last executing test programs:

10m15.232032004s ago: executing program 0 (id=1199):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@can_delroute={0x24, 0x19, 0x1, 0x70bd2a, 0x25dfdbfe, {0x1d, 0x1, 0x1}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8, 0x9, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)

10m15.179225539s ago: executing program 0 (id=1200):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xc80, &(0x7f00000014c0)=ANY=[@ANYBLOB='fmask=00000000000000000000001,umask=00000000000020000000002,utf8,keep_last_dots,allow_utime=00000000000000000004001,errors=continue,discard,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d63703835302c696f636861727365743d69736f383835392d312c006b95def57e2522c1bea829c23d304a63a4dbc03e4e15b41ada21c9a1dd3aad8a353a45e2fb41ed411833b1789f3d88f528c72dcbb5e1aea5dab11e69a77f2b692198fa6cd5c07eae4e91f2350fa2e360df77ba73081b1114f7c77978a4e105bf40f0bfca515e2bbb2552ca497c842e3abb25e85344d0e964a97a3875dd9cc56d8fda567e4c9f0589ef0b"], 0x7, 0x1526, &(0x7f0000001ec0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8)
getdents(r0, &(0x7f0000000080)=""/43, 0x2b)

10m15.082001542s ago: executing program 0 (id=1204):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r1, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14}]}, 0x3c}}, 0x0)

10m15.031421873s ago: executing program 0 (id=1206):
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x3200014, &(0x7f00000006c0)=ANY=[], 0x1, 0x625, &(0x7f0000001540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000280)={[{@block_validity}, {@nogrpid}, {@quota}]}, 0x1, 0x526, &(0x7f00000027c0)="$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")
syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000840), 0x1, 0x782, &(0x7f0000000880)="$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")
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f)
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x1, 0x1, 0x5, 0x7, 0x5, 0xfffffffffffffff8, 0x1, 0x9, 0xf6b})
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1814051, 0x0, 0x41, 0x0, &(0x7f0000000140))
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)
creat(&(0x7f0000000080)='./file1\x00', 0x1)

10m14.672097734s ago: executing program 0 (id=1218):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50)

10m14.216765227s ago: executing program 0 (id=1227):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f0000000300)={0xa, 0x4e24, 0xffffffff, @mcast1, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="14000000000000002900000034"], 0x18}, 0x48814)

10m14.132496509s ago: executing program 32 (id=1227):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f0000000300)={0xa, 0x4e24, 0xffffffff, @mcast1, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="14000000000000002900000034"], 0x18}, 0x48814)

10m1.182018493s ago: executing program 3 (id=1524):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0)

10m1.181688703s ago: executing program 3 (id=1526):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x9}, 0x28)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r3, 0xffffffffffffffff, 0x18, 0x0, @val=@tcx={@void, @value=r2}}, 0x1c)

10m1.082165634s ago: executing program 3 (id=1528):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000908500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x18, 0x80000, 0x1)
socket$key(0xf, 0x3, 0x2)
syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/ipc\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00')
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = epoll_create1(0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20)

10m0.991708076s ago: executing program 3 (id=1529):
syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000300)='./file0\x00', 0x800, &(0x7f0000000400)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@umask={'umask', 0x3d, 0x5}}, {@sys_tz}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@errors_remount}, {@discard}, {@fmask={'fmask', 0x3d, 0x1}}, {}, {}, {@allow_utime={'allow_utime', 0x3d, 0xce2f}}]}, 0x1, 0x1528, &(0x7f00000021c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x1, 0x0)

10m0.940902864s ago: executing program 3 (id=1532):
fstatfs(0xffffffffffffffff, 0x0)

10m0.718515181s ago: executing program 3 (id=1540):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20)

10m0.628558637s ago: executing program 33 (id=1540):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20)

9m35.469198608s ago: executing program 4 (id=2071):
syz_emit_ethernet(0x5a, &(0x7f00000004c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "abb9bfe0c34c72d50c66fa8369f6e787"}, @md5sig={0x13, 0x12, "2a9c444be69caceb3fbd4ef8047b79a3"}]}}}}}}}, 0x0)

9m35.392097546s ago: executing program 4 (id=2074):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x20, r1, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x20}}, 0x20000000)

9m35.339898716s ago: executing program 4 (id=2075):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @rand_addr=0x64010101}, 0x0, 0x0, 0x4, 0x3}}, 0x26)

9m35.339731951s ago: executing program 4 (id=2076):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/393, @ANYRESHEX], 0x0, 0x2c2, &(0x7f00000006c0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0)
mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)

9m35.272370972s ago: executing program 4 (id=2077):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x20, 0x5, 0x0, 0xfffff024}, {0x6, 0x4, 0x0, 0x8}]})
ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180))
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)

9m35.045140377s ago: executing program 4 (id=2082):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x3, 0x0, 0x6, 0x2, 0x1, 0xffffffffffffffad, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)

9m34.870236108s ago: executing program 34 (id=2082):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x3, 0x0, 0x6, 0x2, 0x1, 0xffffffffffffffad, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)

9m30.192423204s ago: executing program 2 (id=2163):
writev(0xffffffffffffffff, &(0x7f0000004980)=[{0x0}, {&(0x7f0000002800)="96b97c2c", 0x4}], 0x2)

9m30.091062915s ago: executing program 2 (id=2166):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0044, &(0x7f0000000100)={[{@noblock_validity}, {@usrquota}, {@grpquota}, {@noload}, {@nobarrier}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000000940)="$eJzs3MtvVNUfAPDvnU5Ly+NXfogPELSKRuKjpeUhCzcaTVxoNNEFxlWdFoIM1NCaCCGKLjDGhSFxb1ya+Be40o1RVyZudW9IjGEDuhpzZu5tyzBT+5h2ivP5JBfOufcO53zvuWfm3HNmCKBnjaQ/sojtEfFrRAxHRKn5hJHGXzevX6r8df1SJYta7bU/s/SyuHH9UiX/J+pbsq2xo1bL81talHvlzYjJanX6fJ4fmzv7ztjshYtPnT47eWr61PS5iePHjxzeP3Bs4mhH4kxx3dj7/sy+PS++cfXlyomrb/34darv9vx4EUcnjTSubkuPdrqwLtuxKJ2Vu1gRViS1W2qu/nr/H46+GJo/NhwvfNTVygHrqlar1Vp9Pucu14D/sCy6XQOgO4oP+vT8W2wbNPTYFP54tvEAlOK+mW+NI+X5eZD+pufbThqMiBOX//4ibbFO8xAAAIt9m8Y/T7Ya/5XinkXn/S9fQ9kZEf+PiF0RcVdE7I6IuyPq594bEfetsPzmFZLbxz+la6sKbJnS+O+ZfG3r1vHf/CrYzr48t6Mef3928nR1+lB+TQ5G/5aUH4/mhbMF3z3/y2fN+z7Np9lHFo3/0pbKL8aCeT2ulZsm6KYm5yY7EnyK/8OIveVW8WdRLONkEbEnIvausozTj3+1r92xf49/CR1YZ6p9GfFYo/0vR1P8hazt+uT408cmjo4NRnX60FhxV9zup5+vvNqu/DXF3wGp/be2vP8b8adnxGwwYvbCxTP19drZlZdx5bePK1mbY7tXef8PZK/X0wP5vvcm5+bOj0cMZC+l7NAt+ycWXlvki/NT/AcPtO7/uxqPZ/UrcX9EpJt4f0Q8EBEP5m33UEQ8HBEHloj/h+ceebvdsfbtv8SsfAel+KeWaP/0lpdSC+2/8kTfme+/aVd+bVntf6SeOpjvWc7733IruJZrBwAAAHeKUv078FlpdD5dKo2ONr7Dvzu2lqozs3NPnJx599xU47vyO6O/VMx0DS+aDx3P54aL/ERT/nA+b/x531A9P1qZqU51O3jocdva9P/k975u1w5Yd36vBb1L/4fepf9D79L/oXfp/9CjBlrv/mCj6wF0xco//wfXpR7AxjP+h96l/0Pv0v+hJ7X9bXxpTT/5v1MT5c1RjZaJoc1RjSIRpU1Rjc4lXvmk0SU2S32KRHnZ/5nFKhNbWh7q9jsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wTAAD//0635nc=")

9m29.962294557s ago: executing program 2 (id=2168):
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000240), &(0x7f0000000340)=r3}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20)
syz_emit_ethernet(0x3e, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "76b2af", 0x8, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0x8}}}}}}, 0x0)
r4 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x800)
setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f00000000c0), 0x4)
r5 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r6=>0x0})
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x0, 0x1, 0x9}, 0x10, 0x30d33, r7, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="611570000000000061136c0000000000bfa000000000000014000000ee0016055e03010000000000040500000001000069163e0000000000bf0700000000000026050700feffffffd706000040000000140600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

9m29.647534032s ago: executing program 2 (id=2173):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800040, &(0x7f0000000040)={[{@test_dummy_encryption_v1}, {@bsdgroups}, {@nouid32}, {@i_version}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x1, 0x471, &(0x7f0000000a00)="$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")
openat(0xffffffffffffff9c, 0x0, 0xc042, 0x1ff)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xd280, 0x0, 0x1, 0x0, &(0x7f00000007c0))
r0 = openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0)
fsopen(0x0, 0x0)
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x800001, &(0x7f0000000100), 0x0, 0x559e, &(0x7f0000005680)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0)

9m29.36161985s ago: executing program 2 (id=2180):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)
unshare(0x24020400)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)

9m28.550954084s ago: executing program 2 (id=2203):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48)
unshare(0x22020600)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000680)={r1, 0x0, 0x0, 0x4}, 0x20)

9m28.459641736s ago: executing program 35 (id=2203):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48)
unshare(0x22020600)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000680)={r1, 0x0, 0x0, 0x4}, 0x20)

9m24.080009784s ago: executing program 6 (id=2209):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f00000001c0)={[{}, {@uni_xlateno}]}, 0x0, 0x2df, &(0x7f0000002b80)="$eJzs3c9rE1sUwPGTpPnRlDZZlAfv8R7voBvdDG38C4K0IAaU2oi6EKZ2oiFjJmRiJCK2O7f+HcWlKwX1H+jGnXtxUwTBTRdiJMlMnCYpSYvttPb7gTKn996Te5OZlDOB3uzcevGwUnKNktmQaEolKrIpuyLZTuSJeMdoN05I0KZcnPn28b8bt+9czRcKSyuqy/nVSzlVnfv/7eOnL8+9b8zcfDX3Jinb2bs7X3Oftv/a/nvnx6r/6I6IqWtO57FtS9fLbsVQvW5bpmtpuepa9YaaWnechrlmW1qynVqtpWZ1fTZdq1uuq2a1pRWrpQ1HG/WWmvfNclUNw9DZtIyRGDfgtIkdOKO4tbJi5gMNgdfk39+zKByn6VGN9XrejI3sLG4dx6IAAMDJElb9/6DsatnVqtOp79f8+n64/o9KsH9M/S9ykPofntr+XSPrSZwunfo/7b1/96L+BwAAAAAAAAAAAAAAAAAAAADgNNhttzPtdjvjH/2fpIikRMT/Pex14mhw/s+2wD/upUTs581is9g79vrzJZkTWyxZiIt8714Pnl68fKWwtKBdWXlnb3j5G81iTJK9/HJ/suzo/MVevgbzNyQuaT+/M39OMjI/Kj++lBuR3ywm5ML5dtKb2RJDMvLhnjhiy3r3uv41/7NF1cvXCgP5091xAAAAAAD8CQztG7p/7/Yb6m8bMtDfa+zfny9Ipv/5QKRzgz30+cDA/fWU/DMV3vMGAAAAAOAscRNSMW3bqrutJ6EF8eOZy9/MdpLB0XFjRMJ8xTpBatLBUyLitbwOec0HCqIiMtgVH2oZHcQmOsv7Bl9E9r4v5kM/3YcNIu1Y/1r9/CjwNTFj0kP8owQAAADgSPhFfyTshQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcIZNuouYP/4wm5AFpouF8ywBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+FnAAAA///+AQnw")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020)

9m23.930411592s ago: executing program 6 (id=2272):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xa}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c800)

9m23.032321878s ago: executing program 6 (id=2296):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080)

9m22.91568633s ago: executing program 36 (id=2296):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080)

2.16767488s ago: executing program 7 (id=7445):
fcntl$lock(0xffffffffffffffff, 0x5, 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./mnt\x00', 0x840, &(0x7f0000000040), 0x1, 0x242, &(0x7f00000002c0)="$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")
r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000100)={[{@block_validity}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@discard}, {@prjquota}]}, 0x1, 0x4a0, &(0x7f0000000b80)="$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")
r2 = openat(0xffffffffffffff9c, 0x0, 0x59b801, 0x1ce)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0x8, 0x3ff, 0x0, 0x8, 0x7})
lseek(r0, 0x0, 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80)
pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000680)="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", 0x1b3}], 0x1, 0x5405, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x14800, &(0x7f0000000140)={[{@noauto_da_alloc}, {@dioread_lock}, {@oldalloc}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x5b9, &(0x7f0000000680)="$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")
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x460, &(0x7f0000000380)="$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")
open$dir(0x0, 0x311100, 0xa)
truncate(0x0, 0x3000000)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff)
openat$nullb(0xffffffffffffff9c, 0x0, 0x6200, 0x0)
sendfile(r4, r1, 0x0, 0x4000020fffe82)
openat(0xffffffffffffff9c, 0x0, 0x109042, 0x23)
mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b8)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x17f18a7, 0x0, 0x83, 0x0, &(0x7f0000000480))
rmdir(&(0x7f0000000000)='./bus\x00')
readv(0xffffffffffffffff, 0x0, 0x0)
sendfile(r3, r3, 0x0, 0x7a680000)
syz_mount_image$exfat(0x0, &(0x7f0000000540)='./bus\x00', 0x38c180a, 0x0, 0x0, 0x0, &(0x7f0000000240))
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1301c29, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRESDEC=0x0, @ANYBLOB=',gid=ignore,adinicb,\x00'], 0x1, 0xc32, &(0x7f0000001a40)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='A\x00', 0x1ff)

1.625238357s ago: executing program 7 (id=7450):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30)

