  238.792037][T17524] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  238.800374][T17524] XFS (loop5): Ending clean mount
[  238.815828][T15480] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  238.934164][T17542] loop5: detected capacity change from 0 to 512
[  239.093274][T17551] loop5: detected capacity change from 0 to 32768
[  239.096214][T17551] XFS: noikeep mount option is deprecated.
[  239.100116][T17551] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  239.113449][T17551] XFS (loop5): Ending clean mount
[  239.116444][T17551] XFS (loop5): Quotacheck needed: Please wait.
[  239.121120][T17551] XFS (loop5): Quotacheck: Done.
[  239.201823][T15480] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  239.646661][T17589] netlink: 'syz.3.3096': attribute type 5 has an invalid length.
[  239.650085][T17589] netlink: 'syz.3.3096': attribute type 5 has an invalid length.
[  239.653374][T17589] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3096'.
[  240.194131][T17612] input: syz0 as /devices/virtual/input/input17
[  240.227937][T17618] loop5: detected capacity change from 0 to 1024
[  240.231809][T17618] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  240.237613][T17618] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  240.241265][T17618] EXT4-fs (loop5): orphan cleanup on readonly fs
[  240.244988][T17618] EXT4-fs error (device loop5): ext4_quota_enable:7124: comm syz.5.3107: Bad quota inum: 458752, type: 1
[  240.249656][T17618] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=458752). Please run e2fsck to fix.
[  240.256438][T17618] EXT4-fs (loop5): Cannot turn on quotas: error -117
[  240.259601][T17618] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  240.274587][T15480] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.289467][T17624] loop5: detected capacity change from 0 to 256
[  240.593820][ T5313] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  240.753915][ T5313] usb 6-1: Using ep0 maxpacket: 32
[  240.757783][ T5313] usb 6-1: config 0 has an invalid interface number: 74 but max is 1
[  240.760462][ T5313] usb 6-1: config 0 has no interface number 1
[  240.765348][ T5313] usb 6-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa
[  240.769242][ T5313] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.772724][ T5313] usb 6-1: Product: syz
[  240.774692][ T5313] usb 6-1: Manufacturer: syz
[  240.776830][ T5313] usb 6-1: SerialNumber: syz
[  240.780022][ T5313] usb 6-1: config 0 descriptor??
[  240.795726][ T5313] snd-usb-audio 6-1:0.74: probe with driver snd-usb-audio failed with error -22
[  240.973123][T17660] futex_wake_op: syz.3.3118 tries to shift op by -1; fix this program
[  241.005190][ T5912] usb 6-1: USB disconnect, device number 11
[  241.081484][T17682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3124'.
[  241.100795][T17685] netlink: 'syz.3.3126': attribute type 6 has an invalid length.
[  241.103583][T17685] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3126'.
[  241.775244][T17750] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3149'.
[  241.785204][T17750] comedi comedi1: pcl812: I/O port conflict (0x2f00,16)
[  243.010120][T17772] loop5: detected capacity change from 0 to 4096
[  243.029711][T17781] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  243.034714][T17780] netlink: 'syz.2.3164': attribute type 4 has an invalid length.
[  243.210901][   T33] audit: type=1800 audit(1756145968.756:454): pid=17812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3178" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  243.260576][T17821] loop5: detected capacity change from 0 to 128
[  243.267064][T17821] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  243.272269][T17821] ext4 filesystem being mounted at /157/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  243.297760][T15480] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  243.555530][ T5884] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  243.706203][ T5884] usb 6-1: config 54 has an invalid interface number: 154 but max is 0
[  243.709626][ T5884] usb 6-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config
[  243.715575][ T5884] usb 6-1: config 54 has no interface number 0
[  243.719441][ T5884] usb 6-1: too many endpoints for config 54 interface 154 altsetting 0: 146, using maximum allowed: 30
[  243.725246][ T5884] usb 6-1: config 54 interface 154 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 146
[  243.732837][ T5884] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec
[  243.737209][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.740624][ T5884] usb 6-1: Product: syz
[  243.742522][ T5884] usb 6-1: Manufacturer: syz
[  243.745621][ T5884] usb 6-1: SerialNumber: syz
[  243.751071][ T5884] hub 6-1:54.154: bad descriptor, ignoring hub
[  243.753590][ T5884] hub 6-1:54.154: probe with driver hub failed with error -5
[  243.763049][ T5884] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  243.769057][T17854] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  243.770313][ T5910] usb 6-1: Failed to submit usb control message: -71
[  243.775332][ T5910] usb 6-1: unable to send the bmi data to the device: -71
[  243.778286][ T5910] usb 6-1: unable to get target info from device
[  243.781049][ T5910] usb 6-1: could not get target info (-71)
[  243.783513][ T5910] usb 6-1: could not probe fw (-71)
[  244.064060][ T5313] usb 6-1: USB disconnect, device number 12
[  244.611283][T17908] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3213'.
[  244.620629][T17908] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3213'.
[  244.631003][T17908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3213'.
[  244.658754][T17912] loop5: detected capacity change from 0 to 512
[  244.665100][T17912] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.3216: casefold flag without casefold feature
[  244.670513][T17912] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3216: couldn't read orphan inode 15 (err -117)
[  244.678690][T17912] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  244.700407][T15480] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.920531][   T33] audit: type=1800 audit(1756145970.456:455): pid=17924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3217" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0
[  246.238492][T17955] loop5: detected capacity change from 0 to 32768
[  246.241198][T17955] XFS: attr2 mount option is deprecated.
[  246.266664][T17955] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  246.288491][T17955] XFS (loop5): Ending clean mount
[  246.293476][T17955] XFS (loop5): Quotacheck needed: Please wait.
[  246.301026][T17955] XFS (loop5): Quotacheck: Done.
[  246.327778][T15480] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  246.411441][T17974] veth1_macvtap: left promiscuous mode
[  246.414327][T17974] macsec0: entered promiscuous mode
[  246.949707][T17993] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  246.952807][T17993] batadv0: mtu less than device minimum
[  246.953999][T17994] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3242'.
[  246.956625][T17993] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  246.963375][T17993] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  246.968310][T17993] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  246.972976][T17993] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  246.976981][T17993] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  246.981682][T17993] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  246.986139][T17993] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  246.990808][T17993] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  247.002233][T17993] batadv_slave_0: entered promiscuous mode
[  247.004826][T17993] batadv_slave_0: entered allmulticast mode
[  247.020806][T17998] netlink: 'syz.2.3245': attribute type 2 has an invalid length.
[  247.024498][T17998] netlink: 1184 bytes leftover after parsing attributes in process `syz.2.3245'.
[  247.213182][T18015] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3251'.
[  247.614998][   T27] Bluetooth: hci3: Frame reassembly failed (-84)
[  247.617745][   T27] Bluetooth: hci3: Frame reassembly failed (-84)
[  247.877042][T18029] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3256'.
[  247.957712][T18035] batadv0: entered promiscuous mode
[  248.012940][T18043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3263'.
[  249.365086][T18087] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  249.550201][T18118] netlink: 'syz.3.3298': attribute type 4 has an invalid length.
[  249.557195][ T5313] lo speed is unknown, defaulting to 1000
[  249.559174][ T5313] syz0: Port: 1 Link DOWN
[  249.561808][T18118] netlink: 'syz.3.3298': attribute type 4 has an invalid length.
[  249.566720][ T5891] lo speed is unknown, defaulting to 1000
[  249.570730][ T5891] syz0: Port: 1 Link ACTIVE
[  249.619728][T18130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3304'.
[  249.622778][T18130] netlink: 'syz.2.3304': attribute type 3 has an invalid length.
[  249.674331][ T5844] Bluetooth: hci3: command 0x1003 tx timeout
[  249.675133][ T5852] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  249.730278][T18146] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  249.734755][T18146] overlayfs: missing 'lowerdir'
[  249.816719][T18158] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3316'.
[  250.166543][T18178] net_ratelimit: 13 callbacks suppressed
[  250.166557][T18178] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1)
[  250.198307][T18180] tipc: Resetting bearer <eth:netdevsim0>
[  250.201063][T18180] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3326'.
[  250.205586][T18180] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  250.255163][T18184] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.854768][T18201] loop5: detected capacity change from 0 to 512
[  250.858264][T18201] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  250.873528][T18201] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 546, start 22000003)
[  250.878846][T18201] FAT-fs (loop5): Filesystem has been set read-only
[  250.881851][T18201] FAT-fs (loop5): error, invalid access to FAT (entry 0x22000003)
[  251.164081][ T5891] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  251.293263][T18243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3354'.
[  251.308676][T18243] team0: Port device team_slave_0 removed
[  251.333763][ T5891] usb 6-1: Using ep0 maxpacket: 8
[  251.337147][ T5891] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  251.340661][ T5891] usb 6-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[  251.344198][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.347575][ T5891] usb 6-1: config 0 descriptor??
[  251.555085][ T5891] usb 6-1: USB disconnect, device number 13
[  252.156128][T18290] netlink: 'syz.3.3367': attribute type 15 has an invalid length.
[  252.158822][T18290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3367'.
[  252.162030][T18290] bond0: option resend_igmp: invalid value (65535)
[  252.164891][T18290] bond0: option resend_igmp: allowed values 0 - 255
[  252.323885][ T5912] usb 6-1: new low-speed USB device number 14 using dummy_hcd
[  252.418770][T18310] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  252.423399][T18310] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  252.475426][ T5912] usb 6-1: LPM exit latency is zeroed, disabling LPM.
[  252.487908][ T5912] usb 6-1: config 0 has no interfaces?
[  252.494447][ T5912] usb 6-1: string descriptor 0 read error: -22
[  252.497062][ T5912] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=9a.90
[  252.500767][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.506921][ T5912] usb 6-1: config 0 descriptor??
[  252.765923][ T5891] usb 6-1: USB disconnect, device number 14
[  253.288811][T18351] loop5: detected capacity change from 0 to 64
[  253.291926][T18351] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing
[  253.415976][T18360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3394'.
[  253.419851][T18360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3394'.
[  253.425308][T18360] netlink: 'syz.2.3394': attribute type 18 has an invalid length.
[  253.428746][T18360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3394'.
[  254.203373][T18395] gtp0: entered promiscuous mode
[  254.206941][T18395] gtp0: entered allmulticast mode
[  254.352901][T18410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3415'.
[  254.361760][T18410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3415'.
[  254.409195][T18416] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3417'.
[  254.412326][T18416] (unnamed net_device) (uninitialized): option mode: invalid value (7)
[  254.483446][T18431] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  254.502082][T18435] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3427'.
[  254.529377][T18440] netlink: 'syz.5.3429': attribute type 5 has an invalid length.
