last executing test programs:

2m26.239858946s ago: executing program 2 (id=4611):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)

2m26.239510443s ago: executing program 2 (id=4612):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0389424, &(0x7f00000000c0)={"ad3c50000003000000a0f6001000", 0x0, 0x0, {0x1, 0x2}, {}, 0x5, [0x0, 0xfffffffffffffffd, 0x0, 0xd, 0x8, 0x8, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x2000000000000002]})

2m25.968094905s ago: executing program 2 (id=4616):
r0 = io_uring_setup(0x5b42, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x159})
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b)
sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2m25.668640156s ago: executing program 2 (id=4622):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000001c0)={[{@memory_low}, {@background_gc_off}, {@noquota}, {@compress_cache}, {@data_flush}, {@disable_roll_forward}, {@noinline_xattr}, {@discard}, {@checkpoint_diasble}, {@background_gc_on}, {@resgid}, {@resuid}, {@jqfmt_vfsv1}, {@usrjquota={'usrjquota', 0x3d, '-)$-.%\'*,'}}]}, 0xff, 0x5512, &(0x7f00000079c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

2m25.300140771s ago: executing program 2 (id=4626):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x2, 0xff, 0x0, 0xe}, {0x2d}, {0x6, 0x0, 0x0, 0x7fff7ffc}]})

2m24.796880012s ago: executing program 2 (id=4636):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0000006aac", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2400c044}], 0x1, 0x8800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
sendmsg$nl_route_sched_retired(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f80)=@delchain={0x43c, 0x65, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff2}, {0x5, 0xa}, {0x4, 0xf}}, [@f_tcindex={{0xc}, {0x40c, 0x2, [@TCA_TCINDEX_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x8, 0x4d8, 0xffffffff, 0x8d1, 0x8, 0x9, 0x9, 0x0, 0xfffffff7, 0x4, 0x3, 0x81, 0x8, 0x6, 0x6, 0xd62, 0x6, 0x7, 0x29, 0x5, 0x5, 0x9, 0x2, 0x1000, 0x2, 0x793, 0x4, 0x101, 0xffffdc7a, 0x5, 0x7fff, 0x1, 0x5, 0x4b37, 0x2, 0x4, 0xd9a, 0x1, 0x4e, 0x3, 0x800, 0x9, 0x1, 0x9, 0x1, 0x0, 0x9, 0x8, 0x4e, 0x0, 0x80, 0x10000, 0x80, 0x10000, 0x8, 0x4, 0x5, 0x7, 0x9, 0x2, 0x7fffffff, 0xfcf, 0x7, 0x2, 0x2, 0x4, 0x1000, 0xea, 0x1, 0x9, 0x5, 0x200, 0xfec0, 0xffffe49a, 0x2, 0x4, 0x58e, 0xffffffff, 0x5, 0x6, 0x7f, 0x400, 0x8, 0x80, 0x7, 0x3, 0x6, 0xd, 0x3, 0xce, 0xd, 0x7fffffff, 0x1, 0x6, 0x4, 0x6, 0x3, 0x7f, 0x8001, 0xed4b, 0x68, 0x9, 0xc, 0xffff, 0x9, 0x7, 0xabe1, 0xf97, 0x5, 0x4, 0x80000001, 0x6, 0x7, 0x6, 0x5, 0xfff, 0x3, 0x46, 0x3ff, 0x7e4d, 0x5, 0x0, 0x6, 0x9, 0xf1, 0x4, 0x3, 0x3, 0xb, 0x8, 0x7, 0xa, 0x6, 0x9, 0x2, 0x0, 0x4, 0x5d6e5b73, 0x8, 0x3, 0x1, 0x4a0b, 0x9a0, 0x400, 0x3, 0x0, 0x3, 0x9, 0x401, 0x9e, 0x8000, 0xf8, 0x5, 0x2, 0xffffffff, 0x3, 0x7fffffff, 0x0, 0x2, 0x6, 0x8, 0x7, 0x80000000, 0x74, 0x1, 0x7, 0xa94, 0x3, 0x4, 0x44, 0x0, 0x1, 0x13, 0x5, 0x0, 0x7f, 0x4, 0x818, 0x1, 0x560, 0x6, 0x9, 0x3, 0x4, 0x1ff, 0x4, 0x8001, 0x44, 0x2, 0x9, 0x8, 0x3, 0x8000, 0x100, 0x1, 0x1b35709e, 0x9629, 0x1, 0x5, 0x400, 0x0, 0x0, 0xba9, 0x2, 0x7, 0xe1, 0x4, 0x7, 0x5, 0x2, 0x21, 0xfffffeff, 0x0, 0x2d5b, 0xd, 0x1, 0x1000, 0x9, 0x2a, 0x8, 0x4, 0x9, 0x7, 0x8, 0x5, 0x1, 0x6, 0x6, 0x1, 0x1, 0x80, 0x1, 0x5, 0x0, 0x7fffffff, 0x3ff, 0x2, 0x5, 0x9, 0x8001, 0x8ee, 0x8, 0x4, 0x2, 0x9, 0x8, 0xd, 0x8, 0x7, 0x1, 0x440, 0x1, 0xaa20, 0x5, 0x4]}]}]}}]}, 0x43c}}, 0x4080000)

2m24.540752132s ago: executing program 32 (id=4636):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0000006aac", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2400c044}], 0x1, 0x8800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
sendmsg$nl_route_sched_retired(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f80)=@delchain={0x43c, 0x65, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff2}, {0x5, 0xa}, {0x4, 0xf}}, [@f_tcindex={{0xc}, {0x40c, 0x2, [@TCA_TCINDEX_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x8, 0x4d8, 0xffffffff, 0x8d1, 0x8, 0x9, 0x9, 0x0, 0xfffffff7, 0x4, 0x3, 0x81, 0x8, 0x6, 0x6, 0xd62, 0x6, 0x7, 0x29, 0x5, 0x5, 0x9, 0x2, 0x1000, 0x2, 0x793, 0x4, 0x101, 0xffffdc7a, 0x5, 0x7fff, 0x1, 0x5, 0x4b37, 0x2, 0x4, 0xd9a, 0x1, 0x4e, 0x3, 0x800, 0x9, 0x1, 0x9, 0x1, 0x0, 0x9, 0x8, 0x4e, 0x0, 0x80, 0x10000, 0x80, 0x10000, 0x8, 0x4, 0x5, 0x7, 0x9, 0x2, 0x7fffffff, 0xfcf, 0x7, 0x2, 0x2, 0x4, 0x1000, 0xea, 0x1, 0x9, 0x5, 0x200, 0xfec0, 0xffffe49a, 0x2, 0x4, 0x58e, 0xffffffff, 0x5, 0x6, 0x7f, 0x400, 0x8, 0x80, 0x7, 0x3, 0x6, 0xd, 0x3, 0xce, 0xd, 0x7fffffff, 0x1, 0x6, 0x4, 0x6, 0x3, 0x7f, 0x8001, 0xed4b, 0x68, 0x9, 0xc, 0xffff, 0x9, 0x7, 0xabe1, 0xf97, 0x5, 0x4, 0x80000001, 0x6, 0x7, 0x6, 0x5, 0xfff, 0x3, 0x46, 0x3ff, 0x7e4d, 0x5, 0x0, 0x6, 0x9, 0xf1, 0x4, 0x3, 0x3, 0xb, 0x8, 0x7, 0xa, 0x6, 0x9, 0x2, 0x0, 0x4, 0x5d6e5b73, 0x8, 0x3, 0x1, 0x4a0b, 0x9a0, 0x400, 0x3, 0x0, 0x3, 0x9, 0x401, 0x9e, 0x8000, 0xf8, 0x5, 0x2, 0xffffffff, 0x3, 0x7fffffff, 0x0, 0x2, 0x6, 0x8, 0x7, 0x80000000, 0x74, 0x1, 0x7, 0xa94, 0x3, 0x4, 0x44, 0x0, 0x1, 0x13, 0x5, 0x0, 0x7f, 0x4, 0x818, 0x1, 0x560, 0x6, 0x9, 0x3, 0x4, 0x1ff, 0x4, 0x8001, 0x44, 0x2, 0x9, 0x8, 0x3, 0x8000, 0x100, 0x1, 0x1b35709e, 0x9629, 0x1, 0x5, 0x400, 0x0, 0x0, 0xba9, 0x2, 0x7, 0xe1, 0x4, 0x7, 0x5, 0x2, 0x21, 0xfffffeff, 0x0, 0x2d5b, 0xd, 0x1, 0x1000, 0x9, 0x2a, 0x8, 0x4, 0x9, 0x7, 0x8, 0x5, 0x1, 0x6, 0x6, 0x1, 0x1, 0x80, 0x1, 0x5, 0x0, 0x7fffffff, 0x3ff, 0x2, 0x5, 0x9, 0x8001, 0x8ee, 0x8, 0x4, 0x2, 0x9, 0x8, 0xd, 0x8, 0x7, 0x1, 0x440, 0x1, 0xaa20, 0x5, 0x4]}]}]}}]}, 0x43c}}, 0x4080000)

32.532411856s ago: executing program 1 (id=6528):
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_readahead}], [], 0x6b}})
truncate(&(0x7f0000000240)='./file0\x00', 0x206b12)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0xa3)

32.120570183s ago: executing program 1 (id=6530):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e)

31.960689165s ago: executing program 1 (id=6534):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[{0x10, 0x0, 0xe}, {0x10, 0x110, 0xe}], 0x20}, 0x0)

31.960464374s ago: executing program 1 (id=6535):
r0 = socket$inet(0x2, 0x3, 0x2)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x7f000001}}}}}, 0x0)

31.888497181s ago: executing program 1 (id=6537):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000000200)={0x50}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40800, 0x0)
read$FUSE(r3, &(0x7f0000002ac0)={0x2020}, 0x2020)

31.820158796s ago: executing program 1 (id=6538):
r0 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x20040600)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)

16.805590034s ago: executing program 33 (id=6538):
r0 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x20040600)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)

12.826982124s ago: executing program 4 (id=6821):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

12.537461687s ago: executing program 4 (id=6824):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
io_submit(0x0, 0x4, &(0x7f0000000b00)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x2}, 0x0, 0x0, 0x0])
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
r1 = getpid()
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000280))
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%\xde({F\xfaA:', 0x0)
r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0)

11.579649531s ago: executing program 4 (id=6827):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)={0x54, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x1}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40480c0}, 0x4000004)

11.579181297s ago: executing program 4 (id=6829):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
move_mount(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x100)

11.486042011s ago: executing program 4 (id=6830):
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24004870}, 0x80)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = getpid()
io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f0000000280)={&(0x7f0000000240)={&(0x7f0000000080)="8d981ea1d21e9c323ca7d532cdec0937b316013f0f25553ba24b280ed978b136d7c5e1f61ecbc67ba0bbd43817d8692de4a30854a3bbdd34b11ba9ec35055e", 0x3f, 0x1, 0xe28, 0xfffffffffffffff2}}, 0x1)
r4 = syz_pidfd_open(r3, 0x0)
open_by_handle_at(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="150000"], 0x1)
sendmsg$nl_generic(r2, 0x0, 0x4000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000012c0)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@private1}, 0x0, @in=@private}}, &(0x7f0000000000)=0xe8)
r6 = socket$inet6(0xa, 0x3, 0x6)
getsockopt$sock_cred(r6, 0x1, 0x11, 0x0, &(0x7f00000005c0))
r7 = socket$inet6(0xa, 0x3, 0x5)
r8 = socket$l2tp6(0xa, 0x2, 0x73)
dup2(r8, r7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20)
setsockopt$inet6_opts(r7, 0x29, 0x37, &(0x7f0000000040)=@dstopts={0x62}, 0x8)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r9, 0xffffffffffffffff, 0x0)
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300), 0x1, 0x233, &(0x7f0000000340)="$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")
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x40, &(0x7f00000004c0)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX, @ANYBLOB="2c63726561746f723dbd3d66f12c63726561746f723d64eb8ba92c6e6f6465636f6d706f73652c756d61736b3d3030303030303030303030303030303030303030303032000000003d", @ANYRESHEX, @ANYRESOCT], 0x3, 0x6a4, &(0x7f0000001b40)="$eJzs3U9sHFcdB/DvbDbrbJBS918aEFKtRqqgEYmdVUmQkBoQQjlEKIJLr1biNFY2aeW4KK0Q2QAFiRMn1AOHIhQOPSGEkMoJUc5ISFw4+R6JG4ccAKOZnV2v7Y1jJ7HXbT8faTzv7Zv33m9+nT+7s402wGfW+ddzsJci509cuFXWV+52uit3O9cH5SRTSRpJs79K0U6Kj5Nz6S/5fPliPVzxoHlevfdR0Xz/w06/1qyXavvGVv02GbtlLzk0rBxIMtMv/mfbw24ar1qqcS6tjfeIimHcZcKODxIHk7a6SW+tsfHQ7ts/b4F963b/vrnJdHI4/btr+T4g9dXh4VeGydvy2tTbuzgAAABgt4z9LD/qqfu5n1s5sjfhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKdD0f/NwKJeGoPyTIrB7/+3Rn5TvzXhcB/Te1eq1XefmnQgAAAAAAAAAPBYXryf+7mVI4P6alF95/9SVXmu+vu5vJ2bWchSTuZW5rOc5SxlLsn0yECtW/PLy0tzm3v+MmXP1dXV23XP02N7nl4fV29joOP+T4NNGwEAAAAAAADAZ9aPcn7t+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgPiuRAf1Utzw3K02k0kxxK0ipmhpu3JhrsE/DnSQcAAAAAu69dr48U/+sXVovqM//R6nP/obydG1nOYpbTzUIuV88C+p/6G3/vdbordzvXy2XzwN/4147iqEZM/9nD+Jlnqy2eH/Y4n2/nezmRmVzMUhbz/cxnOQuZybeq0nyKTNdPL6ZX7rYziHVzvOfW1S5ujO3FkXIZ37EqknauZLGK7WQutQahN+rtjo3M9sdWsmHGO2V2itdq28zR5Xpd7tEv6vX+MF3t+cFhRmbr3JfZeHo075tzv8PjZONMc2kMn0E9tzZLWd040yPl/HC9LnP9093N+Q4fpa3PRO/nZW1w9B3dOufJl//xl4tXGzeuXb1y88T+OYwe0cZjojOSiRe2lYlumYneY2Ti0OPE/+S06mz0r6I7u1q+VPU9ksV8J2/mchZyJrOZy9nM5ms5nU5Oj+T1+a3zWp1rjZ2da8e/VBfKe9LPRu5Ne2bqQQ1lXp8eyevolW66aht9ZS1Lz2wjS0Ur47P0z7GhNL9QF8o5fjxyx5m8jZmYG8nEs1tn4tf/XU1ys3vj2tLV+be2Od/L9bo8bd9bf23+zRPZoZ2rd7c8Xp4p/2Olf9sYPTrKtmcHbRvy1aq/cWnWg61ra6U6n/ttDztTy5GO3hk3Ur/thbGzdKq2YyNt697l5M10h+9CANjHDr9yuNW+1/5b+4P2T9pX2xcOfXPq7NQXWzn41+afDvyu8dvG14tX8kF+mCOTjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Nbr7z7rX5bndhaR8W0njCA94Z2zRIRf+V1v7Y909qYWqrI+r3Sbbo3ppEzO0k+yJ1ae7BXFMZ03Rh+Eo7aQzjSXJtn/zAHbAbTi1ff+vUzXfe/cri9fk3Ft5YuHH67JnXznS+Onf71JXF7sJs/++kowR2w9rbgElHAgAAAAAAAAAAAGzXXvzzhjHTFr0J7CsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwyXT+9Rzspcjc7MnZsr5yt9Mtl0F5bctmkkaS4gdJ8XFyLv0l0yPDFQ+a59V7H/3q5fc/7KyN1Rxs39jQ7w//Xl3d4V706iUzSQ7U64eb2tZ4l0bG6+0wsL5iuIdlwo4PEgeT9v8AAAD//x5LB84=")
setresuid(0xffffffffffffffff, r5, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0)

