last executing test programs:

6m28.944842225s ago: executing program 1 (id=458):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1, r0}, 0x9)

6m28.861029228s ago: executing program 1 (id=459):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$kcm(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)

6m27.875072657s ago: executing program 1 (id=464):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b)

6m27.874672129s ago: executing program 1 (id=465):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]})
futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[], 0x1f}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000fc0000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000c00000000000000000000000000000000000000000000000000000004000000ffffffffffffffff000000000000000004000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000003000000004400050000000000000000000000000000000000ff08fffc3c00000002000000ac14143e00000000000000000000000016000000040200000104000000000000fdffffff"], 0xfc}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3200c02, &(0x7f0000000140)=ANY=[], 0x3, 0xa9c, &(0x7f0000001340)="$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")
open(&(0x7f0000000040)='./file0\x00', 0x480680, 0x40)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x40000, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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")
r5 = open(&(0x7f0000000440)='./file1\x00', 0x84242, 0x1df2a23c5997fa7f)
write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, 0x0, {{0x6, 0x0, 0x5, 0x81, 0x1, 0x1, {0x6, 0xff, 0x5, 0x8, 0xe, 0xd615, 0x9, 0x1, 0xfffffffe, 0x1000, 0x4000000, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x19}}}, 0xa0)
sendfile(r5, r5, &(0x7f0000000080), 0x7f03)
ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000000c0))
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
userfaultfd(0x801)
r6 = getpid()
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)

6m27.295907799s ago: executing program 1 (id=470):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYBLOB="04000d8008"], 0x24}, 0x1, 0x5502000000000000}, 0x0)

6m26.897819081s ago: executing program 1 (id=471):
r0 = socket$inet6(0xa, 0x2, 0x3a)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x7ffffffe}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0xfffe, 0x0, @mcast1={0xff, 0x4}}, 0x1c)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a0"], 0xffd8}}, 0x0)

6m26.846391716s ago: executing program 32 (id=471):
r0 = socket$inet6(0xa, 0x2, 0x3a)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x7ffffffe}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0xfffe, 0x0, @mcast1={0xff, 0x4}}, 0x1c)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a0"], 0xffd8}}, 0x0)

5m7.402403841s ago: executing program 0 (id=1299):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000440)={0x20, 0x38d06c00aa96fada, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})

5m4.230436796s ago: executing program 0 (id=1323):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x4, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

5m3.287095002s ago: executing program 0 (id=1329):
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file2\x00', 0x804818, &(0x7f00000001c0)={[{@check_relaxed}, {@unhide}, {@hide}, {}, {@unhide}, {@nojoliet}, {@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}]}, 0x2, 0x55a, &(0x7f0000000300)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba)
writev(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x9)

5m3.169966134s ago: executing program 0 (id=1331):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000080)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@clear_cache}, {@discard}, {@clear_cache}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'no'}}, {@nospace_cache}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f0000005600)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x99501e, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000001a40)={0x2020}, 0x2020)

5m2.652449014s ago: executing program 0 (id=1340):
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x11000)
io_setup(0x3fc, &(0x7f0000000500)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3be2b02884f95c63}])
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173)
open(0x0, 0x66842, 0x90)

5m1.90726088s ago: executing program 0 (id=1349):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000009f40), 0xffffffffffffffff)
sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f000000a000)={0x0, 0x0, &(0x7f0000009fc0)={&(0x7f0000009f80)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000000}, 0x0)

5m1.744642672s ago: executing program 33 (id=1349):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000009f40), 0xffffffffffffffff)
sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f000000a000)={0x0, 0x0, &(0x7f0000009fc0)={&(0x7f0000009f80)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000000}, 0x0)

4m33.31780025s ago: executing program 2 (id=1614):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0xaad80)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0xffffffff80000001, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

4m33.0774887s ago: executing program 2 (id=1616):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000140)=0x6, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)

4m32.932696492s ago: executing program 2 (id=1617):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000001040)={[{@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@numtail}, {@uni_xlate}, {@shortname_winnt}, {@shortname_winnt}, {@shortname_mixed}, {@shortname_lower}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@rodir}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x80}}, {@rodir}], [{@smackfsroot={'smackfsroot', 0x3d, 'iocharset'}}]}, 0x2, 0x28a, &(0x7f00000011c0)="$eJzs3c1qA1UUAOAzzaRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE7hx6/O4EV/AB1Dc2YU4ks7kTyctkbQp+n2bHs69J/fM3KHtZm4+eWVwfnpxdXbz5c/RbCaxdRAHcZtEJ7Zi4uuo9NOv1XkA4Jm7zfP4LS80itT14oz6ksp069GbAwAexfzf/033AgA8jfc/+PCdw+Pjo/eyrBkx+GbYTaL4WYwfnsVn0Y9e7EU7/ojIp4r4rbePjyLNxjrx2mA07I4rBx//UH7+4S8Rd/X70Y5Odf1+VpirHw279XihXP+gH713v492vFRd/8as/jYv66O7Ha+/Otf/brTjx0/jIvpxGsX/OpP6r/az7M3829+/+GicHdcno2G3EacLdyqvPfXeAAAAAAAAAAAAAAAAAAAAAADw37WbTXUWz9+ZHPx/z/g95wON5s7n2cuyLE+K+bP6NF5OI93ktQMAAAAAAAAAAAAAAAAAAMBzcXX9+flJv9+7XGswea2/Yij+XMw0ImLJ56QPr7WzaodRK1vrJxGrXVc9GneVD0+urXjHWuN+epdJGmvbgiSZZlrzQztRrDXOtIpgLrPaWt/9c+OacRdMnq7zk2TZ5k6CZtVDsoYgr3j8akurtv+eaZVXUDG5dc/q2y/+q57z9pKhJCLq05tZDrWqJ9fXew+f7ncQAAAAAAAAAAAAAAAAAABQmL30WzF4s4GGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGADZt//v0IwKouXzclr4yCNMrPhSwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB/4K8AAAD//wVfaYM=")
newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x1000)

4m32.548283647s ago: executing program 2 (id=1620):
syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000001b80)=ANY=[@ANYBLOB='utf8,errors=continue,namecase=1,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$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")
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

4m31.625541583s ago: executing program 2 (id=1636):
prlimit64(0x0, 0x2, &(0x7f0000000040)={0x1000000000000009, 0xffffffffffffffff}, 0x0)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000013000/0x4000)=nil)

4m31.169094829s ago: executing program 2 (id=1640):
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00')
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="31b4", 0x2}], 0x1)

4m31.107526036s ago: executing program 34 (id=1640):
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00')
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="31b4", 0x2}], 0x1)

2m13.369105387s ago: executing program 3 (id=3890):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000002200)={0x0, 0x0, {0x0, @struct, <r1=>0x0}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001080)={0x4, 0x1, {0x4, @struct={0x1, 0x9}, r1, 0x4, 0x6, 0xb6, 0x80000001, 0x7ff, 0x0, @struct={0x80000001}, 0x203, 0x6, [0x4, 0x7, 0x1, 0xffffffffffffffff, 0x4, 0x1]}, {0x100, @usage=0x40, 0x0, 0x401, 0x6, 0x2, 0x7ff, 0x0, 0x0, @usage=0xff, 0x6, 0x100, [0xee, 0x4, 0x1, 0x8000000000000000, 0x6, 0x258b6064]}, {0x0, @usage=0xff0, 0x0, 0x10, 0x800, 0xe1, 0x2, 0x7, 0x4, @struct={0x7f, 0x8}, 0xc0000000, 0xd, [0x7, 0x7, 0x8, 0xa118930, 0x8, 0xf8]}, {0xfffffffffffff1ac, 0x21f, 0x100}})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r3, 0xfffffffc)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r4, 0x7, 0x60, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x4040)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680))
msync(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x4)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
preadv(r5, &(0x7f0000000180)=[{0x0}], 0x1, 0x5fae, 0x4)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
read$FUSE(r6, &(0x7f00000001c0)={0x2020}, 0x1906)

2m12.447895281s ago: executing program 3 (id=3894):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x81, 0x7}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)

2m12.365639124s ago: executing program 3 (id=3896):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000007140100000000000000000008"], 0x30}}, 0x94)

2m12.307390691s ago: executing program 3 (id=3897):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x80071c, &(0x7f00000000c0)={[{@nogrpid}, {@acl}, {@lazytime}, {@noblock_validity}, {@errors_continue}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$eJzs3M1rXFUfAODfnXz0K23y9u3b923fVqNVLH4kTfphFy5UFAQVBF3UZUzSWjttpInQlqBRpK4L7sWl4NKVOzeiLsQ/QMGlFIoGoakgRO5XOklm0nx22szzwGTOuffce86595zJmXvm3gBaVm/6J4noioifI6I7j85P0Ju/zUxPDt+anhxOYnb29d+TLN3N6cnhMmm53Y4icrgSUfk4iWeTxfmOX75ybqhaHb1YxPsnzr/bP375ylNnzw+dGT0zemHw5MljRweePjF4fN52dXa1yLY6y9J63dz//tiBfS+9ee3V4VPX3vr+y3Rfew/m62vrcUe3FpXi5XrJetOj9sdsZuG6R5ed2f1hZ004aW9iQViRtohIT1dH1v+7oy1un7zuePGjphYO2FDp/6YtjVdPzQKbWBLNLgHQHOU/+vT7b/mKv+/S4OMecOO5iM4iPDM9OTwzdx2gPSrF8o4NzL83Ik5N/fVZ+oqVXocAAFiFbGzz5ILxX6YSe7P3fK5jVzGH0hMR/4qI3RHx74jYExH/icjS/jci/pdvPNu9zPx7F8QXj38q1+uWeZ2k479nasZ+MzX1L9562orYzqz+Hcnps9XRI8UxORwdW9L4wBJ5fPNCZ8N1teO/9JXmX44FiwJcb88v0M3tZGRoYmi9DsKNDyP2t9erfzI3E5C2gH0RsX9lu95VBs4+/sWBRonuXP8lrMM80+znEY/l538qFtS/lDSYn0zb+InB4/1bozp6pL9sFYv98NPV1xrlv6b6r4P0/G+f3/4XpOj+M8nnazuiWh29OL7yPK7+8knD7zQraP9z0vbfmbyRzVn/+Ha+7NLQxMTFgYjO5JUsXnSWrZEuH7y97aUiXqZP63/4UP3+v7vYJq3//yMibcQHI3Y9EBEPFmV/KCIejohDS9T/u+cfeWeJ+ieRRFPP/0jdz7+59t+T1M7XryLQdu7brxvN2y/v/B+LqeyzNpd9/t3Bcgu4xsMHAAAA94VKRHRFUunLw71dUan09eW/4d8T2yvVsfGJJ06PvXdhJL9HoCc6KuWVru6a66EDyVSxxzw+WFwrLtcfLa4bf9q2LYv3DY9VR5pcd2h1O+b3/yj7f+q3tmaXDthwjefRlrg1ANgUFvb/SpPKAdx9y/kdje8CsDnV6f/1nqEBbEKe1wKtq17//2BBfNH43wgBNoXF/f/XOo+sAzYj439oXfo/tC79H1rSWu7rX32gvFlgycRlEeum2brsO/xbJVA+HmYj89oWt5dEJQt0xT1Q99UEupeTOCK+WnNebetQ5rTH3N3jU/PAIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPvYPwEAAP//O47fqw==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
syz_mount_image$ext4(&(0x7f0000001d40)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000a40)={[{@auto_da_alloc}, {@barrier}, {@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@delalloc}, {@auto_da_alloc}]}, 0x1, 0x490, &(0x7f0000000580)="$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")
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e80)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, 0x0, 0x110}}], 0x1, 0x931766f6719c6d41)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf335263bd9bffbcc2542ded71038259ca171ce1a311ef07ec3ad71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x9]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}})
fdatasync(r0)

2m11.567900549s ago: executing program 3 (id=3913):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x30, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0xffe}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x4}}}]}, 0x30}}, 0x0)

2m11.217850801s ago: executing program 3 (id=3916):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48)

2m11.143386578s ago: executing program 35 (id=3916):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48)

1.849804952s ago: executing program 6 (id=5993):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10)
listen(r0, 0x2b4b)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

1.049469425s ago: executing program 5 (id=6002):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x18, r1, 0x1, 0x70bd30, 0x25dfdbfd, {0x1b}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

975.94302ms ago: executing program 5 (id=6004):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_buf(r0, 0x29, 0xd4, 0x0, 0x4)

911.923132ms ago: executing program 5 (id=6007):
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x25, 0x0, 0x0)

761.236959ms ago: executing program 6 (id=6010):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x17, 0x78, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0)

760.797162ms ago: executing program 6 (id=6012):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27}, 0x94)
syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010800000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a3000000000a0000000060a0104000000000000000001000000780004802c0001800e000100696d6d656469617465000000180002800c0002800500010034000000080001400000000d380001800c000100636f756e74657200280002800c00014000000000000000080c00024000000000000080000c0002400000000000000efb100001800a000100726564697200000008000b40000000000900010073797a30"], 0x128}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

708.569485ms ago: executing program 5 (id=6014):
setuid(0xee00)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0x2, 0x1, 0x0, 0x8}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x8000000, 0x2, 0x2, 0xf, 0x2000, 0x96}, 0x20)

655.563208ms ago: executing program 4 (id=6015):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x1c, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840c0}, 0x440040c0)

655.404473ms ago: executing program 4 (id=6016):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x4, 0x5, 0x0, 0x47, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3d}, 0x60)
getsockopt$inet_buf(r0, 0x118, 0x0, 0x0, &(0x7f0000000000))

655.245329ms ago: executing program 5 (id=6017):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2e8}}], 0x2, 0x4050)

591.43635ms ago: executing program 4 (id=6018):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000120001"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

591.235667ms ago: executing program 5 (id=6019):
r0 = socket(0x15, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt(r0, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000))

458.731145ms ago: executing program 4 (id=6020):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x8, 0x6}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28)

458.492411ms ago: executing program 4 (id=6021):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
unshare(0x28000600)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0)

351.153168ms ago: executing program 6 (id=6022):
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0xff, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000d80)=[@hoplimit={{0x14, 0x29, 0x32, 0x2}}], 0x18}}], 0x1, 0x4004800)

57.028549ms ago: executing program 4 (id=6023):
socket$inet(0x2, 0x2, 0x1)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup, r0, 0x2f}, 0x20)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x8818)
write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc)
splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0)

56.818566ms ago: executing program 6 (id=6024):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000001140)=@newtaction={0x5c, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0xf5, {0x0, 0x7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

0s ago: executing program 6 (id=6025):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@bh}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@errors_remount}, {@data_err_ignore}, {@nombcache}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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")

kernel console output (not intermixed with test programs):