1.598521082s ago: executing program 7 (id=7453):
openat(0xffffffffffffff9c, 0x0, 0xc042, 0x1)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000084c, &(0x7f0000000540)=ANY=[], 0x81, 0x14fc, &(0x7f0000002a80)="$eJzs3AuUjlXbOPB97b1vxjTpaZLDsK993TxpsE2S5JCQQ5IkSZJTQtIkSUJiyClpSEKOk+QwhOQwjUnjfD7knDR5pUmSkJCw/0vv+356v97v6/3W2/+z1jfXb629Zl9zP9f1XPdcs+a572eteb7rOapei/q1mxGR+LfAX7+kCCFihBDDhBDXCSECIUSl+Erxl48XUJDy7z0J+3M9nH61O2BXE88/b+P55208/7yN55+38fzzNp5/3sbzz9t4/ozlZdvnFLueV95d/P5/Xsav//+H5Jaf/NXG8jf2+h+k8PzzNp5/3sbzz9t4/nkbzz9v4/n/31frvznG88/beP6M5WVX+/1nXld3Xe3fP8YYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjecM5f4UWQvx9f7X7YowxxhhjjDHG2J/H57/aHTDGGGOMMcYYY+z/PxBSKKFFIPKJ/CJGFBCx4hoRJ64VBcV1IiKuF/HiBlFI3CgKiyKiqCgmEkRxUUIYgcIKEqEoKUqJqLhJlBY3i0RRRpQV5YQT5UWSuEVUELeKiuI2UUncLiqLO0QVUVVUE9XFnaKGuEvUFLVEbXG3qCPqinqivrhHNBD3iobiPtFI3C8aiwdEE/GgaCoeEs3Ew6K5eES0EI+KluIx0Uq0Fm1EW9Hut/l98/+L+S+JvuJl0U/0FyligBgoXhGDxGAxRAwVw8SrYrh4TYwQr4tUMVKMEm+I0eJNMUa8JcaKcWK8eFtMEBPFJDFZTBFTRZp4R0wT74rp4j0xQ8wUs8RskS7miLnifTFPzBcLxAdiofhQLBKLxRKxVGSIj0SmWCayxMdiufhEZIsVYqVYJVaLNWKtWCfWiw1io9gkNostYqvYJraLT8UOsVPsErvFHrFX7BOfif3ic3FAfCFyxJf/w/yz/ym/FwgQIEGCBg35IB/EQAzEQizEQRwUhIIQgQjEQzwUgkJQGApDUSgKCZAAJaAEICAQEJSEkhCFKJSG0pAIiVAWyoIDB0mQBBXgVqgIFaESVILKUBmqQFWoCtWhOtSAGlATakJtqA11oA7Ug3pwD9wD90JDaAiNoBE0hsbQBJpAU2gKzaAZNIfm0AJaQEtoCa2gFbSBNtAO2kF7aA8doAN0gk7QGTpDF+gCyZAMXaErdINu0B26Qw/oAT2hJ/SC3tAbXoKX4GV4GfpDHTkABsJAGASDYAgMhaHwKgyH1+A1eB1SYSSMgjfgDXgTxsAZGAvjYDyMhxpyIkyCyUByKqRBGkyDaTAdpsMMmAkzYTakwxyYC3NhHsyH+fABLIQP4UNYDIthKWRABmTCMsiCLFgOZyEbVsBKWAWrYQ2shnWwHtbBRtgEG2ELbIFtsA0+hU9hJ+yE3bAb9sJe+Aw+g8/hc0iFHMiBg3AQDsEhOAyHIRdy4QgcgaNwFI7BMTgOx+EEnIRTcBJOw2k4A2fhHJyD83AeLsALCd8031tmQ6qQl2mpZT6ZT8bIGBkrY2WcjJMFZUEZkREZL+NlIVlIFpaFZVFZVCbIBFlClpAoUZIMZUlZUkZlVJaWpWWiTJRlZVnppJNJMklWkBVkRVlRVpK3y8ryDllFVpUdXXVZXdaQnVxNWUvWlrVlHVlX1pP1ZX3ZQDaQDWVD2Ug2ko1lY9lEPiibygEwBB6WlyfTQo6ElnIUtJKtZRvZVr4Jj8v2cgx0kB1lJ/mkHAdjoYts75LlM7KrnATd5HNyMjwve8ip0FO+KHvJ3rKPfEn2lR1cP9lfzoABcqCcDYPkYDlEDpXzoK68PLF68nWZKkfKUfINuRTelGPkW3KsHCfHy7flBDlRTpKT5RQ5VabJd+Q0+a6cLt+TM+RMOUvOlulyjpwr35fz5Hy5QH4gF8oP5SK5WC6RS2WG/EhmymUyS34sl8tPZLZcIVfKVXK1XCPXynVyvdwgN8pNcrPcIrfKbXK7/FTukDvlLrlb7pF75T75mdwvP5cH5BcyR34pD8q/yEPyK3lYfi1z5TfyiPxWHpXfyWPye3lc/iBPyJPylPxRnpY/yTPyrDwnf5bn5S/ygrwoL0kvhQIllVJaBSqfyq9iVAEVq65RcepaVVBdpyLqehWvblCF1I2qsCqiiqpiKkEVVyWUUaisIhWqkqqUiqqbVGl1s0pUZVRZVU45VV4lqVtUBXWrqqhuU5XU7aqyukNVUVVVNVVd3alqqLtUTVVL1VZ3qzqqrqqn6qt7VAN1r2qo7lON1P2qsXpANVEPqqbqIdVMPayaq0dUC/WoaqkeU61Ua9VGtVXt1OOqvXpCdVAdVSf1pOqsnlJd1NMqWT2juqpnVTf1nOqunlc91Auqp3pR9VK9VR91UV1SXvVT/VWKGqAGqlfUIDVYDVFD1TD1qhquXlMj1OsqVY1Uo9QbarR6U41Rb6mxapwar95WE9RENUlNVlPUVJWm3lHT1LtqunpPzVAz1Sw1W6WrOWrI3yot+Bfy3/0n+SN+ffZtarv6VO1QO9UutVvtUXvVPrVP7Vf71QF1QOWoHHVQHVSH1CF1WB1WuSpXHVFH1FF1VB1Tx9RxdVydUCfVz+pHdVr9pM6os+qs+lmdV+fVhb/9DIQGLbXSWgc6n86vY3QBHauv0XH6Wl1QX6cj+nodr2/QhfSNurAuoovqYjpBF9cltNGorSYd6pK6lI7qm3RpfbNO1GV0WV1OO11eJ+lb/u38P+qvnW6n2+v2uoPuoDvpTrqz7qy76C46WSfrrrqr7qa76e66u+6he+ieuqfupXvpPrqP7qv76n66n07RKXqgfkUP0oP1ED1UD9Ov6uF6uB6hR+hUnapH6VF6tB6tx+gxeqweq8fr8XqCnqAn6Ul6ip6i03Sanqan6el6up6hZ+hZepZO1+l6rp6r5+l5eoFeoBfqhXqRXqSX6CU6Q2foTJ2ps3SWXq6X62y9Qq/Qq/QqvUav0ev0Or1Bb9Cb9Ca9RW/R2Xq73q536B16l96l9+g9ep/ep/fr/fqAPqBzdI4+qA/qQ/qQPqwP61ydq4/oI/qoPqqP6WP6uD6uT+gT+pQ+pU/r0/qMPqPP6XP6vD6vL+gL+pK+dPmyL5CBDHSgg3xBviAmiAlig9ggLogLCgYFg0gQCeKD+KBQcGNQOCgSFA2KBQlB8aBEYAIMbEBBGJQMSgXR4KagdHBzkBiUCcoG5QIXlA+SgluCCsGtQcXgtqBScHtQObgjqBJUDaoF1YM7gxrBXUHNoFZQO7g7qBPUDeoF9YN7ggbBvUHD4L6gUXB/0Dh4IGgSPBg0DR4KmgUPB82DR4IWwaNBy+CxoFXQOmgTtA3a/an1vT9T5AnXz/Q3KWaAGWheMYPMYDPEDDXDzKtmuHnNjDCvm1Qz0owyb5jR5k0zxrxlxppxZrx520wwE80kM9lMMVNNmnnHTDPvmunmPTPDzDSzzGyTbuaYueZ9M8/MNwvMB2ah+dAsMovNErPUZJiPTKZZZrLMx2a5+cRkmxVmpVllVps1Zq1ZZ9abDWaj2WQ2my1mq9lmtptPzQ6z0+wyu80es9fsM5+Z/eZzc8B8YXLMl+ag+Ys5ZL4yh83XJtd8Y46Yb81R8505Zr43x80P5oQ5aU6ZH81p85M5Y86ac+Znc978Yi6Yi+aS8Zcv7i+/vKNGjfkwH8ZgDMZiLMZhHBbEghjBCMZjPBbCQlgYC2NRLIoJmIAlsAReRkhYEktiFKNYGktjIiZiWSyLDh0mYRJWwApYEStiJayElbEyVsEqWA2r4Z14J96Fd2EtrIV3491YF+tifayPDbABNsSG2AgbYWNsjE2wCTbFptgMm2FzbI4tsAW2xJbYClthG2yD7bAdtsf22AE7YCfshJ2xM3bBLpiMydgVu2I37IbdsTv2wB7YE3tiL+yFfbAP9sW+2A/7YQqm4EAciINwEA7BITgMh+FwHI4jcASmYiqOwlE4GkfjGByDY3Ecjse3cQJOxEk4GafgVEzDNJyG03A6TscZOANn4SxMx3Sci3NxHs7DBbgAF+JCXISLcAkuwQzMwEzMxCzMwuW4HLMxG1fiSlyNq3EtrsX1uB434kbcjJtxK27F7bgdd+AO3IW7cA/uwX24D/fjfjyABzAHc/AgHsRDeAgP42HMxVw8gkfwKB7FY3gMj+NxPIEn8BSewtN4Gs/gGTyH5/A8/oIX8CJeQo8xVopYe42Ns9fagvY6G2ML2N/GRW0xm2CL2xLW2MK2yD/EaK1NtGVsWVvOOlveJtlbfhdXsVVtNVvd3mlr2Ltszd/FDey9tqG9zzay99v69p5/iBvbB2wT+6htah+zzWxr29y2tS3so7alfcy2sq1tG9vWdrZP2S72aZtsn7Fd7bO/izPtMrvebrAb7Sa7335uz9mf7VH7nT1vf7H9bH87zL5qh9vX7Aj7uk21I38Xj7dv2wl2op1kJ9spdurv4ll2tk23c+xc+76dZ+f/Ls6wH9mFNssusovtErv01/hyT1n2Y7vcfmKz7Qq70q6yq+0au9au+49eV9ktdqvdZvfZz+wOu9PusrvtHrv31/jyeRywX9gc+6U9Yr+1h+xX9rA9ZnPtN7/Gl8/vmP3eHrc/2BP2pD1lf7Sn7U/2jD376/lfPvcf7UV7yXorCEiSIk0B5aP8FEMFKJauoTi6lgrSdRSh6ymebqBCdCMVpiJUlIpRAhWnEmQIyRJRSCWpFEXpJipNN1MilaGyVI4clackuoUq0K1UkW6jSnQ7VaY7qApVpWpUne6kGnQX1aRaVJvupjpUl+pRfbqHGtC91JDuo0Z0PzWmB6gJPUhN6SFqRg9Tc3qEWtCj1JIeo1bUmtpQW2pHj1N7eoI6UEfqRE9SZ3qKutDTlEzPUFd6lrrRc9Sdnqce9AL1pBepF/WmPvQS9aWXqR/1pxQaQAPpFRpEg2kIDaVh9CoNp9doBL1OqTSSRtEbNJrepDH0Fo2lcTSe3qYJNJEm0WSaQlMpjd6hafQuTaf3aAbNpFk0m9JpDs2l92kezacF9AEtpA9pES2mJbSUMugjyqRllEUf03L6hLJpBa2kVbSa1tBaWkfraQNtpE20mbbQVtpG2+lT2kE7aRftpj20l/bRZ7SfPqcD9AXl0Jd0kP5Ch+grOkxfUy59Q0foWzpK39Ex+p6O0w90gk7SKfqRTtNPdIbO0jn6mc7TL3SBLtIl8iRCCGWoQh0GYb4wfxgTFghjw2vCuPDasGB4XRgJrw/jwxvCQuGNYeGwSFg0LBYmhMXDEqEJMbQhhWFYMiwVRsObwtLhzWFiWCYsG5YLXVg+TApvCSuEt4YVw9vCSuHtYeXwjrBKWDV89P7q4Z1hjfCusGZYK6wd3h3WCeuG9cL64T1hg/DesGF4X9govD+sGD4QNgkfDJuGD4XNwofD5uEjYYvw0bBl+FjYKmwdtgnbhu3Cx8P24RNhh7Bj2Cl8MuwcPhV2CZ8Ok8Nnwq7hs394PCUcEA4MXwlfCb2/Ty2JLo1mRD+KZkaXRbOiH0eXRz+JZkdXRFdGV0VXR9dE10bXRddHN0Q3RjdFN0e3RLdGt0W9r59fOHDSKadd4PK5/C7GFXCx7hoX5651Bd11LuKud/HuBlfI3egKuyKuqCvmElxxV8IZh846cqEr6Uq5qLvJlXY3u0RXxpV15Zxz5V2Sa+vauXauvXvCdXAdXSf3pHvSPeWeck+7p90zrqt71nVzz7nu7nnXw73gXnAvul6ut+vjXnJ93cuun+vvUlyKG+gGukFukBvihrhhbpgb7oa7EW6ES3WpbpQb5Ua70W6MG+PGurFuvBvvJrgJbpKb5Ka4KS7Npblpbpqb7qa7GW6Gm+VmuXSX7ua6uW6em+cWuAVuYeJCt8gtckvcEpfhMlymy3RZLsstd8tdtst2K91Kt9qtdmvdWrferXcb3Ua32W12W91Wt91tdzvcDrfL7XJ73B63z+1z+91+d8AdcDkuxx10B90hd8gddl+7XPeNO+K+dUfdd+6Y+94ddz+4E+6kO+V+dKfdT+6MO+vOuZ/defeLu+AuukvOu7TIO5FpkXcj0yPvRWZEZkZmRWZH0iNzInMj70fmReZHFkQ+iCyMfBhZFFkcWRJZGsmIfBTJjCyLZEU+jiyPfBLJjqyIrIysiqyOrIl4X3xH6Ev6Uj7qb/Kl/c0+0ZfxZX0573x5n+Rv8RX8rb6iv81X8rf7yv4OX8VX9dX8Y76Vb+3b+La+nX/ct/dP+A6+o+/kn/Sd/VO+i3/aJ/tnfFf/rO/mn/Pd/fO+h3/B9/Qv+l6+t+/jX/J9/cu+n+/vU/wAP9C/4gf5wX6IH+qH+Vf9cP+aH+Ff96l+pB/l3/Cj/Zt+jH/Lj/Xj/Hj/tp/gJ/pJfrKf4qf6NP+On+bf9dP9e36Gn+ln+dk+3c/xc/37fp6f7xf4D/xC/6Ff5Bf7JX6pz/Af+Uy/zGf5j/1y/4nP9iv8Sr/Kr/Zr/Fq/zq/3G/xGv8lv9lv8Vr/Nb/ef+h1+p9/ld/s9fq/f5z/z+/3n/oD/wuf4L/1B/xd/yH/lD/uvfa7/xh/x3/qj/jt/zH/vj/sf/Al/0p/yP/rT/id/xp/15/zP/rz/xV/wF/0l/p81xhhjjLF/ifqD4wP+yffk39ZlA4UQ1+4slvufa24u/Nf9YJnQOSKEeKZ/z4f/vurUSdn698dmKxGUWiyEiFzJzyeuxCtEJ/GUSBYdRYV/2t9g2fs8/b5+Sspv6kdvFyL2Nzkx4kp8pf6t/0X9x58cn1k5PBf/39RfLERiqSs5BcSV+Er9iv9F/SLt/6D/Al+lCdHhNzlx4kp8pX6SeEI8K5L/4ZGMMcYYY4wxxthfDZbVuv/R/fPl+/MEfSUnv7gS/9H9OWOMMcYYY4wxxq6+53v3efrx5OSO3XnDG97w5j82V/svE2OMMcYYY+zPduWi/2p3whhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5V3/Gx8ndrXPkTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLva/l8AAAD//zG6PD0=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x20fffe82)
truncate(&(0x7f00000001c0)='./file1\x00', 0x5)

1.535896782s ago: executing program 1 (id=7454):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, 0xffffffffffffffff, 0xaa0f4000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r2, 0xe6905000)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x1000)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000)
mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)

1.462491779s ago: executing program 1 (id=7455):
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x1, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000480))
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$alg(0x26, 0x5, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x3, 0x3)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r0], 0x20)

1.386969308s ago: executing program 7 (id=7456):
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0806000108080604"], 0x0)

1.261248336s ago: executing program 5 (id=7457):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003400)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000080)="0f", 0x1}], 0x1}}], 0x1, 0x4000)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffe}, 0x14)

1.238572332s ago: executing program 7 (id=7458):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000680)="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", 0x1b3}], 0x1, 0x5405, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x7a680000)

1.217772347s ago: executing program 1 (id=7459):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='A\x00', 0x1ff)

1.175300529s ago: executing program 1 (id=7460):
close(0xffffffffffffffff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)

1.101140378s ago: executing program 1 (id=7461):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, 0xffffffffffffffff, 0xaa0f4000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r2, 0xe6905000)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x1000)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0xfffff000)
mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)

1.09123418s ago: executing program 1 (id=7462):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054)

1.067699407s ago: executing program 7 (id=7463):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0xb0, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x84, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7f}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4002, 0xffffffff}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfa59, 0x80}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x7}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xa, 0x10000}}]}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$unix(0x1, 0x1, 0x0)
syz_emit_ethernet(0x52, &(0x7f00000011c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES32=r1, @ANYBLOB="509078fffe000000"], 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="b01929da0400000c00000400d4230000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0815000000051104060000000000000001000005540201"], 0x1508}}, 0x24000880)
writev(r4, &(0x7f0000000040), 0x2)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c)
connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24, 0xfffffffc}, 0x1c)
recvmmsg(r6, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10000, 0x0)
sendmmsg$inet6(r6, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000004f80)="000000f5b8ac2bb992ebd4c7b3ba4f60bfed002da6280c91950619c2a0e39042e0e7800ae7b041ff132d7fb40180000014c56dc066ca", 0x36}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000a40)="a603418c14260a2a66d792cf7e1960", 0xf}], 0x1}}], 0x2, 0x20e8086)
sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000001080), r0)
sendmsg$BATADV_CMD_SET_HARDIF(r0, 0x0, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)
r7 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r7, 0x8982, &(0x7f0000002e00)={0x7, 'vlan0\x00', {0x6a6}})

1.042886338s ago: executing program 5 (id=7464):
openat(0xffffffffffffff9c, 0x0, 0xc042, 0x1)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000084c, &(0x7f0000000540)=ANY=[], 0x81, 0x14fc, &(0x7f0000002a80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)
truncate(&(0x7f00000001c0)='./file1\x00', 0x5)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x20fffe82)

935.447812ms ago: executing program 5 (id=7465):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), r0)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0xffffffe8, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0)

929.210872ms ago: executing program 5 (id=7466):
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x1, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000480))
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$alg(0x26, 0x5, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x3, 0x3)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r0], 0x20)