11.120897486s ago: executing program 4 (id=6836):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0xe0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x3}, 0x1c)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @remote}, 0x18)

11.029358237s ago: executing program 34 (id=6836):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0xe0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x3}, 0x1c)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @remote}, 0x18)

3.892289633s ago: executing program 3 (id=6926):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000740)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendto$packet(r1, &(0x7f0000000340)="48357e0287af48ffa745b497a54e0eecd1b7309393e2f126d41bd7000000000000009d15afaef1bd7efe075ff441b16e244b8b05fe09e29583ad142567826dfa5cbc6f979b050015bde8c4441cd0fa6be03213181bfe84743015ec90ec029c982a14ced8b1aa8f44e5c30afac636762bce5f629c526005e84f1eb2c5582f1c64e77404000000000000000615456e3631e9e3bb333b412165d1d61095ab574015cac8398b258e51cd", 0xa8, 0x0, 0x0, 0x0)

3.830094609s ago: executing program 3 (id=6927):
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf00020106500009"], 0x0)
syz_usb_connect(0x5, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109025200010000000009040000042513bf000a2401000000020102052404"], 0x0)

3.453715346s ago: executing program 5 (id=6930):
creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
open(&(0x7f00000000c0)='.\x00', 0x20800, 0x0)
r0 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=<r1=>0x0, &(0x7f0000000200)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1})
io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0)

3.398883109s ago: executing program 5 (id=6931):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e46558"], 0xb2)

3.279875234s ago: executing program 3 (id=6936):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', <r3=>r1, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x7800, 0x80, 0xfffffffc, 0xdc64}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r3, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}})

3.026138923s ago: executing program 0 (id=6942):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
socket$kcm(0x10, 0x2, 0x4)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000800)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}})

2.069500427s ago: executing program 0 (id=6943):
r0 = landlock_create_ruleset(&(0x7f0000000080)={0x9008, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000001f40), 0x0, 0x41)
ioctl$BLKSECDISCARD(r1, 0x5460, 0x0)

2.068312133s ago: executing program 0 (id=6944):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112})
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0)

959.162862ms ago: executing program 3 (id=6945):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$LINK_DETACH(0x22, &(0x7f0000000000), 0x4)

958.831065ms ago: executing program 0 (id=6946):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x8, 0x4)

958.285497ms ago: executing program 3 (id=6947):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
io_uring_setup(0x564e, &(0x7f00000004c0)={0x0, 0x426d, 0x200, 0x2, 0x2fb})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x81)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x1e, 0x4, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r5, 0xfffffffc)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r6, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)

958.032321ms ago: executing program 0 (id=6948):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000100)={0x1c, 0x2, 0x8, 0xc, 0xfffff800})
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"})
r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}})

783.833967ms ago: executing program 5 (id=6949):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000000)=',', 0x1}], 0x1}, 0x8940)
writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="5fc903ce8cb5049e077f3ba953190a8ce22e51a45861006641e661523ed30e13487a64d3e98231a20c5e08ebe24801b531c63d06db0e6cca2bdb10dd7d02d74ab9dd95bd33747598fc1e063ff967b7c16abd2076323dca7cd2cc5ab8225b6d31c8029cfe91c8f8c054ff41", 0x6b}, {&(0x7f0000000980)="941dd634f75d70afed00837e63d7a620c1b5fd6f48660a86826b474ffb6274f02f52586f30140dafd6a0baffee63a7bafec8837268f35cf21be882e4ac6c522534080f35b3033aeb3f84e473f0b8c5a0d132378d8d7ff5299fd7616415c9c97f6331af9d07a746bb657558522dcee4c292efe922ce9584ec0ca31b7f5362419bd2084f5f9d2ef32bb866383dcb862e17ae85989ce20040b023f6d6b6cae15622b6b9ab922f95edd7f1fe11b20efdecc038027fe452320671c98e51817e1ab6e62610629bb0fa0b8513df543828b7dc90c220c6e7b17c4c7176508749", 0x50c}, {&(0x7f0000000480)="84", 0x2}], 0x3)

783.447166ms ago: executing program 5 (id=6950):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48)

283.13077ms ago: executing program 5 (id=6951):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback, 0x4b26e94}, @in={0x2, 0x4e20, @remote}], 0x2c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000900)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @remote}]}, &(0x7f00000002c0)=0x10)

220.41905ms ago: executing program 5 (id=6952):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000560900a1004daf25cee2d5d1c1"], 0x0}, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

5.199573ms ago: executing program 0 (id=6953):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x76, 0x68c, &(0x7f0000000d00)="$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")
utime(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)={0x1, 0x9})

0s ago: executing program 3 (id=6954):
sched_setscheduler(0x0, 0x2, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005880)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000000340)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S")
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
symlink(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

kernel console output (not intermixed with test programs):