.688721][T13594] sit0: left promiscuous mode
[  312.706638][T13594] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.709164][T13594] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.752292][T13603] loop3: detected capacity change from 0 to 512
[  312.772049][T13603] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #3: comm syz.3.3085: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 3, max 2(4), depth 0(0)
[  312.784012][T13603] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  312.784956][T13603] EXT4-fs error (device loop3): ext4_quota_enable:7228: comm syz.3.3085: Bad quota inode: 3, type: 0
[  312.787972][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  312.787982][    C1] EXT4-fs (loop3): initial error at time 1778557589: ext4_ext_check_inode:521: inode 3
[  312.787995][    C1] EXT4-fs (loop3): last error at time 1778557589: ext4_ext_check_inode:521: inode 3
[  312.800868][T13603] loop3: lost filesystem error report for type 5 error -117
[  312.801132][T13603] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  312.802426][T13594] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  312.804102][T13603] EXT4-fs (loop3): mount failed
[  312.847575][T13594] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  313.080839][T13594] team0: left promiscuous mode
[  313.083803][T13594] team_slave_0: left promiscuous mode
[  313.086070][T13594] team_slave_1: left promiscuous mode
[  313.093019][ T6835] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  313.104873][ T6835] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  313.112793][ T6835] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  313.124142][ T6835] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  313.541457][T13648] bond4: option ad_user_port_key: invalid value (2304)
[  313.544243][T13648] bond4: option ad_user_port_key: allowed values 0 - 1023
[  313.556556][T13648] bond4 (unregistering): Released all slaves
[  313.778785][ T5799] tipc: Node number set to 2382629223
[  315.684292][T13696] uprobe: syz.3.3119:13696 failed to unregister, leaking uprobe
[  315.830525][T13714] xt_connbytes: Forcing CT accounting to be enabled
[  315.900658][T13721] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3130'.
[  316.220374][T13754] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  316.228593][T13754] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  316.670965][T13774] loop3: detected capacity change from 0 to 2048
[  316.691887][T13774] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  316.696753][T13774] ext4 filesystem being mounted at /814/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  316.713178][T13774] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3154: bg 0: block 345: padding at end of block bitmap is not set
[  316.720500][T13774] EXT4-fs (loop3): Remounting filesystem read-only
[  316.742683][ T6820] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.359681][T13796] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  319.455496][ T5727] Bluetooth: hci0: command 0x0406 tx timeout
[  319.469164][T13829] overlayfs: failed to clone upperpath
[  319.799065][T13844] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  319.909557][T13847] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3182'.
[  320.441983][T13868] loop3: detected capacity change from 0 to 512
[  320.500028][T13868] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  320.515422][T13868] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  320.551219][T13868] EXT4-fs (loop3): orphan cleanup on readonly fs
[  320.554251][T13868] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.3192: bad orphan inode 15
[  320.566248][T13868] loop3: lost filesystem error report for type 5 error -117
[  320.571108][T13868] ext4_test_bit(bit=14, block=18) = 1
[  320.576529][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  320.576548][    C1] EXT4-fs (loop3): initial error at time 1778557598: ext4_orphan_get:1423
[  320.576564][    C1] EXT4-fs (loop3): last error at time 1778557598: ext4_orphan_get:1423
[  320.599679][T13868] is_bad_inode(inode)=0
[  320.603075][T13868] NEXT_ORPHAN(inode)=1023
[  320.604950][T13868] max_ino=32
[  320.608279][T13868] i_nlink=0
[  320.631864][T13868] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #15: comm syz.3.3192: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  320.638883][T13868] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  320.643196][T13868] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117)
[  320.659488][T13868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  320.697250][ T6820] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.549414][T13921] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3216'.
[  321.552572][T13921] veth1_to_batadv: entered allmulticast mode
[  322.043239][T13945] sctp: [Deprecated]: syz.4.3228 (pid 13945) Use of int in max_burst socket option.
[  322.043239][T13945] Use struct sctp_assoc_value instead
[  322.191604][T13953] loop3: detected capacity change from 0 to 1024
[  322.233664][T13953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  322.240990][T13953] ext4 filesystem being mounted at /837/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  322.276571][T13953] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.3231: Freeing blocks not in datazone - block = 0, count = 16
[  322.307921][   T82] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u10:4: bg 0: block 112: padding at end of block bitmap is not set
[  322.320921][   T82] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  322.326638][   T82] EXT4-fs (loop3): This should not happen!! Data will be lost
[  322.326638][   T82] 
[  322.330607][   T82] EXT4-fs (loop3): Total free blocks count 0
[  322.335753][   T82] EXT4-fs (loop3): Free/Dirty block details
[  322.346471][   T82] EXT4-fs (loop3): free_blocks=16
[  322.348999][   T82] EXT4-fs (loop3): dirty_blocks=16
[  322.351234][   T82] EXT4-fs (loop3): Block reservation details
[  322.353689][   T82] EXT4-fs (loop3): i_reserved_data_blocks=1
[  322.386573][ T6820] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  322.398553][ T6820] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  322.500983][ T1382] ieee802154 phy0 wpan0: encryption failed: -22
[  322.503673][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  322.561300][T13973] netlink: 'syz.5.3238': attribute type 1 has an invalid length.
[  322.564476][T13973] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  322.833782][   T34] audit: type=1326 audit(1778557600.581:17479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13980 comm="syz.4.3243" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90b019cdd9 code=0x0
[  322.962669][T13985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3244'.
[  323.028216][T13993] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3248'.
[  323.082565][T13995] netlink: 'syz.3.3249': attribute type 62 has an invalid length.
[  323.480044][T14024] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3262'.
[  323.519942][T14028] loop3: detected capacity change from 0 to 256
[  323.552593][T14028] FAT-fs (loop3): Directory bread(block 64) failed
[  323.558152][T14028] FAT-fs (loop3): Directory bread(block 65) failed
[  323.560377][T14028] FAT-fs (loop3): Directory bread(block 66) failed
[  323.562479][T14028] FAT-fs (loop3): Directory bread(block 67) failed
[  323.564879][T14028] FAT-fs (loop3): Directory bread(block 68) failed
[  323.571403][T14028] FAT-fs (loop3): Directory bread(block 69) failed
[  323.573806][T14028] FAT-fs (loop3): Directory bread(block 70) failed
[  323.577295][T14028] FAT-fs (loop3): Directory bread(block 71) failed
[  323.580270][T14028] FAT-fs (loop3): Directory bread(block 72) failed
[  323.582492][T14028] FAT-fs (loop3): Directory bread(block 73) failed
[  323.804078][   T34] audit: type=1326 audit(1778557601.551:17480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14034 comm="syz.5.3268" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd88279cdd9 code=0x0
[  323.858307][T14053] loop3: detected capacity change from 0 to 2048
[  323.926806][T14056] loop3: detected capacity change from 0 to 512
[  324.172103][T14056] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3276'.
[  324.369772][ T5727] Bluetooth: hci0: unexpected event for opcode 0x042c
[  324.450864][T14081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3289'.
[  324.992657][T14107] loop3: detected capacity change from 0 to 32768
[  324.995672][T14107] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3301 (14107)
[  325.009757][T14107] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  325.014035][T14107] BTRFS info (device loop3): using crc32c checksum algorithm
[  325.068018][T14107] BTRFS info (device loop3): enabling ssd optimizations
[  325.070931][T14107] BTRFS info (device loop3): turning on flush-on-commit
[  325.073729][T14107] BTRFS info (device loop3): enabling free space tree
[  325.077065][T14107] BTRFS info (device loop3): enabling auto defrag
[  325.079671][T14107] BTRFS info (device loop3): use lzo compression, level 1
[  325.082458][T14107] BTRFS info (device loop3): max_inline set to 4096
[  325.098461][   T34] audit: type=1800 audit(1778557602.851:17481): pid=14107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3301" name="file1" dev="loop3" ino=260 res=0 errno=0
[  325.125810][ T6820] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  325.149331][ T5727] Bluetooth: hci1: command 0x2016 tx timeout
[  325.472814][T14144] loop3: detected capacity change from 0 to 1024
[  325.492683][T14144] hfsplus: invalid catalog max_key_len 32512
[  325.496819][T14144] hfsplus: failed to load catalog file
[  325.608364][T14153] overlayfs: failed to clone upperpath
[  325.689764][T14159] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3318'.
[  326.028175][T14162] loop3: detected capacity change from 0 to 32768
[  327.460515][ T5727] Bluetooth: hci1: command 0x2016 tx timeout
[  329.262847][T14283] loop3: detected capacity change from 0 to 1024
[  329.363591][T14287] hfsplus: request for non-existent node 33423360 in B*Tree
[  329.367707][T14287] hfsplus: request for non-existent node 33423360 in B*Tree
[  329.913420][T14298] loop3: detected capacity change from 0 to 32768
[  329.964965][T14298] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  329.983273][T14298] XFS (loop3): Ending clean mount
[  330.012287][T14298] XFS (loop3): Quotacheck needed: Please wait.
[  330.070856][T14298] XFS (loop3): Quotacheck: Done.
[  330.106735][ T6820] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  330.391335][T14332] unsupported nlmsg_type 40
[  330.562741][T14350] loop3: detected capacity change from 0 to 512
[  330.585108][T14350] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  330.591734][T14350] ext4 filesystem being mounted at /879/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  330.757544][ T6820] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.324661][T14393] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3407'.
[  331.355734][T14397] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun!
[  331.814512][ T5726] Bluetooth: hci0: unexpected event for opcode 0x1003
[  331.933961][T14440] loop3: detected capacity change from 0 to 512
[  331.953609][T14440] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  331.989331][T14440] EXT4-fs (loop3): 1 truncate cleaned up
[  331.994703][T14440] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  332.059825][ T6820] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.132938][T14450] loop3: detected capacity change from 0 to 512
[  332.139039][T14450] EXT4-fs: Conflicting test_dummy_encryption options
[  332.389783][T14472] loop3: detected capacity change from 0 to 512
[  332.407707][T14472] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.3433: missing EA_INODE flag
[  332.411628][T14472] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  332.411798][T14472] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.3433: error while reading EA inode 12 err=-117
[  332.419145][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  332.419156][    C1] EXT4-fs (loop3): initial error at time 1778557610: ext4_xattr_inode_iget:441: inode 12
[  332.419169][    C1] EXT4-fs (loop3): last error at time 1778557610: ext4_xattr_inode_iget:441: inode 12
[  332.438204][T14472] loop3: lost filesystem error report for type 5 error -117
[  332.438466][T14472] EXT4-fs (loop3): 1 orphan inode deleted
[  332.443300][T14472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  333.392950][ T6820] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  334.406242][ T5799] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  334.583648][ T5799] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  334.596420][ T5799] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  334.608694][ T5799] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  334.612138][ T5799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.615237][ T5799] usb 4-1: Product: syz
[  334.616910][ T5799] usb 4-1: Manufacturer: syz
[  334.620376][ T5799] usb 4-1: SerialNumber: syz
[  334.863023][ T5799] usb 4-1: unit 4 not found!
[  334.903218][ T5799] usb 4-1: USB disconnect, device number 27
[  334.930168][ T5617] udevd[5617]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  335.867219][ T5726] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  335.875768][ T5726] Bluetooth: hci0: Injecting HCI hardware error event
[  335.882587][ T5726] Bluetooth: hci0: hardware error 0x00
[  335.914181][T14594] xt_CONNSECMARK: invalid mode: 0
[  336.247626][T14603] loop3: detected capacity change from 0 to 32768
[  336.777058][T14613] netlink: 'syz.3.3497': attribute type 12 has an invalid length.
[  336.799277][T14613] bond4: option primary_reselect: invalid value (255)
[  336.803942][T14613] bond4 (unregistering): Released all slaves
[  337.177465][T14645] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3510'.
[  337.313099][T14660] netlink: 'syz.4.3517': attribute type 12 has an invalid length.
[  337.322267][T14660] netlink: 'syz.4.3517': attribute type 29 has an invalid length.
[  337.326342][T14660] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3517'.
[  337.329973][T14660] netlink: 59 bytes leftover after parsing attributes in process `syz.4.3517'.
[  337.347402][T14663] xt_hashlimit: size too large, truncated to 1048576
[  337.496723][T14675] loop3: detected capacity change from 0 to 512
[  337.503685][T14675] EXT4-fs (loop3): Test dummy encryption mode enabled
[  337.513582][T14677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3525'.
[  337.520424][T14677] netlink: 'syz.5.3525': attribute type 5 has an invalid length.
[  337.527052][T14677] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3525'.
[  337.532044][T14675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  337.546582][T14677] geneve2: entered promiscuous mode
[  337.552619][T14677] geneve2: entered allmulticast mode
[  337.564792][   T13] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 39208 - 0
[  337.567696][   T13] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 39208 - 0
[  337.571553][T14675] EXT4-fs (loop3): Couldn't remount RDWR because of unprocessed orphan inode list.  Please umount/remount instead
[  337.577234][   T13] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 39208 - 0
[  337.582561][   T13] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 39208 - 0
[  337.607169][ T6820] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.935524][ T5726] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  338.838275][   T34] audit: type=1326 audit(1778557616.591:17482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14714 comm="syz.5.3543" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd88279cdd9 code=0x0
[  338.874574][T14719] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6
[  338.994010][T14727] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  340.990714][T14772] netlink: 'syz.5.3566': attribute type 1 has an invalid length.
[  341.031386][T14774] sctp: [Deprecated]: syz.4.3567 (pid 14774) Use of struct sctp_assoc_value in delayed_ack socket option.
[  341.031386][T14774] Use struct sctp_sack_info instead
[  341.169911][T14776] gretap1: entered allmulticast mode
[  341.198385][T14776] bond2: (slave gretap1): making interface the new active one
[  341.202673][T14776] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  342.047878][T14798] fuse: Bad value for 'fd'
[  342.378076][T14824] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3590'.
[  342.714687][T14843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3598'.
[  343.356834][T14863] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3606'.
[  343.360305][T14863] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3606'.
[  343.389589][T14865] netlink: 'syz.5.3607': attribute type 10 has an invalid length.
[  343.393283][T14865] macvlan1: entered promiscuous mode
[  343.396481][T14865] macvlan1: entered allmulticast mode
[  343.404027][T14865] veth1_vlan: entered allmulticast mode
[  343.413788][T14865] team0: Port device macvlan1 added
[  343.799207][T14871] fuse: Bad value for 'fd'
[  344.341925][T14894] netlink: 'syz.3.3622': attribute type 1 has an invalid length.
[  345.875740][ T5799] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  346.187877][ T5799] usb 4-1: Using ep0 maxpacket: 16
[  346.200428][ T5799] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  346.207548][ T5799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.215743][ T5799] usb 4-1: Product: syz
[  346.217584][ T5799] usb 4-1: Manufacturer: syz
[  346.222417][ T5799] usb 4-1: SerialNumber: syz
[  346.231732][ T5799] r8152-cfgselector 4-1: Unknown version 0x0000
