last executing test programs:

6.721223563s ago: executing program 1 (id=2647):
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}, "040022ebffff0200"}}}}}, 0x0)

6.720405786s ago: executing program 1 (id=2649):
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setsig(r1, 0xa, 0x11)
fcntl$setlease(r1, 0x400, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = getpid()
fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3})
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=<r4=>0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$setown(r1, 0x8, r4)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

6.550801855s ago: executing program 1 (id=2651):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000080))

6.441402845s ago: executing program 1 (id=2652):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64asumCJWPBPEEisWPIbWMASdogFiB1SkWcm0KQNtI3jqO3zSDNn5vj1mXdGlqUzYzmAZ9ZC+sdvSZyIIxExFxHHk8i3k3KJuBNxsRj7QkScjIjKPUtS5v9OHIyIoxFxYlK8qJmUL31xenzq/K9v//7t94cOHPvymx/29cSBffViRPRXi+3b/SJmnSLeKPONcTeP/XPjMq5uqdHPivzt9kpe4XZjc1wjj2c7xfhs9dZwEq/3Gs1J7HSv5/nVQXHA4bizWWfyhvRGYy3fb7VX8tgdZnnsbBTHXd8ovts2hqOiTqus90lePkajzVjk2+vt4nxWb+axORiV+aJu1mqvT+K4jOXhopn1Wvk8Vh7zIj8B3ukObq2n4/basJsN0vO1+ku1+oVqfS1rtUftc9VGv3XhXLrY6U2GVUftRv9iJ8s6vXatmfWX0sVOs1mt19PFS+2VbmOQ1uu1s7Uz1fNL5dbp9I2rH6S9Vro4ia91B7dG3d4wvZ6tpcU7ltLl2tmXl9JT9fS9K9fSa+9evnzl2vsfXfrw6qtX3nq9HHTftNLF5TPLy9X6mepyfekZOv9Py0k/wvknD07/9OPuLhsUdviAAbCz+/r/2N7/h/4fmLrd9P/9m+X+3vT/8TD9f0yz/5+0VPr//+5/K4/U/56YSv87H/r/PTx/2JXH6/8PTn0eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADM3M/zX72ZbywU+8fK/P/K1HPlfhIRlYi4+wBzcXBLzbmyzvwO4+e3zeG7JPIKk2McKpejEXGxXP78/15fBQAAAHh6fX3n5OdFt16sFvZ7QsxScdOmcvzjKdVLImJ+4ZcpVatMVs9PqVj++T4Q61Oqlt/AOjylYsUttwPTqvZQ5raEw/eEpAiVmU4HAACYia2dwGy7EAAAAGbps3999ZWZzYMZS2LzUebms+D8l/f/PBA8Mlnd3fbjfgAAAOBJkuz3BAAAAIA9l/f//v8PAAAAnm7F//8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBf7NzPjdpAFAfgZ4OB/FNQlHtayQ3KSAk55hgoIE1QAmkhDVADkXJICStYYc8ieRek1TLGWvR9ku2d8ernGeDyxtIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXfpbree/f375dWnObn+ZPLMBAAAATtlW63n9x7Rpv0v9H1LXp9QuIqKMiFO1+yBGrcxByqnO/H/1aAx/IuqEQ/84HW8j4ms67j52/SkAAADA7dosV7OmWm9OaQngX7+j4kqaRZvy/bdMeUVEVNP/mdLKw+lzprD69z2MH5nS6gWsSaawZsltePreKNdD2gaty8NMFvWXWLfKbp4LAAD0qV0JnKlCAAAAuAHf+x4A1/C0tC+Op+N7xnFzSS8E37RaAAAAwCtU9D0AAAAAoHN1/d/N/n+TF+3/V9j/DwAAALJr9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS9tqPd8sV7Nz9xfPzNntL5NvRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9+zPOwqEQBiEwd71ncnc/7DSoKGxSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvfveX/xNT40wy99pYeh5J1k6NrVNj79w4+sP4+jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsT8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsW//vm1UcQDA3/lspylUhIAiEUAFdYCFpm5p6YoQKGLgT0CKUqcEXAptBlpFlCxsKHMXBAsSQkigsOV/6NxIXcrWIUOQmBiC7lf6nJgmpO05TT8f6fl9/Xx5P86Wla/fHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQWX83vNIo4zR7GCviqu32xuJsVq9tqzOry3cms5LFyUjVeuz1+mZ/oL0aPzk+MbyJAAAAcFgc2/WItMrvQwh3WyvTWd0Yy/P/VnVMlvP/UHaVlG3b8/61jcUj5UuTVf7/x+/3XtwaaCzNx8k6nZvvdU/tnEpz38t8wj236xHN/Mznv72k+RvS+HDphfVWfj6T727der+dhyN1zBYA2I+TVV0G1f9DWd0Z5sQAeGo0o8S7yv/TseHOCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAO60vhmSpOQgiTzftxZm1jcXZQ/c3yncnVspy7eXM57jProhVCmJvvdU/VuJaDqzqb1z+b6fW6V65eqzs4HkIY8NKNvf15Wk7/P49phxD6Wk68NKCfj/cw1rZ+dgTlxzPUew5Hs/XtenDS15LsOOHvbRaG8QGoK2iU78/jGGK09ve9P6g+e4++5//zXTLyaL6SAAA41FplyTLRu62V6awtGQ9h88f+/P+NKA59ef/mjaKleL4a5f/3Pjl3Ox4rzv87Na3vSTC1cOmLqavXrr81f2nmYvdi9/O3T3fe6Zw5f/bs+an8t5KpudDwiwkAAAAPoV2WOP8fHbD/fzSKwwP2/4st4SL///L7ztfxWKn8f6D7m37DngkAAMDTqL0VPf/a338lA45I2u3w1czCwpVO8bj1/HTxWOt092mkLHH+n44Pe1YAAABAHdaXkr79/wtRHB6w/x9f///szy//GveZFtcWXA4hdE/OXu5dqG85B1r/Tb8/pY/jRuV8oPawVwoAAMCwjJYl3v9vjWf5f2PrkodGCOHNEyH8U97DH/aY/6cffPtLPFZ8/f+ZWld58DQmivOR1xMhNCeGPSMAAAAOsyNlyZL9P1sr05/+dvSjtuv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr2bwAAAP//aR4tAA==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
statx(0xffffffffffffff9c, 0x0, 0x1000, 0x114cb8255d191d04, &(0x7f0000002500))

5.831360834s ago: executing program 1 (id=2665):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00"], 0x48)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000040))

5.66200786s ago: executing program 1 (id=2668):
syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1, 0x80000001, 0xd55)

5.603675651s ago: executing program 32 (id=2668):
syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1, 0x80000001, 0xd55)

1.393586027s ago: executing program 0 (id=2697):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0)

1.313970533s ago: executing program 0 (id=2698):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
close(0x3)
syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = dup(r0)
r2 = syz_io_uring_setup(0x10e, &(0x7f0000000180)={0x0, 0xfc96, 0x800, 0xffffffff, 0x3f}, &(0x7f00000003c0)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0)

1.234015377s ago: executing program 0 (id=2699):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0xa1080a, &(0x7f0000001540)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,allow_utime=00000000000000000000011,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRES32, @ANYBLOB="64426716f6332e6dd9cb0c57614b21fa1bb9e2d8a7060e6fc4afb485e6a2e14249b9ce7bf222959ce2ac129b6a989c7f12d5966ba26791", @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRES64, @ANYBLOB="1c70ce462be293cf1231d4cb900ce5417823d8ebd8f7322a4378f66803e335d61c7f7188a46cebacd9380bc2de512c5a70c78c7dd7dff87faf650f29d5fbda233217fb672f6b887f97624b7e90b27e865210e838161dd818fe71c76b8a960076fc5dc60849592066c9ecc0606726392abf34e1a7e16e7e43cef434d95dea21347f728083eff4fe5fc07383e6369ca37e5fcae3b85984a42d3d8991d3b0814bc25ccf5f4697a450d0c49b069133139c2381da7b237ae3004c5a51be5f59b59058ff757f100a7c67c0491fc24f722a", @ANYRES32, @ANYRESDEC], 0x21, 0x150d, &(0x7f0000001f80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
openat(0xffffffffffffff9c, &(0x7f000009de80)='./file1\x00', 0x4240, 0x1ff)

711.674479ms ago: executing program 0 (id=2701):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0)
ioctl$COMEDI_CMD(r0, 0x80506409, 0x0)

711.349762ms ago: executing program 2 (id=2702):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
syz_emit_ethernet(0x6a, &(0x7f00000003c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x65, 0x0, 0x0, 0x3a, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x8000, 0x4e21, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "7ac853115d9bc02387baabfb05affc0c2d972bcbdd1e453b", "fb1a2016c81cd6c5664d3625678098628fe7f60d273387f4e4aa8aad6c979eec"}}}}}}, 0x0)

643.092204ms ago: executing program 0 (id=2703):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xe0b, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff3, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x80000001}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44004}, 0x0)

593.267278ms ago: executing program 2 (id=2704):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe)
listen(r0, 0x601)

593.111019ms ago: executing program 2 (id=2705):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0)

520.954706ms ago: executing program 0 (id=2706):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xe0}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4000080)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbff, 0x1000000}, 0xc)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, &(0x7f00000002c0)="9e", 0x1, 0x40011, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x1}, 0x8)
sendmsg$inet6(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)='d', 0x1}], 0x1}, 0x8000)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x2)
writev(r4, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x34000}], 0x1)

428.952842ms ago: executing program 2 (id=2707):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000000)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}, {@nojournal_checksum}, {@errors_remount}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc4}})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.swap.events\x00', 0x26e1, 0x0)

93.579713ms ago: executing program 2 (id=2708):
syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00')
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xa, 0x80000)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f00000000c0)=ANY=[])