[  254.601898][T18452] loop5: detected capacity change from 0 to 1024
[  254.612296][T18452] hfsplus: bad catalog entry type
[  255.436414][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.439075][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  255.514921][   T33] audit: type=1326 audit(1756145981.066:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18471 comm="syz.5.3442" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831ad8ebe9 code=0x7ffc0000
[  255.544219][   T33] audit: type=1326 audit(1756145981.066:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18471 comm="syz.5.3442" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831ad8ebe9 code=0x7ffc0000
[  255.564646][   T33] audit: type=1326 audit(1756145981.066:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18471 comm="syz.5.3442" exe="/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f831ad8ebe9 code=0x7ffc0000
[  255.594300][   T33] audit: type=1326 audit(1756145981.066:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18471 comm="syz.5.3442" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831ad8ebe9 code=0x7ffc0000
[  255.603296][   T33] audit: type=1326 audit(1756145981.066:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18471 comm="syz.5.3442" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831ad8ebe9 code=0x7ffc0000
[  255.633764][   T33] audit: type=1326 audit(1756145981.066:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18471 comm="syz.5.3442" exe="/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f831ad8ebe9 code=0x7ffc0000
[  255.642875][   T33] audit: type=1326 audit(1756145981.066:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18471 comm="syz.5.3442" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831ad8ebe9 code=0x7ffc0000
[  255.664753][   T33] audit: type=1326 audit(1756145981.066:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18471 comm="syz.5.3442" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831ad8ebe9 code=0x7ffc0000
[  255.685236][   T33] audit: type=1326 audit(1756145981.066:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18471 comm="syz.5.3442" exe="/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f831ad8ebe9 code=0x7ffc0000
[  255.705762][   T33] audit: type=1326 audit(1756145981.066:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18471 comm="syz.5.3442" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831ad8ebe9 code=0x7ffc0000
[  255.899545][T18488] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3447'.
[  256.010339][T18499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3453'.
[  256.016380][T18499] ip6gretap0: entered promiscuous mode
[  256.018512][T18499] macvtap1: entered promiscuous mode
[  256.020738][T18499] macvtap1: entered allmulticast mode
[  256.022948][T18499] ip6gretap0: entered allmulticast mode
[  256.174987][T18499] ip6gretap0: left allmulticast mode
[  256.177248][T18499] ip6gretap0: left promiscuous mode
[  256.381571][T18520] netlink: 'syz.2.3461': attribute type 12 has an invalid length.
[  256.386507][T18520] netlink: 'syz.2.3461': attribute type 11 has an invalid length.
[  256.415123][T18522] overlayfs: failed to clone upperpath
[  256.451339][T18524] loop5: detected capacity change from 0 to 4096
[  256.685180][T18536] overlayfs: failed to resolve './file0': -2
[  256.760631][ T5891] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  256.925484][T18563] netlink: 'syz.3.3477': attribute type 1 has an invalid length.
[  256.929823][ T5891] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  256.937095][ T5891] usb 6-1: config 0 interface 0 has no altsetting 0
[  256.944347][ T5891] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  256.945826][T18563] 8021q: adding VLAN 0 to HW filter on device bond2
[  256.948011][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.960888][ T5891] usb 6-1: config 0 descriptor??
[  256.975675][T18563] bond2: (slave gretap1): making interface the new active one
[  256.979036][T18563] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  256.992423][T18563] vlan2: entered allmulticast mode
[  256.994437][T18563] bond2: entered allmulticast mode
[  256.996201][T18563] gretap1: entered allmulticast mode
[  257.000547][T18563] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  257.372774][ T5891] logitech 0003:046D:C29C.0013: hidraw0: USB HID v1.01 Device [HID 046d:c29c] on usb-dummy_hcd.5-1/input0
[  257.588884][T18615] __nla_validate_parse: 2 callbacks suppressed
[  257.588898][T18615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3481'.
[  257.781123][ T5891] logitech 0003:046D:C29C.0013: no inputs found
[  257.787537][ T5891] usb 6-1: USB disconnect, device number 15
[  257.922271][T18659] netlink: 'syz.2.3497': attribute type 3 has an invalid length.
[  258.355315][T18688] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  258.743846][ T5912] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  258.893985][ T5912] usb 6-1: Using ep0 maxpacket: 16
[  258.897686][ T5912] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  258.902032][ T5912] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  258.908115][ T5912] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  258.911631][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.915844][ T5912] usb 6-1: Product: syz
[  258.917669][ T5912] usb 6-1: Manufacturer: syz
[  258.919649][ T5912] usb 6-1: SerialNumber: syz
[  259.227182][T18717] openvswitch: netlink: ct_state flags 0000ffff unsupported
[  259.327878][ T5912] usb 6-1: 0:2 : does not exist
[  259.731733][ T5912] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  259.742671][ T5912] usb 6-1: USB disconnect, device number 16
[  260.561292][T18830] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3565'.
[  260.566464][T18830] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3565'.
[  260.731252][T18834] loop5: detected capacity change from 0 to 40427
[  260.734380][T18834] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  260.737184][T18834] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  260.757913][T18834] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  260.761682][T18834] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  260.764436][T18834] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  261.063315][T18858] loop5: detected capacity change from 0 to 512
[  261.066667][T18858] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  261.071731][T18858] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002]
[  261.075587][T18858] System zones: 1-12
[  261.077350][T18858] EXT4-fs (loop5): orphan cleanup on readonly fs
[  261.080462][T18858] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3573: invalid indirect mapped block 12 (level 1)
[  261.086654][T18858] EXT4-fs (loop5): Remounting filesystem read-only
[  261.089234][T18858] EXT4-fs (loop5): 1 truncate cleaned up
[  261.091468][T18858] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  262.056172][T15480] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  262.484172][   T10] usb 6-1: new full-speed USB device number 17 using dummy_hcd
[  262.635965][   T10] usb 6-1: config 255 has an invalid interface number: 175 but max is 0
[  262.638849][   T10] usb 6-1: config 255 has no interface number 0
[  262.641366][   T10] usb 6-1: config 255 interface 175 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  262.647034][   T10] usb 6-1: New USB device found, idVendor=04bb, idProduct=0930, bcdDevice= e.5d
[  262.650369][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.653093][   T10] usb 6-1: Product: syz
[  262.655248][   T10] usb 6-1: Manufacturer: syz
[  262.657055][   T10] usb 6-1: SerialNumber: syz
[  262.660799][T18888] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  262.663393][T18888] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  262.876597][T18888] tipc: Started in network mode
[  262.878679][T18888] tipc: Node identity 7, cluster identity 4711
[  262.881601][T18888] tipc: Node number set to 7
[  262.886805][   T10] asix 6-1:255.175 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  262.891139][   T10] asix 6-1:255.175: probe with driver asix failed with error -71
[  262.897969][   T10] usb 6-1: USB disconnect, device number 17
[  263.427500][T18931] loop5: detected capacity change from 0 to 512
[  263.437032][T18931] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  263.442056][T18931] ext4 filesystem being mounted at /226/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  263.486849][T15480] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.527767][T18941] loop5: detected capacity change from 0 to 512
[  263.530799][T18941] EXT4-fs: Ignoring removed bh option
[  263.533364][T18941] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  263.538884][T18941] EXT4-fs (loop5): orphan cleanup on readonly fs
[  263.541166][T18941] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #3: comm syz.5.3599: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0)
[  263.547588][T18941] EXT4-fs error (device loop5): ext4_quota_enable:7131: comm syz.5.3599: Bad quota inode: 3, type: 0
[  263.551742][T18941] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  263.557465][T18941] EXT4-fs (loop5): Cannot turn on quotas: error -117
[  263.560397][T18941] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  263.575980][T15480] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.666780][T18955] loop5: detected capacity change from 0 to 512
[  263.669810][T18955] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities
[  263.691889][T18960] program syz.5.3605 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  263.896596][T18984] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1)
[  264.008143][T18993] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.010938][T18993] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.106600][T18993] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  264.118501][T18993] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  264.221321][ T5910] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  264.226529][ T5910] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  264.233593][ T5910] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  264.240072][ T5910] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  264.269004][T18999] loop5: detected capacity change from 0 to 256
[  264.272276][T18999] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  264.276725][T18999] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  264.282683][T18999] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012112, chksum : 0xbf1871ed, utbl_chksum : 0xe619d30d)
[  265.304074][T19018] loop5: detected capacity change from 0 to 32768
[  265.307439][T19018] XFS: noikeep mount option is deprecated.
[  265.312321][T19018] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  265.328197][T19018] XFS (loop5): Ending clean mount
[  265.331368][T19018] XFS (loop5): Quotacheck needed: Please wait.
[  265.341729][T19018] XFS (loop5): Quotacheck: Done.
[  265.382049][T15480] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  265.798080][T19067] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  265.919023][T19065] loop5: detected capacity change from 0 to 32768
[  266.169648][T19108] loop5: detected capacity change from 0 to 8
[  266.180191][T19108] SQUASHFS error: Failed to read block 0x63a: -5
[  266.192693][T19108] SQUASHFS error: Unable to read metadata cache entry [638]
[  266.196808][T19108] SQUASHFS error: Unable to read directory block [26067d:0]
[  266.823517][T19156] netlink: ct family unspecified
[  266.827631][T19156] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  267.059048][T19160] loop5: detected capacity change from 0 to 16
[  267.063138][T19160] erofs (device loop5): mounted with root inode @ nid 36.