[  346.233764][T14952] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3647'.
[  346.237479][ T5799] r8152-cfgselector 4-1: config 0 descriptor??
[  346.237961][T14952] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3647'.
[  346.244109][T14952] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3647'.
[  346.248494][T14952] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3647'.
[  346.647773][ T5799] r8152-cfgselector 4-1: USB disconnect, device number 28
[  347.462106][T14985] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3664'.
[  347.466291][T14985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3664'.
[  349.922304][T15064] netlink: 'syz.4.3699': attribute type 2 has an invalid length.
[  349.927686][T15064] netlink: 'syz.4.3699': attribute type 2 has an invalid length.
[  350.175633][ T5727] Bluetooth: hci1: command 0x2016 tx timeout
[  350.299317][T15086] sctp: [Deprecated]: syz.4.3709 (pid 15086) Use of struct sctp_assoc_value in delayed_ack socket option.
[  350.299317][T15086] Use struct sctp_sack_info instead
[  350.669536][T15094] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3711'.
[  351.577371][T15121] trusted_key: syz.4.3723 sent an empty control message without MSG_MORE.
[  351.651709][T15128] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow
[  351.865444][ T9478] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  352.017175][ T9478] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  352.025473][ T9478] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  352.033332][ T9478] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.043170][ T9478] usb 4-1: config 0 descriptor??
[  352.136701][T15144] netlink: 'syz.4.3734': attribute type 21 has an invalid length.
[  352.456312][ T9478] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor
[  352.473702][ T9478] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000D/input/input19
[  352.589719][ T9478] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  352.719281][    C1] keytouch 0003:0926:3333.000D: Event data for report 0 was too short (8 vs 1)
[  353.640521][T15182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3750'.
[  353.644158][T15182] bond0: Unable to set up delay as MII monitoring is disabled
[  353.732427][ T5726] Bluetooth: hci1: unexpected event for opcode 0x0c1a
[  353.788931][T15188] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3753'.
[  353.810805][T15188] 8021q: adding VLAN 0 to HW filter on device bond3
[  354.462100][   T34] audit: type=1326 audit(1778557632.211:17483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15216 comm="syz.5.3767" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd88279cdd9 code=0x0
[  354.491729][T15219] xt_addrtype: ipv6 does not support BROADCAST matching
[  354.648359][ T5799] usb 4-1: USB disconnect, device number 29
[  354.812777][T15238] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  355.070286][T15246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3780'.
[  355.601688][T15254] loop3: detected capacity change from 0 to 32768
[  355.676234][  T125] blkno = 5002c, nblocks = 1
[  355.678448][  T125] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map
[  355.678448][  T125] 
[  355.683988][  T125] ERROR: (device loop3): remounting filesystem as read-only
[  355.936280][ T6820] JFS: metapage_get_blocks failed
[  356.353231][T15266] loop3: detected capacity change from 0 to 40427
[  356.526692][T15270] netlink: 'syz.5.3793': attribute type 1 has an invalid length.
[  357.207398][   T34] audit: type=1326 audit(1778557634.961:17484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15283 comm="syz.5.3799" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd88279cdd9 code=0x0
[  357.300334][ T5727] Bluetooth: hci1: unexpected event for opcode 0x042f
[  357.901781][T15310] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3810'.
[  357.989354][T15314] overlayfs: failed to clone lowerpath
[  358.320987][T15321] batadv_slave_0: entered promiscuous mode
[  358.324533][T15321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3815'.
[  358.360998][T15320] batadv_slave_0: left promiscuous mode
[  358.439926][T15325] netlink: set zone limit has 4 unknown bytes
[  359.654089][T15353] fuse: Bad value for 'fd'
[  360.571153][T15382] tmpfs: Bad value for 'mpol'
[  360.730638][T15396] loop3: detected capacity change from 0 to 256
[  360.736144][T15396] exfat: Deprecated parameter 'utf8'
[  360.745652][T15396] exfat: Deprecated parameter 'utf8'
[  360.754075][T15398] fuse: Bad value for 'fd'
[  360.758065][T15396] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[  360.857801][T15405] loop3: detected capacity change from 0 to 8192
[  361.017301][T15417] xt_hashlimit: size too large, truncated to 1048576
[  361.217179][ T5726] Bluetooth: hci2: command 0x0406 tx timeout
[  361.379273][T15434] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3862'.
[  361.382842][T15434] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3862'.
[  361.387539][T15435] loop3: detected capacity change from 0 to 1764
[  361.541063][   T32] kernel read not supported for file /media4 (pid: 32 comm: kworker/1:2)
[  361.770044][T15468] netlink: 'syz.5.3879': attribute type 2 has an invalid length.
[  361.774004][T15468] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3879'.
[  363.172845][T15513] loop3: detected capacity change from 0 to 512
[  363.198848][T15513] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.3897: inode has both inline data and extents flags
[  363.225804][T15513] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  363.228466][T15513] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.3897: couldn't read orphan inode 15 (err -117)
[  363.238469][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  363.238487][    C0] EXT4-fs (loop3): initial error at time 1778557640: ext4_orphan_get:1397: inode 15
[  363.238509][    C0] EXT4-fs (loop3): last error at time 1778557640: ext4_orphan_get:1397: inode 15
[  363.248225][T15521] overlayfs: failed to clone upperpath
[  363.251649][   T34] audit: type=1326 audit(1778557641.001:17485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15520 comm="syz.4.3901" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b019cdd9 code=0x7ffc0000
[  363.267272][T15513] loop3: lost filesystem error report for type 5 error -117
[  363.268772][T15513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  363.270229][   T34] audit: type=1326 audit(1778557641.021:17486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15520 comm="syz.4.3901" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b019cdd9 code=0x7ffc0000
[  363.288691][   T34] audit: type=1326 audit(1778557641.021:17487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15520 comm="syz.4.3901" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b019cdd9 code=0x7ffc0000
[  363.297290][   T34] audit: type=1326 audit(1778557641.021:17488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15520 comm="syz.4.3901" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b019cdd9 code=0x7ffc0000
[  363.304790][   T34] audit: type=1326 audit(1778557641.021:17489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15520 comm="syz.4.3901" exe="/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f90b019cdd9 code=0x7ffc0000
[  363.313306][   T34] audit: type=1326 audit(1778557641.021:17490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15520 comm="syz.4.3901" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b019cdd9 code=0x7ffc0000
[  363.321702][   T34] audit: type=1326 audit(1778557641.021:17491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15520 comm="syz.4.3901" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b019cdd9 code=0x7ffc0000
[  363.330289][   T34] audit: type=1326 audit(1778557641.021:17492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15520 comm="syz.4.3901" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f90b019cdd9 code=0x7ffc0000
[  363.337711][   T34] audit: type=1326 audit(1778557641.021:17493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15520 comm="syz.4.3901" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f90b019cdd9 code=0x7ffc0000
[  363.364937][T15523] netlink: 'syz.4.3902': attribute type 1 has an invalid length.
[  363.414352][T15523] bond1: entered promiscuous mode
[  363.422037][T15523] 8021q: adding VLAN 0 to HW filter on device bond1
[  363.465721][T15524] loop3: detected capacity change from 512 to 64
[  363.493346][T15523] 8021q: adding VLAN 0 to HW filter on device bond1
[  363.500606][T15513] syz.3.3897: attempt to access beyond end of device
[  363.500606][T15513] loop3: rw=14337, sector=98, nr_sectors = 2 limit=64
[  363.505975][T15523] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[  363.513194][T15523] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  363.521318][T15513] Buffer I/O error on dev loop3, logical block 49, lost sync page write
[  363.527939][T15523] bond1: (slave vcan1): making interface the new active one
[  363.530427][T15513] EXT4-fs error (device loop3): ext4_splice_branch:472: inode #18: block 49: comm syz.3.3897: IO error syncing itable block
[  363.534475][T15523] vcan1: entered promiscuous mode
[  363.539136][T15523] bond1: (slave vcan1): Enslaving as an active interface with an up link
[  363.544512][T15513] EXT4-fs error (device loop3): ext4_check_bdev_write_error:227: comm syz.3.3897: Error while async write back metadata
[  363.552166][T15513] syz.3.3897: attempt to access beyond end of device
[  363.552166][T15513] loop3: rw=2051, sector=474, nr_sectors = 2 limit=64
[  363.570282][T15531] syz.3.3897: attempt to access beyond end of device
[  363.570282][T15531] loop3: rw=2049, sector=74, nr_sectors = 8 limit=64
[  363.585555][T15513] EXT4-fs (loop3): discard request in group:0 block:236 count:1 failed with -5
[  363.600070][T15513] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: IO failure
[  363.608030][T15513] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 18: block 237:freeing already freed block (bit 236); block bitmap corrupt.
[  363.616256][T15513] EXT4-fs (loop3): pa ffff8881b9bd20e8: logic 13, phys. 205, len 51
[  363.619359][T15513] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5459: group 0, free 50, pa_free 49
[  363.636769][T15531] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 37)
[  363.644049][T15531] Buffer I/O error on device loop3, logical block 37
[  363.646341][T15531] Buffer I/O error on device loop3, logical block 38
[  363.648426][T15531] Buffer I/O error on device loop3, logical block 39
[  363.650551][T15531] Buffer I/O error on device loop3, logical block 40
[  363.653487][T15513] syz.3.3897: attempt to access beyond end of device
[  363.653487][T15513] loop3: rw=14337, sector=98, nr_sectors = 2 limit=64
[  363.658061][T15513] Buffer I/O error on dev loop3, logical block 49, lost sync page write
[  363.660955][T15513] EXT4-fs error (device loop3): ext4_free_data:978: inode #18: block 49: comm syz.3.3897: IO error syncing itable block
[  363.666019][T15531] syz.3.3897: attempt to access beyond end of device
[  363.666019][T15531] loop3: rw=2049, sector=106, nr_sectors = 8 limit=64
[  363.671188][T15531] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 53)
[  363.676669][T15513] EXT4-fs error (device loop3): ext4_check_bdev_write_error:227: comm syz.3.3897: Error while async write back metadata
[  363.683942][T15531] Buffer I/O error on device loop3, logical block 53
[  363.686547][T15531] Buffer I/O error on device loop3, logical block 54
[  363.689131][T15531] Buffer I/O error on device loop3, logical block 55
[  363.691720][T15531] Buffer I/O error on device loop3, logical block 56
[  363.711224][T15531] syz.3.3897: attempt to access beyond end of device
[  363.711224][T15531] loop3: rw=2049, sector=122, nr_sectors = 8 limit=64
[  363.717695][T15513] syz.3.3897: attempt to access beyond end of device
[  363.717695][T15513] loop3: rw=2049, sector=74, nr_sectors = 24 limit=64
[  363.728980][T15531] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 61)
[  363.738450][T15531] Buffer I/O error on device loop3, logical block 61
[  363.740589][T15531] Buffer I/O error on device loop3, logical block 62
[  363.748232][T15513] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 37)
[  363.762644][T15531] syz.3.3897: attempt to access beyond end of device
[  363.762644][T15531] loop3: rw=2049, sector=138, nr_sectors = 8 limit=64
[  363.767502][T15531] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 69)
[  363.772850][T15531] syz.3.3897: attempt to access beyond end of device
[  363.772850][T15531] loop3: rw=2049, sector=130, nr_sectors = 8 limit=64
[  363.783655][T15531] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 65)
[  363.787324][T15531] syz.3.3897: attempt to access beyond end of device
[  363.787324][T15531] loop3: rw=2049, sector=322, nr_sectors = 8 limit=64
[  363.791736][T15531] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 161)
[  363.796807][T15531] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 201)
[  363.802085][T15531] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 113)
[  363.802354][T15513] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 57)
[  363.817211][   T34] audit: type=1326 audit(1778557641.561:17494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15547 comm="syz.5.3912" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd88279cdd9 code=0x0
[  363.953143][T12551] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  364.404006][ T5726] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  364.412033][ T5726] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  364.417978][ T5726] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  364.421777][ T5726] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  364.425021][ T5726] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  364.753215][T15564] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.755899][T15564] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.758367][T15564] bridge_slave_0: entered allmulticast mode
[  364.761762][T15564] bridge_slave_0: entered promiscuous mode
[  364.765575][T15564] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.768605][T15564] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.771534][T15564] bridge_slave_1: entered allmulticast mode
[  364.774727][T15564] bridge_slave_1: entered promiscuous mode
[  364.802950][T15564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  364.810251][T15564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  364.839053][T15564] team0: Port device team_slave_0 added
[  364.842178][T15564] team0: Port device team_slave_1 added
[  364.871726][T15564] batman_adv: batadv0: Adding interface: batadv_slave_0
[  364.874336][T15564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  364.885206][T15564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  364.893269][T15564] batman_adv: batadv0: Adding interface: batadv_slave_1
[  364.897602][T15564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  364.906677][T15564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  364.937346][T15564] hsr_slave_0: entered promiscuous mode
[  364.940083][T15564] hsr_slave_1: entered promiscuous mode
[  364.942576][T15564] debugfs: 'hsr0' already exists in 'hsr'
[  364.944670][T15564] Cannot create hsr debugfs directory
[  365.078462][T15564] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  365.094306][T15564] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  365.097600][T15564] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  365.113621][T15564] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  365.119345][T15564] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  365.123364][T15564] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  365.128433][T15564] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  365.134742][T15564] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  365.149459][T15564] bridge0: port 2(bridge_slave_1) entered blocking state
[  365.152144][T15564] bridge0: port 2(bridge_slave_1) entered forwarding state
[  365.154683][T15564] bridge0: port 1(bridge_slave_0) entered blocking state
[  365.157242][T15564] bridge0: port 1(bridge_slave_0) entered forwarding state
[  365.204856][T15564] 8021q: adding VLAN 0 to HW filter on device bond0
[  365.237596][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[  365.242580][   T37] bridge0: port 2(bridge_slave_1) entered disabled state
[  365.254164][T15564] 8021q: adding VLAN 0 to HW filter on device team0
[  365.264366][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  365.267480][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  365.279229][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  365.282339][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  365.587676][T15564] 8021q: adding VLAN 0 to HW filter on device batadv0
[  365.839925][T15564] veth0_vlan: entered promiscuous mode
[  365.846238][T15564] veth1_vlan: entered promiscuous mode
[  365.863942][T15564] veth0_macvtap: entered promiscuous mode
[  365.870592][T15564] veth1_macvtap: entered promiscuous mode
[  365.880026][T15564] batman_adv: batadv0: Interface activated: batadv_slave_0
[  365.888759][T15564] batman_adv: batadv0: Interface activated: batadv_slave_1
[  365.895470][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  365.900490][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  365.911391][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  365.927894][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  366.064914][ T3393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.071397][ T3393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.110799][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.114406][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.495632][ T5726] Bluetooth: hci2: command tx timeout
