last executing test programs:

7m22.898696778s ago: executing program 0 (id=698):
syz_emit_ethernet(0x3e, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0xfe, 0x3, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2}}}}}}, 0x0)

7m22.898456864s ago: executing program 0 (id=699):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x2, @rand_addr=0x64010102}]}, &(0x7f0000000280)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x7d, &(0x7f00000000c0)={r1, @in={{0x2, 0x1000, @empty}}, 0x7fff, 0x0, 0xd78e, 0x0, 0x5a1, 0x0, 0x7}, 0x9c)

7m22.830166392s ago: executing program 0 (id=701):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, &(0x7f0000001280))

7m22.829881953s ago: executing program 0 (id=702):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x200068c0, &(0x7f0000000180)={0x11, 0x888e, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r2, &(0x7f0000006b40)={0x2020}, 0x206e)

7m22.699564554s ago: executing program 0 (id=703):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x1f91, 0x400, 0x0, 0x288}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x3516, 0x0, 0x4, 0x0, 0x0)

7m22.410082557s ago: executing program 0 (id=704):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x0, 0x40000000, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x98, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x1493cf2c54a75087, 0x4b4dc}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040805}, 0x20004094)

7m22.293244935s ago: executing program 32 (id=704):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x0, 0x40000000, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x98, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x1493cf2c54a75087, 0x4b4dc}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040805}, 0x20004094)

6m31.738569261s ago: executing program 3 (id=1433):
open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98)
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000040), 0x81, 0x4ac, &(0x7f00000011c0)="$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")

6m31.714268854s ago: executing program 3 (id=1434):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_delrule={0x44, 0x21, 0x1, 0x70bd2e, 0x25dfdbfd, {0xa, 0x10, 0x14, 0x4, 0xff, 0x0, 0x0, 0x0, 0x1000c}, [@FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x21, 0x0}}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000841}, 0x40)

6m31.639182941s ago: executing program 3 (id=1435):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2000000, 0x12, r0, 0x10000000)

6m31.639030935s ago: executing program 3 (id=1436):
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000440)=ANY=[], 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x80)
getdents64(r0, &(0x7f0000000000)=""/39, 0x27)

6m31.557875979s ago: executing program 3 (id=1437):
clock_settime(0xfffffffffffffffb, &(0x7f0000000000)={0x77359400})

6m31.35778176s ago: executing program 3 (id=1442):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0xfffffffc)

6m31.138081794s ago: executing program 33 (id=1442):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0xfffffffc)

4m18.28415365s ago: executing program 4 (id=3791):
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0xfffffffd}, {0x7b, 0x1, 0x3, 0x2}]})
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000))

4m17.424822958s ago: executing program 4 (id=3798):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48)
write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='b 7:'], 0xc)

4m17.335801038s ago: executing program 4 (id=3800):
r0 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
r1 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
r2 = dup(r1)
r3 = fanotify_init(0x1, 0x101000)
fanotify_mark(r3, 0x1, 0x800103a, r2, 0x0)
ftruncate(r0, 0xdcb)

4m17.274891861s ago: executing program 4 (id=3802):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000000300)={[{@volume={'volume', 0x3d, 0x3e}}, {@gid}, {@dmode={'dmode', 0x3d, 0x4}}, {@rootdir={'rootdir', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@unhide}, {@noadinicb}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@longad}]}, 0x1, 0xc32, &(0x7f0000000e00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000002340)='./file0\x00', 0x1010052, &(0x7f0000000240)={[{}, {@discard}, {@errors_remount_ro}, {@errors_remount_ro}, {@nobarrier}, {@order_strict}, {@errors_continue}, {@order_relaxed}], [], 0x2c}, 0x2, 0xebd, &(0x7f0000004540)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020)

4m17.134414601s ago: executing program 4 (id=3805):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x18, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)

4m16.817831247s ago: executing program 4 (id=3808):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)

4m16.742365501s ago: executing program 34 (id=3808):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)

2.476376969s ago: executing program 2 (id=7704):
syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xa7, 0xa3, 0xb1, 0x20, 0x9fb, 0xebbe, 0xeafe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7a, 0x25, 0xe0}}]}}]}}, 0x0)

1.879587839s ago: executing program 2 (id=7716):
r0 = socket$xdp(0x2c, 0x3, 0x0)
accept$nfc_llcp(r0, 0x0, 0x0)

1.879404933s ago: executing program 2 (id=7717):
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
set_mempolicy(0x3, &(0x7f0000000100)=0x3, 0x9)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2000000, 0xfff}, 0x1c)
syz_emit_ethernet(0x256, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_udplite(0x2, 0x2, 0x88)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1, 0x0, 0x4}, 0x18)