840.816758ms ago: executing program 5 (id=7467):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5e9e, &(0x7f000000bc00)="$eJzs3U9vHGcdB/Df/vH6T2kbVagKEQc3hdJSmv8JlH9NOXCAA0ioZxK5bhVIASUB0SoirnJAXICXAJdeOPQt8AL6GhAvgEg2px4og8Z+nmQ8XmcdEu/s+vl8JGfmN8+O95l8PZ5dz8w+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADED77/k7O9iLjym7TgWMTnYhDRj1iu69WoZy7nxw8j4nhsN8fzETFYjKjX3/7n2YgLEfHJMxGbW7fX6sXnDtiPi2du3fjsh9/7x+//dPf4z97+6Uft9h9//vzHf7gTcexHr3/82Z0ns+0AAABQiqqqql56m38ivb/vd90pAGAq8vG/SvJytVqtVj/R+o/92eqPutC6qRrvTrOIiI3mOvVrBqfjAWDObMSnXXeBDsm/aMOIeKrrTgAzrdd1BzgUm1u313op317zeLC6057/Trkr/43e/fs79ptO0r7GZFo/X3djEM/t05/lKfVhluT8++38r+y0j9LjDjv/adkv/9HOrU/FyfkP2vm37Mr/zxExt/n3x+Zfqpz/8FHy3xjM8f4vfwAAAAAAjr789/9jHZ//XXz8TTmQh53/XZ1SHwAAAAAAAADgSXvc8f/uM/4fAAAAzKz6vXrtL888WLbfZ7HVy9/qRTzdejxQmNXGhwMCAAAAAAAAAAAAANMxjFhJ1/UvRMTTKytVVdVfTe36UT3u+vOu9O2HknX9Sx4AAHZ88kzrXv5exFJEvJU+629hZWWlqpaWV6qVankxv54dLS5Vy433tXlaL1scHeAF8XBU1d9sqbFe06T3y5Pa29+vfq5RNThAx6ajw8ABICJ2jkabjkhHTFU9G12/ymE+2P+PHvs/B9H1zykAAABw+Kqqqnrp47xPpHP+/a47BQBMRT7+t88LqNVqtVqtPnp1UzXenWYRERvNderXDIbjB4A5sxGfdt0FOiT/og0j4njXnQBmWq/rDnAoNrdur/VSvr3m8WB1pz1fC7Ir/43e9np5/XHTSdrXmEzr5+tuDOK5ffrz/JT6MEty/v12/ld22vMQ/4ed/7Tsl3+9ncc66E/Xcv6Ddv4tRyf//tj8S5XzHz5S/gP5AwAAAADADMt//z/m/G/eZAAAAAAAAACYO5tbt9fyfa/5/P8Xxzyu15xz/+eRkfPvHTh/9/8eJTn/fjv/1gU5g8b8vTcf5P/vrdtrH9361xfydObzXxiM6ude6PUHw3TNT7XwTlyL67EeZ/Y8frir/eye9oVd7ecmtJ/f0z6q25dz+6lYi1/G9Xj7fvvihAujlia0VxPac/4D+3+Rcv7Dxled/0pq77WmtXsf9vfs983puOe5/Lf/vLR375q+uzG4v21N9fad7KA/2/8nT43i1zfXb5z67dVbt26cjTTZtfRcpMkTlvNfSF85/5df3GnPv/eb++u9D0ePnP+suBvDffN/sTFfb+8rU+5bF3L+o/SV889HoPH7/zznv//+/2oH/QEAAAAAAAAAAAAAAICHqapq+xbRyxFxKd3/09W9mQDAdOXjf5Xk5Wq1Wq1Wq49e3VSN90aziIi/N9epXzP8btw3AwBm2X8j4p9dd4LOyL9g+fP+6umXuu4MMFU33//g51evX1+/cbPrngAAAAAAAAAA/688/udqY/zn7euAWuNG7xr/9c1YndvxP/ujwfZY52mDXoiHj/99Mh4+/vdwwvMtTGgfTWhfnNC+NKF97I0eDTn/F1LGOf8TacNKGv/15Q7607Wc/8k01nPO/yutxzXzr/46z/n3d+V/+tZ7vzp98/0PXrv23tV3199d/8XZM5cunL944fzFi6ffuXZ9/czOvx32+HDl/PPY164DLUvOP2cu/7Lk/L+cavmXJef/UqrlX5acf369J/+y5Pzzex/5lyXn/0qq5V+WnP9XUy3/suT8X021/MuS8/9aquVflpz/a6mWf1ly/qdSLf+y5PxPp1r+Zcn55zNc8i9Lzj9f2SD/suT8z6Va/mXJ+Z9PtfzLkvO/kGr5lyXnfzHV8i9Lzv9SquVflpz/11Mt/7Lk/L+RavmXJef/eqrlX5ac/zdTLf+y5Py/lWr5lyXn/+1Uy78sOf/vpFr+Zcn5fzfV8i9Lzv+NVMu/LA8+/9+MGTNm8kzXv5kAAAAAAAAAAAAAgLZpXE7c9TYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFvXuLkbO87wf+7sleGxL8D2figG1OBhZ21ydwiMEkIX9KeqAkpE1Lahx7bZz4VO+ak1DZFNoSBalI7QW9aJpEaRSprUBVpKYSjZAaqb1rrhpxE7USF76AykFJ1VSBrd6Z53k8Mzs7sz6MPfM+n09k/7w77zvzzDvvzO53yXcWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLT+EzN/MlQURfmn9teaori4/PeqYmf54fy2C71CAAAA4Gy9V/v7by9Jn9i5jJ0atvmXa//tewsLCwvFF9898f6fLSykC9YVxcjKoqhdFv3rL36+0LhN8HwxPjTc8PFwl5sf6XL5aJfLx7pcvqLL5Su7XD7e5fJFB2CRVfWfx9Su7IbaP9fUD2lxWTFWu+yGNns9P7RyeDj+LKdmqLbPwti+4kBxsJgpphbtM1T7X1G8vr68rQeKeFvDDbe1tiiKkz99dk9cw1A4xjcUTTdW0/jYvXNfse7dnz675ztzb1/dbnY9DItWWhQbN5TrfKEoTv24qhgqVqZjEtc53LDOtW3WOdK0zqHafuW/W9d5cpnrjPd7PKzzRx3WuTZ87qnri6KYL5bcptXzxXCxuuVW0/Eer58R5XWUD+WHitHTOk/WL+M8Kfd56/rm86T1nIzHf304JqNLrKHx4XjnKysWHfczPU/Ke90P52p53Q+VNzo+3vij1aZztdzm2RuXPgfaPnZtzoF0LjecAxu6nQPDK0Zq58DwqTVvaDoHphftM1wM1W7rxI2dz4HJuUNHJ2effub2A4d275/ZP3N4emrbls1bt2zeunVy34GDM1P1v0/vkA6Q1cVwOgc3hNeaeA7e3LJt4ym58M1z9zwY75PnQXnfP3tTuaCLh4slzvFymxc2nv3zIH3db3gejDY8D9q+prZ5Howu43lQbnNy4/K+Zo42/Gm3hl69Fq5pOAcu5NfD8jYfvWXp18K1YV0v3nq6Xw9HFp0D8W4Nhede+Zn0/d74XeG4LD4vrikvuGhFcXx25tgdT+2emzs2XYRxXlza8Fi1ni+rG+5Tseh8GT7t82Xn3/zypmvafH5NOFbjt3V+rMpttkx0fqxqr+7tj2fTZzcVYZxj5/t4tvtqVh7PlCU6HM9ymxduP/vvBVMuaXj9G+v2+jcyNlp//RtJR2Os6fVv8UMzUltZUZy8fXmvf2Phz/l+/busT17/ymP16B2dz4FymxcnT/ccGO34+nd9mENhPbeExDDekPvfr10+Xz9NGx7LrufN6OhYOG9G4y02nzebF+1TXlt52xunzuy82Xh982PV9H1LBc+b8lj9+VTn86bc5o3ps3/tWBX/2fDasaLbOTA2sqJc71g6Ceqvdwur4jlwR7GnOFIcLPamfcpHubytiU3LOwdWhD/n+7Xjqj45B8pj9cqmzudAuc0PN5/b7502hs+kbRq+d2r9+cJSmf+a0VPX13rYznXmL9f5yS2dfzZUbvP2ltPNGZ2P023hMxe1OU6tz5+lzum9xfk5TleFdR7c2vlnU+U2l21b5vm0syiKN6ffrP28K/x89++P//v3mn7u2+5nym9Ov/ng5MM/Pp31AwBw5t6v/T2/ov69ZsN/sV7Of/8HAAAABkLM/cNhJvI/AAAAVEbM/SNhJvI/AAAAVEbM/aNhJpnk/8fv2v7qe88V6d0AF4J4eTwMD91T3y52vOfDx+sWTik///Fvj7361eeWd9vDRVH88sEPt93+8XviuuqOxnV+tPnzi1x13bJu/7FHTm3X+P4JJ7fXrz/en+WeBrGr/Prkptr1rnt6ujbfeLCozYfnX3y+fv31j+P2JzbXt//L8KYlO/cNNe2/MaznhjDXhfeUeWjnqeNQzrjfq2uv/edLP3fq9uJ+Qxs+WLubr/xB/Xrje0S9fGl9+3i/l1r/P33tu6+W2z91Y/v1Pzfcfv0nwvW+FeYvdtS3bzzmX21Y/x+F9cfbi/vd8a0ftF3/a1fWt38tnBffCLN1/ff96Ufea/d4xdvZeXd9v3j7U/+9pbZfvL54/a3rH39uuul4tF7/G+/Wr2fHEz8badw+fj7eTvTY3c3n91B4fJt65EVRfPePi6bjXHysvt8/tqw/Xt/Ru9uv/7aWdR4duq62/6n7s6bpfn39rze1vb9xPTv/bk3T/Xn5/nD83p38YXm9Jx4O52O4/H9/VL++1vcyfe3+5tebuP031tSft/H6JlvW/3LL+uevK49d9/U/8G59/a/du7Jp/Ts/Fc6nB+qz2/r3/9UlTft/8zv1x+PYkxOHj8weP7C34ag2Po9Xjq9afdHFH/jgJeG1tPXjXUfmHp85tm5q3VRRrBvAtwzs9fq/FeZ/1cf8ub+Fuh//rH7evfTp+tetm39e//jl8PnHwuMZvz5+/S/Gms7X1sd9/t76PNv13xrWsVxXfu0/r1vWhie+8Prxf/jDt1u/L4j35+jl47X798r6K2qXDb1Rv7z19aqb/7i8+Xn9k9Gp2vx+OK4L4Z2ZN1xRv73W64/vTfLSZ+rP3/idXNy/aHk/kTUjzffjbNf/k/B9zA+uan79i+fH959reTfnNcVQuYT58PpQzNcvj1vF4/3SySva3l58H55i/urTWeaSZp+enTx44PDxpybnZmbnJmeffmbXoSPHD8/tqr136a4vddv/1PN7de35vXdm25ai9mw/Uh89dqHXf/SRPXvvnLpp78y+3cf3zT1ydObY/j2zs3tm9s7etHvfvpknu+1/YO+O6U3bN9+5aWL/gb077tq+ffP2iQOHj5TLqC+qi21TX544fGxXbZfZHVu2T2/dumVq4tCRvTM77pyamjjebf/a16aJcu8nJo7NHNw9d+DQzMTsgWdmdkxv37ZtU9d3fzx0dN/susljxw9PHp+dOTZZvy/r5mqfLr/2ddufPMweCa93LYbCd+efv21ben/c0re/suRV1Tdp/va0eCe8F1T8+tbt45j7x8JMMsn/AAAAkIOY+8Mb/5+6QP4HAACAyoi5f2WYifwPAAAAlRFz/3iYSSb5P6P+/6rGD/T/6/T/9f8L/X/9/x7T/9f/70T/X/9/kNev/6//T3f91v+PuX9VUWSZ/wEAACAHMfevDjOR/wEAAKAyYu6/KMxE/gcAAIDKiLn/4jCTPPL/WOs/K9z/b6L/X6f/363/H7fV/y/0//X/z5D+v/5/J/r/+v+DvP4+7P+v0v+n3/Rb/z/m/g+EmeSR/wEAACALMfd/MMxE/gcAAIDKiLn/kjAT+R8AAAAqI+b+NWEmmeT/jH7/fxP9/zr9f7//v9D/1/8/95oOsf6//n8n+v/6/4O8/j7s//v9//Sdfuv/x9z//8JMMsn/AAAAkIOY+z8UZiL/AwAAQGXE3H9pmIn8DwAAAJURc/9lYSaZ5H/9f/1//X/9f/1//f9e0v/X/+9E/1//f5DXr/+v/093/db/j7n/8jCTTPI/AAAA5CDm/ivCTOR/AAAAqIyY+68MM5H/AQAAoDJi7r8qzCST/K//r/+v/6//r/+v/99L+v/6/53o/+v/D/L69f/1/+mu3/r/MfdfHWaSSf4HAACAHMTcf02YifwPAAAAlRFz/4fDTOR/AAAAqIyY+9eGmWSS//X/9f/1//X/9f/1/3tpsPr/w0teov9fp//fTP9f/1//X/+fzvqt/x9z/0fCTDLJ/wAAAJCDmPuvDTOR/wEAAKAyYu6/LsxE/gcAAIDKiLl/XZhJJvlf/1//X/9f/1//X/+/lwar/780/f86/f9m+v/6//r/+v901m/9/5j714eZZJL/AQAAIAcx928IM5H/AQAAoDJi7r8+zET+BwAAgMqIuf+GMJNM8r/+v/6//r/+v/6//n8v6f/r/3ei/6//P8jr1/9fXv9/RbcrotL6rf8fc/+NYSaZ5H8AAADIQcz9N4WZyP8AAABQGTH33xxmIv8DAABAZcTcvzHMJJP8r/+v/6//r/+v/6//30v6/4v6/2/9T6H/H+n/6/8P8vr1//3+f7rrt/5/zP23hJlkkv8BAAAgBzH33xpmIv8DAABAZcTcf1uYifwPAAAAlRFz/0SYSSb5X/9f/1//X/9f/1//v5eq2v9Pr6N+/7/+v/6//r/+v/4/S+q3/n/M/beHmWSS/wEAACAHMfffEWYi/wMAAEBlxNw/GWYi/wMAAEBlxNw/FWaSSf7X/9f/1//v7/7/eJvzTf9f/3+QVLX/fxa//1//v4H+v/7/IK9f/1//n+76rf8fc/90mEkm+R8AAAByEHP/pjAT+R8AAAAqI+b+zWEm8j8AAABURsz9W8JMMsn/+v/6//r//d3/9/v/9f/1/zvT/9f/L/T/z9iF7s8P+vr1//X/aTbc5nP91v+PuX9rmEkm+R8AAAByEHP/tjAT+R8AAAAGS+v/ubRBzP13hpnI/wAAAFAZMfffFWaSSf7X/9f/1//X/9f/1//vJf1//f9O9P/1/wd5/fr/+v9012/9/5j7t4eZZJL/AQAAIAcx9380zET+BwAAgMqIuf/uMBP5HwAAAAZKu99DGMXc/7Ewk0zyv/5/1fv/Cyv1//X/9f87r1//v7f0//X/O9H/1/8f5PXr/+v/012/9f9j7t8RZpJJ/gcAAIAcxNx/T5iJ/A8AAACVEXP/vWEm8j8AAABURsz9O8NMMsn/+v9V7//7/f/6//r/3dav/99b+v/6/53o/w9m/z9826L/f376/+NL7d/Y/y/PIf1/+lG/9f9j7r8vzCST/A8AAAA5iLn/42Em8j8AAABURsz9nwgzkf8BAACgMmLu/2SYSSb5X/9f/1//X/9f/1//v5f0//X/O9H/H8z+f6T/7/f/6//TTb/1/2Puvz/MJJP8DwAAADmIuf9TYSbyPwAAAFRGzP3/P8xE/gcAAIDKiLn/gTCTTPK//r/+v/6//r/+v/5/L+n/6/93ov+v/z/I69f/1/+nu37r/8fc/ythJpnkfwAAAMhBzP0PhpnI/wAAAFAZMfd/OsxE/gcAAIDKiLn/V8NMMsn/+v/np/8/nK5f/1//X/9f/1///1zS/9f/L/T/z9iF7s8P+vr1//X/6a7f+v8x9/9amEkm+R8AAAByEHP/r4eZyP8AAABQGTH3/0aYifwPAAAAlRFz/0NhJpnkf/1/v/9f/1//X/9f/7+X9P/1/zvR/9f/H+T16//r/9Ndv/X/Y+7/zTCTTPI/AAAA5CDm/ofDTOR/AAAAqIyY+z8TZiL/AwAAQGXE3P/ZMJNM8r/+v/6//r/+v/6//n8v6f/r/3ei/6//P8jr1//X/6e7fuv/x9z/SJhJJvkfAAAAchBz/+fCTOR/AAAAqIyY+38rzET+BwAAgMqIuf+3w0wyyf/6//r/+v/6//r/+v+9pP+/uP9fvoZdyP7/iuVsqP+/LPr/+v/6//r/dNZv/f+Y+z8fZpJJ/gcAAIAcxNz/O2Em8j8AAABURsz9vxtmIv8DAABAZcTc/2iYSSb5X/9f/1//X/9f/1//v5f0//3+/070//X/B3n9+v/6/3TXb/3/mPu/EGaSSf4HAACAHMTc/3thJvI/AAAAVEbM/bvCTOR/AAAAqIyY+x8LM8kk/+v/6//r/+v/6//r//eS/r/+fyf6//r/g7x+/X/9f7rrt/5/zP27w0wyyf8AAACQg5j7vxhmIv8DAABAZcTcvyfMRP4HAACAyoi5f2+YSSb5X/9f/1//X/9f/1//v5f0//X/O9H/1/8f5PXr/+v/012/9f9j7p8JM8kk/wMAAEAOYu7fF2Yi/wMAAEBlxNy/P8xE/gcAAIDKiLn/8TCTTPK//r/+v/6//r/+v/5/L+n/6/93ov+v/z/I69f/1/+nu37r/8fcfyDMJJP8DwAAADmIuf9LYSbyPwAAAFRGzP1fDjOR/wEAAKAyYu4/GGaSSf7X/9f/1//X/9f/1//vJf1//f9O9P/1/wd5/fr/+v9012/9/5j7D4WZZJL/AQAAIAcx9x8OM5H/AQAAoDJi7j8SZiL/AwAAQGXE3H80zCST/K//r/+v/6//r/+v/99L+v/6/53o/+v/D/L69f/1/+mu3/r/Mff/fphJJvkfAAAAchBz/7EwE/kfAAAAKiPm/tkwE/kfAAAAKiPm/rkwk0zyv/6//r/+v/6//r/+fy/p/+v/d6L/r/8/yOvX/9f/p7t+6//H3H88zCST/A8AAAA5iLn/iTAT+R8AAAAqI+b+J8NM5H8AAAD4P/buM9eus4rj8AnGgIQQY2EEDIEx8Ikp0HsLvfcSeu+919B7771DIPQqBcFda124iff2Pfbxefe7nufLErZlXrBA+cv6aU8jd/+945Ym+1//r//X/5/2/zfc6+THj9T/n3R++n/9v/7/XPT/+v+d/n9vx+7nt/5+/b/+n3Wj9f+5++8TtzTZ/wAAANBB7v77xi32PwAAAEwjd//94hb7HwAAAKaRu//+cUuT/a//1//r/33/X/+v/z8k/b/+f4n+X/+/5ffr//X/rBut/8/d/4C4pcn+BwAAgA5y9z8wbrH/AQAAYBq5+x8Ut9j/AAAAMI3c/Q+OW5rsf/2//l//r//X/+v/D0n/r/9fov/X/2/5/fp//T/rRuv/c/c/JG5psv8BAACgg9z9D41b7H8AAACYRu7+h8Ut9j8AAABMI3f/w+OWJvtf/6//1//r//X/+v9D0v/r/5fo//X/W36//l//z7rR+v/c/Y+IW5rsfwAAAOggd/8j4xb7HwAAAKaRu/9RcYv9DwAAANPI3f/ouKXJ/tf/6//1//p//b/+/5D0//r/Jfp//f+W36//1/+z7uD9/z2u/++93P4/d//1cUuT/Q8AAAAd5O5/TNxi/wMAAMA0cvc/Nm6x/wEAAGAaufsfF7c02f/6f/3/af9/y3X6f/2//v/0x/X/V4f+X/+/RP8/av9/ef9N6P/1//p/1hy8/1/p/c/+69z9j49bmux/AAAA6CB3/xPiFvsfAAAAppG7/4lxi/0PAAAA08jd/6S4pcn+1//r/33//8bKz/X/+n/9/9Wn/9f/L9H/j9r/+/7/lfb/d7+M95/2///553D9P3Marf/P3f/kuKXJ/gcAAIAOcvc/JW6x/wEAAGAaufufGrfY/wAAADCN3P1Pi1ua7H/9v/5f/+/7//p//f8h6f/1/0v0//r/Lb/f9//1/6wbrf/P3f/0uKXJ/gcAAIAOcvc/I26x/wEAAGAaufufGbfY/wAAADCN3P3Pilua7H/9v/5f/6//v6L+/4L+X/+/TP+v/1+i/9f/b/n9+n/9P+tG6/9z9z87bmmy/wEAAKCD3P3PiVvsfwAAAJhG7v7nxi32PwAAAEwjd//z4pYm+1//r//X/+v/ff9f/39I+v/p+v/r9P+n9P/6f/2//p9lo/X/ufufH7c02f8AAADQQe7+F8Qt9j8AAABMI3f/C+MW+x8AAACmkbv/hrilyf7X/+v/9f/6f/2//v+Q9P/T9f++//8/9P/6f/2//p9lo/X/uftfFLesDb+LKz8PAAAADCN3/4vjliZ//w8AAAAd5O5/Sdxi/wMAAMA0cve/NG5psv/1//p//b/+X/+v/z8k/b/+f4n+/7b7/ztd4t9P/z/W+/X/+n/Wjdb/5+5/WdzSZP8DAABAB7n7Xx632P8AAAAwjdz9r4hb7H8AAACYRu7+V8YtTfb/pfr/m+988vPn7P9vr//X/+v/9f9J/6//3+n/9f8r9P++/7/l9+v/9f+sG63/z93/qrilyf4HAACADnL3vzpusf8BAABgGrn7XxO32P8AAAAwjdz9r41bmux/3//X/+v/9f/6f/3/Ien/9f9L9P/6/y2/X/+v/2fdaP1/7v7XxS1N9j8AAAB0kLv/9XGL/Q8AAADTyN3/hrjF/gcAAIBp5O5/Y9zSZP/r//X/R+//b6f/T/r/+HPV/+v/z0H/r//f6f/3dux+fuvv1//r/1k3Wv+fu/9NcUuT/Q8AAAAd5O5/c9xi/wMAAMA0cve/JW6x/wEAAGAaufvfGrc02f/6f/3/0ft/3/8v+v/4c9X/6//PQf+v/9/p//d27H5+6+/X/+v/WTda/5+7/21xS5P9DwAAAB3k7n973GL/AwAAwDRy978jbrH/AQAAYBq5+98ZtzTZ//p//b/+X/+v/9f/H5L+X/+/RP+v/9/y+/X/+n/Wjdb/5+5/V9zSZP8DAABAB7n73x232P8AAAAwjdz974lb7H8AAACYRu7+98YtTfa//n/r/f89b4oX6P/1//p//f+Q9P/6/yX6f/3/lt+v/9f/s260/j93//vilib7HwAAADrI3f/+uMX+BwAAgGnk7v9A3GL/AwAAwDRy938wbmmy/3v0/xdv9cvm6f99/1//r//X/49N/6//X6L/1/9v+f36f/0/60br/3P3fyhuabL/AQAAoIPc/R+OW+x/AAAAmEbu/o/ELfY/AAAATCN3/0fjlib7v0f/f2sN+v/8j3Vt+/9b7qr/1/8X/b/+f6f/1/+v0P/r/7f8fv2//p91o/X/uftvjFua7H8AAADoIHf/x+IW+x8AAACmkbv/43GL/Q8AAADTyN3/ibjhbnc53pOuKf3/tP2/7//r//X/+v8h6P/1/0v0//r/Lb9f/6//Z91o/X/u/k/GLf7+HwAAAKaRu/9TcYv9DwAAANPI3f/puMX+BwAAgGnk7v9M3NJk/+v/9f/6f/3/dP1//O9J/z8G/b/+f4n+X/+/5ffr//X/rBut/8/d/9m4pcn+BwAAgA5y938ubrH/AQAAYBq5+z8ft9j/AAAAMI3c/V+IW5rsf/2//l//f9X6/4tnf3/9v+//6//1//r/Zfp//f+W36//1/+zbrT+P3f/F+OWJvsfAAAAOsjd/6W4xf4HAACAaeTu/3LcYv8DAADANHL3fyVuabL/9f/6f/2/7//r//X/h6T/1/8v0f/r/7f8fv2//p91o/X/ufu/Grc02f8AAADQQe7+r8Ut9j8AAABMI3f/1+MW+x8AAACmkbv/G3FLk/0/c/+/9Mv0/yf0//r/nf5f/39g+n/9/xL9v/5/y+/X/+v/WTda/5+7/5txS5P9DwAAAB3k7v9W3GL/AwAAwDRy9387brH/AQAAYBq5+78TtzTZ/zP3/0v0/yf0//r/nf5f/39g+n/9/xL9v/5/y+/X/+v/WTda/5+7/7txS5P9DwAAAB3k7v9e3GL/AwAAwDRy938/brH/AQAAYBq5+38QtzTZ//p//b/+X/+v/9f/H5L+X/+/RP+v/9/y+/X/+n/Wjdb/5+7/YdzSZP8DAABAB7n7fxS32P8AAAAwjdz9P45b7H8AAACYRu7+n8QtTfa//l//r/8fqv+/w9nfR/+v/9f/L9P/6/93+v+9Hbuf3/r79f/6f9aN1v/n7v9p3NJk/wMAAEAHuft/FrfY/wAAADCN3P0/j1vsfwAAAJhG7v5fxC1N9r/+X/+v/9+7/7+w8/3//3uP/l//f1v0//r/Jfp//f+W36//1/+zbrT+P3f/L+OWJvsfAAAAOsjd/6u4xf4HAACAaeTu/3XcYv8DAADANHL3/yZuabL/9f/6f/3/UN//1//r//X/56T/1//v9P97O3Y/v/X36//1/6wbrf/P3X9T3NJk/wMAAEAHuft/G7fY/wAAADCN3P2/i1vsfwAAAJhG7v6b45Ym+1//r/+fsv+/o/5f/6//H4X+X/+/RP+v/9/y+/X/+n/Wjdb/5+7/fdzSZP8DAABAB7n7/xC32P8AAAAwjdz9f4xb7H8AAACYRu7+P8UtTfa//l//P2X/7/v/+v+t9f8XTv8PWP9/Pvp//f9O/7+3Y/fzW3+//l//z7rR+v/c/X+OW5rsfwAAAOggd/9f4hb7HwAAAKaRu/+vcYv9DwAAANPI3f+3uKXJ/u/S/5/NSPT/J/T/+v+d/n+M/r/R9//P/nlfKf2//n+n/9/bsfv5rb9f/6//Z91o/X/u/r/HLU32PwAAAHSQu/8fcYv9DwAAANPI3f/PuMX+BwAAgGnk7v9X3NJk/3fp/8/S/5/Q/+v/d/p//f+B+f6//n+J/l//v+X36//1/6wbrf/P3f/vAAAA//+KYySt")
openat(0xffffffffffffff9c, 0x0, 0xc042, 0x1)
openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000084c, &(0x7f0000000540)=ANY=[], 0x81, 0x14fc, &(0x7f0000002a80)="$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")
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x3200014, &(0x7f00000006c0)=ANY=[], 0x1, 0x625, &(0x7f0000001540)="$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")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='.\x02\x00', 0x66fbaeb3e77592b8, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
sendfile(r2, r3, 0x0, 0x20fffe82)
creat(&(0x7f0000000080)='./file1\x00', 0x1)

0s ago: executing program 5 (id=7468):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, 0xffffffffffffffff, 0xaa0f4000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r2, 0xe6905000)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x1000)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0xfffff000)
mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