[  367.485571][T13615] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  367.504570][T15710] netlink: 'syz.4.3972': attribute type 1 has an invalid length.
[  367.522416][T15710] 8021q: adding VLAN 0 to HW filter on device bond2
[  367.546903][T15710] bond2: entered promiscuous mode
[  367.552466][T15710] bond2: entered allmulticast mode
[  367.590996][T15717] netlink: 'syz.4.3975': attribute type 4 has an invalid length.
[  367.640167][T13615] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  367.654609][T13615] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  367.658603][T13615] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  367.667926][T13615] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  367.671811][T13615] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.675157][T13615] usb 7-1: Product: syz
[  367.678570][T13615] usb 7-1: Manufacturer: syz
[  367.680531][T13615] usb 7-1: SerialNumber: syz
[  367.689276][T13615] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found
[  367.692153][T13615] cdc_ncm 7-1:1.0: bind() failure
[  367.746939][T15720] Invalid ELF header magic: != ELF
[  367.891417][T13615] usb 7-1: USB disconnect, device number 2
[  368.432370][T15739] tmpfs: Bad value for 'mpol'
[  368.576634][ T5726] Bluetooth: hci2: command tx timeout
[  368.725861][T15757] netlink: 'syz.6.3994': attribute type 5 has an invalid length.
[  368.962994][T15775] xt_CT: You must specify a L4 protocol and not use inversions on it
[  369.585630][  T403] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  369.995411][  T403] usb 7-1: Using ep0 maxpacket: 16
[  369.998753][  T403] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  370.002731][  T403] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  370.006280][  T403] usb 7-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  370.009577][  T403] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.013861][  T403] usb 7-1: config 0 descriptor??
[  370.430285][  T403] ntrig 0003:1B96:0008.000E: bogus close delimiter
[  370.432881][  T403] ntrig 0003:1B96:0008.000E: item 0 4 2 10 parsing failed
[  370.438040][  T403] ntrig 0003:1B96:0008.000E: parse failed
[  370.440564][  T403] ntrig 0003:1B96:0008.000E: probe with driver ntrig failed with error -22
[  370.535561][T15825] netlink: 'syz.5.4024': attribute type 13 has an invalid length.
[  370.631201][  T403] usb 7-1: USB disconnect, device number 3
[  370.656658][ T5726] Bluetooth: hci2: command tx timeout
[  370.700280][T15843] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4033'.
[  370.705641][T15843] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4033'.
[  370.913320][   T34] audit: type=1326 audit(1778557648.661:17495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15846 comm="syz.5.4035" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88279cdd9 code=0x7fc00000
[  371.035792][   T34] audit: type=1326 audit(1778557648.791:17496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.4.4041" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f90b013e159 code=0x7ffc0000
[  371.053570][   T34] audit: type=1326 audit(1778557648.791:17497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.4.4041" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f90b013e159 code=0x7ffc0000
[  371.068288][   T34] audit: type=1326 audit(1778557648.791:17498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.4.4041" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f90b013e159 code=0x7ffc0000
[  371.076801][   T34] audit: type=1326 audit(1778557648.791:17499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.4.4041" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b019cdd9 code=0x7ffc0000
[  371.086016][   T34] audit: type=1326 audit(1778557648.791:17500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.4.4041" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f90b013e159 code=0x7ffc0000
[  371.092726][   T34] audit: type=1326 audit(1778557648.791:17501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.4.4041" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b019cdd9 code=0x7ffc0000
[  371.100284][   T34] audit: type=1326 audit(1778557648.801:17502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.4.4041" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b019cdd9 code=0x7ffc0000
[  371.107453][   T34] audit: type=1326 audit(1778557648.801:17503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.4.4041" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f90b013e159 code=0x7ffc0000
[  371.115234][   T34] audit: type=1326 audit(1778557648.801:17504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.4.4041" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f90b013e159 code=0x7ffc0000
[  371.222556][T15870] x_tables: (null)_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 16
[  371.975111][T15899] ip6erspan0: entered allmulticast mode
[  372.737914][ T5726] Bluetooth: hci2: command tx timeout
[  372.776223][T15944] loop6: detected capacity change from 0 to 32768
[  372.809379][T15944] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  372.900960][T15952] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4080'.
[  372.992548][T15960] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4083'.
[  373.525720][T15944] syz.6.4078 (15944) used greatest stack depth: 19064 bytes left
[  373.653110][T15564] ocfs2: Unmounting device (7,6) on (node local)
[  373.977080][T16004] loop6: detected capacity change from 0 to 512
[  374.000471][T16004] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  374.060578][T15564] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.371628][T16026] netlink: 'syz.4.4108': attribute type 3 has an invalid length.
[  374.653301][T16033] loop6: detected capacity change from 0 to 128
[  374.656944][T16033] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  374.672234][T16033] hpfs: filesystem error: improperly stopped
[  374.675842][T16033] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  374.684060][T16033] hpfs: You really don't want any checks? You are crazy...
[  374.690166][T16033] hpfs: hpfs_map_sector(): read error
[  374.691938][T16033] hpfs: code page support is disabled
[  374.694704][T16033] hpfs: hpfs_map_4sectors(): unaligned read
[  374.696903][T16033] hpfs: hpfs_map_4sectors(): unaligned read
[  374.698833][T16033] hpfs: filesystem error: unable to find root dir
[  374.713579][T16033] hpfs: hpfs_map_4sectors(): unaligned read
[  374.719125][T16033] hpfs: hpfs_map_sector(): read error
[  375.956573][T16088] netlink: 'syz.4.4138': attribute type 1 has an invalid length.
[  375.988692][T16088] 8021q: adding VLAN 0 to HW filter on device bond3
[  376.021892][T16088] bond3: (slave ip6gretap1): making interface the new active one
[  376.028457][T16088] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  376.050771][T16088] bond3: entered allmulticast mode
[  376.052988][T16088] ip6gretap1: entered allmulticast mode
[  376.103171][T16096] xt_TCPMSS: Only works on TCP SYN packets
[  376.258967][T16112] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4147'.
[  376.482556][T16128] netlink: 'syz.5.4154': attribute type 49 has an invalid length.
[  377.695109][T16168] loop6: detected capacity change from 0 to 512
[  377.701066][T16168] EXT4-fs warning (device loop6): ext4_multi_mount_protect:288: Invalid MMP block in superblock
[  377.748176][T16174] netlink: 'syz.6.4175': attribute type 1 has an invalid length.
[  377.773417][T16174] 8021q: adding VLAN 0 to HW filter on device bond1
[  377.783425][T16174] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4175'.
[  377.788475][T16174] bond1: entered allmulticast mode
[  377.804686][T16174] bond1: (slave dummy0): making interface the new active one
[  377.808492][T16174] dummy0: entered allmulticast mode
[  377.811552][T16174] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  378.238095][T16203] loop6: detected capacity change from 0 to 256
[  378.249148][T16203] exfat: Deprecated parameter 'utf8'
[  378.257160][T16203] exfat: Deprecated parameter 'utf8'
[  378.261180][T16203] exfat: Deprecated parameter 'utf8'
[  378.271669][T16203] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  378.561668][T16223] overlayfs: failed to clone upperpath
[  378.885882][T16236] loop6: detected capacity change from 0 to 256
[  378.889305][T16236] FAT-fs (loop6): bogus number of FAT sectors
[  378.892685][T16236] FAT-fs (loop6): Can't find a valid FAT filesystem
[  378.981733][T16244] loop6: detected capacity change from 0 to 256
[  378.986543][T16244] exfat: Deprecated parameter 'namecase'
[  378.991704][T16244] exfat: Deprecated parameter 'namecase'
[  378.995017][T16244] exfat: Deprecated parameter 'utf8'
[  379.001461][T16244] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  379.014183][T16244] overlay: filesystem on ./file0 not supported
[  381.618230][T16318] loop6: detected capacity change from 0 to 256
[  381.820384][T16328] loop6: detected capacity change from 0 to 2048
[  381.829580][T16328] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  381.910527][T16332] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.915995][T16332] bridge0: port 1(bridge_slave_0) entered disabled state
[  382.224840][T16348] comedi comedi3: 8255: I/O base address not correctly aligned
[  382.577809][T16356] fuse: Bad value for 'fd'
[  382.633695][   T34] kauditd_printk_skb: 22 callbacks suppressed
[  382.633705][   T34] audit: type=1326 audit(1778557916.385:17527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16359 comm="syz.5.4260" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88279cdd9 code=0x7ffc0000
[  382.643458][   T34] audit: type=1326 audit(1778557916.395:17528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16359 comm="syz.5.4260" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88279cdd9 code=0x7ffc0000
[  382.650997][   T34] audit: type=1326 audit(1778557916.395:17529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16359 comm="syz.5.4260" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88279cdd9 code=0x7ffc0000
[  382.660774][   T34] audit: type=1326 audit(1778557916.395:17530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16359 comm="syz.5.4260" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88279cdd9 code=0x7ffc0000
[  382.669536][   T34] audit: type=1326 audit(1778557916.405:17531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16359 comm="syz.5.4260" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd88279cdd9 code=0x7ffc0000
[  382.677449][   T34] audit: type=1326 audit(1778557916.405:17532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16359 comm="syz.5.4260" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88279cdd9 code=0x7ffc0000
[  382.685676][   T34] audit: type=1326 audit(1778557916.405:17533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16359 comm="syz.5.4260" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88279cdd9 code=0x7ffc0000
[  382.693531][   T34] audit: type=1326 audit(1778557916.405:17534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16359 comm="syz.5.4260" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88279cdd9 code=0x7ffc0000
[  382.700276][   T34] audit: type=1326 audit(1778557916.405:17535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16359 comm="syz.5.4260" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88279cdd9 code=0x7ffc0000
[  382.707416][   T34] audit: type=1326 audit(1778557916.415:17536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16359 comm="syz.5.4260" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd88279cdd9 code=0x7ffc0000
[  383.939227][ T1382] ieee802154 phy0 wpan0: encryption failed: -22
[  383.941729][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  383.964007][T16386] loop6: detected capacity change from 0 to 4096
[  383.967214][T16386] ntfs3: Unknown parameter ''
[  383.977086][T16386] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4270'.
[  385.103749][T16405] bridge0: port 3(netdevsim0) entered blocking state
[  385.106344][T16405] bridge0: port 3(netdevsim0) entered disabled state
[  385.121319][T16405] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  385.738113][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810fa6c000: rx timeout, send abort
[  385.748214][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88810fa6c000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  386.487996][T16427] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4287'.
[  386.491567][T16427] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4287'.
[  387.454476][T16475] sch_tbf: burst 4 is lower than device lo mtu (65550) !
[  387.772706][T16495] fuse: Bad value for 'fd'
[  387.838551][T16501] loop6: detected capacity change from 0 to 16
[  387.848041][T16501] erofs (device loop6): mounted with root inode @ nid 36.
[  387.860578][T16501] erofs (device loop6): readahead error at folio 2 @ nid 89
[  387.865939][T16501] erofs (device loop6): inconsistent algorithmtype 2 for nid 89
[  387.869047][T16501] erofs (device loop6): readahead error at folio 1 @ nid 89
[  387.876855][T16501] erofs (device loop6): inconsistent algorithmtype 2 for nid 89
[  387.879991][T16501] erofs (device loop6): readahead error at folio 0 @ nid 89
[  387.883076][T16501] erofs (device loop6): inconsistent algorithmtype 2 for nid 89
[  387.892532][T16501] erofs (device loop6): inconsistent algorithmtype 2 for nid 89
[  387.895971][T16501] erofs (device loop6): read error -117 @ 0 of nid 89
[  387.900116][   T34] kauditd_printk_skb: 441 callbacks suppressed
[  387.900127][   T34] audit: type=1800 audit(1778557921.655:17978): pid=16501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4322" name="file3" dev="loop6" ino=89 res=0 errno=0
[  387.973721][T16505] bond4: option min_links: invalid value (18446744073709551612)
[  387.975157][T16510] loop6: detected capacity change from 0 to 256
[  387.984386][T16505] bond4: option min_links: allowed values 0 - 2147483647
[  387.994286][T16505] bond4 (unregistering): Released all slaves
[  388.246851][T16520] fuse: Bad value for 'fd'
[  389.122269][T16539] fuse: Bad value for 'fd'
[  389.145707][  T403] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  389.206289][T16545] netlink: 'syz.5.4342': attribute type 5 has an invalid length.
[  389.298370][  T403] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  389.307352][  T403] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  389.313787][  T403] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  389.319645][  T403] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  389.323815][  T403] usb 7-1: SerialNumber: syz
[  389.459004][   T34] audit: type=1326 audit(1778557923.215:17979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16570 comm="syz.5.4356" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd88279cdd9 code=0x0
[  389.540180][  T403] usb 7-1: 0:2 : does not exist
[  389.567264][  T403] usb 7-1: USB disconnect, device number 4
[  389.591893][ T5617] udevd[5617]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  390.279504][T16588] xt_hashlimit: size too large, truncated to 1048576
[  390.454481][T16595] overlay: Unknown parameter '\'
[  391.222674][T16611] netlink: 'syz.4.4373': attribute type 5 has an invalid length.
[  391.392803][T16617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4376'.
[  391.397685][T16617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4376'.
[  391.518453][T16625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4380'.
[  392.155940][T16638] loop6: detected capacity change from 0 to 256
[  392.176638][T16638] FAT-fs (loop6): Directory bread(block 64) failed
[  392.179326][T16638] FAT-fs (loop6): Directory bread(block 65) failed
[  392.181960][T16638] FAT-fs (loop6): Directory bread(block 66) failed
[  392.184274][T16638] FAT-fs (loop6): Directory bread(block 67) failed
[  392.187164][T16638] FAT-fs (loop6): Directory bread(block 68) failed
[  392.189330][T16638] FAT-fs (loop6): Directory bread(block 69) failed
[  392.191386][T16638] FAT-fs (loop6): Directory bread(block 70) failed
[  392.193413][T16638] FAT-fs (loop6): Directory bread(block 71) failed
[  392.196727][T16638] FAT-fs (loop6): Directory bread(block 72) failed
[  392.198919][T16638] FAT-fs (loop6): Directory bread(block 73) failed
[  392.242278][T16642] netlink: 'syz.4.4387': attribute type 2 has an invalid length.
[  392.245778][T16642] netlink: 51 bytes leftover after parsing attributes in process `syz.4.4387'.
[  392.340763][T16652] tmpfs: Bad value for 'mpol'
[  392.427709][T16656] loop6: detected capacity change from 0 to 2048
[  392.762874][T16670] netlink: 'syz.6.4400': attribute type 4 has an invalid length.
[  394.102657][T16697] loop6: detected capacity change from 0 to 2048
[  394.117106][T16697] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  395.470745][T16736] loop6: detected capacity change from 0 to 1024
[  395.474717][T16736] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  395.783028][T16751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4436'.
[  395.997503][T13615] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  395.998478][T16767] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  396.145805][T13615] usb 7-1: Using ep0 maxpacket: 32
[  396.161684][T13615] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  396.176409][T13615] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  396.180499][T13615] usb 7-1: config 0 interface 0 has no altsetting 0
[  396.189714][T13615] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  396.194741][T13615] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.199620][T13615] usb 7-1: Product: syz