1.497552321s ago: executing program 1 (id=7722):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000f80)={[{@utf8}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@utf8no}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@utf8no}, {@uni_xlate}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@rodir}, {@utf8no}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@utf8}, {@utf8no}]}, 0x1, 0x2c0, &(0x7f0000000580)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)

1.497337795s ago: executing program 1 (id=7723):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66}]}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e)

1.431568895s ago: executing program 1 (id=7724):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3300000}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x5d}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.431287529s ago: executing program 1 (id=7725):
socket(0x10, 0x3, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x498, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x125}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)

1.155777265s ago: executing program 2 (id=7726):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa)
shutdown(r0, 0x1)

1.155464076s ago: executing program 2 (id=7727):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$rds(0xffffffffffffffff, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20)

343.249416ms ago: executing program 1 (id=7730):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x8205, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@errors_remount}, {@usrjquota}, {@lazytime}]}, 0x81, 0x62b, &(0x7f0000000600)="$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")

257.875321ms ago: executing program 1 (id=7731):
syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414001824d007241301"], 0x0)

257.633418ms ago: executing program 5 (id=7732):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}]}, 0x3c}, 0x1, 0x8}, 0x4000)

171.884487ms ago: executing program 2 (id=7733):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file1\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x444a, &(0x7f0000004480)="$eJzs3b1PHGcaAPB3BnwGfx32ufBJJ91KZ+k+hcDV3WHpMMbGYHOOnNhFmvUCa5tkYS1YohQuSGcpVaQUUQorkdJRWUhp0jh/QpqUTm0pKdJEimSFaHdnMTPsmg3ZhWD9fsXOzvv5wLMzvGNp/caJyr355dz8cq6wmCvP3lk+l3unXFpZKIZ4jzSd/9DezU97uvE5edmYn3cscpq5fvHy67fOhfDl3NfPNjY2NkJVb2hqeMv7H75/MLv12BBn+lTHbTLUoeYz7MabIYTT2+Kq6gkh9IUQohDChaRsLDn2hxCOJ3W3Hrx/O9ehaB4/LZ7PP59+uD5ydmrt0Xqzn70uCuHj0h//dXfh27/0jHzzj9YjfnG0Q6EBAAAAAAAAAAAAAAAAAHAATNy4fvO1oeHwJAq9a9H27+tOJMcW34/t3eiYP78szL+f6NyPDAAAAAAAAAAAAAAAAAAAAL85L77/n4tONfn+/3hyHG3Rf+N/3Y+R7pn8//XxS0PDyf7v0bb6fydF313oCSeb7Pue3f/9QqZ/8/3ft8+zW434GvMOhCgeTJ3H8eBgCJ8mG7+fiY7EpfJy5Z93yiuLcx0L48BK57++e38qO8mG/m3mPx7LjN9i//8O+sO2T1P1/HbnPmKvtHT+e1q2++y9qK3r/2Km317kn91L57+3Vta/tcFo/QZQzf8HvTvnfzwzfrfyfyKEkIuqseZSd4DqGqZa3mq9Qlo6/4dqZalbZ/KLbHX9/5jJ/6XM+Pt1/1/N/iGiqXT+f1cr60u1OFx7reU/3vn6v5wZfz/yX41/tV640d25D750/uu5Dr2pJrXfZLv3/4nM+C3zf/jXxX0zTuI8EaU+AWtRvbzF/1dHRjr/fdvqXzz/xW2t/65k+u/V819j3sbzX+P2/7eo/vxHc+n897ds1+71P5np1+37/2ht/cdupfN/pFaWXjsP1F7bzf9UZvxu5b/2VNLXyP+L+8lPh+vln1j/tSWd/6P1wnhri9Xaa239F+28/r+aGX8/1n/V+Ffj7s76qkjn/1jLdtX8f9XG3/9rmX7dz38IQ/6tb9fS+T/esl3t+u/bOf/Tm+/qY3U7/3/t5uAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8BYchwIUTyYOo/jwcEQLibnZ8KRaKYwl58plWffXg5hPCnPhVPR3VJ5plDKzy+W54r5QqlUng3hUlJ/OvRFy6VyJb9QuH95c6z+6F6xsFSZKRYqIYSJpPxP4XhjrJn5ykLhfgjhymbd7+Py0v17hcX83PzSf4eGhobC5GYMJ6Piu5XiYqU+e702hKnNvgPRluBq1Vc3YzkWvVVeWVoslGrl17b0KZVnC6UtfaaTug/DyaiytLI4W6gU86Xy3cZ8+2k0OY5P3njjxrXhbfW3o/pxbG/DAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAXejLyn49CCL31sziEMNp4EzVr//hp8Xz++fTD9ZGzU2uP1p+1agcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DM7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2KVj1ASCKAzAbyZFki7HSLUkXdoNgZAU2SB4Aj2Gh9GjeAnvYGFhayGC7KKuu7CNVt/XPJifmfdgHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw3yPqvH/23tEiqf9Y8Ryulqf5791nX9233+4w4zczs9f9XX6w3SVf9RHmzIf0912NomO2li09qS9T5d9nnvn6tu3vvmavi+RchERZZ2/ppyLYthbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcGAHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AsAAAAACDM3zqKvg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BUAAP//hkEdVg==")
r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86)
preadv2(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/190, 0xbe}], 0x1, 0x6, 0xfffffff5, 0xb)