FS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  406.272240][T17305] BTRFS info (device loop2): using free-space-tree
[  406.330176][ T5846] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  406.532668][T17335] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4619'.
[  406.536504][T17335] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4619'.
[  406.540247][T17335] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4619'.
[  406.902968][T17342] loop2: detected capacity change from 0 to 40427
[  406.906596][T17342] F2FS-fs (loop2): Image doesn't support compression
[  406.909894][T17342] F2FS-fs (loop2): invalid crc value
[  406.943406][T17342] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  406.947207][T17342] F2FS-fs (loop2): Start checkpoint disabled!
[  406.952471][T17342] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  407.002812][ T5846] syz-executor: attempt to access beyond end of device
[  407.002812][ T5846] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  407.009740][ T5846] syz-executor: attempt to access beyond end of device
[  407.009740][ T5846] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  407.071724][   T68] kworker/u10:2: attempt to access beyond end of device
[  407.071724][   T68] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  407.082229][   T68] CPU: 1 UID: 0 PID: 68 Comm: kworker/u10:2 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  407.082245][   T68] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  407.082251][   T68] Workqueue: writeback wb_workfn (flush-7:2)
[  407.082269][   T68] Call Trace:
[  407.082273][   T68]  <TASK>
[  407.082278][   T68]  dump_stack_lvl+0x189/0x250
[  407.082294][   T68]  ? __pfx_dump_stack_lvl+0x10/0x10
[  407.082303][   T68]  ? __pfx_queue_work_on+0x10/0x10
[  407.082313][   T68]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  407.082326][   T68]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  407.082341][   T68]  f2fs_handle_critical_error+0x37c/0x540
[  407.082358][   T68]  f2fs_write_end_io+0x886/0xb60
[  407.082376][   T68]  __submit_merged_bio+0x27a/0x6a0
[  407.082391][   T68]  __submit_merged_write_cond+0x255/0x530
[  407.082405][   T68]  f2fs_write_data_pages+0x261d/0x3000
[  407.082416][   T68]  ? ahci_qc_prep+0x520/0x890
[  407.082442][   T68]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  407.082490][   T68]  ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0
[  407.082529][   T68]  ? __blk_mq_sched_dispatch_requests+0x13ee/0x1570
[  407.082552][   T68]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  407.082563][   T68]  do_writepages+0x32e/0x550
[  407.082579][   T68]  ? reacquire_held_locks+0x127/0x1d0
[  407.082588][   T68]  ? writeback_sb_inodes+0x384/0x1010
[  407.082603][   T68]  __writeback_single_inode+0x145/0xff0
[  407.082613][   T68]  ? do_raw_spin_unlock+0x4d/0x240
[  407.082626][   T68]  writeback_sb_inodes+0x6c7/0x1010
[  407.082650][   T68]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  407.082682][   T68]  ? rcu_is_watching+0x15/0xb0
[  407.082697][   T68]  wb_writeback+0x43b/0xaf0
[  407.082711][   T68]  ? queue_io+0x3b1/0x590
[  407.082723][   T68]  ? __pfx_wb_writeback+0x10/0x10
[  407.082737][   T68]  ? _raw_spin_unlock_irq+0x23/0x50
[  407.082749][   T68]  wb_workfn+0x409/0xef0
[  407.082766][   T68]  ? __pfx_wb_workfn+0x10/0x10
[  407.082777][   T68]  ? __lock_acquire+0xab9/0xd20
[  407.082793][   T68]  ? process_scheduled_works+0x9ef/0x17b0
[  407.082805][   T68]  ? _raw_spin_unlock_irq+0x23/0x50
[  407.082813][   T68]  ? process_scheduled_works+0x9ef/0x17b0
[  407.082820][   T68]  ? process_scheduled_works+0x9ef/0x17b0
[  407.082829][   T68]  process_scheduled_works+0xae1/0x17b0
[  407.082853][   T68]  ? __pfx_process_scheduled_works+0x10/0x10
[  407.082870][   T68]  worker_thread+0x8a0/0xda0
[  407.082880][   T68]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  407.082894][   T68]  ? __kthread_parkme+0x7b/0x200
[  407.082908][   T68]  kthread+0x711/0x8a0
[  407.082919][   T68]  ? __pfx_worker_thread+0x10/0x10
[  407.082927][   T68]  ? __pfx_kthread+0x10/0x10
[  407.082942][   T68]  ? _raw_spin_unlock_irq+0x23/0x50
[  407.082951][   T68]  ? lockdep_hardirqs_on+0x9c/0x150
[  407.082962][   T68]  ? __pfx_kthread+0x10/0x10
[  407.082971][   T68]  ret_from_fork+0x3fc/0x770
[  407.082983][   T68]  ? __pfx_ret_from_fork+0x10/0x10
[  407.082994][   T68]  ? __switch_to_asm+0x39/0x70
[  407.083004][   T68]  ? __switch_to_asm+0x33/0x70
[  407.083012][   T68]  ? __pfx_kthread+0x10/0x10
[  407.083022][   T68]  ret_from_fork_asm+0x1a/0x30
[  407.083040][   T68]  </TASK>
[  407.083044][   T68] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  407.190275][   T68] CPU: 1 UID: 0 PID: 68 Comm: kworker/u10:2 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  407.190290][   T68] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  407.190296][   T68] Workqueue: writeback wb_workfn (flush-7:2)
[  407.190312][   T68] Call Trace:
[  407.190315][   T68]  <TASK>
[  407.190319][   T68]  dump_stack_lvl+0x189/0x250
[  407.190334][   T68]  ? __pfx_dump_stack_lvl+0x10/0x10
[  407.190343][   T68]  ? __pfx_queue_work_on+0x10/0x10
[  407.190351][   T68]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  407.190362][   T68]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  407.190377][   T68]  f2fs_handle_critical_error+0x37c/0x540
[  407.190393][   T68]  f2fs_write_end_io+0x886/0xb60
[  407.190410][   T68]  __submit_merged_bio+0x27a/0x6a0
[  407.190424][   T68]  __submit_merged_write_cond+0x255/0x530
[  407.190438][   T68]  f2fs_write_data_pages+0x261d/0x3000
[  407.190449][   T68]  ? ahci_qc_prep+0x520/0x890
[  407.190474][   T68]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  407.190550][   T68]  ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0
[  407.190568][   T68]  ? __blk_mq_sched_dispatch_requests+0x13ee/0x1570
[  407.190590][   T68]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  407.190601][   T68]  do_writepages+0x32e/0x550
[  407.190616][   T68]  ? reacquire_held_locks+0x127/0x1d0
[  407.190624][   T68]  ? writeback_sb_inodes+0x384/0x1010
[  407.190639][   T68]  __writeback_single_inode+0x145/0xff0
[  407.190649][   T68]  ? do_raw_spin_unlock+0x4d/0x240
[  407.190661][   T68]  writeback_sb_inodes+0x6c7/0x1010
[  407.190685][   T68]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  407.190717][   T68]  ? rcu_is_watching+0x15/0xb0
[  407.190731][   T68]  wb_writeback+0x43b/0xaf0
[  407.190745][   T68]  ? queue_io+0x3b1/0x590
[  407.190756][   T68]  ? __pfx_wb_writeback+0x10/0x10
[  407.190771][   T68]  ? _raw_spin_unlock_irq+0x23/0x50
[  407.190783][   T68]  wb_workfn+0x409/0xef0
[  407.190799][   T68]  ? __pfx_wb_workfn+0x10/0x10
[  407.190810][   T68]  ? __lock_acquire+0xab9/0xd20
[  407.190827][   T68]  ? process_scheduled_works+0x9ef/0x17b0
[  407.190839][   T68]  ? _raw_spin_unlock_irq+0x23/0x50
[  407.190847][   T68]  ? process_scheduled_works+0x9ef/0x17b0
[  407.190854][   T68]  ? process_scheduled_works+0x9ef/0x17b0
[  407.190863][   T68]  process_scheduled_works+0xae1/0x17b0
[  407.190887][   T68]  ? __pfx_process_scheduled_works+0x10/0x10
[  407.190909][   T68]  worker_thread+0x8a0/0xda0
[  407.190919][   T68]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  407.190933][   T68]  ? __kthread_parkme+0x7b/0x200
[  407.190947][   T68]  kthread+0x711/0x8a0
[  407.190958][   T68]  ? __pfx_worker_thread+0x10/0x10
[  407.190966][   T68]  ? __pfx_kthread+0x10/0x10
[  407.190976][   T68]  ? _raw_spin_unlock_irq+0x23/0x50
[  407.190985][   T68]  ? lockdep_hardirqs_on+0x9c/0x150
[  407.190995][   T68]  ? __pfx_kthread+0x10/0x10
[  407.191005][   T68]  ret_from_fork+0x3fc/0x770
[  407.191015][   T68]  ? __pfx_ret_from_fork+0x10/0x10
[  407.191027][   T68]  ? __switch_to_asm+0x39/0x70
[  407.191036][   T68]  ? __switch_to_asm+0x33/0x70
[  407.191044][   T68]  ? __pfx_kthread+0x10/0x10
[  407.191054][   T68]  ret_from_fork_asm+0x1a/0x30
[  407.191073][   T68]  </TASK>
[  407.191077][   T68] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  407.547858][T17363] loop1: detected capacity change from 0 to 32768
[  407.560672][T17363] JBD2: Ignoring recovery information on journal
[  407.602847][T17363] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  407.637139][   T33] audit: type=1800 audit(2000000263.450:212): pid=17363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4631" name="file1" dev="loop1" ino=17058 res=0 errno=0
[  407.800397][   T12] tipc: Disabling bearer <eth:netdevsim0>
[  408.175413][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  408.187774][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  408.217104][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  408.224596][ T5856] ocfs2: Unmounting device (7,1) on (node local)
[  408.247251][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  408.257099][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  408.513969][   T12] bond2 (unregistering): (slave gretap1): Releasing active interface
[  408.832017][   T12] bond0 (unregistering): Released all slaves
[  408.839427][   T12] bond1 (unregistering): Released all slaves
[  408.967241][   T12] bond2 (unregistering): Released all slaves
[  408.984295][T17387] xfrm0: entered promiscuous mode
[  408.988869][T17387] xfrm0: entered allmulticast mode
[  409.067493][   T12] : left promiscuous mode
[  409.137975][T17377] lo speed is unknown, defaulting to 1000
[  409.233204][   T12] tipc: Left network mode
[  409.619582][   T68] wlan1: Trigger new scan to find an IBSS to join
[  409.647454][T17377] chnl_net:caif_netlink_parms(): no params data found
[  409.908206][T17377] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.919218][T17377] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.929829][T17377] bridge_slave_0: entered allmulticast mode
[  409.941464][T17377] bridge_slave_0: entered promiscuous mode
[  409.962855][T17377] bridge0: port 2(bridge_slave_1) entered blocking state
[  409.983982][T17377] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.997212][T17377] bridge_slave_1: entered allmulticast mode
[  410.007065][T17377] bridge_slave_1: entered promiscuous mode
[  410.071343][   T12] hsr_slave_0: left promiscuous mode
[  410.389507][T16479] Bluetooth: hci0: command tx timeout
[  411.651476][T17422] loop1: detected capacity change from 0 to 262144
[  411.658082][T17422] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4655 (17422)
[  411.665247][T17422] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  411.669062][T17422] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  411.672405][T17422] BTRFS info (device loop1): using free-space-tree
[  411.689376][    T9] lo speed is unknown, defaulting to 1000
[  411.691378][    T9] infiniband 3yz0: ib_query_port failed (-19)
[  411.696681][T17377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  411.701554][T17377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  411.755373][T17377] team0: Port device team_slave_0 added
[  411.760528][T17377] team0: Port device team_slave_1 added
[  411.818724][ T4030] BTRFS warning (device loop1): checksum verify failed on logical 22036480 mirror 1 wanted 0x23e101be1e001a29 found 0x09049c5cc74d15fb level 0
[  411.819351][T17377] batman_adv: batadv0: Adding interface: batadv_slave_0
[  411.835067][T17422] BTRFS info (device loop1): read error corrected: ino 0 off 22036480 (dev /dev/loop1 sector 43040)
[  411.837895][T17377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  411.840013][T17422] BTRFS info (device loop1): read error corrected: ino 0 off 22040576 (dev /dev/loop1 sector 43048)
[  411.852762][T17422] BTRFS info (device loop1): read error corrected: ino 0 off 22044672 (dev /dev/loop1 sector 43056)
[  411.856364][T17377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  411.857394][T17422] BTRFS info (device loop1): read error corrected: ino 0 off 22048768 (dev /dev/loop1 sector 43064)
[  411.874792][   T74] BTRFS warning (device loop1): checksum verify failed on logical 30457856 mirror 1 wanted 0x402e75f1de9ccfe6 found 0x42450c21b86dd7c2 level 0
[  411.882021][T17422] BTRFS info (device loop1): read error corrected: ino 0 off 30457856 (dev /dev/loop1 sector 75872)
[  411.892046][T17422] BTRFS info (device loop1): read error corrected: ino 0 off 30461952 (dev /dev/loop1 sector 75880)
[  411.894253][T17377] batman_adv: batadv0: Adding interface: batadv_slave_1
[  411.896279][T17422] BTRFS info (device loop1): read error corrected: ino 0 off 30466048 (dev /dev/loop1 sector 75888)
[  411.902646][T17422] BTRFS info (device loop1): read error corrected: ino 0 off 30470144 (dev /dev/loop1 sector 75896)
[  411.907417][T17377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  411.926207][T17377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  411.945806][   T33] audit: type=1800 audit(2000000267.760:213): pid=17422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4655" name="file1" dev="loop1" ino=260 res=0 errno=0
[  412.032632][T17377] hsr_slave_0: entered promiscuous mode
[  412.035660][T17377] hsr_slave_1: entered promiscuous mode
[  412.130260][ T5856] BTRFS info (device loop1): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  412.424955][T16479] Bluetooth: hci0: command tx timeout
[  412.432608][T17464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4669'.
[  412.449716][T17377] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  412.460351][T17377] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  412.483377][T17377] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  412.492683][T17377] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  412.588980][   T68] wlan1: Trigger new scan to find an IBSS to join
[  412.617651][T17377] 8021q: adding VLAN 0 to HW filter on device bond0
[  412.647230][T17377] 8021q: adding VLAN 0 to HW filter on device team0
[  412.659563][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state
[  412.662260][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state
[  412.685241][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state
[  412.689820][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state
[  412.891297][T17377] 8021q: adding VLAN 0 to HW filter on device batadv0
[  412.906789][   T33] audit: type=1326 audit(2000000268.730:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17486 comm="syz.1.4665" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4e698ebe9 code=0x0
[  412.939336][T17377] veth0_vlan: entered promiscuous mode
[  412.944952][T17377] veth1_vlan: entered promiscuous mode
[  412.965810][T17377] veth0_macvtap: entered promiscuous mode
[  412.971462][T17377] veth1_macvtap: entered promiscuous mode
[  412.983010][T17377] batman_adv: batadv0: Interface activated: batadv_slave_0
[  412.993296][T17377] batman_adv: batadv0: Interface activated: batadv_slave_1
[  413.001728][ T5876] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  413.005201][ T5876] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  413.013246][ T5876] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  413.019927][ T5876] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  413.077457][  T781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  413.080449][  T781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  413.101070][  T781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  413.103798][  T781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  413.779079][T17520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4686'.
[  414.087184][T17533] bond0: (slave bond1): Error -95 calling ndo_bpf
[  414.092584][T17533] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  414.379831][T17535] loop3: detected capacity change from 0 to 32768
[  414.461664][T17535] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 255,nocow
[  414.461686][T17535]   allowing incompatible features above 0.0: (unknown version)
[  414.461696][T17535]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  414.477838][T17535] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  414.481154][T17535] bcachefs (loop3): initializing new filesystem
[  414.491984][T17535] bcachefs (loop3): going read-write
[  414.496127][T16479] Bluetooth: hci0: command tx timeout
[  414.502764][T17535] bcachefs (loop3): marking superblocks
[  414.530882][T17535] bcachefs (loop3): initializing freespace
[  414.549303][T17535] bcachefs (loop3): done initializing freespace
[  414.567813][T17535] bcachefs (loop3): reading snapshots table
[  414.570190][T17535] bcachefs (loop3): reading snapshots done
[  414.602516][T17535] bcachefs (loop3):  loop3: Superblock write was silently dropped! (seq 0 expected 42)
[  414.617486][T17535] bcachefs (loop3): done starting filesystem
[  414.718683][T17557] netlink: 'syz.1.4699': attribute type 5 has an invalid length.
[  414.752173][   T33] audit: type=1804 audit(2000000270.570:215): pid=17535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4693" name="/newroot/2/file1/bus" dev="loop3" ino=4098 res=1 errno=0
[  414.762552][T17535] bcachefs (loop3): requested incompat feature 1.16: reflink_p_may_update_opts currently not enabled, allowed up to 1.16: reflink_p_may_update_opts
[  414.762552][T17535]   set version_upgrade=incompat to enable
[  414.790092][T17559] loop1: detected capacity change from 0 to 4096
[  414.810262][T17559] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  414.836970][T17559] ntfs3(loop1): Failed to load $Extend (-22).
[  414.839304][T17559] ntfs3(loop1): Failed to initialize $Extend.
[  414.867820][T17377] bcachefs (loop3): shutting down
[  414.883060][T17377] bcachefs (loop3): going read-only
[  414.885809][T17377] bcachefs (loop3): finished waiting for writes to stop
[  414.900951][T17377] bcachefs (loop3): flushing journal and stopping allocators, journal seq 5
[  414.953522][T17377] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 6
[  414.958080][T17377] bcachefs (loop3): clean shutdown complete, journal seq 7
[  414.961245][T17377] bcachefs (loop3): marking filesystem clean
[  414.989774][T17377] bcachefs (loop3): shutdown complete
[  415.224548][T17584] netlink: 'syz.1.4712': attribute type 298 has an invalid length.
[  415.447630][   T33] audit: type=1326 audit(2000000271.270:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17593 comm="syz.1.4717" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e698ebe9 code=0x7ffc0000
[  415.456137][   T33] audit: type=1326 audit(2000000271.270:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17593 comm="syz.1.4717" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e698ebe9 code=0x7ffc0000
[  415.463273][   T33] audit: type=1326 audit(2000000271.280:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17593 comm="syz.1.4717" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff4e698ebe9 code=0x7ffc0000
[  415.479366][   T33] audit: type=1326 audit(2000000271.280:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17593 comm="syz.1.4717" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e698ebe9 code=0x7ffc0000
[  415.494883][   T33] audit: type=1326 audit(2000000271.280:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17593 comm="syz.1.4717" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e698ebe9 code=0x7ffc0000
[  415.504003][   T33] audit: type=1326 audit(2000000271.280:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17593 comm="syz.1.4717" exe="/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7ff4e698ebe9 code=0x7ffc0000
[  415.511062][   T33] audit: type=1326 audit(2000000271.280:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17593 comm="syz.1.4717" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e698ebe9 code=0x7ffc0000
[  415.616175][ T4030] wlan1: Trigger new scan to find an IBSS to join
[  416.626500][  T781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  416.643284][T17629] loop3: detected capacity change from 0 to 512
[  416.652819][T17629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  416.658641][T17629] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  416.674717][T17629] EXT4-fs error (device loop3): ext4_empty_dir:3090: inode #12: block 32: comm syz.3.4731: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  416.682386][T17629] EXT4-fs (loop3): Remounting filesystem read-only
[  416.684488][T17629] EXT4-fs warning (device loop3): ext4_empty_dir:3093: inode #12: comm syz.3.4731: directory missing '.'
[  416.708527][T17377] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  416.902574][T17646] loop3: detected capacity change from 0 to 512
[  416.908942][T17646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  416.945666][T17377] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  417.275996][    T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  417.316010][ T5912] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  417.365472][T17663] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4746'.
[  417.426163][    T9] usb 4-1: Using ep0 maxpacket: 32
[  417.429444][    T9] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31
[  417.432317][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.436399][    T9] usb 4-1: config 0 descriptor??
[  417.448127][    T9] usb 4-1: selecting invalid altsetting 3
[  417.450162][    T9] comedi comedi5: could not set alternate setting 3 in high speed
[  417.452622][    T9] usbduxsigma 4-1:0.0: driver 'usbduxsigma' failed to auto-configure device.
[  417.461363][    T9] usbduxsigma 4-1:0.0: probe with driver usbduxsigma failed with error -22
[  417.472200][ T5912] usb 2-1: unable to get BOS descriptor or descriptor too short
[  417.477295][ T5912] usb 2-1: config 6 has an invalid interface number: 158 but max is 0
[  417.479816][ T5912] usb 2-1: config 6 has no interface number 0
[  417.481775][ T5912] usb 2-1: config 6 interface 158 has no altsetting 0
[  417.486719][ T5912] usb 2-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29
[  417.489547][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.492131][ T5912] usb 2-1: Product: syz
[  417.493646][ T5912] usb 2-1: Manufacturer: syz
[  417.496045][ T5912] usb 2-1: SerialNumber: syz
[  417.648438][    T9] usb 4-1: USB disconnect, device number 2
[  417.663521][T17679] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  418.139989][T17692] 9pnet_fd: Insufficient options for proto=fd
[  418.518700][ T5912] rtsx_usb 2-1:6.158: probe with driver rtsx_usb failed with error -71
[  418.535989][ T5912] usb 2-1: USB disconnect, device number 56
[  418.542380][T17698] loop3: detected capacity change from 0 to 4096
[  418.712522][T17702] loop3: detected capacity change from 0 to 2048
[  418.719027][T17702] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  418.763893][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  418.763904][   T33] audit: type=1800 audit(2000000274.580:224): pid=17702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4764" name="bus" dev="loop3" ino=1436 res=0 errno=0
[  418.772833][T17704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4765'.
[  418.810405][T17704] vlan2: entered allmulticast mode
[  418.812415][T17704] bridge0: entered allmulticast mode