[  396.202604][T13615] usb 7-1: Manufacturer: syz
[  396.205714][T13615] usb 7-1: SerialNumber: syz
[  396.211238][T13615] usb 7-1: config 0 descriptor??
[  396.848523][T13615] gs_usb 7-1:0.0: Configuring for 256 interfaces
[  396.851827][T13615] gs_usb 7-1:0.0: Driver cannot handle more that 255 CAN interfaces
[  396.854961][T13615] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -22
[  396.933341][T13608] usb 7-1: USB disconnect, device number 5
[  397.589982][T16830] loop6: detected capacity change from 0 to 512
[  397.629436][T16830] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  397.638565][T16830] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  397.668807][T15564] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  397.812758][T16839] veth3: entered promiscuous mode
[  397.815046][T16839] veth3: entered allmulticast mode
[  398.157874][T16864] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4475'.
[  398.259985][T16876] loop6: detected capacity change from 0 to 1024
[  398.282013][T16876] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  398.319059][T16882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4483'.
[  398.338964][T15564] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  398.347589][   T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  398.351990][   T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  398.355138][T16882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4483'.
[  398.358631][   T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  398.363091][T16882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4483'.
[  398.367815][   T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  398.420893][T16885] loop6: detected capacity change from 0 to 512
[  398.443983][T16885] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #12: comm syz.6.4484: iget: bad extended attribute block 2
[  398.450104][T16885] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  398.450376][T16885] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.4484: error while reading EA inode 12 err=-117
[  398.458019][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  398.458030][    C1] EXT4-fs (loop6): initial error at time 1778557932: ext4_xattr_inode_iget:441: inode 12
[  398.458043][    C1] EXT4-fs (loop6): last error at time 1778557932: ext4_xattr_inode_iget:441: inode 12
[  398.467743][T16885] loop6: lost filesystem error report for type 5 error -117
[  398.468068][T16885] EXT4-fs (loop6): 1 orphan inode deleted
[  398.477454][T16885] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  398.501627][T15564] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  398.792709][T16899] fuse: Bad value for 'fd'
[  398.889255][T16893] loop6: detected capacity change from 0 to 32768
[  398.892798][T16893] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4489 (16893)
[  398.900899][T16893] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  398.904922][T16893] BTRFS info (device loop6): using sha256 checksum algorithm
[  398.991682][T16893] BTRFS info (device loop6): enabling ssd optimizations
[  398.994267][T16893] BTRFS info (device loop6): turning on async discard
[  398.997429][T16893] BTRFS info (device loop6): enabling free space tree
[  399.025698][T15564] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  399.540223][T16923] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  400.824743][T16974] loop6: detected capacity change from 0 to 32768
[  400.864963][T16974] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  400.875887][T16974] XFS (loop6): Ending clean mount
[  400.913357][T15564] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  401.490684][T16993] loop6: detected capacity change from 0 to 512
[  401.500862][T16993] EXT4-fs warning (device loop6): ext4_multi_mount_protect:288: Invalid MMP block in superblock
[  401.629377][T17001] loop6: detected capacity change from 0 to 2048
[  401.637161][T17001] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  402.567291][T17049] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4549'.
[  402.716082][T17057] PKCS7: Unknown OID: [4] (bad)
[  402.718011][T17057] PKCS7: Only support pkcs7_signedData type
[  402.897595][T17068] loop6: detected capacity change from 0 to 128
[  402.929073][T17068] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  402.936184][T17068] hpfs: filesystem error: improperly stopped
[  402.939361][T17068] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  402.944269][T17068] hpfs: You really don't want any checks? You are crazy...
[  402.961772][T17068] hpfs: hpfs_map_sector(): read error
[  402.968398][T17068] hpfs: code page support is disabled
[  402.975827][T17068] hpfs: hpfs_map_4sectors(): unaligned read
[  402.979925][T17068] hpfs: hpfs_map_4sectors(): unaligned read
[  402.983749][T17068] hpfs: filesystem error: unable to find root dir
[  403.142931][T17086] input: syz0 as /devices/virtual/input/input20
[  403.347597][T17096] loop6: detected capacity change from 0 to 8192
[  404.788607][T17149] 9p: Unknown Cache mode or invalid value m
[  405.790022][T17179] netlink: 264 bytes leftover after parsing attributes in process `syz.6.4606'.
[  405.795760][T17179] netlink: 264 bytes leftover after parsing attributes in process `syz.6.4606'.
[  406.102209][T17191] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4610'.
[  406.535533][T13615] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  406.687348][T13615] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  406.694497][T13615] usb 7-1: config 0 has no interface number 0
[  406.701966][T17202] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4615'.
[  406.705891][T13615] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  406.705905][T13615] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.705913][T13615] usb 7-1: Product: syz
[  406.705919][T13615] usb 7-1: Manufacturer: syz
[  406.705925][T13615] usb 7-1: SerialNumber: syz
[  406.707420][T13615] usb 7-1: config 0 descriptor??
[  406.763361][T17207] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4618'.
[  406.938641][T13615] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  406.947400][T13615] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  406.950942][T13615] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  406.958068][T13615] usb 7-1: media controller created
[  406.969505][T13615] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  407.147754][T13615] i2c i2c-2: ec100: i2c rd failed=-71 reg=33
[  407.180086][T13615] usb 7-1: USB disconnect, device number 6
[  408.045559][T17224] loop6: detected capacity change from 0 to 32768
[  408.048548][T17224] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4625 (17224)
[  408.083702][T17224] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  408.126803][T17224] BTRFS info (device loop6): using sha256 checksum algorithm
[  408.226160][   T32] IPVS: starting estimator thread 0...
[  408.348468][T17240] IPVS: using max 83 ests per chain, 199200 per kthread
[  408.354934][T17224] BTRFS info (device loop6): enabling ssd optimizations
[  408.362873][T17224] BTRFS info (device loop6): turning on async discard
[  408.367314][T17224] BTRFS info (device loop6): enabling free space tree
[  408.465876][T15564] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  408.697318][T17271] netlink: 181256 bytes leftover after parsing attributes in process `syz.6.4636'.
[  408.860820][T17278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4639'.
[  408.971800][T17284] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4642'.
[  409.022388][T17284] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4642'.
[  409.282039][T17304] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4651'.
[  409.501408][T17312] loop6: detected capacity change from 0 to 4096
[  409.526114][T17312] ntfs3(loop6): ino=b, mi_enum_attr
[  409.527975][T17312] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  409.532529][T17312] ntfs3(loop6): Failed to load $Extend (-22).
[  409.540049][T17312] ntfs3(loop6): Failed to initialize $Extend.
[  409.583404][   T34] audit: type=1800 audit(1778557943.335:17980): pid=17312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4655" name="file1" dev="loop6" ino=30 res=0 errno=0
[  409.651293][T17325] netlink: 'syz.6.4661': attribute type 1 has an invalid length.
[  409.653858][T17325] netlink: 'syz.6.4661': attribute type 1 has an invalid length.
[  409.658660][T17325] netlink: 'syz.6.4661': attribute type 8 has an invalid length.
[  409.920994][T17339] bridge_slave_0: left allmulticast mode
[  409.922839][T17339] bridge_slave_0: left promiscuous mode
[  409.925050][T17339] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.931512][T17339] bridge_slave_1: left allmulticast mode
[  409.933833][T17339] bridge_slave_1: left promiscuous mode
[  409.936132][T17339] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.941595][T17339] bond0: (slave bond_slave_0): Releasing backup interface
[  409.952291][T17339] bond0: (slave bond_slave_1): Releasing backup interface
[  409.974838][T17339] team0: Port device team_slave_0 removed
[  409.993264][T17337] loop6: detected capacity change from 0 to 40427
[  409.993623][T17339] team0: Port device team_slave_1 removed
[  410.002852][T17337] F2FS-fs (loop6): Corrupted extension count (327717 + 1 > 64)
[  410.003375][T17339] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  410.008989][T17337] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[  410.009172][T17339] batman_adv: batadv0: Removing interface: batadv_slave_0
[  410.013220][T17337] F2FS-fs (loop6): build fault injection rate: 771
[  410.017668][T17339] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  410.020392][T17337] F2FS-fs (loop6): invalid crc value
[  410.020685][T17339] batman_adv: batadv0: Removing interface: batadv_slave_1
[  410.027254][T17339] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  410.040331][T17340] ip6gre3: entered allmulticast mode
[  410.043094][T17340] team0: Device ip6gre3 is of different type
[  410.100794][T17337] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  410.122895][T17337] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0
[  410.126007][T17337] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  410.150652][   T34] audit: type=1804 audit(1778557943.905:17981): pid=17337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.4667" name="/newroot/233/file1/file1" dev="loop6" ino=10 res=1 errno=0
[  410.170354][T15564] bio_check_eod: 3 callbacks suppressed
[  410.170364][T15564] syz-executor: attempt to access beyond end of device
[  410.170364][T15564] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  410.190531][T15564] CPU: 1 UID: 0 PID: 15564 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  410.190547][T15564] Tainted: [L]=SOFTLOCKUP
[  410.190550][T15564] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  410.190555][T15564] Call Trace:
[  410.190559][T15564]  <TASK>
[  410.190563][T15564]  dump_stack_lvl+0xe8/0x150
[  410.190576][T15564]  f2fs_stop_checkpoint+0x3c7/0x590
[  410.190587][T15564]  f2fs_write_end_io+0x1274/0x1740
[  410.190604][T15564]  __submit_merged_bio+0x256/0x6a0
[  410.190623][T15564]  __submit_merged_write_cond+0x3c9/0x4e0
[  410.190634][T15564]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  410.190650][T15564]  f2fs_write_data_pages+0x287e/0x34f0
[  410.190659][T15564]  ? __lock_acquire+0x6b5/0x2cf0
[  410.190679][T15564]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  410.190702][T15564]  ? unwind_next_frame+0xa6/0x2550
[  410.190711][T15564]  ? rcu_is_watching+0x15/0xb0
[  410.190718][T15564]  ? __kasan_check_byte+0x12/0x40
[  410.190728][T15564]  ? __pfx_hlock_conflict+0x10/0x10
[  410.190736][T15564]  ? __bfs+0x153/0x290
[  410.190777][T15564]  ? __pfx_hlock_conflict+0x10/0x10
[  410.190793][T15564]  ? lockdep_unlock+0x5d/0xd0
[  410.190799][T15564]  ? __lock_acquire+0x146e/0x2cf0
[  410.190816][T15564]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  410.190825][T15564]  do_writepages+0x32e/0x550
[  410.190837][T15564]  ? do_raw_spin_unlock+0x4d/0x210
[  410.190849][T15564]  filemap_fdatawrite+0x1e9/0x2f0
[  410.190859][T15564]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  410.190882][T15564]  ? do_raw_spin_unlock+0x4d/0x210
[  410.190893][T15564]  f2fs_sync_dirty_inodes+0x30e/0x830
[  410.190908][T15564]  f2fs_write_checkpoint+0x9df/0x26a0
[  410.190929][T15564]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  410.190951][T15564]  ? kfree+0x1c5/0x640
[  410.190960][T15564]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  410.190972][T15564]  kill_f2fs_super+0x314/0x730
[  410.190984][T15564]  ? __pfx_kill_f2fs_super+0x10/0x10
[  410.190997][T15564]  ? lockdep_hardirqs_on+0x7a/0x110
[  410.191012][T15564]  deactivate_locked_super+0xbc/0x130
[  410.191024][T15564]  cleanup_mnt+0x437/0x4d0
[  410.191034][T15564]  ? _raw_spin_unlock_irq+0x23/0x50
[  410.191045][T15564]  task_work_run+0x1d9/0x270
[  410.191056][T15564]  ? __pfx_task_work_run+0x10/0x10
[  410.191086][T15564]  exit_to_user_mode_loop+0xf3/0x4d0
[  410.191095][T15564]  ? rcu_is_watching+0x15/0xb0
[  410.191104][T15564]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.191112][T15564]  do_syscall_64+0x33e/0xf80
[  410.191121][T15564]  ? trace_irq_disable+0x3b/0x140
[  410.191134][T15564]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.191141][T15564] RIP: 0033:0x7f834339e017
[  410.191150][T15564] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  410.191156][T15564] RSP: 002b:00007ffe67438bf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  410.191165][T15564] RAX: 0000000000000000 RBX: 00007f8343432120 RCX: 00007f834339e017
[  410.191170][T15564] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe67438cb0
[  410.191174][T15564] RBP: 00007ffe67438cb0 R08: 00007ffe67439cb0 R09: 00000000ffffffff
[  410.191179][T15564] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe67439d40
[  410.191184][T15564] R13: 00007f8343432120 R14: 00000000000641bc R15: 00007ffe67439d80
[  410.191196][T15564]  </TASK>
[  410.191232][T15564] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  410.546018][T17360] loop6: detected capacity change from 0 to 2048
[  410.558524][T17360] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  411.627109][T17378] netlink: 'syz.5.4683': attribute type 10 has an invalid length.
[  411.635481][T17378] __nla_validate_parse: 4 callbacks suppressed
[  411.635496][T17378] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4683'.
[  411.640559][T17378] bridge0: port 1(veth1_vlan) entered blocking state
[  411.640952][T17372] loop6: detected capacity change from 0 to 40427
[  411.643202][T17378] bridge0: port 1(veth1_vlan) entered disabled state
[  411.645931][T17372] F2FS-fs: heap/no_heap options were deprecated
[  411.649825][T17372] F2FS-fs (loop6): build fault injection rate: 19
[  411.651992][T17372] F2FS-fs (loop6): build fault injection type: 0x3bfe8c
[  411.654886][T17372] F2FS-fs (loop6): invalid crc value
[  411.663088][T17378] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  411.665719][T17372] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1810
[  411.702865][T17372] F2FS-fs (loop6): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x221/0x410
[  411.708642][T17372] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  411.748441][T17372] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  411.853042][T17390] macvtap1: entered promiscuous mode
[  411.870036][T17390] macvtap1: entered allmulticast mode
[  411.949969][T17394] netlink: 'syz.5.4690': attribute type 10 has an invalid length.
[  411.953250][T17394] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4690'.
[  412.175559][T13608] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  412.325541][T13608] usb 7-1: Using ep0 maxpacket: 8
[  412.329444][T13608] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  412.332360][T13608] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  412.336424][T13608] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  412.341108][T13608] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  412.344278][T13608] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  412.348688][T13608] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  412.352310][T13608] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.505394][T17413] openvswitch: netlink: EtherType 50a is less than min 600
[  412.547103][T17415] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4700'.
[  412.586493][T13608] usb 7-1: usb_control_msg returned -32
[  412.590538][T13608] usbtmc 7-1:16.0: can't read capabilities
[  412.863225][T17437] fuse: Bad value for 'fd'
[  412.927279][T17441] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  413.238152][T17450] syz_tun: entered allmulticast mode
[  413.973428][T17460] fuse: fd is not a fuse device
[  414.055496][T17466] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 17466 comm: syz.4.4723)
[  414.063892][   T34] audit: type=1800 audit(1778557947.815:17982): pid=17466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4723" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=43783 res=0 errno=0
[  414.954910][   T32] usb 7-1: USB disconnect, device number 7
[  415.030407][T17495] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4738'.
[  415.116337][T17502] ./file0: Can't lookup blockdev
[  415.270013][T17514] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4747'.
[  416.124374][   T32] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  416.275548][   T32] usb 7-1: Using ep0 maxpacket: 32
[  416.279459][   T32] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  416.284979][   T32] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bf.99
