last executing test programs:

11m2.16567724s ago: executing program 32 (id=579):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x8804}, 0x0)

10m46.06887413s ago: executing program 33 (id=721):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000002280)={0x50, 0x0, r1, {0x7, 0x2b, 0x4, 0x801c0, 0x4, 0x4, 0xe03, 0x4, 0x0, 0x0, 0x20, 0x1}}, 0x50)
open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup3(r3, r0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cd042, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r4, 0x0)

10m43.260826639s ago: executing program 1 (id=739):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
socket(0xa, 0x3, 0x87)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000380)=0x1040, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback, 0x1}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8)
close_range(r0, 0xffffffffffffffff, 0x0)

10m43.253543885s ago: executing program 1 (id=740):
syz_open_procfs$namespace(0x0, &(0x7f0000000f40)='ns/mnt\x00')
io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0xae37, 0x3000})
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x10, 0x3, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00008000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x4000)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0)
sendfile(r4, r3, 0x0, 0x100000002)

10m43.19490973s ago: executing program 1 (id=741):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18)
syslog(0x2, &(0x7f0000000080)=""/162, 0xa2)

10m43.070632617s ago: executing program 1 (id=742):
syz_mount_image$ext4(&(0x7f0000000640)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x525, &(0x7f0000000100)="$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")
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x1, &(0x7f0000000280)="394c11960344487a54ec1fb2791c0e33688ffdda3ebff2392039ff3057bbe8ba5bd90d814ad7db39c3d2bcb22c120c64ecd4ed29369febcd3b609a66d493aa889b1feb0f73130101b750e0b7261ef82e5fbc43b79ffe23d10f420646ef4900181c9e7282e73f5337f7bd358f5eb4e9c24fdf7501a7643232a6d83eea44cbdcf861dd19b4cfebc4dc2bbe")

10m42.917483275s ago: executing program 1 (id=743):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x28}}, 0x0)

10m42.777758678s ago: executing program 1 (id=745):
futex(&(0x7f0000000080)=0x2, 0x7, 0x1, 0x0, 0x0, 0x1)

10m42.664634889s ago: executing program 34 (id=745):
futex(&(0x7f0000000080)=0x2, 0x7, 0x1, 0x0, 0x0, 0x1)

10m21.018774107s ago: executing program 5 (id=1019):
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000700)={[{@hide}, {@check_relaxed}, {@overriderock}, {@nocompress}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@mode={'mode', 0x3d, 0xcc}}, {@cruft}, {@nocompress}, {}, {@overriderock}, {@mode={'mode', 0x3d, 0xfff}}, {@cruft}, {@nocompress}, {@cruft}]}, 0x1, 0xa44, &(0x7f0000004400)="$eJzs3c1vXNXZAPDnju3EOLxJgLyURoBvAgkGXGfslKQWC+p4xs5Q21PZjkTUBaHEqaK4pYVWAlSJIFVdgVqpVRftDnXVFRKb0kXFpmp3ZdVFpYp/AXWVrqa6d8b22J4P23VsE34/a+Z+Pfeccz/OPZ6ZO3OCL5basXVTtVr+2OH0lT/sQYk5wC6VPvvgw/ezx7u341D0xHPJHyP6IyKN6I2IRyL6Jkvz1dkuCd2KuBYRn0QkEXE46sMtuRbJL+L+telPIvldlm9bh7aaMt3U+FLb7/MPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOomSyVCyOJoeiMnflpbQuIt1ksjRfTaJW27xkZZ26j/Nev5OPu+YbkWSP6O9f6er7kRNrix+OiPR0PFqfejTvkDz64+0jDx9//qHewsr67UrzPzm89WTfeOvtW68sLy+93nJpkqRpWtjFkh0g9XNkujxXWahWZiemy2lloZqOX7hQPHd5aiGdqsyUF64uLJZn08n58sRidT4dmnw6HR0fP5+WR65Wr8xNl0ZmyiszL35trFi8kL448u3yxPxCde7ciyMLk5crMzOVuek8JlucxVzMTsRvVRbTxfLEbJreuLm8dH5DyXpiw/mbBY12254saKxb0FhxbGx0dGxs9N1G79mrMy48N/7cxWKxt7hBbIq4SyctB8t97Q/z7l/EYYcK9fY/YiYqMRdX4qVIW/5NRinmoxqzbZY3rLT/Z86VO2YbTe1/o5XvbVp+Mns6HY83JvvbtP9tyrJ3f2/EW/F23IpXYjmWYyle3/cS7e3fdJRjLiqxENWoxGxM5HPSxpw0xuNCXIhivByXYzAWojemohIzUY6FuBoLsRjl/IyajPkox0QsRjXmI42hmIynI43RGI/xOB9plGMkrkY1rsRcTEcpJvJUbsTNfL+f71DG1aDRrQSNdQja1Jhvu/0vb/znhHtQoeNRvgtXcdiZWqP9P9Q9dGhyLwoEAAAA7Lqv/i2Onnjwr/+KSOKx/HP5qcpMubjfxQIAAAB2UX673qPZoC8beywSr/8BAADgXpPk37FLImIgButjK9+E8iYAAAAA3CPyz/8fj2RwbYbX/wAAAHCP6f4b+10jkuGVn/9Nr9eH1xsR9alkYKoyUx6ZrM48Pxpn818ZyL9psCm1noikL//6wTNxqh51aqA+HFhLMcuzP4saHXl+NJ6J040NGXoiGzwx1CJyrB75VD3yqebInlgXeT6LBIB73ekO7fFW2/9nYrgeMXwyb/J7T65rg3vylrWoZQWAg2K1j53/NLo0a9H+NyIeb9f+f73D6/8s4sG4MVi/pWAkXo3XYjmux3A07jgYbJXqSm8E9dsQhru8GzDQuGXh04uFGN70fkD/6rY2xy7FWAy3fEegKd1kpQzn63E9d+cYAMBeO92xHc7a//uz9r+3U/s/3Pn1f1Ob65ZCADgIVnuw3+7I4NaD93sbAYD1tNIAAAAAAAAAAAAAAAAAAAAAAAAAAACw+7b0A/5/PxuxvLwUsdPOAlqMfPqXP/1f25j3jkT0b6eEnUcKsTtlPvgjPRGxX7m/ENteKzvGB2XXGVk/ss8XJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPZEEtHTan4h4nBEFCPi3N6X6u65vd8F2C3pzlZL7sSdeDOO7nZxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+7Bq//1+I+vBIfVb0FiLORMS1iPjOfpdxO/q7LL+zR+XYZ7VarbY6keTP36+Pr/3+fyGiL2pJtsuO5Iv6Jkvz1dnsVEgOZ8s/++DD97NH21zeWRnZ3KtClkCWw7rOJRo5NM3pW7/WA/laA6WlN279+LUfpqVL+Yl5aXFqpjQ7Pf/NtcCHk4/qXSA0d4OwUt6fnvnzL5tmH2pk/lH0ttuQjflO5fmWNuf7lVZrt8l3C24uL41lOS2WX1r8yQ8KzYsejFMRTwxFDK3P6XvZo01Opzbuz/WSz5OfJ0fjN3EtP/7Z3khqSXaIjuXbf9+Nm8tLI6++tnx9tUzv3HyzKYHjMRgR19fXsi5lGmycfi3kZ12hL8u1mAdlTye6pNdRU4qja/t13TY8kJ8yA9vahrT9NuS67PdGic5vLFEtqyS/+tFDcbbjkT7cnNST9cHZLjm2lHye/DO5HP+InzX1/1HIjv+ZaFk7WySRRzadKc3L1lWvwpm1LR9rXvDyxjTb1krugvfiu/GN1eNfqCXZ/m+qN2Nt6s3q9eiFpplt6s1K1epQL5py3FQvGrrVi8019ffHNrUoa/JqdGJDi9S4+rRbp1HOE/WoNuX8/3g2ovfktq4oz3a5onRbf6f1/7fJUPw7buv/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOPiSiJ5W8wsRZyLieEQcy6bTiNrGmNs7yK8wkOykmLtmJ2X+4knabmhyJ+7Em3F0r0sEAAAAAAAAwN1xqfTZBx++nz3yz+N74slCY0ka0RsRx5Nf902W5quzXRLqi7i28pF+f+uQNrPjWvZ0/9r0J9nUI13y29/bBwDgC+2/AQAA//+j7XFR")
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)

10m20.965524389s ago: executing program 5 (id=1022):
r0 = socket(0x200000000000011, 0x2, 0xd)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000340))

10m20.861414283s ago: executing program 5 (id=1023):
r0 = socket(0x11, 0xa, 0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r1, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff1337, 0x3], [{0x0, 0x0, 0x0, 0x1}, {0x35, 0x39}, {0x0, 0x8}, {0x800000, 0x800001}, {}, {0x1ff}, {0x0, 0x1000}, {}, {}, {}, {}, {0x0, 0xe68b}], 0xc})
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7)
sendmsg$can_bcm(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x408c1}, 0x7289ab80f994c9e)

10m20.790832139s ago: executing program 5 (id=1024):
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x2, 0x222, &(0x7f0000000800)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)