0s ago: executing program 2 (id=2709):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)={0x2, 0x18, 0x31, 0x0, 0x3, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_x_nat_t_port={0x1, 0x3, 0x4e21}]}, 0x18}}, 0x20000080)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="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", 0xed1, 0x4008841, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
socket(0x10, 0x80002, 0x0)
syz_usb_connect$uac1(0x69a90eab3db9c902, 0xa6, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406b1d010140000102030109029400030105a0090904000000010100000a2401f7ff0702010209240303000303030b05240506870904010000010200000904010101010200000924020182040910ca0c24020109040706f7e04239090501090004ffc803072501000405000904020000010200000904020101010200000b240201060408013a388207240101c00210090582095000"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:47680' (ED25519) to the list of known hosts.
syzkaller login: [   48.676993][ T5787] cgroup: Unknown subsys name 'net'
[   48.787960][ T5787] cgroup: Unknown subsys name 'cpuset'
[   48.798117][ T5787] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.285750][ T5787] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.807813][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.812395][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.815956][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.819689][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.825008][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.861860][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.865210][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.868825][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.872195][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.877169][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.883942][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.887049][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.888361][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.893885][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.897247][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.169802][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   55.230630][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   55.294631][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.297725][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.300600][ T5849] bridge_slave_0: entered allmulticast mode
[   55.303668][ T5849] bridge_slave_0: entered promiscuous mode
[   55.308342][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.310801][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.314048][ T5849] bridge_slave_1: entered allmulticast mode
[   55.317263][ T5849] bridge_slave_1: entered promiscuous mode
[   55.363102][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.367090][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   55.390749][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.394290][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.397820][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.400592][ T5857] bridge_slave_0: entered allmulticast mode
[   55.403968][ T5857] bridge_slave_0: entered promiscuous mode
[   55.423909][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.426321][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.429310][ T5857] bridge_slave_1: entered allmulticast mode
[   55.433843][ T5857] bridge_slave_1: entered promiscuous mode
[   55.477801][ T5849] team0: Port device team_slave_0 added
[   55.495150][ T5849] team0: Port device team_slave_1 added
[   55.500168][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.531072][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.588319][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.591531][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.595292][ T5853] bridge_slave_0: entered allmulticast mode
[   55.599287][ T5853] bridge_slave_0: entered promiscuous mode
[   55.604361][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.607462][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.610610][ T5853] bridge_slave_1: entered allmulticast mode
[   55.615120][ T5853] bridge_slave_1: entered promiscuous mode
[   55.619168][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.621549][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.630726][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.636352][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.638630][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.647654][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.652989][ T5857] team0: Port device team_slave_0 added
[   55.669321][ T5857] team0: Port device team_slave_1 added
[   55.699991][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.702418][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.711321][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.718512][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.725167][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.736278][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.738929][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.748753][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.785055][ T5853] team0: Port device team_slave_0 added
[   55.791476][ T5849] hsr_slave_0: entered promiscuous mode
[   55.794367][ T5849] hsr_slave_1: entered promiscuous mode
[   55.813365][ T5853] team0: Port device team_slave_1 added
[   55.842454][ T5857] hsr_slave_0: entered promiscuous mode
[   55.845235][ T5857] hsr_slave_1: entered promiscuous mode
[   55.848200][ T5857] debugfs: 'hsr0' already exists in 'hsr'
[   55.850626][ T5857] Cannot create hsr debugfs directory
[   55.893006][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.895887][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.905734][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.942704][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.945600][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.956348][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.052666][ T5853] hsr_slave_0: entered promiscuous mode
[   56.055623][ T5853] hsr_slave_1: entered promiscuous mode
[   56.058872][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   56.061279][ T5853] Cannot create hsr debugfs directory
[   56.211596][ T5857] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.226835][ T5857] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.237819][ T5857] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.253143][ T5857] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.276536][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.281512][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.297487][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.320264][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.349058][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.359022][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.370337][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.380990][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.415138][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.443982][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   56.462530][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.465049][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.483661][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.486046][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.495489][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.526019][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.535642][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   56.545178][  T740] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.547625][  T740] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.565180][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.567889][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.583022][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   56.590382][ T4569] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.592916][ T4569] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.614606][ T4569] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.617353][ T4569] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.691366][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.754179][ T5857] veth0_vlan: entered promiscuous mode
[   56.767182][ T5857] veth1_vlan: entered promiscuous mode
[   56.781598][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.814371][ T5857] veth0_macvtap: entered promiscuous mode
[   56.821273][ T5857] veth1_macvtap: entered promiscuous mode
[   56.829957][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.852100][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.865796][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.885671][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.901694][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.906722][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.910463][ T5853] veth0_vlan: entered promiscuous mode
[   56.918782][ T5849] veth0_vlan: entered promiscuous mode
[   56.924318][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.941512][ T5849] veth1_vlan: entered promiscuous mode
[   56.948876][ T5853] veth1_vlan: entered promiscuous mode
[   56.953663][ T5854] Bluetooth: hci0: command tx timeout
[   56.963448][ T5854] Bluetooth: hci1: command tx timeout
[   56.963592][ T5852] Bluetooth: hci2: command tx timeout
[   57.036812][ T5853] veth0_macvtap: entered promiscuous mode
[   57.042609][ T5849] veth0_macvtap: entered promiscuous mode
[   57.046197][ T5853] veth1_macvtap: entered promiscuous mode
[   57.053888][ T4569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.056558][ T4569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.073379][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.081159][ T5849] veth1_macvtap: entered promiscuous mode
[   57.100472][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.116077][ T5881] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.127056][ T5881] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.130420][ T5881] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.133998][ T4569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.134337][ T4569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.154563][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.160195][ T5881] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.167898][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.194271][ T5881] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.213541][ T5881] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.217183][ T5881] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.220634][ T5881] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.236306][ T5857] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.284006][  T740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.288971][  T740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.374704][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.378055][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.396367][ T4569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.406223][ T4569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.442071][  T740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.446121][  T740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.631474][ T5918] loop0: detected capacity change from 0 to 32768
[   57.648051][ T5918] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1 (5918)
[   57.655465][ T5930] loop1: detected capacity change from 0 to 512
[   57.669284][ T5930] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   57.725469][ T5930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.730747][ T5930] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   57.775097][ T5918] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   57.779635][ T5918] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[   57.830311][ T5937] loop2: detected capacity change from 0 to 256
[   57.837201][ T5937] =======================================================
[   57.837201][ T5937] WARNING: The mand mount option has been deprecated and
[   57.837201][ T5937]          and is ignored by this kernel. Remove the mand
[   57.837201][ T5937]          option from the mount to silence this warning.
[   57.837201][ T5937] =======================================================
[   57.858789][ T5937] exfat: Invalid uid '0x00000000ffffffff'
[   57.926626][ T5918] BTRFS info (device loop0): setting nodatasum
[   57.940072][ T5918] BTRFS info (device loop0): setting nodatacow
[   57.942998][ T5918] BTRFS info (device loop0): enabling free space tree
[   57.953639][ T5918] BTRFS info (device loop0): max_inline set to 0
[   57.970766][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.116222][ T5857] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   58.254726][ T5968] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15'.
[   58.643110][ T5901] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   58.651333][ T5992] process 'syz.2.25' launched '/dev/fd/4' with NULL argv: empty string added
[   58.802636][ T5901] usb 1-1: Using ep0 maxpacket: 16
[   58.809134][ T5901] usb 1-1: config 6 has an invalid interface number: 3 but max is 0
[   58.812206][ T5901] usb 1-1: config 6 has no interface number 0
[   58.814938][ T5901] usb 1-1: config 6 interface 3 has no altsetting 0
[   58.820772][ T5901] usb 1-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=18.0a
[   58.824472][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.827589][ T5901] usb 1-1: Product: syz
[   58.829250][ T5901] usb 1-1: Manufacturer: syz
[   58.831111][ T5901] usb 1-1: SerialNumber: syz
[   58.850816][ T5901] usb 1-1: active config #6 != 1 ??
[   59.032877][ T5852] Bluetooth: hci1: command tx timeout
[   59.033781][ T5855] Bluetooth: hci2: command tx timeout
[   59.038057][ T5854] Bluetooth: hci0: command tx timeout
[   59.057873][   T47] usb 1-1: USB disconnect, device number 2
[   59.607122][ T6003] loop2: detected capacity change from 0 to 8192
[   59.652954][ T5938]  loop2: p1 p3 p4
[   59.654810][ T5938] loop2: partition table partially beyond EOD, truncated
[   59.657821][ T5938] loop2: p1 start 393217 is beyond EOD, truncated