[  267.071266][T19160] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36
[  267.076261][T19160] erofs (device loop5): failed to decompress -29 in[58, 4038] out[1851]
[  267.080006][T19160] erofs (device loop5): read error -117 @ 43 of nid 36
[  267.155736][T19164] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36
[  267.159446][T19164] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36
[  267.162948][T19164] erofs (device loop5): readahead error at folio 42 @ nid 36
[  267.166560][T19164] erofs (device loop5): bogus lookback distance 774 @ lcn 40 of nid 36
[  267.171201][T19164] erofs (device loop5): readahead error at folio 41 @ nid 36
[  267.175366][T19164] erofs (device loop5): bogus lookback distance 774 @ lcn 40 of nid 36
[  267.178838][T19164] erofs (device loop5): readahead error at folio 40 @ nid 36
[  267.182577][T19164] erofs (device loop5): readahead error at folio 39 @ nid 36
[  267.186160][T19164] erofs (device loop5): readahead error at folio 38 @ nid 36
[  267.189525][T19164] erofs (device loop5): readahead error at folio 36 @ nid 36
[  267.192783][T19164] erofs (device loop5): bogus lookback distance 1468 @ lcn 31 of nid 36
[  267.197115][T19164] erofs (device loop5): readahead error at folio 31 @ nid 36
[  267.200165][T19164] erofs (device loop5): readahead error at folio 25 @ nid 36
[  267.202663][T19164] erofs (device loop5): readahead error at folio 24 @ nid 36
[  267.207688][T19164] erofs (device loop5): readahead error at folio 19 @ nid 36
[  267.211750][T19165] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36
[  267.216091][T19164] syz.5.3684: attempt to access beyond end of device
[  267.216091][T19164] loop5: rw=524288, sector=784, nr_sectors = 64 limit=16
[  267.221791][T19165] erofs (device loop5): read error -117 @ 43 of nid 36
[  267.225689][T19164] syz.5.3684: attempt to access beyond end of device
[  267.225689][T19164] loop5: rw=524288, sector=13478624080, nr_sectors = 24 limit=16
[  267.231044][T19164] syz.5.3684: attempt to access beyond end of device
[  267.231044][T19164] loop5: rw=524288, sector=13478624032, nr_sectors = 48 limit=16
[  267.236857][T19164] erofs (device loop5): failed to decompress -29 in[58, 4038] out[2639]
[  267.239882][T19164] erofs (device loop5): bogus lookback distance 1586 @ lcn 46 of nid 36
[  267.242837][T19164] erofs (device loop5): readahead error at folio 47 @ nid 36
[  267.246948][T19164] erofs (device loop5): bogus lookback distance 1586 @ lcn 46 of nid 36
[  267.249932][T19164] erofs (device loop5): readahead error at folio 46 @ nid 36
[  267.252562][T19164] erofs (device loop5): readahead error at folio 45 @ nid 36
[  267.255420][T19164] syz.5.3684: attempt to access beyond end of device
[  267.255420][T19164] loop5: rw=524288, sector=16, nr_sectors = 16 limit=16
[  267.260803][T19164] erofs (device loop5): failed to decompress -29 in[58, 4038] out[3537]
[  267.481631][T19169] netlink: 'syz.2.3687': attribute type 12 has an invalid length.
[  267.485098][T19169] netlink: 'syz.2.3687': attribute type 29 has an invalid length.
[  267.487855][T19169] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3687'.
[  267.491395][T19169] netlink: 'syz.2.3687': attribute type 1 has an invalid length.
[  267.710936][T19181] netlink: 'syz.2.3693': attribute type 1 has an invalid length.
[  267.795408][T19195] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3698'.
[  267.871947][T19237] 9pnet_fd: Insufficient options for proto=fd
[  268.701981][T19273] loop5: detected capacity change from 0 to 128
[  268.706433][T19273] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  268.711588][T19273] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  268.782409][T19282] loop5: detected capacity change from 0 to 512
[  268.796848][T19282] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  268.802051][T19282] ext4 filesystem being mounted at /273/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  268.812255][T19282] __quota_error: 2 callbacks suppressed
[  268.812267][T19282] Quota error (device loop5): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  268.824130][T19282] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  268.828205][T19282] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.3718: Failed to acquire dquot type 0
[  268.847918][T15480] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  269.094120][T19317] dns_resolver: Unsupported server list version (0)
[  269.117174][T19300] loop5: detected capacity change from 0 to 32768
[  269.356779][T19355] loop5: detected capacity change from 0 to 1024
[  269.364495][T19355] EXT4-fs: Ignoring removed nomblk_io_submit option
[  269.376816][T19355] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  269.399667][T15480] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.704444][ T7995] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  269.853782][ T7995] usb 6-1: Using ep0 maxpacket: 16
[  269.857279][ T7995] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  269.860875][ T7995] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.865566][ T7995] usb 6-1: config 0 descriptor??
[  269.869658][ T7995] gspca_main: sonixj-2.14.0 probing 0471:0327
[  270.270711][ T7995] gspca_sonixj: reg_r err -71
[  270.272659][ T7995] sonixj 6-1:0.0: probe with driver sonixj failed with error -71
[  270.277264][ T7995] usb 6-1: USB disconnect, device number 18
[  270.863380][T19462] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3790'.
[  271.143971][ T5912] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  271.278541][T19492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3803'.
[  271.307507][ T5912] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  271.311160][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.315294][ T5912] usb 6-1: Product: syz
[  271.317254][ T5912] usb 6-1: Manufacturer: syz
[  271.319261][ T5912] usb 6-1: SerialNumber: syz
[  271.322303][ T5912] usb 6-1: config 0 descriptor??
[  271.530727][ T5912] usb 6-1: USB disconnect, device number 19
[  271.665417][T19526] netlink: 'syz.2.3810': attribute type 10 has an invalid length.
[  271.668247][T19526] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3810'.
[  271.671582][T19526] team0: entered promiscuous mode
[  271.674268][T19526] team_slave_0: entered promiscuous mode
[  271.676380][T19526] team_slave_1: entered promiscuous mode
[  271.678482][T19526] team0: entered allmulticast mode
[  271.680455][T19526] team_slave_0: entered allmulticast mode
[  271.682271][T19526] team_slave_1: entered allmulticast mode
[  271.685603][T19526] 8021q: adding VLAN 0 to HW filter on device team0
[  271.689137][T19526] bridge0: port 4(team0) entered blocking state
[  271.691253][T19526] bridge0: port 4(team0) entered disabled state
[  271.695758][T19526] bridge0: port 4(team0) entered blocking state
[  271.698162][T19526] bridge0: port 4(team0) entered forwarding state
[  271.822922][T19538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3816'.
[  272.777850][T19589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  273.115461][T19615] loop5: detected capacity change from 0 to 1024
[  273.280614][T19635] sch_tbf: peakrate 8 is lower than or equals to rate 12 !
[  274.306044][T19669] loop5: detected capacity change from 0 to 512
[  274.312169][T19669] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  274.328910][T15480] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.058999][T19700] loop5: detected capacity change from 0 to 4096
[  276.070237][T19700] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  276.080098][T19700] ntfs3(loop5): ino=1e, "file1" attr_set_size
[  276.105725][T19705] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  276.129150][T19707] netlink: 'syz.5.3884': attribute type 29 has an invalid length.
[  276.191660][T19713] loop5: detected capacity change from 0 to 512
[  276.195685][T19713] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  276.202612][T19713] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  276.207565][T19713] EXT4-fs (loop5): 1 truncate cleaned up
[  276.210201][T19713] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  276.231020][T15480] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.282309][T19724] netlink: 830 bytes leftover after parsing attributes in process `syz.5.3890'.
[  277.560857][T19773] loop5: detected capacity change from 0 to 128
[  277.574663][T19773] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  277.582489][T19773] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  277.649453][T19786] hugetlbfs: Bad value '' for mount option 'size'
[  277.649453][T19786] 
[  277.656953][T19788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3919'.
[  277.679029][T19791] loop5: detected capacity change from 0 to 16
[  277.683905][T19791] erofs (device loop5): mounted with root inode @ nid 36.
[  277.854650][T19813] netlink: 'syz.3.3928': attribute type 2 has an invalid length.
[  277.857754][T19813] netlink: 'syz.3.3928': attribute type 2 has an invalid length.
[  277.974020][ T5912] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  278.126067][ T5912] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  278.135535][ T5912] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  278.139320][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.142749][ T5912] usb 6-1: Product: syz
[  278.145423][ T5912] usb 6-1: Manufacturer: syz
[  278.147415][ T5912] usb 6-1: SerialNumber: syz
[  278.150646][ T5912] usb 6-1: config 0 descriptor??
[  278.165592][ T5912] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22
[  278.372105][ T7995] usb 6-1: USB disconnect, device number 20
[  278.427250][T19849] IPv6: Can't replace route, no match found
[  278.846142][T19877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3951'.
[  278.972612][T19893] overlayfs: failed to clone upperpath
[  279.076086][T19899] loop5: detected capacity change from 0 to 4096
[  279.083032][T19899] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  279.093441][T19899] fs-verity (loop5, inode 16): Unknown hash algorithm number: 0
[  279.110113][T15480] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.131687][T19906] loop5: detected capacity change from 0 to 128
[  280.212654][T19936] loop5: detected capacity change from 0 to 32768
[  280.218585][T19936] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  280.238662][T19936] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  280.245837][T19936] XFS (loop5): Starting recovery (logdev: internal)
[  280.253302][T19936] XFS (loop5): Ending recovery (logdev: internal)
[  280.257401][T19936] XFS (loop5): Metadata corruption detected at xfs_inobt_verify+0x9e/0x1f0, xfs_finobt block 0x8 
[  280.261944][T19936] XFS (loop5): Unmount and run xfs_repair
[  280.266367][T19936] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  280.270044][T19936] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  280.275098][T19936] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  280.278825][T19936] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  280.282572][T19936] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02  ......1....N....
[  280.286917][T19936] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  280.290607][T19936] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  280.294823][T19936] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  280.298486][T19936] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  280.302075][T19936] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x8 len 8 error 117
[  280.307283][T19936] XFS (loop5): Failed to initialize disk quotas, err -117.
[  280.326431][T15480] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  280.330371][T15480] XFS (loop5): Uncorrected metadata errors detected; please run xfs_repair.
[  280.877930][ T5912] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  281.004060][ T5912] usb 6-1: device descriptor read/64, error -71
[  281.243907][ T5912] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  281.373725][ T5912] usb 6-1: device descriptor read/64, error -71
[  281.488369][ T5912] usb usb6-port1: attempt power cycle
[  281.672158][T19982] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3990'.
[  281.708796][T19986] netlink: 'syz.3.3992': attribute type 1 has an invalid length.
[  281.711600][T19986] netlink: 'syz.3.3992': attribute type 2 has an invalid length.
[  281.715727][T19986] netlink: 1164 bytes leftover after parsing attributes in process `syz.3.3992'.
[  281.823901][ T5912] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  281.844605][ T5912] usb 6-1: device descriptor read/8, error -71
[  282.094022][ T5912] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  282.114637][ T5912] usb 6-1: device descriptor read/8, error -71
[  282.224614][ T5912] usb usb6-port1: unable to enumerate USB device
[  283.463960][T20050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4020'.
[  283.467498][T20050] netlink: 336 bytes leftover after parsing attributes in process `syz.5.4020'.
[  284.167884][T20084] loop5: detected capacity change from 0 to 4096
[  284.312926][T20090] tmpfs: Bad value for 'mpol'
[  286.076933][T20154] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4062'.
[  286.097459][T20156] lo: entered promiscuous mode
[  286.099272][T20156] lo: entered allmulticast mode
[  286.335350][T20163] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4066'.
[  286.606108][T20193] netlink: 277 bytes leftover after parsing attributes in process `syz.2.4080'.
[  286.972294][T20225] loop5: detected capacity change from 0 to 128
[  287.350552][T20236] loop5: detected capacity change from 0 to 32768
[  287.356472][T20236] (syz.5.4099,20236,1):ocfs2_read_virt_blocks:1007 ERROR: Inode #66 contains a hole at offset 0
[  287.362065][T20236] (syz.5.4099,20236,1):ocfs2_read_dir_block:511 ERROR: status = -5
[  287.367235][T20236] (syz.5.4099,20236,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  287.370878][T20236] (syz.5.4099,20236,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs?