11: 0000000000000246 R12: 00007ffe5cc2df00
[  623.003097][T10931] R13: 00007f53762344bb R14: 00000000000980f3 R15: 00007ffe5cc2df40
[  623.003110][T10931]  </TASK>
[  623.015133][T10931] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  623.074899][ T5427] bond13: (slave dummy0): failed to get link speed/duplex
[  623.183176][ T5661] bond13: (slave dummy0): failed to get link speed/duplex
[  623.233245][T23114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  623.293269][ T5427] bond13: (slave dummy0): failed to get link speed/duplex
[  623.405475][   T13] bond13: (slave dummy0): failed to get link speed/duplex
[  623.527575][   T13] bond13: (slave dummy0): failed to get link speed/duplex
[  623.532391][T23122] netlink: 'syz.5.6603': attribute type 27 has an invalid length.
[  623.536611][T23122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6603'.
[  623.540051][T23122] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  623.592237][T23124] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  623.592281][T23124] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  623.643474][ T5427] bond13: (slave dummy0): failed to get link speed/duplex
[  623.764500][   T13] bond13: (slave dummy0): failed to get link speed/duplex
[  623.843870][T23129] loop1: detected capacity change from 0 to 40427
[  623.860543][T23129] F2FS-fs (loop1): invalid crc value
[  623.877452][ T5661] bond13: (slave dummy0): failed to get link speed/duplex
[  623.919742][T23129] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  623.941361][T23129] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  624.004371][ T5597] syz-executor: attempt to access beyond end of device
[  624.004371][ T5597] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  624.018107][ T5597] CPU: 1 UID: 0 PID: 5597 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  624.018151][ T5597] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  624.018180][ T5597] Call Trace:
[  624.018186][ T5597]  <TASK>
[  624.018193][ T5597]  dump_stack_lvl+0xe8/0x150
[  624.018220][ T5597]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  624.018241][ T5597]  f2fs_write_end_bio+0x1211/0x16e0
[  624.018262][ T5597]  ? blkg_put+0x22/0x240
[  624.018287][ T5597]  __submit_merged_bio+0x258/0x6a0
[  624.018301][ T5597]  ? rcu_is_watching+0x16/0xb0
[  624.018321][ T5597]  __submit_merged_write_cond+0x3c9/0x4e0
[  624.018342][ T5597]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  624.018370][ T5597]  f2fs_write_data_pages+0x2a27/0x36f0
[  624.018387][ T5597]  ? __pfx_hlock_conflict+0x10/0x10
[  624.018424][ T5597]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  624.018439][ T5597]  ? is_bpf_text_address+0x26/0x2b0
[  624.018462][ T5597]  ? arch_stack_walk+0xfb/0x150
[  624.018495][ T5597]  ? add_lock_to_list+0xc7/0x100
[  624.018510][ T5597]  ? lockdep_unlock+0x5c/0xd0
[  624.018527][ T5597]  ? __lock_acquire+0x14b9/0x2e50
[  624.018548][ T5597]  ? irqentry_exit+0x218/0x910
[  624.018565][ T5597]  ? trace_irq_disable+0x3b/0x140
[  624.018585][ T5597]  ? do_raw_spin_lock+0x12b/0x2f0
[  624.018608][ T5597]  ? do_raw_spin_unlock+0x4d/0x200
[  624.018624][ T5597]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  624.018638][ T5597]  do_writepages+0x338/0x560
[  624.018656][ T5597]  ? do_raw_spin_unlock+0x4d/0x200
[  624.018674][ T5597]  filemap_fdatawrite+0x1e9/0x2f0
[  624.018688][ T5597]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  624.018753][ T5597]  ? do_raw_spin_unlock+0x4d/0x200
[  624.018774][ T5597]  f2fs_sync_dirty_inodes+0x30e/0x830
[  624.018802][ T5597]  f2fs_write_checkpoint+0xa3d/0x2710
[  624.018819][ T5597]  ? __lock_acquire+0x6df/0x2e50
[  624.018843][ T5597]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  624.018885][ T5597]  kill_f2fs_super+0x2dd/0x700
[  624.018909][ T5597]  ? __pfx_kill_f2fs_super+0x10/0x10
[  624.018933][ T5597]  ? call_rcu+0x64d/0x8b0
[  624.018947][ T5597]  ? lockdep_hardirqs_on+0x7b/0x110
[  624.018974][ T5597]  deactivate_locked_super+0xbc/0x110
[  624.018993][ T5597]  cleanup_mnt+0x3d3/0x460
[  624.019014][ T5597]  task_work_run+0x1d9/0x270
[  624.019031][ T5597]  ? __pfx_task_work_run+0x10/0x10
[  624.019051][ T5597]  exit_to_user_mode_loop+0x204/0x770
[  624.019064][ T5597]  ? rcu_is_watching+0x16/0xb0
[  624.019081][ T5597]  do_syscall_64+0x328/0x520
[  624.019105][ T5597]  ? trace_irq_disable+0x3b/0x140
[  624.019117][ T5597]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  624.019134][ T5597]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  624.019147][ T5597] RIP: 0033:0x7f58dc19f397
[  624.019161][ T5597] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  624.019171][ T5597] RSP: 002b:00007ffeb793bb18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  624.019186][ T5597] RAX: 0000000000000000 RBX: 00007f58dc2344bb RCX: 00007f58dc19f397
[  624.019195][ T5597] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb793bbd0
[  624.019202][ T5597] RBP: 00007ffeb793bbd0 R08: 00007ffeb793cbd0 R09: 00000000ffffffff
[  624.019211][ T5597] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeb793cc60
[  624.019219][ T5597] R13: 00007f58dc2344bb R14: 00000000000984e9 R15: 00007ffeb793cca0
[  624.019240][ T5597]  </TASK>
[  624.073244][ T5597] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  624.780096][T23149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  624.977863][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  624.980621][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  625.154314][T23163] loop7: detected capacity change from 0 to 1024
[  625.158358][T23163] EXT4-fs: Ignoring removed orlov option
[  625.218190][T23163] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  625.268897][T11585] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  625.445854][T23173] netlink: 9 bytes leftover after parsing attributes in process `syz.7.6621'.
[  625.509436][T23173] netlink: 5 bytes leftover after parsing attributes in process `syz.7.6621'.
[  625.516894][T23173] 0{X: renamed from gretap0
[  625.528474][T23173] 0{X: entered allmulticast mode
[  625.636888][T23182] loop7: detected capacity change from 0 to 1024
[  625.640679][T23182] EXT4-fs: Ignoring removed orlov option
[  625.686841][T23182] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  625.875464][T11585] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  626.023500][T23195] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6633'.
[  626.196473][T23203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  626.361601][T23209] tipc: Resetting bearer <eth:syzkaller0>
[  626.430386][T23213] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6640'.
[  626.721624][T23221] loop5: detected capacity change from 0 to 64
[  626.769474][T23221] hfs: unable to load iocharset "cp8&0"
[  626.839180][T23224] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6645'.
[  626.890743][T23224] 8021q: adding VLAN 0 to HW filter on device bond16
[  627.429843][T23240] loop1: detected capacity change from 0 to 1024
[  627.558928][T23243] netlink: 9 bytes leftover after parsing attributes in process `syz.5.6652'.
[  627.705564][T23245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6653'.
[  627.730415][T23245] 8021q: adding VLAN 0 to HW filter on device bond13
[  627.854957][ T5661] net_ratelimit: 36 callbacks suppressed
[  627.855052][ T5661] bond13: (slave dummy0): failed to get link speed/duplex
[  627.963889][ T5661] bond13: (slave dummy0): failed to get link speed/duplex
[  628.074788][ T5661] bond13: (slave dummy0): failed to get link speed/duplex
[  628.146320][T23260] loop1: detected capacity change from 0 to 1024
[  628.183634][ T5661] bond13: (slave dummy0): failed to get link speed/duplex
[  628.293782][ T5661] bond13: (slave dummy0): failed to get link speed/duplex
[  628.439325][T23272] tipc: Resetting bearer <eth:syzkaller0>
[  628.463160][ T5661] bond13: (slave dummy0): failed to get link speed/duplex
[  628.532722][T23276] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  628.537236][T23276] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  628.573470][ T5661] bond13: (slave dummy0): failed to get link speed/duplex
[  628.685580][   T13] bond13: (slave dummy0): failed to get link speed/duplex
[  628.793554][ T5661] bond13: (slave dummy0): failed to get link speed/duplex
[  628.858269][T23286] loop1: detected capacity change from 0 to 512
[  628.892562][T23286] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  628.892614][T23286] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  628.903925][   T13] bond13: (slave dummy0): failed to get link speed/duplex
[  628.903962][T23286] EXT4-fs (loop1): orphan cleanup on readonly fs
[  628.910085][T23286] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.6672: bad orphan inode 15
[  628.910165][T23286] loop1: lost filesystem error report for type 5 error -117
[  628.914230][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  628.914241][    C1] EXT4-fs (loop1): initial error at time 1790641599: ext4_orphan_get:1429
[  628.914251][    C1] EXT4-fs (loop1): last error at time 1790641599: ext4_orphan_get:1429
[  628.926046][T23286] ext4_test_bit(bit=14, block=18) = 1
[  628.926060][T23286] is_bad_inode(inode)=0
[  628.926067][T23286] NEXT_ORPHAN(inode)=1023
[  628.926072][T23286] max_ino=32
[  628.926079][T23286] i_nlink=0
[  628.944230][T23286] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2933: inode #15: comm syz.1.6672: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  628.944274][T23286] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  628.950399][T23286] EXT4-fs warning (device loop1): ext4_evict_inode:288: xattr delete (err -117)
[  628.960031][T23286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  628.999863][ T5597] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  629.708983][T23315] loop5: detected capacity change from 0 to 512
[  629.729966][T23315] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  629.734322][T23315] ext4 filesystem being mounted at /1668/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  629.755077][T10931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  630.303317][T23342] loop7: detected capacity change from 0 to 512
[  630.307020][T23342] EXT4-fs: Ignoring removed oldalloc option
[  630.361316][T23342] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  630.493640][   T34] audit: type=1800 audit(1790641601.563:89): pid=23348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.6697" name="file1" dev="loop7" ino=15 res=0 errno=0
[  630.628167][T23359] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6703'.
[  630.631092][T23359] netlink: 'syz.1.6703': attribute type 7 has an invalid length.
[  630.633855][T23359] netlink: 'syz.1.6703': attribute type 8 has an invalid length.
[  630.636496][T23359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6703'.
[  630.937866][T23373] loop1: detected capacity change from 0 to 4096
[  630.966926][T23373] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  631.020266][   T34] audit: type=1800 audit(1790641602.093:90): pid=23373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6710" name="file1" dev="loop1" ino=34 res=0 errno=0
[  631.166297][T11585] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  631.359442][T23379] loop7: detected capacity change from 0 to 512
[  631.429293][T23379] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  631.446603][T23379] ext4 filesystem being mounted at /1453/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  631.565496][T11585] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  631.930130][T23393] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6717'.
[  632.112740][T23398] loop5: detected capacity change from 0 to 512
[  632.120719][T23398] EXT4-fs: Ignoring removed oldalloc option
[  632.155357][T23398] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  632.307285][T23412] netlink: 'syz.7.6725': attribute type 25 has an invalid length.
[  632.311795][T23412] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6725'.
[  632.328452][T23412] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  632.358956][   T34] audit: type=1800 audit(1790641603.433:91): pid=23413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6718" name="file1" dev="loop5" ino=15 res=0 errno=0
[  632.512257][T23416] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  632.517711][T23416] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  632.679546][T23420] loop7: detected capacity change from 0 to 4096
[  632.747384][T23420] ntfs3(loop7): Failed to initialize $Extend/$Reparse.
[  632.767969][   T34] audit: type=1800 audit(1790641603.843:92): pid=23420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.6728" name="file1" dev="loop7" ino=34 res=0 errno=0
[  632.913235][ T5427] net_ratelimit: 35 callbacks suppressed
[  632.913972][ T5427] bond13: (slave dummy0): failed to get link speed/duplex
[  632.991428][T10931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  633.037660][ T5427] bond13: (slave dummy0): failed to get link speed/duplex
[  633.130426][T23426] loop5: detected capacity change from 0 to 4096
[  633.143326][T17526] bond13: (slave dummy0): failed to get link speed/duplex
[  633.157110][T23426] ntfs3(loop5): Failed to initialize $Extend/$Reparse.
[  633.211016][   T34] audit: type=1800 audit(1790641604.283:93): pid=23426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6730" name="file1" dev="loop5" ino=34 res=0 errno=0
[  633.253289][T17526] bond13: (slave dummy0): failed to get link speed/duplex
[  633.367395][T17526] bond13: (slave dummy0): failed to get link speed/duplex
[  633.473409][T17526] bond13: (slave dummy0): failed to get link speed/duplex
[  633.498972][T23434] loop5: detected capacity change from 0 to 4096
[  633.501933][T23434] EXT4-fs: Ignoring removed nobh option
[  633.504231][T23434] EXT4-fs: Ignoring removed bh option
[  633.506744][T23434] EXT4-fs (loop5): Test dummy encryption mode enabled
[  633.515162][T23434] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  633.539767][   T34] audit: type=1800 audit(1790641604.613:94): pid=23434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6732" name="file1" dev="loop5" ino=15 res=0 errno=0
[  633.583343][T17526] bond13: (slave dummy0): failed to get link speed/duplex
[  633.693450][T17526] bond13: (slave dummy0): failed to get link speed/duplex
[  633.794437][T10931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  633.803315][T17526] bond13: (slave dummy0): failed to get link speed/duplex
[  633.915648][T17526] bond13: (slave dummy0): failed to get link speed/duplex
[  633.929396][T23445] kAFS: unable to lookup cell '(G'
[  633.982602][T23451] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  633.988877][T23451] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  634.167297][T23449] loop7: detected capacity change from 0 to 32768
[  634.175329][T23449] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  634.200568][T23449] XFS (loop7): Ending clean mount
[  634.244052][   T34] audit: type=1800 audit(1790641605.323:95): pid=23449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.6737" name="file1" dev="loop7" ino=6150 res=0 errno=0
[  634.620115][T11585] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  635.108005][T23475] loop5: detected capacity change from 0 to 512
[  635.120563][T23475] EXT4-fs: Ignoring removed oldalloc option
[  635.199928][T23475] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  636.008589][T10931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  636.195364][T23499] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6755'.
[  636.198785][T23499] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6755'.
[  636.483197][    C1] bridge0: port 1(bridge_slave_0) entered forwarding state
[  636.483248][    C1] bridge0: topology change detected, propagating
[  636.483780][    C1] bridge0: port 2(bridge_slave_1) entered forwarding state
[  636.483815][    C1] bridge0: topology change detected, propagating
[  636.658072][T23521] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6765'.
[  636.662028][T23521] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6765'.
[  637.322373][T23536] netlink: 5 bytes leftover after parsing attributes in process `syz.5.6771'.
[  637.322931][T23536] 0{X: renamed from gretap0
[  637.336893][T23536] 0{X: entered allmulticast mode
[  638.013261][ T5661] net_ratelimit: 58 callbacks suppressed
[  638.013332][ T5661] bond13: (slave dummy0): failed to get link speed/duplex
[  638.110341][T23562] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6785'.
[  638.123838][ T5661] bond13: (slave dummy0): failed to get link speed/duplex
[  638.233399][   T13] bond13: (slave dummy0): failed to get link speed/duplex
[  638.358497][   T12] bond13: (slave dummy0): failed to get link speed/duplex
[  638.463100][T17526] bond13: (slave dummy0): failed to get link speed/duplex
[  638.507206][T23578] Bluetooth: MGMT ver 1.23
[  638.507658][T23578] Bluetooth: hci1: too big key_count value 29096
[  638.574144][T17526] bond13: (slave dummy0): failed to get link speed/duplex
[  638.684097][   T12] bond13: (slave dummy0): failed to get link speed/duplex
[  638.745015][T23586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6793'.
[  638.795482][   T12] bond13: (slave dummy0): failed to get link speed/duplex
[  638.904621][   T12] bond13: (slave dummy0): failed to get link speed/duplex
[  639.013250][T17526] bond13: (slave dummy0): failed to get link speed/duplex
[  639.045011][T23595] loop7: detected capacity change from 0 to 16
[  639.048348][T23595] MTD: Attempt to mount non-MTD device "/dev/loop7"
[  639.930556][T23629] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6812'.
[  639.930704][T23629] 0{X: renamed from gretap0 (while UP)
[  639.939126][T23629] 0{X: left promiscuous mode
[  639.942738][T23629] 0{X: entered allmulticast mode
[  640.514321][T23650] xt_hashlimit: size too large, truncated to 1048576
[  640.938521][T23654] loop5: detected capacity change from 0 to 32768
[  641.028064][   T34] audit: type=1800 audit(1790641612.103:96): pid=23654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6821" name="file1" dev="loop5" ino=8 res=0 errno=0
[  641.047279][T23656] loop1: detected capacity change from 0 to 512
[  641.056294][T23656] EXT4-fs (loop1): Test dummy encryption mode enabled
[  641.087935][T23656] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  641.126615][T23656] jffs2: notice: (23656) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  641.238175][T23664] loop7: detected capacity change from 0 to 4096
[  641.278459][T23664] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  641.292086][T23664] ntfs3(loop7): Failed to load $Extend (-22).
[  641.292149][T23664] ntfs3(loop7): Failed to initialize $Extend.
[  641.481300][ T5597] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  641.968250][T23680] loop1: detected capacity change from 0 to 512
[  641.981292][T23680] EXT4-fs (loop1): Test dummy encryption mode enabled
[  642.028722][T23680] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  642.046446][T23680] jffs2: notice: (23680) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  642.153874][ T5597] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  642.576375][T23690] loop5: detected capacity change from 0 to 16
[  642.586607][T23690] erofs (device loop5): invalid ishare xattr prefix id 0
[  642.774964][T23688] loop1: detected capacity change from 0 to 32768
[  643.046622][   T13] net_ratelimit: 36 callbacks suppressed
[  643.046737][   T13] bond13: (slave dummy0): failed to get link speed/duplex
[  643.107945][T23697] xt_hashlimit: size too large, truncated to 1048576
[  643.160800][   T12] bond13: (slave dummy0): failed to get link speed/duplex
[  643.264956][   T12] bond13: (slave dummy0): failed to get link speed/duplex
[  643.377713][T17526] bond13: (slave dummy0): failed to get link speed/duplex
[  643.483457][T17526] bond13: (slave dummy0): failed to get link speed/duplex
[  643.593315][ T5661] bond13: (slave dummy0): failed to get link speed/duplex
[  643.684741][T23713] jffs2: notice: (23713) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  643.702779][T23713] loop5: detected capacity change from 0 to 256
[  643.705925][T17526] bond13: (slave dummy0): failed to get link speed/duplex
[  643.813243][ T5661] bond13: (slave dummy0): failed to get link speed/duplex
[  643.923357][   T12] bond13: (slave dummy0): failed to get link speed/duplex
[  644.020642][T23716] loop1: detected capacity change from 0 to 4096
[  644.034430][T17526] bond13: (slave dummy0): failed to get link speed/duplex
[  644.152165][T23716] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  644.220313][   T34] audit: type=1800 audit(1790641615.293:97): pid=23716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6845" name="file1" dev="loop1" ino=34 res=0 errno=0
[  644.561487][T23728] loop5: detected capacity change from 0 to 4096
[  644.567210][T23728] EXT4-fs: Ignoring removed nobh option
[  644.567289][T23728] EXT4-fs: Ignoring removed bh option
[  644.576078][T23728] EXT4-fs (loop5): Test dummy encryption mode enabled
[  644.590902][T23728] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  644.600011][   T34] audit: type=1800 audit(1790641615.673:98): pid=23728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6849" name="file1" dev="loop5" ino=15 res=0 errno=0
[  644.832210][T23727] loop1: detected capacity change from 0 to 32768
[  645.271618][T23740] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  645.382944][T10931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  645.517766][T23743] EXT4-fs (loop1): Test dummy encryption mode enabled
[  645.555755][T23743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  645.674994][T23743] jffs2: notice: (23743) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  645.776560][ T5597] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  645.949793][T17526] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  646.239495][T23767] set_capacity_and_notify: 2 callbacks suppressed
[  646.243364][T23767] loop7: detected capacity change from 0 to 4096
[  646.248797][T23767] EXT4-fs: Ignoring removed nobh option
[  646.254295][T23767] EXT4-fs: Ignoring removed bh option
[  646.260614][T23767] EXT4-fs (loop7): Test dummy encryption mode enabled
[  646.279547][T23767] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  646.298768][   T34] audit: type=1800 audit(1790641617.373:99): pid=23767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.6860" name="file1" dev="loop7" ino=19 res=0 errno=0
[  646.902792][T11585] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  648.103765][   T13] net_ratelimit: 37 callbacks suppressed
[  648.103827][   T13] bond13: (slave dummy0): failed to get link speed/duplex
[  648.213854][ T5661] bond13: (slave dummy0): failed to get link speed/duplex
[  648.324327][ T5661] bond13: (slave dummy0): failed to get link speed/duplex
[  648.433942][   T12] bond13: (slave dummy0): failed to get link speed/duplex
[  648.543918][   T12] bond13: (slave dummy0): failed to get link speed/duplex
[  648.653591][ T5427] bond13: (slave dummy0): failed to get link speed/duplex
[  648.763437][ T5427] bond13: (slave dummy0): failed to get link speed/duplex
[  648.858921][T23758] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  648.885760][T17526] bond13: (slave dummy0): failed to get link speed/duplex
[  648.997350][T17526] bond13: (slave dummy0): failed to get link speed/duplex
[  649.108837][T17526] bond13: (slave dummy0): failed to get link speed/duplex
[  649.276523][T23798] bridge_slave_0: left allmulticast mode
[  649.278480][T23798] bridge_slave_0: left promiscuous mode
[  649.280697][T23798] bridge0: port 1(bridge_slave_0) entered disabled state
[  649.311333][T23798] bond0: left allmulticast mode
[  649.313774][T23798] bond_slave_0: left allmulticast mode
[  649.316507][T23798] 0: left allmulticast mode
[  649.319333][T23798] bridge0: port 3(bond0) entered disabled state
[  649.344046][T23798] bridge_slave_1: left allmulticast mode
[  649.380576][T23798] bridge0: port 2(bridge_slave_1) entered disabled state
[  649.456991][T23800] loop7: detected capacity change from 0 to 32768
[  649.614356][T23798] bridge0 (unregistering): left allmulticast mode
[  649.684883][ T5661] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  650.150425][T23818] bridge3: entered promiscuous mode
[  650.240724][T23817] loop1: detected capacity change from 0 to 32768
[  650.644958][T23830] bridge_slave_0: left allmulticast mode
[  650.647139][T23830] bridge_slave_0: left promiscuous mode
[  650.649390][T23830] bridge0: port 1(bridge_slave_0) entered disabled state
[  650.656577][T23830] bridge_slave_1: left allmulticast mode
[  650.658522][T23830] bridge_slave_1: left promiscuous mode
[  650.660835][T23830] bridge0: port 2(bridge_slave_1) entered disabled state
[  651.522053][T23832] loop5: detected capacity change from 0 to 2048
[  651.534144][T23833] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  651.846140][T23841] loop5: detected capacity change from 0 to 512
[  651.851518][T23841] EXT4-fs: Ignoring removed oldalloc option
[  651.867441][T23841] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  651.941188][   T34] audit: type=1800 audit(1790641623.013:100): pid=23845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6891" name="file1" dev="loop5" ino=15 res=0 errno=0
[  652.597813][T23802] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  652.742630][T10931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  652.887898][T23851] overlayfs: overlapping lowerdir path
[  653.015603][T23854] ip6t_rt: `--rt-type 0' required before `--rt-0-*'
[  653.129006][T23862] ip6t_rt: `--rt-type 0' required before `--rt-0-*'
[  653.157590][ T9493] net_ratelimit: 32 callbacks suppressed
[  653.157690][ T9493] bond13: (slave dummy0): failed to get link speed/duplex
[  653.235344][T23865] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6898'.
[  653.363394][ T9493] bond13: (slave dummy0): failed to get link speed/duplex
[  653.473208][ T9493] bond13: (slave dummy0): failed to get link speed/duplex
[  653.587061][ T9493] bond13: (slave dummy0): failed to get link speed/duplex
[  653.684228][T23879] bridge_slave_0: left allmulticast mode
[  653.687902][T23879] bridge_slave_0: left promiscuous mode
[  653.701146][T23879] bridge0: port 1(bridge_slave_0) entered disabled state
[  653.754560][T23883] veth0: left allmulticast mode
[  653.754603][T23883] veth0: left promiscuous mode
[  653.754782][T23883] bridge0: port 3(veth0) entered disabled state
[  653.766550][T23883] bridge_slave_1: left allmulticast mode
[  653.766617][T23883] bridge_slave_1: left promiscuous mode
[  653.767143][T23883] bridge0: port 2(bridge_slave_1) entered disabled state
[  653.813922][ T9493] bond13: (slave dummy0): failed to get link speed/duplex
[  653.858134][T23888] netlink: 'syz.1.6906': attribute type 1 has an invalid length.
[  653.875522][T23890] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6907'.
[  653.914340][T23892] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6906'.
[  653.924325][T23892] 8021q: adding VLAN 0 to HW filter on device bond14
[  653.943209][ T5661] bond13: (slave dummy0): failed to get link speed/duplex
[  653.954426][T23888] bridge0: entered promiscuous mode
[  654.073182][ T9493] bond13: (slave dummy0): failed to get link speed/duplex
[  654.183129][ T9493] bond13: (slave dummy0): failed to get link speed/duplex
[  654.292732][T23899] loop5: detected capacity change from 0 to 2048
[  654.293442][ T9493] bond13: (slave dummy0): failed to get link speed/duplex
[  654.359912][T23899] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  654.403872][ T5661] bond13: (slave dummy0): failed to get link speed/duplex
[  654.435693][T23899] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  654.435927][T23899] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[  654.435969][T23899] EXT4-fs (loop5): This should not happen!! Data will be lost
[  654.435969][T23899] 
[  654.435983][T23899] EXT4-fs (loop5): Total free blocks count 0
[  654.435993][T23899] EXT4-fs (loop5): Free/Dirty block details
[  654.436004][T23899] EXT4-fs (loop5): free_blocks=2415919504
[  654.436023][T23899] EXT4-fs (loop5): dirty_blocks=16
[  654.436032][T23899] EXT4-fs (loop5): Block reservation details
[  654.436041][T23899] EXT4-fs (loop5): i_reserved_data_blocks=1
[  654.498615][T10931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  654.550158][T23909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6914'.
[  654.743836][T23916] netlink: 'syz.1.6915': attribute type 1 has an invalid length.
[  654.806894][T23920] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6915'.
[  654.866395][T23920] 8021q: adding VLAN 0 to HW filter on device bond15
[  654.907405][T23916] bridge7: entered promiscuous mode
[  655.495958][T23932] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  655.766191][T23943] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6925'.
[  656.401273][T23970] netlink: 'syz.1.6932': attribute type 1 has an invalid length.
[  656.453200][T23970] bridge8: entered promiscuous mode
[  656.515761][T23968] 8021q: adding VLAN 0 to HW filter on device bond17
[  656.824768][T23983] 8021q: adding VLAN 0 to HW filter on device bond16
[  656.842249][T23983] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6937'.
[  656.849950][T23981] netlink: 'syz.5.6935': attribute type 1 has an invalid length.
[  656.855963][T23983] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6937'.
[  656.875377][T23981] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6935'.
[  656.884907][T23983] 8021q: adding VLAN 0 to HW filter on device bond0
[  656.897713][T23983] bond16: (slave bond0): making interface the new active one