[   59.660517][ T5938] loop2: p3 size 395700 extends beyond EOD, truncated
[   59.680748][ T5938] loop2: p4 start 117571584 is beyond EOD, truncated
[   59.716089][ T6003]  loop2: p1 p3 p4
[   59.717796][ T6003] loop2: partition table partially beyond EOD, truncated
[   59.732753][ T6003] loop2: p1 start 393217 is beyond EOD, truncated
[   59.736594][ T6003] loop2: p3 size 395700 extends beyond EOD, truncated
[   59.751003][ T6003] loop2: p4 start 117571584 is beyond EOD, truncated
[   60.012635][   T47] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   60.164136][   T47] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c
[   60.167902][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.173650][   T47] usb 2-1: config 0 descriptor??
[   60.182418][   T47] usb 2-1: bad CDC descriptors
[   60.337930][ T6023] loop2: detected capacity change from 0 to 1024
[   60.364313][ T6023] hfsplus: small dir entry
[   60.522467][   T24] usb 2-1: USB disconnect, device number 2
[   60.544407][ T6030] loop2: detected capacity change from 0 to 65
[   60.559654][ T6030] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway
[   61.026545][    T9] IPVS: starting estimator thread 0...
[   61.112705][ T5854] Bluetooth: hci0: command tx timeout
[   61.116011][ T5855] Bluetooth: hci2: command tx timeout
[   61.118443][ T5854] Bluetooth: hci1: command tx timeout
[   61.124670][ T6037] IPVS: using max 52 ests per chain, 124800 per kthread
[   61.169701][ T6043] Driver unsupported XDP return value 0 on prog  (id 8) dev N/A, expect packet loss!
[   61.821065][ T6062] loop1: detected capacity change from 0 to 128
[   61.834970][ T6062] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[   62.011071][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'.
[   62.027475][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'.
[   62.537435][ T6084] capability: warning: `syz.2.63' uses deprecated v2 capabilities in a way that may be insecure
[   62.963751][ T5314] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   63.122388][ T5314] usb 3-1: Using ep0 maxpacket: 32
[   63.126775][ T5314] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[   63.134961][ T5314] usb 3-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92
[   63.138880][ T5314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.142405][ T5314] usb 3-1: Product: syz
[   63.144306][ T5314] usb 3-1: Manufacturer: syz
[   63.146485][ T5314] usb 3-1: SerialNumber: syz
[   63.154547][ T5314] kobil_sct 3-1:2.0: required endpoints missing
[   63.192563][ T5855] Bluetooth: hci2: command tx timeout
[   63.194825][ T5854] Bluetooth: hci1: command tx timeout
[   63.202882][ T5854] Bluetooth: hci0: command tx timeout
[   63.371310][ T5882] usb 3-1: USB disconnect, device number 2
[   63.434533][ T6096] Invalid ELF header magic: != ELF
[   63.953515][ T6119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.80'.
[   64.172504][ T5882] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   64.245007][ T1271] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   64.326801][ T5882] usb 1-1: unable to get BOS descriptor or descriptor too short
[   64.333336][ T5882] usb 1-1: not running at top speed; connect to a high speed hub
[   64.339387][ T5882] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4
[   64.353046][ T5882] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   64.356837][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.360083][ T5882] usb 1-1: Product: syz
[   64.361471][ T5882] usb 1-1: Manufacturer: syz
[   64.364271][ T5882] usb 1-1: SerialNumber: syz
[   64.388002][ T6144] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[   64.405425][ T1271] usb 2-1: config 32 has an invalid interface number: 47 but max is 0
[   64.408854][ T1271] usb 2-1: config 32 contains an unexpected descriptor of type 0x2, skipping
[   64.421097][ T1271] usb 2-1: config 32 descriptor has 1 excess byte, ignoring
[   64.431956][ T6146] netlink: 'syz.2.93': attribute type 1 has an invalid length.
[   64.435346][ T1271] usb 2-1: config 32 has no interface number 0
[   64.435406][ T1271] usb 2-1: config 32 interface 47 altsetting 167 endpoint 0x2 has invalid maxpacket 1289, setting to 1024
[   64.435507][ T1271] usb 2-1: config 32 interface 47 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   64.435526][ T1271] usb 2-1: config 32 interface 47 has no altsetting 0
[   64.438132][ T1271] usb 2-1: New USB device found, idVendor=10c4, idProduct=819f, bcdDevice=9b.ef
[   64.449456][ T6146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.93'.
[   64.454543][ T1271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.463931][ T1271] usb 2-1: Product: syz
[   64.469492][ T1271] usb 2-1: Manufacturer: syz
[   64.471735][ T1271] usb 2-1: SerialNumber: syz
[   64.488114][ T6123] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   64.590484][ T5882] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   64.595065][ T5882] usb 1-1: unit 2 not found!
[   64.626137][ T5882] usb 1-1: USB disconnect, device number 3
[   64.679969][ T5938] udevd[5938]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   64.703772][ T1271] cp210x 2-1:32.47: cp210x converter detected
[   64.707582][ T1271] cp210x 2-1:32.47: failed to get vendor val 0x370b size 1: -71
[   64.718746][ T1271] cp210x 2-1:32.47: querying part number failed
[   64.733967][ T1271] usb 2-1: cp210x converter now attached to ttyUSB0
[   64.750574][ T1271] usb 2-1: USB disconnect, device number 3
[   64.764739][ T1271] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   64.767903][ T1271] cp210x 2-1:32.47: device disconnected
[   65.265407][ T6160] loop1: detected capacity change from 0 to 1024
[   65.283004][ T6160] hfsplus: bad catalog entry type
[   65.308396][  T740] hfsplus: b-tree write err: -5, ino 4
[   65.629469][ T6168] loop0: detected capacity change from 0 to 32768
[   65.693875][ T6168] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   65.708783][ T6168] XFS (loop0): Ending clean mount
[   65.755132][ T5857] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   65.922513][   T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   66.074011][   T24] usb 3-1: Using ep0 maxpacket: 16
[   66.097598][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   66.103310][   T24] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   66.106739][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.109723][   T24] usb 3-1: Product: syz
[   66.111115][   T24] usb 3-1: Manufacturer: syz
[   66.115584][   T24] usb 3-1: SerialNumber: syz
[   66.123374][   T24] usb 3-1: config 0 descriptor??
[   66.130510][   T24] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[   66.136950][   T24] em28xx 3-1:0.0: DVB interface 0 found: bulk
[   66.744493][   T24] em28xx 3-1:0.0: chip ID is em2765
[   67.177587][ T6199] netlink: 28 bytes leftover after parsing attributes in process `syz.1.114'.
[   67.294863][ T6204] loop1: detected capacity change from 0 to 2048
[   67.360462][ T6204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   67.384489][   T24] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[   67.406024][   T24] em28xx 3-1:0.0: board has no eeprom
[   67.542105][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.686416][ T6210] Zero length message leads to an empty skb
[   68.485889][ T6177] em28xx 3-1:0.0: reading from i2c device at 0x8 failed (error=-5)
[   68.552995][   T24] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[   68.556937][   T24] em28xx 3-1:0.0: dvb set to bulk mode.
[   68.564862][   T47] em28xx 3-1:0.0: Binding DVB extension
[   68.586657][   T24] usb 3-1: USB disconnect, device number 3
[   68.611775][   T24] em28xx 3-1:0.0: Disconnecting em28xx
[   68.731056][   T47] em28xx 3-1:0.0: Registering input extension
[   68.736844][   T24] em28xx 3-1:0.0: Closing input extension
[   68.760315][ T6218] loop1: detected capacity change from 0 to 32768
[   68.817218][   T24] em28xx 3-1:0.0: Freeing device
[   68.832887][ T6218] JBD2: Ignoring recovery information on journal
[   68.976723][ T6218] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   69.157915][ T5849] ocfs2: Unmounting device (7,1) on (node local)
[   69.441826][ T6238] loop0: detected capacity change from 0 to 8
[   69.876359][ T6254] loop2: detected capacity change from 0 to 512
[   69.892985][ T6254] EXT4-fs (loop2): orphan cleanup on readonly fs
[   69.899141][ T6254] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[   69.905455][ T6254] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[   69.919968][ T6254] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.134: attempt to clear invalid blocks 2 len 1
[   69.926891][ T6254] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.134: invalid indirect mapped block 1819239214 (level 0)
[   69.934209][ T6254] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.134: invalid indirect mapped block 1819239214 (level 1)
[   69.946909][ T6254] EXT4-fs (loop2): 1 truncate cleaned up
[   69.951762][ T6254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   69.979107][ T6254] EXT4-fs error (device loop2): __ext4_remount:6746: comm syz.2.134: Abort forced by user
[   69.991159][ T6254] EXT4-fs (loop2): Remounting filesystem read-only
[   69.994268][ T6254] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[   70.011281][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.563931][ T6276] loop2: detected capacity change from 0 to 4096
[   70.681306][ T6270] loop0: detected capacity change from 0 to 32768
[   70.688046][ T6270] bcachefs (/dev/loop0): error reading default superblock: checksum error, type none: got  should be 
[   70.692907][ T6270] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section clean: entry type (unknown jset_entry_type 255) overruns end of section
[   70.692907][ T6270] clean (size 2912):
[   70.692907][ T6270] flags:          0
[   70.692907][ T6270] journal_seq:    10
[   70.692907][ T6270] usage: type=inodes v=8
[   70.692907][ T6270] usage: type=key_version v=0
[   70.692907][ T6270] usage: type=reserved v=0
[   70.692907][ T6270] usage: type=reserved v=0
[   70.692907][ T6270] usage: type=reserved v=0
[   70.692907][ T6270] usage: type=reserved v=0
[   70.692907][ T6270] data_usage: btree: 1/1 [0]=2816
[   70.692907][ T6270] data_usage: journal: 1/1 [0]=0
[   70.692907][ T6270] data_usage: user: 1/1 [0]=16
[   70.692907][ T6270] dev_usage: dev=0  
[   70.692907][ T6270]   free: buckets=83 sectors=0 fragmented=0
[   70.692907][ T6270]   sb: buckets=25 sectors=6152 fragmented=248
[   70.692907][ T6270]   journal: buckets=8 sectors=2048 fragmented=0
[   70.692907][ T6270]   btree: buckets=11 sectors=2816 fragmented=0
[   70.692907][ T6270]   user: buckets=1 sectors=16 fragmented=240
[   70.692907][ T6270]   cached: buckets=0 sectors=0 fragmented=0
[   70.692907][ T6270]   parity: buckets=432345564227567616 sectors=0 fragmented=0
[   70.692907][ T6270]   stripe: buckets=0 sectors=0 fragmented=0
[   70.692907][ T6270]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[   70.692907][ T6270]   need_discard: buckets=0 sectors=0 fragmented=0
[   70.692907][ T6270] clock: read=0
[   70.692907][ T6270] clock: write=1280
[   70.692907][ T6270] log_bkey: btree=extents level=0 u64s 11 type btree_p
[   70.693094][ T6270] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[   70.814945][ T6280] loop0: detected capacity change from 0 to 8
[   70.860813][ T6282] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   70.871350][ T6282] CIFS mount error: No usable UNC path provided in device string!
[   70.871350][ T6282] 
[   70.877127][ T6282] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   71.013406][ T6288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.148'.
[   71.511112][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.514385][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.581128][ T6296] loop2: detected capacity change from 0 to 1764
[   71.584895][ T6296] iso9660: Unknown parameter 'che-T relaxed'
[   71.845728][ T6310] loop1: detected capacity change from 0 to 4096
[   71.873765][ T6310] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[   72.000724][ T6320] netlink: 72 bytes leftover after parsing attributes in process `syz.0.162'.
[   72.104880][ T6331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.166'.
[   72.238848][ T6337] loop0: detected capacity change from 0 to 128
[   72.299782][ T6335] loop2: detected capacity change from 0 to 40427
[   72.556473][ T6335] F2FS-fs (loop2): invalid crc value
[   72.624145][ T6335] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   72.630884][ T6335] F2FS-fs (loop2): Start checkpoint disabled!
[   72.639646][ T6335] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[   72.645022][ T6335] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   73.047116][ T6348] loop0: detected capacity change from 0 to 1024
[   73.074836][  T740] hfsplus: b-tree write err: -5, ino 4
[   73.497412][ T6358] netlink: 'syz.0.178': attribute type 1 has an invalid length.
[   73.503286][ T6358] netlink: 172 bytes leftover after parsing attributes in process `syz.0.178'.
[   73.507102][ T6358] netlink: 'syz.0.178': attribute type 1 has an invalid length.
[   73.521503][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.175'.
[   73.681933][ T6366] loop2: detected capacity change from 0 to 16
[   73.732705][ T6366] erofs (device loop2): mounted with root inode @ nid 36.
[   74.199750][ T6374] capability: warning: `syz.2.184' uses 32-bit capabilities (legacy support in use)
[   74.749641][ T6391] loop0: detected capacity change from 0 to 512
[   74.814486][ T6391] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.819898][ T6391] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   74.868869][   T33] audit: type=1800 audit(1758862470.343:2): pid=6391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.192" name="file2" dev="loop0" ino=16 res=0 errno=0
[   74.951648][ T5857] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.018358][ T6396] netlink: 'syz.0.193': attribute type 4 has an invalid length.
[   75.073751][ T6398] fuse: Bad value for 'fd'
[   75.446151][ T6418] loop0: detected capacity change from 0 to 2048