[  287.370898][T20236] (syz.5.4099,20236,1):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  287.379600][T20236] (syz.5.4099,20236,1):ocfs2_initialize_super:2198 ERROR: status = -22
[  287.383085][T20236] (syz.5.4099,20236,1):ocfs2_fill_super:1177 ERROR: status = -22
[  287.492312][T20250] loop5: detected capacity change from 0 to 512
[  287.496423][T20250] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  287.503040][T20250] EXT4-fs (loop5): 1 truncate cleaned up
[  287.506086][T20250] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  287.522237][T15480] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.642124][T20259] loop5: detected capacity change from 0 to 32768
[  287.646105][T20259] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4105 (20259)
[  287.651751][T20259] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  287.655357][T20259] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  287.665549][T20259] BTRFS info (device loop5): enabling ssd optimizations
[  287.668056][T20259] BTRFS info (device loop5): enabling free space tree
[  287.680117][ T5863] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared)
[  287.701692][T15480] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  287.810748][T20287] loop5: detected capacity change from 0 to 256
[  287.817541][T20287] FAT-fs (loop5): Directory bread(block 64) failed
[  287.819867][T20287] FAT-fs (loop5): Directory bread(block 65) failed
[  287.822030][T20287] FAT-fs (loop5): Directory bread(block 66) failed
[  287.825341][T20287] FAT-fs (loop5): Directory bread(block 67) failed
[  287.827526][T20287] FAT-fs (loop5): Directory bread(block 68) failed
[  287.829683][T20287] FAT-fs (loop5): Directory bread(block 69) failed
[  287.831842][T20287] FAT-fs (loop5): Directory bread(block 70) failed
[  287.834522][T20287] FAT-fs (loop5): Directory bread(block 71) failed
[  287.836859][T20287] FAT-fs (loop5): Directory bread(block 72) failed
[  287.839363][T20287] FAT-fs (loop5): Directory bread(block 73) failed
[  287.855413][T20287] syz.5.4109: attempt to access beyond end of device
[  287.855413][T20287] loop5: rw=0, sector=1160, nr_sectors = 4 limit=256
[  289.181721][T20347] loop5: detected capacity change from 0 to 32768
[  289.243230][T20347] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  289.261268][T20363] batadv_slave_1: entered promiscuous mode
[  289.269872][T20347] XFS (loop5): Corruption warning: Metadata has LSN (1024:16) ahead of current LSN (1:80). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  289.276002][T20347] XFS (loop5): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xe0, xfs_inobt block 0xc 
[  289.276818][T20362] batadv_slave_1: left promiscuous mode
[  289.280415][T20347] XFS (loop5): Unmount and run xfs_repair
[  289.287603][T20347] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  289.290657][T20347] 00000000: 49 41 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  IAB3............
[  289.294539][T20347] 00000010: 00 00 00 00 00 00 00 0c 00 00 04 00 00 00 00 10  ................
[  289.298055][T20347] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d  ..BNy.B..... ...
[  289.301238][T20347] 00000030: 00 00 00 00 4a d4 d4 6c 00 00 18 00 00 00 40 37  ....J..l......@7
[  289.304677][T20347] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  289.308040][T20347] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  289.311262][T20347] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  289.314464][T20347] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  289.317889][T20347] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0xc len 4 error 74
[  289.321931][T20347] XFS (loop5): Failed to read root inode 0x1800, error 117
[  289.324562][T20347] XFS (loop5): Uncorrected metadata errors detected; please run xfs_repair.
[  289.515651][T20387] loop5: detected capacity change from 0 to 128
[  289.531806][T20387] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  289.537611][T20387] ext4 filesystem being mounted at /389/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  289.594958][T15480] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  289.993088][T20420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4160'.
[  290.057891][T20409] loop5: detected capacity change from 0 to 32768
[  290.061265][T20409] XFS: noikeep mount option is deprecated.
[  290.068550][T20409] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  290.080174][T20409] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  290.088859][T20409] XFS (loop5): Starting recovery (logdev: internal)
[  290.097172][T20409] XFS (loop5): Ending recovery (logdev: internal)
[  290.118868][T15480] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  290.669671][T20447] netlink: 'syz.2.4167': attribute type 3 has an invalid length.
[  290.672662][T20447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4167'.
[  290.942576][T20484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4185'.
[  291.014909][T20498] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4188'.
[  291.018612][T20498] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4188'.
[  292.016770][T20537] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4206'.
[  292.020671][T20537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4206'.
[  292.026619][T20537] netlink: 'syz.5.4206': attribute type 12 has an invalid length.
[  292.139134][T20548] loop5: detected capacity change from 0 to 2048
[  292.146095][T20548] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  292.207339][T20557] loop5: detected capacity change from 0 to 128
[  292.217342][   T33] audit: type=1800 audit(1756146017.766:468): pid=20557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4213" name="memory.events" dev="loop5" ino=1048723 res=0 errno=0
[  292.219571][T20557] syz.5.4213: attempt to access beyond end of device
[  292.219571][T20557] loop5: rw=2049, sector=138, nr_sectors = 112 limit=128
[  292.237492][   T33] audit: type=1804 audit(1756146017.766:469): pid=20557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.4213" name="/newroot/406/file2/memory.events" dev="loop5" ino=1048723 res=1 errno=0
[  293.068567][   T33] audit: type=1326 audit(1756146018.616:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20585 comm="syz.2.4223" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea70b8ebe9 code=0x0
[  293.113820][ T7995] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  293.273823][ T7995] usb 6-1: Using ep0 maxpacket: 8
[  293.278849][ T7995] usb 6-1: unable to get BOS descriptor or descriptor too short
[  293.282904][ T7995] usb 6-1: config 42 has an invalid interface number: 238 but max is 0
[  293.287112][ T7995] usb 6-1: config 42 has no interface number 0
[  293.289933][ T7995] usb 6-1: config 42 interface 238 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  293.294967][ T7995] usb 6-1: config 42 interface 238 has no altsetting 0
[  293.299294][ T7995] usb 6-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=12.b3
[  293.302439][ T7995] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.305190][ T7995] usb 6-1: Product: syz
[  293.306760][ T7995] usb 6-1: Manufacturer: syz
[  293.308333][ T7995] usb 6-1: SerialNumber: syz
[  293.486517][T20602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4230'.
[  293.490136][T20602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4230'.
[  293.517025][ T7995] usb 6-1: unknown interface protocol 0x16, assuming v1
[  293.520325][ T7995] usb 6-1: cannot find UAC_HEADER
[  293.524243][T20608] Device name not specified.
[  293.524243][T20608] 
[  293.530966][ T7995] snd-usb-audio 6-1:42.238: probe with driver snd-usb-audio failed with error -22
[  293.536820][ T7995] usb 6-1: USB disconnect, device number 25
[  294.135089][T20667] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  294.157485][T20671] netlink: 'syz.5.4257': attribute type 34 has an invalid length.
[  294.290818][T20675] loop5: detected capacity change from 0 to 40427
[  294.294673][T20675] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  294.297654][T20675] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  294.314315][T20675] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  294.318085][T20675] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  294.320407][T20675] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  294.337665][   T33] audit: type=1800 audit(1756146019.886:471): pid=20675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4259" name="file1" dev="loop5" ino=10 res=0 errno=0
[  294.348046][T20675] syz.5.4259: attempt to access beyond end of device
[  294.348046][T20675] loop5: rw=34817, sector=77824, nr_sectors = 128 limit=40427
[  294.383489][T15480] syz-executor: attempt to access beyond end of device
[  294.383489][T15480] loop5: rw=2051, sector=77824, nr_sectors = 128 limit=40427
[  294.389978][T15480] F2FS-fs (loop5): Issue discard(9728, 9728, 16) failed, ret: -5
[  294.518425][T20693] loop5: detected capacity change from 0 to 512
[  294.527654][T20693] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  294.532574][T20693] ext4 filesystem being mounted at /418/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  294.540537][T20693] EXT4-fs error (device loop5): __ext4_remount:6740: comm syz.5.4262: Abort forced by user
[  294.546423][T20693] EXT4-fs (loop5): Remounting filesystem read-only
[  294.549294][T20693] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  294.565895][T15480] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.617946][T20701] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4263'.
[  295.388709][T20743] loop5: detected capacity change from 0 to 1024
[  295.392409][T20743] hfsplus: unable to change nls mapping
[  295.450795][T20752] loop5: detected capacity change from 0 to 256
[  295.757634][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  295.761098][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  295.764645][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  295.768287][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  295.771856][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  295.775467][ T5863] bridge_slave_1: left allmulticast mode
[  295.777548][ T5863] bridge_slave_1: left promiscuous mode
[  295.779614][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.785168][ T5863] bridge_slave_0: left allmulticast mode
[  295.787512][ T5863] bridge_slave_0: left promiscuous mode
[  295.789958][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.888071][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  295.892412][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  295.896748][ T5863] bond0 (unregistering): Released all slaves
[  295.902498][ T5863] bond1 (unregistering): Released all slaves
[  295.914999][T20767] lo speed is unknown, defaulting to 1000
[  295.941787][ T5863] tipc: Left network mode
[  296.011800][T20767] chnl_net:caif_netlink_parms(): no params data found
[  296.060083][ T5863] hsr_slave_0: left promiscuous mode
[  296.062547][ T5863] hsr_slave_1: left promiscuous mode
[  296.064771][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[  296.067850][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[  296.119518][ T5863] team0 (unregistering): Port device team_slave_1 removed
[  296.134547][ T5863] team0 (unregistering): Port device team_slave_0 removed
[  296.169353][T20767] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.171801][T20767] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.175903][T20767] bridge_slave_0: entered allmulticast mode
[  296.178822][T20767] bridge_slave_0: entered promiscuous mode
[  296.182327][T20767] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.185863][T20767] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.188953][T20767] bridge_slave_1: entered allmulticast mode
[  296.192197][T20767] bridge_slave_1: entered promiscuous mode
[  296.233253][T20767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  296.240017][T20767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  296.261375][T20767] team0: Port device team_slave_0 added
[  296.266608][T20767] team0: Port device team_slave_1 added
[  296.281784][T20767] batman_adv: batadv0: Adding interface: batadv_slave_0
[  296.285243][T20767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  296.294894][T20767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  296.301978][T20767] batman_adv: batadv0: Adding interface: batadv_slave_1
[  296.306517][T20767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  296.317159][T20767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  296.348719][T20767] hsr_slave_0: entered promiscuous mode
[  296.351141][T20767] hsr_slave_1: entered promiscuous mode
[  296.434696][T20767] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  296.439856][T20767] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  296.447399][T20767] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  296.452601][T20767] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  296.484729][T20767] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.487432][T20767] bridge0: port 2(bridge_slave_1) entered forwarding state
[  296.490082][T20767] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.492490][T20767] bridge0: port 1(bridge_slave_0) entered forwarding state
[  296.516976][T20767] 8021q: adding VLAN 0 to HW filter on device bond0
[  296.523560][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.529591][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.537038][T20767] 8021q: adding VLAN 0 to HW filter on device team0
[  296.542663][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.545615][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  296.552531][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.555578][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  296.888628][T20767] 8021q: adding VLAN 0 to HW filter on device batadv0
[  296.921975][   T33] audit: type=1326 audit(1756146022.466:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21141 comm="syz.2.4297" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea70b8ebe9 code=0x7ffc0000
[  296.942660][   T33] audit: type=1326 audit(1756146022.466:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21141 comm="syz.2.4297" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea70b8ebe9 code=0x7ffc0000
[  296.954015][   T33] audit: type=1326 audit(1756146022.466:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21141 comm="syz.2.4297" exe="/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fea70b8ebe9 code=0x7ffc0000
[  296.968341][   T33] audit: type=1326 audit(1756146022.466:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21141 comm="syz.2.4297" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea70b8ebe9 code=0x7ffc0000
[  297.022541][T20767] veth0_vlan: entered promiscuous mode
[  297.039049][T20767] veth1_vlan: entered promiscuous mode
[  297.055621][T20767] veth0_macvtap: entered promiscuous mode
[  297.060061][T20767] veth1_macvtap: entered promiscuous mode
[  297.069920][T20767] batman_adv: batadv0: Interface activated: batadv_slave_0
[  297.078566][T20767] batman_adv: batadv0: Interface activated: batadv_slave_1
[  297.085249][ T5857] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  297.089810][ T5857] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  297.096520][ T5857] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  297.100381][ T5857] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  297.134886][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.140988][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.152191][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.160091][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.472499][T21180] loop6: detected capacity change from 0 to 2048
[  297.484942][T21183] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  297.497551][T21180] NILFS (loop6): error -2 truncating bmap (ino=16)
[  297.549836][T21190] loop6: detected capacity change from 0 to 512
[  297.555772][T21190] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c11d, mo2=0002]
[  297.559193][T21190] System zones: 1-12
[  297.560938][T21190] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.4310: corrupted in-inode xattr: e_value size too large
[  297.567295][T21190] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.4310: couldn't read orphan inode 15 (err -117)
[  297.572526][T21190] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  297.750562][T21197] fuse: Unknown parameter 'gro00000000000000000000'
[  297.834040][   T54] Bluetooth: hci1: command tx timeout
[  298.375337][T21209] __nla_validate_parse: 2 callbacks suppressed
[  298.375347][T21209] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4317'.