[  656.911799][T23983] bond16: (slave bond0): Enslaving as an active interface with an up link
[  656.917538][T23981] 8021q: adding VLAN 0 to HW filter on device bond18
[  657.042272][T23983] bond16 (unregistering): (slave bond0): Releasing active interface
[  657.060085][T23983] bond16 (unregistering): Released all slaves
[  657.274786][T23993] loop1: detected capacity change from 0 to 8192
[  657.290373][T23993] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  657.865987][T24013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  657.986164][T24015] loop5: detected capacity change from 0 to 8192
[  657.993703][T24015] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  658.212037][T24023] batman_adv: batadv0: Adding interface: syzkaller0
[  658.214708][T24023] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (299) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  658.214735][T24023] batman_adv: batadv0: Interface activated: syzkaller0
[  658.224708][   T12] net_ratelimit: 30 callbacks suppressed
[  658.224790][   T12] bond13: (slave dummy0): failed to get link speed/duplex
[  658.334810][ T5661] bond13: (slave dummy0): failed to get link speed/duplex
[  658.454682][ T5427] bond13: (slave dummy0): failed to get link speed/duplex
[  658.502695][T24027] loop5: detected capacity change from 0 to 8192
[  658.512829][T24027] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  658.565318][ T5661] bond13: (slave dummy0): failed to get link speed/duplex
[  658.638110][T24032] loop1: detected capacity change from 0 to 512
[  658.651744][T24032] EXT4-fs: Ignoring removed nobh option
[  658.661258][T24032] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  658.670132][T24032] EXT4-fs (loop1): 1 truncate cleaned up
[  658.674113][ T5427] bond13: (slave dummy0): failed to get link speed/duplex
[  658.681428][T24032] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  658.731489][ T5597] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  658.791292][ T5661] bond13: (slave dummy0): failed to get link speed/duplex
[  658.852889][T24034] loop7: detected capacity change from 0 to 8192
[  658.863407][T24034] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  658.893948][ T5661] bond13: (slave dummy0): failed to get link speed/duplex
[  659.005900][ T5427] bond13: (slave dummy0): failed to get link speed/duplex
[  659.114229][ T5661] bond13: (slave dummy0): failed to get link speed/duplex
[  659.150724][T24043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  659.226837][T17526] bond13: (slave dummy0): failed to get link speed/duplex
[  659.755530][T24055] netlink: 'syz.7.6968': attribute type 1 has an invalid length.
[  659.776812][T24053] loop5: detected capacity change from 0 to 8192
[  659.789984][T24053] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  659.901604][T24055] bridge0: entered promiscuous mode
[  659.938798][T24055] bond16: (slave bridge0): making interface the new active one
[  659.939429][T24055] bond16: (slave bridge0): Enslaving as an active interface with an up link
[  660.399788][T24079] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6976'.
[  660.549594][T24085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  660.555108][T24086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  661.487759][T24118] loop1: detected capacity change from 0 to 64
[  661.654770][T24122] hfs: walked past end of dir
[  661.888360][T24135] netlink: 236 bytes leftover after parsing attributes in process `syz.1.7002'.
[  662.009233][T24143] bond0: (slave bond_slave_0): Releasing backup interface
[  662.066763][T24143] bond0: (slave 50): Releasing backup interface
[  662.082190][T24143] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  662.087698][T24143] batman_adv: batadv0: Removing interface: batadv_slave_0
[  662.092215][T24143] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  662.096523][T24143] batman_adv: batadv0: Removing interface: batadv_slave_1
[  662.192518][T24148] loop7: detected capacity change from 0 to 64
[  663.218311][T24180] loop5: detected capacity change from 0 to 1024
[  663.228655][T24180] EXT4-fs: Ignoring removed bh option
[  663.245016][T24180] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  663.294953][T24180] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  663.304348][T17526] net_ratelimit: 33 callbacks suppressed
[  663.304411][T17526] bond13: (slave dummy0): failed to get link speed/duplex
[  663.413164][   T12] bond13: (slave dummy0): failed to get link speed/duplex
[  663.455814][T10931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  663.523123][T17526] bond13: (slave dummy0): failed to get link speed/duplex
[  663.570197][T24185] tipc: Resetting bearer <eth:syzkaller0>
[  663.572727][T24185] tipc: Resetting bearer <eth:syzkaller0>
[  663.633205][   T12] bond13: (slave dummy0): failed to get link speed/duplex
[  663.692676][T24187] bridge0: entered promiscuous mode
[  663.714824][T24179] loop7: detected capacity change from 0 to 32768
[  663.719485][T24179] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.7022 (24179)
[  663.727993][T24179] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  663.728036][T24179] BTRFS info (device loop7): using blake2b checksum algorithm
[  663.743148][T17526] bond13: (slave dummy0): failed to get link speed/duplex
[  663.773809][T24176] loop1: detected capacity change from 0 to 32768
[  663.779785][T24176] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7020 (24176)
[  663.795451][T24176] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  663.799883][T24176] BTRFS info (device loop1): using sha256 checksum algorithm
[  663.856546][   T12] bond13: (slave dummy0): failed to get link speed/duplex
[  663.962448][T24179] BTRFS info (device loop7): enabling ssd optimizations
[  663.962566][T24179] BTRFS info (device loop7): turning on async discard
[  663.962643][T24179] BTRFS info (device loop7): enabling free space tree
[  663.962681][T24179] BTRFS info (device loop7): use zstd compression, level 3
[  663.963495][   T12] bond13: (slave dummy0): failed to get link speed/duplex
[  663.980680][T24176] BTRFS info (device loop1): enabling ssd optimizations
[  663.986750][T24176] BTRFS info (device loop1): turning on async discard
[  663.986802][T24176] BTRFS info (device loop1): enabling free space tree
[  664.073163][   T12] bond13: (slave dummy0): failed to get link speed/duplex
[  664.149106][ T5597] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  664.183652][   T12] bond13: (slave dummy0): failed to get link speed/duplex
[  664.293506][   T12] bond13: (slave dummy0): failed to get link speed/duplex
[  664.339006][   T34] audit: type=1800 audit(1790641635.413:101): pid=24179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7022" name="file1" dev="loop7" ino=260 res=0 errno=0
[  664.846902][T24227] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  664.878952][T24227] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  664.886384][T24227] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  665.002651][T11585] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  665.036517][T24227] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  665.338958][T24227] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  665.507054][T24237] dummy0: left promiscuous mode
[  665.606883][T24235] hsr_slave_0: left promiscuous mode
[  665.624976][T24235] hsr_slave_1: left promiscuous mode
[  666.354196][T24242] loop5: detected capacity change from 0 to 32768
[  666.359858][T24242] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.7033 (24242)
[  666.377341][T24242] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  666.377501][T24242] BTRFS info (device loop5): using sha256 checksum algorithm
[  666.610481][T24242] BTRFS info (device loop5): enabling ssd optimizations
[  666.610589][T24242] BTRFS info (device loop5): turning on async discard
[  666.610675][T24242] BTRFS info (device loop5): enabling free space tree
[  666.700216][T24240] loop7: detected capacity change from 0 to 32768
[  666.704426][T24240] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.7032 (24240)
[  666.711925][T24240] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  666.731647][T24240] BTRFS info (device loop7): using blake2b checksum algorithm
[  666.807231][T10931] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  666.822026][T24240] BTRFS info (device loop7): enabling ssd optimizations
[  666.824633][T24240] BTRFS info (device loop7): turning on async discard
[  666.827671][T24240] BTRFS info (device loop7): enabling free space tree
[  666.830813][T24240] BTRFS info (device loop7): use zstd compression, level 3
[  667.235758][T24244] loop1: detected capacity change from 0 to 32768
[  667.242462][T24244] BTRFS info: device /dev/loop1 (7:1) using temp-fsid 035e45c3-132e-40b8-baf5-00e312ae6bb1
[  667.242952][T24244] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7034 (24244)
[  667.258093][T24244] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  667.258190][T24244] BTRFS info (device loop1): using blake2b checksum algorithm
[  667.292019][   T34] audit: type=1800 audit(1790641638.363:102): pid=24240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7032" name="file1" dev="loop7" ino=260 res=0 errno=0
[  667.413539][T24244] BTRFS info (device loop1): enabling ssd optimizations
[  667.413593][T24244] BTRFS info (device loop1): turning on async discard
[  667.413672][T24244] BTRFS info (device loop1): enabling free space tree
[  667.413707][T24244] BTRFS info (device loop1): use zstd compression, level 3
[  667.881950][T11585] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  667.987222][T24294] tipc: New replicast peer: 255.255.255.255
[  667.988252][T24294] tipc: Enabled bearer <udp:syz1>, priority 10
[  668.038307][ T5597] BTRFS info (device loop1): last unmount of filesystem 035e45c3-132e-40b8-baf5-00e312ae6bb1
[  668.373200][ T5427] net_ratelimit: 34 callbacks suppressed
[  668.373281][ T5427] bond13: (slave dummy0): failed to get link speed/duplex
[  668.386271][T24298] netlink: 'syz.7.7036': attribute type 1 has an invalid length.
[  668.484587][T17526] bond13: (slave dummy0): failed to get link speed/duplex
[  668.512316][T24298] bridge5: entered promiscuous mode
[  668.595788][T17526] bond13: (slave dummy0): failed to get link speed/duplex
[  668.704200][ T5427] bond13: (slave dummy0): failed to get link speed/duplex
[  668.825536][ T5427] bond13: (slave dummy0): failed to get link speed/duplex
[  668.835148][T24315] loop5: detected capacity change from 0 to 64
[  668.957863][ T5427] bond13: (slave dummy0): failed to get link speed/duplex
[  669.014629][T24322] loop7: detected capacity change from 0 to 256
[  669.022721][T24322] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 256)
[  669.074193][ T5427] bond13: (slave dummy0): failed to get link speed/duplex
[  669.185696][T17526] bond13: (slave dummy0): failed to get link speed/duplex
[  669.393949][T17526] bond13: (slave dummy0): failed to get link speed/duplex
[  669.489202][T24327] syzkaller0: entered promiscuous mode
[  669.491742][T24327] syzkaller0: entered allmulticast mode
[  669.752946][T17526] nci: nci_rx_work: unknown MT 0x6
[  669.755193][T24328] netlink: 'syz.1.7047': attribute type 4 has an invalid length.
[  669.755256][T24328] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7047'.
[  671.977517][T24324] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  672.595145][T24328] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  672.761041][T24354] loop5: detected capacity change from 0 to 64
[  672.763821][T24351] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7056'.
[  673.284862][T24369] can: request_module (can-proto-0) failed.
[  673.423656][ T5661] net_ratelimit: 8 callbacks suppressed
[  673.423732][ T5661] bond13: (slave dummy0): failed to get link speed/duplex
[  673.460761][T24377] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7064'.
[  673.534713][ T5427] bond13: (slave dummy0): failed to get link speed/duplex
[  673.644012][ T5661] bond13: (slave dummy0): failed to get link speed/duplex
[  673.756481][ T5427] bond13: (slave dummy0): failed to get link speed/duplex
[  673.863850][ T5661] bond13: (slave dummy0): failed to get link speed/duplex
[  673.973812][ T5661] bond13: (slave dummy0): failed to get link speed/duplex
[  673.981026][T24386] loop1: detected capacity change from 0 to 32768
[  673.991674][T24386] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7068 (24386)
[  674.002068][T24386] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  674.002168][T24386] BTRFS info (device loop1): using blake2b checksum algorithm
[  674.057279][T24386] BTRFS info (device loop1): enabling ssd optimizations
[  674.059764][T24386] BTRFS info (device loop1): turning on async discard
[  674.062266][T24386] BTRFS info (device loop1): enabling free space tree
[  674.065023][T24386] BTRFS info (device loop1): use zstd compression, level 3
[  674.083644][ T5661] bond13: (slave dummy0): failed to get link speed/duplex
[  674.194576][ T5661] bond13: (slave dummy0): failed to get link speed/duplex
[  674.236580][   T34] audit: type=1800 audit(1790641645.313:103): pid=24386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7068" name="file1" dev="loop1" ino=260 res=0 errno=0
[  674.314119][ T5427] bond13: (slave dummy0): failed to get link speed/duplex
[  674.433915][ T5661] bond13: (slave dummy0): failed to get link speed/duplex
[  674.566032][T24388] loop7: detected capacity change from 0 to 32768
[  674.586764][T24388] BTRFS info: device /dev/loop7 (7:7) using temp-fsid 3d807141-d8c4-48ba-b2f2-3c402b3bae50
[  674.591087][T24388] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.7069 (24388)
[  674.611747][ T5597] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  674.683320][T24388] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  674.683920][T24388] BTRFS info (device loop7): using blake2b checksum algorithm
[  674.965858][T24388] BTRFS info (device loop7): enabling ssd optimizations
[  674.968355][T24388] BTRFS info (device loop7): turning on async discard
[  674.971194][T24388] BTRFS info (device loop7): enabling free space tree
[  674.974752][T24388] BTRFS info (device loop7): use zstd compression, level 3
[  674.982185][T24405] loop5: detected capacity change from 0 to 40427
[  674.987240][T24405] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504)
[  674.987275][T24405] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  674.995393][T24405] F2FS-fs (loop5): invalid crc value
[  674.995784][T24405] F2FS-fs (loop5): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root and reserve_node
[  675.089932][T24405] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  675.111019][T24405] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  675.113380][T24405] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  675.121569][   T34] audit: type=1800 audit(1790641646.193:104): pid=24405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7070" name="file1" dev="loop5" ino=10 res=0 errno=0
[  675.129372][   T34] audit: type=1800 audit(1790641646.213:105): pid=24405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7070" name="file1" dev="loop5" ino=10 res=0 errno=0
[  675.141325][T24405] syz.5.7070: attempt to access beyond end of device
[  675.141325][T24405] loop5: rw=8423425, sector=53248, nr_sectors = 8 limit=40427
[  675.184202][T10931] syz-executor: attempt to access beyond end of device
[  675.184202][T10931] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  675.215486][T10931] CPU: 1 UID: 0 PID: 10931 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  675.215520][T10931] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  675.215528][T10931] Call Trace:
[  675.215532][T10931]  <TASK>
[  675.215537][T10931]  dump_stack_lvl+0xe8/0x150
[  675.215556][T10931]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  675.215569][T10931]  f2fs_write_end_bio+0x1211/0x16e0
[  675.215605][T10931]  ? blkg_put+0x22/0x240
[  675.215622][T10931]  __submit_merged_bio+0x258/0x6a0
[  675.215631][T10931]  ? rcu_is_watching+0x16/0xb0
[  675.215643][T10931]  __submit_merged_write_cond+0x3c9/0x4e0
[  675.215655][T10931]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  675.215672][T10931]  f2fs_write_data_pages+0x2a27/0x36f0
[  675.215696][T10931]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  675.215706][T10931]  ? is_bpf_text_address+0x26/0x2b0
[  675.215720][T10931]  ? arch_stack_walk+0xfb/0x150
[  675.215740][T10931]  ? add_lock_to_list+0xc7/0x100
[  675.215751][T10931]  ? lockdep_unlock+0x5c/0xd0
[  675.215761][T10931]  ? __lock_acquire+0x14b9/0x2e50
[  675.215778][T10931]  ? do_raw_spin_lock+0x12b/0x2f0
[  675.215793][T10931]  ? do_raw_spin_unlock+0x4d/0x200
[  675.215803][T10931]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  675.215813][T10931]  do_writepages+0x338/0x560
[  675.215830][T10931]  ? do_raw_spin_unlock+0x4d/0x200
[  675.215842][T10931]  filemap_fdatawrite+0x1e9/0x2f0
[  675.215851][T10931]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  675.215875][T10931]  ? do_raw_spin_unlock+0x4d/0x200
[  675.215886][T10931]  f2fs_sync_dirty_inodes+0x30e/0x830
[  675.215903][T10931]  f2fs_write_checkpoint+0xa3d/0x2710
[  675.215913][T10931]  ? __lock_acquire+0x6df/0x2e50
[  675.215932][T10931]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  675.215966][T10931]  kill_f2fs_super+0x2dd/0x700
[  675.215981][T10931]  ? __pfx_kill_f2fs_super+0x10/0x10
[  675.215995][T10931]  ? call_rcu+0x64d/0x8b0
[  675.216004][T10931]  ? lockdep_hardirqs_on+0x7b/0x110
[  675.216021][T10931]  deactivate_locked_super+0xbc/0x110
[  675.216033][T10931]  cleanup_mnt+0x3d3/0x460
[  675.216047][T10931]  task_work_run+0x1d9/0x270
[  675.216058][T10931]  ? __pfx_task_work_run+0x10/0x10
[  675.216070][T10931]  exit_to_user_mode_loop+0x204/0x770
[  675.216079][T10931]  ? rcu_is_watching+0x16/0xb0
[  675.216089][T10931]  do_syscall_64+0x328/0x520
[  675.216100][T10931]  ? trace_irq_disable+0x3b/0x140
[  675.216107][T10931]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  675.216118][T10931]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  675.216126][T10931] RIP: 0033:0x7f537619f397
[  675.216135][T10931] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  675.216143][T10931] RSP: 002b:00007ffe5cc2cdb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  675.216153][T10931] RAX: 0000000000000000 RBX: 00007f53762344bb RCX: 00007f537619f397
[  675.216159][T10931] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe5cc2ce70
[  675.216164][T10931] RBP: 00007ffe5cc2ce70 R08: 00007ffe5cc2de70 R09: 00000000ffffffff
[  675.216169][T10931] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe5cc2df00
[  675.216174][T10931] R13: 00007f53762344bb R14: 00000000000a4cd9 R15: 00007ffe5cc2df40
[  675.216187][T10931]  </TASK>
[  675.280357][T24410] can: request_module (can-proto-0) failed.
[  675.318297][T10931] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  675.648255][T11585] BTRFS info (device loop7): last unmount of filesystem 3d807141-d8c4-48ba-b2f2-3c402b3bae50
[  675.871847][   T34] audit: type=1804 audit(1790641646.953:106): pid=24436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7075" name="/newroot/2283/cgroup.controllers" dev="tmpfs" ino=11883 res=1 errno=0
[  675.879988][   T34] audit: type=1800 audit(1790641646.953:107): pid=24436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7075" name="cgroup.controllers" dev="tmpfs" ino=11883 res=0 errno=0
[  676.014266][T24440] loop5: detected capacity change from 0 to 64
[  676.160825][T24441] hfs: walked past end of dir
[  676.401253][T24445] loop5: detected capacity change from 0 to 1024
[  676.469334][   T34] audit: type=1800 audit(1790641647.543:108): pid=24445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7080" name="file1" dev="loop5" ino=20 res=0 errno=0
[  676.627275][   T34] audit: type=1800 audit(1790641647.703:109): pid=24448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7080" name="file1" dev="loop5" ino=20 res=0 errno=0
[  677.064778][T24447] loop1: detected capacity change from 0 to 32768
[  677.069430][T24447] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7079 (24447)
[  677.080425][T24447] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  677.080478][T24447] BTRFS info (device loop1): using blake2b checksum algorithm
[  677.103682][T24455] netlink: 14 bytes leftover after parsing attributes in process `syz.7.7073'.
[  677.125058][T24455] bond13: (slave dummy0): Removing an active aggregator
[  677.125345][T24455] bond13: (slave dummy0): Releasing backup interface
[  677.138948][T24469] loop5: detected capacity change from 0 to 64
[  677.200659][T24447] BTRFS info (device loop1): enabling ssd optimizations
[  677.200704][T24447] BTRFS info (device loop1): turning on async discard
[  677.200737][T24447] BTRFS info (device loop1): enabling free space tree
[  677.200821][T24447] BTRFS info (device loop1): use zstd compression, level 3
[  677.270154][T24476] hfs: walked past end of dir
[  677.350335][   T34] audit: type=1804 audit(1790641648.423:110): pid=24479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.7085" name="/newroot/1569/cgroup.controllers" dev="tmpfs" ino=8169 res=1 errno=0
[  677.361178][   T34] audit: type=1800 audit(1790641648.443:111): pid=24479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7085" name="cgroup.controllers" dev="tmpfs" ino=8169 res=0 errno=0
[  677.560695][T24483] loop5: detected capacity change from 0 to 256
[  677.590752][ T5597] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  677.600816][T24483] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 256)
[  677.917897][T24490] loop5: detected capacity change from 0 to 1024
[  678.038983][   T34] audit: type=1800 audit(1790641649.113:112): pid=24490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7090" name="file1" dev="loop5" ino=20 res=0 errno=0
[  678.183387][T24493] loop5: detected capacity change from 0 to 64
[  678.283789][T24494] hfs: walked past end of dir
[  678.461220][T24497] bridge5: entered promiscuous mode
[  678.532641][T24498] EXT4-fs: Ignoring removed bh option
[  678.642411][T24498] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  678.643521][T24498] ext4 filesystem being mounted at /1829/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  679.078315][T24512] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7099'.
[  679.082411][T24512] 1{X: renamed from 30{X (while UP)
[  679.087834][T24512] net_ratelimit: 24 callbacks suppressed
[  679.090516][T24512] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  679.219358][T24517] set_capacity_and_notify: 1 callbacks suppressed
[  679.222319][T24517] loop1: detected capacity change from 0 to 1024
[  679.246072][   T34] kauditd_printk_skb: 2 callbacks suppressed
[  679.246138][   T34] audit: type=1800 audit(1790641650.323:115): pid=24517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7101" name="file1" dev="loop1" ino=20 res=0 errno=0
[  679.686166][T24498] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #15: comm syz.5.7093: lblock 0 mapped to illegal pblock 0 (length 6)
[  679.696203][T24498] EXT4-fs error (device loop5): ext4_ext_remove_space:2977: inode #15: comm syz.5.7093: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  679.714146][T24498] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #15: block 3: comm syz.5.7093: lblock 3 mapped to illegal pblock 3 (length 3)
[  679.721501][T24498] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  679.726363][T24498] EXT4-fs (loop5): This should not happen!! Data will be lost
[  679.726363][T24498] 
[  679.805185][ T1121] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #15: block 8: comm kworker/u10:9: lblock 8 mapped to illegal pblock 8 (length 8)
[  679.822283][ T1121] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  679.831399][ T1121] EXT4-fs (loop5): This should not happen!! Data will be lost
[  679.831399][ T1121] 
[  679.838293][T10931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  680.009137][T24521] loop1: detected capacity change from 0 to 32768
[  680.015302][T24521] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7103 (24521)
[  680.071688][T24521] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  680.071917][T24521] BTRFS info (device loop1): using blake2b checksum algorithm
[  680.336505][T24521] BTRFS info (device loop1): enabling ssd optimizations
[  680.336672][T24521] BTRFS info (device loop1): turning on async discard
[  680.336733][T24521] BTRFS info (device loop1): enabling free space tree
[  680.336823][T24521] BTRFS info (device loop1): use zstd compression, level 3
[  680.462242][T24545] netlink: 5 bytes leftover after parsing attributes in process `syz.7.7106'.
[  680.467181][T24545] 1{X: renamed from 30{X (while UP)
[  680.491007][T24545] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  680.639293][   T34] audit: type=1800 audit(1790641651.713:116): pid=24521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7103" name="file1" dev="loop1" ino=260 res=0 errno=0
[  680.925418][T24552] loop5: detected capacity change from 0 to 1024
[  680.948290][   T34] audit: type=1800 audit(1790641652.023:117): pid=24552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7109" name="file1" dev="loop5" ino=20 res=0 errno=0
[  681.197882][ T5597] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  681.437610][T24556] loop1: detected capacity change from 0 to 32768
[  681.455713][T24556] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7110 (24556)
[  681.471691][T24556] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  681.471739][T24556] BTRFS info (device loop1): using blake2b checksum algorithm
[  681.619796][T24556] BTRFS info (device loop1): enabling ssd optimizations
[  681.624413][T24556] BTRFS info (device loop1): turning on async discard
[  681.624456][T24556] BTRFS info (device loop1): enabling free space tree
[  681.624546][T24556] BTRFS info (device loop1): use zstd compression, level 3
[  681.849872][T24581] loop7: detected capacity change from 0 to 128
[  681.930053][   T34] audit: type=1800 audit(1790641653.003:118): pid=24556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7110" name="file1" dev="loop1" ino=260 res=0 errno=0
[  682.075005][T24558] loop5: detected capacity change from 0 to 32768
[  682.081176][T24558] BTRFS info: device /dev/loop5 (7:5) using temp-fsid d2cd3b45-0469-429f-8de4-686842ed7b91
[  682.102470][T24558] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.7112 (24558)
[  682.124525][T24558] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  682.127864][T24558] BTRFS info (device loop5): using blake2b checksum algorithm
[  682.200064][ T5597] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  682.220246][T24558] BTRFS info (device loop5): enabling ssd optimizations
[  682.222547][T24558] BTRFS info (device loop5): turning on async discard
[  682.226377][T24558] BTRFS info (device loop5): enabling free space tree
[  682.229325][T24558] BTRFS info (device loop5): use zstd compression, level 3
[  682.673601][   T34] audit: type=1800 audit(1790641653.743:119): pid=24607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7112" name="file1" dev="loop5" ino=260 res=0 errno=0
[  682.962904][T24615] loop1: detected capacity change from 0 to 1024
[  682.980437][   T34] audit: type=1800 audit(1790641654.053:120): pid=24615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7123" name="file1" dev="loop1" ino=20 res=0 errno=0
[  682.992881][   T34] audit: type=1800 audit(1790641654.073:121): pid=24615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7123" name="file1" dev="loop1" ino=20 res=0 errno=0
[  683.152863][T10931] BTRFS info (device loop5): last unmount of filesystem d2cd3b45-0469-429f-8de4-686842ed7b91
[  683.262440][T24617] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7125'.
[  683.266516][T24617] 0{X: renamed from 31{X (while UP)
[  683.292488][T24617] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  683.713785][T24631] loop7: detected capacity change from 0 to 128
[  683.788752][T24629] loop1: detected capacity change from 0 to 32768
[  683.824344][   T34] audit: type=1800 audit(1790641654.903:122): pid=24629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7131" name="file1" dev="loop1" ino=7 res=0 errno=0
[  684.072802][T24635] loop5: detected capacity change from 0 to 1024
[  684.081776][T24635] EXT4-fs: Ignoring removed bh option
[  684.103623][T24635] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  684.108688][T24635] ext4 filesystem being mounted at /1834/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  684.207314][T24640] netlink: 5 bytes leftover after parsing attributes in process `syz.7.7134'.
[  684.212667][T24640] 0{X: renamed from 31{X (while UP)
[  684.220033][T24640] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  684.655847][T24646] netlink: 'syz.7.7138': attribute type 21 has an invalid length.
[  684.656071][T24646] netlink: 128 bytes leftover after parsing attributes in process `syz.7.7138'.
[  684.656279][T24646] netlink: 'syz.7.7138': attribute type 4 has an invalid length.
[  684.656336][T24646] netlink: 'syz.7.7138': attribute type 3 has an invalid length.
[  684.656343][T24646] netlink: 3 bytes leftover after parsing attributes in process `syz.7.7138'.
[  684.940057][T24635] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #15: comm syz.5.7124: lblock 0 mapped to illegal pblock 0 (length 6)
[  684.948310][T24635] EXT4-fs error (device loop5): ext4_ext_remove_space:2977: inode #15: comm syz.5.7124: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  684.959626][T24635] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.7124: bg 0: block 112: padding at end of block bitmap is not set