[   75.493732][ T6422] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   76.290075][ T6443] netlink: 40 bytes leftover after parsing attributes in process `syz.1.208'.
[   77.551273][ T6473] warning: `syz.2.221' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   77.657334][ T6475] Bluetooth: MGMT ver 1.23
[   78.309265][ T6479] loop1: detected capacity change from 0 to 32768
[   78.592056][ T6479] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[   78.592860][ T6479]   allowing incompatible features above 0.0: (unknown version)
[   78.592954][ T6479]   features: lz4
[   78.609175][ T6479] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[   78.618250][ T6479] bcachefs (loop1): initializing new filesystem
[   78.649468][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.229'.
[   78.651100][ T6479] bcachefs (loop1): going read-write
[   78.683471][ T6479] bcachefs (loop1): marking superblocks
[   78.773288][ T6479] bcachefs (loop1): initializing freespace
[   78.817567][ T6479] bcachefs (loop1): done initializing freespace
[   78.853594][ T6479] bcachefs (loop1): reading snapshots table
[   78.856146][ T6479] bcachefs (loop1): reading snapshots done
[   78.895815][ T6479] bcachefs (loop1): done starting filesystem
[   78.938208][   T33] audit: type=1800 audit(1758862474.413:3): pid=6479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.224" name="file1" dev="loop1" ino=4098 res=0 errno=0
[   79.038157][ T6479] syz.1.224 (6479) used greatest stack depth: 16840 bytes left
[   79.051401][ T5849] bcachefs (loop1): shutting down
[   79.061732][ T5849] bcachefs (loop1): going read-only
[   79.070483][ T5849] bcachefs (loop1): finished waiting for writes to stop
[   79.088129][ T5849] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[   79.208944][ T5849] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[   79.218328][ T5849] bcachefs (loop1): clean shutdown complete, journal seq 4
[   79.225235][ T5849] bcachefs (loop1): marking filesystem clean
[   79.247530][ T6509] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   79.251176][ T6509] IPv6: NLM_F_CREATE should be set when creating new route
[   79.254390][ T6509] IPv6: NLM_F_CREATE should be set when creating new route
[   79.257426][ T6509] IPv6: NLM_F_CREATE should be set when creating new route
[   79.324901][ T5849] bcachefs (loop1): shutdown complete
[   80.596059][ T5854] Bluetooth: hci2: Malformed HCI Event: 0x22
[   81.169575][   T33] audit: type=1326 audit(1758862476.643:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6545 comm="syz.0.247" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae3f38ec29 code=0x0
[   81.176914][ T6542] loop1: detected capacity change from 0 to 4096
[   81.196481][ T6542] NILFS (loop1): invalid segment: Checksum error in segment payload
[   81.200174][ T6542] NILFS (loop1): trying rollback from an earlier position
[   81.228947][ T6542] NILFS (loop1): recovery complete
[   81.238404][ T6550] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   81.485482][ T6560] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   81.488848][ T6560] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   81.509527][ T6562] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   81.926997][ T6574] loop1: detected capacity change from 0 to 32768
[   81.934429][ T6574] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.260 (6574)
[   81.946663][ T6574] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   81.951010][ T6574] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[   82.000875][ T6574] BTRFS info (device loop1): enabling ssd optimizations
[   82.006924][ T6574] BTRFS info (device loop1): enabling free space tree
[   82.111693][ T5849] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   82.324280][ T6610] syz.1.268 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   82.634818][   T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   82.641254][   T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   82.662490][   T47] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   82.750601][ T6632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.280'.
[   82.783760][   T33] audit: type=1800 audit(1758862478.253:5): pid=6635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.282" name="bus" dev="overlay" ino=485 res=0 errno=0
[   83.076816][   T47] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   83.193530][   T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   83.617006][   T33] audit: type=1326 audit(1758862479.093:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.2.295" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7798ec29 code=0x7ff00000
[   83.632115][   T33] audit: type=1326 audit(1758862479.103:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.2.295" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7798ec29 code=0x7ff00000
[   83.647295][   T33] audit: type=1326 audit(1758862479.103:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.2.295" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7798ec29 code=0x7ff00000
[   83.659659][   T33] audit: type=1326 audit(1758862479.103:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.2.295" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7798ec29 code=0x7ff00000
[   83.674709][   T33] audit: type=1326 audit(1758862479.103:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.2.295" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7798ec29 code=0x7ff00000
[   83.684403][   T33] audit: type=1326 audit(1758862479.103:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.2.295" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7798ec29 code=0x7ff00000
[   83.695722][   T33] audit: type=1326 audit(1758862479.103:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.2.295" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7798ec29 code=0x7ff00000
[   83.704995][   T33] audit: type=1326 audit(1758862479.103:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.2.295" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7798ec29 code=0x7ff00000
[   83.788313][ T6674] loop1: detected capacity change from 0 to 256
[   83.790894][ T6674] exfat: Deprecated parameter 'namecase'
[   83.798594][ T6674] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[   83.851397][ T6680] netlink: 96 bytes leftover after parsing attributes in process `syz.1.302'.
[   84.773697][ T6726] sp0: Synchronizing with TNC
[   84.859651][ T6732] overlayfs: failed to clone upperpath
[   84.918708][ T6734] loop1: detected capacity change from 0 to 256
[   85.398721][ T6754] loop1: detected capacity change from 0 to 32768
[   85.405173][ T6754] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.337 (6754)
[   85.427082][ T6754] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   85.434175][ T6754] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   85.486572][ T6754] BTRFS info (device loop1): enabling ssd optimizations
[   85.489003][ T6754] BTRFS info (device loop1): enabling free space tree
[   85.513004][ T5849] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   85.550358][ T6772] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   85.932441][    T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   86.086530][    T9] usb 2-1: Using ep0 maxpacket: 32
[   86.096722][    T9] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[   86.100763][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.105785][    T9] usb 2-1: Product: syz
[   86.107719][    T9] usb 2-1: Manufacturer: syz
[   86.109740][    T9] usb 2-1: SerialNumber: syz
[   86.114901][    T9] usb 2-1: config 0 descriptor??
[   86.124262][    T9] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[   86.336044][    T9] gspca_topro: reg_w err -71
[   86.362407][    T9] gspca_topro: Sensor soi763a
[   86.376477][    T9] usb 2-1: USB disconnect, device number 4
[   86.474819][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   86.481164][  T794] cfg80211: failed to load regulatory.db
[   87.227697][ T6829] loop1: detected capacity change from 0 to 128
[   87.265873][ T6829] FAT-fs (loop1): Directory bread(block 32) failed
[   87.268770][ T6829] FAT-fs (loop1): Directory bread(block 33) failed
[   87.271758][ T6829] FAT-fs (loop1): Directory bread(block 34) failed
[   87.276941][ T6829] FAT-fs (loop1): Directory bread(block 35) failed
[   87.280086][ T6829] FAT-fs (loop1): Directory bread(block 36) failed
[   87.283913][ T6829] FAT-fs (loop1): Directory bread(block 37) failed
[   87.286949][ T6829] FAT-fs (loop1): Directory bread(block 38) failed
[   87.289931][ T6829] FAT-fs (loop1): Directory bread(block 39) failed
[   87.293681][ T6829] FAT-fs (loop1): Directory bread(block 40) failed
[   87.296654][ T6829] FAT-fs (loop1): Directory bread(block 41) failed
[   87.354323][   T33] kauditd_printk_skb: 65 callbacks suppressed
[   87.354342][   T33] audit: type=1800 audit(1758862482.833:79): pid=6829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.361" name="file1" dev="loop1" ino=1048600 res=0 errno=0
[   87.368088][ T6828] syz.1.361: attempt to access beyond end of device
[   87.368088][ T6828] loop1: rw=524288, sector=4108, nr_sectors = 4 limit=128
[   87.377224][ T6828] syz.1.361: attempt to access beyond end of device
[   87.377224][ T6828] loop1: rw=0, sector=4108, nr_sectors = 4 limit=128
[   87.386600][ T6828] syz.1.361: attempt to access beyond end of device
[   87.386600][ T6828] loop1: rw=0, sector=4108, nr_sectors = 4 limit=128
[   87.517912][ T6837] netlink: 'syz.2.365': attribute type 1 has an invalid length.
[   87.521282][ T6837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.365'.
[   87.654601][ T6851] comedi comedi3: 8255: I/O port conflict (0x5,4)
[   87.657504][ T6851] comedi comedi3: 8255: I/O port conflict (0x2,4)
[   87.660255][ T6851] comedi comedi3: 8255: I/O port conflict (0x1,4)
[   87.669435][ T6851] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[   87.673503][ T6851] comedi comedi3: 8255: I/O port conflict (0x5,4)
[   87.676243][ T6851] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[   87.679362][ T6851] comedi comedi3: 8255: I/O port conflict (0x1,4)
[   87.682077][ T6851] comedi comedi3: 8255: I/O port conflict (0x1,4)
[   87.687229][ T6851] comedi comedi3: 8255: I/O port conflict (0x9,4)
[   87.690233][ T6851] comedi comedi3: 8255: I/O port conflict (0x6,4)
[   87.693878][ T6851] comedi comedi3: 8255: I/O port conflict (0x4,4)
[   87.696661][ T6851] comedi comedi3: 8255: I/O port conflict (0x3,4)
[   88.279635][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.376'.
[   88.646016][ T5854] Bluetooth: hci0: unknown advertising packet type: 0x82
[   88.646095][ T5854] Bluetooth: hci0: Malformed LE Event: 0x02
[   88.712427][   T33] audit: type=1800 audit(1758862484.183:80): pid=6877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.381" name="nullb0" dev="tmpfs" ino=408 res=0 errno=0
[   88.814582][ T6883] loop1: detected capacity change from 0 to 512
[   88.823485][ T6883] EXT4-fs: Ignoring removed nobh option
[   88.848171][ T6883] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.385: iget: bad i_size value: 38620345925642
[   88.857255][ T6883] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.385: couldn't read orphan inode 15 (err -117)
[   88.862131][ T6883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.892092][ T6883] EXT4-fs: Ignoring removed orlov option
[   88.895143][ T6883] EXT4-fs: can't change dax mount option while remounting
[   88.922816][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.053470][   T33] audit: type=1326 audit(1758862484.533:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6898 comm="syz.1.391" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feddfd8ec29 code=0x0
[   89.113441][ T6900] vivid-002: disconnect
[   89.880607][ T6898] vivid-002: reconnect
[   90.212533][  T794] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   90.393930][  T794] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[   90.398602][  T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.443765][  T794] usb 2-1: config 0 descriptor??
[   90.480832][  T794] gspca_main: spca508-2.14.0 probing 8086:0110
[   90.856889][  T794] gspca_spca508: reg_read err -71
[   90.859799][  T794] gspca_spca508: reg_read err -71
[   90.863117][  T794] gspca_spca508: reg_read err -71
[   90.865272][  T794] gspca_spca508: reg_read err -71
[   90.867317][  T794] gspca_spca508: reg write: error -71
[   90.869222][  T794] spca508 2-1:0.0: probe with driver spca508 failed with error -71
[   90.874111][  T794] usb 2-1: USB disconnect, device number 5
[   91.651181][ T6985] netlink: 'syz.2.426': attribute type 41 has an invalid length.
[   93.637235][ T7035] netlink: 'syz.2.448': attribute type 5 has an invalid length.
[   94.016229][ T7062] vcan0: tx address claim with dest, not broadcast
[   94.152483][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   94.647973][ T7080] syz_tun: entered allmulticast mode
[   94.668559][ T7080] dvmrp1: entered allmulticast mode
[   94.732098][ T7079] syz_tun: left allmulticast mode
[   94.969486][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.473'.
[   95.694356][ T7121] loop1: detected capacity change from 0 to 256
[   95.699769][ T7121] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   95.704335][ T7121] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[   95.709677][ T7121] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   95.720975][ T7121] exFAT-fs (loop1): failed to load alloc-bitmap
[   95.723659][ T7121] exFAT-fs (loop1): failed to recognize exfat type
[   96.431962][ T7149] loop1: detected capacity change from 0 to 8192
[   96.449680][ T7149] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[   96.453801][ T7149] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[   96.457738][ T7149] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[   96.461624][ T7149] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[   96.466392][ T7149] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[   96.471573][ T7149] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[   96.476146][ T7149] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[   96.484063][ T7149] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[   96.488611][ T7149] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[   96.492947][ T7149] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[   96.496831][ T7149] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[   96.500999][   T33] audit: type=1800 audit(1758862491.973:82): pid=7149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.496" name="file2" dev="loop1" ino=1048601 res=0 errno=0