[  298.465224][T21221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4323'.
[  298.491982][T20767] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.538208][T21227] 9pnet_fd: Insufficient options for proto=fd
[  299.615716][T21267] loop6: detected capacity change from 0 to 32768
[  299.620419][T21267] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4325 (21267)
[  299.627731][T21267] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  299.632116][T21267] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  299.647027][T21267] BTRFS info (device loop6): enabling ssd optimizations
[  299.649827][T21267] BTRFS info (device loop6): enabling free space tree
[  299.662611][ T5857] BTRFS info (device loop6): qgroup scan completed (inconsistency flag cleared)
[  299.674551][T20767] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  299.885091][T21298] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4345'.
[  299.888972][T21298] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4345'.
[  299.924024][   T54] Bluetooth: hci1: command tx timeout
[  300.912877][T21342] loop6: detected capacity change from 0 to 512
[  300.920964][T21342] EXT4-fs (loop6): filesystem is read-only
[  300.926602][T21342] EXT4-fs (loop6): filesystem is read-only
[  300.929201][T21342] EXT4-fs (loop6): orphan cleanup on readonly fs
[  300.937245][T21342] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.4365: bad orphan inode 16
[  300.941747][T21342] ext4_test_bit(bit=15, block=3) = 0
[  300.945905][T21342] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  300.956118][T21342] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 46 vs 41 free clusters
[  300.979770][T20767] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.005878][T21356] overlayfs: failed to clone upperpath
[  301.506885][T21373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4374'.
[  301.672079][T21390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4383'.
[  302.003884][   T54] Bluetooth: hci1: command tx timeout
[  303.550649][T21478] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.554044][T21478] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.565858][T21478] batman_adv: batadv0: Interface deactivated: dummy0
[  303.597797][T21478] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  303.657407][T21478] bridge0: left allmulticast mode
[  303.665952][ T5891] lo speed is unknown, defaulting to 1000
[  303.668509][ T5857] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  303.672351][ T5857] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  303.676476][ T5891] syz0: Port: 1 Link DOWN
[  303.681795][ T5857] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  303.686134][ T5857] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  303.955295][T21500] netlink: 88 bytes leftover after parsing attributes in process `syz.6.4429'.
[  303.978691][T21502] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4430'.
[  304.048596][T21502] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4430'.
[  304.079452][   T54] Bluetooth: hci1: command tx timeout
[  304.146787][T21516] Bluetooth: hci0: too big key_count value 38325
[  304.323432][T21536] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  304.323432][T21536] The task syz.6.4442 (21536) triggered the difference, watch for misbehavior.
[  304.837200][T21544] trusted_key: syz.2.4448 sent an empty control message without MSG_MORE.
[  304.945238][T21547] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4450'.
[  305.459496][T21585] overlay: Bad value for 'workdir'
[  305.491859][T21589] bridge5: entered promiscuous mode
[  306.574848][T21625] netlink: 'syz.3.4485': attribute type 12 has an invalid length.
[  306.577817][T21625] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.4485'.
[  307.471001][T21670] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4506'.
[  308.714117][ T5852] Bluetooth: hci2: command 0x0406 tx timeout
[  309.209457][T21734] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4531'.
[  309.220383][T21734] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4531'.
[  309.558136][T21782] libceph: resolve 'R' (ret=-3): failed
[  309.875578][T21801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4562'.
[  309.878816][T21801] bridge0: port 4(team0) entered disabled state
[  309.882196][T21801] syz_tun: left allmulticast mode
[  309.885752][T21801] syz_tun: left promiscuous mode
[  309.887624][T21801] bridge0: port 3(syz_tun) entered disabled state
[  309.893317][T21801] bridge_slave_1: left allmulticast mode
[  309.897649][T21801] bridge_slave_1: left promiscuous mode
[  309.900689][T21801] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.905334][T21801] bridge_slave_0: left allmulticast mode
[  309.907376][T21801] bridge_slave_0: left promiscuous mode
[  309.909425][T21801] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.257581][T21836] atomic_op ffff88812369b198 conn xmit_atomic 0000000000000000
[  311.035102][T21878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4598'.
[  311.038517][T21878] openvswitch: netlink: nsh attr 2656 is out of range max 3
[  311.040930][T21878] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  311.065914][T21884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4601'.
[  311.299878][T21900] netlink: 'syz.2.4606': attribute type 21 has an invalid length.
[  311.303148][T21900] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4606'.
[  311.307520][T21900] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4606'.
[  311.360422][ T5891] IPVS: starting estimator thread 0...
[  311.399433][T21914] vlan2: entered promiscuous mode
[  311.444425][T21911] IPVS: using max 62 ests per chain, 148800 per kthread
[  312.337244][T21977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4637'.
[  312.828490][T22008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4652'.
[  313.836193][T22052] 9pnet_fd: Insufficient options for proto=fd
[  313.922152][T22066] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614)
[  314.572531][T22096] loop6: detected capacity change from 0 to 4096
[  314.575817][T22096] ntfs3(loop6): Failed to load $Volume (-22).
[  314.583566][ T5857] tipc: Subscription rejected, illegal request
[  315.383010][T22135] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4707'.
[  315.392610][T22137] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  316.320981][    T9] IPVS: starting estimator thread 0...
[  316.375205][T22164] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4720'.
[  316.381161][T22164] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4720'.
[  316.423738][T22152] IPVS: using max 134 ests per chain, 321600 per kthread
[  316.438876][   T33] audit: type=1326 audit(1756146041.986:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22171 comm="syz.3.4724" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe39c18ebe9 code=0x0
[  316.532230][   T33] audit: type=1326 audit(1756146042.076:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22177 comm="syz.3.4727" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe39c18ebe9 code=0x7ffc0000
[  316.553954][   T33] audit: type=1326 audit(1756146042.076:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22177 comm="syz.3.4727" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe39c18ebe9 code=0x7ffc0000
[  316.567580][   T33] audit: type=1326 audit(1756146042.076:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22177 comm="syz.3.4727" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe39c18ebe9 code=0x7ffc0000
[  316.580325][   T33] audit: type=1326 audit(1756146042.076:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22177 comm="syz.3.4727" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe39c18ebe9 code=0x7ffc0000
[  316.589591][T22180] netlink: 'syz.3.4728': attribute type 21 has an invalid length.
[  316.593480][   T33] audit: type=1326 audit(1756146042.086:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22177 comm="syz.3.4727" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe39c18ebe9 code=0x7ffc0000
[  316.609722][   T33] audit: type=1326 audit(1756146042.086:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22177 comm="syz.3.4727" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe39c18ebe9 code=0x7ffc0000
[  316.620059][   T33] audit: type=1326 audit(1756146042.086:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22177 comm="syz.3.4727" exe="/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fe39c18ebe9 code=0x7ffc0000
[  316.632252][   T33] audit: type=1326 audit(1756146042.086:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22177 comm="syz.3.4727" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe39c18ebe9 code=0x7ffc0000
[  316.644197][   T33] audit: type=1326 audit(1756146042.086:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22177 comm="syz.3.4727" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe39c18ebe9 code=0x7ffc0000
[  316.772291][T22198] lo speed is unknown, defaulting to 1000
[  316.875214][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  316.877917][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  318.148052][T22269] loop6: detected capacity change from 0 to 764
[  318.151435][T22269] rock: directory entry would overflow storage
[  318.153473][T22269] rock: sig=0x5850, size=36, remaining=22
[  318.835845][T22308] overlayfs: failed to clone upperpath
[  319.034399][T22335] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4786'.
[  319.241369][T22343] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed.
[  319.337386][T22353] loop6: detected capacity change from 0 to 512
[  319.341203][T22353] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  319.348459][T22353] EXT4-fs (loop6): Couldn't remount RDWR because of unprocessed orphan inode list.  Please umount/remount instead
[  319.369313][T20767] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.379838][T22359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4795'.
[  319.419403][T22365] netlink: 'syz.6.4796': attribute type 3 has an invalid length.
[  319.421907][T22365] netlink: 716 bytes leftover after parsing attributes in process `syz.6.4796'.
[  322.486568][T22447] netlink: 'syz.2.4830': attribute type 4 has an invalid length.
[  322.696404][T22476] openvswitch: netlink: Duplicate or invalid key (type 0).