[  684.989931][T24652] netlink: 5 bytes leftover after parsing attributes in process `syz.7.7141'.
[  684.995107][T24652] 1{X: renamed from 30{X (while UP)
[  684.996314][T24635] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #15: block 3: comm syz.5.7124: lblock 3 mapped to illegal pblock 3 (length 1)
[  684.998059][T24635] EXT4-fs error (device loop5): ext4_ext_remove_space:2977: inode #15: comm syz.5.7124: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 4, max 4(4), depth 0(0)
[  685.009413][T24652] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  685.032896][T10931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  685.313623][T24662] loop7: detected capacity change from 0 to 1024
[  685.350457][T24667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7148'.
[  685.353554][T24667] netlink: 'syz.1.7148': attribute type 30 has an invalid length.
[  685.436896][T24667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7148'.
[  685.437067][T24667] netlink: 'syz.1.7148': attribute type 30 has an invalid length.
[  685.577674][T24674] netlink: 5 bytes leftover after parsing attributes in process `syz.7.7149'.
[  685.581525][T24674] 0{X: renamed from 31{X (while UP)
[  685.590677][T24674] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  685.808102][   T34] audit: type=1804 audit(1790641656.883:123): pid=24683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.7154" name="/newroot/1604/cgroup.controllers" dev="tmpfs" ino=8364 res=1 errno=0
[  685.816849][   T34] audit: type=1800 audit(1790641656.903:124): pid=24683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7154" name="cgroup.controllers" dev="tmpfs" ino=8364 res=0 errno=0
[  685.935852][T24692] netlink: 5 bytes leftover after parsing attributes in process `syz.7.7157'.
[  685.938856][T24692] 1{X: renamed from 30{X (while UP)
[  685.946916][T24692] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  686.060176][   T34] audit: type=1804 audit(1790641657.133:125): pid=24699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7161" name="/newroot/2310/cgroup.controllers" dev="tmpfs" ino=12036 res=1 errno=0
[  686.070710][   T34] audit: type=1800 audit(1790641657.153:126): pid=24699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7161" name="cgroup.controllers" dev="tmpfs" ino=12036 res=0 errno=0
[  686.412133][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  686.418619][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  686.619364][T24713] netlink: 5 bytes leftover after parsing attributes in process `syz.5.7165'.
[  686.622527][T24713] 1{X: renamed from 30{X (while UP)
[  686.626371][T24713] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  686.752930][   T34] audit: type=1804 audit(1790641657.823:127): pid=24715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.7166" name="/newroot/1840/cgroup.controllers" dev="tmpfs" ino=9615 res=1 errno=0
[  686.763242][   T34] audit: type=1800 audit(1790641657.833:128): pid=24715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7166" name="cgroup.controllers" dev="tmpfs" ino=9615 res=0 errno=0
[  686.892752][   T34] audit: type=1804 audit(1790641657.963:129): pid=24719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.7168" name="/newroot/1842/cgroup.controllers" dev="tmpfs" ino=9628 res=1 errno=0
[  686.900396][   T34] audit: type=1800 audit(1790641657.983:130): pid=24719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7168" name="cgroup.controllers" dev="tmpfs" ino=9628 res=0 errno=0
[  687.300388][   T34] audit: type=1804 audit(1790641658.373:131): pid=24725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.7173" name="/newroot/1609/cgroup.controllers" dev="tmpfs" ino=8392 res=1 errno=0
[  687.309332][   T34] audit: type=1800 audit(1790641658.373:132): pid=24725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7173" name="cgroup.controllers" dev="tmpfs" ino=8392 res=0 errno=0
[  687.441050][T24727] 0{X: renamed from 31{X (while UP)
[  687.446730][T24727] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  687.573762][T24736] loop5: detected capacity change from 0 to 1024
[  687.734344][T24735] loop1: detected capacity change from 0 to 32768
[  687.891208][T24740] loop5: detected capacity change from 0 to 32768
[  687.995158][T24738] loop7: detected capacity change from 0 to 40427
[  688.006059][T24738] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504)
[  688.006094][T24738] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  688.014356][T24738] F2FS-fs (loop7): invalid crc value
[  688.016703][T24738] F2FS-fs (loop7): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root and reserve_node
[  688.082616][T24738] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  688.092704][T24738] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  688.095295][T24738] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  688.141234][T24738] syz.7.7174: attempt to access beyond end of device
[  688.141234][T24738] loop7: rw=8423425, sector=53248, nr_sectors = 8 limit=40427
[  688.177533][T11585] syz-executor: attempt to access beyond end of device
[  688.177533][T11585] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  688.199400][T11585] CPU: 1 UID: 0 PID: 11585 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  688.199430][T11585] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  688.199437][T11585] Call Trace:
[  688.199442][T11585]  <TASK>
[  688.199446][T11585]  dump_stack_lvl+0xe8/0x150
[  688.199463][T11585]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  688.199476][T11585]  f2fs_write_end_bio+0x1211/0x16e0
[  688.199489][T11585]  ? blkg_put+0x22/0x240
[  688.199504][T11585]  __submit_merged_bio+0x258/0x6a0
[  688.199513][T11585]  ? rcu_is_watching+0x16/0xb0
[  688.199524][T11585]  __submit_merged_write_cond+0x3c9/0x4e0
[  688.199537][T11585]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  688.199577][T11585]  f2fs_write_data_pages+0x2a27/0x36f0
[  688.199602][T11585]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  688.199612][T11585]  ? is_bpf_text_address+0x26/0x2b0
[  688.199626][T11585]  ? arch_stack_walk+0xfb/0x150
[  688.199645][T11585]  ? add_lock_to_list+0xc7/0x100
[  688.199661][T11585]  ? lockdep_unlock+0x5c/0xd0
[  688.199688][T11585]  ? __lock_acquire+0x14b9/0x2e50
[  688.199706][T11585]  ? do_raw_spin_lock+0x12b/0x2f0
[  688.199720][T11585]  ? do_raw_spin_unlock+0x4d/0x200
[  688.199731][T11585]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  688.199741][T11585]  do_writepages+0x338/0x560
[  688.199758][T11585]  ? do_raw_spin_unlock+0x4d/0x200
[  688.199770][T11585]  filemap_fdatawrite+0x1e9/0x2f0
[  688.199779][T11585]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  688.199803][T11585]  ? do_raw_spin_unlock+0x4d/0x200
[  688.199814][T11585]  f2fs_sync_dirty_inodes+0x30e/0x830
[  688.199832][T11585]  f2fs_write_checkpoint+0xa3d/0x2710
[  688.199843][T11585]  ? __lock_acquire+0x6df/0x2e50
[  688.199861][T11585]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  688.199890][T11585]  kill_f2fs_super+0x2dd/0x700
[  688.199904][T11585]  ? __pfx_kill_f2fs_super+0x10/0x10
[  688.199919][T11585]  ? call_rcu+0x64d/0x8b0
[  688.199928][T11585]  ? lockdep_hardirqs_on+0x7b/0x110
[  688.199944][T11585]  deactivate_locked_super+0xbc/0x110
[  688.199956][T11585]  cleanup_mnt+0x3d3/0x460
[  688.199969][T11585]  task_work_run+0x1d9/0x270
[  688.199980][T11585]  ? __pfx_task_work_run+0x10/0x10
[  688.199991][T11585]  exit_to_user_mode_loop+0x204/0x770
[  688.200000][T11585]  ? rcu_is_watching+0x16/0xb0
[  688.200010][T11585]  do_syscall_64+0x328/0x520
[  688.200021][T11585]  ? trace_irq_disable+0x3b/0x140
[  688.200029][T11585]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.200039][T11585]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.200047][T11585] RIP: 0033:0x7f7c01b9f397
[  688.200056][T11585] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  688.200063][T11585] RSP: 002b:00007ffe60ee6798 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  688.200073][T11585] RAX: 0000000000000000 RBX: 00007f7c01c344bb RCX: 00007f7c01b9f397
[  688.200078][T11585] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe60ee6850
[  688.200083][T11585] RBP: 00007ffe60ee6850 R08: 00007ffe60ee7850 R09: 00000000ffffffff
[  688.200089][T11585] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe60ee78e0
[  688.200094][T11585] R13: 00007f7c01c344bb R14: 00000000000a7faf R15: 00007ffe60ee7920
[  688.200106][T11585]  </TASK>
[  688.206759][T11585] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  688.671993][T24755] __nla_validate_parse: 1 callbacks suppressed
[  688.672057][T24755] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7183'.
[  688.672150][T24755] 1{X: renamed from 30{X (while UP)
[  688.687917][T24755] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  688.728086][T24757] loop1: detected capacity change from 0 to 1024
[  688.912398][T24759] loop1: detected capacity change from 0 to 32768
[  689.016133][T24763] xt_CT: You must specify a L4 protocol and not use inversions on it
[  689.540660][T24775] bridge0: entered promiscuous mode
[  689.819542][T24777] loop5: detected capacity change from 0 to 32768
[  689.825133][T24777] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.7192 (24777)
[  689.835280][T24777] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  689.838580][T24777] BTRFS info (device loop5): using blake2b checksum algorithm
[  689.919314][T24777] BTRFS info (device loop5): enabling ssd optimizations
[  689.919357][T24777] BTRFS info (device loop5): turning on async discard
[  689.919400][T24777] BTRFS info (device loop5): enabling free space tree
[  689.919490][T24777] BTRFS info (device loop5): use zstd compression, level 3
[  690.236346][T24773] loop7: detected capacity change from 0 to 32768
[  690.409955][T24798] netlink: 'syz.1.7194': attribute type 4 has an invalid length.
[  690.410317][ T5427] nci: nci_rx_work: unknown MT 0x6
[  690.414746][T24798] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7194'.
[  690.414797][T24798] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  690.557810][T10931] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  691.183900][T24815] netlink: 5 bytes leftover after parsing attributes in process `syz.7.7197'.
[  691.184716][T24815] 0{X: renamed from 31{X (while UP)
[  691.199420][T24815] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  691.351807][T24817] xt_CT: You must specify a L4 protocol and not use inversions on it
[  692.272415][T24821] loop5: detected capacity change from 0 to 32768
[  692.278800][T24821] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.7201 (24821)
[  692.300099][T24821] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  692.303534][T24821] BTRFS info (device loop5): using blake2b checksum algorithm
[  692.366825][T24821] BTRFS info (device loop5): enabling ssd optimizations
[  692.370806][T24821] BTRFS info (device loop5): turning on async discard
[  692.370860][T24821] BTRFS info (device loop5): enabling free space tree
[  692.370886][T24821] BTRFS info (device loop5): use zstd compression, level 3
[  692.990287][T10931] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  693.212399][T24797] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  693.510905][T24849] loop1: detected capacity change from 0 to 1024
[  693.535341][   T34] kauditd_printk_skb: 13 callbacks suppressed
[  693.535423][   T34] audit: type=1800 audit(1790641664.613:146): pid=24849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7207" name="file1" dev="loop1" ino=20 res=0 errno=0
[  693.626665][   T34] audit: type=1800 audit(1790641664.703:147): pid=24851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7207" name="file1" dev="loop1" ino=20 res=0 errno=0
[  693.628954][T24850] netlink: 5 bytes leftover after parsing attributes in process `syz.7.7206'.
[  693.629703][T24850] 1{X: renamed from 30{X (while UP)
[  693.640879][T24850] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  693.667312][T24839] loop5: detected capacity change from 0 to 32768
[  693.756582][   T34] audit: type=1800 audit(1790641664.833:148): pid=24839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7202" name="file1" dev="loop5" ino=7 res=0 errno=0
[  694.075354][   T34] audit: type=1800 audit(1790641665.153:149): pid=24853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7202" name="file1" dev="loop5" ino=7 res=0 errno=0
[  694.821188][T24867] xt_CT: You must specify a L4 protocol and not use inversions on it
[  694.891306][T24871] loop1: detected capacity change from 0 to 1024
[  694.897086][T24871] EXT4-fs: Ignoring removed bh option
[  694.948227][T24871] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  694.948596][T24871] ext4 filesystem being mounted at /2326/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  694.991400][T24879] netlink: 5 bytes leftover after parsing attributes in process `syz.7.7214'.
[  694.998397][T24879] 0{X: renamed from 31{X (while UP)
[  695.007019][T24879] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  695.306441][T24871] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: comm syz.1.7212: lblock 0 mapped to illegal pblock 0 (length 6)
[  695.311407][T24871] EXT4-fs error (device loop1): ext4_ext_remove_space:2977: inode #15: comm syz.1.7212: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  695.318469][T24871] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.7212: bg 0: block 112: padding at end of block bitmap is not set
[  695.337219][ T5597] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  695.384870][T24884] tipc: Resetting bearer <eth:syzkaller0>
[  695.482429][   T34] audit: type=1804 audit(1790641666.553:150): pid=24893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.7219" name="/newroot/1859/cgroup.controllers" dev="tmpfs" ino=9723 res=1 errno=0
[  695.491691][   T34] audit: type=1800 audit(1790641666.573:151): pid=24893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7219" name="cgroup.controllers" dev="tmpfs" ino=9723 res=0 errno=0
[  695.551857][   T34] audit: type=1804 audit(1790641666.623:152): pid=24895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.7220" name="/newroot/1860/cgroup.controllers" dev="tmpfs" ino=9731 res=1 errno=0
[  695.560570][   T34] audit: type=1800 audit(1790641666.643:153): pid=24895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7220" name="cgroup.controllers" dev="tmpfs" ino=9731 res=0 errno=0
[  695.600416][T24897] netlink: 5 bytes leftover after parsing attributes in process `syz.5.7221'.
[  695.605583][T24897] 1{X: renamed from 30{X (while UP)
[  695.610492][T24897] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  697.095564][T24910] loop7: detected capacity change from 0 to 64
[  697.162012][T24911] hfs: walked past end of dir
[  698.094910][   T34] audit: type=1804 audit(1790641669.173:154): pid=24915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.7226" name="/newroot/1630/cgroup.controllers" dev="tmpfs" ino=8515 res=1 errno=0
[  698.107673][   T34] audit: type=1800 audit(1790641669.183:155): pid=24915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7226" name="cgroup.controllers" dev="tmpfs" ino=8515 res=0 errno=0
[  698.392883][T24886] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  698.492568][T24925] loop1: detected capacity change from 0 to 1024
[  698.497660][T24925] EXT4-fs: Ignoring removed bh option
[  698.515044][T24925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  698.520454][T24925] ext4 filesystem being mounted at /2328/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  698.532067][T24925] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: comm syz.1.7230: lblock 0 mapped to illegal pblock 0 (length 6)
[  698.537463][T24925] EXT4-fs error (device loop1): ext4_ext_remove_space:2977: inode #15: comm syz.1.7230: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  698.560230][   T34] audit: type=1800 audit(1790641669.613:156): pid=24925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7230" name="file1" dev="loop1" ino=15 res=0 errno=0
[  698.596998][ T5597] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  698.760706][   T34] audit: type=1804 audit(1790641669.833:157): pid=24932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.7233" name="/newroot/1864/cgroup.controllers" dev="tmpfs" ino=9754 res=1 errno=0
[  698.761078][   T34] audit: type=1800 audit(1790641669.833:158): pid=24932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7233" name="cgroup.controllers" dev="tmpfs" ino=9754 res=0 errno=0
[  698.807010][T24934] loop1: detected capacity change from 0 to 64
[  698.967643][T24934] hfs: walked past end of dir
[  698.998681][T24939] loop5: detected capacity change from 0 to 1024
[  699.004868][T24939] EXT4-fs: Ignoring removed bh option
[  699.036710][T24939] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  699.041591][T24939] ext4 filesystem being mounted at /1866/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  699.604997][T24939] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #15: comm syz.5.7235: lblock 0 mapped to illegal pblock 0 (length 6)
[  699.611000][T24939] EXT4-fs error (device loop5): ext4_ext_remove_space:2977: inode #15: comm syz.5.7235: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  699.620927][T24939] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #15: block 3: comm syz.5.7235: lblock 3 mapped to illegal pblock 3 (length 3)
[  699.633632][T24939] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  699.633683][T24939] EXT4-fs (loop5): This should not happen!! Data will be lost
[  699.633683][T24939] 
[  699.696321][   T29] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #15: block 8: comm kworker/u9:1: lblock 8 mapped to illegal pblock 8 (length 8)
[  699.703395][   T29] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  699.708286][   T29] EXT4-fs (loop5): This should not happen!! Data will be lost
[  699.708286][   T29] 
[  699.744468][T10931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  700.630321][   T34] audit: type=1804 audit(1790641671.703:159): pid=24962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.7240" name="/newroot/1636/cgroup.controllers" dev="tmpfs" ino=8548 res=1 errno=0
[  700.630668][   T34] audit: type=1800 audit(1790641671.703:160): pid=24962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7240" name="cgroup.controllers" dev="tmpfs" ino=8548 res=0 errno=0
[  700.897142][T24966] loop7: detected capacity change from 0 to 64
[  700.920208][T24966] hfs: walked past end of dir
[  701.959596][T24973] loop7: detected capacity change from 0 to 1024
[  701.965410][T24973] EXT4-fs: Ignoring removed bh option
[  701.984406][T24973] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  701.989315][T24973] ext4 filesystem being mounted at /1641/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  702.230749][T24943] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  702.278480][T24973] EXT4-fs error (device loop7): ext4_map_blocks:832: inode #15: comm syz.7.7245: lblock 0 mapped to illegal pblock 0 (length 6)
[  702.291492][T24973] EXT4-fs error (device loop7): ext4_ext_remove_space:2977: inode #15: comm syz.7.7245: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  702.320089][T24973] EXT4-fs error (device loop7): ext4_map_blocks:832: inode #15: block 3: comm syz.7.7245: lblock 3 mapped to illegal pblock 3 (length 3)
[  702.326448][T24973] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  702.331596][T24973] EXT4-fs (loop7): This should not happen!! Data will be lost
[  702.331596][T24973] 
[  702.372742][  T849] EXT4-fs error (device loop7): ext4_map_blocks:832: inode #15: block 8: comm kworker/u10:3: lblock 8 mapped to illegal pblock 8 (length 8)
[  702.383918][  T849] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  702.388651][  T849] EXT4-fs (loop7): This should not happen!! Data will be lost
[  702.388651][  T849] 
[  702.397156][T11585] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  702.524209][T24978] loop7: detected capacity change from 0 to 1024
[  702.544803][   T34] audit: type=1800 audit(1790641673.623:161): pid=24978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7246" name="file1" dev="loop7" ino=20 res=0 errno=0
[  702.952230][T24990] loop7: detected capacity change from 0 to 1024
[  702.957859][T24990] EXT4-fs: Ignoring removed bh option
[  703.018878][T24990] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  703.019704][T24990] ext4 filesystem being mounted at /1646/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  703.078692][T24984] loop5: detected capacity change from 0 to 32768
[  703.129659][   T34] audit: type=1800 audit(1790641674.203:162): pid=24984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7247" name="file1" dev="loop5" ino=7 res=0 errno=0
[  703.224602][T24992] loop1: detected capacity change from 0 to 32768
[  703.240311][T24992] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7253 (24992)
[  703.251056][T24992] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  703.251099][T24992] BTRFS info (device loop1): using sha256 checksum algorithm
[  703.380707][T24992] BTRFS info (device loop1): enabling ssd optimizations
[  703.385541][T24992] BTRFS info (device loop1): turning on async discard
[  703.385585][T24992] BTRFS info (device loop1): enabling free space tree
[  703.449674][ T5597] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  703.551108][   T34] audit: type=1800 audit(1790641674.623:163): pid=24995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7247" name="file1" dev="loop5" ino=7 res=0 errno=0
[  703.922191][T25013] loop1: detected capacity change from 0 to 1024
[  703.941063][   T34] audit: type=1800 audit(1790641675.013:164): pid=25013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7254" name="file1" dev="loop1" ino=20 res=0 errno=0
[  704.281303][T24990] EXT4-fs error (device loop7): ext4_map_blocks:832: inode #15: comm syz.7.7252: lblock 0 mapped to illegal pblock 0 (length 6)
[  704.316206][T24990] EXT4-fs error (device loop7): ext4_ext_remove_space:2977: inode #15: comm syz.7.7252: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  704.376565][T25022] loop5: detected capacity change from 0 to 1024
[  704.379195][T25022] EXT4-fs: Ignoring removed bh option
[  704.382743][T25020] EXT4-fs error (device loop7): ext4_map_blocks:832: inode #15: block 3: comm syz.7.7252: lblock 3 mapped to illegal pblock 3 (length 3)
[  704.388075][T25020] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  704.392026][T25020] EXT4-fs (loop7): This should not happen!! Data will be lost
[  704.392026][T25020] 
[  704.439542][T25022] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  704.440881][   T29] EXT4-fs error (device loop7): ext4_map_blocks:832: inode #15: block 8: comm kworker/u9:1: lblock 8 mapped to illegal pblock 8 (length 8)
[  704.443473][T25022] ext4 filesystem being mounted at /1869/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  704.444630][   T29] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  704.444716][   T29] EXT4-fs (loop7): This should not happen!! Data will be lost
[  704.444716][   T29] 
[  704.490800][T11585] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  705.237664][T10931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  705.452695][T25036] loop5: detected capacity change from 0 to 32768
[  705.459625][T25036] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.7260 (25036)
[  705.468632][T25036] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  705.472314][T25036] BTRFS info (device loop5): using sha256 checksum algorithm
[  705.524819][T25036] BTRFS info (device loop5): enabling ssd optimizations
[  705.527612][T25036] BTRFS info (device loop5): turning on async discard
[  705.530474][T25036] BTRFS info (device loop5): enabling free space tree
[  705.564976][T10931] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  706.106849][T25058] loop5: detected capacity change from 0 to 1024
[  706.267006][T25060] loop5: detected capacity change from 0 to 1024
[  706.270856][T25060] EXT4-fs: Ignoring removed bh option
[  706.296384][T25060] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  706.296493][T25060] ext4 filesystem being mounted at /1875/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  706.552428][T25060] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #15: block 3: comm syz.5.7263: lblock 3 mapped to illegal pblock 3 (length 3)
[  706.557245][T25060] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  706.561256][T25060] EXT4-fs (loop5): This should not happen!! Data will be lost
[  706.561256][T25060] 
[  706.565445][T25060] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #15: block 3: comm syz.5.7263: lblock 3 mapped to illegal pblock 3 (length 1)
[  706.578701][   T34] audit: type=1800 audit(1790641677.653:165): pid=25060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7263" name="file1" dev="loop5" ino=15 res=0 errno=0
[  706.610751][  T849] EXT4-fs error (device loop5): ext4_map_blocks:832: inode #15: block 8: comm kworker/u10:3: lblock 8 mapped to illegal pblock 8 (length 8)
[  706.617085][  T849] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  706.617308][  T849] EXT4-fs (loop5): This should not happen!! Data will be lost
[  706.617308][  T849] 
[  706.645034][T10931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  706.777975][T25065] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7264'.
[  707.015844][T25015] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  707.311445][T25080] tipc: Cannot configure node identity twice
[  707.407845][T25084] tipc: Resetting bearer <eth:syzkaller0>
[  707.445294][T25087] ip6t_rt: `--rt-type 0' required before `--rt-0-*'
[  707.456950][T25085] loop1: detected capacity change from 0 to 1024
[  707.499739][   T34] audit: type=1800 audit(1790641678.573:166): pid=25085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7271" name="file1" dev="loop1" ino=20 res=0 errno=0
[  707.509789][   T34] audit: type=1800 audit(1790641678.593:167): pid=25085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7271" name="file1" dev="loop1" ino=20 res=0 errno=0
[  707.909097][T25076] loop7: detected capacity change from 0 to 32768
[  707.917282][T25076] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.7267 (25076)
[  707.949916][T25076] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  707.954606][T25076] BTRFS info (device loop7): using sha256 checksum algorithm
[  708.108230][T25076] BTRFS info (device loop7): enabling ssd optimizations
[  708.108391][T25076] BTRFS info (device loop7): turning on async discard
[  708.108486][T25076] BTRFS info (device loop7): enabling free space tree
[  708.215746][T11585] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  708.275918][T25087] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  710.742006][T25094] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  710.978068][T25132] syzkaller0: entered promiscuous mode
[  710.981804][T25132] syzkaller0: entered allmulticast mode
[  711.294468][T25141] loop1: detected capacity change from 0 to 32768
[  711.298561][T25141] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7281 (25141)
[  711.313663][T25141] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  711.317732][T25141] BTRFS info (device loop1): using sha256 checksum algorithm
[  711.391724][T25141] BTRFS info (device loop1): enabling ssd optimizations
[  711.396176][T25141] BTRFS info (device loop1): turning on async discard
[  711.399250][T25141] BTRFS info (device loop1): enabling free space tree
[  711.446283][ T5597] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  713.918072][T25133] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  714.308699][T25181] loop5: detected capacity change from 0 to 1024
[  714.312401][T25181] EXT4-fs: Ignoring removed bh option
[  714.391712][T25181] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  714.399206][T25181] ext4 filesystem being mounted at /1884/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  714.962895][T25192] loop7: detected capacity change from 0 to 32768
[  714.968933][T25192] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.7289 (25192)
[  714.980137][T25192] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  714.980188][T25192] BTRFS info (device loop7): using sha256 checksum algorithm
[  715.038464][T25192] BTRFS info (device loop7): enabling ssd optimizations
[  715.038532][T25192] BTRFS info (device loop7): turning on async discard
[  715.038587][T25192] BTRFS info (device loop7): enabling free space tree
[  715.073823][T11585] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  715.913969][T10931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  716.599216][T25243] xt_CT: You must specify a L4 protocol and not use inversions on it
[  716.958561][   T34] audit: type=1804 audit(1790641688.033:168): pid=25256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7302" name="/newroot/2350/cgroup.controllers" dev="tmpfs" ino=12259 res=1 errno=0
[  716.970215][   T34] audit: type=1800 audit(1790641688.053:169): pid=25256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7302" name="cgroup.controllers" dev="tmpfs" ino=12259 res=0 errno=0
[  717.505585][T25264] loop1: detected capacity change from 0 to 32768
[  717.509984][T25264] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7304 (25264)
[  717.522158][T25264] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  717.522207][T25264] BTRFS info (device loop1): using sha256 checksum algorithm
[  717.608442][T25264] BTRFS info (device loop1): enabling ssd optimizations
[  717.608541][T25264] BTRFS info (device loop1): turning on async discard
[  717.608581][T25264] BTRFS info (device loop1): enabling free space tree