10m20.708883932s ago: executing program 5 (id=1025):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000000)='./file2\x00', 0x2000002, &(0x7f0000000040)=ANY=[], 0x1, 0x5eda, &(0x7f00000064c0)="$eJzs3U9vHGcdB/Df/vH6T2kaVagKEYc0hdJSmv8JlH9NOXCAA0goZxK5bhVIASUB0SoirnJAXICXAJdeOPSN9DUgXgCRbE49UAaN/TzJeLzOOk28s+vn85Gcmd88O95n8vV4dj0z+wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/64c/O9iLi6u/SgqMRX4hBRD9iua5PRD1zOT9+GBHHYqs5XoiIwWJEvf7WP89FXIiIT45EbGzeWa0Xn9tnPy6euX3zsx//4J9//Mu9Y794++cftdt/+sXzH//pbsTRn7zx8Wd3n862AwAAQCmqqqp66W3+8fT+vt91pwCAqcjH/yrJy9VqtVr9VOs/92erP+pC66ZqvLvNIiLWm+vUrxmcjgeAObMen3bdBTok/6INI+KZrjsBzLRe1x3gQGxs3lntpXx7zePBie32/HfKHfmv9x7c37HXdJL2NSbT+vm6F4N4fo/+LE+pD7Mk599v5391u32UHnfQ+U/LXvmPtm99Kk7Of9DOv2VH/n+NiLnNvz82/1Ll/IePk//6YI73f/kDAAAAAHD45b//H+34/O/ik2/Kvjzq/O+JKfUBAAAAAAAAAJ62Jx3/7wHj/wEAAMDMqt+r1/525OGyvT6LrV5+pRfxbOvxQGHSzTIrXfcDAAAAAAAAAAAAAEoy3L6G90ovYiEinl1Zqaqq/mpq14/rSdefd6VvP5Ss61/yAACw7ZMjrXv5exFLEXEllQsrKytVtbS8Uq1Uy4v59exocalabryvzdN62eJoHy+Ih6Oq/mZLjfWaJr1fntTe/n71c42qwT46Nh0dhQ0AyfbRaMMR6ZCpquei61c5zAf7/+Fj/2c/uv45BQAAAA5eVVVVL32c9/E0vl+/604BANOwlI//7fMCarVarVarD1/dVI13t1lExHpznfo1g+H4AWDOrMenXXeBDsm/aMOIONZ1J4CZ1uu6AxyIjc07q72Ub695PEjju+drQXbkv97bWi+vP246Sfsak2n9fN2LQTy/R39emFIfZknOv9/O/+p2+yg97qDzn5a98q+382gH/elazn/Qzr/l8OTfH5t/qXL+w8fKfyB/AAAAAACYYfnv/0ed/82bDAAAAAAAAABzZ2Pzzmq+7zWf///ymMf1mnPu/zw0cv69fefv/t/DJOffb+ffuiBn0Ji//9bD/P+zeWf1o9v//lKeznz+C4NR/dwLvf5gmK75qRbeietxI9bizK7HD3e0n93VvrCj/dyE9vO72kd1+3JuPxWr8eu4EW8/aF+ccGHU0oT2akJ7zn9g/y9Szn/Y+KrzX0ntvda0dv/D/q79vjkd9zyX//Hfl3fvXdN3LwYPtq2p3r6THfRn6//kmVH89tbazVO/v3b79s2zkSY7lp6LNHnKcv4L6Svn/8pL2+35935zf73/4eix858V92K4Z/4vNebr7X11yn3rQs5/lL5y/vkINH7/n+f8997/X+ugPwAAAAAAAAAAAAAAAPAoVVVt3SJ6OSIupft/uro3EwCYrnz8r5K8XK1Wq9Vq9eGrm6rx3mwWsbRznfo1wx/GfTMAYJb9LyL+1XUn6Iz8C5Y/76+efqXrzgBTdev9D3557caNtZu3uu4JAAAAAAAAAPB55fE/TzTGf966Dqg1bvSO8V/fihNzO/5nfzTYGus8bdCL8ejxv0/Go8f/Hk54voUJ7aMJ7YsT2pcmtI+90aMh5/9iyjjnfzxtWEnjv77SQX+6lvM/mcZ6zvl/rfW4Zv7V3+c5//6O/E/ffu83p2+9/8Hr19+79u7au2u/Onvm0oXzFy+cv3jx9DvXb6yd2f63wx4frJx/HvvadaBlyfnnzOVflpz/V1Mt/7Lk/F9OtfzLkvPPr/fkX5acf37vI/+y5PxfTbX8y5Lz/3qq5V+WnP9rqZZ/WXL+30i1/MuS83891fIvS87/VKrlX5ac/+lUy78sOf98hkv+Zcn55ysb5F+WnP+5VMu/LDn/86mWf1ly/hdSLf+y5Pwvplr+Zcn5X0q1/MuS8/9mquVflpz/t1It/7Lk/N9ItfzLkvP/dqrlX5ac/3dSLf+y5Py/m2r5lyXn/71Uy78sOf/vp1r+Zcn5v5lq+Zfl4ef/mzFjxkye6fo3EwAAAAAAAAAAAADQNo3LibveRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgp7dxcj11mfAfzdL3vthMQlIYRgiO04wZBNdtdfiQkG89k0tDQNhJYW6hh77Rj8Ve8aEoSapaEtiEiN1F6kF6WAKEJqq0QIqVRKUaQitXfNFSg3qJVyYalJZSKoREWy1Znzvq9nZmdn1vauPXPO7xfFf+/MmZl3zpyZ3WetZwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBmm98/8+dDIYTi/8YfG0K4uvj7urCv+HJ+95VeIQAAAHCpXm38+Q/X5hP2LeNCTdv821v/4/sLCwsL4dOvnH3tLxcW8hmbQhhZG0LjvOTff/mLheZtosfD+NBw09fDPW5+pMf5oz3OH+tx/poe56/tcf54j/MX7YBF1pW/j2lc2dbGXzeUuzRcH8Ya523tcKnHh9YOD6ff5TQMNS6zMHY4HA3HwkyYWnSZocZ/ITy7ubite0O6reGm29oYQjj3sy8eTGsYivt4a2i5sYbmx+7l94ZNr/zsiwe/M/fSmzrNnrth0UpD2LalWOeXQzj/66owFNbmfZLWOdy0zo0d1jnSss6hxuWKv7ev89wy15nu93hc5/Nd1rkxnvbILSGE+bDkNu0eD8Nhfdut5v09Xh4RxXUUD+Xrw+gFHSebl3GcFJd58ZbW46T9mEz7f3PcJ6NLrKH54Xj5S2sW7feLPU6Ke90Px2px3fcXNzo+3vyr1ZZjtdjmi7cufQx0fOw6HAP5WG46Brb0OgaG14w0joHh82ve0nIMTC+6zHAYatzW2Vu7HwOTc8dPTc4++oU7jh4/cGTmyMyJ6andO3fs2rlj167Jw0ePzUyVf17YLh0g68NwPga3xNeadAy+rW3b5kNy4Zsr9zwY75PnQXHfP3ZbsaCrh8MSx3ixzZe3XfrzIH/fb3oejDY9Dzq+pnZ4Howu43lQbHNu2/K+Z442/d9pDav1Wrih6Ri4kt8Pi9v85NuXfi3cGNf1lXdc6PfDkUXHQLpbQ/G5V5ySf94bvzvul8XHxU3FGVetCWdmZ07f+ciBubnT0yGOy+K6pseq/XhZ33SfwqLjZfiCj5d9f/+r227qcPqGuK/Gb+/+WBXb7Jzo/lg1Xt1b9+eaUO7PllO3hzhW2OXen52+mxX7M2eJLvuz2ObLd1z6z4I5lzS9/o31ev0bGRstX/9G8t4Ya3n9W/zQjDRWFsK5O5b3+jcW/7/cr3/X98nrX7GvPnln92Og2OYrkxd6DIx2ff27Jc6huJ63x8Qw3pT7X2ucP18epk2PZc/jZnR0LB43o+kWW4+bHYsuU1xbcdvbpi7uuNl2S+tj1fJzSwWPm2Jf/dVU9+Om2Oa56Ut/7ViX/tr02rGm1zEwNrKmWO9YPgjK17uFdekYuDMcDCfDsXAoX6Z4lIvbmti+vGNgTfz/cr923Ngnx0Cxr57a3v0YKLb50Y6V/dlpWzwlb9P0s1P77xeWyvw3jZ6/vvbdttKZv1jnB378kXxapwxRbPPSzgvNGd330+3xlKs67Kf2589Sx/ShcHn2041xncd2df/dVLHN9buXeTztCyG8MP1C4/dd8fe73zvz4++3/N630++UX5h+4b7JB35yIesHAODivdb4c35N+bNm079YL+ff/wEAAICBkHL/cJyZ/A8AAACVkXL/SJyZ/A8AAACVkXL/aJxZTfL/w3fvefrVx0J+N8CFKJ2fdsP97y63Sx3v+fj1poXzitPf9+2xp7/62PJueziE8Kv73txx+4ffndZVOpXW+c7W0xe58eZl3f5DD57frvn9E87tKa8/3Z/lHgapq/zs5PbG9W56dLoxn7svNOYD8195vLz+8uu0/dkd5fZ/E9+0ZN/hoZbLb4vr2RrnpvieMvfvO78fipku9/TGt/7rdR8/f3vpckNbrmnczaf+uLze9B5RT15Xbp/u91Lr/5evfffpYvtHbu28/seGO6//bLzeF+P85d5y++Z9/tWm9f9pXH+6vXS5O7/1w47rf+aN5fbPxOPiG3G2r/+9f/GWVzs9Xul29t1TXi7d/tT/7mxcLl1fuv729Y8/Nt2yP9qv/7lXyuvZ+7mfjzRvn05Pt5M8dE/r8T0UH9+WHnkI4bt/Flr2c3hXebl/blt/ur5T93Re/+1t6zw1dHPj8ufvz4aW+/X1v9ve8f6m9ez7xw0t9+fJD8b998rkj4rrPftAPB7j+f/3fHl97e9l+swHW19v0vbf2FA+b9P1Tbat/8m29c/fXOy73uu/95Vy/c+8Z23L+vd9KB5P95az1/qP/O21LZf/5nfKx+P05ydOnJw9c/RQ015tfh6vHV+3/qqrX3fNtfG1tP3r/SfnHp45vWlq01QImwbwLQNXe/3fivN/yjG/8rdQ+snPy+PuiQ+X37fe9ovy6yfj6Q/FxzN9f/z6X4+1HK/tj/v8e8p5qet/R1zHcr3xa/9187I2PPupZ8/805+81P5zQbo/p94w3rh/T22+oXHe0HPl+e2vV7385xtan9c/HZ1qzB/E/boQ35l5yw3l7bVff3pvkic+Wj5/009y6fKh7f1ENoy03o9LXf9P488xP7yx9fUvHR8/eKzt3Zw3hKFiCfPx9SHMl+enrdL+fuLcDR1vL70PT5h/04Usc0mzj85OHjt64swjk3Mzs3OTs49+Yf/xk2dOzO1vvHfp/s/0uvz55/f6xvP70MzunaHxbD9ZjlV2pdd/6sGDh+6auu3QzOEDZw7PPXhq5vSRg7OzB2cOzd524PDhmc/3uvzRQ3unt+/Zcdf2iSNHD+29e8+eHXsmjp44WSyjXFQPu6c+O3Hi9P7GRWb37twzvWvXzqmJ4ycPzey9a2pq4kyvyze+N00Ul/7cxOmZYwfmjh6fmZg9+oWZvdN7du/e3vPdH4+fOjy7afL0mROTZ2ZnTk+W92XTXOPk4ntfr8tTD7Mn4+tdm6H40/knbt+d3x+38O0vLXlV5SatP56Gl+N7QaXvb72+Trl/LM6sJvkfAAAA6iDl/vjG/2EZH4sHAAAADJiU+9fGmfn3fwAAAKiMlPvL5D+eP/69Lvl/pfr/X9L/b9D/1/8P+v+Z/r/+f9D/1//vQf9f/3+Q16//r/9Pb/3W/4+5P6wLwb//AwAAQEWl3L8+zkz+BwAAgMpIuf+qODP5HwAAACoj5f6r48xqkv99/r/+v/5/t/5/2lb/P+j/90P/f+t/6/8vov+v/x/0/y/ale7PD/r6+7D/v07/n37Tb/3/lPtfF2dWk/wPAAAAdZBy/zVxZvI/AAAAVEbK/dfGmcn/AAAAUBkp92+IM6tJ/tf/1//X//f5/8vr/4/p/1/5/r/P/+9A/1//P+j/X7Qr3Z8f9PX3Yf/f5//Td/qt/59y/6/FmdUk/wMAAEAdpNz/+jgz+R8AAAAqI+X+6+LM5H8AAACojJT7r48zq0n+r2f//8UQgv5/0P/X/29bp8//1/9fDfr/+v/d6P/r/w/y+vX/9f/prd/6/yn3vyHOrCb5HwAAAOog5f4b4szkfwAAAKiMlPvfGGcm/wMAAEBlpNx/Y5xZTfJ/Pfv/Pv9f/79Urf7/0FAI+v/6//1H/1//vxv9f/3/QV6//r/+P731W/8/5f43xZnVJP8DAABAHaTcf1OcmfwPAAAAlZFy/5vjzOR/AAAAqIyU+zfGmdUk/+v/6//r/1el/+/z//X/+9Ng9f+HlzxH/7+k/99q5fr/8+cXoP8/MOvX/9f/p7d+6/+n3P+WOLOa5H8AAACog5T73xpnJv8DAABAZaTcf3OcmfwPAAAAlZFy/6Y4s5rkf/1//X/9f/1//X/9/9U0WP3/pen/l/T/W/n8f/1//X/9f7rrt/5/yv2b48xqkv8BAACgDlLu3xJnJv8DAABAZaTcf0ucmfwPAAAAlZFy/9Y4s5rkf/1//X/9f/1//X/9/9Wk/6//343+v/7/IK9f/1//n976rf+fcv+tcWY1yf8AAABQByn33xZnJv8DAABAZaTc/7Y4M/kfAAAAKiPl/m1xZjXJ//r/+v/6/wPc/x/R/w/6/31P/1//vxv9f/3/QV6//r/+P731W/8/5f63x5nVJP8DAABAHaTc/444M/kfAAAAKiPl/tvjzOR/AAAAqIyU+yfizGqS//X/9f/1/we4/+/z/1vWr//fn/T/9f+70f/X/x/k9ev/6//TW7/1/1PuvyPOrCb5HwAAAOog5f4748zkfwAAAKiMlPsn48zkfwAAAKiMlPun4sxqkv/1//X/9f/1//X/9f9Xk/6//n83+v/6/4O8fv1//X9667f+f8r903FmNcn/AAAAUAcp92+PM5P/AQAAoDJS7t8RZyb/AwAAQGWk3L8zzqwm+V//X/9f/1//X/9f/3816f/r/3ej/6//P8jr1//X/6fVcIfT+q3/n3L/rjizmuR/AAAAqIOU+3fHmcn/AAAAUBkp998VZyb/AwAAQGWk3H93nFlN8r/+v/6//r/+v/6//v9q0v/X/+9G/1//f5DXr/+v/09v/db/T7l/T5xZTfI/AAAA1EHK/e+MM5P/AQAAoDJS7r8nzkz+BwAAgIHS6XMIk5T73xVnVpP8r/9f9f7/wlr9f/1//f/u69f/X136//r/3ej/6/8P8vr1//X/6a3f+v8p9++NM6tJ/gcAAIA6SLn/3XFm8j8AAABURsr974kzk/8BAACgMlLu3xdnVpP8r/9f9f7/oHz+f7kD9P/1/4P+v/7/BdL/1/8P+v8X7WL78/HHFv3/Pur/F8eQ/j/9qN/6/yn3vzfOrCb5HwAAAOog5f73xZnJ/wAAAFAZKfe/P85M/gcAAIDKSLn/A3FmNcn/+v/6//3R//f5/0H/P9P/1/+/EDXu/zdeCvX/S/r/F+dK9+cHff391P/3+f/0q37r/6fc/8E4s5rkfwAAAKiDlPs/FGcm/wMAAEBlpNz/63Fm8j8AAABURsr998aZ1ST/r27/f6zrbev/6/8H/X/9f/1//f9LVOP+f4P+f0n//+Jc6f78oK9f/1//n976rf+fcv9vxJnVJP8DAABAHaTcf1+cmfwPAAAAlZFy/4fjzOR/AAAAGDBrljwn5f7fjDOrSf73+f+Xp/8/nK9f/1//X/9f/1//fyXp/+v/B/3/i3al+/ODvn79f/1/euu3/n/K/b8VZ1aT/A8AAAB1kHL/R+LM5H8AAACojJT7fzvOTP4HAACAyki5//44s5rk/5Xu/7dfvps69f99/r/+f9D/1/9v2qv6/ytH/1//P+j/X7Ql+/NB/1//X/+fldFv/f+U+38nzqwm+R8AAADqIOX+B+LM5H8AAACojJT7PxpnJv8DAABAZaTc/7E4s5rkf5//r/+v/6//r/+v/7+a9P/1/7vR/+/T/r/P/9f/1/9nhfRb/z/l/gfjzGqS/wEAAKAOUu7/eJyZ/A8AAACVkXL/78aZyf8AAABQGSn3/16cWU3yv/6//r/+v/6//r/+/2rS/1/c/y9ew/T/S/r/+v+DvH79f/1/euu3/n/K/Z+IM6tJ/gcAAIA6SLn/9+PM5H8AAACojJT7/yDOTP4HAACAyki5/5NxZjXJ//r/+v/6//r/+v/6/6tJ/9/n/3ej/6//P8jr1//X/6e3fuv/p9z/qTizmuR/AAAAqIOU+/8wzkz+BwAAgMpIuX9/nJn8DwAAAJWRcv9DcWY1yf/6//r/+v/6//r/+v+rSf9f/78b/X/9/0Fev/6//j+99Vv/P+X+A3Fm+1pvBgAAABhcKfd/Os6sJv/+DwAAAHWQcv/BODP5HwAAACoj5f5DcWY1yf/6//r/+v/6//r/+v+rSf9f/78b/X/9/0Fev/6//j+99Vv/P+X+mTizmuR/AAAAqIOU+w/Hmcn/AAAAUBkp9x+JM5P/AQAAoDJS7n84zqwm+V//X/9f/7+2/f/nv9e2Tv1//f/VoP+v/9+N/r/+/yCvX/9f/5/e+q3/n3L/0TizmuR/AAAAqIOU+z8TZyb/AwAAQGWk3P/ZODP5HwAAACoj5f5jcWY1yf/6//r/+v+17f/7/P9I/3916f/r/3ej/6//P8jr1//X/6e3fuv/p9x/PM6sJvkfAAAA6iDl/hNxZvI/AAAAVEbK/SfjzOR/AAAAqIyU+0/FmdUk/+v/N3fRr+nZ/x9aohuo/995/fr/+v/6//r/+v/6/93o/+v/D/L69f/1/+mt3/r/Kff/UZxZTfI/AAAA1EHK/afjzOR/AAAAqIyU+2fjzOR/AAAAqIyU++fizGqS//X/ff6//r/+v/6//v9q0v/X/+9G/1//f5DXr/+v/09v/db/T7n/TJxZTfI/AAAA1EHK/f/P3n3maHJVcRx+8TAChNgDW2AFLIE1ILEGcrDJJoPJOZmcTAaTc84552wwOUogmHOOhdVd1T3TNX3rnuf5cjQ9lnxH4y9/WT/VfeMW+x8AAACmkbv/fnGL/Q8AAADTyN1//7ilyf7X/+v/9f/6f/2//n9L+n/9/xL9v/5/z+/X/+v/WTda/5+7/wFxS5P9DwAAAB3k7n9g3GL/AwAAwDRy9z8obrH/AQAAYBq5+x8ctzTZ//p//b/+X/+v/9f/b0n/r/9fov/X/+/5/fp//T/rRuv/c/c/JG5psv8BAACgg9z9D41b7H8AAACYRu7+h8Ut9j8AAABMI3f/tXFLk/2v/9f/6//1//p//f+W9P/6/yX6f/3/nt+v/9f/s260/j93/3VxS5P9DwAAAB3k7n943GL/AwAAwDRy9z8ibrH/AQAAYBq5+x8ZtzTZ//p//b/+X/+v/9f/b0n/r/9fov/X/+/5/fp//T/rRuv/c/c/Km5psv8BAACgg9z9j45b7H8AAACYRu7+x8Qt9j8AAABMI3f/Y+OWJvtf/6//1//r//X/+v8t6f/1/0v0//r/Pb9f/6//Z93m/f+9rv/fPWn/n7v/+rilyf4HAACADnL3Py5usf8BAABgGrn7Hx+32P8AAAAwjdz9T4hbmux//b/+/7b+/9930P/r//X/t/1c/3829P/6/yX6f/3/nt+v/9f/s27z/n+l97/9r3P3PzFuabL/AQAAoIPc/U+KW+x/AAAAmEbu/ifHLfY/AAAATCN3/1Pilib7X/+v//f9f/2//l//vyX9v/5/if5f/7/n9y/1//c8wfv1/3QwWv+fu/+pcUuT/Q8AAAAd5O5/Wtxi/wMAAMA0cvffELfY/wAAADCN3P1Pj1ua7H/9v/5f/6/////+/5qW/f9/f6b/34b+X/+/RP+v/9/z+33/X//PutH6/9z9z4hbmux/AAAA6CB3/zPjFvsfAAAAppG7/1lxi/0PAAAA08jd/+y4pcn+1//r//X/+v8r+v7/hTn6f9//347+X/+/RP+v/9/z+/X/+n/Wjdb/5+5/TtzSZP8DAABAB7n7nxu32P8AAAAwjdz9z4tb7H8AAACYRu7+58ctTfa//l//r//X/19R/z/J9//1/9vR/+v/l5y0/z/o/+vPov8f5/36f/0/6wbp/y8c4te5+18QtzTZ/wAAANBB7v4Xxi32PwAAAEwjd/+L4hb7HwAAAKaRu//FcUuT/a//1//r//X/+n/9/5b0//r/Jb7/r//f8/v1//p/1g3S/9evc/e/JG5psv8BAACgg9z9L41b7H8AAACYRu7+l8Ut9j8AAABMI3f/y+OWJvtf/6//1//r//X/+v8t6f/1/0v0/0f3/3c+5t+n/x/r/fp//T/rRuv/c/ffGLc02f8AAADQQe7+V8Qt9j8AAABMI3f/K+MW+x8AAACmkbv/VXFLk/1/XP9/610v/b7+/2T0/0e/X/+v/9f/6//1//r/Jfp/3//f8/v1//p/1o3W/+fuf3Xc0mT/AwAAQAe5+18Tt9j/AAAAMI3c/a+NW+x/AAAAmEbu/tfFLU32/9l////u+n/9v/4/rv5f/6//1//r/5fp//X/e36//l//z7rR+v/c/a+PW5rsfwAAAOggd/8b4hb7HwAAAKaRu/+NcYv9DwAAANPI3f+muKXJ/j/7/t/3//X/p+z/r9H/J/1//L3q//X/p6D/1/8f9P+X7bz7+b2/X/+v/2fdaP1/7v6b4pYm+x8AAAA6yN3/5rjF/gcAAIBp5O5/S9xi/wMAAMA0cve/NW5psv/1//r/c+//ff+/6P/j71X/r/8/Bf2//v+g/79s593P7/39+n/9P+tG6/9z978tbmmy/wEAAKCD3P1vj1vsfwAAAJhG7v53xC32PwAAAEwjd/8745Ym+1//r//X/w/f/990+//e9P/6/z3R/+v/l+j/9f97fv84/X/84Fr9P+MZrf/P3f+uuKXJ/gcAAIAOcve/O26x/wEAAGAauftvjlvsfwAAAJhG7v73xC1N9r/+f+/9/71viRfo/+ft/33/P67+X/9/FP2//v+g/79s593P7/394/T/vv/PuEbr/3P3vzduabL/AQAAoIPc/e+LW+x/AAAAmEbu/vfHLfY/AAAATCN3/wfilib7X/+/9/7f9//1//p//f/Y9P/6/yX6f/3/nt+v/9f/s260/j93/wfjlib7HwAAADrI3f+huMX+BwAAgGnk7v9w3GL/AwAAwDRy938kbmmy//X/+n/9v/7/ivv/6/T/B/3/sfT/+v8l+n/9/57fr//X/7NutP4/d/9H45Ym+x8AAAA6yN3/sbjF/gcAAIBp5O7/eNxi/wMAAMA0cvd/Im64x93O70ln6+IxP4/eXP+v/9f/6/99/1//vyX9v/5/if5f/7/n9+v/9f+sG63/z93/ybjF//8HAACAaeTu/1TcYv8DAADANHL3fzpusf8BAABgGrn7PxO3NNn/+n/9v/5f/6//1/9vSf+v/1+i/9f/7/n9+n/9P+tG6/9z9382bmmy/wEAAKCD3P2fi1vsfwAAAJhG7v7Pxy32PwAAAEwjd/8X4pYm+1//r//X/+v/9f/6/y3p//X/S/T/+v89v1//r/9n3Wj9f+7+L8YtTfY/AAAAdJC7/0txi/0PAAAA08jd/+W4xf4HAACAaeTu/0rc0mT/6//1//p//b/+X/+/Jf2//n+J/l//v+f36//1/6wbrf/P3f/VuKXJ/gcAAIAOcvd/LW6x/wEAAGAaufu/HrfY/wAAADCN3P3fiFsa7P+7TN7/L/1j+v9L9P/6/4P+X/+/Mf2//n+J/l//v+f36//1/6wbrf/P3f/NuKXB/gcAAIAucvd/K26x/wEAAGAaufu/HbfY/wAAADCN3P3fiVua7P+Z+/8l+v9L9P/6/4P+X/+/Mf2//n+J/l//v+f36//1/6w7p/7/4uGY/j93/3fjlib7HwAAADrI3f+9uMX+BwAAgGnk7v9+3GL/AwAAwDRy9/8gbpln/9/n5oXf1P/r//X/+n/9v/5/S/p//f8S/b/+f8/v1//r/1k32vf/c/f/MG6ZZ/8DAABAe7n7fxS32P8AAAAwjdz9P45b7H8AAACYRu7+n8QtTfa//l//r/9v1f9fOOj/9f9Xmf5f/79E/6//3/P79f/6f9aN1v/n7v9p3NJk/wMAAEAHuft/FrfY/wAAADCN3P0/j1vsfwAAAJhG7v5fxC1N9r/+X/+v/2/V//v+v/7/qtP/6/+X6P/1/3t+v/5f/8+60fr/3P2/jFua7H8AAADoIHf/r+IW+x8AAACmkbv/13GL/Q8AAADTyN3/m7ilyf7X/+v/9f/6f/2//n9L+n/9/xL9v/5/z+/X/+v/WTda/5+7/5a4pcn+BwAAgA5y9/82brH/AQAAYBq5+38Xt9j/AAAAMI3c/bfGLU32v/5f/z9l/38n/b/+X/8/Cv2//n+J/l//v+f36//1/6wbrf/P3f/7uKXJ/gcAAIAOcvf/IW6x/wEAAGAaufv/GLfY/wAAADCN3P1/ilua7H/9v/7/9P3/xfpzD9v/+/6//l//Pwz9v/5/Sff+/4YbL/1Y/7/P9+v/9f+sG63/z93/57ilyf4HAACADnL3/yVusf8BAABgGrn7/xq32P8AAAAwjdz9f4tbmux//b/+f8rv/+v/9f/6/2Ho//X/S7r3/77/v+/36//1/6wbrf/P3f/3uKXJ/gcAAIAOcvf/I26x/wEAAGAaufv/GbfY/wAAADCN3P3/ilua7H/9v/7/dP3/HQ/6f/2//v/o9+v/j6b/1/8v0f/r//f8fv2//p91o/X/ufv/EwAA//+CfThP")
creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x6, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)

10m20.481001844s ago: executing program 5 (id=1028):
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
process_vm_writev(r0, &(0x7f0000001100)=[{0x0}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x2, &(0x7f0000001240)=[{&(0x7f0000001140)=""/198, 0xc6}], 0x1, 0x0)

10m20.37305171s ago: executing program 35 (id=1028):
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
process_vm_writev(r0, &(0x7f0000001100)=[{0x0}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x2, &(0x7f0000001240)=[{&(0x7f0000001140)=""/198, 0xc6}], 0x1, 0x0)