[   96.740823][ T7169] loop1: detected capacity change from 0 to 128
[   96.764232][ T7169] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   96.783632][ T7169] ext4 filesystem being mounted at /163/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   96.849197][ T5849] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   97.615679][ T7205] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[   97.615679][ T7205] The task syz.2.516 (7205) triggered the difference, watch for misbehavior.
[   97.980887][ T7187] syz.1.509 (7187): drop_caches: 2
[   98.464491][ T7240] netlink: 'syz.2.533': attribute type 10 has an invalid length.
[   98.512078][ T7240] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   98.746270][ T7245] netlink: 'syz.1.534': attribute type 4 has an invalid length.
[   98.783595][ T7247] loop1: detected capacity change from 0 to 64
[   98.812963][ T7247] syz.1.536: attempt to access beyond end of device
[   98.812963][ T7247] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64
[   98.822752][ T7247] Buffer I/O error on dev loop1, logical block 134217734, async page read
[   99.033065][ T7254] loop1: detected capacity change from 0 to 32768
[   99.035957][ T7254] xfs: Unknown parameter 'noikeep'
[   99.064177][ T7262] netlink: 'syz.1.542': attribute type 1 has an invalid length.
[   99.066805][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.542'.
[   99.533885][ T7285] loop1: detected capacity change from 0 to 64
[   99.556053][ T7285] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[   99.560242][ T7285] BFS-fs: bfs_fill_super(): Last block not available on loop1: 4139327
[   99.852934][ T7297] binder: 7284:7297 ioctl c0306201 0 returned -14
[  100.165206][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.563'.
[  100.339161][ T7326] syz_tun: entered allmulticast mode
[  100.396102][ T7326] mroute: pending queue full, dropping entries
[  100.400027][ T7326] mroute: pending queue full, dropping entries
[  100.405808][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.571'.
[  100.411658][ T7325] syz_tun: left allmulticast mode
[  100.542012][ T7339] netlink: 'syz.0.577': attribute type 23 has an invalid length.
[  100.549589][ T7341] netlink: 'syz.1.578': attribute type 10 has an invalid length.
[  100.555314][ T7341] macvlan0: entered promiscuous mode
[  100.557555][ T7341] macvlan0: entered allmulticast mode
[  100.565570][ T7341] veth1_vlan: entered allmulticast mode
[  100.570856][ T7341] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  100.844155][ T7353] overlayfs: failed to clone upperpath
[  100.862497][  T794] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  100.937857][ T7363] fuse: Bad value for 'fd'
[  100.966651][   T33] audit: type=1326 audit(1758862496.443:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7366 comm="syz.2.591" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7798ec29 code=0x7ffc0000
[  100.976981][   T33] audit: type=1326 audit(1758862496.443:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7366 comm="syz.2.591" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7798ec29 code=0x7ffc0000
[  100.986638][   T33] audit: type=1326 audit(1758862496.453:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7366 comm="syz.2.591" exe="/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fac7798ec29 code=0x7ffc0000
[  100.994090][   T33] audit: type=1326 audit(1758862496.453:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7366 comm="syz.2.591" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7798ec29 code=0x7ffc0000
[  101.001230][   T33] audit: type=1326 audit(1758862496.453:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7366 comm="syz.2.591" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7798ec29 code=0x7ffc0000
[  101.012402][   T33] audit: type=1326 audit(1758862496.463:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7366 comm="syz.2.591" exe="/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fac7798ec29 code=0x7ffc0000
[  101.013854][  T794] usb 2-1: Using ep0 maxpacket: 32
[  101.024520][   T33] audit: type=1326 audit(1758862496.463:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7366 comm="syz.2.591" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7798ec29 code=0x7ffc0000
[  101.030180][  T794] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  101.037000][  T794] usb 2-1: config 0 has no interface number 0
[  101.039478][   T33] audit: type=1326 audit(1758862496.463:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7366 comm="syz.2.591" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7798ec29 code=0x7ffc0000
[  101.050213][   T33] audit: type=1326 audit(1758862496.463:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7366 comm="syz.2.591" exe="/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7fac7798ec29 code=0x7ffc0000
[  101.061596][  T794] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  101.065026][  T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.067845][  T794] usb 2-1: Product: syz
[  101.069435][  T794] usb 2-1: Manufacturer: syz
[  101.071602][  T794] usb 2-1: SerialNumber: syz
[  101.075618][  T794] usb 2-1: config 0 descriptor??
[  101.079621][  T794] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  101.082964][  T794] usb 2-1: selecting invalid altsetting 1
[  101.085131][  T794] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  101.090689][  T794] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  101.095761][  T794] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  101.100601][  T794] usb 2-1: media controller created
[  101.118595][  T794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  101.282049][  T794] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32
[  101.285358][  T794] zl10353_read_register: readreg error (reg=127, ret==-32)
[  101.290548][  T794] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  101.311438][  T794] usb 2-1: USB disconnect, device number 6
[  102.530446][ T7405] sch_fq: defrate 0 ignored.
[  102.575630][ T7407] wg1 speed is unknown, defaulting to 1000
[  102.579021][ T7407] wg1 speed is unknown, defaulting to 1000
[  102.586152][ T7407] wg1 speed is unknown, defaulting to 1000
[  102.598312][ T7407] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  102.606330][   T33] kauditd_printk_skb: 2 callbacks suppressed
[  102.606339][   T33] audit: type=1326 audit(1758862498.083:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.2.609" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac7798ec29 code=0x0
[  102.610965][ T7407] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  102.657823][ T7407] wg1 speed is unknown, defaulting to 1000
[  102.665687][ T7407] wg1 speed is unknown, defaulting to 1000
[  102.668539][ T7407] wg1 speed is unknown, defaulting to 1000
[  102.713001][ T7417] Unknown options in mask b7f2
[  102.794228][ T7422] netlink: 28 bytes leftover after parsing attributes in process `syz.0.614'.
[  102.923601][ T7428] loop1: detected capacity change from 0 to 4096
[  102.979544][ T7428] ntfs3(loop1): ino=0, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  103.379177][ T7440] netlink: 'syz.0.622': attribute type 64 has an invalid length.
[  103.385374][ T7440] netlink: 16 bytes leftover after parsing attributes in process `syz.0.622'.
[  103.400810][ T7440] netlink: 'syz.0.622': attribute type 64 has an invalid length.
[  103.406084][ T7440] netlink: 16 bytes leftover after parsing attributes in process `syz.0.622'.
[  103.577082][ T7444] loop1: detected capacity change from 0 to 32768
[  103.591621][ T7444] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  103.597094][ T7444] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  103.614813][ T7444] XFS (loop1): Ending clean mount
[  103.622126][ T7444] XFS (loop1): Quotacheck needed: Please wait.
[  103.648133][ T7444] XFS (loop1): Quotacheck: Done.
[  103.677626][ T5849] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  103.801217][ T7459] loop1: detected capacity change from 0 to 2048
[  103.814712][ T7459] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  103.843576][ T7460] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  103.847339][ T7459] syz.1.627: attempt to access beyond end of device
[  103.847339][ T7459] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  103.861346][ T7459] syz.1.627: attempt to access beyond end of device
[  103.861346][ T7459] loop1: rw=0, sector=9437254, nr_sectors = 2 limit=2048
[  103.867078][ T7459] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=0)
[  104.322434][   T47] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  104.474638][   T47] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  104.478127][   T47] usb 2-1: config 0 has no interfaces?
[  104.480141][   T47] usb 2-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.d2
[  104.484185][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.488832][   T47] usb 2-1: config 0 descriptor??
[  104.700826][   T47] usb 2-1: USB disconnect, device number 7
[  104.706456][ T7493] netlink: 'syz.0.643': attribute type 1 has an invalid length.
[  105.583116][ T7505] loop1: detected capacity change from 0 to 32768
[  105.586529][ T7505] btrfs: Unknown parameter 'ref_verify'
[  105.798394][ T7514] loop1: detected capacity change from 0 to 32768
[  105.813054][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.653'.
[  105.816687][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.653'.
[  105.840534][ T7514] (syz.1.652,7514,0):ocfs2_get_truncate_log_info:6193 ERROR: status = -117
[  105.850575][ T7514] (syz.1.652,7514,0):ocfs2_truncate_log_init:6363 ERROR: status = -117
[  105.854928][ T7514] (syz.1.652,7514,0):ocfs2_mount_volume:1770 ERROR: status = -117
[  105.861597][ T7514] (syz.1.652,7514,0):ocfs2_fill_super:1177 ERROR: status = -117
[  106.033774][ T7526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.657'.
[  106.036763][ T7526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.657'.
[  106.087837][ T7528] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  106.090982][ T7528] IPv6: NLM_F_CREATE should be set when creating new route
[  106.094314][ T7528] IPv6: NLM_F_CREATE should be set when creating new route
[  106.099182][ T7528] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  106.134938][ T7524] loop1: detected capacity change from 0 to 40427
[  106.154142][ T7524] F2FS-fs (loop1): SIT is corrupted node# 0 vs 7
[  106.166958][ T7524] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117)
[  106.202075][ T7535] netlink: 'syz.0.660': attribute type 6 has an invalid length.
[  106.522639][ T7549] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  106.573346][ T7553] netlink: 'syz.1.669': attribute type 83 has an invalid length.
[  107.045511][ T7595] netlink: 16342 bytes leftover after parsing attributes in process `syz.1.688'.
[  107.106082][ T7599] can: request_module (can-proto-5) failed.
[  107.110077][ T5854] Bluetooth: hci1: unexpected cc 0x0809 length: 31 > 4
[  107.497501][ T7624] loop1: detected capacity change from 0 to 512
[  107.518099][ T7624] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.701: casefold flag without casefold feature
[  107.538798][ T7624] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.701: couldn't read orphan inode 15 (err -117)
[  107.550826][ T7624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.615393][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.670429][ T7634] syz.1.704 uses obsolete (PF_INET,SOCK_PACKET)
[  107.674008][ T7634] syzkaller1: entered promiscuous mode
[  107.676393][ T7634] syzkaller1: entered allmulticast mode
[  108.392327][   T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  108.546205][   T24] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  108.549370][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.552126][   T24] usb 2-1: Product: syz
[  108.553989][   T24] usb 2-1: Manufacturer: syz
[  108.556181][   T24] usb 2-1: SerialNumber: syz
[  108.562164][   T24] usb 2-1: config 0 descriptor??
[  108.566776][   T24] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 008
[  108.973556][   T24]  (null): failure reading functionality
[  108.976785][ T7686] RDS: rds_bind could not find a transport for ::ffff:0.0.0.224, load rds_tcp or rds_rdma?
[  108.988292][   T24] i2c i2c-2: connected i2c-tiny-usb device
[  109.425177][ T6220] usb 2-1: USB disconnect, device number 8
[  109.512662][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  110.601227][ T5854] Bluetooth: hci1: hardware error 0xf4
[  111.267286][ T7770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.765'.
[  112.376294][ T7803] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  112.378699][ T7803] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  112.388512][ T7803] vhci_hcd vhci_hcd.0: Device attached
[  112.516454][ T7825] netlink: 'syz.2.790': attribute type 1 has an invalid length.
[  112.562404][   T24] vhci_hcd: vhci_device speed not set
[  112.622803][   T24] usb 35-1: new full-speed USB device number 2 using vhci_hcd
[  112.632809][ T5854] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  112.635831][   T47] usb 2-1: new low-speed USB device number 9 using dummy_hcd
[  112.794534][   T47] usb 2-1: config 0 has no interfaces?
[  112.796828][   T47] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  112.799938][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.805220][   T47] usb 2-1: config 0 descriptor??
[  113.013533][ T7804] vhci_hcd: connection closed
[  113.015163][   T47] usb 2-1: USB disconnect, device number 9
[  113.016437][ T5881] vhci_hcd: stop threads
[  113.021818][ T5881] vhci_hcd: release socket
[  113.024759][ T5881] vhci_hcd: disconnect device
[  113.082360][   T24] vhci_hcd: vhci_device speed not set
[  113.621724][ T7848] netlink: 'syz.0.801': attribute type 13 has an invalid length.
[  113.636763][ T7848] netlink: 'syz.0.801': attribute type 13 has an invalid length.