[  717.645623][ T5597] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  718.348735][T25295] tipc: Cannot configure node identity twice
[  718.471974][ T5427] nci: nci_rx_work: unknown MT 0x6
[  718.536846][   T34] audit: type=1804 audit(1790641689.613:170): pid=25309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.7310" name="/newroot/1660/cgroup.controllers" dev="tmpfs" ino=8682 res=1 errno=0
[  718.544085][   T34] audit: type=1800 audit(1790641689.623:171): pid=25309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7310" name="cgroup.controllers" dev="tmpfs" ino=8682 res=0 errno=0
[  721.130215][T25299] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  721.342368][T25323] syzkaller0: entered promiscuous mode
[  721.348879][T25323] syzkaller0: entered allmulticast mode
[  721.617910][   T34] audit: type=1804 audit(1790641692.693:172): pid=25335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7317" name="/newroot/2355/cgroup.controllers" dev="tmpfs" ino=12291 res=1 errno=0
[  721.625427][   T34] audit: type=1800 audit(1790641692.703:173): pid=25335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7317" name="cgroup.controllers" dev="tmpfs" ino=12291 res=0 errno=0
[  725.122290][T25359] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  725.380172][T25382] syzkaller0: entered promiscuous mode
[  725.382084][T25382] syzkaller0: entered allmulticast mode
[  725.491802][   T34] audit: type=1804 audit(1790641696.563:174): pid=25383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.7324" name="/newroot/1895/cgroup.controllers" dev="tmpfs" ino=9929 res=1 errno=0
[  725.491855][   T34] audit: type=1800 audit(1790641696.563:175): pid=25383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7324" name="cgroup.controllers" dev="tmpfs" ino=9929 res=0 errno=0
[  725.650256][T25385] loop1: detected capacity change from 0 to 1024
[  725.661786][T25385] EXT4-fs: Ignoring removed bh option
[  725.765680][T25385] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  725.765993][T25385] ext4 filesystem being mounted at /2358/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  726.154046][T25388] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  726.172855][T25385] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.7326: bg 0: block 112: padding at end of block bitmap is not set
[  726.178714][T25385] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: block 3: comm syz.1.7326: lblock 3 mapped to illegal pblock 3 (length 1)
[  726.184007][T25385] EXT4-fs error (device loop1): ext4_ext_remove_space:2977: inode #15: comm syz.1.7326: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  726.225717][ T5597] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  728.388885][   T34] audit: type=1804 audit(1790641699.463:176): pid=25423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7333" name="/newroot/2361/cgroup.controllers" dev="tmpfs" ino=12325 res=1 errno=0
[  728.397147][   T34] audit: type=1800 audit(1790641699.483:177): pid=25423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7333" name="cgroup.controllers" dev="tmpfs" ino=12325 res=0 errno=0
[  728.580047][T25426] loop1: detected capacity change from 0 to 1024
[  728.593647][T25426] EXT4-fs: Ignoring removed bh option
[  728.628930][T25426] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  728.629594][T25426] ext4 filesystem being mounted at /2362/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  729.149293][T25426] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: block 3: comm syz.1.7334: lblock 3 mapped to illegal pblock 3 (length 3)
[  729.154501][T25426] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  729.158527][T25426] EXT4-fs (loop1): This should not happen!! Data will be lost
[  729.158527][T25426] 
[  729.194358][  T849] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: block 8: comm kworker/u10:3: lblock 8 mapped to illegal pblock 8 (length 8)
[  729.197335][  T849] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  729.197416][  T849] EXT4-fs (loop1): This should not happen!! Data will be lost
[  729.197416][  T849] 
[  729.222337][ T5597] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  729.444524][T25433] syzkaller0: entered promiscuous mode
[  729.446491][T25433] syzkaller0: entered allmulticast mode
[  731.257634][T25418] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  731.919766][T25449] loop5: detected capacity change from 0 to 1024
[  731.925886][T25449] EXT4-fs: Ignoring removed bh option
[  731.965764][T25449] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  731.965845][T25449] ext4 filesystem being mounted at /1901/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  732.105412][T25458] loop7: detected capacity change from 0 to 1024
[  732.121269][T25458] EXT4-fs: Ignoring removed bh option
[  732.123680][   T34] audit: type=1804 audit(1790641703.193:178): pid=25457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7340" name="/newroot/2364/cgroup.controllers" dev="tmpfs" ino=12344 res=1 errno=0
[  732.123707][   T34] audit: type=1800 audit(1790641703.193:179): pid=25457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7340" name="cgroup.controllers" dev="tmpfs" ino=12344 res=0 errno=0
[  732.205829][T25458] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  732.207042][T25458] ext4 filesystem being mounted at /1670/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  732.596177][T10931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  732.869397][T25458] EXT4-fs error (device loop7): ext4_map_blocks:832: inode #15: block 3: comm syz.7.7342: lblock 3 mapped to illegal pblock 3 (length 3)
[  732.875384][T25458] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  732.879382][T25458] EXT4-fs (loop7): This should not happen!! Data will be lost
[  732.879382][T25458] 
[  732.885672][T25458] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #15: block 3: comm syz.7.7342: lblock 3 mapped to illegal pblock 3 (length 1)
[  732.905996][   T34] audit: type=1800 audit(1790641703.983:180): pid=25458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.7342" name="file1" dev="loop7" ino=15 res=0 errno=0
[  732.970957][ T1111] EXT4-fs error (device loop7): ext4_map_blocks:832: inode #15: block 8: comm kworker/u9:5: lblock 8 mapped to illegal pblock 8 (length 8)
[  732.978915][ T1111] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  732.978981][ T1111] EXT4-fs (loop7): This should not happen!! Data will be lost
[  732.978981][ T1111] 
[  733.005959][T11585] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  733.091113][   T34] audit: type=1804 audit(1790641704.163:181): pid=25480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.7348" name="/newroot/1904/cgroup.controllers" dev="tmpfs" ino=9982 res=1 errno=0
[  733.091190][   T34] audit: type=1800 audit(1790641704.163:182): pid=25480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7348" name="cgroup.controllers" dev="tmpfs" ino=9982 res=0 errno=0
[  733.120663][T25478] syzkaller0: entered promiscuous mode
[  733.122556][T25478] syzkaller0: entered allmulticast mode
[  733.363816][   T34] audit: type=1804 audit(1790641704.443:183): pid=25485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.7349" name="/newroot/1672/cgroup.controllers" dev="tmpfs" ino=8752 res=1 errno=0
[  733.381009][   T34] audit: type=1800 audit(1790641704.463:184): pid=25485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7349" name="cgroup.controllers" dev="tmpfs" ino=8752 res=0 errno=0
[  733.592058][T25489] loop5: detected capacity change from 0 to 1024
[  733.596971][T25489] EXT4-fs: Ignoring removed bh option
[  733.680494][T25489] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  733.685479][T25489] ext4 filesystem being mounted at /1905/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  734.197326][T10931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  734.904158][T25501] loop5: detected capacity change from 0 to 32768
[  735.017923][   T34] audit: type=1800 audit(1790641706.083:185): pid=25501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7352" name="file1" dev="loop5" ino=7 res=0 errno=0
[  735.232598][   T34] audit: type=1800 audit(1790641706.303:186): pid=25502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7352" name="file1" dev="loop5" ino=7 res=0 errno=0
[  735.952361][T25504] loop1: detected capacity change from 0 to 1024
[  735.957215][T25504] EXT4-fs: Ignoring removed bh option
[  735.971547][T25504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  735.977212][T25504] ext4 filesystem being mounted at /2367/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  736.270638][T25504] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: block 3: comm syz.1.7354: lblock 3 mapped to illegal pblock 3 (length 3)
[  736.277942][T25504] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  736.282199][T25504] EXT4-fs (loop1): This should not happen!! Data will be lost
[  736.282199][T25504] 
[  736.287190][T25504] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #15: block 3: comm syz.1.7354: lblock 3 mapped to illegal pblock 3 (length 1)
[  736.292547][   T34] audit: type=1800 audit(1790641707.363:187): pid=25504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7354" name="file1" dev="loop1" ino=15 res=0 errno=0
[  736.325369][ T1112] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: block 8: comm kworker/u10:8: lblock 8 mapped to illegal pblock 8 (length 8)
[  736.330543][ T1112] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  736.330585][ T1112] EXT4-fs (loop1): This should not happen!! Data will be lost
[  736.330585][ T1112] 
[  736.340367][ T5597] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  736.454792][T25522] syzkaller0: entered promiscuous mode
[  736.456747][T25522] syzkaller0: entered allmulticast mode
[  736.517796][T25523] loop7: detected capacity change from 0 to 1024
[  736.524541][T25523] EXT4-fs: Ignoring removed bh option
[  736.539348][T25523] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  736.539433][T25523] ext4 filesystem being mounted at /1676/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  737.059643][T25523] EXT4-fs error (device loop7): ext4_map_blocks:832: inode #15: block 3: comm syz.7.7359: lblock 3 mapped to illegal pblock 3 (length 3)
[  737.064711][T25523] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  737.068770][T25523] EXT4-fs (loop7): This should not happen!! Data will be lost
[  737.068770][T25523] 
[  737.102888][   T28] EXT4-fs error (device loop7): ext4_map_blocks:832: inode #15: block 8: comm kworker/u10:0: lblock 8 mapped to illegal pblock 8 (length 8)
[  737.107962][   T28] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  737.107996][   T28] EXT4-fs (loop7): This should not happen!! Data will be lost
[  737.107996][   T28] 
[  737.117459][T11585] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  739.327596][   T34] kauditd_printk_skb: 2 callbacks suppressed
[  739.327651][   T34] audit: type=1804 audit(1790641710.403:190): pid=25555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.7367" name="/newroot/1911/cgroup.controllers" dev="tmpfs" ino=10027 res=1 errno=0
[  739.339494][   T34] audit: type=1800 audit(1790641710.423:191): pid=25555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7367" name="cgroup.controllers" dev="tmpfs" ino=10027 res=0 errno=0
[  739.448047][T25553] loop1: detected capacity change from 0 to 1024
[  739.456862][T25553] EXT4-fs: Ignoring removed bh option
[  739.506954][T25553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  739.510047][T25553] ext4 filesystem being mounted at /2370/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  739.555512][T25553] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: block 3: comm syz.1.7364: lblock 3 mapped to illegal pblock 3 (length 3)
[  739.560530][T25553] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  739.565718][T25553] EXT4-fs (loop1): This should not happen!! Data will be lost
[  739.565718][T25553] 
[  739.569866][T25553] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #15: block 3: comm syz.1.7364: lblock 3 mapped to illegal pblock 3 (length 1)
[  739.575577][   T34] audit: type=1800 audit(1790641710.653:192): pid=25553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7364" name="file1" dev="loop1" ino=15 res=0 errno=0
[  739.689827][ T1121] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: block 8: comm kworker/u10:9: lblock 8 mapped to illegal pblock 8 (length 8)
[  739.693219][ T1121] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  739.693285][ T1121] EXT4-fs (loop1): This should not happen!! Data will be lost
[  739.693285][ T1121] 
[  739.737098][ T5597] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  739.956469][   T34] audit: type=1804 audit(1790641711.033:193): pid=25584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.7374" name="/newroot/1681/cgroup.controllers" dev="tmpfs" ino=8805 res=1 errno=0
[  739.956521][   T34] audit: type=1800 audit(1790641711.033:194): pid=25584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7374" name="cgroup.controllers" dev="tmpfs" ino=8805 res=0 errno=0
[  740.079134][T25589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7377'.
[  740.246140][T25595] xt_CT: You must specify a L4 protocol and not use inversions on it
[  740.331043][T25593] loop1: detected capacity change from 0 to 1024
[  740.334874][T25593] EXT4-fs: Ignoring removed bh option
[  740.361704][T25593] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  740.361893][T25593] ext4 filesystem being mounted at /2374/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  741.155353][ T5597] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  741.211525][   T34] audit: type=1804 audit(1790641712.283:195): pid=25614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7383" name="/newroot/2375/cgroup.controllers" dev="tmpfs" ino=12408 res=1 errno=0
[  741.220251][   T34] audit: type=1800 audit(1790641712.303:196): pid=25614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7383" name="cgroup.controllers" dev="tmpfs" ino=12408 res=0 errno=0
[  741.388512][T25620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7385'.
[  741.512807][T25624] xt_CT: You must specify a L4 protocol and not use inversions on it
[  741.792326][T25634] loop5: detected capacity change from 0 to 1024
[  741.799031][T25634] EXT4-fs: Ignoring removed bh option
[  741.817348][T25634] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  741.823752][T25634] ext4 filesystem being mounted at /1919/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  742.002929][   T34] audit: type=1804 audit(1790641713.073:197): pid=25639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7391" name="/newroot/2378/cgroup.controllers" dev="tmpfs" ino=12427 res=1 errno=0
[  742.012202][   T34] audit: type=1800 audit(1790641713.073:198): pid=25639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7391" name="cgroup.controllers" dev="tmpfs" ino=12427 res=0 errno=0
[  742.164260][T25632] loop7: detected capacity change from 0 to 32768
[  742.231819][T25643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7393'.
[  742.300519][T25645] tipc: Cannot configure node identity twice
[  742.321098][   T34] audit: type=1800 audit(1790641713.393:199): pid=25632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7389" name="file1" dev="loop7" ino=7 res=0 errno=0
[  742.497413][T25652] xt_CT: You must specify a L4 protocol and not use inversions on it
[  742.707951][T10931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  742.963718][T25660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7400'.
[  742.966919][T25660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7400'.
[  743.011295][T25662] tipc: Cannot configure node identity twice
[  743.172910][T25668] xt_CT: You must specify a L4 protocol and not use inversions on it
[  743.186554][T25666] loop5: detected capacity change from 0 to 1024
[  743.190500][T25666] EXT4-fs: Ignoring removed bh option
[  743.231128][T25666] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  743.231556][T25666] ext4 filesystem being mounted at /1922/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  743.649852][T25677] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7407'.
[  743.650015][T25677] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7407'.
[  744.093343][T25637] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  744.146693][T10931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  744.172597][T25679] loop1: detected capacity change from 0 to 32768
[  744.297740][T25686] xt_CT: You must specify a L4 protocol and not use inversions on it
[  744.829497][T25695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7415'.
[  744.829657][T25695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7415'.
[  745.026545][   T34] kauditd_printk_skb: 6 callbacks suppressed
[  745.029568][   T34] audit: type=1804 audit(1790641716.103:206): pid=25699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.7416" name="/newroot/1926/cgroup.controllers" dev="tmpfs" ino=10115 res=1 errno=0
[  745.039374][   T34] audit: type=1800 audit(1790641716.123:207): pid=25699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7416" name="cgroup.controllers" dev="tmpfs" ino=10115 res=0 errno=0
[  745.169821][T25702] xt_CT: You must specify a L4 protocol and not use inversions on it
[  745.429255][T25706] loop5: detected capacity change from 0 to 256
[  745.438473][T25706] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  745.453581][   T34] audit: type=1800 audit(1790641716.523:208): pid=25706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7421" name="file1" dev="loop5" ino=1048779 res=0 errno=0
[  745.713443][T25714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7425'.
[  745.790924][T25716] loop5: detected capacity change from 0 to 256
[  745.842336][T25710] loop7: detected capacity change from 0 to 32768
[  745.851793][T25716] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  745.858386][   T34] audit: type=1800 audit(1790641716.943:209): pid=25716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7422" name="file1" dev="loop5" ino=1048780 res=0 errno=0
[  745.894287][   T34] audit: type=1804 audit(1790641716.963:210): pid=25718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7426" name="/newroot/2394/cgroup.controllers" dev="tmpfs" ino=12524 res=1 errno=0
[  745.894556][   T34] audit: type=1800 audit(1790641716.973:211): pid=25718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7426" name="cgroup.controllers" dev="tmpfs" ino=12524 res=0 errno=0
[  746.007338][   T34] audit: type=1800 audit(1790641717.083:212): pid=25710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7423" name="file1" dev="loop7" ino=7 res=0 errno=0
[  746.160701][   T34] audit: type=1800 audit(1790641717.233:213): pid=25720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7423" name="file1" dev="loop7" ino=7 res=0 errno=0
[  746.294001][T25722] xt_CT: You must specify a L4 protocol and not use inversions on it
[  746.780863][T25729] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7432'.
[  746.936909][T25738] tipc: Cannot configure node identity twice
[  746.972553][T25741] loop7: detected capacity change from 0 to 256
[  747.049507][T25741] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  747.092559][   T34] audit: type=1800 audit(1790641718.163:214): pid=25741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7429" name="file1" dev="loop7" ino=1048781 res=0 errno=0
[  747.322333][T25747] xt_CT: You must specify a L4 protocol and not use inversions on it
[  747.438877][T25743] loop5: detected capacity change from 0 to 32768
[  747.514519][   T34] audit: type=1800 audit(1790641718.593:215): pid=25743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7435" name="file1" dev="loop5" ino=7 res=0 errno=0
[  747.857945][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  747.859988][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  747.922585][T25754] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7439'.
[  748.142294][T25764] tipc: Cannot configure node identity twice
[  748.260825][T25768] loop5: detected capacity change from 0 to 512
[  748.271260][T25767] loop1: detected capacity change from 0 to 256
[  748.279026][T25767] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  748.285157][T25768] EXT4-fs (loop5): invalid journal inode
[  748.285224][T25768] EXT4-fs (loop5): can't get journal size
[  748.301462][T25768] EXT4-fs (loop5): 1 truncate cleaned up
[  748.302256][T25768] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  748.401264][T10931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  748.416398][T25772] loop7: detected capacity change from 0 to 128
[  748.450116][T25772] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  748.459482][T25772] ext4 filesystem being mounted at /1701/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  748.698076][T11585] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  748.708136][T25782] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  748.809938][T25786] loop1: detected capacity change from 0 to 256
[  748.847636][T25786] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  748.960892][T25795] loop7: detected capacity change from 0 to 256
[  749.003989][T25795] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  749.462242][T25812] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  749.756788][T25828] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.7463'.
[  749.759962][T25828] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.7463'.
[  750.505993][  T126] ==================================================================
[  750.506022][  T126] BUG: KASAN: slab-use-after-free in jfs_lazycommit+0x771/0xac0
[  750.506038][  T126] Read of size 4 at addr ffff8881a4deec94 by task jfsCommit/126
[  750.506045][  T126] 
[  750.506051][  T126] CPU: 1 UID: 0 PID: 126 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) 
[  750.506060][  T126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  750.506066][  T126] Call Trace:
[  750.506070][  T126]  <TASK>
[  750.506075][  T126]  dump_stack_lvl+0xe8/0x150
[  750.506088][  T126]  print_address_description+0x55/0x1e0
[  750.506100][  T126]  ? jfs_lazycommit+0x771/0xac0
[  750.506108][  T126]  print_report+0x58/0x70
[  750.506117][  T126]  kasan_report+0x117/0x150
[  750.506127][  T126]  ? jfs_lazycommit+0x771/0xac0
[  750.506137][  T126]  jfs_lazycommit+0x771/0xac0
[  750.506149][  T126]  ? __pfx_jfs_lazycommit+0x10/0x10
[  750.506162][  T126]  ? __pfx_default_wake_function+0x10/0x10
[  750.506201][  T126]  ? __kthread_parkme+0x71/0x1f0
[  750.506217][  T126]  ? __kthread_parkme+0x199/0x1f0
[  750.506228][  T126]  kthread+0x38b/0x480
[  750.506235][  T126]  ? __pfx_jfs_lazycommit+0x10/0x10
[  750.506243][  T126]  ? __pfx_kthread+0x10/0x10
[  750.506250][  T126]  ret_from_fork+0x514/0xb70
[  750.506263][  T126]  ? __pfx_ret_from_fork+0x10/0x10
[  750.506274][  T126]  ? __switch_to+0xc89/0x1420
[  750.506285][  T126]  ? __pfx_kthread+0x10/0x10
[  750.506292][  T126]  ret_from_fork_asm+0x1a/0x30
[  750.506305][  T126]  </TASK>
[  750.506308][  T126] 
[  750.506310][  T126] Allocated by task 25824:
[  750.506315][  T126]  kasan_save_track+0x3e/0x80
[  750.506323][  T126]  __kasan_kmalloc+0x93/0xb0
[  750.506331][  T126]  __kmalloc_cache_noprof+0x321/0x600
[  750.506342][  T126]  jfs_fill_super+0xc2/0xda0
[  750.506351][  T126]  get_tree_bdev_flags+0x430/0x4f0
[  750.506362][  T126]  vfs_get_tree+0x92/0x2a0
[  750.506372][  T126]  do_new_mount+0x319/0xdc0
[  750.506380][  T126]  __se_sys_mount+0x31d/0x420
[  750.506388][  T126]  do_syscall_64+0x166/0x520
[  750.506400][  T126]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  750.506437][  T126] 
[  750.506440][  T126] Freed by task 10931:
[  750.506446][  T126]  kasan_save_track+0x3e/0x80
[  750.506456][  T126]  kasan_save_free_info+0x40/0x50
[  750.506471][  T126]  __kasan_slab_free+0x5c/0x80
[  750.506481][  T126]  kfree+0x1c5/0x650
[  750.506494][  T126]  generic_shutdown_super+0x13d/0x2d0
[  750.506508][  T126]  kill_block_super+0x44/0xa0
[  750.506523][  T126]  deactivate_locked_super+0xbc/0x110
[  750.506534][  T126]  cleanup_mnt+0x3d3/0x460
[  750.506543][  T126]  task_work_run+0x1d9/0x270
[  750.506551][  T126]  exit_to_user_mode_loop+0x204/0x770
[  750.506559][  T126]  do_syscall_64+0x328/0x520
[  750.506569][  T126]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  750.506576][  T126] 
[  750.506578][  T126] The buggy address belongs to the object at ffff8881a4deec00
[  750.506578][  T126]  which belongs to the cache kmalloc-256 of size 256
[  750.506585][  T126] The buggy address is located 148 bytes inside of
[  750.506585][  T126]  freed 256-byte region [ffff8881a4deec00, ffff8881a4deed00)
[  750.506593][  T126] 
[  750.506595][  T126] The buggy address belongs to the physical page:
[  750.506600][  T126] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1a4dee
[  750.506608][  T126] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  750.506614][  T126] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  750.506622][  T126] page_type: f5(slab)
[  750.506630][  T126] raw: 057ff00000000040 ffff888100041b40 dead000000000100 dead000000000122
[  750.506637][  T126] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  750.506644][  T126] head: 057ff00000000040 ffff888100041b40 dead000000000100 dead000000000122
[  750.506650][  T126] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  750.506656][  T126] head: 057ff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[  750.506663][  T126] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  750.506667][  T126] page dumped because: kasan: bad access detected
[  750.506672][  T126] page_owner tracks the page as allocated
[  750.506675][  T126] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 22380, tgid 22379 (syz.5.6328), ts 592447164048
[  750.506688][  T126]  post_alloc_hook+0x1f9/0x250
[  750.506698][  T126]  get_page_from_freelist+0x2209/0x2280
[  750.506706][  T126]  __alloc_frozen_pages_noprof+0x217/0x5a0
[  750.506712][  T126]  allocate_slab+0x7d/0x620
[  750.506721][  T126]  refill_objects+0x2d5/0x350
[  750.506732][  T126]  __pcs_replace_empty_main+0x2c8/0x6c0
[  750.506744][  T126]  __kmalloc_noprof+0x47b/0x720
[  750.506759][  T126]  hash_ipportnet6_add+0x2608/0x3290
[  750.506772][  T126]  hash_ipportnet6_uadt+0xa57/0xde0
[  750.506784][  T126]  call_ad+0x365/0xb50
[  750.506796][  T126]  ip_set_ad+0x82a/0x9d0
[  750.506808][  T126]  nfnetlink_rcv_msg+0xcc2/0x12b0
[  750.506817][  T126]  netlink_rcv_skb+0x226/0x4a0
[  750.506830][  T126]  nfnetlink_rcv+0x2b9/0x28c0
[  750.506836][  T126]  netlink_unicast+0x7bd/0x940
[  750.506843][  T126]  netlink_sendmsg+0x813/0xb40
[  750.506851][  T126] page last free pid 22349 tgid 22346 ts 591153187348 stack trace:
[  750.506857][  T126]  __free_frozen_pages+0xc93/0xd90
[  750.506866][  T126]  rcu_core+0x926/0x1260
[  750.506874][  T126]  handle_softirqs+0x226/0x860
[  750.506883][  T126]  __irq_exit_rcu+0xcb/0x220
[  750.506896][  T126]  irq_exit_rcu+0x9/0x30
[  750.506909][  T126]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  750.506926][  T126]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  750.506938][  T126] 
[  750.506943][  T126] Memory state around the buggy address:
[  750.506950][  T126]  ffff8881a4deeb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  750.506959][  T126]  ffff8881a4deec00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  750.506967][  T126] >ffff8881a4deec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  750.506973][  T126]                          ^
[  750.506980][  T126]  ffff8881a4deed00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  750.506987][  T126]  ffff8881a4deed80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  750.506993][  T126] ==================================================================
[  750.507002][  T126] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  750.717929][  T126] CPU: 1 UID: 0 PID: 126 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) 
[  750.721583][  T126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  750.725613][  T126] Call Trace:
[  750.726993][  T126]  <TASK>
[  750.728214][  T126]  vpanic+0x56d/0xa60
[  750.729844][  T126]  ? __pfx_vpanic+0x10/0x10
[  750.731664][  T126]  panic+0xc5/0xd0
[  750.733162][  T126]  ? __pfx_panic+0x10/0x10
[  750.734643][  T126]  ? jfs_lazycommit+0x771/0xac0
[  750.736207][  T126]  ? jfs_lazycommit+0x771/0xac0
[  750.737726][  T126]  ? jfs_lazycommit+0x771/0xac0
[  750.739219][  T126]  check_panic_on_warn+0x89/0xb0
[  750.740742][  T126]  ? jfs_lazycommit+0x771/0xac0
[  750.742198][  T126]  end_report+0x73/0x170
[  750.743482][  T126]  ? jfs_lazycommit+0x771/0xac0
[  750.744998][  T126]  kasan_report+0x128/0x150
[  750.746429][  T126]  ? jfs_lazycommit+0x771/0xac0
[  750.747890][  T126]  jfs_lazycommit+0x771/0xac0
[  750.749301][  T126]  ? __pfx_jfs_lazycommit+0x10/0x10
[  750.750892][  T126]  ? __pfx_default_wake_function+0x10/0x10
[  750.752673][  T126]  ? __kthread_parkme+0x71/0x1f0
[  750.754133][  T126]  ? __kthread_parkme+0x199/0x1f0
[  750.755689][  T126]  kthread+0x38b/0x480
[  750.757035][  T126]  ? __pfx_jfs_lazycommit+0x10/0x10
[  750.758670][  T126]  ? __pfx_kthread+0x10/0x10
[  750.760120][  T126]  ret_from_fork+0x514/0xb70
[  750.761752][  T126]  ? __pfx_ret_from_fork+0x10/0x10
[  750.763314][  T126]  ? __switch_to+0xc89/0x1420
[  750.764746][  T126]  ? __pfx_kthread+0x10/0x10
[  750.766432][  T126]  ret_from_fork_asm+0x1a/0x30
[  750.767984][  T126]  </TASK>
[  750.769812][  T126] Kernel Offset: disabled
[  750.771179][  T126] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:28:41  Registers:
info registers vcpu 0