[  418.814831][T17704] bridge1: port 1(vlan2) entered blocking state
[  418.817330][T17704] bridge1: port 1(vlan2) entered disabled state
[  418.820458][T17704] vlan2: entered promiscuous mode
[  419.182602][T17732] loop1: detected capacity change from 0 to 128
[  419.208501][T17732] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  419.213599][T17732] ext4 filesystem being mounted at /1348/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  419.245368][ T5856] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  419.436930][T17744] loop1: detected capacity change from 0 to 32768
[  419.439835][T17744] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4781 (17744)
[  419.446296][T17744] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  419.449815][T17744] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  419.452427][T17744] BTRFS info (device loop1): using free-space-tree
[  419.469980][T17744] BTRFS info (device loop1): rebuilding free space tree
[  419.491994][ T5856] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  419.974203][T17781] pim6reg1: entered promiscuous mode
[  419.976597][T17781] pim6reg1: entered allmulticast mode
[  420.126095][T17791] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4796'.
[  420.956046][   T51] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  421.106173][   T51] usb 2-1: Using ep0 maxpacket: 32
[  421.111737][   T51] usb 2-1: unable to get BOS descriptor or descriptor too short
[  421.116479][   T51] usb 2-1: config 5 has an invalid interface number: 114 but max is 0
[  421.119795][   T51] usb 2-1: config 5 has no interface number 0
[  421.122271][   T51] usb 2-1: config 5 interface 114 has no altsetting 0
[  421.127803][   T51] usb 2-1: New USB device found, idVendor=1b3d, idProduct=9316, bcdDevice=28.00
[  421.131390][   T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.134612][   T51] usb 2-1: Product: syz
[  421.136493][   T51] usb 2-1: Manufacturer: syz
[  421.138461][   T51] usb 2-1: SerialNumber: syz
[  421.353355][   T51] ftdi_sio 2-1:5.114: FTDI USB Serial Device converter detected
[  421.359749][   T51] usb 2-1: Detected FT2233HP
[  421.361989][   T51] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  421.365979][   T51] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  421.373466][   T51] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  421.379093][   T51] usb 2-1: USB disconnect, device number 57
[  421.384040][   T51] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  421.388323][   T51] ftdi_sio 2-1:5.114: device disconnected
[  421.559544][T17837] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4817'.
[  421.562964][T17837] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4817'.
[  421.567636][T17837] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4817'.
[  421.923683][   T33] audit: type=1800 audit(2000000277.740:225): pid=17859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4828" name="nullb0" dev="tmpfs" ino=1075 res=0 errno=0
[  422.447903][T17888] loop1: detected capacity change from 0 to 32768
[  422.450769][T17888] XFS: ikeep mount option is deprecated.
[  422.470601][T17888] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  422.505322][T17888] XFS (loop1): Ending clean mount
[  422.511972][T17888] XFS (loop1): Quotacheck needed: Please wait.
[  422.538803][T17888] XFS (loop1): Quotacheck: Done.
[  422.603814][ T5856] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  422.798122][T17917] cgroup: Unknown subsys name 'uid>00000000000000000000'
[  422.948689][T17924] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4855'.
[  422.959051][T17924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  423.248614][T17951] 9pnet: p9_errstr2errno: server reported unknown error 1844674
[  423.277899][T17953] netlink: 536 bytes leftover after parsing attributes in process `syz.1.4869'.
[  423.702573][T17965] program syz.1.4874 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  424.040152][T17985] netlink: 'syz.1.4884': attribute type 3 has an invalid length.
[  425.321368][T18030] loop1: detected capacity change from 0 to 1024
[  425.342961][T18030] hfsplus: bad catalog entry type
[  425.347615][T18034] netlink: 'syz.3.4905': attribute type 74 has an invalid length.
[  425.679815][T18051] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4913'.
[  425.683551][T18051] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4913'.
[  426.813283][T18095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4935'.
[  426.822564][T18095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4935'.
[  426.874059][T18101] loop1: detected capacity change from 0 to 4096
[  426.894568][T18106] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  426.930701][T18101] NILFS (loop1): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed
[  427.034265][T18117] input: syz1 as /devices/virtual/input/input22
[  427.336079][ T5896] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  427.486051][ T5896] usb 2-1: Using ep0 maxpacket: 8
[  427.489435][ T5896] usb 2-1: config 0 interface 0 has no altsetting 0
[  427.494170][ T5896] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  427.498411][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.501420][ T5896] usb 2-1: Product: syz
[  427.503205][ T5896] usb 2-1: Manufacturer: syz
[  427.504949][ T5896] usb 2-1: SerialNumber: syz
[  427.508665][ T5896] usb 2-1: config 0 descriptor??
[  427.516340][ T5896] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found
[  427.719749][ T5896] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected
[  427.723928][ T5896] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  427.924474][ T5313] usb 2-1: USB disconnect, device number 58
[  428.485560][T18162] loop1: detected capacity change from 0 to 1024
[  428.503706][T18162] EXT4-fs: Ignoring removed nobh option
[  428.511733][T18162] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  428.530743][T18162] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.4966: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  428.541241][T18162] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.4966: couldn't read orphan inode 11 (err -117)
[  428.548026][T18162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  428.606454][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  429.145944][ T5896] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  429.306909][ T5896] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  429.311425][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  429.315467][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  429.320812][ T5896] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  429.326155][ T5896] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  429.329578][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.334957][ T5896] usb 2-1: config 0 descriptor??
[  429.394779][T18230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4995'.
[  429.441891][T18230] bond6: (slave geneve3): Enslaving as an active interface with an up link
[  429.445818][   T13] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  429.447496][T18230] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4995'.
[  429.456614][   T13] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  429.463705][T18230] 8021q: adding VLAN 0 to HW filter on device bond6
[  429.468665][   T13] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  429.473379][   T13] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  429.753423][ T5896] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  430.018136][ T5896] usb 2-1: USB disconnect, device number 59
[  430.227916][T18247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5003'.
[  430.768124][T18263] loop1: detected capacity change from 0 to 40427
[  430.776580][T18263] F2FS-fs: heap/no_heap options were deprecated
[  430.780172][T18263] F2FS-fs (loop1): build fault injection rate: 19
[  430.782304][T18263] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  430.788816][T18263] F2FS-fs (loop1): invalid crc value
[  430.821403][T18263] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  430.874547][T18263] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0
[  430.881420][T18263] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  430.888219][T18263] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  431.124592][T18281] tmpfs: Group quota block hardlimit too large.
[  431.358115][T18302] netlink: 316 bytes leftover after parsing attributes in process `syz.3.5025'.
[  431.846076][ T5313] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  432.006259][ T5313] usb 2-1: Using ep0 maxpacket: 32
[  432.010415][ T5313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  432.014319][ T5313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  432.018662][ T5313] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  432.022011][ T5313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.027188][ T5313] usb 2-1: config 0 descriptor??
[  432.440267][ T5313] hid_parser_main: 49 callbacks suppressed
[  432.440279][ T5313] ft260 0003:0403:6030.0018: unknown main item tag 0x7
[  432.639053][ T5313] ft260 0003:0403:6030.0018: chip code: 6424 8183
[  432.842691][ T5313] ft260 0003:0403:6030.0018: failed to retrieve system status
[  432.845807][ T5313] ft260 0003:0403:6030.0018: probe with driver ft260 failed with error -71
[  432.851197][ T5313] usb 2-1: USB disconnect, device number 60
[  433.479686][T18351] openvswitch: netlink: Message has 4 unknown bytes.
[  433.482286][T18351] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  433.564254][T18357] loop1: detected capacity change from 0 to 128
[  433.578222][T18357] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  433.582850][T18357] ext4 filesystem being mounted at /1412/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  433.614130][   T33] audit: type=1804 audit(2000000289.430:226): pid=18357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5051" name="/newroot/1412/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop1" ino=12 res=1 errno=0
[  433.651832][ T5856] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  433.844986][T18372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5057'.
[  433.879327][T18376] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5059'.
[  434.572670][T18394] netlink: 176 bytes leftover after parsing attributes in process `syz.3.5067'.
[  434.964857][T18414] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5077'.
[  435.266145][ T5912] usb 2-1: new low-speed USB device number 61 using dummy_hcd
[  435.417474][ T5912] usb 2-1: config 2 has an invalid interface number: 227 but max is 0
[  435.420162][ T5912] usb 2-1: config 2 has no interface number 0
[  435.422066][ T5912] usb 2-1: config 2 interface 227 has no altsetting 0
[  435.424328][ T5912] usb 2-1: New USB device found, idVendor=07ca, idProduct=2835, bcdDevice=b3.c2
[  435.427428][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  435.636864][ T5912] usb 2-1: USB disconnect, device number 61
[  436.368067][T18458] program syz.1.5095 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  436.407555][T18461] loop1: detected capacity change from 0 to 1024
[  436.453610][T18463] loop1: detected capacity change from 0 to 256
[  436.456571][T18463] exfat: Deprecated parameter 'namecase'
[  436.458766][T18463] exfat: Deprecated parameter 'utf8'
[  436.467354][T18463] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6d3f72e, utbl_chksum : 0xe619d30d)
[  436.541444][T18465] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  436.545454][T18465] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  436.926956][ T5912] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  437.088829][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  437.093527][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  437.103583][ T5912] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  437.108718][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.114152][ T5912] usb 2-1: config 0 descriptor??
[  437.532930][ T5912] sony 0003:054C:024B.0019: unknown main item tag 0x0
[  437.535245][ T5912] sony 0003:054C:024B.0019: unknown main item tag 0x0
[  437.539195][ T5912] sony 0003:054C:024B.0019: unknown main item tag 0x0
[  437.541999][ T5912] sony 0003:054C:024B.0019: unknown main item tag 0x0
[  437.544751][ T5912] sony 0003:054C:024B.0019: unknown main item tag 0x0
[  437.552317][ T5912] sony 0003:054C:024B.0019: unknown main item tag 0x0
[  437.555102][ T5912] sony 0003:054C:024B.0019: unknown main item tag 0x0
[  437.559687][ T5912] sony 0003:054C:024B.0019: unknown main item tag 0x0
[  437.562092][ T5912] sony 0003:054C:024B.0019: unknown main item tag 0x0
[  437.564875][ T5912] sony 0003:054C:024B.0019: unknown main item tag 0x0
[  437.568913][ T5912] sony 0003:054C:024B.0019: unexpected long global item
[  437.571416][ T5912] sony 0003:054C:024B.0019: parse failed
[  437.573308][ T5912] sony 0003:054C:024B.0019: probe with driver sony failed with error -22
[  437.738790][ T5896] usb 2-1: USB disconnect, device number 62
[  437.889273][T18528] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5129'.
[  438.608188][T18584] loop1: detected capacity change from 0 to 8
[  438.611926][T18584] SQUASHFS error: zlib decompression failed, data probably corrupt
[  438.614382][T18584] SQUASHFS error: Failed to read block 0x9b: -5
[  438.617825][T18584] SQUASHFS error: Unable to read metadata cache entry [99]
[  438.620832][T18584] SQUASHFS error: Unable to read inode 0x104
[  438.664253][T18587] loop1: detected capacity change from 0 to 512
[  438.669658][T18587] EXT4-fs: Ignoring removed i_version option
[  438.673853][T18587] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  438.676036][   T33] audit: type=1326 audit(2000000294.500:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18588 comm="syz.3.5156" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0cd8ebe9 code=0x7ffc0000
[  438.679912][T18587] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002]
[  438.690834][T18587] System zones: 1-12
[  438.695778][T18587] EXT4-fs (loop1): orphan cleanup on readonly fs
[  438.713321][T18587] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5155: invalid indirect mapped block 12 (level 1)
[  438.722903][T18587] EXT4-fs (loop1): Remounting filesystem read-only
[  438.727394][T18587] EXT4-fs (loop1): 1 truncate cleaned up
[  438.760061][T18587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  438.889386][   T33] audit: type=1326 audit(2000000294.500:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18588 comm="syz.3.5156" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0cd8ebe9 code=0x7ffc0000
[  438.898324][   T33] audit: type=1326 audit(2000000294.510:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18588 comm="syz.3.5156" exe="/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f1b0cd8ebe9 code=0x7ffc0000
[  438.905270][   T33] audit: type=1326 audit(2000000294.510:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18588 comm="syz.3.5156" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0cd8ebe9 code=0x7ffc0000
[  438.912771][   T33] audit: type=1326 audit(2000000294.510:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18588 comm="syz.3.5156" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0cd8ebe9 code=0x7ffc0000
[  438.955438][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  439.221741][T18598] loop1: detected capacity change from 0 to 40427
[  439.224625][T18598] F2FS-fs (loop1): Wrong segment_count / block_count (64 > 16384)
[  439.227637][T18598] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  439.263805][T18598] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  439.268150][T18598] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  439.270472][T18598] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  439.578711][T18606] loop1: detected capacity change from 0 to 32768
[  439.585265][T18606] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  439.610892][T18606] XFS (loop1): Ending clean mount
[  439.662583][ T5856] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  439.775505][T18616] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  439.783395][T18616] syzkaller0: entered promiscuous mode
[  439.785209][T18616] syzkaller0: entered allmulticast mode
[  439.787922][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  439.790551][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  439.791979][T18616] tipc: Resetting bearer <eth:syzkaller0>
[  439.796898][T18615] tipc: Resetting bearer <eth:syzkaller0>
[  439.815582][T18615] tipc: Disabling bearer <eth:syzkaller0>
[  440.137818][T18645] netlink: 236 bytes leftover after parsing attributes in process `syz.3.5175'.
[  440.141900][T18645] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5175'.
[  441.559144][T18673] loop1: detected capacity change from 0 to 32768
[  441.638925][T18673] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 255,nocow
[  441.638939][T18673]   allowing incompatible features above 0.0: (unknown version)
[  441.638945][T18673]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  441.653970][T18673] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  441.657136][T18673] bcachefs (loop1): initializing new filesystem
[  441.664407][T18673] bcachefs (loop1): going read-write
[  441.671020][T18673] bcachefs (loop1): marking superblocks
[  441.693931][T18673] bcachefs (loop1): initializing freespace
[  441.703943][T18673] bcachefs (loop1): done initializing freespace
[  441.712114][T18673] bcachefs (loop1): reading snapshots table
[  441.720255][T18673] bcachefs (loop1): reading snapshots done
[  441.741832][T18673] bcachefs (loop1):  loop1: Superblock write was silently dropped! (seq 0 expected 42)
[  441.745759][T18673] bcachefs (loop1): done starting filesystem
[  442.069912][ T5856] bcachefs (loop1): shutting down
[  442.072393][ T5856] bcachefs (loop1): going read-only
[  442.074151][ T5856] bcachefs (loop1): finished waiting for writes to stop
[  442.077443][ T5856] bcachefs (loop1): flushing journal and stopping allocators, journal seq 4
[  442.109622][ T5856] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 4
[  442.116032][ T5856] bcachefs (loop1): clean shutdown complete, journal seq 5
[  442.119034][ T5856] bcachefs (loop1): marking filesystem clean
[  442.131930][ T5856] bcachefs (loop1): shutdown complete
[  443.616888][ T5912] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  443.776173][ T5912] usb 2-1: Using ep0 maxpacket: 32
[  443.782420][ T5912] usb 2-1: too many configurations: 17, using maximum allowed: 8
[  443.788297][ T5912] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  443.794545][ T5912] usb 2-1: config 0 has no interface number 0
[  443.801406][ T5912] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  443.815215][ T5912] usb 2-1: config 0 has no interface number 0
[  443.819971][ T5912] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  443.823140][ T5912] usb 2-1: config 0 has no interface number 0
[  443.829298][ T5912] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  443.832412][ T5912] usb 2-1: config 0 has no interface number 0
[  443.835786][ T5912] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  443.840542][ T5912] usb 2-1: config 0 has no interface number 0
[  443.848638][ T5912] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  443.851814][ T5912] usb 2-1: config 0 has no interface number 0
[  443.855458][ T5912] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  443.859824][ T5912] usb 2-1: config 0 has no interface number 0
[  443.862775][ T5912] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  443.865547][ T5912] usb 2-1: config 0 has no interface number 0
[  443.870555][ T5912] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  443.873867][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  443.878618][ T5912] usb 2-1: Product: syz
[  443.886178][ T5912] usb 2-1: Manufacturer: syz
[  443.888255][ T5912] usb 2-1: SerialNumber: syz
[  443.892491][ T5912] usb 2-1: config 0 descriptor??
[  443.898217][ T5912] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz)
[  444.004933][   T33] audit: type=1326 audit(2000000299.820:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18728 comm="syz.0.5212" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821218ebe9 code=0x7fc00000
[  444.109193][ T5912] etas_es58x 2-1:0.2: could not retrieve the product info string
[  444.167942][ T5912] usb 2-1: USB disconnect, device number 63
[  444.172062][ T5912] etas_es58x 2-1:0.2: Disconnecting syz syz
[  444.202441][T18766] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.206953][T18766] bridge_slave_1: left allmulticast mode
[  444.208765][T18766] bridge_slave_1: left promiscuous mode
[  444.216197][T18766] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.231050][T18766] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  444.946194][  T793] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  445.002290][T18786] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5239'.
[  445.019876][T18765] orangefs_mount: mount request failed with -4
[  445.096217][  T793] usb 2-1: Using ep0 maxpacket: 32
[  445.102844][  T793] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  445.105786][  T793] usb 2-1: config 0 has no interface number 0
[  445.112344][  T793] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  445.126078][  T793] usb 2-1: config 0 interface 2 has no altsetting 0
[  445.130853][  T793] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[  445.134232][  T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.146139][  T793] usb 2-1: Product: syz
[  445.148684][  T793] usb 2-1: Manufacturer: syz
[  445.150650][  T793] usb 2-1: SerialNumber: syz
[  445.156944][  T793] usb 2-1: config 0 descriptor??
[  445.372025][  T793] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  445.429841][T18817] Invalid option length (0) for dns_resolver key
[  445.438765][  T793] usb 2-1: USB disconnect, device number 64
[  445.925745][T18833] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  446.046432][T18834] tipc: Resetting bearer <eth:batadv0>
[  446.206286][ T5876] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  446.215614][ T5876] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  446.219343][ T5876] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  446.223146][ T5876] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  446.226803][ T5876] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  446.230137][ T5876] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  446.233490][ T5876] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  446.239821][ T5876] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  446.300755][T18843] netlink: 312 bytes leftover after parsing attributes in process `syz.0.5265'.
[  446.427495][T18855] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  446.530348][T18864] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.5275'.
[  446.954515][T18892] ALSA: mixer_oss: invalid OSS volume 'T'