[  416.289307][   T32] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  416.293256][   T32] usb 7-1: Product: syz
[  416.295013][   T32] usb 7-1: SerialNumber: syz
[  416.300748][   T32] usb 7-1: config 0 descriptor??
[  416.512540][   T32] usb 7-1: USB disconnect, device number 8
[  416.724110][T17565] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4769'.
[  416.739646][T17565] veth9: entered promiscuous mode
[  416.799512][   T34] audit: type=1326 audit(1778557950.555:17983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17569 comm="syz.4.4771" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b019cdd9 code=0x7ffc0000
[  416.807970][   T34] audit: type=1326 audit(1778557950.555:17984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17569 comm="syz.4.4771" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b019cdd9 code=0x7ffc0000
[  416.815026][   T34] audit: type=1326 audit(1778557950.565:17985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17569 comm="syz.4.4771" exe="/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f90b019cdd9 code=0x7ffc0000
[  416.823170][   T34] audit: type=1326 audit(1778557950.565:17986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17569 comm="syz.4.4771" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b019cdd9 code=0x7ffc0000
[  416.831176][   T34] audit: type=1326 audit(1778557950.565:17987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17569 comm="syz.4.4771" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b019cdd9 code=0x7ffc0000
[  417.119111][T17588] netem: change failed
[  418.419422][T17642] netlink: 'syz.4.4801': attribute type 3 has an invalid length.
[  418.428264][T17642] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4801'.
[  418.761621][T17661] overlayfs: failed to resolve './bus': -2
[  418.818467][  T403] IPVS: starting estimator thread 0...
[  418.845647][   T34] audit: type=1400 audit(1778557952.545:17988): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=17647 comm="syz.6.4803"
[  418.925810][T17662] IPVS: using max 81 ests per chain, 194400 per kthread
[  419.013023][T17666] netlink: 'syz.4.4811': attribute type 3 has an invalid length.
[  419.016864][T17666] netlink: 'syz.4.4811': attribute type 3 has an invalid length.
[  419.022605][T17666] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4811'.
[  419.286482][T17682] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.4819'.
[  419.460427][T17694] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  420.721500][T17738] fuse: Bad value for 'fd'
[  420.792858][T17746] loop6: detected capacity change from 0 to 128
[  420.823974][T17746] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  420.833177][T17746] ext4 filesystem being mounted at /265/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  420.873645][T15564] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  421.647883][T17802] loop6: detected capacity change from 0 to 512
[  421.665300][T17802] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  421.678909][T17802] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.4874: bad orphan inode 131083
[  421.686216][T17802] loop6: lost filesystem error report for type 5 error -117
[  421.687894][T17802] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  421.701797][T17754] ceph: No mds server is up or the cluster is laggy
[  421.810749][T15564] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  421.825021][T17807] netlink: 'syz.5.4875': attribute type 3 has an invalid length.
[  421.897090][T17810] loop6: detected capacity change from 0 to 4096
[  422.117533][T17823] netlink: 'syz.6.4883': attribute type 1 has an invalid length.
[  422.120210][T17823] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4883'.
[  422.123506][T17823] netlink: 658 bytes leftover after parsing attributes in process `syz.6.4883'.
[  422.127048][T17823] netlink: 1 bytes leftover after parsing attributes in process `syz.6.4883'.
[  422.161398][T17825] loop6: detected capacity change from 0 to 256
[  422.321009][T17833] tmpfs: Bad value for 'mpol'
[  422.610184][T17843] loop6: detected capacity change from 0 to 512
[  422.616687][T17843] EXT4-fs: Ignoring removed bh option
[  422.693169][T17843] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  422.803363][T17843] EXT4-fs (loop6): 1 truncate cleaned up
[  422.806793][T17843] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  422.926212][ T5727] Bluetooth: hci1: unexpected event for opcode 0x0c22
[  423.264625][T15564] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  424.345613][T13615] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  424.516010][T13615] usb 7-1: Using ep0 maxpacket: 16
[  424.520562][T13615] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  424.524798][T13615] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  424.529768][T13615] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  424.533619][T13615] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  424.537730][T13615] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  424.544402][T13615] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  424.548143][T13615] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  424.551889][T13615] usb 7-1: Manufacturer: syz
[  424.557374][T13615] usb 7-1: config 0 descriptor??
[  424.826608][T13615] rc_core: IR keymap rc-hauppauge not found
[  424.829259][T13615] Registered IR keymap rc-empty
[  424.832240][T13615] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  424.850257][T13615] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  424.873490][T13615] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  424.878551][T13615] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input21
[  424.885352][T13615] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  424.911569][T13615] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  424.933176][T13615] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  424.954439][T13615] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  424.975787][T13615] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  425.007898][T13615] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  425.029402][T13615] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  425.050540][T13615] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  425.071915][T13615] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  425.095554][T13615] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  425.116436][T13615] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  425.120426][T13615] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  425.252201][ T5799] usb 7-1: USB disconnect, device number 9
[  426.221937][   T34] audit: type=1326 audit(1778557959.855:17989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17966 comm="syz.5.4947" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd88279cdd9 code=0x0
[  426.238981][T17969] netlink: 'syz.6.4948': attribute type 32 has an invalid length.
[  426.390457][T17974] loop6: detected capacity change from 0 to 4096
[  426.535937][T17974] ntfs3(loop6): ino=21, "file1" failed to extend initialized size to 666475.
[  426.713445][T17977] bond4: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  426.718947][T17977] bond4 (unregistering): Released all slaves
[  426.736451][T17978] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4951'.
[  427.067232][T17990] loop6: detected capacity change from 0 to 2048
[  427.102236][T17990] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  427.213324][T17993] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4958'.
[  427.314644][T18001] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4962'.
[  427.887401][T18018] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4967'.
[  427.890247][T18018] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4967'.
[  430.480617][T18063] netlink: 'syz.6.4986': attribute type 8 has an invalid length.
[  430.488919][T18063] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4986'.
[  430.518564][T18063] bond0: entered promiscuous mode
[  430.521363][T18063] bond_slave_0: entered promiscuous mode
[  430.524383][T18063] bond_slave_1: entered promiscuous mode
[  430.533854][T18063] gretap0: entered promiscuous mode
[  430.536789][T18063] hsr1: entered promiscuous mode
[  431.524745][T18099] fuse: fd is not a fuse device
[  431.696660][T18106] netlink: 'syz.5.5006': attribute type 1 has an invalid length.
[  431.710487][T18106] netlink: 'syz.5.5006': attribute type 4 has an invalid length.
[  431.714155][T18106] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.5006'.
[  431.857058][T18118] loop6: detected capacity change from 0 to 512
[  431.864194][T18118] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  431.879669][T18118] EXT4-fs (loop6): 1 truncate cleaned up
[  431.883996][T18118] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  431.896428][   T34] audit: type=1800 audit(1778557965.159:17990): pid=18118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5012" name="file1" dev="loop6" ino=15 res=0 errno=0
[  431.921449][T18124] netlink: 'syz.5.5014': attribute type 32 has an invalid length.
[  432.139072][T15564] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  433.415690][T18165] loop6: detected capacity change from 0 to 256
[  433.459656][T18165] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x614dc512, utbl_chksum : 0xe619d30d)
[  433.492198][T18165] exFAT-fs (loop6): valid_size(9000) is greater than size(0)
[  433.749609][T18183] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5039'.
[  433.920271][T18189] loop6: detected capacity change from 0 to 4096
[  433.928105][T18189] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512).
[  433.994362][   T34] audit: type=1800 audit(1778557967.123:17991): pid=18189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5042" name="file1" dev="loop6" ino=30 res=0 errno=0
[  434.278528][T18211] netlink: 5720 bytes leftover after parsing attributes in process `syz.4.5051'.
[  434.295964][T18211] netlink: 5720 bytes leftover after parsing attributes in process `syz.4.5051'.
[  434.307687][T18213] loop6: detected capacity change from 0 to 1024
[  434.320271][T18213] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  434.329602][T18213] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  434.344856][T18213] EXT4-fs error (device loop6): ext4_get_journal_inode:5896: inode #32: comm syz.6.5054: iget: special inode unallocated
[  434.351282][T18213] loop6: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117
[  434.351439][T18213] EXT4-fs (loop6): Remounting filesystem read-only
[  434.356429][T18213] EXT4-fs (loop6): no journal found
[  434.358105][T18213] EXT4-fs (loop6): can't get journal size
[  434.371269][T18213] EXT4-fs (loop6): failed to initialize system zone (-117)
[  434.373644][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  434.373656][    C0] EXT4-fs (loop6): initial error at time 1778557967: ext4_get_journal_inode:5896: inode 32
[  434.373670][    C0] EXT4-fs (loop6): last error at time 1778557967: ext4_get_journal_inode:5896: inode 32
[  434.383389][T18213] EXT4-fs (loop6): mount failed
[  434.587436][T18233] veth0_to_bridge: entered promiscuous mode
[  434.592500][T18233] macsec1: entered allmulticast mode
[  434.594683][T18233] veth0_to_bridge: entered allmulticast mode
[  434.623373][T18235] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5064'.
[  434.631260][T18235] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  434.638332][T18235] bridge1: entered promiscuous mode
[  434.733065][T18243] netlink: 200 bytes leftover after parsing attributes in process `syz.6.5067'.
[  434.825462][T18252] netlink: 'syz.6.5072': attribute type 2 has an invalid length.
[  434.828118][T18252] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5072'.
[  434.870889][T18258] xt_TPROXY: Can be used only with -p tcp or -p udp
[  434.968589][T18261] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5075'.
[  435.090313][T18267] netlink: 'syz.6.5078': attribute type 21 has an invalid length.
[  435.093664][T18267] netlink: 156 bytes leftover after parsing attributes in process `syz.6.5078'.
[  435.098478][T18267] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5078'.
[  435.465106][ T5281] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  435.628314][ T5281] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  435.632054][ T5281] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  435.636493][ T5281] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  435.641221][ T5281] usb 7-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00
[  435.646065][ T5281] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  435.652391][ T5281] usb 7-1: config 0 descriptor??
[  435.833121][T18298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5093'.
[  435.836401][T18298] netlink: 'syz.4.5093': attribute type 1 has an invalid length.
[  435.839359][T18298] netlink: 'syz.4.5093': attribute type 2 has an invalid length.
[  436.098252][ T5281] playstation 0003:054C:09CC.000F: unknown main item tag 0x0
[  436.101873][ T5281] playstation 0003:054C:09CC.000F: unknown main item tag 0x0
[  436.104338][ T5281] playstation 0003:054C:09CC.000F: unknown main item tag 0x0
[  436.109859][ T5281] playstation 0003:054C:09CC.000F: unknown main item tag 0x0
[  436.113154][ T5281] playstation 0003:054C:09CC.000F: unknown main item tag 0x0
[  436.116724][ T5281] playstation 0003:054C:09CC.000F: unknown main item tag 0x0
[  436.143936][ T5281] playstation 0003:054C:09CC.000F: hidraw0: USB HID vff.fd Device [HID 054c:09cc] on usb-dummy_hcd.6-1/input0
[  436.310682][ T5281] playstation 0003:054C:09CC.000F: Invalid byte count transferred, expected 16 got 0
[  436.315628][ T5281] playstation 0003:054C:09CC.000F: Failed to retrieve DualShock4 pairing info: -22
[  436.320507][ T5281] playstation 0003:054C:09CC.000F: Failed to get MAC address from DualShock4
[  436.324109][ T5281] playstation 0003:054C:09CC.000F: Failed to create dualshock4.
[  436.330115][ T5281] playstation 0003:054C:09CC.000F: probe with driver playstation failed with error -22
[  436.428824][T18316] netlink: 'syz.4.5101': attribute type 11 has an invalid length.
[  436.545789][ T5281] usb 7-1: USB disconnect, device number 10
[  438.930392][T18410] overlayfs: failed to resolve './file0': -2
[  439.952284][   T34] audit: type=1326 audit(1778557972.689:17992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18448 comm="syz.6.5158" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834339cdd9 code=0x7ffc0000
[  439.968156][   T34] audit: type=1326 audit(1778557972.689:17993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18448 comm="syz.6.5158" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834339cdd9 code=0x7ffc0000
[  439.991027][   T34] audit: type=1326 audit(1778557972.689:17994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18448 comm="syz.6.5158" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834339cdd9 code=0x7ffc0000
[  440.010388][   T34] audit: type=1326 audit(1778557972.689:17995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18448 comm="syz.6.5158" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834339cdd9 code=0x7ffc0000
[  440.034841][   T34] audit: type=1326 audit(1778557972.689:17996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18448 comm="syz.6.5158" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f834339cdd9 code=0x7ffc0000
[  440.059336][   T34] audit: type=1326 audit(1778557972.689:17997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18448 comm="syz.6.5158" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834339cdd9 code=0x7ffc0000
[  440.067082][   T34] audit: type=1326 audit(1778557972.689:17998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18448 comm="syz.6.5158" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834339cdd9 code=0x7ffc0000
[  440.077089][   T34] audit: type=1326 audit(1778557972.689:17999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18448 comm="syz.6.5158" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834339cdd9 code=0x7ffc0000
[  440.084311][   T34] audit: type=1326 audit(1778557972.689:18000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18448 comm="syz.6.5158" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834339cdd9 code=0x7ffc0000
[  440.090950][   T34] audit: type=1326 audit(1778557972.689:18001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18448 comm="syz.6.5158" exe="/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f834339cdd9 code=0x7ffc0000
[  440.259944][T18475] overlayfs: failed to clone upperpath
[  440.476733][T18497] loop6: detected capacity change from 0 to 256
[  440.480254][T18497] exfat: Deprecated parameter 'utf8'
[  440.487428][T18497] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  440.546641][T18500] __nla_validate_parse: 3 callbacks suppressed
[  440.546655][T18500] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5181'.
[  441.178035][T18505] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  441.252226][T18509] xfrm1: entered allmulticast mode
[  441.990342][T18522] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5191'.
[  442.312604][T18537] binder_alloc: 18536: pid 18536 spamming oneway? 1 buffers allocated for a total size of 4096
[  442.320038][T18537] binder_alloc: 18536: pid 18536 spamming oneway? 2 buffers allocated for a total size of 5120
[  442.653516][T18571] x_tables: duplicate underflow at hook 4
[  442.784888][T18574] loop6: detected capacity change from 0 to 4096
[  442.790486][T18574] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512).
[  442.943859][T18588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5220'.