CPU#0
RAX=00000000000006bb RBX=ffff888121023c80 RCX=0000000000000838 RDX=0000000000000000
RSI=00000000000006bb RDI=0000000000000838 RBP=ffffc90000007f80 RSP=ffffc90000007eb0
R8 =2d00000000000000 R9 =0000000000080000 R10=0000000000000000 R11=ffffffff81754510
R12=00000000000006bb R13=dffffc0000000000 R14=000000000ffff5ef R15=0000000000000020
RIP=ffffffff81766da9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f1106aaec80 ffffffff 00c00000
GS =0000 ffff88818d6da000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3050fffc CR3=000000011835c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=ffffffffffffff00 ffffffffffffffff XMM03=0000000000000000 ffff000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000021 000000000061642e
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffff000000 XMM09=79726f74616c7567 65722f657261776d
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000000d RBX=000000000000000d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003057300
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=ffffffff8571d9d0
R12=dffffc0000000000 R13=000000000000000a R14=ffffffff9ad310c0 R15=0000000000000000
RIP=ffffffff8571da4c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a8cda000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555645f2a68 CR3=00000001a7562000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffffff0000000000 XMM05=382d656432342d62 3464662d32373437
XMM06=303335336632785c 646975752d796266 XMM07=32785c6b73696466 32785c2f736b6e69
XMM08=00000000ffffffff ffffffffffffffff XMM09=343d736500000000 353a37622f366166
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