[  446.978300][T18894] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  447.088741][T18901] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5294'.
[  447.312057][T18905] loop1: detected capacity change from 0 to 32768
[  447.314575][T18905] XFS: ikeep mount option is deprecated.
[  447.349099][T18905] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  447.366855][T18905] XFS (loop1): Ending clean mount
[  447.369901][T18905] XFS (loop1): Quotacheck needed: Please wait.
[  447.420538][T18905] XFS (loop1): Quotacheck: Done.
[  447.431650][   T33] audit: type=1800 audit(2000000303.250:233): pid=18905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5295" name="bus" dev="loop1" ino=9290 res=0 errno=0
[  447.487433][ T5856] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  448.340482][   T33] audit: type=1326 audit(2000000304.160:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.0.5309" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821218ebe9 code=0x7ffc0000
[  448.350547][   T33] audit: type=1326 audit(2000000304.170:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.0.5309" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821218ebe9 code=0x7ffc0000
[  448.361133][   T33] audit: type=1326 audit(2000000304.170:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.0.5309" exe="/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f821218ebe9 code=0x7ffc0000
[  448.372438][   T33] audit: type=1326 audit(2000000304.170:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.0.5309" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821218ebe9 code=0x7ffc0000
[  448.381961][   T33] audit: type=1326 audit(2000000304.170:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.0.5309" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821218ebe9 code=0x7ffc0000
[  448.392246][   T33] audit: type=1326 audit(2000000304.190:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.0.5309" exe="/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f821218ebe9 code=0x7ffc0000
[  448.402119][   T33] audit: type=1326 audit(2000000304.190:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.0.5309" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821218ebe9 code=0x7ffc0000
[  448.414552][   T33] audit: type=1326 audit(2000000304.190:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18944 comm="syz.0.5309" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821218ebe9 code=0x7ffc0000
[  449.262321][T18993] loop1: detected capacity change from 0 to 64
[  449.263385][T18994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5332'.
[  449.368125][T18995] syz.1.5331: attempt to access beyond end of device
[  449.368125][T18995] loop1: rw=0, sector=16777216, nr_sectors = 2 limit=64
[  449.373787][T18995] Buffer I/O error on dev loop1, logical block 8388608, async page read
[  449.383983][T18995] syz.1.5331: attempt to access beyond end of device
[  449.383983][T18995] loop1: rw=0, sector=16777216, nr_sectors = 2 limit=64
[  449.395455][T18995] Buffer I/O error on dev loop1, logical block 8388608, async page read
[  450.408677][T19007] loop1: detected capacity change from 0 to 512
[  450.411615][T19007] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  450.418393][T19007] EXT4-fs (loop1): 1 truncate cleaned up
[  450.421123][T19007] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  450.457380][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  450.532924][T19013] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  450.536887][T19013] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  450.746110][  T793] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  450.903477][  T793] usb 2-1: unable to get BOS descriptor or descriptor too short
[  450.908678][  T793] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  450.912800][  T793] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9
[  450.918272][  T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  450.922151][  T793] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[  450.929691][  T793] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39
[  450.933918][  T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.940992][  T793] usb 2-1: Product: syz
[  450.942818][  T793] usb 2-1: Manufacturer: syz
[  450.944797][  T793] usb 2-1: SerialNumber: syz
[  450.951073][  T793] usb 2-1: config 0 descriptor??
[  450.954098][T19011] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  450.968396][    C1] usb 2-1: NFC: Urb failure (status -71)
[  450.972715][  T793] usb 2-1: NFC: Unable to get FW version
[  450.995662][  T793] pn533_usb 2-1:0.0: probe with driver pn533_usb failed with error -90
[  451.199196][ T5912] usb 2-1: USB disconnect, device number 65
[  452.101352][T19048] loop1: detected capacity change from 0 to 128
[  452.104482][T19048] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  452.110279][T19048] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  452.123689][T19048] overlayfs: failed to create directory ./file0/work (errno: 28); mounting read-only
[  452.127988][T19048] overlayfs: failed to get uuid (/bus, err=-95); falling back to uuid=null.
[  452.410601][T19052] loop1: detected capacity change from 0 to 32768
[  452.414619][T19052] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5357 (19052)
[  452.422904][T19052] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  452.427114][T19052] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  452.430517][T19052] BTRFS info (device loop1): using free-space-tree
[  452.637808][ T5856] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  453.022967][ T5236] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  453.092941][T19097] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5372'.
[  453.378073][ T5896] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  453.552250][ T5896] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  453.569152][ T5896] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  453.584469][ T5896] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  453.640419][ T5896] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  453.648989][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.652365][ T5896] usb 2-1: Product: syz
[  453.656406][ T5896] usb 2-1: Manufacturer: syz
[  453.660477][ T5896] usb 2-1: SerialNumber: syz
[  453.669757][ T5896] usb 2-1: bad CDC descriptors
[  453.846291][T19118] netlink: 'syz.0.5381': attribute type 29 has an invalid length.
[  453.855226][T19118] netlink: 'syz.0.5381': attribute type 29 has an invalid length.
[  453.862733][T19118] netlink: 500 bytes leftover after parsing attributes in process `syz.0.5381'.
[  453.887128][ T5313] usb 2-1: USB disconnect, device number 66
[  453.910813][T19120] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5382'.
[  453.939266][T19122] netlink: 'syz.0.5383': attribute type 11 has an invalid length.
[  454.716573][ T5313] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  454.876115][ T5313] usb 2-1: Using ep0 maxpacket: 16
[  454.889437][ T5313] usb 2-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2
[  454.892277][ T5313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  454.901232][ T5313] usb 2-1: Product: syz
[  454.902983][ T5313] usb 2-1: Manufacturer: syz
[  454.904620][ T5313] usb 2-1: SerialNumber: syz
[  454.908123][ T5313] usb 2-1: config 0 descriptor??
[  454.912221][ T5313] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  454.924538][ T5313] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2
[  455.118425][  T793] usb 2-1: USB disconnect, device number 67
[  455.133920][T19163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5402'.
[  455.137932][T19163] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  455.140901][T19163] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  455.579753][T19179] Non-string source
[  455.682634][T19189] loop1: detected capacity change from 0 to 512
[  455.686783][T19189] EXT4-fs: Ignoring removed oldalloc option
[  455.719601][T19189] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.5415: Parent and EA inode have the same ino 15
[  455.726920][T19189] EXT4-fs (loop1): 1 orphan inode deleted
[  455.730529][T19189] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  455.744763][T19189] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.5415: invalid indirect mapped block 234881024 (level 0)
[  455.778650][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  456.121369][   T33] audit: type=1326 audit(2000000311.940:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19223 comm="syz.0.5429" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821218ebe9 code=0x7ffc0000
[  456.143963][   T33] audit: type=1326 audit(2000000311.950:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19223 comm="syz.0.5429" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821218ebe9 code=0x7ffc0000
[  456.165832][   T33] audit: type=1326 audit(2000000311.950:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19223 comm="syz.0.5429" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f821218ebe9 code=0x7ffc0000
[  456.187616][   T33] audit: type=1326 audit(2000000311.950:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19223 comm="syz.0.5429" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821218ebe9 code=0x7ffc0000
[  456.209208][   T33] audit: type=1326 audit(2000000311.950:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19223 comm="syz.0.5429" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821218ebe9 code=0x7ffc0000
[  456.226103][   T33] audit: type=1326 audit(2000000311.960:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19223 comm="syz.0.5429" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f821218ebe9 code=0x7ffc0000
[  456.245732][   T33] audit: type=1326 audit(2000000311.960:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19223 comm="syz.0.5429" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821218ebe9 code=0x7ffc0000
[  456.265120][   T33] audit: type=1326 audit(2000000311.960:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19223 comm="syz.0.5429" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821218ebe9 code=0x7ffc0000
[  456.296523][   T33] audit: type=1326 audit(2000000311.970:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19223 comm="syz.0.5429" exe="/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f821218ebe9 code=0x7ffc0000
[  456.304910][   T33] audit: type=1326 audit(2000000311.970:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19223 comm="syz.0.5429" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821218ebe9 code=0x7ffc0000
[  456.310850][T19233] netlink: 'syz.1.5434': attribute type 5 has an invalid length.
[  456.471057][T19240] loop1: detected capacity change from 0 to 164
[  456.988788][T19263] Bluetooth: hci3: Frame reassembly failed (-84)
[  458.593894][T19298] tc_dump_action: action bad kind
[  459.056093][T16479] Bluetooth: hci3: command 0x1003 tx timeout
[  459.058664][ T5236] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  459.188707][T19315] loop1: detected capacity change from 0 to 65
[  459.192677][T19315] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway
[  459.313587][T19319] loop1: detected capacity change from 0 to 164
[  459.321900][T19319] isofs: Unable to find the ".." directory for NFS.
[  459.820280][T19327] loop1: detected capacity change from 0 to 65536
[  459.839700][T19327] XFS (loop1): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5
[  459.878789][T19327] XFS (loop1): Ending clean mount
[  460.419043][ T5856] XFS (loop1): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5
[  460.714188][T19377] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5495'.
[  461.156005][ T5912] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  461.317393][ T5912] usb 2-1: config 0 has an invalid interface number: 156 but max is 0
[  461.319944][ T5912] usb 2-1: config 0 has no interface number 0
[  461.322197][ T5912] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  461.329267][ T5912] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  461.337441][ T5912] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  461.343940][ T5912] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  461.352133][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  461.359269][T19408] syz_tun: entered promiscuous mode
[  461.361744][ T5912] usb 2-1: config 0 descriptor??
[  461.362204][T19408] batadv_slave_0: entered promiscuous mode
[  461.366028][T19408] hsr1: entered allmulticast mode
[  461.367627][T19408] syz_tun: entered allmulticast mode
[  461.367686][ T5912] gspca_main: spca561-2.14.0 probing abcd:cdee
[  461.369273][T19408] batadv_slave_0: entered allmulticast mode
[  461.568864][ T5912] spca561 2-1:0.156: probe with driver spca561 failed with error -22
[  461.571966][ T5912] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  461.574145][ T5912] usb 2-1: MIDIStreaming interface descriptor not found
[  461.617995][ T5912] usb 2-1: USB disconnect, device number 68
[  462.108297][T19448] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  462.486243][ T5896] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  462.635985][ T5896] usb 2-1: Using ep0 maxpacket: 16
[  462.643067][ T5896] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  462.648426][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  462.651512][ T5896] usb 2-1: Product: syz
[  462.653185][ T5896] usb 2-1: Manufacturer: syz
[  462.655024][ T5896] usb 2-1: SerialNumber: syz
[  462.659797][ T5896] usb 2-1: config 0 descriptor??
[  462.664253][ T5896] appledisplay 2-1:0.0: Could not find int-in endpoint
[  462.669529][ T5896] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  462.858500][T19457] netlink: 'syz.0.5530': attribute type 1 has an invalid length.
[  462.861611][T19457] netlink: 'syz.0.5530': attribute type 1 has an invalid length.
[  462.875284][ T5896] usb 2-1: USB disconnect, device number 69
[  462.944606][T19463] netlink: 'syz.0.5533': attribute type 5 has an invalid length.
[  463.238216][T19494] netlink: 'syz.3.5547': attribute type 1 has an invalid length.
[  463.240564][T19494] netlink: 'syz.3.5547': attribute type 2 has an invalid length.
[  463.243024][T19494] netlink: 1164 bytes leftover after parsing attributes in process `syz.3.5547'.
[  463.275698][T19496] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5548'.
[  463.374241][T19502] netlink: 'syz.3.5551': attribute type 10 has an invalid length.
[  463.661816][T19529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5560'.
[  463.665428][T19529] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5560'.
[  463.688246][T19531] netlink: 'syz.1.5561': attribute type 4 has an invalid length.
[  463.691281][T19531] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5561'.
[  463.831193][T19545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5568'.
[  464.024366][T19568] ALSA: mixer_oss: invalid OSS volume '49'
[  464.028666][T19568] ALSA: mixer_oss: invalid OSS volume 'Invalid'
[  464.541178][ T5896] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  464.688270][ T5896] usb 2-1: Using ep0 maxpacket: 32
[  464.695018][ T5896] usb 2-1: config 0 has an invalid interface number: 50 but max is 0
[  464.699988][ T5896] usb 2-1: config 0 has no interface number 0
[  464.702433][ T5896] usb 2-1: config 0 interface 50 has no altsetting 0
[  464.709755][ T5896] usb 2-1: New USB device found, idVendor=067b, idProduct=0307, bcdDevice=13.70
[  464.713261][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  464.717256][ T5896] usb 2-1: Product: syz
[  464.718898][ T5896] usb 2-1: Manufacturer: syz
[  464.721295][ T5896] usb 2-1: SerialNumber: syz
[  464.725353][ T5896] usb 2-1: config 0 descriptor??
[  464.731128][ T5896] pl2303 2-1:0.50: required interrupt-in endpoint missing
[  464.938650][    T9] usb 2-1: USB disconnect, device number 70
[  465.499918][T19634] netlink: 'syz.1.5610': attribute type 1 has an invalid length.
[  465.503622][T19634] netlink: 'syz.1.5610': attribute type 4 has an invalid length.
[  465.511870][T19634] netlink: 208 bytes leftover after parsing attributes in process `syz.1.5610'.
[  465.515784][T19634] NCSI netlink: No device for ifindex 3088861696
[  465.657340][T19639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5613'.
[  466.118039][T19663] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  466.121438][T19663] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  466.269193][T19682] loop1: detected capacity change from 0 to 4096
[  466.272105][T19682] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  466.275374][T19682] ntfs3(loop1): $Volume is corrupted.
[  466.499669][T19692] (syz.1.5638,19692,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory.
[  467.730033][T19759] overlayfs: failed to clone upperpath
[  468.096139][ T5236] Bluetooth: hci2: command 0x0405 tx timeout
[  468.358731][T19798] loop1: detected capacity change from 0 to 512
[  468.362000][T19798] EXT4-fs: Ignoring removed oldalloc option
[  468.370592][T19798] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  468.391780][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  468.430813][T19803] sctp: [Deprecated]: syz.1.5688 (pid 19803) Use of struct sctp_assoc_value in delayed_ack socket option.
[  468.430813][T19803] Use struct sctp_sack_info instead
[  468.647679][T19817] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5695'.
[  468.698144][T19821] loop1: detected capacity change from 0 to 128
[  468.730488][T19821] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  468.739936][T19821] __find_get_block_slow() failed. block=144115188075855873, b_blocknr=0, b_state=0x00000010, b_size=1024, device loop1 blocksize: 1024
[  468.744997][T19821] grow_buffers: requested out-of-range block 144115188075855873 for device loop1
[  468.751083][T19821] EXT4-fs warning (device loop1): ext4_resize_fs:2019: can't read last block, resize aborted
[  468.779505][ T5856] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  469.240364][T19830] loop1: detected capacity change from 0 to 256
[  469.244722][T19830] FAT-fs (loop1): Directory bread(block 1285) failed
[  469.252313][T19830] FAT-fs (loop1): FAT read failed (blocknr 1281)
[  469.360643][T19841] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5705'.
[  469.717196][T19847] loop1: detected capacity change from 0 to 32768
[  469.720976][T19847] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5708 (19847)
[  469.728859][T19847] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  469.732552][T19847] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  469.735473][T19847] BTRFS info (device loop1): using free-space-tree
[  469.790924][ T5856] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  469.928310][T19872] loop1: detected capacity change from 0 to 1024
[  469.982194][   T28] hfsplus: b-tree write err: -5, ino 4
[  470.176026][ T5236] Bluetooth: hci2: command 0x0405 tx timeout
[  470.280910][   T51] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  470.566064][   T51] usb 2-1: Using ep0 maxpacket: 8
[  470.570551][   T51] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  470.575994][   T51] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  470.578968][   T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.581347][   T51] usb 2-1: Product: syz
[  470.582678][   T51] usb 2-1: Manufacturer: syz
[  470.584434][   T51] usb 2-1: SerialNumber: syz
[  470.812579][   T51] usb 2-1: config 0 descriptor??
[  470.818439][   T51] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[  471.021396][    T9] usb 2-1: USB disconnect, device number 71
[  471.362219][T19912] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode
[  471.374824][T19912] macvtap1: entered promiscuous mode
[  471.379796][T19912] mac80211_hwsim hwsim17 wlan1: left promiscuous mode
[  471.494472][T19916] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  471.982477][T19933] loop1: detected capacity change from 0 to 2048
[  472.003001][T19933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  472.035794][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  472.316094][   T51] usb 2-1: new full-speed USB device number 72 using dummy_hcd
[  472.468524][   T51] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  472.472524][   T51] usb 2-1: config 0 has no interfaces?
[  472.474371][   T51] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  472.477910][   T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.482232][   T51] usb 2-1: config 0 descriptor??
[  472.692214][T19941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5743'.
[  472.698829][    T9] usb 2-1: USB disconnect, device number 72
[  472.879748][T19951] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5748'.
[  473.275423][T19975] loop1: detected capacity change from 0 to 1024
[  473.649550][T19996] netlink: 'syz.3.5769': attribute type 2 has an invalid length.
[  473.652103][T19996] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5769'.
[  474.790453][T20029] binder: 20028:20029 ioctl c0306201 2000000003c0 returned -22
[  475.623627][ T5236] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  475.719991][T20062] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.5796'.
[  475.953431][T20068] loop1: detected capacity change from 0 to 32768
[  475.990009][T20068] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  476.013183][T20068] XFS (loop1): Ending clean mount
[  476.069484][ T5856] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  476.707934][T20123] loop1: detected capacity change from 0 to 512
[  476.722438][T20123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  476.777501][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  477.166028][    T9] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  477.326021][    T9] usb 2-1: Using ep0 maxpacket: 8
[  477.331139][    T9] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  477.334786][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  477.343336][    T9] usb 2-1: config 0 descriptor??
[  478.811595][T20194] futex_wake_op: syz.0.5849 tries to shift op by -1; fix this program
[  479.488766][    T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  479.492418][    T9] asix 2-1:0.0: probe with driver asix failed with error -71
[  479.503109][    T9] usb 2-1: USB disconnect, device number 73
[  479.985594][T20223] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5863'.
[  479.991172][T20223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5863'.
[  479.995810][T20223] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5863'.
[  479.998975][T20223] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5863'.
[  480.001847][T20223] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5863'.
[  480.392912][   T33] kauditd_printk_skb: 5 callbacks suppressed
[  480.392923][   T33] audit: type=1804 audit(480.278:257): pid=20237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5869" name="/newroot/1638/file0" dev="tmpfs" ino=8573 res=1 errno=0
[  480.578077][T20243] loop1: detected capacity change from 0 to 32768
[  480.581176][T20243] bcachefs (/dev/loop1): error validating superblock: Invalid superblock layout: superblocks overlap