9m26.788020163s ago: executing program 6 (id=1854):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0xba}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

9m26.678967857s ago: executing program 6 (id=1856):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="006bff962943882c43a0e6e8a5b3b857261712d82ab5e72b6966c7d77ef626b80fdf55e535523e58c44d3adb4835ce631e9a0d63828c7123909c65a424c36bfeefb29f111eb2d638a2bffe23c723f1d095c044c75eb997225d41baebabe905aec4b577a7ab3e5b2cc3d2628bbc2e0e66b2196d2cd30707cc9f69095c8261594a264f8ba45bab0afb57e3e37a6e916b58cca87e767841f1ca"], 0x1, 0xa22, &(0x7f0000001540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xc0)
sendfile(r0, r0, 0x0, 0x7a680000)

9m26.364398752s ago: executing program 6 (id=1865):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)

9m26.288954529s ago: executing program 6 (id=1867):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000140)={[{@nodecompose}, {@nobarrier}, {@nodecompose}, {@force}, {@nobarrier}, {@type={'type', 0x3d, "aff0aae8"}}, {@nls={'nls', 0x3d, 'iso8859-9'}}]}, 0x44, 0x6ff, &(0x7f0000000500)="$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")
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='tracefs\x00', 0x800, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x5006d, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1002c, &(0x7f0000000200)={[{@mode={'mode', 0x3d, 0xf18c}}]})

9m26.206999996s ago: executing program 6 (id=1870):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272)

9m25.940111963s ago: executing program 6 (id=1877):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0xc014}, 0x8010)

9m25.823654569s ago: executing program 36 (id=1877):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0xc014}, 0x8010)

5m18.926874347s ago: executing program 7 (id=5673):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@bridge_dellink={0x2c, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x2}}]}]}, 0x2c}}, 0x0)

5m18.87686919s ago: executing program 7 (id=5675):
semget$private(0x0, 0x4000, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)

5m18.825068734s ago: executing program 7 (id=5677):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x1abd800, 0x0, 0x0, 0xfffffffd})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="8510"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)

5m18.775187124s ago: executing program 7 (id=5679):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x1, 0xb, &(0x7f0000001140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a85000000040000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd55", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000680)='./file0\x00', 0x0, 0x4000, r2}, 0x18)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x7fff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x9, [@decl_tag={0x10, 0x0, 0x0, 0x11, 0x4, 0x4}, @ptr={0x4, 0x0, 0x0, 0x2, 0x4}, @struct={0x0, 0x4, 0x0, 0x4, 0x1, 0x10000, [{0xf, 0x4, 0xc}, {0x3, 0x3, 0x8}, {0x2, 0x4, 0xd}, {0xb}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x6, 0x3}, {0xe, 0x3}, {0x8}, {0x5}, {0x3, 0x1}, {0xb, 0x1}]}]}, {0x0, [0x2e, 0x0, 0x2e, 0x30, 0x0, 0x61, 0x2e]}}, &(0x7f0000000440)=""/216, 0xb5, 0xd8}, 0x28)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20008000}, {0x85, 0x0, 0x0, 0x70}}, @printk={@i}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

5m18.774830287s ago: executing program 7 (id=5681):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x2000, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008452, &(0x7f0000000000), 0x7, 0x4d2, &(0x7f0000000740)="$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")
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

5m18.627521042s ago: executing program 7 (id=5684):
syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082)

5m3.390937825s ago: executing program 37 (id=5684):
syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082)

3m45.894806623s ago: executing program 8 (id=7135):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x14, 0x0, 0x0)

3m45.835405662s ago: executing program 8 (id=7136):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000840)=""/234, 0xea}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/50, 0x32}], 0x4}, 0xfffffffc}], 0x2, 0x42, 0x0)

3m45.835134399s ago: executing program 8 (id=7137):
r0 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='3', 0x0)

3m45.771967552s ago: executing program 8 (id=7138):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x11, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@debug}, {@discard}]}, 0xee, 0x498, &(0x7f0000001b40)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000080)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000200)=""/179, 0xb3)

3m45.663810986s ago: executing program 8 (id=7139):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000000)={0x33, 0xfffffffe})

3m45.415380456s ago: executing program 8 (id=7144):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000002c0)={0x40, 0xa, 0x6, "27360903b7f6"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x84, &(0x7f00000008c0)={0x0, 0x13, 0x1, "f9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3m45.189745254s ago: executing program 38 (id=7144):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000002c0)={0x40, 0xa, 0x6, "27360903b7f6"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x84, &(0x7f00000008c0)={0x0, 0x13, 0x1, "f9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2m27.105038355s ago: executing program 9 (id=8473):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x29, 0x0, @val=@uprobe_multi={0x0, 0x0}}, 0x40)

2m27.104751862s ago: executing program 9 (id=8474):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m27.012853606s ago: executing program 9 (id=8476):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f0000000180)=@tcp6=r0}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0x1}], 0x1}}], 0x1, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0xfe}]})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

2m26.132076744s ago: executing program 9 (id=8490):
r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000300)={0x1, "244689261a3365eb47c14247a532ccbd3bf3b29282987c7cc12acb8ae6651cb5e0a3eeda1a7777d2fbd3428a0df873e1d58af8bf70c05fc6c43edcdaa8e7db07", {0x2, 0x1ff}})

2m25.595275209s ago: executing program 9 (id=8507):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000000200)={0x50}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40800, 0x0)
read$FUSE(r3, &(0x7f0000002ac0)={0x2020}, 0x2020)

2m25.545202775s ago: executing program 9 (id=8508):
r0 = socket(0x1d, 0x2, 0x6)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0x12}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x34}}, 0x0)

2m10.554305665s ago: executing program 39 (id=8508):
r0 = socket(0x1d, 0x2, 0x6)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0x12}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x34}}, 0x0)

2m8.310848448s ago: executing program 0 (id=8758):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00')
preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x2f, 0xc9, 0x1)

2m8.310619033s ago: executing program 0 (id=8759):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001581c2908570b2a85396d0102030109021b00010001000b0904c8020103010203090504"], 0x0)

2m5.246748921s ago: executing program 0 (id=8794):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x18, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'erspan0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000180), 0x0, 0x90, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14)

2m5.179088475s ago: executing program 0 (id=8795):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nodioread_nolock}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000dc0)="$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")
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='./file0/../file0/../file0\x00')

2m5.091859352s ago: executing program 0 (id=8796):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000691064000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)

2m4.54290259s ago: executing program 0 (id=8811):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000000066000200000000ff180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000020b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94)

2m4.461973021s ago: executing program 40 (id=8811):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000000066000200000000ff180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000020b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94)

291.791052ms ago: executing program 3 (id=10822):
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x538, &(0x7f0000000600)="$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")
r0 = open(&(0x7f0000000040)='./file1\x00', 0x14787e, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8, 0xb, 0x0, 0x0, 0x24ca})
writev(r0, &(0x7f0000000340)=[{&(0x7f00000001c0)="90", 0x1}], 0x1)

291.683774ms ago: executing program 2 (id=10823):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, <r3=>0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r5, r5], 0x2, r3, r4, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}})

291.467332ms ago: executing program 4 (id=10824):
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x300)
io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0)

222.270857ms ago: executing program 3 (id=10825):
r0 = epoll_create1(0x0)
epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x6e, &(0x7f00000001c0)={[0x7f]}, 0x8)
close(r0)

222.063233ms ago: executing program 2 (id=10826):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x5, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2001}, 0x4080)

221.924137ms ago: executing program 2 (id=10827):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801"], 0x0}, 0x94)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000), 0x5f)

221.517201ms ago: executing program 4 (id=10828):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0)

143.063619ms ago: executing program 4 (id=10829):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1})
mbind(&(0x7f0000730000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x400, 0x2)

142.828893ms ago: executing program 2 (id=10830):
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4)
getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x60)

66.92452ms ago: executing program 3 (id=10831):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_rdma(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)={'trans=rdma,', {}, 0x2c, {[{@common=@version_L}]}})

66.684463ms ago: executing program 4 (id=10832):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4)
getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9)

66.627689ms ago: executing program 2 (id=10833):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000400)={0x8000ff, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff})

65.995017ms ago: executing program 2 (id=10834):
io_setup(0x8, &(0x7f00000002c0)=<r0=>0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x1000}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x48f, r1, 0x0, 0x3c, 0x0, 0x0, 0x0, r1}])

688.986µs ago: executing program 3 (id=10835):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0x12)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0xe0901, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

484.532µs ago: executing program 4 (id=10836):
syz_emit_ethernet(0xca, &(0x7f0000000340)={@local, @random="75fb99d6bfc6", @val={@val={0x88a8, 0x1}, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @tcp={0x6, 0x6, "73f65b", 0x8c, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, {[@dstopts={0x0, 0xd, '\x00', [@pad1, @generic={0x6, 0x65, "71fc662d1855b4c24512a959a9714151836c716230e243b6dc0eca0879cfe3beb35929a70d9a8c29e7e3f9e0070c0a757bed0d98920dabdfb161113b2d558c04dab2fd72b3f594c9228d818397b7a0c4146be38b2350bd34c4cba35fe129b2d41200756c80"}]}], {{0x4e22, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x4, 0x2, 0x0, 0xbd8a}}}}}}}, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a801800048014000480080002"], 0x3c}}, 0x0)

322.268µs ago: executing program 4 (id=10837):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x0)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0xc, 0x3, 0x9, 0x2, 0x55, "eb293fced92dbac812456ed0cfe43130e63fca", 0xfffffffd, 0x80})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000003c0)=0xc5)

183.664µs ago: executing program 3 (id=10838):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)

0s ago: executing program 3 (id=10839):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil)

kernel console output (not intermixed with test programs):