[  446.223306][T18594] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  446.356191][T18652] syz_tun: left allmulticast mode
[  446.831575][ T1382] ieee802154 phy0 wpan0: encryption failed: -22
[  446.834057][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  447.916547][T18667] program syz.6.5252 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  447.922751][T18667] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5252'.
[  448.250120][T18688] loop6: detected capacity change from 0 to 256
[  448.255718][T18688] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d)
[  448.449846][T18696] loop6: detected capacity change from 0 to 32768
[  448.453506][T18696] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.5265 (18696)
[  448.462323][T18696] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  448.466568][T18696] BTRFS info (device loop6): using sha256 checksum algorithm
[  448.506907][T18696] BTRFS info (device loop6): enabling ssd optimizations
[  448.510639][T18696] BTRFS info (device loop6): turning on async discard
[  448.513723][T18696] BTRFS info (device loop6): enabling free space tree
[  448.538415][T15564] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  449.653013][T18758] workqueue: name exceeds WQ_NAME_LEN. Truncating to: &%Q0@æjʫ}
[  450.011377][T18765] netlink: 216 bytes leftover after parsing attributes in process `syz.6.5288'.
[  450.015604][T18765] netlink: 'syz.6.5288': attribute type 2 has an invalid length.
[  450.111764][T18769] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5290'.
[  450.168126][T18771] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  450.172865][T18771] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  450.178164][T18771] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3)
[  450.495474][T18781] tipc: Started in network mode
[  450.497294][T18781] tipc: Node identity 080211000001, cluster identity 4711
[  450.499751][T18781] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  450.743349][T18799] netlink: 7060 bytes leftover after parsing attributes in process `syz.4.5304'.
[  451.692855][ T5799] tipc: Node number set to 134418688
[  452.597542][T18840] fuse: Bad value for 'fd'
[  452.835060][T18863] loop6: detected capacity change from 0 to 2048
[  452.868797][T18863] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  452.877220][T18865] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  452.882954][T18865] overlayfs: failed to set xattr on upper
[  452.898310][T18866] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  452.898575][T18865] overlayfs: ...falling back to redirect_dir=nofollow.
[  452.907733][T18865] overlayfs: ...falling back to index=off.
[  452.910997][T18865] overlayfs: ...falling back to uuid=null.
[  453.171892][T18892] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5348'.
[  453.249322][T18896] loop6: detected capacity change from 0 to 512
[  453.268852][T18896] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5350: bg 0: block 393: padding at end of block bitmap is not set
[  453.276076][T18896] loop6: lost filesystem error report for type 5 error -117
[  453.276287][T18896] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  453.283246][T18896] loop6: lost filesystem error report for type 5 error -117
[  453.283581][T18896] EXT4-fs (loop6): 2 truncates cleaned up
[  453.286194][    C1] EXT4-fs (loop6): error count since last fsck: 2
[  453.286204][    C1] EXT4-fs (loop6): initial error at time 1778557985: ext4_validate_block_bitmap:441
[  453.286214][    C1] EXT4-fs (loop6): last error at time 1778557985: ext4_mb_clear_bb:6679
[  453.298550][T18896] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  453.339884][T15564] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  453.441688][T18910] netlink: 'syz.4.5357': attribute type 1 has an invalid length.
[  453.444317][T18910] netlink: 'syz.4.5357': attribute type 2 has an invalid length.
[  453.552212][T18918] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5361'.
[  453.577228][T18920] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5362'.
[  453.965285][   T34] kauditd_printk_skb: 15 callbacks suppressed
[  453.965294][   T34] audit: type=1326 audit(1778557985.803:18017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18925 comm="syz.6.5353" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834339cdd9 code=0x7ffc0000
[  453.975315][   T34] audit: type=1326 audit(1778557985.803:18018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18925 comm="syz.6.5353" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f834339cdd9 code=0x7ffc0000
[  453.982906][   T34] audit: type=1326 audit(1778557985.803:18019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18925 comm="syz.6.5353" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834339cdd9 code=0x7ffc0000
[  453.992295][   T34] audit: type=1326 audit(1778557985.803:18020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18925 comm="syz.6.5353" exe="/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f834339cdd9 code=0x7ffc0000
[  454.557983][T18932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5365'.
[  454.561963][T18932] netlink: 'syz.4.5365': attribute type 29 has an invalid length.
[  454.565286][T18932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5365'.
[  455.165997][   T32] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  455.339764][   T32] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  455.343438][   T32] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  455.346485][   T32] usb 7-1: config 1 has no interface number 0
[  455.349141][   T32] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  455.353318][   T32] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  455.358142][   T32] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  455.361210][   T32] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.363802][   T32] usb 7-1: Product: syz
[  455.365849][   T32] usb 7-1: Manufacturer: syz
[  455.367796][   T32] usb 7-1: SerialNumber: syz
[  455.637615][T18947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5372'.
[  455.858076][T18959] netlink: 'syz.4.5379': attribute type 1 has an invalid length.
[  456.110605][T18969] xt_socket: unknown flags 0x4c
[  456.254258][   T32] cdc_ncm 7-1:1.1: failed GET_NTB_PARAMETERS
[  456.271275][   T32] cdc_ncm 7-1:1.1: bind() failure
[  456.283415][   T32] usb 7-1: USB disconnect, device number 11
[  456.351540][T18973] batadv_slave_0: entered promiscuous mode
[  456.355369][T18972] batadv_slave_0: left promiscuous mode
[  456.484824][T18979] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5387'.
[  457.019065][T18990] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5389'.
[  457.030540][T18990] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5389'.
[  457.279416][T19000] syzkaller1: tun_chr_ioctl cmd 21731
[  457.407045][T19004] x_tables: duplicate underflow at hook 1
[  457.911631][T19010] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5400'.
[  457.918534][T19010] IPVS: Unknown mcast interface: vetN1_macvtap
[  458.115502][   T34] audit: type=1800 audit(1778557989.685:18021): pid=19023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5405" name="file1" dev="tmpfs" ino=6346 res=0 errno=0
[  458.281571][T19035] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5411'.
[  458.390676][T19049] tipc: Started in network mode
[  458.392404][T19049] tipc: Node identity ac141427, cluster identity 4711
[  458.395556][T19049] tipc: Enabled bearer <udp:syz2>, priority 10
[  458.481883][ T5727] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260
[  459.100134][ T5799] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  459.263888][ T5799] usb 7-1: Using ep0 maxpacket: 16
[  459.268071][ T5799] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  459.272971][ T5799] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  459.280473][ T5799] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  459.285953][ T5799] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.289388][ T5799] usb 7-1: Product: syz
[  459.291191][ T5799] usb 7-1: Manufacturer: syz
[  459.293309][ T5799] usb 7-1: SerialNumber: syz
[  459.297352][ T5799] usb 7-1: config 0 descriptor??
[  459.301446][ T5799] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  459.305278][ T5799] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[  459.594417][  T403] tipc: Node number set to 2886997031
[  459.797812][   T34] audit: type=1326 audit(1778557991.256:18022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19077 comm="syz.5.5433" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88279cdd9 code=0x7ffc0000
[  459.839392][   T34] audit: type=1326 audit(1778557991.256:18023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19077 comm="syz.5.5433" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88279cdd9 code=0x7ffc0000
[  459.932068][   T34] audit: type=1326 audit(1778557991.256:18024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19077 comm="syz.5.5433" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd88279cdd9 code=0x7ffc0000
[  459.977495][   T34] audit: type=1326 audit(1778557991.256:18025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19077 comm="syz.5.5433" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88279cdd9 code=0x7ffc0000
[  460.003154][   T34] audit: type=1326 audit(1778557991.256:18026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19077 comm="syz.5.5433" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88279cdd9 code=0x7ffc0000
[  460.016112][   T34] audit: type=1326 audit(1778557991.256:18027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19077 comm="syz.5.5433" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd88279cdd9 code=0x7ffc0000
[  460.025086][   T34] audit: type=1326 audit(1778557991.256:18028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19077 comm="syz.5.5433" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88279cdd9 code=0x7ffc0000
[  460.034483][   T34] audit: type=1326 audit(1778557991.256:18029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19077 comm="syz.5.5433" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88279cdd9 code=0x7ffc0000
[  460.043093][   T34] audit: type=1326 audit(1778557991.256:18030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19077 comm="syz.5.5433" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd88279cdd9 code=0x7ffc0000
[  460.052132][   T34] audit: type=1326 audit(1778557991.256:18031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19077 comm="syz.5.5433" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd88279cdd9 code=0x7ffc0000
[  460.073405][ T5799] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  460.075974][ T5799] em28xx 7-1:0.0: Config register raw data: 0xfffffffb
[  460.089724][T19097] sctp: [Deprecated]: syz.4.5439 (pid 19097) Use of struct sctp_assoc_value in delayed_ack socket option.
[  460.089724][T19097] Use struct sctp_sack_info instead
[  460.096497][T19097] sctp: [Deprecated]: syz.4.5439 (pid 19097) Use of struct sctp_assoc_value in delayed_ack socket option.
[  460.096497][T19097] Use struct sctp_sack_info instead
[  460.651972][T19129] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.5454'.
[  460.655872][T19129] ksmbd: Unknown IPC event: 3, ignore.
[  460.723939][ T5799] em28xx 7-1:0.0: Unknown AC97 audio processor detected!
[  460.731844][ T5799] em28xx 7-1:0.0: couldn't setup AC97 register 2
[  460.750784][ T5799] em28xx 7-1:0.0: couldn't setup AC97 register 4
[  460.860818][T19141] xt_l2tp: missing protocol rule (udp|l2tpip)
[  460.970793][ T5799] em28xx 7-1:0.0: couldn't setup AC97 register 6
[  460.975287][ T5799] em28xx 7-1:0.0: couldn't setup AC97 register 54
[  460.978293][ T5799] em28xx 7-1:0.0: couldn't setup AC97 register 56
[  460.985640][ T5799] usb 7-1: USB disconnect, device number 12
[  462.274794][T19170] SET target dimension over the limit!
[  462.702154][T19198] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5486'.
[  462.733513][T19198] : entered promiscuous mode
[  463.310283][T19226] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.5498'.
[  463.445151][T19232] xt_SECMARK: invalid mode: 2
[  464.839537][T19274] netlink: 149 bytes leftover after parsing attributes in process `syz.6.5519'.
[  465.274117][T19291] netlink: 'syz.4.5524': attribute type 4 has an invalid length.
[  465.747550][T19313] loop6: detected capacity change from 0 to 512
[  465.758976][T19313] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #12: comm syz.6.5538: missing EA_INODE flag
[  465.766652][T19313] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  465.768448][T19313] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.5538: error while reading EA inode 12 err=-117
[  465.771399][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  465.771409][    C0] EXT4-fs (loop6): initial error at time 1778557996: ext4_xattr_inode_iget:441: inode 12
[  465.771422][    C0] EXT4-fs (loop6): last error at time 1778557996: ext4_xattr_inode_iget:441: inode 12
[  465.786274][T19313] loop6: lost filesystem error report for type 5 error -117
[  465.786514][T19313] EXT4-fs (loop6): 1 orphan inode deleted
[  465.791550][T19313] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  465.830158][T15564] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  466.005445][T19330] loop6: detected capacity change from 0 to 256
[  466.035586][T19330] FAT-fs (loop6): Directory bread(block 64) failed
[  466.038696][T19330] FAT-fs (loop6): Directory bread(block 65) failed
[  466.041395][T19330] FAT-fs (loop6): Directory bread(block 66) failed
[  466.044362][T19330] FAT-fs (loop6): Directory bread(block 67) failed
[  466.047522][T19330] FAT-fs (loop6): Directory bread(block 68) failed
[  466.053652][T19330] FAT-fs (loop6): Directory bread(block 69) failed
[  466.057070][T19330] FAT-fs (loop6): Directory bread(block 70) failed
[  466.061266][T19330] FAT-fs (loop6): Directory bread(block 71) failed
[  466.064147][T19330] FAT-fs (loop6): Directory bread(block 72) failed
[  466.067219][T19330] FAT-fs (loop6): Directory bread(block 73) failed
[  466.731966][T19355] loop6: detected capacity change from 0 to 128
[  466.738990][T19355] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  467.021591][T19368] loop6: detected capacity change from 0 to 256
[  467.082027][T19368] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d)
[  467.155539][T19373] exFAT-fs (loop6): start_clu is invalid cluster(0xffffffff)
[  469.086998][   T32] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  469.320984][   T32] usb 7-1: Using ep0 maxpacket: 32
[  469.354810][   T32] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  469.365257][   T32] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  470.300457][   T32] usb 7-1: New USB device found, idVendor=0582, idProduct=00b2, bcdDevice= 0.40
[  470.303388][   T32] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.307557][   T32] usb 7-1: Product: syz
[  470.309015][   T32] usb 7-1: Manufacturer: syz
[  470.310940][   T32] usb 7-1: SerialNumber: syz
[  470.454865][T19440] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.5592'.
[  470.578162][   T32] usb 7-1: 0:1 : does not exist
[  470.587828][   T32] usb 7-1: unit 5 not found!
[  470.639971][   T32] usb 7-1: USB disconnect, device number 13
[  470.781059][T19453] overlayfs: failed to clone upperpath
[  470.809583][T19455] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  471.556775][T19469] xt_TPROXY: Can be used only with -p tcp or -p udp
[  473.804155][T19555] loop6: detected capacity change from 0 to 4096
[  473.874229][T19561] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  474.174451][T19568] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  474.219587][T19570] loop6: detected capacity change from 0 to 4096
[  474.235050][T19570] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  474.278138][T15564] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  474.425726][T19588] fuse: fd is not a fuse device
[  474.453972][T19590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5659'.
[  474.610750][   T32] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  474.773954][   T32] usb 7-1: config 220 has an invalid interface number: 76 but max is 2
[  474.778394][   T32] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  474.783468][   T32] usb 7-1: config 220 has no interface number 2
[  474.785598][   T32] usb 7-1: config 220 interface 1 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 56
[  474.789578][   T32] usb 7-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  474.796689][   T32] usb 7-1: config 220 interface 0 has no altsetting 0
[  474.800367][   T32] usb 7-1: config 220 interface 76 has no altsetting 0
[  474.804296][   T32] usb 7-1: config 220 interface 1 has no altsetting 0
[  474.808725][   T32] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  474.811707][   T32] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  474.817818][   T32] usb 7-1: Product: syz
[  474.819124][   T32] usb 7-1: Manufacturer: syz
[  474.823893][   T32] usb 7-1: SerialNumber: syz
[  475.051954][   T32] usb 7-1: selecting invalid altsetting 0
[  475.068639][   T32] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  475.071348][   T32] uvcvideo 7-1:220.0: No valid video chain found.
[  475.080381][   T32] usb 7-1: selecting invalid altsetting 0
[  475.084378][   T32] usbtest 7-1:220.1: probe with driver usbtest failed with error -22
[  475.095345][   T32] usb 7-1: USB disconnect, device number 14
[  475.903678][  T403] usb 7-1: new full-speed USB device number 15 using dummy_hcd
[  475.994840][ T5727] Bluetooth: hci1: unexpected event for opcode 0x0c1c
[  476.070224][  T403] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023