[  480.581176][T20243]   (sb 1 ends at 25769809920 next starts at 30720
[  480.588060][T20243] bcachefs: bch2_fs_get_tree() error: invalid_sb_layout_superblocks_overlap
[  480.668704][T20249] netlink: 'syz.1.5875': attribute type 9 has an invalid length.
[  480.857292][T20264] loop1: detected capacity change from 0 to 256
[  480.899874][T20264] FAT-fs (loop1): Directory bread(block 64) failed
[  480.902403][T20264] FAT-fs (loop1): Directory bread(block 65) failed
[  480.904927][T20264] FAT-fs (loop1): Directory bread(block 66) failed
[  480.908549][T20264] FAT-fs (loop1): Directory bread(block 67) failed
[  480.912029][T20264] FAT-fs (loop1): Directory bread(block 68) failed
[  480.914750][T20264] FAT-fs (loop1): Directory bread(block 69) failed
[  480.918962][T20264] FAT-fs (loop1): Directory bread(block 70) failed
[  480.922217][T20264] FAT-fs (loop1): Directory bread(block 71) failed
[  480.924750][T20264] FAT-fs (loop1): Directory bread(block 72) failed
[  480.927361][T20264] FAT-fs (loop1): Directory bread(block 73) failed
[  481.221921][T20284] CIFS: VFS: Malformed UNC in devname
[  481.551528][T20294] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5896'.
[  481.906261][    T9] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  482.066029][    T9] usb 2-1: Using ep0 maxpacket: 32
[  482.073859][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  482.079303][    T9] usb 2-1: config 2 has an invalid interface number: 221 but max is 0
[  482.082165][    T9] usb 2-1: config 2 has no interface number 0
[  482.091238][    T9] usb 2-1: config 2 interface 221 has no altsetting 0
[  482.098478][    T9] usb 2-1: string descriptor 0 read error: -22
[  482.106087][    T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=85.42
[  482.109648][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  482.119266][    T9] usb 2-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  482.125458][    T9] usb 2-1: No valid video chain found.
[  482.344980][   T51] usb 2-1: USB disconnect, device number 74
[  482.909246][T20323] fuse: blksize only supported for fuseblk
[  482.974592][T20331] loop1: detected capacity change from 0 to 512
[  482.979032][T20331] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  482.988132][T20331] EXT4-fs (loop1): 1 truncate cleaned up
[  482.990910][T20331] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  483.221589][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  483.291057][   T33] audit: type=1800 audit(483.178:258): pid=20344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5915" name="file1" dev="tmpfs" ino=8701 res=0 errno=0
[  483.337629][T20346] loop1: detected capacity change from 0 to 2048
[  483.340199][T20346] EXT4-fs: Ignoring removed i_version option
[  483.351242][T20346] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  483.459948][ T5856] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  483.610323][T20364] loop1: detected capacity change from 0 to 2048
[  483.646124][T20364] Alternate GPT is invalid, using primary GPT.
[  483.648096][T20364]  loop1: p2 p3 p7
[  484.118553][T20380] loop1: detected capacity change from 0 to 32768
[  484.121525][T20380] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5929 (20380)
[  484.130040][T20380] BTRFS info (device loop1): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  484.138947][T20380] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  484.142076][T20380] BTRFS info (device loop1): using free-space-tree
[  484.294138][ T5856] BTRFS info (device loop1): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  485.688411][T20463] loop1: detected capacity change from 0 to 32768
[  485.700777][T20463] ea_get: invalid extended attribute
[  485.706592][   T33] audit: type=1800 audit(485.588:259): pid=20463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5956" name="file1" dev="loop1" ino=4 res=0 errno=0
[  485.726629][T20463] ea_get: invalid extended attribute
[  487.067631][T20504] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5975'.
[  487.332931][T20526] netlink: 'syz.0.5986': attribute type 15 has an invalid length.
[  487.335734][T20526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5986'.
[  487.350933][T20526] netlink: 'syz.0.5986': attribute type 15 has an invalid length.
[  487.350962][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0
[  487.353914][T20526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5986'.
[  487.368135][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[  487.372921][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[  487.381995][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[  488.228792][T20564] netlink: 9280 bytes leftover after parsing attributes in process `syz.1.6003'.
[  489.405385][T20590] loop1: detected capacity change from 0 to 32768
[  489.412389][T20590] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  489.424086][T20590] XFS (loop1): Ending clean mount
[  489.457377][ T5856] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  489.661055][T20605] loop1: detected capacity change from 0 to 8
[  489.664799][T20605] SQUASHFS error: zlib decompression failed, data probably corrupt
[  489.667583][T20605] SQUASHFS error: Failed to read block 0x9b: -5
[  489.670015][T20605] SQUASHFS error: Unable to read metadata cache entry [99]
[  489.672242][T20605] SQUASHFS error: Unable to read inode 0x127
[  489.956036][    T9] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  490.109763][    T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice=af.57
[  490.119497][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  490.122404][    T9] usb 2-1: Product: syz
[  490.123971][    T9] usb 2-1: Manufacturer: syz
[  490.125687][    T9] usb 2-1: SerialNumber: syz
[  490.139817][    T9] usb 2-1: config 0 descriptor??
[  490.356336][   T51] usb 2-1: USB disconnect, device number 75
[  490.948661][T20655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6041'.
[  492.014529][T20705] macsec0: entered promiscuous mode
[  492.017876][T20705] macsec0: entered allmulticast mode
[  493.388651][T20738] netlink: 'syz.3.6078': attribute type 12 has an invalid length.
[  493.391568][T20738] netlink: 120 bytes leftover after parsing attributes in process `syz.3.6078'.
[  493.757393][T20760] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6089'.
[  494.665272][T20801] ieee802154 phy0 wpan0: encryption failed: -22
[  494.714973][T20805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6109'.
[  495.386238][T20831] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  495.975986][   T51] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  496.128162][   T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  496.132053][   T51] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  496.136719][   T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  496.140719][   T51] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  496.148621][   T51] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  496.152356][   T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.155653][   T51] usb 2-1: Product: syz
[  496.157554][   T51] usb 2-1: Manufacturer: syz
[  496.159541][   T51] usb 2-1: SerialNumber: syz
[  496.164201][   T51] usb 2-1: config 0 descriptor??
[  496.168701][   T51] ums-isd200 2-1:0.0: USB Mass Storage device detected
[  496.460880][   T51] ums-isd200 2-1:0.0: probe with driver ums-isd200 failed with error -22
[  496.582470][    T9] usb 2-1: USB disconnect, device number 76
[  498.042413][   T33] audit: type=1326 audit(498.933:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20908 comm="syz.0.6151" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821218ebe9 code=0x7ffc0000
[  498.064600][   T33] audit: type=1326 audit(498.933:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20908 comm="syz.0.6151" exe="/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f821218ebe9 code=0x7ffc0000
[  498.085908][   T33] audit: type=1326 audit(498.933:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20908 comm="syz.0.6151" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821218ebe9 code=0x7ffc0000
[  498.123725][   T33] audit: type=1326 audit(498.933:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20908 comm="syz.0.6151" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821218ebe9 code=0x7ffc0000
[  498.146355][   T33] audit: type=1326 audit(498.933:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20908 comm="syz.0.6151" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f821218ebe9 code=0x7ffc0000
[  498.164085][   T33] audit: type=1326 audit(498.933:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20908 comm="syz.0.6151" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821218ebe9 code=0x7ffc0000
[  498.187648][   T33] audit: type=1326 audit(498.933:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20908 comm="syz.0.6151" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821218ebe9 code=0x7ffc0000
[  498.212664][   T33] audit: type=1326 audit(498.933:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20908 comm="syz.0.6151" exe="/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f821218ebe9 code=0x7ffc0000
[  498.222537][   T33] audit: type=1326 audit(498.933:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20908 comm="syz.0.6151" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821218ebe9 code=0x7ffc0000
[  498.236900][   T33] audit: type=1326 audit(498.933:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20908 comm="syz.0.6151" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821218ebe9 code=0x7ffc0000
[  498.528451][T20925] input: syz1 as /devices/virtual/input/input25
[  498.953330][T20959] loop1: detected capacity change from 0 to 256
[  498.961539][T20959] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  498.965824][T20959] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  500.210640][    T9] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  500.376670][    T9] usb 2-1: Using ep0 maxpacket: 32
[  500.384029][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  500.394172][    T9] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  500.403207][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.416246][    T9] usb 2-1: Product: syz
[  500.418010][    T9] usb 2-1: Manufacturer: syz
[  500.419910][    T9] usb 2-1: SerialNumber: syz
[  500.429167][    T9] usb 2-1: config 0 descriptor??
[  500.438759][    T9] usb 2-1: bad CDC descriptors
[  500.441448][    T9] usb 2-1: unsupported MDLM descriptors
[  500.648678][    T9] usb 2-1: USB disconnect, device number 77
[  501.228498][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  501.231035][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  501.614998][T21064] netlink: 25 bytes leftover after parsing attributes in process `syz.1.6223'.
[  502.691116][T21091] tipc: Enabled bearer <eth:team0>, priority 0
[  502.869179][T21102] netlink: 'syz.3.6241': attribute type 83 has an invalid length.
[  502.955207][ T5236] Bluetooth: hci2: unexpected event 0x3e length: 283 > 260
[  502.955231][ T5236] Bluetooth: hci2: unexpected subevent 0x0d length: 282 > 260
[  502.965132][ T5236] Bluetooth: hci2: adv larger than maximum supported
[  502.965225][ T5236] Bluetooth: hci2: adv larger than maximum supported
[  503.566232][    T9] usb 2-1: new full-speed USB device number 78 using dummy_hcd
[  503.779392][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  503.782414][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00
[  503.787820][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  503.793814][    T9] usb 2-1: config 0 descriptor??
[  504.214662][    T9] hid_parser_main: 138 callbacks suppressed
[  504.214683][    T9] logitech 0003:046D:C294.001A: unknown main item tag 0x6
[  504.223124][    T9] logitech 0003:046D:C294.001A: item fetching failed at offset 5/7
[  504.226910][    T9] logitech 0003:046D:C294.001A: parse failed
[  504.229165][    T9] logitech 0003:046D:C294.001A: probe with driver logitech failed with error -22
[  504.417076][ T5896] usb 2-1: USB disconnect, device number 78
[  505.192151][T21188] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6280'.
[  505.772003][T21227] netlink: zone id is out of range
[  505.773861][T21227] netlink: zone id is out of range
[  505.780448][T21227] netlink: zone id is out of range
[  505.782280][T21227] netlink: zone id is out of range
[  505.783986][T21227] netlink: zone id is out of range
[  505.785657][T21227] netlink: zone id is out of range
[  505.789048][T21227] netlink: zone id is out of range
[  505.791747][T21227] netlink: zone id is out of range
[  505.794215][T21227] netlink: zone id is out of range
[  505.795804][T21227] netlink: zone id is out of range
[  505.872320][T21236] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  506.319811][T21278] loop1: detected capacity change from 0 to 4096
[  506.678199][T21297] loop1: detected capacity change from 0 to 32768
[  506.681466][T21297] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6308 (21297)
[  506.688165][T21297] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  506.692182][T21297] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  506.695500][T21297] BTRFS info (device loop1): using free-space-tree
[  506.710356][T21300] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  506.713388][T21300] batman_adv: batadv0: Removing interface: batadv_slave_0
[  506.718372][T21300] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  506.721869][T21300] batman_adv: batadv0: Removing interface: batadv_slave_1
[  506.891608][ T5856] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  507.494244][T21330] loop1: detected capacity change from 0 to 32768
[  507.501151][T21330] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6316 (21330)
[  507.507880][T21330] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  507.511262][T21330] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  507.514346][T21330] BTRFS info (device loop1): disk space caching is enabled
[  507.517241][T21330] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  507.562223][T21330] BTRFS info (device loop1): rebuilding free space tree
[  507.571866][T21330] BTRFS info (device loop1): disabling free space tree
[  507.574501][T21330] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  507.579714][T21330] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  507.637110][ T5856] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  507.815783][T21369] loop1: detected capacity change from 0 to 256
[  507.818463][T21369] exfat: Deprecated parameter 'utf8'
[  507.820250][T21369] exfat: Deprecated parameter 'namecase'
[  507.822137][T21369] exfat: Deprecated parameter 'utf8'
[  507.833138][T21369] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  508.126158][ T5912] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  508.298049][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  508.302140][ T5912] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  508.314819][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  508.322495][ T5912] usb 2-1: config 0 descriptor??
[  508.745239][ T5912] keytouch 0003:0926:3333.001B: fixing up Keytouch IEC report descriptor
[  508.770496][ T5912] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.001B/input/input26
[  508.923092][ T5912] keytouch 0003:0926:3333.001B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  509.645111][T21410] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6343'.
[  510.089276][T21423] netlink: 'syz.3.6349': attribute type 4 has an invalid length.
[  511.049283][ T5912] usb 2-1: USB disconnect, device number 79
[  512.387236][T21499] overlayfs: failed to clone upperpath
[  512.392625][T21499] overlayfs: failed to clone upperpath
[  512.532958][T21505] IPv6: sit1: Disabled Multicast RS
[  512.790596][T21519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6393'.
[  512.958503][T21532] netlink: 277 bytes leftover after parsing attributes in process `syz.0.6398'.
[  514.364322][T21574] overlayfs: failed to resolve './file0': -2
[  514.484595][T21582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6421'.
[  514.502990][T21582] bridge1: port 1(veth0_to_bond) entered blocking state
[  514.505417][T21582] bridge1: port 1(veth0_to_bond) entered disabled state
[  514.509179][T21582] veth0_to_bond: entered allmulticast mode
[  514.512477][T21582] veth0_to_bond: entered promiscuous mode
[  514.970855][T21605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6431'.
[  514.973839][T21605] net_ratelimit: 3 callbacks suppressed
[  514.973893][T21605] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  515.079335][   T33] kauditd_printk_skb: 4 callbacks suppressed
[  515.079347][   T33] audit: type=1326 audit(515.973:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21564 comm="syz.1.6415" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4e698ebe9 code=0x7fc00000
[  515.203305][T21612] netlink: 'syz.1.6434': attribute type 10 has an invalid length.
[  515.209859][T21612] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6434'.
[  515.219964][T21612] team0: entered promiscuous mode
[  515.226316][T21612] team0: entered allmulticast mode
[  515.230931][T21612] 8021q: adding VLAN 0 to HW filter on device team0
[  515.236685][T21612] tipc: Resetting bearer <eth:team0>
[  515.242360][T21612] bridge0: port 1(team0) entered blocking state
[  515.251020][T21612] bridge0: port 1(team0) entered disabled state
[  515.259535][T21612] tipc: Resetting bearer <eth:team0>
[  515.552080][T21627] loop1: detected capacity change from 0 to 32768
[  515.555430][T21627] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section journal_seq_blacklist: entry 2 start >= end (16259633109040355076 >= 202532834100012515)
[  515.555430][T21627] journal_seq_blacklist (size 64):
[  515.555430][T21627] 0-9895604649984 8747515680081339234-12315680807489264408 16259633109040355076-202532834100012515
[  515.555430][T21627] 
[  515.570665][T21627] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal_seq_blacklist
[  516.049028][T21657] QAT: failed to copy from user cfg_data.
[  516.163587][T21667] netlink: 'syz.1.6459': attribute type 1 has an invalid length.
[  516.170900][T21667] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6459'.
[  516.485988][ T5912] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  516.669819][ T5912] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  516.681694][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  516.688939][ T5912] usb 2-1: config 0 descriptor??
[  516.692681][ T5912] cp210x 2-1:0.0: cp210x converter detected
[  516.776415][T21682] netlink: 'syz.0.6466': attribute type 10 has an invalid length.
[  517.097801][ T5912] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[  517.104524][ T5912] usb 2-1: cp210x converter now attached to ttyUSB0
[  517.305812][ T5912] usb 2-1: USB disconnect, device number 80
[  517.311295][ T5912] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  517.315447][ T5912] cp210x 2-1:0.0: device disconnected
[  517.919353][T21721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6485'.
[  518.102696][T21727] loop1: detected capacity change from 0 to 8192
[  518.350138][T21741] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  519.070588][T21759] loop1: detected capacity change from 0 to 32768
[  519.074065][T21759] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6501 (21759)
[  519.082491][T21759] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  519.086112][T21759] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  519.089012][T21759] BTRFS info (device loop1): using free-space-tree
[  519.147490][ T5856] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  519.683631][T21802] loop1: detected capacity change from 0 to 32768
[  519.686687][T21802] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6515 (21802)
[  519.701289][T21802] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  519.704492][T21802] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  519.711071][T21802] BTRFS info (device loop1): using free-space-tree
[  519.801323][ T5856] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  520.445536][T21866] netfs: Couldn't get user pages (rc=-14)
[  520.452024][T21866] netfs: Zero-sized read [R=4e]
[  521.878758][T21912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6559'.
[  521.881636][T21912] netlink: 'syz.3.6559': attribute type 11 has an invalid length.
[  521.889135][T21912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6559'.
[  521.889169][ T5876] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  521.891893][T21912] netlink: 'syz.3.6559': attribute type 11 has an invalid length.
[  521.901897][ T5876] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  521.906513][ T5876] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  521.916934][ T5876] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  522.039453][T21922] veth5: entered allmulticast mode
[  523.350328][T21943] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  523.354455][T21943] Error validating options; rc = [-22]
[  524.006045][T21971] overlayfs: conflicting options: userxattr,metacopy=on
[  524.966811][T22012] virtio-fs: tag </dev/md0> not found
[  525.280863][T22034] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode
[  526.346450][T22071] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6631'.
[  526.974748][T22103] 9pnet_fd: Insufficient options for proto=fd
[  528.410066][T22163] 8021q: VLANs not supported on lo
[  528.651781][T22179] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  528.655500][T22178] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  528.690448][T22183] netlink: 'syz.3.6684': attribute type 10 has an invalid length.
[  528.698373][T22183] bond0: entered promiscuous mode
[  528.700319][T22183] bond_slave_0: entered promiscuous mode
[  528.702455][T22183] bond_slave_1: entered promiscuous mode
[  528.704413][T22183] bridge_slave_1: entered promiscuous mode
[  528.710138][ T5912] syz1: Port: 1 Link DOWN
[  529.783049][T22213] netlink: 'syz.0.6697': attribute type 11 has an invalid length.
[  530.097460][T22236] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad)
[  530.099742][T22236] PKCS7: Only support pkcs7_signedData type
[  531.271833][T22246] netlink: 268 bytes leftover after parsing attributes in process `syz.3.6711'.
[  531.274868][T22246] unsupported nla_type 65024
[  531.728805][T22257] overlayfs: failed to clone upperpath
[  534.135624][   T33] audit: type=1326 audit(535.023:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22308 comm="syz.3.6737" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0cd8ebe9 code=0x7ffc0000
[  534.143387][   T33] audit: type=1326 audit(535.023:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22308 comm="syz.3.6737" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0cd8ebe9 code=0x7ffc0000
[  534.152452][   T33] audit: type=1326 audit(535.023:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22308 comm="syz.3.6737" exe="/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f1b0cd8ebe9 code=0x7ffc0000