69186)
[  599.058181][T24762] exFAT-fs (loop9): valid_size(150994954) is greater than size(10)
[  599.204661][T24772] loop9: detected capacity change from 0 to 128
[  599.213289][   T33] audit: type=1800 audit(1755281206.980:11761): pid=24772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.7976" name="file2" dev="loop9" ino=1048717 res=0 errno=0
[  599.475238][T24795] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  600.137976][T24823] syz.3.8000 (24823): attempted to duplicate a private mapping with mremap.  This is not supported.
[  600.194440][T24825] macvlan3: entered allmulticast mode
[  600.196795][T24825] veth1_vlan: entered allmulticast mode
[  600.285520][T24829] netlink: 'syz.3.8003': attribute type 4 has an invalid length.
[  600.323042][T20031] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  600.521879][T20031] usb 10-1: Using ep0 maxpacket: 8
[  600.674928][T20031] usb 10-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d
[  600.705408][T20031] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  600.728216][T20031] usb 10-1: Product: syz
[  600.741281][T20031] usb 10-1: Manufacturer: syz
[  600.744905][T20031] usb 10-1: SerialNumber: syz
[  600.829534][T20031] usb 10-1: config 0 descriptor??
[  600.841605][T20031] gspca_main: sonixj-2.14.0 probing 0c45:614a
[  601.646379][T20031] gspca_sonixj: reg_r err -71
[  601.648647][T20031] sonixj 10-1:0.0: probe with driver sonixj failed with error -71
[  601.653809][T20031] usb 10-1: USB disconnect, device number 10
[  602.180028][T24874] loop9: detected capacity change from 0 to 128
[  602.191284][T24874] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[  602.198248][T24874] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found!
[  602.205234][T24874] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found!
[  602.210267][T24874] UDF-fs: Scanning with blocksize 512 failed
[  602.214283][T24874] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[  602.218803][T24874] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512
[  602.225720][T24874] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found
[  602.229061][T24874] UDF-fs: Scanning with blocksize 1024 failed
[  602.235937][T24874] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[  602.240432][T24874] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512
[  602.245151][T24874] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found
[  602.248152][T24874] UDF-fs: Scanning with blocksize 2048 failed
[  602.253072][T24874] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[  602.261147][T24874] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512
[  602.265594][T24874] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found
[  602.268549][T24874] UDF-fs: Scanning with blocksize 4096 failed
[  602.271219][T24874] UDF-fs: warning (device loop9): udf_fill_super: No partition found (1)
[  602.317457][T24884] loop9: detected capacity change from 0 to 256
[  602.320728][T24884] exfat: Deprecated parameter 'namecase'
[  602.328835][T24884] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[  602.517459][T24889] loop9: detected capacity change from 0 to 1024
[  602.520572][T24889] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  602.529875][T24889] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.8031: Invalid block bitmap block 0 in block_group 0
[  602.536561][T24889] Quota error (device loop9): write_blk: dquota write failed
[  602.540358][T24889] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota
[  602.546656][T24889] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.8031: Failed to acquire dquot type 0
[  602.555907][T24889] EXT4-fs error (device loop9): ext4_free_blocks:6696: comm syz.9.8031: Freeing blocks not in datazone - block = 0, count = 4096
[  602.577160][T24889] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.8031: Invalid inode bitmap blk 0 in block_group 0
[  602.581521][T24889] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem
[  602.584648][T24889] EXT4-fs (loop9): 1 orphan inode deleted
[  602.587224][T24889] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  602.605648][T11736] Quota error (device loop9): do_check_range: Getting block 0 out of range 1-7
[  602.612639][T11736] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u9:10: Failed to release dquot type 0
[  603.093754][T24918] IPv6: sit2: Disabled Multicast RS
[  603.405548][T22895] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  603.527366][T24931] binder: BC_ATTEMPT_ACQUIRE not supported
[  603.529561][T24931] binder: 24930:24931 ioctl c0306201 2000000001c0 returned -22
[  604.791317][T24995] loop9: detected capacity change from 0 to 512
[  604.806845][T24995] EXT4-fs: Ignoring removed oldalloc option
[  604.866784][T24995] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  604.871934][T24995] ext4 filesystem being mounted at /196/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  604.904918][T22895] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  605.195017][T25009] loop9: detected capacity change from 0 to 128
[  605.217133][T25009] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  605.223955][T25009] ext4 filesystem being mounted at /198/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  605.232611][T25009] EXT4-fs (loop9): shut down requested (0)
[  605.276359][T22895] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  605.547750][T25020] loop9: detected capacity change from 0 to 32768
[  605.553173][T25020] ocfs2: Slot 0 on device (7,9) was already allocated to this node!
[  605.559788][T25020] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  605.609148][T22895] ocfs2: Unmounting device (7,9) on (node local)
[  605.880321][T25041] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  606.423625][T25077] loop9: detected capacity change from 0 to 1024
[  606.456986][T25077] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  606.524941][T22895] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  607.272612][T25087] loop9: detected capacity change from 0 to 32768
[  607.386431][T25087] bcachefs (loop9): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  607.386455][T25087]   allowing incompatible features above 0.0: (unknown version)
[  607.386463][T25087]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  607.404820][T25087] bcachefs (loop9): Using encoding defined by superblock: utf8-12.1.0
[  607.408112][T25087] bcachefs (loop9): initializing new filesystem
[  607.419475][T25087] bcachefs (loop9): going read-write
[  607.427871][T25087] bcachefs (loop9): marking superblocks
[  607.438353][T25087] bcachefs (loop9): initializing freespace
[  607.443487][T25087] bcachefs (loop9): done initializing freespace
[  607.448048][T25087] bcachefs (loop9): reading snapshots table
[  607.450695][T25087] bcachefs (loop9): reading snapshots done
[  607.487593][T25087] bcachefs (loop9): done starting filesystem
[  608.130688][T25127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8131'.
[  608.742091][T25141] netlink: 'syz.3.8136': attribute type 10 has an invalid length.
[  608.747705][T25141] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  608.757735][T25141] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  608.765811][T25141] bond0: (slave netdevsim0): Enslaving as an active interface with a down link
[  609.048627][T22895] bcachefs (loop9): shutting down
[  609.051288][T22895] bcachefs (loop9): going read-only
[  609.061439][T22895] bcachefs (loop9): finished waiting for writes to stop
[  609.066121][T22895] bcachefs (loop9): flushing journal and stopping allocators, journal seq 4
[  609.099769][T22895] bcachefs (loop9): flushing journal and stopping allocators complete, journal seq 5
[  609.115792][T22895] bcachefs (loop9): clean shutdown complete, journal seq 6
[  609.119345][T22895] bcachefs (loop9): marking filesystem clean
[  609.159111][T22895] bcachefs (loop9): shutdown complete
[  609.201157][T25160] gretap0: entered promiscuous mode
[  609.204478][T25160] vlan2: entered promiscuous mode
[  609.378302][T25162] overlayfs: failed to clone upperpath
[  610.594791][T25219] loop9: detected capacity change from 0 to 512
[  610.598345][T25219] EXT4-fs: Ignoring removed orlov option
[  610.601428][T25219] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem
[  610.613002][T25219] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  610.617284][T25219] EXT4-fs error (device loop9): ext4_iget_extra_inode:5104: inode #15: comm syz.9.8174: corrupted in-inode xattr: e_value size too large
[  610.625017][T25219] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.8174: couldn't read orphan inode 15 (err -117)
[  610.632072][T25219] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  610.665938][T22895] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  611.025944][T25246] netlink: 'syz.9.8185': attribute type 10 has an invalid length.
[  611.306002][T25265] bridge0: port 2(bridge_slave_1) entered disabled state
[  611.311587][T25265] bridge0: port 1(bridge_slave_0) entered disabled state
[  611.398325][T25265] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  611.410130][T25265] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  611.561258][T18749] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  611.566951][T18749] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  611.573972][T18749] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  611.577955][T18749] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  612.110880][   T33] audit: type=1326 audit(1755281219.870:11762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25299 comm="syz.9.8210" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25cbb8ebe9 code=0x7ffc0000
[  612.123791][   T33] audit: type=1326 audit(1755281219.880:11763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25299 comm="syz.9.8210" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25cbb8ebe9 code=0x7ffc0000
[  612.135573][   T33] audit: type=1326 audit(1755281219.890:11764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25299 comm="syz.9.8210" exe="/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f25cbb8ebe9 code=0x7ffc0000
[  612.148929][   T33] audit: type=1326 audit(1755281219.890:11765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25299 comm="syz.9.8210" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25cbb8ebe9 code=0x7ffc0000
[  612.469168][T25323] loop9: detected capacity change from 0 to 4096
[  612.485507][T25323] NILFS (loop9): invalid segment: Checksum error in segment payload
[  612.491934][T25323] NILFS (loop9): trying rollback from an earlier position
[  612.513763][T25323] NILFS (loop9): recovery complete
[  612.516858][T25328] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  614.211773][T20031] usb 10-1: new full-speed USB device number 11 using dummy_hcd
[  614.363733][T20031] usb 10-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  614.367597][T20031] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  614.372714][T20031] usb 10-1: config 0 descriptor??
[  614.377306][T20031] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  614.579800][T20031] gp8psk: usb in 128 operation failed.
[  614.846290][T20031] gp8psk: usb in 146 operation failed.
[  614.849129][T20031] gp8psk: failed to get FW version
[  614.852773][T20031] gp8psk: usb in 149 operation failed.
[  614.855158][T20031] gp8psk: failed to get FPGA version
[  615.092584][T20031] gp8psk: usb out operation failed.
[  615.094350][T20031] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  615.103558][T20031] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  615.108262][T20031] usb 10-1: USB disconnect, device number 11
[  617.861186][T25495] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  618.087620][T25499] loop9: detected capacity change from 0 to 32768
[  618.091894][T25499] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.8298 (25499)
[  618.100916][T25499] BTRFS info (device loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  618.105118][T25499] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm
[  618.108656][T25499] BTRFS info (device loop9): using free-space-tree
[  618.194770][T22895] BTRFS info (device loop9): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  618.520708][T25538] netlink: 'syz.4.8308': attribute type 1 has an invalid length.
[  618.800480][T25565] overlayfs: failed to clone upperpath
[  618.937394][T25582] tmpfs: Bad value for 'mpol'
[  619.161867][T20031] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  619.311886][T20031] usb 10-1: Using ep0 maxpacket: 16
[  619.316406][T20031] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 8
[  619.325826][T20031] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  619.329607][T20031] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  619.333964][T20031] usb 10-1: Product: syz
[  619.335743][T20031] usb 10-1: Manufacturer: syz
[  619.337634][T20031] usb 10-1: SerialNumber: syz
[  619.341439][T20031] usb 10-1: config 0 descriptor??
[  619.349697][T20031] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected
[  619.355778][T20031] usb 10-1: Detected FT232R
[  619.447100][ T5846] Bluetooth: hci2: unexpected Set CIG Parameters response data
[  619.455958][ T5846] Bluetooth: hci2: unexpected event for opcode 0x2062
[  619.554116][T20031] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  619.764709][T20031] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  619.963379][    T9] usb 10-1: USB disconnect, device number 12
[  619.976964][    T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  619.981034][    T9] ftdi_sio 10-1:0.0: device disconnected
[  620.799233][T25624] loop9: detected capacity change from 0 to 256
[  620.803139][T25624] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  620.807568][T25624] exFAT-fs (loop9): Medium has reported failures. Some data may be lost.
[  620.816260][T25619] could not allocate digest TFM handle sha1-avx2
[  620.824350][T25624] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x43c9847d, utbl_chksum : 0xe619d30d)
[  621.235842][T25645] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8353'.
[  621.317457][T25653] netlink: 'syz.3.8357': attribute type 2 has an invalid length.
[  621.502975][T25667] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8364'.
[  621.556215][T25673] ref_ctr going negative. vaddr: 0x200000ffd000, curr val: -19135, delta: 1
[  621.559301][T25673] ref_ctr increment failed for inode: 0x594 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888109f04b40
[  621.855343][T25697] loop9: detected capacity change from 0 to 8
[  621.859063][T25697] SQUASHFS error: lzo decompression failed, data probably corrupt
[  621.862305][T25697] SQUASHFS error: Failed to read block 0x28d: -5
[  621.864537][T25697] SQUASHFS error: Unable to read metadata cache entry [28b]
[  621.867002][T25697] SQUASHFS error: Unable to read inode 0x11f
[  621.969841][T25707] Sensor A: =================  START STATUS  =================
[  621.973248][T25707] Sensor A: Test Pattern: 75% Colorbar
[  621.975308][T25707] Sensor A: Show Information: All
[  621.978575][T25707] Sensor A: Vertical Flip: false
[  621.980238][T25707] Sensor A: Horizontal Flip: false
[  621.984507][T25707] Sensor A: Brightness: 128
[  621.986017][T25707] Sensor A: Contrast: 128
[  621.987409][T25707] Sensor A: Hue: 0
[  621.988618][T25707] Sensor A: Saturation: 128
[  621.996696][T25707] Sensor A: ==================  END STATUS  ==================
[  622.042584][T25711] loop9: detected capacity change from 0 to 128
[  622.049416][T25711] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  622.061499][T25711] ext4 filesystem being mounted at /273/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  622.148870][T22895] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  622.887226][T25746] vlan2: entered allmulticast mode
[  622.889635][T25746] veth1: entered allmulticast mode
[  622.963750][T20031] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  623.111907][T20031] usb 10-1: Using ep0 maxpacket: 8
[  623.120462][T20031] usb 10-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  623.126940][T20031] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  623.130345][T20031] usb 10-1: Product: syz
[  623.132372][T20031] usb 10-1: Manufacturer: syz
[  623.134283][T20031] usb 10-1: SerialNumber: syz
[  623.138029][T20031] usb 10-1: config 0 descriptor??
[  623.344220][T20031] usb 10-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  623.472319][ T5846] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  623.477011][ T5846] Bluetooth: hci2: Injecting HCI hardware error event
[  623.481079][ T5846] Bluetooth: hci2: hardware error 0x00
[  623.546821][T20031] usb write operation failed. (-71)
[  623.556750][T20031] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  623.560810][T20031] dvbdev: DVB: registering new adapter (Terratec H7)
[  623.565948][T20031] usb 10-1: media controller created
[  623.568132][T20031] usb read operation failed. (-71)
[  623.570194][T20031] usb write operation failed. (-71)
[  623.579459][T20031] dvb_usb_az6007 10-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  623.585507][T20031] usb 10-1: USB disconnect, device number 13
[  624.195446][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  624.198959][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  625.011207][T25830] netlink: 'syz.9.8439': attribute type 2 has an invalid length.
[  625.016512][T25830] netlink: 'syz.9.8439': attribute type 11 has an invalid length.
[  625.019939][T25830] netlink: 132 bytes leftover after parsing attributes in process `syz.9.8439'.
[  625.398937][T25827] bridge0: port 2(bridge_slave_1) entered disabled state
[  625.554542][ T5846] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  625.677519][T25847] Non-string source
[  625.727569][T25849] loop9: detected capacity change from 0 to 1024
[  625.790916][    T9] hid-generic 0005:16C0:5505.0012: item fetching failed at offset 0/2
[  625.798741][    T9] hid-generic 0005:16C0:5505.0012: probe with driver hid-generic failed with error -22
[  626.058225][T25864] loop9: detected capacity change from 0 to 32768
[  626.063733][T25864] bcachefs (/dev/loop9): error validating superblock: Invalid superblock section replicas_v0: invalid device 1 in entry (unknown data_type 224): 1/245 [0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 4 5 5 6 10 11 11 11 26 33 34 45 45 56 80]
[  626.063733][T25864] replicas_v0 (size 40):
[  626.063733][T25864] (unknown data_type 224): 15 [0 0 0 0 0 0 255 255 255 255 255 255 255 255 255] (unknown data_type 224): 245 [5 0 0 0 0 1 0 0 0 0 0 0 0 80 0 0 0 10 0 0 0 0 0 0 0 0 0 0 0 56 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 34 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 45 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
[  626.063899][T25864] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  626.455103][T25888] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8466'.
[  626.735998][T25902] loop9: detected capacity change from 0 to 512
[  626.747659][T25902] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  626.755017][T25902] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  626.800244][T22895] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  626.930876][   T33] audit: type=1326 audit(1755281234.690:11766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25913 comm="syz.9.8476" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25cbb8ebe9 code=0x0
[  627.257095][T25931] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8483'.
[  627.340732][T25932] overlayfs: failed to resolve './file0': -2
[  628.347270][T25983] netfs: Couldn't get user pages (rc=-14)
[  628.352306][T25983] netfs: Zero-sized read [R=3]
[  629.518224][T26009] netlink: 'syz.4.8520': attribute type 2 has an invalid length.
[  629.521516][T26009] netlink: 199816 bytes leftover after parsing attributes in process `syz.4.8520'.
[  630.061426][T26027] veth1_macvtap: left promiscuous mode
[  630.065917][T26027] macsec0: entered allmulticast mode
[  630.084976][T26027] veth1_macvtap: entered promiscuous mode
[  630.087280][T26027] veth1_macvtap: entered allmulticast mode
[  630.089850][T26027] macsec0: left allmulticast mode
[  630.090371][T26029] netlink: 'syz.3.8530': attribute type 5 has an invalid length.
[  630.093696][T26027] veth1_macvtap: left allmulticast mode
[  630.270222][T26047] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8537'.
[  630.273766][T26044] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8537'.
[  631.018977][T26080] bond4: (slave dummy0): Releasing active interface
[  631.593297][T26105] netlink: 'syz.3.8565': attribute type 2 has an invalid length.
[  631.596490][T26105] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8565'.
[  632.557444][T26156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8588'.
[  634.087780][T26177] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8598'.
[  635.766828][T26222] netlink: 'syz.3.8618': attribute type 30 has an invalid length.
[  635.769473][T26222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8618'.
[  635.773235][T26222] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  636.413667][T26245] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8629'.
[  636.529767][T26253] netlink: 'syz.3.8633': attribute type 2 has an invalid length.
[  638.067456][T26307] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8659'.
[  639.085594][T26345] netlink: 'syz.3.8678': attribute type 6 has an invalid length.
[  639.998849][T26385] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8696'.
[  640.126419][T26393] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8701'.
[  640.133391][T26393] netlink: 43 bytes leftover after parsing attributes in process `syz.4.8701'.
[  640.137053][T26393] netlink: 'syz.4.8701': attribute type 5 has an invalid length.
[  640.139670][T26393] netlink: 43 bytes leftover after parsing attributes in process `syz.4.8701'.
[  640.941207][   T33] audit: type=1326 audit(1755281248.700:11767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26412 comm="syz.4.8710" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c4cf8ebe9 code=0x0
[  641.787142][T26424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8715'.
[  641.835419][T26428] netlink: 'syz.3.8717': attribute type 9 has an invalid length.
[  642.692175][T26447] netlink: 'syz.4.8725': attribute type 4 has an invalid length.
[  643.574526][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  643.585535][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  643.589210][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  643.603890][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  643.607246][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  643.659544][T26466] lo speed is unknown, defaulting to 1000
[  643.814251][T26466] chnl_net:caif_netlink_parms(): no params data found
[  643.877196][T26466] bridge0: port 1(bridge_slave_0) entered blocking state
[  643.879664][T26466] bridge0: port 1(bridge_slave_0) entered disabled state
[  643.882770][T26466] bridge_slave_0: entered allmulticast mode
[  643.885666][T26466] bridge_slave_0: entered promiscuous mode
[  643.888915][T26466] bridge0: port 2(bridge_slave_1) entered blocking state
[  643.891286][T26466] bridge0: port 2(bridge_slave_1) entered disabled state
[  643.895033][T26466] bridge_slave_1: entered allmulticast mode
[  643.897778][T26466] bridge_slave_1: entered promiscuous mode
[  643.926832][T26466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  643.932190][T26466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  643.956811][T26466] team0: Port device team_slave_0 added
[  643.961373][T26466] team0: Port device team_slave_1 added
[  643.981200][T26466] batman_adv: batadv0: Adding interface: batadv_slave_0
[  643.984505][T26466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  643.993001][T26466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  643.998175][T26466] batman_adv: batadv0: Adding interface: batadv_slave_1
[  644.001011][T26466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  644.009586][T26466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  644.035071][T26466] hsr_slave_0: entered promiscuous mode
[  644.037826][T26466] hsr_slave_1: entered promiscuous mode
[  644.040443][T26466] debugfs: 'hsr0' already exists in 'hsr'