[  322.699693][T22476] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  322.752735][T22480] loop6: detected capacity change from 0 to 2048
[  322.758942][T22480] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  323.390017][   T33] audit: type=1326 audit(1756146048.936:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22503 comm="syz.3.4847" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe39c18ebe9 code=0x0
[  323.517363][T22512] overlayfs: failed to clone upperpath
[  324.312563][T22548] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  324.474632][T22562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4875'.
[  324.478512][T22562] netlink: 'syz.3.4875': attribute type 5 has an invalid length.
[  324.482115][T22562] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4875'.
[  324.496018][T22562] geneve2: entered promiscuous mode
[  324.498320][T22562] geneve2: entered allmulticast mode
[  324.503085][ T5910] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[  324.508946][ T5910] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[  324.511802][ T5910] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[  324.515388][ T5910] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[  324.704178][T22585] geneve2: entered promiscuous mode
[  324.709621][T22585] geneve2: entered allmulticast mode
[  324.789966][T22597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4889'.
[  324.827972][T22603] @: renamed from vlan0
[  325.859109][T22645] loop6: detected capacity change from 0 to 512
[  325.897187][T22645] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  325.902169][T22645] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  325.946898][T20767] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.001383][T22660] syzkaller1: entered promiscuous mode
[  326.004162][T22660] syzkaller1: entered allmulticast mode
[  326.572790][T22705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4934'.
[  327.757358][T22746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4951'.
[  327.900305][T22755] ip6gretap1: entered promiscuous mode
[  327.902564][T22755] ip6gretap1: entered allmulticast mode
[  327.979089][T22769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4961'.
[  328.128972][   T33] audit: type=1326 audit(1756146053.601:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22782 comm="syz.3.4968" exe="/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fe39c185ba7 code=0x0
[  329.514282][T22811] overlayfs: failed to resolve './file0': -2
[  329.909275][T22852] netlink: 'syz.3.4998': attribute type 2 has an invalid length.
[  330.109064][T22874] loop6: detected capacity change from 0 to 128
[  330.252596][   T33] audit: type=1326 audit(1756146055.575:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22887 comm="syz.2.5013" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea70b8ebe9 code=0x7ffc0000
[  330.262323][   T33] audit: type=1326 audit(1756146055.575:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22887 comm="syz.2.5013" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea70b8ebe9 code=0x7ffc0000
[  330.278623][   T33] audit: type=1326 audit(1756146055.593:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22887 comm="syz.2.5013" exe="/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fea70b8ebe9 code=0x7ffc0000
[  330.287768][   T33] audit: type=1326 audit(1756146055.593:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22887 comm="syz.2.5013" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea70b8ebe9 code=0x7ffc0000
[  330.301376][   T33] audit: type=1326 audit(1756146055.593:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22887 comm="syz.2.5013" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea70b8ebe9 code=0x7ffc0000
[  330.313619][   T33] audit: type=1326 audit(1756146055.603:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22887 comm="syz.2.5013" exe="/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fea70b8ebe9 code=0x7ffc0000
[  330.323101][   T33] audit: type=1326 audit(1756146055.603:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22887 comm="syz.2.5013" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea70b8ebe9 code=0x7ffc0000
[  330.334016][   T33] audit: type=1326 audit(1756146055.603:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22887 comm="syz.2.5013" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea70b8ebe9 code=0x7ffc0000
[  331.795767][T22970] sctp: [Deprecated]: syz.2.5048 (pid 22970) Use of int in max_burst socket option.
[  331.795767][T22970] Use struct sctp_assoc_value instead
[  331.804050][   T33] audit: type=1326 audit(1756146057.025:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22969 comm="syz.2.5048" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea70b8ebe9 code=0x0
[  332.849554][T22567] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  332.854082][T22567] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  332.863267][T22567] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  332.870935][T22567] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  333.359552][T23033] netlink: 'syz.3.5074': attribute type 6 has an invalid length.
[  333.425155][T23039] netlink: 'syz.3.5077': attribute type 27 has an invalid length.
[  333.427877][T23039] netlink: 'syz.3.5077': attribute type 3 has an invalid length.
[  333.430601][T23039] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5077'.
[  333.484259][T23050] syzkaller0: entered promiscuous mode
[  333.487886][T23050] syzkaller0: entered allmulticast mode
[  333.491316][T23050] tipc: Started in network mode
[  333.493102][T23050] tipc: Node identity 626d14424bf4, cluster identity 4711
[  333.496096][T23050] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  333.499898][T23050] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  333.504508][T23050] tipc: Resetting bearer <eth:syzkaller0>
[  333.508958][T23049] tipc: Resetting bearer <eth:syzkaller0>
[  333.512496][T23049] tipc: Disabling bearer <eth:syzkaller0>
[  333.702372][T23069] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5087'.
[  334.823665][T23096] loop6: detected capacity change from 0 to 32768
[  334.827628][T23096] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.5094 (23096)
[  334.834208][T23096] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  334.838259][T23096] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  334.841571][T23096] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  334.854245][T23096] BTRFS info (device loop6): rebuilding free space tree
[  334.858203][T23096] BTRFS info (device loop6): disabling free space tree
[  334.860571][T23096] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  334.863986][T23096] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  334.868757][T23096] BTRFS info (device loop6): setting nodatasum
[  334.870711][T23096] BTRFS info (device loop6): setting nodatacow
[  334.872785][T23096] BTRFS info (device loop6): enabling ssd optimizations
[  334.875365][T23096] BTRFS info (device loop6): turning off barriers
[  334.877869][T23096] BTRFS info (device loop6): turning on flush-on-commit
[  334.880162][T23096] BTRFS info (device loop6): enabling disk space caching
[  334.882570][T23096] BTRFS info (device loop6): force clearing of disk cache
[  334.885496][T23096] BTRFS info (device loop6): doing ref verification
[  334.888053][T23096] BTRFS info (device loop6): max_inline set to 4096
[  334.928707][T20767] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  335.069434][T23139] netem: change failed
[  335.308713][T23156] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5112'.
[  335.336361][T23160] .: entered promiscuous mode
[  335.337991][T23160] bond_slave_0: entered promiscuous mode
[  335.339843][T23160] bond_slave_1: entered promiscuous mode
[  335.676830][T23194] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5129'.
[  335.739818][T23203] lo speed is unknown, defaulting to 1000
[  337.996177][   T33] audit: type=1326 audit(1756146062.805:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23273 comm="syz.3.5156" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe39c18ebe9 code=0x7fc00000
[  338.112460][T23329] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  338.382607][T23342] loop6: detected capacity change from 0 to 512
[  338.386286][T23342] EXT4-fs: Ignoring removed bh option
[  338.389188][T23342] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  338.398024][T23342] EXT4-fs (loop6): 1 truncate cleaned up
[  338.400507][T23342] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  338.416332][T20767] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.563910][T23351] loop6: detected capacity change from 0 to 1024
[  338.568719][T23353] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5172'.
[  338.569094][T23351] EXT4-fs (loop6): first meta block group too large: 33024 (group descriptor block count 1)
[  340.722776][T23452] sp0: Synchronizing with TNC
[  341.748201][T23489] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5225'.
[  341.923383][T23515] sock: sock_timestamping_bind_phc: sock not bind to device
[  342.052572][T23528] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  342.127928][   T33] audit: type=1326 audit(1756146066.687:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23533 comm="syz.6.5246" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd158ebe9 code=0x7ffc0000
[  342.136399][   T33] audit: type=1326 audit(1756146066.687:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23533 comm="syz.6.5246" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd158ebe9 code=0x7ffc0000
[  342.144929][   T33] audit: type=1326 audit(1756146066.687:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23533 comm="syz.6.5246" exe="/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fcbd158ebe9 code=0x7ffc0000
[  342.153646][   T33] audit: type=1326 audit(1756146066.687:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23533 comm="syz.6.5246" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd158ebe9 code=0x7ffc0000
[  342.162597][   T33] audit: type=1326 audit(1756146066.687:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23533 comm="syz.6.5246" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbd158ebe9 code=0x7ffc0000
[  343.523899][T23567] loop6: detected capacity change from 0 to 32768
[  343.625957][T23567] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  343.625977][T23567]   allowing incompatible features above 0.0: (unknown version)
[  343.625985][T23567]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  343.642736][T23567] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0
[  343.645605][T23567] bcachefs (loop6): initializing new filesystem
[  343.651256][T23567] bcachefs (loop6): going read-write
[  343.655895][T23567] bcachefs (loop6): marking superblocks
[  343.661496][T23567] bcachefs (loop6): initializing freespace
[  343.666060][T23567] bcachefs (loop6): done initializing freespace
[  343.669929][T23567] bcachefs (loop6): reading snapshots table
[  343.672027][T23567] bcachefs (loop6): reading snapshots done
[  343.681110][T23567] bcachefs (loop6): done starting filesystem
[  343.749917][T20767] bcachefs (loop6): shutting down
[  343.752123][T20767] bcachefs (loop6): going read-only
[  343.754956][T20767] bcachefs (loop6): finished waiting for writes to stop
[  343.760975][T20767] bcachefs (loop6): flushing journal and stopping allocators, journal seq 2
[  343.781437][T20767] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 3
[  343.790941][T20767] bcachefs (loop6): clean shutdown complete, journal seq 4
[  343.793504][T20767] bcachefs (loop6): marking filesystem clean
[  343.805992][T20767] bcachefs (loop6): shutdown complete
[  343.948093][T23606] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5273'.
[  344.044908][T23614] netlink: 'syz.2.5277': attribute type 2 has an invalid length.
[  344.059182][T23616] sctp: [Deprecated]: syz.3.5275 (pid 23616) Use of struct sctp_assoc_value in delayed_ack socket option.
[  344.059182][T23616] Use struct sctp_sack_info instead
[  344.473986][   T33] audit: type=1800 audit(1756146068.876:503): pid=23630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5284" name="nullb0" dev="tmpfs" ino=10027 res=0 errno=0
[  345.264263][T23655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5293'.
[  345.268354][T23655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5293'.
[  345.273730][T23655] netlink: 'syz.2.5293': attribute type 18 has an invalid length.
[  345.641975][T23673] veth1_vlan: entered allmulticast mode
[  345.644791][T23673] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  346.043190][T23693] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  346.363242][T23745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5333'.
[  346.371968][T23745] tc_dump_action: action bad kind
[  346.807911][T23770] netlink: 'syz.3.5345': attribute type 33 has an invalid length.
[  346.811626][T23770] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5345'.
[  346.817203][T23770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5345'.
[  346.824143][T23770] batman_adv: batadv0: Removing interface: dummy0
[  346.908437][T23784] netlink: 'syz.3.5350': attribute type 21 has an invalid length.
[  346.912762][T23784] netlink: 'syz.3.5350': attribute type 1 has an invalid length.
[  346.917053][T23784] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5350'.