[  534.161229][   T33] audit: type=1326 audit(535.023:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22308 comm="syz.3.6737" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0cd8ebe9 code=0x7ffc0000
[  534.170202][   T33] audit: type=1326 audit(535.023:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22308 comm="syz.3.6737" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0cd8ebe9 code=0x7ffc0000
[  534.348992][T22319] delete_channel: no stack
[  535.812684][T16479] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  535.822107][T16479] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  535.826657][T16479] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  535.830471][T16479] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  535.840697][T16479] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  535.882581][   T33] audit: type=1326 audit(536.773:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22361 comm="syz.0.6761" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821218ebe9 code=0x7ffc0000
[  535.905566][   T33] audit: type=1326 audit(536.773:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22361 comm="syz.0.6761" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821218ebe9 code=0x7ffc0000
[  535.924041][   T33] audit: type=1326 audit(536.773:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22361 comm="syz.0.6761" exe="/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f821218ebe9 code=0x7ffc0000
[  535.944677][   T33] audit: type=1326 audit(536.783:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22361 comm="syz.0.6761" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821218ebe9 code=0x7ffc0000
[  535.986025][   T33] audit: type=1326 audit(536.783:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22361 comm="syz.0.6761" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821218ebe9 code=0x7ffc0000
[  536.016631][T22356] chnl_net:caif_netlink_parms(): no params data found
[  536.169314][T22356] bridge0: port 1(bridge_slave_0) entered blocking state
[  536.172259][T22356] bridge0: port 1(bridge_slave_0) entered disabled state
[  536.175142][T22356] bridge_slave_0: entered allmulticast mode
[  536.199201][T22356] bridge_slave_0: entered promiscuous mode
[  536.207795][T22356] bridge0: port 2(bridge_slave_1) entered blocking state
[  536.210741][T22356] bridge0: port 2(bridge_slave_1) entered disabled state
[  536.213598][T22356] bridge_slave_1: entered allmulticast mode
[  536.223129][T22356] bridge_slave_1: entered promiscuous mode
[  536.303939][T22356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  536.315285][T22356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  536.380030][T22356] team0: Port device team_slave_0 added
[  536.384954][T22356] team0: Port device team_slave_1 added
[  536.467120][T22356] batman_adv: batadv0: Adding interface: batadv_slave_0
[  536.469838][T22356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  536.496386][T22356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  536.521355][T22356] batman_adv: batadv0: Adding interface: batadv_slave_1
[  536.523983][T22356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  536.545996][T22356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  536.618636][T22356] hsr_slave_0: entered promiscuous mode
[  536.621400][T22356] hsr_slave_1: entered promiscuous mode
[  536.624078][T22356] debugfs: 'hsr0' already exists in 'hsr'
[  536.632266][T22356] Cannot create hsr debugfs directory
[  536.850847][T22356] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  536.874210][T22356] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  536.886946][T22356] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  536.907232][T22356] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  536.987538][T22356] bridge0: port 2(bridge_slave_1) entered blocking state
[  536.990610][T22356] bridge0: port 2(bridge_slave_1) entered forwarding state
[  536.993945][T22356] bridge0: port 1(bridge_slave_0) entered blocking state
[  536.997176][T22356] bridge0: port 1(bridge_slave_0) entered forwarding state
[  537.067454][T22356] 8021q: adding VLAN 0 to HW filter on device bond0
[  537.073708][   T74] bridge0: port 1(bridge_slave_0) entered disabled state
[  537.086693][   T74] bridge0: port 2(bridge_slave_1) entered disabled state
[  537.113392][T22356] 8021q: adding VLAN 0 to HW filter on device team0
[  537.119776][   T74] bridge0: port 1(bridge_slave_0) entered blocking state
[  537.122025][   T74] bridge0: port 1(bridge_slave_0) entered forwarding state
[  537.157786][   T74] bridge0: port 2(bridge_slave_1) entered blocking state
[  537.160497][   T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[  537.294778][T22356] 8021q: adding VLAN 0 to HW filter on device batadv0
[  537.452117][T22356] veth0_vlan: entered promiscuous mode
[  537.463245][T22356] veth1_vlan: entered promiscuous mode
[  537.483243][T22356] veth0_macvtap: entered promiscuous mode
[  537.496796][T22356] veth1_macvtap: entered promiscuous mode
[  537.510744][T22356] batman_adv: batadv0: Interface activated: batadv_slave_0
[  537.517775][T22356] batman_adv: batadv0: Interface activated: batadv_slave_1
[  537.530268][ T5876] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  537.537383][ T5876] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  537.553101][ T5876] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  537.561795][ T5876] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  537.676532][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  537.679665][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  537.703132][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  537.708280][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  537.949552][T16479] Bluetooth: hci3: command tx timeout
[  538.196890][T22444] loop4: detected capacity change from 0 to 32768
[  538.227444][T22444] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  538.237839][T22444] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  538.281320][T22356] ocfs2: Unmounting device (7,4) on (node local)
[  538.479089][T22468] loop4: detected capacity change from 0 to 1024
[  539.213779][   T33] kauditd_printk_skb: 38 callbacks suppressed
[  539.213797][   T33] audit: type=1326 audit(540.103:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22497 comm="syz.0.6813" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821218ebe9 code=0x7ffc0000
[  539.232774][   T33] audit: type=1326 audit(540.113:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22497 comm="syz.0.6813" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f821212add9 code=0x7ffc0000
[  539.243127][   T33] audit: type=1326 audit(540.113:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22497 comm="syz.0.6813" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f821212add9 code=0x7ffc0000
[  539.252346][   T33] audit: type=1326 audit(540.113:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22497 comm="syz.0.6813" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f821212add9 code=0x7ffc0000
[  539.263325][   T33] audit: type=1326 audit(540.113:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22497 comm="syz.0.6813" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f821212add9 code=0x7ffc0000
[  539.272593][   T33] audit: type=1326 audit(540.113:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22497 comm="syz.0.6813" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f821212add9 code=0x7ffc0000
[  539.282652][   T33] audit: type=1326 audit(540.113:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22497 comm="syz.0.6813" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f821212add9 code=0x7ffc0000
[  539.293596][   T33] audit: type=1326 audit(540.113:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22497 comm="syz.0.6813" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f821212add9 code=0x7ffc0000
[  539.302240][   T33] audit: type=1326 audit(540.113:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22497 comm="syz.0.6813" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f821212add9 code=0x7ffc0000
[  539.312284][   T33] audit: type=1326 audit(540.113:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22497 comm="syz.0.6813" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f821212add9 code=0x7ffc0000
[  539.334244][T22504] overlayfs: failed to clone upperpath
[  539.569840][T22517] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6erspan0, syncid = 0, id = 0
[  539.689415][T22519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6823'.
[  540.038827][T16479] Bluetooth: hci3: command tx timeout
[  540.952166][T22542] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  541.459041][ T5236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  541.466233][ T5236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  541.473227][ T5236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  541.478326][ T5236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  541.481835][ T5236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  541.614138][T22548] chnl_net:caif_netlink_parms(): no params data found
[  541.673606][T22548] bridge0: port 1(bridge_slave_0) entered blocking state
[  541.676203][T22548] bridge0: port 1(bridge_slave_0) entered disabled state
[  541.678626][T22548] bridge_slave_0: entered allmulticast mode
[  541.681426][T22548] bridge_slave_0: entered promiscuous mode
[  541.684789][T22548] bridge0: port 2(bridge_slave_1) entered blocking state
[  541.687756][T22548] bridge0: port 2(bridge_slave_1) entered disabled state
[  541.690093][T22548] bridge_slave_1: entered allmulticast mode
[  541.692862][T22548] bridge_slave_1: entered promiscuous mode
[  541.718927][T22548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  541.724133][T22548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  541.745105][T22548] team0: Port device team_slave_0 added
[  541.749556][T22548] team0: Port device team_slave_1 added
[  541.769317][T22548] batman_adv: batadv0: Adding interface: batadv_slave_0
[  541.771567][T22548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  541.779874][T22548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  541.788016][T22548] batman_adv: batadv0: Adding interface: batadv_slave_1
[  541.790361][T22548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  541.798393][T22548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  541.829855][T22548] hsr_slave_0: entered promiscuous mode
[  541.832313][T22548] hsr_slave_1: entered promiscuous mode
[  541.834629][T22548] debugfs: 'hsr0' already exists in 'hsr'
[  541.836756][T22548] Cannot create hsr debugfs directory
[  541.981010][T22548] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  541.985617][T22548] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  541.992957][T22548] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  541.997648][T22548] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  542.075587][T22548] 8021q: adding VLAN 0 to HW filter on device bond0
[  542.103663][T22548] 8021q: adding VLAN 0 to HW filter on device team0
[  542.109268][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state
[  542.111534][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state
[  542.122935][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state
[  542.125097][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state
[  542.253064][T22548] 8021q: adding VLAN 0 to HW filter on device batadv0
[  542.371170][T22548] veth0_vlan: entered promiscuous mode
[  542.377097][T22548] veth1_vlan: entered promiscuous mode
[  542.393712][T22548] veth0_macvtap: entered promiscuous mode
[  542.398528][T22548] veth1_macvtap: entered promiscuous mode
[  542.410226][T22548] batman_adv: batadv0: Interface activated: batadv_slave_0
[  542.417637][T22548] batman_adv: batadv0: Interface activated: batadv_slave_1
[  542.423966][T20319] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  542.428654][T20319] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  542.433365][T20319] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  542.436821][T20319] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  542.506736][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  542.510672][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  542.525213][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  542.529365][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  542.625669][T22598] loop5: detected capacity change from 0 to 64
[  542.860576][T22600] loop5: detected capacity change from 0 to 32768
[  542.879784][T22600] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  542.898497][T22600] XFS (loop5): Ending clean mount
[  542.902587][T22600] XFS (loop5): Quotacheck needed: Please wait.
[  542.970312][T22600] XFS (loop5): Quotacheck: Done.
[  543.029152][T22548] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  543.536463][T16479] Bluetooth: hci3: command tx timeout
[  543.546317][ T5912] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  543.716234][ T5912] usb 6-1: Using ep0 maxpacket: 16
[  543.721793][ T5912] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  543.725690][ T5912] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[  543.737532][ T5912] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  543.740814][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  543.743913][ T5912] usb 6-1: SerialNumber: syz
[  543.750893][ T5912] cdc_acm 6-1:1.0: skipping garbage
[  543.954555][ T5912] usb 6-1: USB disconnect, device number 2
[  544.492342][T22662] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  544.720316][T22664] loop5: detected capacity change from 0 to 40427
[  544.723441][T22664] F2FS-fs (loop5): build fault injection rate: 14
[  544.725595][T22664] F2FS-fs (loop5): build fault injection type: 0x3bfe8c
[  544.730237][T22664] F2FS-fs (loop5): invalid crc value
[  544.746985][    C1] F2FS-fs (loop5): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  544.757251][    C1] F2FS-fs (loop5): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  544.811710][T22664] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  544.814536][T22664] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  544.830364][T22664] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  544.849998][T22664] syz.5.6876: attempt to access beyond end of device
[  544.849998][T22664] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  544.860185][T22664] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  544.864465][T22664] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of __vfs_getxattr+0x3f4/0x430
[  544.870376][T22664] F2FS-fs (loop5): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0xab1/0x1cf0
[  544.874302][T22664] F2FS-fs (loop5): inconsistent node block, node_type:0, nid:14, node_footer[nid:14,ino:10,ofs:3,cpver:0,blkaddr:0]
[  544.893833][T22664] F2FS-fs (loop5): truncate node fail, ino:10, nid:14, offset[0]:926, offset[1]:29, nofs:1022
[  544.923043][T22548] syz-executor: attempt to access beyond end of device
[  544.923043][T22548] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  544.932071][T22548] CPU: 0 UID: 0 PID: 22548 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  544.932092][T22548] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  544.932104][T22548] Call Trace:
[  544.932136][T22548]  <TASK>
[  544.932144][T22548]  dump_stack_lvl+0x189/0x250
[  544.932172][T22548]  ? __pfx_dump_stack_lvl+0x10/0x10
[  544.932190][T22548]  ? __pfx_queue_work_on+0x10/0x10
[  544.932205][T22548]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  544.932226][T22548]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  544.932255][T22548]  f2fs_handle_critical_error+0x37c/0x540
[  544.932283][T22548]  f2fs_write_end_io+0x886/0xb60
[  544.932314][T22548]  __submit_merged_bio+0x27a/0x6a0
[  544.932340][T22548]  __submit_merged_write_cond+0x255/0x530
[  544.932365][T22548]  f2fs_write_data_pages+0x261d/0x3000
[  544.932385][T22548]  ? __lock_acquire+0xab9/0xd20
[  544.932435][T22548]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  544.932496][T22548]  ? __mod_zone_page_state+0xd7/0x140
[  544.932527][T22548]  ? folios_put_refs+0x560/0x640
[  544.932556][T22548]  ? __lock_acquire+0xab9/0xd20
[  544.932584][T22548]  ? do_raw_spin_lock+0x121/0x290
[  544.932613][T22548]  ? do_raw_spin_unlock+0x4d/0x240
[  544.932631][T22548]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  544.932653][T22548]  do_writepages+0x32e/0x550
[  544.932688][T22548]  ? do_raw_spin_unlock+0x4d/0x240
[  544.932710][T22548]  filemap_fdatawrite+0x199/0x240
[  544.932732][T22548]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  544.932792][T22548]  ? do_raw_spin_unlock+0x4d/0x240
[  544.932813][T22548]  f2fs_sync_dirty_inodes+0x31f/0x830
[  544.932842][T22548]  f2fs_write_checkpoint+0x95a/0x1df0
[  544.932880][T22548]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  544.932940][T22548]  ? kill_f2fs_super+0x298/0x6c0
[  544.932962][T22548]  kill_f2fs_super+0x2c3/0x6c0
[  544.932982][T22548]  ? __pfx_kill_f2fs_super+0x10/0x10
[  544.932995][T22548]  ? radix_tree_delete_item+0x2b6/0x400
[  544.933022][T22548]  ? shrinker_free+0x2ce/0x3e0
[  544.933041][T22548]  deactivate_locked_super+0xbc/0x130
[  544.933062][T22548]  cleanup_mnt+0x425/0x4c0
[  544.933080][T22548]  ? lockdep_hardirqs_on+0x9c/0x150
[  544.933102][T22548]  task_work_run+0x1d4/0x260
[  544.933151][T22548]  ? __pfx_task_work_run+0x10/0x10
[  544.933167][T22548]  ? __x64_sys_umount+0x122/0x160
[  544.933191][T22548]  ? exit_to_user_mode_loop+0x40/0x110
[  544.933216][T22548]  exit_to_user_mode_loop+0xec/0x110
[  544.933236][T22548]  do_syscall_64+0x2bd/0x3b0
[  544.933255][T22548]  ? lockdep_hardirqs_on+0x9c/0x150
[  544.933273][T22548]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  544.933288][T22548]  ? exc_page_fault+0x9f/0xf0
[  544.933308][T22548]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  544.933322][T22548] RIP: 0033:0x7f145df8ff17
[  544.933337][T22548] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  544.933350][T22548] RSP: 002b:00007fffbf3b3c48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  544.933367][T22548] RAX: 0000000000000000 RBX: 00007f145e011c05 RCX: 00007f145df8ff17
[  544.933377][T22548] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffbf3b3d00
[  544.933386][T22548] RBP: 00007fffbf3b3d00 R08: 0000000000000000 R09: 0000000000000000
[  544.933394][T22548] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffbf3b4d90
[  544.933404][T22548] R13: 00007f145e011c05 R14: 000000000008501d R15: 00007fffbf3b4dd0
[  544.933429][T22548]  </TASK>
[  544.933437][T22548] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  545.593465][T22693] delete_channel: no stack
[  545.616483][T16479] Bluetooth: hci3: command tx timeout
[  545.933520][T22713] loop5: detected capacity change from 0 to 2048
[  545.946343][T22714] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  545.955155][T22713] NILFS error (device loop5): nilfs_lookup: deleted inode referenced: 12
[  545.974667][T22713] Remounting filesystem read-only
[  546.734679][   T33] kauditd_printk_skb: 35 callbacks suppressed
[  546.734698][   T33] audit: type=1326 audit(547.623:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22739 comm="syz.5.6907" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145df8ebe9 code=0x7ffc0000
[  546.748184][   T33] audit: type=1326 audit(547.623:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22739 comm="syz.5.6907" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145df8ebe9 code=0x7ffc0000
[  546.756063][   T33] audit: type=1326 audit(547.623:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22739 comm="syz.5.6907" exe="/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f145df8ebe9 code=0x7ffc0000
[  546.764916][   T33] audit: type=1326 audit(547.623:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22739 comm="syz.5.6907" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145df8ebe9 code=0x7ffc0000
[  546.773346][   T33] audit: type=1326 audit(547.623:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22739 comm="syz.5.6907" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145df8ebe9 code=0x7ffc0000
[  547.056131][   T51] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  547.206042][   T51] usb 6-1: Using ep0 maxpacket: 16
[  547.211928][   T51] usb 6-1: New USB device found, idVendor=0403, idProduct=bca0, bcdDevice=e3.4b
[  547.214979][   T51] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  547.219657][   T51] usb 6-1: Product: syz
[  547.221363][   T51] usb 6-1: Manufacturer: syz
[  547.222861][   T51] usb 6-1: SerialNumber: syz
[  547.230586][   T51] usb 6-1: config 0 descriptor??
[  547.233786][   T51] ftdi_sio 6-1:0.0: Ignoring interface reserved for JTAG
[  547.441902][ T5912] usb 6-1: USB disconnect, device number 3
[  547.696394][T16479] Bluetooth: hci3: command tx timeout
[  548.911931][T22791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6932'.
[  548.917764][T22791] openvswitch: netlink: nsh attr 2656 is out of range max 3
[  548.920190][T22791] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  549.783427][T16479] Bluetooth: hci3: command tx timeout
[  552.336113][   T12] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2
[  552.346711][   T12] ref_tracker: netdev@ffff88803827c610 has 1/1 users at
[  552.346711][   T12]      batadv_hard_if_event+0xf0f/0x1730
[  552.346711][   T12]      notifier_call_chain+0x1b6/0x3e0
[  552.346711][   T12]      register_netdevice+0x1608/0x1ae0
[  552.346711][   T12]      veth_newlink+0x5cc/0xa50
[  552.346711][   T12]      rtnl_newlink_create+0x310/0xb00
[  552.346711][   T12]      rtnl_newlink+0x16d6/0x1c70
[  552.346711][   T12]      rtnetlink_rcv_msg+0x7cf/0xb70
[  552.346711][   T12]      netlink_rcv_skb+0x208/0x470
[  552.346711][   T12]      netlink_unicast+0x82f/0x9e0
[  552.346711][   T12]      netlink_sendmsg+0x805/0xb30
[  552.346711][   T12]      __sock_sendmsg+0x21c/0x270
[  552.346711][   T12]      __sys_sendto+0x3bd/0x520
[  552.346711][   T12]      __x64_sys_sendto+0xde/0x100
[  552.346711][   T12]      do_syscall_64+0xfa/0x3b0
[  552.346711][   T12]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  552.346711][   T12] 
[  552.388480][  T793] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  552.548323][  T793] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  552.554453][  T793] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  552.558664][  T793] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  552.564148][  T793] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  552.570447][  T793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  552.576510][  T793] usb 6-1: config 0 descriptor??
[  552.993746][  T793] plantronics 0003:047F:FFFF.001C: reserved main item tag 0xe
[  552.998250][  T793] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0
[  553.004475][  T793] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  553.187002][  T793] usb 6-1: USB disconnect, device number 4