[  644.042970][T26466] Cannot create hsr debugfs directory
[  644.409246][T26466] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  644.416271][T26466] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  644.420780][T26466] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  644.426830][T26466] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  644.477133][T26466] bridge0: port 2(bridge_slave_1) entered blocking state
[  644.480260][T26466] bridge0: port 2(bridge_slave_1) entered forwarding state
[  644.483547][T26466] bridge0: port 1(bridge_slave_0) entered blocking state
[  644.486682][T26466] bridge0: port 1(bridge_slave_0) entered forwarding state
[  644.537591][T26466] 8021q: adding VLAN 0 to HW filter on device bond0
[  644.573889][  T345] bridge0: port 1(bridge_slave_0) entered disabled state
[  644.576943][  T345] bridge0: port 2(bridge_slave_1) entered disabled state
[  644.591156][T26466] 8021q: adding VLAN 0 to HW filter on device team0
[  644.600249][  T345] bridge0: port 1(bridge_slave_0) entered blocking state
[  644.602763][  T345] bridge0: port 1(bridge_slave_0) entered forwarding state
[  644.610173][  T345] bridge0: port 2(bridge_slave_1) entered blocking state
[  644.613243][  T345] bridge0: port 2(bridge_slave_1) entered forwarding state
[  644.955255][T26466] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  644.958592][T26466] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  645.077654][T26466] 8021q: adding VLAN 0 to HW filter on device batadv0
[  645.101531][T26466] veth0_vlan: entered promiscuous mode
[  645.106515][T26466] veth1_vlan: entered promiscuous mode
[  645.127289][T26466] veth0_macvtap: entered promiscuous mode
[  645.132593][T26466] veth1_macvtap: entered promiscuous mode
[  645.146648][T26466] batman_adv: batadv0: Interface activated: batadv_slave_0
[  645.159581][T26466] batman_adv: batadv0: Interface activated: batadv_slave_1
[  645.168319][T18749] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  645.172002][T18749] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  645.175979][T18749] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  645.179444][T18749] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  645.261212][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  645.265091][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  645.296730][T11744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  645.300041][T11744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  645.397166][T26521] tap0: tun_chr_ioctl cmd 2147767521
[  645.558789][T26532] vxcan0: tx drop: invalid sa for name 0x0000001000000000
[  645.639698][ T5846] Bluetooth: hci3: command tx timeout
[  646.003233][T26556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8767'.
[  647.731858][ T5846] Bluetooth: hci3: command tx timeout
[  648.429160][T26607] netlink: 'syz.4.8789': attribute type 49 has an invalid length.
[  648.553742][T26608] delete_channel: no stack
[  648.744919][T26619] loop0: detected capacity change from 0 to 512
[  648.749043][T26619] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  648.764177][T26619] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  648.781526][T26619] EXT4-fs (loop0): 1 truncate cleaned up
[  648.787046][T26619] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  648.827237][T26466] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz-executor: path /6/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  648.854313][T26466] EXT4-fs error (device loop0): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  648.866267][T26466] EXT4-fs warning (device loop0): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  648.873422][T26466] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz-executor: path /6/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  648.882919][T26466] EXT4-fs error (device loop0): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  648.889964][T26466] EXT4-fs warning (device loop0): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  648.895952][T26466] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz-executor: path /6/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  648.903788][T26466] EXT4-fs error (device loop0): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  648.910409][T26466] EXT4-fs warning (device loop0): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  648.915772][T26466] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz-executor: path /6/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  648.932282][T26466] EXT4-fs error (device loop0): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  648.945167][T26466] EXT4-fs warning (device loop0): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  648.949070][T26623] overlayfs: failed to clone upperpath
[  648.950649][T26466] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz-executor: path /6/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  648.964344][T26466] EXT4-fs error (device loop0): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  648.987960][T26466] EXT4-fs warning (device loop0): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  649.002784][T26466] EXT4-fs warning (device loop0): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  649.008672][T26466] EXT4-fs warning (device loop0): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  649.014307][T26466] EXT4-fs warning (device loop0): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  649.019360][T26466] EXT4-fs warning (device loop0): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  649.024933][T26466] EXT4-fs warning (device loop0): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  649.245080][T26637] CIFS: Unable to determine destination address
[  649.250074][T26637] overlayfs: failed to clone upperpath
[  649.315668][T26466] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  649.380293][T26649] tmpfs: Bad value for 'mpol'
[  649.407663][T18749] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  649.476302][T18749] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  649.593001][T18749] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  649.598623][T26658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8815'.
[  649.679568][T18749] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  649.714044][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  649.719557][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  649.726227][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  649.729394][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  649.732781][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  649.758233][T26665] lo speed is unknown, defaulting to 1000
[  650.254932][T18749] bridge_slave_1: left allmulticast mode
[  650.257356][T18749] bridge_slave_1: left promiscuous mode
[  650.259895][T18749] bridge0: port 2(bridge_slave_1) entered disabled state
[  650.274230][T18749] bridge_slave_0: left allmulticast mode
[  650.276601][T18749] bridge_slave_0: left promiscuous mode
[  650.279073][T18749] bridge0: port 1(bridge_slave_0) entered disabled state
[  650.723177][T18749] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  650.727925][T18749] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  650.731969][T18749] bond0 (unregistering): Released all slaves
[  650.764189][T26665] chnl_net:caif_netlink_parms(): no params data found
[  650.777223][T26698] 9pnet_fd: Insufficient options for proto=fd
[  650.947998][T26665] bridge0: port 1(bridge_slave_0) entered blocking state
[  650.950945][T26665] bridge0: port 1(bridge_slave_0) entered disabled state
[  650.956533][T26665] bridge_slave_0: entered allmulticast mode
[  650.961151][T26665] bridge_slave_0: entered promiscuous mode
[  650.988954][T26665] bridge0: port 2(bridge_slave_1) entered blocking state
[  650.995307][T26665] bridge0: port 2(bridge_slave_1) entered disabled state
[  650.998250][T26665] bridge_slave_1: entered allmulticast mode
[  651.003385][T26665] bridge_slave_1: entered promiscuous mode
[  651.124877][T18749] hsr_slave_0: left promiscuous mode
[  651.128029][T18749] hsr_slave_1: left promiscuous mode
[  651.130784][T18749] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  651.135225][T18749] batman_adv: batadv0: Removing interface: batadv_slave_0
[  651.143342][T18749] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  651.146527][T18749] batman_adv: batadv0: Removing interface: batadv_slave_1
[  651.173472][T18749] veth1_macvtap: left promiscuous mode
[  651.175924][T18749] veth0_macvtap: left promiscuous mode
[  651.178401][T18749] veth1_vlan: left promiscuous mode
[  651.180693][T18749] veth0_vlan: left promiscuous mode
[  651.296995][T26726] netlink: 'syz.4.8844': attribute type 10 has an invalid length.
[  651.848572][ T5846] Bluetooth: hci3: command tx timeout
[  652.047094][T18749] team0 (unregistering): Port device team_slave_1 removed
[  652.111492][T18749] team0 (unregistering): Port device team_slave_0 removed
[  652.780714][T26665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  652.790990][T26726] team0: Device hsr_slave_0 failed to register rx_handler
[  652.803469][T26665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  652.859682][T26757] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  652.868904][T26665] team0: Port device team_slave_0 added
[  652.873446][T26665] team0: Port device team_slave_1 added
[  652.942620][T26665] batman_adv: batadv0: Adding interface: batadv_slave_0
[  652.945278][T26665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  652.959602][T26665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  652.972106][T26665] batman_adv: batadv0: Adding interface: batadv_slave_1
[  652.974383][T26665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  652.985225][T26665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  653.041360][T26665] hsr_slave_0: entered promiscuous mode
[  653.057300][T26765] tmpfs: Bad value for 'mpol'
[  653.059699][T26665] hsr_slave_1: entered promiscuous mode
[  653.062871][T26665] debugfs: 'hsr0' already exists in 'hsr'
[  653.065257][T26665] Cannot create hsr debugfs directory
[  653.169683][T26769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8863'.
[  653.537455][T26789] netlink: 'syz.3.8873': attribute type 153 has an invalid length.
[  653.572884][T26665] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  653.578257][T26665] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  653.583912][T26665] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  653.589269][T26665] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  653.664038][T26665] 8021q: adding VLAN 0 to HW filter on device bond0
[  653.694115][T26665] 8021q: adding VLAN 0 to HW filter on device team0
[  653.707146][T11294] bridge0: port 1(bridge_slave_0) entered blocking state
[  653.710601][T11294] bridge0: port 1(bridge_slave_0) entered forwarding state
[  653.723221][T11294] bridge0: port 2(bridge_slave_1) entered blocking state
[  653.726229][T11294] bridge0: port 2(bridge_slave_1) entered forwarding state
[  653.753735][T26665] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  653.851579][T26665] 8021q: adding VLAN 0 to HW filter on device batadv0
[  653.871802][ T5846] Bluetooth: hci3: command tx timeout
[  653.879905][T26665] veth0_vlan: entered promiscuous mode
[  653.889365][T26665] veth1_vlan: entered promiscuous mode
[  653.907340][T26665] veth0_macvtap: entered promiscuous mode
[  653.911170][T26665] veth1_macvtap: entered promiscuous mode
[  653.920332][T26665] batman_adv: batadv0: Interface activated: batadv_slave_0
[  653.932634][T26665] batman_adv: batadv0: Interface activated: batadv_slave_1
[  653.942627][ T7396] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  653.949170][ T7396] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  653.956675][ T7396] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  653.959938][ T7396] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  654.063058][T23079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  654.066157][T23079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  654.096679][T23079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  654.100404][T23079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  654.793155][T26839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8888'.
[  654.820435][T26841] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8889'.
[  655.118839][T26850] loop2: detected capacity change from 0 to 1024
[  655.124787][T26850] EXT4-fs: Ignoring removed bh option
[  655.150356][T26850] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  655.406397][T26850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  655.498831][T26850] evm: overlay not supported
[  655.536971][T26850] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #12: block 7: comm syz.2.8893: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  655.558196][T26850] EXT4-fs (loop2): Remounting filesystem read-only
[  655.617481][T26665] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  655.791097][T26870] loop2: detected capacity change from 0 to 16
[  655.819518][T26870] erofs (device loop2): mounted with root inode @ nid 36.
[  655.865841][T26876] loop2: detected capacity change from 0 to 2048
[  655.869388][T26876] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  655.877892][T26877] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  655.882717][T26876] syz.2.8904: attempt to access beyond end of device
[  655.882717][T26876] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  655.924629][T26879] loop2: detected capacity change from 0 to 512
[  655.942986][T26879] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  655.951914][ T5846] Bluetooth: hci3: command tx timeout
[  656.769970][   T33] audit: type=1326 audit(1755281264.530:11768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26871 comm="syz.4.8902" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4cf8ebe9 code=0x7ffc0000
[  656.787627][   T33] audit: type=1326 audit(1755281264.530:11769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26871 comm="syz.4.8902" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4cf8ebe9 code=0x7ffc0000
[  656.802762][T26879] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.8905: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 4(0), depth 0(0)
[  656.808968][   T33] audit: type=1326 audit(1755281264.530:11770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26871 comm="syz.4.8902" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3c4cf8ebe9 code=0x7ffc0000
[  656.826608][T26879] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.8905: Bad quota inode: 3, type: 0
[  656.835149][T26879] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  656.840717][   T33] audit: type=1326 audit(1755281264.530:11771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26871 comm="syz.4.8902" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4cf8ebe9 code=0x7ffc0000
[  656.850328][T26879] EXT4-fs (loop2): mount failed
[  656.862072][   T33] audit: type=1326 audit(1755281264.530:11772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26871 comm="syz.4.8902" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4cf8ebe9 code=0x7ffc0000
[  656.882866][   T33] audit: type=1326 audit(1755281264.530:11773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26871 comm="syz.4.8902" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3c4cf8ebe9 code=0x7ffc0000
[  656.900132][   T33] audit: type=1326 audit(1755281264.570:11774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26871 comm="syz.4.8902" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4cf8ebe9 code=0x7ffc0000
[  656.908146][   T33] audit: type=1326 audit(1755281264.570:11775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26871 comm="syz.4.8902" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4cf8ebe9 code=0x7ffc0000
[  657.124003][T26901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8911'.
[  657.400111][T26917] loop2: detected capacity change from 0 to 512
[  657.407389][T26917] EXT4-fs: Ignoring removed orlov option
[  657.415910][T26917] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  657.427333][T26917] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  657.431566][T26922] overlayfs: failed to clone upperpath
[  657.431941][T26917] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.8919: corrupted in-inode xattr: e_value size too large
[  657.438318][T26917] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.8919: couldn't read orphan inode 15 (err -117)
[  657.443218][T26917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  657.477795][T26665] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  657.577578][T26936] sctp: [Deprecated]: syz.2.8928 (pid 26936) Use of int in max_burst socket option deprecated.
[  657.577578][T26936] Use struct sctp_assoc_value instead
[  657.874930][T26941] loop2: detected capacity change from 0 to 4096
[  658.041860][ T5846] Bluetooth: hci3: command tx timeout
[  658.241818][ T5894] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  658.424527][ T5894] usb 3-1: Using ep0 maxpacket: 16
[  658.433352][ T5894] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8
[  658.443617][ T5894] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  658.446821][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  658.449494][ T5894] usb 3-1: Product: syz
[  658.450850][ T5894] usb 3-1: Manufacturer: syz
[  658.453841][ T5894] usb 3-1: SerialNumber: syz
[  658.457763][ T5894] usb 3-1: config 0 descriptor??
[  658.462536][ T5894] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  658.465404][ T5894] usb 3-1: Detected FT232R
[  658.497604][T26984] overlayfs: failed to clone upperpath
[  658.718292][ T5894] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  658.724814][ T5894] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  658.733114][ T5894] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71
[  658.736260][ T5894] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  658.746109][ T5894] usb 3-1: USB disconnect, device number 12
[  658.750775][ T5894] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  658.755303][ T5894] ftdi_sio 3-1:0.0: device disconnected
[  659.386268][T27015] loop2: detected capacity change from 0 to 32768
[  659.389208][T27015] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.8965 (27015)
[  659.404341][T27015] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  659.408548][T27015] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  659.412570][T27015] BTRFS info (device loop2): using free-space-tree
[  659.481227][T27015] BTRFS info (device loop2): setting compat-ro feature flag for VERITY (0x4)
[  659.538772][T26665] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  660.332056][   T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  660.481780][   T10] usb 3-1: Using ep0 maxpacket: 32
[  660.487846][   T10] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01
[  660.494013][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  660.497365][   T10] usb 3-1: Product: syz
[  660.499151][   T10] usb 3-1: Manufacturer: syz
[  660.501082][   T10] usb 3-1: SerialNumber: syz
[  660.506305][   T10] usb 3-1: config 0 descriptor??
[  660.721357][   T10] usb 3-1: USB disconnect, device number 13
[  661.528078][T27103] loop2: detected capacity change from 0 to 64
[  663.281181][T27131] loop2: detected capacity change from 0 to 1764
[  663.308272][T27131] iso9660: Corrupted directory entry in block 2 of inode 1920
[  663.364174][T27137] loop2: detected capacity change from 0 to 164
[  663.375277][T27137] ISOFS: unable to read i-node block
[  663.376989][T27137] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  663.758314][T27148] block device autoloading is deprecated and will be removed.
[  664.539954][   T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  664.727198][   T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=3f.cb
[  664.731032][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  664.756612][   T10] usb 3-1: Product: syz
[  664.758314][   T10] usb 3-1: Manufacturer: syz
[  664.760172][   T10] usb 3-1: SerialNumber: syz
[  664.769128][   T10] usb 3-1: config 0 descriptor??
[  665.168965][T26812] usb 3-1: USB disconnect, device number 14
[  665.317196][T27185] /dev/nullb0: Can't lookup blockdev
[  665.531069][T27202] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9044'.
[  665.535493][T27202] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9044'.
[  665.611307][T27209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9046'.
[  666.410649][   T33] audit: type=1326 audit(1755281274.170:11776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27238 comm="syz.3.9059" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa8b8ebe9 code=0x7ffc0000
[  666.437732][   T33] audit: type=1326 audit(1755281274.170:11777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27238 comm="syz.3.9059" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa8b8ebe9 code=0x7ffc0000
[  666.456728][   T33] audit: type=1326 audit(1755281274.190:11778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27238 comm="syz.3.9059" exe="/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fbaa8b8ebe9 code=0x7ffc0000
[  666.473008][   T33] audit: type=1326 audit(1755281274.190:11779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27238 comm="syz.3.9059" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa8b8ebe9 code=0x7ffc0000
[  666.485777][   T33] audit: type=1326 audit(1755281274.190:11780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27238 comm="syz.3.9059" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa8b8ebe9 code=0x7ffc0000
[  666.496032][   T33] audit: type=1326 audit(1755281274.190:11781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27238 comm="syz.3.9059" exe="/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fbaa8b8ebe9 code=0x7ffc0000
[  666.508450][   T33] audit: type=1326 audit(1755281274.190:11782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27238 comm="syz.3.9059" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa8b8ebe9 code=0x7ffc0000
[  666.518950][   T33] audit: type=1326 audit(1755281274.190:11783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27238 comm="syz.3.9059" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa8b8ebe9 code=0x7ffc0000
[  666.985907][T27211] kexec: Could not allocate control_code_buffer
[  667.011803][T26812] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  667.034819][T27267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9073'.
[  667.045989][T27267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9073'.
[  667.147034][T27275] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  667.163675][T26812] usb 3-1: Using ep0 maxpacket: 16
[  667.170723][T26812] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  667.176379][T26812] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  667.185803][T26812] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  667.189437][T26812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  667.193491][T26812] usb 3-1: Product: syz
[  667.201854][T26812] usb 3-1: Manufacturer: syz
[  667.203897][T26812] usb 3-1: SerialNumber: syz
[  667.422190][T26812] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  667.429796][T26812] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  667.443740][T26812] usb 3-1: USB disconnect, device number 15
[  667.869095][T27290] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9084'.
[  667.874536][T27290] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9084'.
[  668.099422][T27301] loop2: detected capacity change from 0 to 2048
[  668.109096][T27301] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  668.183014][T27303] loop2: detected capacity change from 0 to 128
[  668.306708][T27307] netlink: 'syz.2.9092': attribute type 2 has an invalid length.
[  668.309921][T27307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9092'.
[  668.375847][T27311] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9094'.
[  668.651888][   T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  668.841960][   T10] usb 3-1: Using ep0 maxpacket: 32