107.540645ms ago: executing program 5 (id=7734):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x6c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15001}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010101}, @IFLA_GRE_TOS={0x5, 0x9, 0x6}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x7}, @IFLA_GRE_TTL={0x5, 0x8, 0xd8}]}}}]}, 0x6c}}, 0x2400c080)

60.897505ms ago: executing program 5 (id=7735):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
userfaultfd(0x80801)
close_range(r1, 0xffffffffffffffff, 0x0)

60.48405ms ago: executing program 5 (id=7736):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x1000009, &(0x7f0000000480)={[{@name}]})

237.465µs ago: executing program 5 (id=7737):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800)

0s ago: executing program 5 (id=7738):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1016, 0x0, 0x0, 0x0, 0xa8000}, [@call={0x85, 0x0, 0x0, 0x54}]}, &(0x7f00000005c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94)

kernel console output (not intermixed with test programs):

8]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  375.413215][   T28]  ? f2fs_write_meta_pages+0x357/0x450
[  375.413229][   T28]  ? __lock_acquire+0xab9/0xd20
[  375.413242][   T28]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  375.413252][   T28]  do_writepages+0x32e/0x550
[  375.413265][   T28]  ? reacquire_held_locks+0x127/0x1d0
[  375.413272][   T28]  ? writeback_sb_inodes+0x384/0x1010
[  375.413286][   T28]  __writeback_single_inode+0x145/0xff0
[  375.413295][   T28]  ? do_raw_spin_unlock+0x4d/0x240
[  375.413306][   T28]  writeback_sb_inodes+0x6c7/0x1010
[  375.413327][   T28]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  375.413356][   T28]  ? rcu_is_watching+0x15/0xb0
[  375.413368][   T28]  wb_writeback+0x43b/0xaf0
[  375.413381][   T28]  ? queue_io+0x391/0x590
[  375.413392][   T28]  ? __pfx_wb_writeback+0x10/0x10
[  375.413405][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  375.413416][   T28]  wb_workfn+0x409/0xef0
[  375.413431][   T28]  ? __pfx_wb_workfn+0x10/0x10
[  375.413441][   T28]  ? __lock_acquire+0xab9/0xd20
[  375.413456][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  375.413466][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  375.413473][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  375.413480][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  375.413487][   T28]  process_scheduled_works+0xae1/0x17b0
[  375.413508][   T28]  ? __pfx_process_scheduled_works+0x10/0x10
[  375.413537][   T28]  worker_thread+0x8a0/0xda0
[  375.413557][   T28]  kthread+0x711/0x8a0
[  375.413567][   T28]  ? __pfx_worker_thread+0x10/0x10
[  375.413575][   T28]  ? __pfx_kthread+0x10/0x10
[  375.413585][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  375.413592][   T28]  ? lockdep_hardirqs_on+0x9c/0x150
[  375.413600][   T28]  ? __pfx_kthread+0x10/0x10
[  375.413609][   T28]  ret_from_fork+0x3fc/0x770
[  375.413619][   T28]  ? __pfx_ret_from_fork+0x10/0x10
[  375.413629][   T28]  ? __switch_to_asm+0x39/0x70
[  375.413638][   T28]  ? __switch_to_asm+0x33/0x70
[  375.413646][   T28]  ? __pfx_kthread+0x10/0x10
[  375.413655][   T28]  ret_from_fork_asm+0x1a/0x30
[  375.413672][   T28]  </TASK>
[  375.413675][   T28] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  375.741499][ T6043] iguanair 6-1:0.0: failed to get version
[  375.756385][ T6043] iguanair 6-1:0.0: probe with driver iguanair failed with error -110
[  375.764075][ T6043] usb 6-1: USB disconnect, device number 7
[  376.531476][T17245] syz_tun: entered allmulticast mode
[  376.537227][   T34] audit: type=1326 audit(1755054211.248:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17244 comm="syz.2.4715" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f063ab8ebe9 code=0x0
[  376.640127][T17246] syz_tun: left allmulticast mode
[  376.977655][T17266] Device name not specified.
[  376.977655][T17266] 
[  377.153662][T17279] netlink: 'syz.5.4730': attribute type 1 has an invalid length.
[  377.156411][T17279] netlink: 'syz.5.4730': attribute type 4 has an invalid length.
[  377.159126][T17279] netlink: 212 bytes leftover after parsing attributes in process `syz.5.4730'.
[  377.816598][T17287] netlink: 'syz.1.4732': attribute type 1 has an invalid length.
[  378.182348][T17303] loop5: detected capacity change from 0 to 4096