[  476.088544][  T403] usb 7-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice= 0.40
[  476.091703][  T403] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.094683][  T403] usb 7-1: Product: syz
[  476.099518][  T403] usb 7-1: Manufacturer: syz
[  476.103064][  T403] usb 7-1: SerialNumber: syz
[  476.445430][  T403] usb 7-1: MBOX3: Invalid descriptor size=103.
[  476.462037][  T403] usb 7-1: MBOX3: Invalid descriptor size=103.
[  476.469890][  T403] usb 7-1: MBOX3: Invalid descriptor size=103.
[  476.476548][  T403] usb 7-1: USB disconnect, device number 15
[  476.517727][T19663] netlink: 'syz.5.5693': attribute type 10 has an invalid length.
[  476.532962][T19663] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  476.781900][T19680] ipip1: entered promiscuous mode
[  476.785806][T19680] ipip1: entered allmulticast mode
[  477.035181][T19689] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5705'.
[  477.050369][T19689] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5705'.
[  477.093007][T19692] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  477.175611][T19698] loop6: detected capacity change from 0 to 4096
[  477.180074][T19698] EXT4-fs: Ignoring removed nomblk_io_submit option
[  477.197437][T19698] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  477.237205][T19698] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  477.261027][T15564] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  477.871337][T19745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5731'.
[  478.917208][  T403] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  479.077557][  T403] usb 7-1: Using ep0 maxpacket: 8
[  479.100111][  T403] usb 7-1: unable to get BOS descriptor or descriptor too short
[  479.104743][  T403] usb 7-1: config 3 interface 0 has no altsetting 0
[  479.108716][  T403] usb 7-1: New USB device found, idVendor=13d3, idProduct=3432, bcdDevice=7f.18
[  479.112663][  T403] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  479.115837][  T403] usb 7-1: Product: syz
[  479.117557][  T403] usb 7-1: Manufacturer: syz
[  479.119470][  T403] usb 7-1: SerialNumber: syz
[  479.250367][T19781] netlink: 'syz.4.5746': attribute type 10 has an invalid length.
[  479.256384][T19781] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  479.349917][T19789] No source specified
[  479.392036][   T34] kauditd_printk_skb: 5 callbacks suppressed
[  479.392046][   T34] audit: type=1326 audit(1778558009.593:18037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19792 comm="syz.4.5752" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f90b019cdd9 code=0x0
[  479.424990][  T403] usb 7-1: USB disconnect, device number 16
[  480.033632][T19813] xt_TPROXY: Can be used only with -p tcp or -p udp
[  480.466636][  T403] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  480.651956][  T403] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  480.658972][  T403] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  480.666858][  T403] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  480.670813][  T403] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  480.675309][  T403] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  480.683825][  T403] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  480.693039][  T403] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  480.700294][  T403] usb 7-1: Product: syz
[  480.704495][  T403] usb 7-1: Manufacturer: syz
[  480.723670][  T403] cdc_wdm 7-1:1.0: skipping garbage
[  480.736346][  T403] cdc_wdm 7-1:1.0: skipping garbage
[  480.752506][  T403] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  480.760678][  T403] cdc_wdm 7-1:1.0: Unknown control protocol
[  481.470022][  T403] usb 7-1: USB disconnect, device number 17
[  481.631928][T19878] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5792'.
[  481.642229][T19878] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5792'.
[  482.009490][T19905] netlink: 4108 bytes leftover after parsing attributes in process `syz.4.5805'.
[  482.132449][T19915] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5809'.
[  482.825865][T19927] loop6: detected capacity change from 0 to 32768
[  482.845306][T19927] JBD2: Ignoring recovery information on journal
[  482.914040][T19927] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  482.982516][T19927] ocfs2: Unmounting device (7,6) on (node local)
[  483.433509][T19954] loop6: detected capacity change from 0 to 2048
[  483.461088][T19954] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=3932051, location=3932051
[  483.693104][T19954] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  484.064045][T19976] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5834'.
[  484.122981][T19982] netlink: 7 bytes leftover after parsing attributes in process `syz.6.5837'.
[  484.827836][T19988] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  485.315956][T20008] netlink: 'syz.4.5846': attribute type 21 has an invalid length.
[  485.318648][T20008] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5846'.
[  485.321511][T20008] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5846'.
[  485.324929][T20008] netlink: 'syz.4.5846': attribute type 21 has an invalid length.
[  485.327510][T20008] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5846'.
[  485.332618][T20008] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5846'.
[  485.358068][T20011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5847'.
[  485.525897][T20025] : entered promiscuous mode
[  485.813883][T20046] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5864'.
[  486.123530][T20068] netlink: 'syz.5.5874': attribute type 1 has an invalid length.
[  486.410710][T20077] netlink: 'syz.5.5878': attribute type 10 has an invalid length.
[  486.420984][T20077] veth1_macvtap: left promiscuous mode
[  486.432288][T20077] bond0: (slave macsec0): Error -34 calling dev_set_mtu
[  486.552591][T20089] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  486.555694][T20089] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  487.224918][T20128] fuse: fd is not a fuse device
[  487.306867][ T5281] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  487.478463][ T5281] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  487.482383][ T5281] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  487.485451][ T5281] usb 7-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  487.491947][ T5281] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  487.497880][ T5281] usb 7-1: config 0 descriptor??
[  488.166419][ T5281] hid-led 0003:1D34:000A.0010: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.6-1/input0
[  488.189336][ T5281] hid-led 0003:1D34:000A.0010: Dream Cheeky Webmail Notifier initialized
[  488.389708][ T5799] usb 7-1: USB disconnect, device number 18
[  489.081117][ T5727] Bluetooth: hci1: command 0x2016 tx timeout
[  489.170473][T20208] xt_hashlimit: overflow, try lower: 3/0
[  489.437603][T20210] /dev/nullb0: Can't lookup blockdev
[  490.442347][T20221] netlink: 'syz.5.5945': attribute type 10 has an invalid length.
[  490.482740][T20221] team0: Port device vlan0 added
[  490.668476][T20225] loop6: detected capacity change from 0 to 256
[  490.923258][T20246] overlayfs: failed to clone lowerpath
[  492.572553][T20287] syz_tun: entered allmulticast mode
[  492.577700][T20286] syz_tun: left allmulticast mode
[  492.846251][ T5727] Bluetooth: hci2: command 0x0406 tx timeout
[  492.858286][T20298] netlink: 'syz.5.5978': attribute type 1 has an invalid length.
[  494.208436][T20342] bond4: entered allmulticast mode
[  494.483292][T20358] overlayfs: failed to clone upperpath
[  494.745224][T20375] overlayfs: empty lowerdir
[  494.867716][T20387] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6018'.
[  495.456447][T20406] loop6: detected capacity change from 0 to 512
[  495.458907][T20406] EXT4-fs: Ignoring removed bh option
[  495.476812][T20406] 
[  495.477603][T20406] ======================================================
[  495.479656][T20406] WARNING: possible circular locking dependency detected
[  495.481853][T20406] syzkaller #0 Tainted: G             L     
[  495.483798][T20406] ------------------------------------------------------
[  495.485981][T20406] syz.6.6025/20406 is trying to acquire lock:
[  495.487846][T20406] ffff888109c38c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0
[  495.491223][T20406] 
[  495.491223][T20406] but task is already holding lock:
[  495.493949][T20406] ffff8881099a3900 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3db/0x710
[  495.497712][T20406] 
[  495.497712][T20406] which lock already depends on the new lock.
[  495.497712][T20406] 
[  495.501141][T20406] 
[  495.501141][T20406] the existing dependency chain (in reverse order) is:
[  495.503759][T20406] 
[  495.503759][T20406] -> #1 (&ei->xattr_sem){++++}-{4:4}:
[  495.506146][T20406]        down_write+0x96/0x200
[  495.508018][T20406]        ext4_destroy_inline_data+0x28/0xe0
[  495.510360][T20406]        ext4_do_writepages+0x51e/0x4670
[  495.512512][T20406]        ext4_writepages+0x241/0x3b0
[  495.514179][T20406]        do_writepages+0x32e/0x550
[  495.515773][T20406]        file_write_and_wait_range+0x36e/0x440
[  495.518019][T20406]        mmb_fsync_noflush+0x76/0x1c0
[  495.520135][T20406]        ext4_sync_file+0x437/0xd50
[  495.521967][T20406]        ext4_buffered_write_iter+0x2ca/0x3a0
[  495.524061][T20406]        ext4_file_write_iter+0x298/0x1bf0
[  495.526245][T20406]        vfs_write+0x61d/0xb90
[  495.527696][T20406]        __x64_sys_pwrite64+0x199/0x230
[  495.529282][T20406]        do_syscall_64+0x15f/0xf80
[  495.530997][T20406]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  495.532987][T20406] 
[  495.532987][T20406] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[  495.535581][T20406]        __lock_acquire+0x15a5/0x2cf0
[  495.537191][T20406]        lock_acquire+0x106/0x350
[  495.538717][T20406]        percpu_down_read_internal+0x48/0x1c0
[  495.541106][T20406]        ext4_writepages+0x205/0x3b0
[  495.543177][T20406]        do_writepages+0x32e/0x550
[  495.545185][T20406]        __writeback_single_inode+0x133/0x10e0
[  495.547737][T20406]        writeback_single_inode+0x4ac/0xdc0
[  495.550183][T20406]        write_inode_now+0x1c2/0x290
[  495.551913][T20406]        iput+0x8c1/0xe80
[  495.553206][T20406]        ext4_xattr_block_set+0x1fd4/0x2ad0
[  495.554923][T20406]        ext4_expand_extra_isize_ea+0x12cf/0x1ea0
[  495.557199][T20406]        __ext4_expand_extra_isize+0x30d/0x400
[  495.559615][T20406]        __ext4_mark_inode_dirty+0x45c/0x710
[  495.561992][T20406]        ext4_evict_inode+0x986/0x10e0
[  495.564144][T20406]        evict+0x61e/0xb10
[  495.565764][T20406]        ext4_orphan_cleanup+0xc38/0x1470
[  495.567548][T20406]        ext4_fill_super+0x5a19/0x6330
[  495.569250][T20406]        get_tree_bdev_flags+0x431/0x4f0
[  495.571120][T20406]        vfs_get_tree+0x92/0x2a0
[  495.572672][T20406]        do_new_mount+0x341/0xd30
[  495.574251][T20406]        __se_sys_mount+0x31d/0x420
[  495.575865][T20406]        do_syscall_64+0x15f/0xf80
[  495.577481][T20406]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  495.579517][T20406] 
[  495.579517][T20406] other info that might help us debug this:
[  495.579517][T20406] 
[  495.582921][T20406]  Possible unsafe locking scenario:
[  495.582921][T20406] 
[  495.585556][T20406]        CPU0                    CPU1
[  495.587272][T20406]        ----                    ----
[  495.588925][T20406]   lock(&ei->xattr_sem);
[  495.590361][T20406]                                lock(&sbi->s_writepages_rwsem);
[  495.592746][T20406]                                lock(&ei->xattr_sem);
[  495.594974][T20406]   rlock(&sbi->s_writepages_rwsem);
[  495.596572][T20406] 
[  495.596572][T20406]  *** DEADLOCK ***
[  495.596572][T20406] 
[  495.598917][T20406] 3 locks held by syz.6.6025/20406:
[  495.600554][T20406]  #0: ffff8881137120d8 (&type->s_umount_key#28/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xab0
[  495.603921][T20406]  #1: ffff888113712600 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x426/0x10e0
[  495.607624][T20406]  #2: ffff8881099a3900 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3db/0x710
[  495.611780][T20406] 
[  495.611780][T20406] stack backtrace:
[  495.613974][T20406] CPU: 0 UID: 0 PID: 20406 Comm: syz.6.6025 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  495.613986][T20406] Tainted: [L]=SOFTLOCKUP
[  495.613990][T20406] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  495.613995][T20406] Call Trace:
[  495.614000][T20406]  <TASK>
[  495.614004][T20406]  dump_stack_lvl+0xe8/0x150
[  495.614016][T20406]  print_circular_bug+0x2e1/0x300
[  495.614027][T20406]  check_noncircular+0x12e/0x150
[  495.614037][T20406]  __lock_acquire+0x15a5/0x2cf0
[  495.614047][T20406]  ? __lock_acquire+0x6b5/0x2cf0
[  495.614056][T20406]  ? ext4_writepages+0x205/0x3b0
[  495.614066][T20406]  lock_acquire+0x106/0x350
[  495.614073][T20406]  ? ext4_writepages+0x205/0x3b0
[  495.614109][T20406]  percpu_down_read_internal+0x48/0x1c0
[  495.614123][T20406]  ? ext4_writepages+0x205/0x3b0
[  495.614132][T20406]  ext4_writepages+0x205/0x3b0
[  495.614141][T20406]  ? __pfx_ext4_writepages+0x10/0x10
[  495.614152][T20406]  ? do_raw_spin_unlock+0x4d/0x210
[  495.614162][T20406]  ? __pfx_ext4_writepages+0x10/0x10
[  495.614170][T20406]  do_writepages+0x32e/0x550
[  495.614180][T20406]  __writeback_single_inode+0x133/0x10e0
[  495.614190][T20406]  ? do_raw_spin_unlock+0x4d/0x210
[  495.614201][T20406]  writeback_single_inode+0x4ac/0xdc0
[  495.614208][T20406]  write_inode_now+0x1c2/0x290
[  495.614215][T20406]  ? __pfx_write_inode_now+0x10/0x10
[  495.614227][T20406]  ? do_raw_spin_unlock+0x4d/0x210
[  495.614237][T20406]  iput+0x8c1/0xe80
[  495.614246][T20406]  ext4_xattr_block_set+0x1fd4/0x2ad0
[  495.614258][T20406]  ? __pfx_check_xattrs+0x10/0x10
[  495.614265][T20406]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[  495.614273][T20406]  ? ext4_xattr_block_find+0x2d4/0x350
[  495.614281][T20406]  ext4_expand_extra_isize_ea+0x12cf/0x1ea0
[  495.614293][T20406]  __ext4_expand_extra_isize+0x30d/0x400
[  495.614302][T20406]  __ext4_mark_inode_dirty+0x45c/0x710
[  495.614314][T20406]  ext4_evict_inode+0x986/0x10e0
[  495.614325][T20406]  ? __pfx_ext4_evict_inode+0x10/0x10
[  495.614334][T20406]  ? do_raw_spin_unlock+0x4d/0x210
[  495.614343][T20406]  ? __pfx_ext4_evict_inode+0x10/0x10
[  495.614352][T20406]  evict+0x61e/0xb10
[  495.614362][T20406]  ? __pfx_evict+0x10/0x10
[  495.614372][T20406]  ? _raw_spin_unlock+0x28/0x50
[  495.614381][T20406]  ? iput+0xb25/0xe80
[  495.614390][T20406]  ext4_orphan_cleanup+0xc38/0x1470
[  495.614401][T20406]  ? __pfx_ext4_orphan_cleanup+0x10/0x10
[  495.614411][T20406]  ? ext4_register_li_request+0x640/0x720
[  495.614420][T20406]  ? errseq_check_and_advance+0x66/0x120
[  495.614432][T20406]  ext4_fill_super+0x5a19/0x6330
[  495.614444][T20406]  ? __pfx_ext4_fill_super+0x10/0x10
[  495.614452][T20406]  ? snprintf+0xe8/0x140
[  495.614460][T20406]  ? __pfx_snprintf+0x10/0x10
[  495.614467][T20406]  ? set_blocksize+0x1c9/0x440
[  495.614477][T20406]  ? sb_set_blocksize+0x155/0x240
[  495.614486][T20406]  ? setup_bdev_super+0x4c1/0x5b0
[  495.614497][T20406]  get_tree_bdev_flags+0x431/0x4f0
[  495.614508][T20406]  ? __pfx_ext4_fill_super+0x10/0x10
[  495.614516][T20406]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  495.614527][T20406]  vfs_get_tree+0x92/0x2a0
[  495.614537][T20406]  do_new_mount+0x341/0xd30
[  495.614544][T20406]  ? apparmor_capable+0x126/0x170
[  495.614555][T20406]  ? __pfx_do_new_mount+0x10/0x10
[  495.614562][T20406]  ? ns_capable+0x89/0xe0
[  495.614570][T20406]  ? user_path_at+0xd4/0x160
[  495.614579][T20406]  __se_sys_mount+0x31d/0x420
[  495.614588][T20406]  ? __pfx___se_sys_mount+0x10/0x10
[  495.614596][T20406]  ? __x64_sys_mount+0x20/0xc0
[  495.614603][T20406]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  495.614611][T20406]  do_syscall_64+0x15f/0xf80
[  495.614626][T20406]  ? trace_irq_disable+0x3b/0x140
[  495.614638][T20406]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  495.614646][T20406] RIP: 0033:0x7f834339e04a
[  495.614654][T20406] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  495.614661][T20406] RSP: 002b:00007f83442e1e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  495.614670][T20406] RAX: ffffffffffffffda RBX: 00007f83442e1ee0 RCX: 00007f834339e04a
[  495.614675][T20406] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f83442e1ea0
[  495.614680][T20406] RBP: 0000200000000180 R08: 00007f83442e1ee0 R09: 0000000000000000
[  495.614685][T20406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000
[  495.614690][T20406] R13: 00007f83442e1ea0 R14: 000000000000047a R15: 000000000000002c
[  495.614698][T20406]  </TASK>
[  495.823585][T20406] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.6025: iget: bad extra_isize 90 (inode size 256)
[  495.828652][T20406] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  495.828814][T20406] EXT4-fs (loop6): Remounting filesystem read-only
[  495.834922][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  495.834933][    C0] EXT4-fs (loop6): initial error at time 1778558024: ext4_xattr_inode_iget:441: inode 11
[  495.834945][    C0] EXT4-fs (loop6): last error at time 1778558024: ext4_xattr_inode_iget:441: inode 11
[  495.845739][T20406] EXT4-fs warning (device loop6): ext4_evict_inode:270: couldn't mark inode dirty (err -30)
[  495.849621][T20406] EXT4-fs (loop6): 1 orphan inode deleted
[  495.852241][T20406] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  495.870467][T15564] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