[  668.846133][   T10] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  668.849656][   T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  668.859536][   T10] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  668.869527][   T10] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  668.876198][   T10] usb 3-1: config 0 interface 0 has no altsetting 0
[  668.882200][   T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  668.886801][   T10] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  668.890459][   T10] usb 3-1: Product: syz
[  668.895266][   T10] usb 3-1: Manufacturer: syz
[  668.897303][   T10] usb 3-1: SerialNumber: syz
[  668.905332][   T10] usb 3-1: config 0 descriptor??
[  668.909967][   T10] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  668.934913][   T10] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  668.989263][T27348] overlayfs: failed to clone upperpath
[  669.127402][T22902] usb 3-1: USB disconnect, device number 16
[  669.132964][T22902] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  669.280202][T27369] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9115'.
[  669.874833][T27414] loop2: detected capacity change from 0 to 512
[  669.910643][T27414] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  669.915986][T27414] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  670.658188][T26665] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  671.124675][T27445] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf
[  671.130462][T27445] netlink: 'syz.4.9138': attribute type 10 has an invalid length.
[  671.154919][T27445] bond0: (slave bond_slave_0): Releasing backup interface
[  671.159352][T27445] bond_slave_0: left promiscuous mode
[  671.172912][T27449] bridge0: entered promiscuous mode
[  671.176833][T27449] bridge0: left promiscuous mode
[  671.502319][T27483] __nla_validate_parse: 1 callbacks suppressed
[  671.502330][T27483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9157'.
[  671.860054][T27518] loop2: detected capacity change from 0 to 65
[  671.866513][T27518] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  671.868908][T27518] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop2
[  672.010650][T27528] loop2: detected capacity change from 0 to 128
[  672.014349][T27528] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  672.019497][T27528] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  672.070544][   T32] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  672.095700][T27530] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9180'.
[  672.275635][T27542] netlink: 'syz.2.9186': attribute type 2 has an invalid length.
[  672.290225][T27542] : entered promiscuous mode
[  672.448872][T27554] input: syz1 as /devices/virtual/input/input17
[  673.049012][T27579] loop2: detected capacity change from 0 to 32768
[  673.052338][T27579] bcachefs: bch2_fs_parse_param() Error parsing option gc_reserve_bytes: option_value
[  673.152131][   T33] audit: type=1326 audit(1755281280.910:11784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27600 comm="syz.3.9214" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa8b8ebe9 code=0x7ffc0000
[  673.186054][   T33] audit: type=1326 audit(1755281280.920:11785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27600 comm="syz.3.9214" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa8b8ebe9 code=0x7ffc0000
[  673.218615][   T33] audit: type=1326 audit(1755281280.930:11786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27600 comm="syz.3.9214" exe="/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fbaa8b8ebe9 code=0x7ffc0000
[  673.228996][   T33] audit: type=1326 audit(1755281280.940:11787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27600 comm="syz.3.9214" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbaa8b8ec23 code=0x7ffc0000
[  673.237142][   T33] audit: type=1326 audit(1755281280.940:11788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27600 comm="syz.3.9214" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa8b8ebe9 code=0x7ffc0000
[  673.246856][   T33] audit: type=1326 audit(1755281280.950:11789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27600 comm="syz.3.9214" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fbaa8b8ebe9 code=0x7ffc0000
[  673.261331][   T33] audit: type=1326 audit(1755281280.950:11790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27600 comm="syz.3.9214" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa8b8ebe9 code=0x7ffc0000
[  673.278171][   T33] audit: type=1326 audit(1755281280.950:11791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27600 comm="syz.3.9214" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa8b8ebe9 code=0x7ffc0000
[  673.378204][   T33] audit: type=1326 audit(1755281280.950:11792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27600 comm="syz.3.9214" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbaa8b8ebe9 code=0x7ffc0000
[  673.387474][   T33] audit: type=1326 audit(1755281280.950:11793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27600 comm="syz.3.9214" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbaa8b8ebe9 code=0x7ffc0000
[  674.159168][T27640] tipc: New replicast peer: 255.255.255.255
[  674.167203][T27640] tipc: Enabled bearer <udp:s>, priority 10
[  674.279093][T27646] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9235'.
[  674.531896][T27649] loop2: detected capacity change from 0 to 32768
[  675.112471][T26812] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  675.281926][T26812] usb 3-1: Using ep0 maxpacket: 8
[  675.286127][T26812] usb 3-1: config 0 has an invalid interface number: 9 but max is 0
[  675.289516][T26812] usb 3-1: config 0 has no interface number 0
[  675.292557][T26812] usb 3-1: config 0 interface 9 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64
[  675.296966][T26812] usb 3-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=23.ea
[  675.300819][T26812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  675.307476][T26812] usb 3-1: config 0 descriptor??
[  675.312268][T26812] usb 3-1: bad CDC descriptors
[  675.314900][T26812] cdc_acm 3-1:0.9: Zero length descriptor references
[  675.317600][T26812] cdc_acm 3-1:0.9: probe with driver cdc_acm failed with error -22
[  675.517894][T26812] usb 3-1: USB disconnect, device number 17
[  675.706600][T27665] netlink: 'syz.4.9243': attribute type 12 has an invalid length.
[  675.884864][T27676] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9248'.
[  676.060717][T27688] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9254'.
[  676.353947][T22902] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  676.502025][T22902] usb 3-1: Using ep0 maxpacket: 32
[  676.507493][T22902] usb 3-1: config 1 has an invalid interface number: 211 but max is 0
[  676.515648][T22902] usb 3-1: config 1 has no interface number 0
[  676.518455][T22902] usb 3-1: config 1 interface 211 has no altsetting 0
[  676.524127][T22902] usb 3-1: New USB device found, idVendor=33f7, idProduct=0004, bcdDevice=64.d9
[  676.528175][T22902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  676.533827][T22902] usb 3-1: Product: syz
[  676.535830][T22902] usb 3-1: Manufacturer: syz
[  676.538075][T22902] usb 3-1: SerialNumber: syz
[  676.751142][T22902] asix 3-1:1.211 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  676.756001][T22902] asix 3-1:1.211: probe with driver asix failed with error -71
[  676.767226][T22902] usb 3-1: USB disconnect, device number 18
[  677.594584][T27732] loop2: detected capacity change from 0 to 128
[  677.609560][T27732] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  677.616157][T27732] ext4 filesystem being mounted at /90/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  677.918810][T26665] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  679.521966][T22902] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  679.685905][T22902] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  679.689645][T22902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  679.694972][T22902] usb 3-1: config 0 descriptor??
[  679.699275][T22902] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  680.009718][T27850] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9330'.
[  680.018740][T27850] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9330'.
[  680.398065][T27872] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  681.137140][T22902] gspca_stv06xx: I2C: Read error writing address: -71
[  681.142621][T22902] usb 3-1: USB disconnect, device number 19
[  681.675221][T27897] loop2: detected capacity change from 0 to 764
[  681.743953][T27898] Symlink component flag not implemented
[  681.746839][T27898] Symlink component flag not implemented
[  681.749559][T27898] Symlink component flag not implemented (128)
[  681.752402][T27898] Symlink component flag not implemented (122)
[  682.168099][T27908] netlink: 17 bytes leftover after parsing attributes in process `syz.4.9354'.
[  682.173251][T27908] netlink: zone id is out of range
[  682.177263][T27908] netlink: zone id is out of range
[  682.178939][T27908] netlink: zone id is out of range
[  682.180811][T27908] netlink: zone id is out of range
[  682.185548][T27908] netlink: zone id is out of range
[  682.187641][T27908] netlink: zone id is out of range
[  682.189813][T27908] netlink: zone id is out of range
[  682.192372][T27908] netlink: zone id is out of range
[  682.194531][T27908] netlink: zone id is out of range
[  682.196852][T27908] netlink: zone id is out of range
[  683.942101][   T33] audit: type=1326 audit(1755281291.680:11794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27934 comm="syz.4.9366" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4cf8ebe9 code=0x7fc00000
[  684.361687][   T33] audit: type=1326 audit(1755281292.110:11795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27934 comm="syz.4.9366" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c4cf8ebe9 code=0x7fc00000
[  684.368915][   T33] audit: type=1326 audit(1755281292.110:11796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27934 comm="syz.4.9366" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4cf8ebe9 code=0x7fc00000
[  684.382102][   T33] audit: type=1326 audit(1755281292.110:11797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27934 comm="syz.4.9366" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4cf8ebe9 code=0x7fc00000
[  684.389229][   T33] audit: type=1326 audit(1755281292.110:11798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27934 comm="syz.4.9366" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4cf8ebe9 code=0x7fc00000
[  684.406635][   T33] audit: type=1326 audit(1755281292.110:11799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27934 comm="syz.4.9366" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4cf8ebe9 code=0x7fc00000
[  684.441908][   T33] audit: type=1326 audit(1755281292.110:11800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27934 comm="syz.4.9366" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4cf8ebe9 code=0x7fc00000
[  684.451476][T27949] netlink: 'syz.4.9370': attribute type 1 has an invalid length.
[  684.472335][   T33] audit: type=1326 audit(1755281292.110:11801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27934 comm="syz.4.9366" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4cf8ebe9 code=0x7fc00000
[  684.488103][   T33] audit: type=1326 audit(1755281292.110:11802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27934 comm="syz.4.9366" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c4cf8ebe9 code=0x7fc00000
[  685.641276][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  685.643956][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  685.653880][T27987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9388'.
[  686.451819][T28053] loop2: detected capacity change from 0 to 8
[  686.744364][T28076] loop2: detected capacity change from 0 to 8192
[  686.767817][T28079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9433'.
[  686.770924][T28079] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9433'.
[  687.525262][T28109] netlink: 'syz.3.9447': attribute type 1 has an invalid length.
[  687.531025][T28109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9447'.
[  687.883064][T28138] netlink: 'syz.2.9459': attribute type 3 has an invalid length.
[  687.886353][T28138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9459'.
[  689.101807][T28199] netlink: 'syz.2.9487': attribute type 6 has an invalid length.
[  689.679445][T28214] netlink: 'syz.3.9494': attribute type 7 has an invalid length.
[  689.776473][T28218] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9496'.
[  689.780273][T28218] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9496'.
[  689.784332][T28218] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9496'.
[  689.861135][T28222] CIFS mount error: No usable UNC path provided in device string!
[  689.861135][T28222] 
[  689.865799][T28222] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  690.069788][T28236] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9505'.
[  690.089546][T28238] net_ratelimit: 76 callbacks suppressed
[  690.089560][T28238] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  690.256393][T28249] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9512'.
[  690.937521][T28270] loop2: detected capacity change from 0 to 16
[  690.941084][T28270] erofs (device loop2): mounted with root inode @ nid 36.
[  690.957896][T28270] erofs (device loop2): bogus lookback distance 0 @ lcn 1 of nid 89
[  690.961445][T28270] erofs (device loop2): readahead error at folio 2 @ nid 89
[  690.966297][T28270] erofs (device loop2): bogus lookback distance 0 @ lcn 1 of nid 89
[  690.969443][T28270] erofs (device loop2): readahead error at folio 1 @ nid 89
[  690.982171][T28270] erofs (device loop2): bogus lookback distance 0 @ lcn 1 of nid 89
[  690.985307][T28270] erofs (device loop2): bogus lookback distance 0 @ lcn 1 of nid 89
[  690.988521][T28270] erofs (device loop2): read error -117 @ 1 of nid 89
[  690.991547][   T33] audit: type=1800 audit(1755281298.750:11803): pid=28270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.9521" name="file3" dev="loop2" ino=89 res=0 errno=0
[  692.288121][T28297] loop2: detected capacity change from 0 to 512
[  692.314934][T28297] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  692.319932][T28297] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  692.485681][T26665] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  692.889268][T28321] netlink: 372 bytes leftover after parsing attributes in process `syz.2.9541'.
[  693.051591][T28327] loop2: detected capacity change from 0 to 4096
[  693.295572][T28337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9549'.
[  693.754012][T28366] fuse: Bad value for 'fd'
[  694.586201][T28391] loop2: detected capacity change from 0 to 512
[  694.593015][T28391] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  694.598319][T28391] EXT4-fs (loop2): orphan cleanup on readonly fs
[  694.601081][T28391] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.9573: Block bitmap for bg 0 marked uninitialized
[  694.610374][T28391] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  694.614631][T28391] EXT4-fs (loop2): 1 orphan inode deleted
[  694.618100][T28391] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  694.634192][T28391] EXT4-fs: Ignoring sb option on remount
[  694.636618][T28391] EXT4-fs: Ignoring removed orlov option
[  694.638753][T28391] EXT4-fs: Ignoring removed nomblk_io_submit option
[  694.641267][T28391] EXT4-fs: Remounting fs w/o journal so ignoring data_err option
[  694.647723][T28391] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  694.653052][T28391] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  694.679901][T26665] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  694.775871][T28396] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9576'.
[  694.802883][T28396] vlan2: entered promiscuous mode
[  694.805008][T28396] bridge0: entered promiscuous mode
[  694.898445][T28400] loop2: detected capacity change from 0 to 1024
[  694.930746][T28400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  694.945219][   T33] audit: type=1800 audit(1755281302.710:11804): pid=28400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9578" name="bus" dev="loop2" ino=18 res=0 errno=0
[  694.970061][T28400] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt.
[  695.063648][T26665] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  695.106265][T28407] loop2: detected capacity change from 0 to 8
[  695.115926][T28407] SQUASHFS error: xz decompression failed, data probably corrupt
[  695.118918][T28407] SQUASHFS error: Failed to read block 0x108: -5
[  695.121408][T28407] SQUASHFS error: Unable to read metadata cache entry [106]
[  695.124892][T28407] SQUASHFS error: Unable to read inode 0x11f
[  695.498299][T28410] ref_ctr_offset mismatch. inode: 0x42c7 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4
[  695.567697][T28415] overlayfs: failed to clone upperpath
[  695.885684][ T5894] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  696.033860][ T5894] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  696.040360][ T5894] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  696.047018][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  696.050615][ T5894] usb 3-1: Product: syz
[  696.052622][ T5894] usb 3-1: Manufacturer: syz
[  696.054633][ T5894] usb 3-1: SerialNumber: syz
[  696.058521][ T5894] usb 3-1: config 0 descriptor??
[  696.267333][T26812] usb 3-1: USB disconnect, device number 20
[  696.432930][ T7396] tipc: Subscription rejected, illegal request
[  696.859257][T28482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9615'.
[  696.863170][T28482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9615'.
[  697.000431][T28493] input: syz1 as /devices/virtual/input/input18
[  697.474503][T28501] loop2: detected capacity change from 0 to 1764
[  697.477769][T28501] iso9660: Unknown parameter 'uid<00000000000000000000'
[  697.744537][T28510] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9628'.
[  697.751533][T28510] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9628'.
[  698.236485][T28525] loop2: detected capacity change from 0 to 40427
[  698.240361][T28525] F2FS-fs (loop2): Wrong SSA boundary, start(3584) end(4096) blocks(0)
[  698.243771][T28525] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  698.247801][T28525] F2FS-fs (loop2): build fault injection type: 0x6
[  698.252864][T28525] F2FS-fs (loop2): invalid crc value
[  698.305459][T28525] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  698.309782][T28525] F2FS-fs (loop2): Start checkpoint disabled!
[  698.322594][T28525] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  698.325644][T28525] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  698.376568][T23079] kworker/u9:2: attempt to access beyond end of device
[  698.376568][T23079] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  698.395674][T23079] CPU: 0 UID: 0 PID: 23079 Comm: kworker/u9:2 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  698.395697][T23079] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  698.395706][T23079] Workqueue: writeback wb_workfn (flush-7:2)
[  698.395728][T23079] Call Trace:
[  698.395735][T23079]  <TASK>
[  698.395741][T23079]  dump_stack_lvl+0x189/0x250
[  698.395762][T23079]  ? __pfx_dump_stack_lvl+0x10/0x10
[  698.395777][T23079]  ? __pfx_queue_work_on+0x10/0x10
[  698.395790][T23079]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  698.395807][T23079]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  698.395832][T23079]  f2fs_handle_critical_error+0x37c/0x540
[  698.395856][T23079]  f2fs_write_end_io+0x886/0xb60
[  698.395883][T23079]  __submit_merged_bio+0x27a/0x6a0
[  698.395906][T23079]  __submit_merged_write_cond+0x255/0x530
[  698.395930][T23079]  f2fs_write_data_pages+0x261d/0x3000
[  698.395977][T23079]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  698.396007][T23079]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  698.396049][T23079]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  698.396066][T23079]  ? look_up_lock_class+0x74/0x170
[  698.396090][T23079]  ? trace_f2fs_writepages+0x7f/0x200
[  698.396108][T23079]  ? f2fs_write_node_pages+0x478/0x6e0
[  698.396128][T23079]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  698.396155][T23079]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  698.396174][T23079]  do_writepages+0x32e/0x550
[  698.396196][T23079]  ? reacquire_held_locks+0x127/0x1d0
[  698.396209][T23079]  ? writeback_sb_inodes+0x384/0x1010
[  698.396233][T23079]  __writeback_single_inode+0x145/0xff0
[  698.396250][T23079]  ? do_raw_spin_unlock+0x4d/0x240
[  698.396269][T23079]  writeback_sb_inodes+0x6c7/0x1010
[  698.396338][T23079]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  698.396388][T23079]  ? rcu_is_watching+0x15/0xb0
[  698.396410][T23079]  wb_writeback+0x43b/0xaf0
[  698.396433][T23079]  ? queue_io+0x321/0x590
[  698.396452][T23079]  ? __pfx_wb_writeback+0x10/0x10
[  698.396475][T23079]  ? _raw_spin_unlock_irq+0x23/0x50
[  698.396494][T23079]  wb_workfn+0x409/0xef0
[  698.396520][T23079]  ? __pfx_wb_workfn+0x10/0x10
[  698.396539][T23079]  ? __lock_acquire+0xab9/0xd20
[  698.396582][T23079]  ? process_scheduled_works+0x9ef/0x17b0
[  698.396603][T23079]  ? _raw_spin_unlock_irq+0x23/0x50
[  698.396615][T23079]  ? process_scheduled_works+0x9ef/0x17b0
[  698.396624][T23079]  ? process_scheduled_works+0x9ef/0x17b0
[  698.396636][T23079]  process_scheduled_works+0xae1/0x17b0
[  698.396667][T23079]  ? __pfx_process_scheduled_works+0x10/0x10
[  698.396690][T23079]  worker_thread+0x8a0/0xda0
[  698.396705][T23079]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  698.396727][T23079]  ? __kthread_parkme+0x7b/0x200
[  698.396749][T23079]  kthread+0x711/0x8a0
[  698.396765][T23079]  ? __pfx_worker_thread+0x10/0x10
[  698.396776][T23079]  ? __pfx_kthread+0x10/0x10
[  698.396793][T23079]  ? _raw_spin_unlock_irq+0x23/0x50
[  698.396806][T23079]  ? lockdep_hardirqs_on+0x9c/0x150
[  698.396818][T23079]  ? __pfx_kthread+0x10/0x10
[  698.396833][T23079]  ret_from_fork+0x3fc/0x770
[  698.396850][T23079]  ? __pfx_ret_from_fork+0x10/0x10
[  698.396868][T23079]  ? __switch_to_asm+0x39/0x70
[  698.396882][T23079]  ? __switch_to_asm+0x33/0x70
[  698.396895][T23079]  ? __pfx_kthread+0x10/0x10
[  698.396910][T23079]  ret_from_fork_asm+0x1a/0x30
[  698.396939][T23079]  </TASK>
[  698.398349][T23079] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  698.855144][T28565] netlink: 'syz.2.9654': attribute type 1 has an invalid length.
[  698.858366][T28565] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9654'.
[  698.865076][T28565] nbd: illegal input index 1048576
[  698.941510][T28569] loop2: detected capacity change from 0 to 512
[  698.967355][T28569] EXT4-fs (loop2): corrupt root inode, run e2fsck
[  698.970427][T28569] EXT4-fs (loop2): mount failed
[  699.104323][T28579] loop2: detected capacity change from 0 to 128
[  699.112938][T28579] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  699.118430][T28579] ext4 filesystem being mounted at /195/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  699.167497][T26665] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  699.228084][T28587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9664'.
[  699.234542][T28587] chnl_net:caif_netlink_parms(): no params data found
[  699.541889][T28607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9672'.
[  699.607230][T28610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9667'.
[  701.138526][T28648] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (1024)
[  701.142558][T28648] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  702.103844][T28671] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9698'.
[  702.408043][ T5846] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  702.413712][ T5846] CPU: 1 UID: 0 PID: 5846 Comm: kworker/u11:2 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  702.413731][ T5846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  702.413739][ T5846] Workqueue: hci3 hci_rx_work
[  702.413758][ T5846] Call Trace:
[  702.413764][ T5846]  <TASK>
[  702.413770][ T5846]  dump_stack_lvl+0x189/0x250
[  702.413789][ T5846]  ? __pfx_dump_stack_lvl+0x10/0x10
[  702.413804][ T5846]  ? __pfx__printk+0x10/0x10