[  113.637813][ T5881] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  113.644437][ T5881] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  113.648823][ T5881] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  113.653236][ T5881] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  113.852083][ T7852] loop1: detected capacity change from 0 to 32768
[  113.860294][ T7852] bcachefs (/dev/loop1): error validating superblock: Filesystem has incompatible version 1.519: (unknown version), current version 1.28: inode_has_case_insensitive
[  113.867883][ T7852] bcachefs: bch2_fs_get_tree() error: invalid_sb_features
[  113.910926][   T33] audit: type=1326 audit(1758862509.383:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.1.806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddfd8ec29 code=0x7ffc0000
[  113.921793][   T33] audit: type=1326 audit(1758862509.403:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.1.806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddfd8ec29 code=0x7ffc0000
[  113.933852][   T33] audit: type=1326 audit(1758862509.413:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.1.806" exe="/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7feddfd8ec29 code=0x7ffc0000
[  113.957506][   T33] audit: type=1326 audit(1758862509.423:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.1.806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddfd8ec29 code=0x7ffc0000
[  113.976967][   T33] audit: type=1326 audit(1758862509.423:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.1.806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddfd8ec29 code=0x7ffc0000
[  114.311237][   T33] audit: type=1326 audit(1758862509.783:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7883 comm="syz.1.818" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feddfd8ec29 code=0x0
[  114.340903][ T7886] netlink: 224 bytes leftover after parsing attributes in process `syz.1.819'.
[  114.420696][ T7890] loop1: detected capacity change from 0 to 2048
[  114.456717][ T7890] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.481494][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.916812][ T7920] loop1: detected capacity change from 0 to 8
[  115.351205][ T7921] could not allocate digest TFM handle md5-generic
[  116.766519][ T7957] netlink: 104 bytes leftover after parsing attributes in process `syz.0.849'.
[  117.684678][ T7979] loop1: detected capacity change from 0 to 16
[  117.692522][ T7979] erofs (device loop1): mounted with root inode @ nid 36.
[  119.442383][   T24] Process accounting resumed
[  119.449233][ T8009] Process accounting resumed
[  119.968232][ T8030] netlink: 'syz.1.881': attribute type 4 has an invalid length.
[  120.185476][ T8040] netlink: 'syz.0.886': attribute type 2 has an invalid length.
[  120.274265][ T8043] netlink: 44 bytes leftover after parsing attributes in process `syz.0.887'.
[  120.277996][ T8042] netlink: 44 bytes leftover after parsing attributes in process `syz.0.887'.
[  120.342377][ T5314] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  120.502364][ T5314] usb 2-1: Using ep0 maxpacket: 16
[  120.505710][ T5314] usb 2-1: too many configurations: 112, using maximum allowed: 8
[  120.517746][ T5314] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  120.520924][ T5314] usb 2-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0
[  120.524175][ T5314] usb 2-1: Product: syz
[  120.525916][ T5314] usb 2-1: Manufacturer: syz
[  120.531914][ T5314] r8152-cfgselector 2-1: Unknown version 0x0000
[  120.535101][ T5314] r8152-cfgselector 2-1: config 0 descriptor??
[  120.748866][ T5314] r8152-cfgselector 2-1: bad CDC descriptors
[  120.754998][ T5314] r8152-cfgselector 2-1: USB disconnect, device number 10
[  121.386753][ T8057] netlink: 'syz.2.893': attribute type 21 has an invalid length.
[  121.390746][ T8057] netlink: 132 bytes leftover after parsing attributes in process `syz.2.893'.
[  121.409504][ T8059] loop1: detected capacity change from 0 to 2048
[  121.415733][ T8059] udf: Bad value for 'rootdir'
[  121.735774][ T5314] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  121.892460][ T5314] usb 2-1: Using ep0 maxpacket: 16
[  121.897388][ T5314] usb 2-1: config 0 has an invalid interface number: 79 but max is 0
[  121.900980][ T5314] usb 2-1: config 0 has no interface number 0
[  121.906346][ T5314] usb 2-1: New USB device found, idVendor=0402, idProduct=5632, bcdDevice=c3.6f
[  121.910212][ T5314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.915780][ T5314] usb 2-1: Product: syz
[  121.917587][ T5314] usb 2-1: Manufacturer: syz
[  121.919589][ T5314] usb 2-1: SerialNumber: syz
[  121.933613][ T5314] usb 2-1: config 0 descriptor??
[  122.984699][ T5314] cdc_subset 2-1:0.79: probe with driver cdc_subset failed with error -71
[  123.148771][ T5314] usb 2-1: USB disconnect, device number 11
[  123.309168][ T8102] ip6erspan0: entered promiscuous mode
[  123.970198][ T8120] netlink: 24 bytes leftover after parsing attributes in process `syz.1.921'.
[  124.131057][ T8131] gtp0: entered promiscuous mode
[  124.181317][ T8136] netlink: 'syz.1.929': attribute type 21 has an invalid length.
[  124.185117][ T8136] netlink: 'syz.1.929': attribute type 6 has an invalid length.
[  124.194684][ T8136] netlink: 132 bytes leftover after parsing attributes in process `syz.1.929'.
[  124.298215][ T8144] loop1: detected capacity change from 0 to 128
[  124.310775][ T8144] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  124.322881][ T8144] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  124.366108][   T33] audit: type=1800 audit(1758862519.843:101): pid=8144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.933" name="file2" dev="loop1" ino=105 res=0 errno=0
[  125.210912][   T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  125.362640][   T24] usb 2-1: Using ep0 maxpacket: 16
[  125.368167][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.373433][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.377548][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  125.383261][   T24] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  125.388664][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.395666][   T24] usb 2-1: config 0 descriptor??
[  125.814218][   T24] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max
[  125.818720][   T24] microsoft 0003:045E:07DA.0001: unsupported Resolution Multiplier 0
[  125.824823][   T24] microsoft 0003:045E:07DA.0001: implement() called with n (152) > 32! (kworker/1:0)
[  126.025379][   T24] microsoft 0003:045E:07DA.0001: unsupported Resolution Multiplier 0
[  126.038123][   T24] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  126.043728][   T24] microsoft 0003:045E:07DA.0001: no inputs found
[  126.046380][   T24] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway
[  126.242005][   T47] usb 2-1: USB disconnect, device number 12
[  126.309120][ T8204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.962'.
[  126.498976][ T8222] netlink: 'syz.0.971': attribute type 4 has an invalid length.
[  126.917598][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.980'.
[  127.021282][ T8236] overlayfs: failed to clone upperpath
[  127.061077][ T8250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.985'.
[  127.066193][ T8250] tipc: Started in network mode
[  127.068314][ T8250] tipc: Node identity 7, cluster identity 4711
[  127.071067][ T8250] tipc: Node number set to 7
[  127.129402][   T33] audit: type=1326 audit(1758862522.603:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.0.989" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3f38ec29 code=0x7ffc0000
[  127.139118][   T33] audit: type=1326 audit(1758862522.613:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.0.989" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3f38ec29 code=0x7ffc0000
[  127.149780][   T33] audit: type=1326 audit(1758862522.613:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.0.989" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae3f38ec29 code=0x7ffc0000
[  127.160273][   T33] audit: type=1326 audit(1758862522.613:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.0.989" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3f38ec29 code=0x7ffc0000
[  127.169707][   T33] audit: type=1326 audit(1758862522.613:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.0.989" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3f38ec29 code=0x7ffc0000
[  127.179031][   T33] audit: type=1326 audit(1758862522.613:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.0.989" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fae3f38ec29 code=0x7ffc0000
[  127.187998][   T33] audit: type=1326 audit(1758862522.613:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.0.989" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3f38ec29 code=0x7ffc0000
[  128.587499][ T8296] netlink: 'syz.1.1006': attribute type 3 has an invalid length.
[  128.640044][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1007'.
[  128.982975][ T5314] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  129.144058][ T5314] usb 2-1: config 16 has an invalid interface number: 19 but max is 0
[  129.146800][ T5314] usb 2-1: config 16 has no interface number 0
[  129.152499][ T5314] usb 2-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee
[  129.157683][ T5314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.161315][ T5314] usb 2-1: Product: syz
[  129.163914][ T5314] usb 2-1: Manufacturer: syz
[  129.165768][ T5314] usb 2-1: SerialNumber: syz
[  129.542671][ T5314] usb 2-1: USB disconnect, device number 13
[  129.565403][ T6222] udevd[6222]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:16.19/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  130.328720][ T8357] loop1: detected capacity change from 0 to 8192
[  130.340131][ T8357] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  130.442142][ T8361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1035'.
[  131.120914][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'.
[  131.143124][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'.
[  131.164094][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'.
[  131.171946][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'.
[  131.188137][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'.
[  131.880883][ T8396] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[  131.884300][ T8396] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  131.896055][ T8396] netlink: 'syz.2.1050': attribute type 10 has an invalid length.
[  131.930655][ T8396] mac80211_hwsim hwsim6 wlan1: left promiscuous mode
[  131.933951][ T8396] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  131.961033][ T8396] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  132.563999][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.568223][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  135.728050][ T8527] CIFS mount error: No usable UNC path provided in device string!
[  135.728050][ T8527] 
[  135.731495][ T8527] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  137.006230][ T8570] 9pnet_fd: p9_fd_create_tcp (8570): problem connecting socket to 127.0.0.1
[  138.117458][ T8579] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1131'.
[  138.126063][ T8579] netem: unknown loss type 0
[  139.591843][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  140.203551][ T8641] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1155'.
[  140.207883][ T8641] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1155'.
[  140.346451][    T9] Process accounting resumed
[  141.088406][ T8671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1169'.
[  141.812574][ T8694] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  141.815127][ T8694] IPv6: NLM_F_CREATE should be set when creating new route
[  143.513865][ T8749] fuse: Bad value for 'fd'
[  143.601610][ T8753] fuse: Bad value for 'fd'
[  144.337187][ T8798] IPv6: sit1: Disabled Multicast RS
[  144.343515][ T8798] sit1: entered allmulticast mode
[  144.394395][ T8802] netlink: 'syz.1.1230': attribute type 10 has an invalid length.
[  144.414138][ T8802] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  144.451733][ T8802] 8021q: adding VLAN 0 to HW filter on device bond1
[  144.466284][ T8802] bond_slave_0: entered promiscuous mode
[  144.468701][ T8802] bond_slave_1: entered promiscuous mode
[  144.471431][ T8802] syz_tun: entered promiscuous mode
[  144.475459][ T8802] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  144.483116][ T8802] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[  145.444080][ T8840] sctp: [Deprecated]: syz.1.1248 (pid 8840) Use of int in max_burst socket option.
[  145.444080][ T8840] Use struct sctp_assoc_value instead
[  147.751391][ T8924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1287'.
[  147.756036][ T8924] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1287'.
[  148.197903][ T8930] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1290'.
[  148.241661][ T8932] sctp: [Deprecated]: syz.2.1291 (pid 8932) Use of int in max_burst socket option.
[  148.241661][ T8932] Use struct sctp_assoc_value instead
[  148.641999][ T8955] netlink: 'syz.0.1302': attribute type 15 has an invalid length.
[  149.136235][ T8977] bond1: entered allmulticast mode
[  149.949273][ T9008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1325'.
[  150.273269][ T9022] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1332'.
[  151.601220][ T9086] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1361'.
[  151.605009][ T9086] netlink: 'syz.2.1361': attribute type 1 has an invalid length.
[  151.611748][ T9086] netlink: 'syz.2.1361': attribute type 2 has an invalid length.
[  151.615106][ T9086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1361'.
[  154.985551][ T9221] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1418'.
[  155.702696][ T9251] overlayfs: failed to clone upperpath
[  155.747402][   T33] audit: type=1326 audit(1758862807.227:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9252 comm="syz.1.1432" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddfd8ec29 code=0x7ffc0000
[  155.758504][   T33] audit: type=1326 audit(1758862807.227:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9252 comm="syz.1.1432" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddfd8ec29 code=0x7ffc0000