VM DIAGNOSIS:
20:52:24  Registers:
info registers vcpu 0

CPU#0
RAX=1ffff1102000d276 RBX=0000000000000001 RCX=245a1adbc83cb500 RDX=0000000000000000
RSI=0000000000000000 RDI=ffff888100068d00 RBP=dffffc0000000000 RSP=ffffc900067976a8
R8 =ffffea0000d0b547 R9 =1ffffd40001a16a8 R10=dffffc0000000000 R11=fffff940001a16a9
R12=0000000000000000 R13=0000607e5c030a00 R14=ffff888100068d00 R15=dffffc0000000000
RIP=ffffffff81b88a30 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f8212f316c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8207e7fc00 CR3=000000011fcda000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff823c6901 RBX=ffff88803f63d460 RCX=ffffffff823c6a04 RDX=0000000000000001
RSI=0000000000000000 RDI=ffff888022848360 RBP=0000000000000001 RSP=ffffc900031277a0
R8 =ffff888022848367 R9 =1ffff1100450906c R10=dffffc0000000000 R11=ffffed100450906d
R12=dffffc0000000000 R13=1ffff11007ec7a8c R14=ffff888022848200 R15=dffffc0000000000
RIP=ffffffff823c6a0f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555581c0e500 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1b0dae56c0 CR3=000000010fae8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000017 000000000003bf12
XMM02=6c75616665643d65 646f6d5f636f6c6c XMM03=612c656772656d5f 746e696f706b6365
XMM04=0000000000000000 0000000000000000 XMM05=0000555555ef04e6 0000555555eeacd0
XMM06=0000555555eded14 0000555555eded10 XMM07=0802e28003003065 6c69662f2e01ffff
XMM08=010004020176ee00 6161616161616161 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