[  347.102943][T23797] openvswitch: netlink: IPv4 tun info is not correct
[  347.292249][T23806] loop6: detected capacity change from 0 to 1024
[  347.295819][T23806] EXT4-fs: Ignoring removed nobh option
[  347.310880][T23806] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  347.338744][T20767] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.441232][T23815] loop6: detected capacity change from 0 to 32768
[  347.480328][T23815]  loop6: p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 
[  347.959367][T24301] netlink: 'syz.2.5361': attribute type 29 has an invalid length.
[  347.995027][    C1] vkms_vblank_simulate: vblank timer overrun
[  348.020779][T24335] openvswitch: netlink: Actions may not be safe on all matching packets
[  348.178889][T24366] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5376'.
[  348.182494][T24366] netlink: 100 bytes leftover after parsing attributes in process `syz.6.5376'.
[  349.302791][T24412] netlink: 'syz.6.5391': attribute type 1 has an invalid length.
[  349.305542][T24412] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5391'.
[  349.348081][T24419] loop6: detected capacity change from 0 to 256
[  349.355567][T24419] FAT-fs (loop6): Directory bread(block 64) failed
[  349.357847][T24419] FAT-fs (loop6): Directory bread(block 65) failed
[  349.361702][T24419] FAT-fs (loop6): Directory bread(block 66) failed
[  349.364066][T24419] FAT-fs (loop6): Directory bread(block 67) failed
[  349.366449][T24419] FAT-fs (loop6): Directory bread(block 68) failed
[  349.368600][T24419] FAT-fs (loop6): Directory bread(block 69) failed
[  349.371984][T24419] FAT-fs (loop6): Directory bread(block 70) failed
[  349.374735][T24419] FAT-fs (loop6): Directory bread(block 71) failed
[  349.377892][T24419] FAT-fs (loop6): Directory bread(block 72) failed
[  349.380833][T24419] FAT-fs (loop6): Directory bread(block 73) failed
[  349.434671][T24428] netlink: 'syz.6.5401': attribute type 6 has an invalid length.
[  349.553517][T24435] loop6: detected capacity change from 0 to 4096
[  349.561397][T24435] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  349.569673][T24435] ntfs3(loop6): ino=1a, mi_enum_attr
[  349.571977][T24435] ntfs3(loop6): ino=1a, mi_enum_attr
[  349.574316][T24435] ntfs3(loop6): Failed to initialize $Extend/$Reparse.
[  349.583823][T24435] ntfs3(loop6): ino=1e, "file1" attr_set_size
[  349.608905][T24443] IPv6: addrconf: prefix option has invalid lifetime
[  349.837292][T24454] loop6: detected capacity change from 0 to 32768
[  349.842145][T24454] Mount JFS Failure: -5
[  350.033972][T24484] netlink: 168 bytes leftover after parsing attributes in process `syz.6.5423'.
[  350.109471][T24488] ==================================================================
[  350.112921][T24488] BUG: KFENCE: use-after-free read in xfrm_alloc_spi+0x3b9/0xf30
[  350.112921][T24488] 
[  350.117078][T24488] Use-after-free read at 0xffff88813656ccc4 (in kfence-#181):
[  350.121064][T24488]  xfrm_alloc_spi+0x3b9/0xf30
[  350.123086][T24488]  xfrm_alloc_userspi+0x70b/0xc90
[  350.125248][T24488]  xfrm_user_rcv_msg+0x7a3/0xab0
[  350.127330][T24488]  netlink_rcv_skb+0x208/0x470
[  350.129299][T24488]  xfrm_netlink_rcv+0x79/0x90
[  350.131234][T24488]  netlink_unicast+0x82f/0x9e0
[  350.133202][T24488]  netlink_sendmsg+0x805/0xb30
[  350.135150][T24488]  __sock_sendmsg+0x21c/0x270
[  350.137190][T24488]  ____sys_sendmsg+0x505/0x830
[  350.139242][T24488]  ___sys_sendmsg+0x21f/0x2a0
[  350.141270][T24488]  __x64_sys_sendmsg+0x19b/0x260
[  350.143377][T24488]  do_syscall_64+0xfa/0x3b0
[  350.145314][T24488]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.147806][T24488] 
[  350.148838][T24488] kfence-#181: 0xffff88813656cf00-0xffff88813656cfef, size=240, cache=skbuff_head_cache
[  350.148838][T24488] 
[  350.153660][T24488] allocated by task 5284 on cpu 0 at 338.576315s (11.577344s ago):
[  350.156913][T24488]  __alloc_skb+0x112/0x2d0
[  350.158744][T24488]  alloc_skb_with_frags+0xca/0x890
[  350.160876][T24488]  sock_alloc_send_pskb+0x857/0x990
[  350.162990][T24488]  unix_dgram_sendmsg+0x461/0x1850
[  350.165094][T24488]  __sock_sendmsg+0x21c/0x270
[  350.167052][T24488]  __sys_sendto+0x3bd/0x520
[  350.169007][T24488]  __x64_sys_sendto+0xde/0x100
[  350.171084][T24488]  do_syscall_64+0xfa/0x3b0
[  350.172999][T24488]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.175441][T24488] 
[  350.176442][T24488] freed by task 5277 on cpu 0 at 338.576387s (11.600054s ago):
[  350.179466][T24488]  __unix_dgram_recvmsg+0x9f9/0xd60
[  350.181593][T24488]  sock_recvmsg+0x22c/0x270
[  350.183461][T24488]  sock_read_iter+0x231/0x2f0
[  350.185369][T24488]  vfs_read+0x55a/0xa30
[  350.187058][T24488]  ksys_read+0x145/0x250
[  350.188787][T24488]  do_syscall_64+0xfa/0x3b0
[  350.190656][T24488]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.193099][T24488] 
[  350.194098][T24488] CPU: 1 UID: 0 PID: 24488 Comm: syz.2.5425 Not tainted syzkaller #0 PREEMPT(full) 
[  350.197753][T24488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  350.201879][T24488] RIP: 0010:xfrm_alloc_spi+0x3b9/0xf30
[  350.204121][T24488] Code: c1 08 c1 74 0a e8 67 09 9e f7 e9 14 02 00 00 49 8d 9d c4 00 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 9f 01 00 00 <8b> 1b 89 df 44 89 f6 e8 fb 0a 9e f7 44 39 f3 0f 85 df 00 00 00 49
[  350.212114][T24488] RSP: 0018:ffffc900065470e0 EFLAGS: 00010246
[  350.214720][T24488] RAX: 0000000000000000 RBX: ffff88813656ccc4 RCX: 0000000000080000
[  350.217887][T24488] RDX: ffffc90004152000 RSI: 000000000000024e RDI: 000000000000024f
[  350.221023][T24488] RBP: ffffc90006547230 R08: 0000000000000000 R09: 0000000000000000
[  350.224325][T24488] R10: dffffc0000000000 R11: fffff52000ca8e0c R12: dffffc0000000000
[  350.227634][T24488] R13: ffff88813656cc00 R14: 0000000008000000 R15: ffffc900065476a0
[  350.230832][T24488] FS:  00007fea71a4f6c0(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  350.234501][T24488] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  350.237287][T24488] CR2: ffff88813656ccc4 CR3: 000000002c942000 CR4: 00000000000006f0
[  350.240567][T24488] Call Trace:
[  350.242004][T24488]  <TASK>
[  350.243235][T24488]  ? xfrm_alloc_spi+0x2a0/0xf30
[  350.245217][T24488]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  350.247339][T24488]  ? xfrm_find_acq+0x87/0xa0
[  350.249334][T24488]  xfrm_alloc_userspi+0x70b/0xc90
[  350.251382][T24488]  ? apparmor_capable+0x137/0x1b0
[  350.253537][T24488]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  350.255854][T24488]  ? __nla_parse+0x40/0x60
[  350.257774][T24488]  xfrm_user_rcv_msg+0x7a3/0xab0
[  350.259874][T24488]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  350.262102][T24488]  ? __pfx___mutex_trylock_common+0x10/0x10
[  350.264463][T24488]  ? rcu_is_watching+0x15/0xb0
[  350.266394][T24488]  ? trace_contention_end+0x39/0x120
[  350.268526][T24488]  ? __mutex_lock+0x335/0x1350
[  350.270474][T24488]  netlink_rcv_skb+0x208/0x470
[  350.272400][T24488]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  350.274639][T24488]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  350.276789][T24488]  ? lock_release+0x4b/0x3e0
[  350.278697][T24488]  ? netlink_deliver_tap+0x2e/0x1b0
[  350.280939][T24488]  xfrm_netlink_rcv+0x79/0x90
[  350.282860][T24488]  netlink_unicast+0x82f/0x9e0
[  350.284882][T24488]  ? __pfx_netlink_unicast+0x10/0x10
[  350.287062][T24488]  ? netlink_sendmsg+0x642/0xb30
[  350.289091][T24488]  ? skb_put+0x11b/0x210
[  350.290785][T24488]  netlink_sendmsg+0x805/0xb30
[  350.292788][T24488]  ? __pfx_netlink_sendmsg+0x10/0x10
[  350.294933][T24488]  ? futex_unqueue+0x22/0x240
[  350.296886][T24488]  ? aa_sock_msg_perm+0xf1/0x1d0
[  350.298895][T24488]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  350.301042][T24488]  ? __pfx_netlink_sendmsg+0x10/0x10
[  350.303256][T24488]  __sock_sendmsg+0x21c/0x270
[  350.305250][T24488]  ____sys_sendmsg+0x505/0x830
[  350.307207][T24488]  ? __pfx_____sys_sendmsg+0x10/0x10
[  350.309331][T24488]  ? import_iovec+0x74/0xa0
[  350.311175][T24488]  ___sys_sendmsg+0x21f/0x2a0
[  350.313173][T24488]  ? __pfx____sys_sendmsg+0x10/0x10
[  350.315297][T24488]  ? futex_wait+0x285/0x360
[  350.317166][T24488]  ? __fget_files+0x2a/0x420
[  350.319020][T24488]  ? __fget_files+0x3a0/0x420
[  350.320962][T24488]  __x64_sys_sendmsg+0x19b/0x260
[  350.323003][T24488]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  350.325158][T24488]  ? rcu_is_watching+0x15/0xb0
[  350.327057][T24488]  ? rcu_is_watching+0x15/0xb0
[  350.329056][T24488]  do_syscall_64+0xfa/0x3b0
[  350.331015][T24488]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.333630][T24488]  ? exc_page_fault+0x9f/0xf0
[  350.335640][T24488]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.337864][T24488] RIP: 0033:0x7fea70b8ebe9
[  350.339743][T24488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  350.347467][T24488] RSP: 002b:00007fea71a4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  350.350828][T24488] RAX: ffffffffffffffda RBX: 00007fea70db5fa0 RCX: 00007fea70b8ebe9
[  350.354051][T24488] RDX: 0000000000000010 RSI: 0000200000000640 RDI: 0000000000000003
[  350.357379][T24488] RBP: 00007fea70c11e19 R08: 0000000000000000 R09: 0000000000000000
[  350.360627][T24488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  350.363884][T24488] R13: 00007fea70db6038 R14: 00007fea70db5fa0 R15: 00007fff89a8f348
[  350.367047][T24488]  </TASK>
[  350.368355][T24488] ==================================================================
[  350.371547][T24488] Kernel panic - not syncing: KFENCE: panic_on_warn set ...