[  155.773029][   T33] audit: type=1326 audit(1758862807.227:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9252 comm="syz.1.1432" exe="/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7feddfd8ec29 code=0x7ffc0000
[  155.787579][   T33] audit: type=1326 audit(1758862807.227:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9252 comm="syz.1.1432" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddfd8ec29 code=0x7ffc0000
[  155.797540][   T33] audit: type=1326 audit(1758862807.227:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9252 comm="syz.1.1432" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddfd8ec29 code=0x7ffc0000
[  155.848491][ T9257] veth1_vlan: left allmulticast mode
[  155.851437][ T9257] macvlan0: left allmulticast mode
[  155.857462][ T9257] netlink: 'syz.1.1434': attribute type 1 has an invalid length.
[  155.860967][ T9257] netlink: 'syz.1.1434': attribute type 2 has an invalid length.
[  156.075175][ T9267] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.094677][ T9267] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.098455][ T9267] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.556139][ T9310] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  157.563742][ T9310] overlayfs: failed to set xattr on upper
[  157.566115][ T9310] overlayfs: ...falling back to redirect_dir=nofollow.
[  157.568795][ T9310] overlayfs: ...falling back to metacopy=off.
[  157.571164][ T9310] overlayfs: ...falling back to uuid=null.
[  158.268287][ T9333] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  158.372915][ T9341] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1471'.
[  158.635125][ T9359] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1480'.
[  158.746403][ T9363] 9pnet_fd: Insufficient options for proto=fd
[  159.636689][ T9418] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1508'.
[  159.784102][ T9426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1512'.
[  159.788154][ T9426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1512'.
[  159.792285][ T9426] netlink: 'syz.0.1512': attribute type 20 has an invalid length.
[  159.833402][ T9426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1512'.
[  159.837473][ T9426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1512'.
[  159.841903][ T9426] netlink: 'syz.0.1512': attribute type 20 has an invalid length.
[  159.937718][ T9428] trusted_key: syz.0.1513 sent an empty control message without MSG_MORE.
[  160.032990][ T9431] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1514'.
[  160.309208][ T9443] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  160.322671][ T9443] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.327935][ T9443] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.474261][ T9453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1525'.
[  160.493842][ T9455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1526'.
[  162.428350][ T9528] bond0: (slave macvlan3): Error -98 calling set_mac_address
[  163.073804][   T33] audit: type=1326 audit(1758862814.561:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.2.1579" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac7798ec29 code=0x0
[  163.739697][ T9611] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1594'.
[  163.746281][ T9611] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1594'.
[  163.754114][ T9611] netlink: 34 bytes leftover after parsing attributes in process `syz.1.1594'.
[  163.992182][ T9619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1596'.
[  163.995242][ T9619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1596'.
[  164.110935][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1603'.
[  165.995389][ T9698] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1631'.
[  166.317330][ T9706] netlink: 'syz.2.1635': attribute type 1 has an invalid length.
[  166.349612][ T9708] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  166.529316][ T9718] netlink: 'syz.1.1640': attribute type 46 has an invalid length.
[  166.533712][ T9718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1640'.
[  166.603633][ T9724] overlayfs: failed to clone upperpath
[  168.532432][ T9781] netlink: 'syz.0.1670': attribute type 1 has an invalid length.
[  168.753759][ T9789] mmap: syz.2.1673 (9789) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  169.224437][ T9801] netlink: 'syz.2.1680': attribute type 4 has an invalid length.
[  169.254566][ T9801] netlink: 'syz.2.1680': attribute type 4 has an invalid length.
[  169.367883][ T9811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1685'.
[  169.371616][ T9811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1685'.
[  169.375705][ T9811] netlink: 'syz.2.1685': attribute type 11 has an invalid length.
[  169.574488][ T9819] netlink: 'syz.2.1689': attribute type 5 has an invalid length.
[  169.589131][ T9819] netlink: 'syz.2.1689': attribute type 9 has an invalid length.
[  169.602796][ T9819] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1689'.
[  170.454103][ T9860] netlink: 'syz.2.1708': attribute type 27 has an invalid length.
[  170.466280][ T9860] netlink: 'syz.2.1708': attribute type 3 has an invalid length.
[  170.469776][ T9860] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1708'.
[  170.560267][ T9865] wg1 speed is unknown, defaulting to 1000
[  174.202345][ T9977] ip6tnl1: entered promiscuous mode
[  174.206556][ T9977] ip6tnl1: entered allmulticast mode
[  175.777949][T10028] overlayfs: failed to clone upperpath
[  176.857315][T10050] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1788'.
[  176.863098][T10050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1788'.
[  176.866266][T10050] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1788'.
[  176.872739][T10052] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1789'.
[  180.430705][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1847'.
[  180.713670][ T5859] Bluetooth: hci0: command 0x0406 tx timeout
[  180.716187][ T5859] Bluetooth: hci2: command 0x0406 tx timeout
[  181.819253][T10225] netlink: 'syz.2.1867': attribute type 10 has an invalid length.
[  181.829347][T10225] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1867'.
[  182.166074][T10235] netlink: 'syz.0.1873': attribute type 1 has an invalid length.
[  182.206192][T10235] bond1: entered promiscuous mode
[  182.208952][T10235] 8021q: adding VLAN 0 to HW filter on device bond1
[  182.234702][T10235] bond1: (slave bridge1): making interface the new active one
[  182.238300][T10235] bridge1: entered promiscuous mode
[  182.245107][T10235] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  183.208907][T10312] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.1907'.
[  183.214348][T10312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1907'.
[  183.647575][T10328] netlink: 'syz.0.1916': attribute type 1 has an invalid length.
[  183.894883][T10342] netlink: 'syz.0.1923': attribute type 21 has an invalid length.
[  183.898801][T10342] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1923'.
[  183.907366][T10342] netlink: 'syz.0.1923': attribute type 1 has an invalid length.
[  185.956014][T10424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1958'.
[  186.665958][T10447] netlink: 'syz.0.1968': attribute type 15 has an invalid length.
[  186.700831][T10454] netlink: 'syz.2.1973': attribute type 32 has an invalid length.
[  186.704161][T10454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1973'.
[  186.716292][T10454] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  186.826786][T10467] IPv6: sit1: Disabled Multicast RS
[  186.838988][T10467] sit1: entered allmulticast mode
[  187.044463][T10483] ip6tnl0: entered promiscuous mode
[  187.050195][T10483] ip6tnl0: entered allmulticast mode
[  188.767453][T10537] futex_wake_op: syz.1.2011 tries to shift op by 36; fix this program
[  188.901465][T10544] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  188.904031][T10544] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  188.940744][T10544] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  189.448214][T10563] netlink: 'syz.2.2022': attribute type 2 has an invalid length.
[  189.457415][T10563] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2022'.
[  189.471689][T10563] nbd: must specify at least one socket
[  189.894961][T10573] netlink: 'syz.2.2027': attribute type 11 has an invalid length.
[  190.840744][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2050'.
[  191.583783][T10654] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1
[  192.752710][T10702] tmpfs: Group quota inode hardlimit too large.
[  192.857940][T10706] ip6gre1: entered allmulticast mode
[  193.038590][T10730] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  193.162232][T10740] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2105'.
[  193.791387][T10760] bridge0: entered allmulticast mode
[  193.969638][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  193.972190][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  194.150781][T10781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2124'.
[  194.480730][T10818] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2141'.
[  194.485502][T10818] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511)
[  194.489839][T10818] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  195.688582][ T5854] Bluetooth: hci2: unexpected event for opcode 0x200f
[  195.862595][T10874] netlink: 'syz.1.2168': attribute type 1 has an invalid length.
[  195.981043][T10884] overlayfs: failed to clone upperpath
[  195.985599][T10884] overlayfs: failed to resolve './cgroup': -2
[  196.032631][T10891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2177'.
[  196.152775][T10902] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2182'.
[  196.157343][T10902] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  196.209717][    T9] IPVS: starting estimator thread 0...
[  196.294630][T10907] IPVS: using max 53 ests per chain, 127200 per kthread
[  197.915144][T10973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2212'.
[  199.736694][T11051] overlayfs: failed to resolve './cgroup': -2
[  200.091075][T11062] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2231'.
[  202.548902][T11137] delete_channel: no stack
[  202.793683][T11152] netlink: 'syz.2.2269': attribute type 41 has an invalid length.
[  203.681401][T11172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2277'.
[  204.199666][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  204.737850][T11207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2293'.
[  204.742069][T11207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2293'.
[  204.745931][T11207] netlink: 'syz.1.2293': attribute type 6 has an invalid length.
[  204.825614][T11211] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2295'.
[  204.833651][T11211] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2295'.
[  205.177360][T11227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2303'.
[  205.218725][T11231] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2305'.
[  205.271920][T11235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2306'.
[  205.275564][T11235] tc_dump_action: action bad kind
[  205.958901][T11286] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2331'.
[  205.963517][T11283] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2331'.
[  207.336603][T11352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2364'.
[  207.343720][T11352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2364'.
[  207.536920][T11368] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  208.522487][T11393] overlayfs: failed to clone lowerpath
[  210.472704][T11434] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2400'.
[  210.759854][T11454] netlink: 'syz.1.2410': attribute type 1 has an invalid length.
[  210.780183][T11454] bond2: (slave vti0): The slave device specified does not support setting the MAC address
[  210.783855][T11454] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  210.789025][T11454] bond2: (slave vti0): making interface the new active one
[  210.792176][T11454] bond2: (slave vti0): Enslaving as an active interface with an up link
[  214.330465][T11555] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2455'.
[  216.300223][T11618] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2482'.
[  216.434541][T11626] overlayfs: failed to clone upperpath
[  216.810082][T11641] sctp: [Deprecated]: syz.2.2493 (pid 11641) Use of int in maxseg socket option.
[  216.810082][T11641] Use struct sctp_assoc_value instead
[  217.246981][T11670] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2507'.
[  217.364288][T11677] netlink: 'syz.0.2510': attribute type 13 has an invalid length.
[  217.489227][T11685] overlayfs: failed to clone lowerpath
[  217.538736][T11689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2516'.
[  217.550809][T11689] bond_slave_0: entered promiscuous mode
[  217.552976][T11689] bond_slave_1: entered promiscuous mode
[  217.557149][T11689] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  217.562287][T11689] bond_slave_0: left promiscuous mode
[  217.564589][T11689] bond_slave_1: left promiscuous mode
[  218.636380][  T794] Process accounting resumed
[  218.650837][T11733] Process accounting resumed
[  219.182027][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2548'.
[  219.484164][T11787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2556'.
[  219.825463][T11800] netlink: 'syz.1.2562': attribute type 2 has an invalid length.
[  220.064359][T11828] trusted_key: encrypted_key: insufficient parameters specified
[  220.636344][T11843] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2582'.
[  220.640794][T11843] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2582'.
[  220.651687][T11843] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  221.219751][T11882] netlink: 'syz.2.2599': attribute type 4 has an invalid length.
[  221.237842][T11882] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2599'.
[  221.250669][   T33] audit: type=1326 audit(1758862872.760:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11883 comm="syz.0.2601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3f38ec29 code=0x7ffc0000