[  702.413825][ T5846]  ? kernfs_path_from_node+0x250/0x290
[  702.413839][ T5846]  ? kernfs_path_from_node+0x2f/0x290
[  702.413857][ T5846]  sysfs_create_dir_ns+0x259/0x280
[  702.413872][ T5846]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  702.413886][ T5846]  ? do_raw_spin_unlock+0x4d/0x240
[  702.413905][ T5846]  kobject_add_internal+0x59f/0xb40
[  702.413928][ T5846]  kobject_add+0x155/0x220
[  702.413946][ T5846]  ? __pfx_kobject_add+0x10/0x10
[  702.413963][ T5846]  ? _raw_spin_unlock+0x28/0x50
[  702.413978][ T5846]  ? get_device_parent+0x366/0x3a0
[  702.413992][ T5846]  device_add+0x408/0xb50
[  702.414007][ T5846]  hci_conn_add_sysfs+0xd5/0x1e0
[  702.414021][ T5846]  le_conn_complete_evt+0xc3a/0x1220
[  702.414045][ T5846]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  702.414060][ T5846]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  702.414074][ T5846]  ? __asan_memcpy+0x40/0x70
[  702.414090][ T5846]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  702.414105][ T5846]  ? skb_pull_data+0xfb/0x200
[  702.414121][ T5846]  hci_le_conn_complete_evt+0x187/0x450
[  702.414142][ T5846]  hci_event_packet+0x78f/0x1200
[  702.414157][ T5846]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  702.414173][ T5846]  ? __pfx_hci_event_packet+0x10/0x10
[  702.414187][ T5846]  ? kcov_remote_start+0x4d3/0x7f0
[  702.414210][ T5846]  ? lockdep_hardirqs_on+0x90/0x150
[  702.414227][ T5846]  ? hci_send_to_monitor+0xe2/0x570
[  702.414277][ T5846]  hci_rx_work+0x46a/0xe80
[  702.414298][ T5846]  ? process_scheduled_works+0x9ef/0x17b0
[  702.414311][ T5846]  process_scheduled_works+0xae1/0x17b0
[  702.414343][ T5846]  ? __pfx_process_scheduled_works+0x10/0x10
[  702.414366][ T5846]  worker_thread+0x8a0/0xda0
[  702.414395][ T5846]  kthread+0x711/0x8a0
[  702.414413][ T5846]  ? __pfx_worker_thread+0x10/0x10
[  702.414425][ T5846]  ? __pfx_kthread+0x10/0x10
[  702.414441][ T5846]  ? _raw_spin_unlock_irq+0x23/0x50
[  702.414455][ T5846]  ? lockdep_hardirqs_on+0x9c/0x150
[  702.414468][ T5846]  ? __pfx_kthread+0x10/0x10
[  702.414482][ T5846]  ret_from_fork+0x3fc/0x770
[  702.414496][ T5846]  ? __pfx_ret_from_fork+0x10/0x10
[  702.414512][ T5846]  ? __switch_to_asm+0x39/0x70
[  702.414525][ T5846]  ? __switch_to_asm+0x33/0x70
[  702.414538][ T5846]  ? __pfx_kthread+0x10/0x10
[  702.414552][ T5846]  ret_from_fork_asm+0x1a/0x30
[  702.414577][ T5846]  </TASK>
[  702.414598][ T5846] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  702.517961][T28696] overlayfs: failed to clone upperpath
[  702.520468][ T5846] Bluetooth: hci3: failed to register connection device
[  704.882861][   T33] audit: type=1400 audit(1755281312.640:11805): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6DAB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36FD3578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F041321
[  705.106621][T28784] loop2: detected capacity change from 0 to 2048
[  705.178398][T28789] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  705.196408][   T33] audit: type=1800 audit(1755281312.960:11806): pid=28784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9748" name="file2" dev="loop2" ino=16 res=0 errno=0
[  705.224329][T28784] NILFS (loop2): writing node/leaf block does not appear in b-tree (ino=16) at key=5, level=0
[  705.228753][T28784] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=16)
[  705.243178][T28784] Remounting filesystem read-only
[  705.259043][T26665] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  705.307017][T28797] netlink: 'syz.4.9756': attribute type 1 has an invalid length.
[  705.323885][T28797] 8021q: adding VLAN 0 to HW filter on device bond7
[  705.338136][T28797] vlan3: entered allmulticast mode
[  705.339852][T28797] bond7: entered allmulticast mode
[  705.464578][T28805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9760'.
[  705.468403][T28805] netlink: 'syz.2.9760': attribute type 7 has an invalid length.
[  706.414278][T28849] netlink: 'syz.2.9779': attribute type 1 has an invalid length.
[  706.420495][T28851] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  706.788687][   T33] audit: type=1326 audit(1755281314.550:11807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28878 comm="syz.3.9794" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa8b8ebe9 code=0x7ffc0000
[  706.801398][   T33] audit: type=1326 audit(1755281314.550:11808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28878 comm="syz.3.9794" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa8b8ebe9 code=0x7ffc0000
[  706.816806][   T33] audit: type=1326 audit(1755281314.550:11809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28878 comm="syz.3.9794" exe="/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fbaa8b8ebe9 code=0x7ffc0000
[  706.843474][   T33] audit: type=1326 audit(1755281314.550:11810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28878 comm="syz.3.9794" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa8b8ebe9 code=0x7ffc0000
[  707.106551][T28899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9803'.
[  707.111113][T28899] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9803'.
[  707.153969][T28903] netlink: 'syz.2.9806': attribute type 10 has an invalid length.
[  707.156659][T28903] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9806'.
[  707.159750][T28903] team0: entered promiscuous mode
[  707.161516][T28903] team_slave_0: entered promiscuous mode
[  707.163911][T28903] team_slave_1: entered promiscuous mode
[  707.165774][T28903] team0: entered allmulticast mode
[  707.167409][T28903] team_slave_0: entered allmulticast mode
[  707.169234][T28903] team_slave_1: entered allmulticast mode
[  707.180105][T28903] bridge0: port 3(team0) entered blocking state
[  707.182735][T28903] bridge0: port 3(team0) entered disabled state
[  707.186388][T28903] bridge0: port 3(team0) entered blocking state
[  707.188556][T28903] bridge0: port 3(team0) entered forwarding state
[  707.201012][T28905] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9807'.
[  707.266096][   T33] audit: type=1326 audit(1755281315.030:11811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28911 comm="syz.3.9811" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbaa8b8ebe9 code=0x0
[  707.306623][T28916] delete_channel: no stack
[  707.737436][   T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  707.772648][T28933] overlayfs: failed to clone upperpath
[  707.901936][   T10] usb 3-1: Using ep0 maxpacket: 32
[  707.905914][   T10] usb 3-1: config 4 has an invalid interface number: 128 but max is 0
[  707.909366][   T10] usb 3-1: config 4 has no interface number 0
[  707.913506][   T10] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  707.919273][   T10] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  707.927114][   T10] usb 3-1: New USB device found, idVendor=016d, idProduct=c314, bcdDevice= 0.00
[  707.934353][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  707.942272][   T10] hub 3-1:4.128: USB hub found
[  708.313202][   T10] hub 3-1:4.128: 2 ports detected
[  708.315449][   T10] hub 3-1:4.128: Using single TT (err -22)
[  708.347590][   T10] hub 3-1:4.128: hub_hub_status failed (err = -71)
[  708.350357][   T10] hub 3-1:4.128: config failed, can't get hub status (err -71)
[  708.382327][   T10] usb 3-1: USB disconnect, device number 21
[  708.438065][   T33] audit: type=1326 audit(1755281316.200:11812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28956 comm="syz.3.9832" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbaa8b8ebe9 code=0x0
[  710.471918][T20142] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  710.621724][T20142] usb 3-1: Using ep0 maxpacket: 8
[  710.630059][T20142] usb 3-1: config 0 has an invalid interface number: 246 but max is 0
[  710.635678][T20142] usb 3-1: config 0 has no interface number 0
[  710.639617][T20142] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  710.643064][T20142] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  710.646290][T20142] usb 3-1: Product: syz
[  710.647662][T20142] usb 3-1: Manufacturer: syz
[  710.651791][T20142] usb 3-1: SerialNumber: syz
[  710.654857][T20142] usb 3-1: config 0 descriptor??
[  710.696130][T20142] msi2500 3-1:0.246: Registered as swradio24
[  710.698254][T20142] msi2500 3-1:0.246: SDR API is still slightly experimental and functionality changes may follow
[  710.874379][T20142] usb 3-1: USB disconnect, device number 22
[  711.731785][T22902] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  711.877313][T29034] netlink: zone id is out of range
[  711.879746][T29034] netlink: zone id is out of range
[  711.882122][T29034] netlink: zone id is out of range
[  711.884366][T29034] netlink: zone id is out of range
[  711.886582][T29034] netlink: zone id is out of range
[  711.888813][T29034] netlink: zone id is out of range
[  711.891040][T29034] netlink: zone id is out of range
[  711.893839][T22902] usb 3-1: Using ep0 maxpacket: 32
[  711.895998][T29034] netlink: zone id is out of range
[  711.898351][T29034] netlink: zone id is out of range
[  711.900460][T29034] netlink: zone id is out of range
[  711.903083][T22902] usb 3-1: unable to get BOS descriptor or descriptor too short
[  711.906516][T22902] usb 3-1: config 0 has an invalid interface number: 251 but max is 1
[  711.909765][T22902] usb 3-1: config 0 has an invalid interface number: 2 but max is 1
[  711.918602][T22902] usb 3-1: config 0 has no interface number 0
[  711.920655][T22902] usb 3-1: config 0 has no interface number 1
[  711.923891][T22902] usb 3-1: config 0 interface 251 has no altsetting 0
[  711.926222][T22902] usb 3-1: config 0 interface 2 has no altsetting 0
[  711.930601][T22902] usb 3-1: New USB device found, idVendor=413c, idProduct=81a4, bcdDevice=ae.9f
[  711.934024][T22902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  711.936861][T22902] usb 3-1: Product: syz
[  711.938554][T22902] usb 3-1: Manufacturer: syz
[  711.940493][T22902] usb 3-1: SerialNumber: syz
[  711.944255][T22902] usb 3-1: config 0 descriptor??
[  712.160805][T22902] usb 3-1: selecting invalid altsetting 0
[  712.164330][T22902] usb 3-1: Could not set interface, error -22
[  712.169092][T22902] usb 3-1: USB disconnect, device number 23
[  712.198868][T29043] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9870'.
[  712.913817][T29077] loop2: detected capacity change from 0 to 16
[  712.919288][T29077] erofs (device loop2): mounted with root inode @ nid 36.
[  713.174100][T29081] loop2: detected capacity change from 0 to 32768
[  713.240235][T29081] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  713.240249][T29081]   allowing incompatible features above 0.0: (unknown version)
[  713.240254][T29081]   features: 
[  713.260661][T29102] kAFS: unable to lookup cell '/,cL'
[  713.260673][T29081] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  713.266694][T29081] bcachefs (loop2): initializing new filesystem
[  713.275533][T29081] bcachefs (loop2): going read-write
[  713.285663][T29081] bcachefs (loop2): marking superblocks
[  713.327780][T29081] bcachefs (loop2): initializing freespace
[  713.337379][T29081] bcachefs (loop2): done initializing freespace
[  713.345602][T29081] bcachefs (loop2): reading snapshots table
[  713.347616][T29081] bcachefs (loop2): reading snapshots done
[  713.388510][T29081] bcachefs (loop2): done starting filesystem
[  713.414821][   T33] audit: type=1800 audit(1755281321.180:11813): pid=29081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9889" name="file1" dev="loop2" ino=4098 res=0 errno=0
[  713.436650][T26665] bcachefs (loop2): shutting down
[  713.438340][T26665] bcachefs (loop2): going read-only
[  713.440445][T26665] bcachefs (loop2): finished waiting for writes to stop
[  713.452509][T26665] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[  713.597536][T26665] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  713.610322][T26665] bcachefs (loop2): clean shutdown complete, journal seq 4
[  713.613561][T26665] bcachefs (loop2): marking filesystem clean
[  713.635352][T26665] bcachefs (loop2): shutdown complete
[  714.527159][T29142] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9914'.
[  714.530847][T29142] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9914'.
[  714.608671][T29146] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9916'.
[  716.317949][    C0] vkms_vblank_simulate: vblank timer overrun
[  717.242103][T29187] loop2: detected capacity change from 0 to 32768
[  717.345213][T29187] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  717.345227][T29187]   allowing incompatible features above 0.0: (unknown version)
[  717.345232][T29187]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  717.358306][T29187] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  717.361189][T29187] bcachefs (loop2): initializing new filesystem
[  717.367419][T29187] bcachefs (loop2): going read-write
[  717.375936][T29187] bcachefs (loop2): marking superblocks
[  717.382252][T29187] bcachefs (loop2): initializing freespace
[  717.385925][T29187] bcachefs (loop2): done initializing freespace
[  717.389954][T29187] bcachefs (loop2): reading snapshots table
[  717.392064][T29187] bcachefs (loop2): reading snapshots done
[  717.427880][T29187] bcachefs (loop2): done starting filesystem
[  717.644865][T26665] bcachefs (loop2): shutting down
[  717.646787][T26665] bcachefs (loop2): going read-only
[  717.649131][T26665] bcachefs (loop2): finished waiting for writes to stop
[  717.653465][T26665] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[  717.702037][T26665] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  717.705678][T26665] bcachefs (loop2): clean shutdown complete, journal seq 4
[  717.708337][T26665] bcachefs (loop2): marking filesystem clean
[  717.725333][T26665] bcachefs (loop2): shutdown complete
[  717.831169][T29223] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9947'.
[  718.796202][T29245] loop2: detected capacity change from 0 to 512
[  718.800568][T29245] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  718.828485][T29245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  718.834868][T29245] ext4 filesystem being mounted at /270/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  718.844141][T29245] EXT4-fs: Cannot change quota options when quota turned on
[  718.881965][T26665] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  719.077165][T29257] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9958'.
[  719.418955][T29259] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9962'.
[  719.460854][T29264] loop2: detected capacity change from 0 to 512
[  719.487212][T29264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  719.497088][T29264] ext4 filesystem being mounted at /274/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  719.520266][T29264] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.9963: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1
[  719.529543][T29264] EXT4-fs (loop2): Remounting filesystem read-only
[  720.344602][T26665] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  720.723497][T29333] netlink: 'syz.2.9996': attribute type 1 has an invalid length.
[  721.069214][T29355] netlink: 'syz.2.10006': attribute type 25 has an invalid length.
[  721.700530][T29371] loop2: detected capacity change from 0 to 764
[  723.053266][T29400] loop2: detected capacity change from 0 to 512
[  723.055724][T29400] EXT4-fs: Ignoring removed mblk_io_submit option
[  723.057858][T29400] EXT4-fs: inline encryption not supported
[  723.061789][T29400] EXT4-fs: Ignoring removed mblk_io_submit option
[  723.068303][T29400] EXT4-fs: Ignoring removed nomblk_io_submit option
[  723.079309][T29400] EXT4-fs (loop2): Test dummy encryption mode enabled
[  723.085741][T29400] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  723.095873][T29400] EXT4-fs (loop2): 1 truncate cleaned up
[  723.099428][T29400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  723.130989][   T33] audit: type=1804 audit(1755281330.880:11814): pid=29400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.10026" name="/newroot/292/bus/bus" dev="loop2" ino=18 res=1 errno=0
[  723.909402][T26665] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  724.551810][ T5874] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  724.704940][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  724.709992][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  724.717885][ T5874] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  724.722413][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  724.725857][ T5874] usb 3-1: Product: syz
[  724.727689][ T5874] usb 3-1: Manufacturer: syz
[  724.730687][ T5874] usb 3-1: SerialNumber: syz
[  724.738930][ T5874] usb 3-1: config 0 descriptor??
[  724.750977][ T5874] usb 3-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07
[  724.971368][ T5874] usb 3-1: USB disconnect, device number 24
[  725.600150][T29480] loop2: detected capacity change from 0 to 256
[  725.603344][T29480] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  725.607315][T29480] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  725.618318][T29480] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  725.874509][T29489] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10065'.
[  726.079483][T29498] loop2: detected capacity change from 0 to 4096
[  726.109064][T29501] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  726.119091][T29498] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  726.140174][T29498] NILFS (loop2): mounting fs with errors
[  726.608641][T29513] overlayfs: missing 'lowerdir'
[  726.831808][T29526] netlink: 'syz.4.10082': attribute type 21 has an invalid length.
[  727.851947][ T5894] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  728.002044][ T5894] usb 3-1: Using ep0 maxpacket: 32
[  728.005583][ T5894] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  728.009303][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  728.014414][ T5894] usb 3-1: config 0 descriptor??
[  728.325774][ T5894] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  728.335074][ T5894] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[  728.338513][ T5894] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[  728.545125][T29559] overlayfs: failed to clone upperpath
[  729.028923][T29570] loop2: detected capacity change from 0 to 128
[  729.165635][T29574] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10101'.
[  729.168913][T29574] tunl0: Caught tx_queue_len zero misconfig
[  729.177227][T29576] loop2: detected capacity change from 0 to 256
[  729.204927][T29576] FAT-fs (loop2): Directory bread(block 64) failed
[  729.207544][T29576] FAT-fs (loop2): Directory bread(block 65) failed
[  729.215611][T29576] FAT-fs (loop2): Directory bread(block 66) failed
[  729.221814][T29576] FAT-fs (loop2): Directory bread(block 67) failed
[  729.234064][T29576] FAT-fs (loop2): Directory bread(block 68) failed
[  729.236702][T29576] FAT-fs (loop2): Directory bread(block 69) failed
[  729.252207][T29576] FAT-fs (loop2): Directory bread(block 70) failed
[  729.254854][T29576] FAT-fs (loop2): Directory bread(block 71) failed
[  729.257715][T29576] FAT-fs (loop2): Directory bread(block 72) failed
[  729.260279][T29576] FAT-fs (loop2): Directory bread(block 73) failed
[  729.339039][   T33] audit: type=1326 audit(1755281338.097:11815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29583 comm="syz.4.10106" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c4cf8ebe9 code=0x0
[  729.533171][T29600] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10113'.
[  730.590455][T29624] netlink: 10 bytes leftover after parsing attributes in process `syz.4.10125'.
[  731.883636][T29683] 9pnet_fd: Insufficient options for proto=fd
[  732.396386][T29705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  732.458461][T29708] sctp: [Deprecated]: syz.2.10166 (pid 29708) Use of struct sctp_assoc_value in delayed_ack socket option.
[  732.458461][T29708] Use struct sctp_sack_info instead
[  734.725478][   T33] audit: type=1800 audit(1755281343.487:11816): pid=29765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10194" name="nullb0" dev="tmpfs" ino=2992 res=0 errno=0
[  736.199537][T29783] loop2: detected capacity change from 0 to 4096
[  736.372037][T29791] loop2: detected capacity change from 0 to 1024
[  736.378047][T29791] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  736.416657][T29791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  736.431244][T29791] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.10206: missing EA_INODE flag
[  736.449318][T29791] EXT4-fs (loop2): Remounting filesystem read-only
[  736.485716][T26665] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  736.747499][T29804] loop2: detected capacity change from 0 to 40427
[  736.750205][T29804] F2FS-fs: heap/no_heap options were deprecated
[  736.757198][T29804] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  736.759394][T29804] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  736.767192][T29804] F2FS-fs (loop2): build fault injection type: 0x0
[  736.774141][T29804] F2FS-fs (loop2): invalid crc value
[  736.844530][T29804] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  736.848024][T29804] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30
[  736.860305][T29804] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  738.379897][T29850] input: syz0 as /devices/virtual/input/input20
[  738.392020][T29850] input: failed to attach handler leds to device input20, error: -6
[  738.574596][T29865] loop2: detected capacity change from 0 to 512
[  738.611328][T29865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  738.616492][T29865] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  738.640377][T26665] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  739.330205][T29912] loop2: detected capacity change from 0 to 2048
[  739.334899][T29912] UDF-fs: warning (device loop2): udf_fill_super: No fileset found
[  739.939916][T29927] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10266'.
[  739.987828][T29929] loop2: detected capacity change from 0 to 512
[  739.991294][T29929] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  739.995265][T29929] UDF-fs: Scanning with blocksize 512 failed
[  739.997697][T29929] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  740.000155][T29929] UDF-fs: Scanning with blocksize 1024 failed
[  740.002742][T29929] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  740.005239][T29929] UDF-fs: Scanning with blocksize 2048 failed
[  740.007688][T29929] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  740.012063][T29929] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  740.183043][T29935] loop2: detected capacity change from 0 to 32768
[  740.196480][T29935] XFS: ikeep mount option is deprecated.
[  740.208610][T29935] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  740.235593][T29935] XFS (loop2): Ending clean mount
[  740.244861][T29935] XFS (loop2): Quotacheck needed: Please wait.
[  740.287331][T29935] XFS (loop2): Quotacheck: Done.
[  740.381375][T26665] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  740.713145][   T33] audit: type=1326 audit(1755281349.457:11817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29968 comm="syz.2.10282" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3f58ebe9 code=0x7ffc0000
[  740.765395][   T33] audit: type=1326 audit(1755281349.457:11818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29968 comm="syz.2.10282" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3f58ebe9 code=0x7ffc0000
[  740.804816][   T33] audit: type=1326 audit(1755281349.457:11819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29968 comm="syz.2.10282" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f4b3f58ebe9 code=0x7ffc0000
[  740.841323][   T33] audit: type=1326 audit(1755281349.467:11820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29968 comm="syz.2.10282" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3f58ebe9 code=0x7ffc0000
[  740.929127][   T33] audit: type=1326 audit(1755281349.467:11821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29968 comm="syz.2.10282" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3f58ebe9 code=0x7ffc0000