[  350.374588][T24488] CPU: 1 UID: 0 PID: 24488 Comm: syz.2.5425 Not tainted syzkaller #0 PREEMPT(full) 
[  350.378396][T24488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  350.382645][T24488] Call Trace:
[  350.384037][T24488]  <TASK>
[  350.385274][T24488]  dump_stack_lvl+0x99/0x250
[  350.387232][T24488]  ? __asan_memcpy+0x40/0x70
[  350.389144][T24488]  ? __pfx_dump_stack_lvl+0x10/0x10
[  350.391348][T24488]  ? __pfx__printk+0x10/0x10
[  350.393378][T24488]  vpanic+0x281/0x750
[  350.395128][T24488]  ? __pfx_vpanic+0x10/0x10
[  350.397073][T24488]  ? is_bpf_text_address+0x292/0x2b0
[  350.399307][T24488]  panic+0xb9/0xc0
[  350.400850][T24488]  ? __pfx_panic+0x10/0x10
[  350.402694][T24488]  ? __pfx__printk+0x10/0x10
[  350.404601][T24488]  check_panic_on_warn+0x89/0xb0
[  350.406632][T24488]  kfence_report_error+0x748/0xa40
[  350.408828][T24488]  ? __pfx_kfence_report_error+0x10/0x10
[  350.411234][T24488]  ? xfrm_alloc_spi+0x3b9/0xf30
[  350.413302][T24488]  ? xfrm_alloc_userspi+0x70b/0xc90
[  350.415498][T24488]  ? xfrm_user_rcv_msg+0x7a3/0xab0
[  350.417693][T24488]  ? netlink_rcv_skb+0x208/0x470
[  350.419785][T24488]  ? xfrm_netlink_rcv+0x79/0x90
[  350.421743][T24488]  ? netlink_unicast+0x82f/0x9e0
[  350.423774][T24488]  ? netlink_sendmsg+0x805/0xb30
[  350.425876][T24488]  ? __sock_sendmsg+0x21c/0x270
[  350.427880][T24488]  ? ____sys_sendmsg+0x505/0x830
[  350.429905][T24488]  ? ___sys_sendmsg+0x21f/0x2a0
[  350.431986][T24488]  ? __x64_sys_sendmsg+0x19b/0x260
[  350.434091][T24488]  ? do_syscall_64+0xfa/0x3b0
[  350.435995][T24488]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.438536][T24488]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  350.440938][T24488]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  350.443860][T24488]  kfence_handle_page_fault+0x358/0x4d0
[  350.446577][T24488]  page_fault_oops+0x19f/0xa10
[  350.448890][T24488]  ? __pfx_fixup_exception+0x10/0x10
[  350.451476][T24488]  ? __pfx_page_fault_oops+0x10/0x10
[  350.453978][T24488]  ? is_prefetch+0x403/0x640
[  350.456094][T24488]  ? _get_random_bytes+0x1bd/0x210
[  350.458191][T24488]  ? __pfx__get_random_bytes+0x10/0x10
[  350.460357][T24488]  ? __pfx_is_prefetch+0x10/0x10
[  350.462397][T24488]  ? get_random_u32+0x155/0x940
[  350.464436][T24488]  __bad_area_nosemaphore+0x11a/0x780
[  350.466682][T24488]  ? get_random_u32+0x155/0x940
[  350.468772][T24488]  ? get_random_u32+0x155/0x940
[  350.470877][T24488]  ? __pfx___bad_area_nosemaphore+0x10/0x10
[  350.473298][T24488]  ? spurious_kernel_fault+0x1c7/0x6b0
[  350.475375][T24488]  ? do_kern_addr_fault+0x30/0x80
[  350.477487][T24488]  exc_page_fault+0xc3/0xf0
[  350.479411][T24488]  asm_exc_page_fault+0x26/0x30
[  350.481396][T24488] RIP: 0010:xfrm_alloc_spi+0x3b9/0xf30
[  350.483579][T24488] Code: c1 08 c1 74 0a e8 67 09 9e f7 e9 14 02 00 00 49 8d 9d c4 00 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 9f 01 00 00 <8b> 1b 89 df 44 89 f6 e8 fb 0a 9e f7 44 39 f3 0f 85 df 00 00 00 49
[  350.491348][T24488] RSP: 0018:ffffc900065470e0 EFLAGS: 00010246
[  350.493802][T24488] RAX: 0000000000000000 RBX: ffff88813656ccc4 RCX: 0000000000080000
[  350.497008][T24488] RDX: ffffc90004152000 RSI: 000000000000024e RDI: 000000000000024f
[  350.500173][T24488] RBP: ffffc90006547230 R08: 0000000000000000 R09: 0000000000000000
[  350.503282][T24488] R10: dffffc0000000000 R11: fffff52000ca8e0c R12: dffffc0000000000
[  350.506381][T24488] R13: ffff88813656cc00 R14: 0000000008000000 R15: ffffc900065476a0
[  350.509496][T24488]  ? xfrm_alloc_spi+0x2a0/0xf30
[  350.511526][T24488]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  350.513597][T24488]  ? xfrm_find_acq+0x87/0xa0
[  350.515523][T24488]  xfrm_alloc_userspi+0x70b/0xc90
[  350.517573][T24488]  ? apparmor_capable+0x137/0x1b0
[  350.519660][T24488]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  350.521914][T24488]  ? __nla_parse+0x40/0x60
[  350.523746][T24488]  xfrm_user_rcv_msg+0x7a3/0xab0
[  350.525745][T24488]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  350.527984][T24488]  ? __pfx___mutex_trylock_common+0x10/0x10
[  350.530398][T24488]  ? rcu_is_watching+0x15/0xb0
[  350.532362][T24488]  ? trace_contention_end+0x39/0x120
[  350.534570][T24488]  ? __mutex_lock+0x335/0x1350
[  350.536559][T24488]  netlink_rcv_skb+0x208/0x470
[  350.538527][T24488]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  350.540754][T24488]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  350.542907][T24488]  ? lock_release+0x4b/0x3e0
[  350.544813][T24488]  ? netlink_deliver_tap+0x2e/0x1b0
[  350.546900][T24488]  xfrm_netlink_rcv+0x79/0x90
[  350.548813][T24488]  netlink_unicast+0x82f/0x9e0
[  350.550781][T24488]  ? __pfx_netlink_unicast+0x10/0x10
[  350.552909][T24488]  ? netlink_sendmsg+0x642/0xb30
[  350.554952][T24488]  ? skb_put+0x11b/0x210
[  350.556709][T24488]  netlink_sendmsg+0x805/0xb30
[  350.558712][T24488]  ? __pfx_netlink_sendmsg+0x10/0x10
[  350.560820][T24488]  ? futex_unqueue+0x22/0x240
[  350.562772][T24488]  ? aa_sock_msg_perm+0xf1/0x1d0
[  350.564795][T24488]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  350.567080][T24488]  ? __pfx_netlink_sendmsg+0x10/0x10
[  350.569278][T24488]  __sock_sendmsg+0x21c/0x270
[  350.571190][T24488]  ____sys_sendmsg+0x505/0x830
[  350.573086][T24488]  ? __pfx_____sys_sendmsg+0x10/0x10
[  350.575210][T24488]  ? import_iovec+0x74/0xa0
[  350.577091][T24488]  ___sys_sendmsg+0x21f/0x2a0
[  350.579023][T24488]  ? __pfx____sys_sendmsg+0x10/0x10
[  350.581272][T24488]  ? futex_wait+0x285/0x360
[  350.583233][T24488]  ? __fget_files+0x2a/0x420
[  350.585107][T24488]  ? __fget_files+0x3a0/0x420
[  350.587053][T24488]  __x64_sys_sendmsg+0x19b/0x260
[  350.589056][T24488]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  350.591385][T24488]  ? rcu_is_watching+0x15/0xb0
[  350.593440][T24488]  ? rcu_is_watching+0x15/0xb0
[  350.595480][T24488]  do_syscall_64+0xfa/0x3b0
[  350.597385][T24488]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.599933][T24488]  ? exc_page_fault+0x9f/0xf0
[  350.601859][T24488]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.604243][T24488] RIP: 0033:0x7fea70b8ebe9
[  350.606132][T24488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  350.613872][T24488] RSP: 002b:00007fea71a4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  350.616832][T24488] RAX: ffffffffffffffda RBX: 00007fea70db5fa0 RCX: 00007fea70b8ebe9
[  350.619875][T24488] RDX: 0000000000000010 RSI: 0000200000000640 RDI: 0000000000000003
[  350.623123][T24488] RBP: 00007fea70c11e19 R08: 0000000000000000 R09: 0000000000000000
[  350.626386][T24488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  350.629629][T24488] R13: 00007fea70db6038 R14: 00007fea70db5fa0 R15: 00007fff89a8f348
[  350.632940][T24488]  </TASK>
[  350.635048][T24488] Kernel Offset: disabled
[  350.636885][T24488] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:21:14  Registers:
info registers vcpu 0

CPU#0
RAX=1ffff92000018ebe RBX=ffffc900000c75a8 RCX=ffffc900000c7548 RDX=dffffc0000000000
RSI=ffffffff8172ea38 RDI=ffffc900000c7608 RBP=ffffc900000c75f0 RSP=ffffc900000c7548
R8 =ffffc900000c7607 R9 =0000000000000000 R10=ffffc900000c75a8 R11=fffff52000018ec1
R12=ffffc900000c75e0 R13=ffff88801c2f0000 R14=ffffc900000c75d0 R15=1ffff92000018eba
RIP=ffffffff8172ea6c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa4693f7eb0 CR3=0000000024a5a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fe39c212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bde60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=00000000000011b0 RDI=00000000000011b1 RBP=ffffffff99def670 RSP=ffffc90006546350
R8 =ffff888020648237 R9 =1ffff110040c9046 R10=dffffc0000000000 R11=ffffffff854f1bb0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1c27 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fea71a4f6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=ffff88813656ccc4 CR3=000000002c942000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fea70d87498 00007fea70d87470 XMM03=00007fea70d874a8 00007fea70d874a0
XMM04=00007fea718ed100 00007fea70d87460 XMM05=00007fea70d87478 00007fea70d874c0
XMM06=00007fea70d874b8 00007fea70d874b0 XMM07=00007fea70d874a8 00007fea70d874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fea70c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