[  221.251530][T11882] wlan1: mtu less than device minimum
[  221.272310][   T33] audit: type=1326 audit(1758862872.760:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11883 comm="syz.0.2601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3f38ec29 code=0x7ffc0000
[  221.282157][   T33] audit: type=1326 audit(1758862872.790:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11883 comm="syz.0.2601" exe="/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fae3f38ec29 code=0x7ffc0000
[  221.293116][   T33] audit: type=1326 audit(1758862872.790:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11883 comm="syz.0.2601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3f38ec29 code=0x7ffc0000
[  221.301638][   T33] audit: type=1326 audit(1758862872.790:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11883 comm="syz.0.2601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3f38ec29 code=0x7ffc0000
[  221.301759][T11886] tmpfs: Bad value for 'size'
[  221.447285][   T33] audit: type=1326 audit(1758862872.960:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11902 comm="syz.0.2611" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fae3f38ec29 code=0x0
[  223.091271][T11955] syz_tun: entered allmulticast mode
[  223.094550][T11955] dvmrp1: left allmulticast mode
[  223.176409][T11954] syz_tun: left allmulticast mode
[  224.763794][ T6191] bond0: (slave syz_tun): Releasing backup interface
[  224.882036][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.963499][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.076357][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.146904][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.220591][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  225.227024][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  225.234701][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  225.239059][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  225.242973][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  225.373748][T12041] wg1 speed is unknown, defaulting to 1000
[  225.374865][   T12] bridge_slave_1: left allmulticast mode
[  225.384975][   T12] bridge_slave_1: left promiscuous mode
[  225.395499][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.421855][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.492047][T12050] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2677'.
[  225.503871][   T12] bond_slave_0: left promiscuous mode
[  225.506423][   T12] bond_slave_1: left promiscuous mode
[  225.706740][   T12] bond2 (unregistering): (slave vti0): Releasing backup interface
[  226.061213][   T33] audit: type=1326 audit(1758862877.582:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12057 comm="syz.2.2679" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac7798ec29 code=0x0
[  226.148650][   T12] bond1 (unregistering): (slave macvlan2): Removing an active aggregator
[  226.155690][   T12] bond1 (unregistering): (slave macvlan2): Releasing backup interface
[  226.166215][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  226.175751][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  226.182558][   T12] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  226.186912][   T12] bond0 (unregistering): Released all slaves
[  226.343101][   T12] bond1 (unregistering): Released all slaves
[  226.363051][   T12] bond2 (unregistering): Released all slaves
[  226.430685][   T12] tipc: Left network mode
[  226.641991][T12041] chnl_net:caif_netlink_parms(): no params data found
[  226.880635][T12075] overlayfs: failed to clone upperpath
[  227.190509][T12041] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.196972][T12041] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.203422][T12041] bridge_slave_0: entered allmulticast mode
[  227.207426][T12041] bridge_slave_0: entered promiscuous mode
[  227.218494][T12041] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.244310][T12041] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.250223][T12041] bridge_slave_1: entered allmulticast mode
[  227.254708][T12041] bridge_slave_1: entered promiscuous mode
[  227.292402][   T12] hsr_slave_0: left promiscuous mode
[  227.295151][   T12] hsr_slave_1: left promiscuous mode
[  227.298703][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  227.301447][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  227.305230][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  227.308564][ T5854] Bluetooth: hci0: command tx timeout
[  227.317775][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  227.325696][   T12] veth1_macvtap: left promiscuous mode
[  227.333129][   T12] veth0_macvtap: left promiscuous mode
[  227.335683][   T12] veth1_vlan: left promiscuous mode
[  227.338954][   T12] veth0_vlan: left promiscuous mode
[  228.953541][   T12] team0 (unregistering): Port device team_slave_1 removed
[  229.018713][   T12] team0 (unregistering): Port device team_slave_0 removed
[  229.396904][ T5854] Bluetooth: hci0: command tx timeout
[  229.672843][T12115] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2696'.
[  229.700849][T12041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  229.725473][T12041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  229.792065][T12041] team0: Port device team_slave_0 added
[  229.795686][T12041] team0: Port device team_slave_1 added
[  229.863039][T12041] batman_adv: batadv0: Adding interface: batadv_slave_0
[  229.866158][T12041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  229.889362][T12041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  229.909416][T12041] batman_adv: batadv0: Adding interface: batadv_slave_1
[  229.916892][T12041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  229.931122][T12041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  230.394519][T12041] hsr_slave_0: entered promiscuous mode
[  230.411055][T12041] hsr_slave_1: entered promiscuous mode
[  230.539138][   T12] ------------[ cut here ]------------
[  230.541326][   T12] WARNING: net/xfrm/xfrm_state.c:3306 at xfrm_state_fini+0x26d/0x2f0, CPU#1: kworker/u8:0/12
[  230.545327][   T12] Modules linked in:
[  230.547478][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  230.552935][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  230.557163][   T12] Workqueue: netns cleanup_net
[  230.559098][   T12] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  230.561242][   T12] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 5b 0e f8 f7 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 89 e4 d7 f7 e8 34 dc 92 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 26 dc 92 f7 90 0f 0b 90 e9 60 fe ff ff
[  230.569332][   T12] RSP: 0018:ffffc900000f7878 EFLAGS: 00010293
[  230.572149][   T12] RAX: ffffffff8a2d757c RBX: ffff888029e08000 RCX: ffff88801caf5700
[  230.575577][   T12] RDX: 0000000000000000 RSI: ffffffff8dd89182 RDI: ffff88801caf5700
[  230.579119][   T12] RBP: ffffc900000f7990 R08: ffffffff8fc30877 R09: 1ffffffff1f8610e
[  230.582365][   T12] R10: dffffc0000000000 R11: fffffbfff1f8610f R12: ffffffff8f834000
[  230.585701][   T12] R13: 1ffff9200001ef3c R14: ffff888029e094c0 R15: dffffc0000000000
[  230.589204][   T12] FS:  0000000000000000(0000) GS:ffff8881a3a0a000(0000) knlGS:0000000000000000
[  230.592757][   T12] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  230.595747][   T12] CR2: 0000001b32a22ff8 CR3: 0000000030e76000 CR4: 00000000000006f0
[  230.599158][   T12] Call Trace:
[  230.600534][   T12]  <TASK>
[  230.601750][   T12]  xfrm_net_exit+0x2d/0x70
[  230.603580][   T12]  ops_undo_list+0x49a/0x990
[  230.605520][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  230.607709][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  230.609914][   T12]  cleanup_net+0x4d8/0x820
[  230.611716][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  230.613778][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  230.615776][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  230.618218][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  230.621027][   T12]  process_scheduled_works+0xae1/0x17b0
[  230.623494][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  230.625923][   T12]  worker_thread+0x8a0/0xda0
[  230.628001][   T12]  kthread+0x711/0x8a0
[  230.629657][   T12]  ? __pfx_worker_thread+0x10/0x10
[  230.631761][   T12]  ? __pfx_kthread+0x10/0x10
[  230.633678][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  230.635718][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  230.638228][   T12]  ? __pfx_kthread+0x10/0x10
[  230.640165][   T12]  ret_from_fork+0x4bc/0x870
[  230.642129][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  230.644249][   T12]  ? __switch_to_asm+0x39/0x70
[  230.646247][   T12]  ? __switch_to_asm+0x33/0x70
[  230.648276][   T12]  ? __pfx_kthread+0x10/0x10
[  230.650281][   T12]  ret_from_fork_asm+0x1a/0x30
[  230.652364][   T12]  </TASK>
[  230.653771][   T12] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  230.656980][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  230.660932][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  230.665203][   T12] Workqueue: netns cleanup_net
[  230.667303][   T12] Call Trace:
[  230.668719][   T12]  <TASK>
[  230.669967][   T12]  dump_stack_lvl+0x99/0x250
[  230.671908][   T12]  ? __asan_memcpy+0x40/0x70
[  230.673983][   T12]  ? __pfx_dump_stack_lvl+0x10/0x10
[  230.676214][   T12]  ? __pfx__printk+0x10/0x10
[  230.678102][   T12]  vpanic+0x237/0x6d0
[  230.679790][   T12]  ? __pfx_vpanic+0x10/0x10
[  230.681684][   T12]  ? is_bpf_text_address+0x26/0x2b0
[  230.683786][   T12]  panic+0xb9/0xc0
[  230.685429][   T12]  ? __pfx_panic+0x10/0x10
[  230.687242][   T12]  __warn+0x334/0x4c0
[  230.688904][   T12]  ? xfrm_state_fini+0x26d/0x2f0
[  230.691218][   T12]  ? xfrm_state_fini+0x26d/0x2f0
[  230.693270][   T12]  report_bug+0x2be/0x4f0
[  230.695155][   T12]  ? xfrm_state_fini+0x26d/0x2f0
[  230.697384][   T12]  ? xfrm_state_fini+0x26d/0x2f0
[  230.699484][   T12]  ? xfrm_state_fini+0x26f/0x2f0
[  230.701559][   T12]  handle_bug+0x84/0x160
[  230.703295][   T12]  exc_invalid_op+0x1a/0x50
[  230.705287][   T12]  asm_exc_invalid_op+0x1a/0x20
[  230.707441][   T12] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  230.709875][   T12] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 5b 0e f8 f7 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 89 e4 d7 f7 e8 34 dc 92 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 26 dc 92 f7 90 0f 0b 90 e9 60 fe ff ff
[  230.717926][   T12] RSP: 0018:ffffc900000f7878 EFLAGS: 00010293
[  230.720452][   T12] RAX: ffffffff8a2d757c RBX: ffff888029e08000 RCX: ffff88801caf5700
[  230.723827][   T12] RDX: 0000000000000000 RSI: ffffffff8dd89182 RDI: ffff88801caf5700
[  230.727172][   T12] RBP: ffffc900000f7990 R08: ffffffff8fc30877 R09: 1ffffffff1f8610e
[  230.730790][   T12] R10: dffffc0000000000 R11: fffffbfff1f8610f R12: ffffffff8f834000
[  230.734126][   T12] R13: 1ffff9200001ef3c R14: ffff888029e094c0 R15: dffffc0000000000
[  230.737536][   T12]  ? xfrm_state_fini+0x26c/0x2f0
[  230.739676][   T12]  ? xfrm_state_fini+0x26c/0x2f0
[  230.741758][   T12]  xfrm_net_exit+0x2d/0x70
[  230.743608][   T12]  ops_undo_list+0x49a/0x990
[  230.745623][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  230.747763][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  230.749916][   T12]  cleanup_net+0x4d8/0x820
[  230.751750][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  230.753816][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  230.755926][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  230.758248][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  230.760702][   T12]  process_scheduled_works+0xae1/0x17b0
[  230.763024][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  230.765915][   T12]  worker_thread+0x8a0/0xda0
[  230.767843][   T12]  kthread+0x711/0x8a0
[  230.769507][   T12]  ? __pfx_worker_thread+0x10/0x10
[  230.771652][   T12]  ? __pfx_kthread+0x10/0x10
[  230.773576][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  230.775719][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  230.777812][   T12]  ? __pfx_kthread+0x10/0x10
[  230.779734][   T12]  ret_from_fork+0x4bc/0x870
[  230.781604][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  230.783698][   T12]  ? __switch_to_asm+0x39/0x70
[  230.785676][   T12]  ? __switch_to_asm+0x33/0x70
[  230.787648][   T12]  ? __pfx_kthread+0x10/0x10
[  230.789564][   T12]  ret_from_fork_asm+0x1a/0x30
[  230.791550][   T12]  </TASK>
[  230.793634][   T12] Kernel Offset: disabled
[  230.795409][   T12] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:57:06  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=00000000ffffffff RCX=8dc9c2d3703afe00 RDX=dffffc0000000000
RSI=00000000ffffffff RDI=ffffffff8e33d3a0 RBP=ffffc90006b1e160 RSP=ffffc90006b1e098
R8 =ffff888109b91d00 R9 =1ffff1100640a81e R10=dffffc0000000000 R11=ffffed100640a81f
R12=0000000000000000 R13=ffff888109b91d00 R14=1ffff92000d63c1c R15=dffffc0000000000
RIP=ffffffff8b7dd537 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557267f500 ffffffff 00c00000
GS =0000 ffff8880b840a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32a20ff8 CR3=0000000030e76000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=00000000ffff0000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000049 RBX=0000000000000049 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000f7010
R8 =ffff8881075d0237 R9 =1ffff11020eba046 R10=dffffc0000000000 R11=ffffffff855579a0
R12=dffffc0000000000 R13=ffffffff99d0b907 R14=ffffffff9a001520 R15=0000000000000000
RIP=ffffffff85557a1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3a0a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32a22ff8 CR3=0000000030e76000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=107b92615afe4439 d00e503e8a6e4d33
XMM02=340971b98e93046e 19d32e465340c8e1 XMM03=243f40af5a042739 167e847388a72f3e
XMM04=13eec0e3c090b92a 525da5b013d1dd06 XMM05=4c13eec0e3c090b9 2a525da5b013d1dd
XMM06=06243f40af5a0427 39167e847388a72f XMM07=3e340971b98e9304 6e19d32e465340c8
XMM08=e1107b92615afe44 39d00e503e8a6e4d XMM09=0000000000000000 00007fac77a12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