[  740.965152][   T33] audit: type=1326 audit(1755281349.467:11822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29972 comm="syz.2.10282" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4b3f5c14a5 code=0x7ffc0000
[  740.979530][   T33] audit: type=1326 audit(1755281349.467:11823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29968 comm="syz.2.10282" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4b3f58ebe9 code=0x7ffc0000
[  740.986986][   T33] audit: type=1326 audit(1755281349.467:11824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29968 comm="syz.2.10282" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3f58ebe9 code=0x7ffc0000
[  740.994859][   T33] audit: type=1326 audit(1755281349.467:11825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29968 comm="syz.2.10282" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3f58ebe9 code=0x7ffc0000
[  741.002621][   T33] audit: type=1326 audit(1755281349.467:11826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29968 comm="syz.2.10282" exe="/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f4b3f58ebe9 code=0x7ffc0000
[  741.149289][T29978] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.10285'.
[  741.155745][T29978] net_ratelimit: 61 callbacks suppressed
[  741.155757][T29978] netlink: zone id is out of range
[  741.160143][T29978] netlink: get zone limit has 8 unknown bytes
[  741.820918][T30010] loop2: detected capacity change from 0 to 64
[  741.827496][T30010] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  741.947928][T30014] loop2: detected capacity change from 0 to 16
[  741.951580][T30014] erofs (device loop2): rootino(nid 36) is not a directory(i_mode 17700)
[  743.541607][T30054] loop2: detected capacity change from 0 to 32768
[  743.544835][T30054] XFS: ikeep mount option is deprecated.
[  743.551024][T30054] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  743.562336][T30054] XFS (loop2): Ending clean mount
[  743.565693][T30054] XFS (loop2): Quotacheck needed: Please wait.
[  743.605477][T30054] XFS (loop2): Quotacheck: Done.
[  743.634430][T26665] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  743.775087][T30066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10317'.
[  743.778289][T30066] netlink: 312 bytes leftover after parsing attributes in process `syz.2.10317'.
[  743.884990][T30076] loop2: detected capacity change from 0 to 16
[  743.888977][T30076] erofs (device loop2): mounted with root inode @ nid 36.
[  744.425339][T30098] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  744.541870][T30109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10338'.
[  745.100223][T30122] sctp: [Deprecated]: syz.3.10344 (pid 30122) Use of int in maxseg socket option.
[  745.100223][T30122] Use struct sctp_assoc_value instead
[  745.592766][T30146] loop2: detected capacity change from 0 to 1024
[  745.595550][T30148] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10357'.
[  745.595680][T30146] EXT4-fs: inline encryption not supported
[  745.601209][T30146] EXT4-fs: Ignoring removed bh option
[  745.632540][T30146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  745.675244][T26665] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  746.023019][T30175] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10369'.
[  746.026040][T30175] netem: unknown loss type 12
[  746.028863][T30175] netem: change failed
[  746.647842][T30185] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  747.051546][T30191] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10374'.
[  747.078651][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  747.081465][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  747.127231][T30196] overlayfs: failed to clone upperpath
[  748.281413][T30248] loop2: detected capacity change from 0 to 512
[  748.289964][T30248] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.10401: casefold flag without casefold feature
[  748.294793][T30248] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.10401: couldn't read orphan inode 15 (err -117)
[  748.299848][T30248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  748.311141][T30248] fscrypt (loop2, inode 18): Mutually exclusive encryption flags (0x14)
[  748.329770][T26665] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  748.607016][T30264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10407'.
[  748.666812][T30272] overlayfs: failed to clone upperpath
[  748.671393][T30272] overlayfs: failed to clone upperpath
[  748.704166][   T33] kauditd_printk_skb: 50 callbacks suppressed
[  748.704178][   T33] audit: type=1800 audit(1755281357.467:11877): pid=30274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.10412" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=79305 res=0 errno=0
[  748.755140][T30276] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  749.161507][ T5846] Bluetooth: hci0: command 0x0406 tx timeout
[  750.498140][T30338] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10442'.
[  750.735145][T30358] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  750.741125][T30358] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  751.615603][T30401] dummy0: entered allmulticast mode
[  751.627041][T30401] dummy0: left allmulticast mode
[  751.699466][T30410] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10477'.
[  753.460381][T30453] loop2: detected capacity change from 0 to 1024
[  753.480511][T30453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  753.496131][T30453] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.10493: missing EA_INODE flag
[  753.501506][T30453] EXT4-fs (loop2): Remounting filesystem read-only
[  753.526072][T26665] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  753.676227][T30462] netlink: 'syz.2.10496': attribute type 4 has an invalid length.
[  755.995532][T30500] loop2: detected capacity change from 0 to 262144
[  756.000050][T30500] F2FS-fs (loop2): invalid crc value
[  756.021479][T30539] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  756.031197][T30500] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  756.035881][T30500] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  756.059850][T30500] F2FS-fs (loop2): sanity_check_inode: inode (ino=7, mode=33261) should not have inline_data, run fsck to fix
[  757.195699][T30566] loop2: detected capacity change from 0 to 1024
[  757.310845][T30566] hfsplus: request for non-existent node 62977 in B*Tree
[  757.313622][T30566] hfsplus: request for non-existent node 62977 in B*Tree
[  757.326688][T11736] hfsplus: b-tree write err: -5, ino 3
[  757.590900][T30595] netlink: 830 bytes leftover after parsing attributes in process `syz.2.10556'.
[  757.804073][T30599] loop2: detected capacity change from 0 to 32768
[  757.831549][T30599] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  757.857034][T30599] XFS (loop2): Ending clean mount
[  757.898227][T26665] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  759.584780][T30674] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2)
[  759.765798][   T33] audit: type=1804 audit(1755281368.527:11878): pid=30688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.10596" name="file0" dev="ramfs" ino=80492 res=1 errno=0
[  759.778178][   T33] audit: type=1804 audit(1755281368.537:11879): pid=30688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.10596" name="file0" dev="ramfs" ino=80492 res=1 errno=0
[  759.865181][T30692] 9pnet_fd: Insufficient options for proto=fd
[  760.075787][T30706] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10605'.
[  764.178822][T30838] loop2: detected capacity change from 0 to 512
[  764.182483][T30838] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  764.196059][T30838] EXT4-fs (loop2): 1 truncate cleaned up
[  764.199649][T30838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  764.251084][T26665] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  765.351182][T30869] usb usb8: usbfs: process 30869 (syz.2.10683) did not claim interface 0 before use
[  765.763787][T30882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10686'.
[  766.603873][T30912] overlayfs: failed to clone upperpath
[  766.608049][T30912] overlayfs: failed to clone upperpath
[  767.791089][   T33] audit: type=1326 audit(1755281376.547:11880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30941 comm="syz.2.10712" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3f58ebe9 code=0x7ffc0000
[  767.801861][   T33] audit: type=1326 audit(1755281376.557:11881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30941 comm="syz.2.10712" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3f58ebe9 code=0x7ffc0000
[  767.811162][   T33] audit: type=1326 audit(1755281376.567:11882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30941 comm="syz.2.10712" exe="/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f4b3f58ebe9 code=0x7ffc0000
[  767.820327][   T33] audit: type=1326 audit(1755281376.567:11883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30941 comm="syz.2.10712" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3f58ebe9 code=0x7ffc0000
[  767.829713][   T33] audit: type=1326 audit(1755281376.567:11884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30941 comm="syz.2.10712" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3f58ebe9 code=0x7ffc0000
[  768.729160][T30959] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10719'.
[  768.813512][T30966] loop2: detected capacity change from 0 to 512
[  768.817214][T30966] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  768.835459][T30966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  768.839800][T30966] ext4 filesystem being mounted at /450/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  768.884853][T30973] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  768.910740][T26665] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  769.185335][T30983] overlayfs: failed to clone lowerpath
[  769.407734][T30988] loop2: detected capacity change from 0 to 512
[  769.424623][T30988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  769.428786][T30988] ext4 filesystem being mounted at /454/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  769.439908][   T33] audit: type=1800 audit(1755281378.197:11885): pid=30988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10730" name="file1" dev="loop2" ino=15 res=0 errno=0
[  769.456407][   T33] audit: type=1804 audit(1755281378.217:11886): pid=30988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.10730" name="/newroot/454/file1/file1" dev="loop2" ino=15 res=1 errno=0
[  769.464624][   T33] audit: type=1800 audit(1755281378.217:11887): pid=30988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10730" name="file1" dev="loop2" ino=15 res=0 errno=0
[  769.504215][T26665] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  769.559870][   T10] kernel write not supported for file /input/mouse0 (pid: 10 comm: kworker/0:1)
[  769.690561][T31006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  769.693814][T31006] IPv6: NLM_F_CREATE should be set when creating new route
[  769.869671][T31015] autofs: Bad value for 'fd'
[  769.870060][T31016] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10742'.
[  769.878835][T31016] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10742'.
[  769.882937][T31018] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10744'.
[  769.886459][T31018] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  769.894156][T31018] batman_adv: batadv0: Removing interface: batadv_slave_0
[  769.897891][T31018] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  769.901894][T31018] batman_adv: batadv0: Removing interface: batadv_slave_1
[  769.933072][T31020] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10745'.
[  769.957105][T31022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10746'.
[  771.323535][   T33] audit: type=1326 audit(1755281380.087:11888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31053 comm="syz.3.10762" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa8b8ebe9 code=0x7ffc0000
[  771.345415][   T33] audit: type=1326 audit(1755281380.087:11889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31053 comm="syz.3.10762" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa8b8ebe9 code=0x7ffc0000
[  772.796240][T31102] netlink: 'syz.3.10785': attribute type 4 has an invalid length.
[  772.799697][T31102] netlink: 'syz.3.10785': attribute type 4 has an invalid length.
[  773.291448][   T33] kauditd_printk_skb: 2 callbacks suppressed
[  773.291461][   T33] audit: type=1326 audit(1755281382.047:11892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31144 comm="syz.3.10807" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa8b8ebe9 code=0x7ffc0000
[  773.307214][   T33] audit: type=1326 audit(1755281382.047:11893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31144 comm="syz.3.10807" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa8b8ebe9 code=0x7ffc0000
[  773.326530][   T33] audit: type=1326 audit(1755281382.057:11894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31144 comm="syz.3.10807" exe="/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fbaa8b8ebe9 code=0x7ffc0000
[  773.329364][T31148] bridge6: entered promiscuous mode
[  773.336431][   T33] audit: type=1326 audit(1755281382.057:11895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31144 comm="syz.3.10807" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa8b8ebe9 code=0x7ffc0000
[  773.336471][   T33] audit: type=1326 audit(1755281382.057:11896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31144 comm="syz.3.10807" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa8b8ebe9 code=0x7ffc0000
[  773.453538][T31156] netlink: 'syz.3.10812': attribute type 41 has an invalid length.
[  773.706194][T31184] netlink: 'syz.2.10826': attribute type 1 has an invalid length.
[  773.955828][   T34] INFO: task syz-executor:22895 blocked for more than 143 seconds.
[  773.963325][   T34]       Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0
[  773.968218][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  773.973351][   T34] task:syz-executor    state:D stack:21800 pid:22895 tgid:22895 ppid:1      task_flags:0x400140 flags:0x00004004
[  773.978110][   T34] Call Trace:
[  773.979346][   T34]  <TASK>
[  773.980359][   T34]  __schedule+0x1798/0x4cc0
[  773.983887][   T34]  ? do_raw_spin_lock+0x121/0x290
[  773.985820][   T34]  ? __lock_acquire+0xab9/0xd20
[  773.987533][   T34]  ? __pfx___schedule+0x10/0x10
[  773.989273][   T34]  ? schedule+0x91/0x360
[  773.990912][   T34]  schedule+0x165/0x360
[  773.993452][   T34]  v9fs_evict_inode+0x170/0x320
[  773.995990][   T34]  ? __pfx_v9fs_evict_inode+0x10/0x10
[  773.998325][   T34]  ? __pfx_var_wake_function+0x10/0x10
[  774.000767][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  774.005133][   T34]  ? __pfx_v9fs_evict_inode+0x10/0x10
[  774.007501][   T34]  evict+0x504/0x9c0
[  774.009224][   T34]  ? __pfx_evict+0x10/0x10
[  774.011200][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  774.013605][   T34]  ? _raw_spin_unlock+0x28/0x50
[  774.015770][   T34]  ? iput+0x6d8/0x9d0
[  774.018037][   T34]  __dentry_kill+0x209/0x660
[  774.019763][   T34]  ? dput+0x37/0x2b0
[  774.021311][   T34]  dput+0x19f/0x2b0
[  774.023968][   T34]  shrink_dcache_for_umount+0xa0/0x170
[  774.026029][   T34]  generic_shutdown_super+0x67/0x2c0
[  774.027851][   T34]  kill_anon_super+0x3b/0x70
[  774.029463][   T34]  v9fs_kill_super+0x4c/0x90
[  774.031270][   T34]  deactivate_locked_super+0xbc/0x130
[  774.033128][   T34]  cleanup_mnt+0x425/0x4c0
[  774.034672][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  774.036578][   T34]  task_work_run+0x1d4/0x260
[  774.038350][   T34]  ? __pfx_task_work_run+0x10/0x10
[  774.040181][   T34]  ? __x64_sys_umount+0x122/0x160
[  774.043228][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  774.045236][   T34]  exit_to_user_mode_loop+0xec/0x110
[  774.047140][   T34]  do_syscall_64+0x2bd/0x3b0
[  774.048700][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  774.050402][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  774.052380][   T34]  ? exc_page_fault+0x9f/0xf0
[  774.053949][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  774.055894][   T34] RIP: 0033:0x7f25cbb8ff17
[  774.057429][   T34] RSP: 002b:00007ffd8109eaf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  774.060113][   T34] RAX: 0000000000000000 RBX: 00007f25cbc11c05 RCX: 00007f25cbb8ff17
[  774.063875][   T34] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd8109ebb0
[  774.066416][   T34] RBP: 00007ffd8109ebb0 R08: 0000000000000000 R09: 0000000000000000
[  774.069111][   T34] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd8109fc40
[  774.072257][   T34] R13: 00007f25cbc11c05 R14: 000000000009960d R15: 00007ffd8109fc80
[  774.075399][   T34]  </TASK>
[  774.076770][   T34] 
[  774.076770][   T34] Showing all locks held in the system:
[  774.079735][   T34] 1 lock held by khungtaskd/34:
[  774.083790][   T34]  #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  774.087333][   T34] 2 locks held by getty/5671:
[  774.089020][   T34]  #0: ffff88801fa5c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  774.093279][   T34]  #1: ffffc900029032f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  774.097643][   T34] 6 locks held by kworker/1:5/5894:
[  774.099944][   T34]  #0: ffff888136418f48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  774.110279][   T34]  #1: ffffc9000365fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  774.115327][   T34]  #2: ffff88810a4a8198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20
[  774.119492][   T34]  #3: ffff88811b3e5198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[  774.125359][   T34]  #4: ffff88811b3e3160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[  774.129257][   T34]  #5: ffffffff8dfe0310 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xf0/0x2b0
[  774.133612][   T34] 1 lock held by syz-executor/22895:
[  774.135870][   T34]  #0: ffff888037e8c0e0 (&type->s_umount_key#98){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0
[  774.140122][   T34] 1 lock held by syz.3.10839/31210:
[  774.144366][   T34] 
[  774.145541][   T34] =============================================
[  774.145541][   T34] 
[  774.149111][   T34] NMI backtrace for cpu 0
[  774.149124][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  774.149138][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  774.149146][   T34] Call Trace:
[  774.149152][   T34]  <TASK>
[  774.149159][   T34]  dump_stack_lvl+0x189/0x250
[  774.149179][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  774.149195][   T34]  ? __pfx__printk+0x10/0x10
[  774.149221][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  774.149239][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  774.149261][   T34]  ? __pfx__printk+0x10/0x10
[  774.149281][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  774.149302][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  774.149319][   T34]  watchdog+0xf93/0xfe0
[  774.149341][   T34]  ? watchdog+0x1de/0xfe0
[  774.149363][   T34]  kthread+0x711/0x8a0
[  774.149382][   T34]  ? __pfx_watchdog+0x10/0x10
[  774.149398][   T34]  ? __pfx_kthread+0x10/0x10
[  774.149415][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  774.149431][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  774.149447][   T34]  ? __pfx_kthread+0x10/0x10
[  774.149463][   T34]  ret_from_fork+0x3fc/0x770
[  774.149503][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  774.149520][   T34]  ? __switch_to_asm+0x39/0x70
[  774.149536][   T34]  ? __switch_to_asm+0x33/0x70
[  774.149551][   T34]  ? __pfx_kthread+0x10/0x10
[  774.149567][   T34]  ret_from_fork_asm+0x1a/0x30
[  774.149593][   T34]  </TASK>
[  774.149599][   T34] Sending NMI from CPU 0 to CPUs 1:
[  774.210027][    C1] NMI backtrace for cpu 1
[  774.210043][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  774.210058][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  774.210065][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  774.210087][    C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 33 e7 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  774.210098][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  774.210110][    C1] RAX: 9b1d54f81034e500 RBX: ffffffff81968308 RCX: 9b1d54f81034e500
[  774.210120][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b6e1a RDI: ffffffff8be33400
[  774.210127][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  774.210134][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa37e30
[  774.210142][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d5000
[  774.210150][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  774.210159][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  774.210168][    C1] CR2: 0000555589d705c8 CR3: 0000000106ae4000 CR4: 00000000000006f0
[  774.210201][    C1] Call Trace:
[  774.210210][    C1]  <TASK>
[  774.210215][    C1]  default_idle+0x13/0x20
[  774.210227][    C1]  default_idle_call+0x74/0xb0
[  774.210239][    C1]  do_idle+0x1e8/0x510
[  774.210253][    C1]  ? __pfx_do_idle+0x10/0x10
[  774.210269][    C1]  cpu_startup_entry+0x44/0x60
[  774.210280][    C1]  start_secondary+0x101/0x110
[  774.210297][    C1]  common_startup_64+0x13e/0x147
[  774.210317][    C1]  </TASK>
[  774.211035][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  774.271011][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  774.275288][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  774.278864][   T34] Call Trace:
[  774.280181][   T34]  <TASK>
[  774.281351][   T34]  dump_stack_lvl+0x99/0x250
[  774.282867][   T34]  ? __asan_memcpy+0x40/0x70
[  774.284320][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  774.286026][   T34]  ? __pfx__printk+0x10/0x10
[  774.287803][   T34]  vpanic+0x281/0x750
[  774.289326][   T34]  ? __pfx_vpanic+0x10/0x10
[  774.290843][   T34]  ? preempt_schedule+0xae/0xc0
[  774.292550][   T34]  ? preempt_schedule_common+0x83/0xd0
[  774.294606][   T34]  panic+0xb9/0xc0
[  774.295997][   T34]  ? __pfx_panic+0x10/0x10
[  774.297567][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  774.299274][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  774.301282][   T34]  watchdog+0xfd2/0xfe0
[  774.302673][   T34]  ? watchdog+0x1de/0xfe0
[  774.304301][   T34]  kthread+0x711/0x8a0
[  774.305696][   T34]  ? __pfx_watchdog+0x10/0x10
[  774.307249][   T34]  ? __pfx_kthread+0x10/0x10
[  774.308759][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  774.310431][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  774.312296][   T34]  ? __pfx_kthread+0x10/0x10
[  774.314115][   T34]  ret_from_fork+0x3fc/0x770
[  774.315919][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  774.317796][   T34]  ? __switch_to_asm+0x39/0x70
[  774.319630][   T34]  ? __switch_to_asm+0x33/0x70
[  774.321301][   T34]  ? __pfx_kthread+0x10/0x10
[  774.322789][   T34]  ret_from_fork_asm+0x1a/0x30
[  774.324383][   T34]  </TASK>
[  774.326130][   T34] Kernel Offset: disabled
[  774.327763][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:05:51  Registers:
info registers vcpu 0

CPU#0
RAX=1ffff11027ffde80 RBX=0000000000000004 RCX=0000000000000000 RDX=0000000000000000
RSI=00000000000230d3 RDI=0000000400000000 RBP=ffffc9000340f890 RSP=ffffc9000340f550
R8 =ffffea00008c34c7 R9 =1ffffd4000118698 R10=dffffc0000000000 R11=fffff94000118699
R12=dffffc0000000000 R13=1ffffd400011869b R14=00000000000230d3 R15=ffff88805fffa400
RIP=ffffffff81bfadc0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555594a63500 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005643a2a2f7e8 CR3=000000010db12000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff820c1f4a RBX=ffffea000448c400 RCX=ffff88811d25d640 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000040 RSP=ffffc900032bf360
R8 =ffffea000448c437 R9 =1ffffd4000891886 R10=dffffc0000000000 R11=fffff94000891887
R12=ffffea000448c440 R13=dffffc0000000000 R14=0000000000000000 R15=ffffea000448c400
RIP=ffffffff8b7c2be0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555589d55500 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbaa98e56c0 CR3=0000000038d18000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f4b3f612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