[  378.188038][T17303] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  378.202836][T17303] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  378.207554][T17303] ntfs3(loop5): Failed to load $Extend (-22).
[  378.210060][T17303] ntfs3(loop5): Failed to initialize $Extend.
[  378.287956][T17305] loop5: detected capacity change from 0 to 1764
[  378.306154][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[  378.308911][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[  378.351763][T17306] iso9660: Corrupted directory entry in block 2 of inode 1920
[  378.811220][   T34] audit: type=1326 audit(1755054213.518:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17312 comm="syz.1.4745" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe342f8ebe9 code=0x7fc00000
[  379.409998][   T34] audit: type=1326 audit(1755054214.118:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17312 comm="syz.1.4745" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe342f8ebe9 code=0x7fc00000
[  379.464835][T17335] netlink: 'syz.5.4753': attribute type 28 has an invalid length.
[  379.468783][T17333] sch_fq: defrate 4294967295 ignored.
[  379.789283][T17358] loop5: detected capacity change from 0 to 1024
[  379.968732][T17372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4770'.
[  380.293844][T17400] netlink: 'syz.2.4784': attribute type 12 has an invalid length.
[  380.297265][T17400] netlink: 'syz.2.4784': attribute type 29 has an invalid length.
[  380.308469][T17400] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4784'.
[  380.312638][T17400] netlink: 'syz.2.4784': attribute type 2 has an invalid length.
[  380.319162][T17400] netlink: 23 bytes leftover after parsing attributes in process `syz.2.4784'.
[  380.683314][T17411] loop5: detected capacity change from 0 to 32768
[  381.190876][T15215] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  381.560693][T15215] usb 6-1: Using ep0 maxpacket: 16
[  381.566445][T15215] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  381.572434][T15215] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  381.576475][T15215] usb 6-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  381.580255][T15215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.586241][T15215] usb 6-1: config 0 descriptor??
[  381.997042][T15215] apple 0003:05AC:024B.000E: unknown main item tag 0x5
[  381.999629][T15215] apple 0003:05AC:024B.000E: unknown main item tag 0x7
[  382.003610][T15215] apple 0003:05AC:024B.000E: unbalanced collection at end of report description
[  382.011073][T15215] apple 0003:05AC:024B.000E: parse failed
[  382.012985][T15215] apple 0003:05AC:024B.000E: probe with driver apple failed with error -22
[  382.205315][   T24] usb 6-1: USB disconnect, device number 8
[  382.599888][T17457] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4810'.
[  382.905902][T17469] loop5: detected capacity change from 0 to 256
[  383.077893][T17481] loop5: detected capacity change from 0 to 256
[  383.099715][T17481] FAT-fs (loop5): Directory bread(block 64) failed
[  383.103591][T17481] FAT-fs (loop5): Directory bread(block 65) failed
[  383.106407][T17481] FAT-fs (loop5): Directory bread(block 66) failed
[  383.109402][T17481] FAT-fs (loop5): Directory bread(block 67) failed
[  383.113718][T17481] FAT-fs (loop5): Directory bread(block 68) failed
[  383.116671][T17481] FAT-fs (loop5): Directory bread(block 69) failed
[  383.119435][T17481] FAT-fs (loop5): Directory bread(block 70) failed
[  383.123718][T17481] FAT-fs (loop5): Directory bread(block 71) failed
[  383.126625][T17481] FAT-fs (loop5): Directory bread(block 72) failed
[  383.126911][T17483] netlink: 'syz.1.4823': attribute type 3 has an invalid length.
[  383.129626][T17481] FAT-fs (loop5): Directory bread(block 73) failed
[  383.134078][T17483] netlink: 'syz.1.4823': attribute type 3 has an invalid length.
[  383.319616][T17497] loop5: detected capacity change from 0 to 512
[  383.342380][T17497] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.4830: corrupted inode contents
[  383.349598][T17497] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.4830: mark_inode_dirty error
[  383.358623][T17497] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.4830: corrupted inode contents
[  383.365134][T17497] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.4830: mark_inode_dirty error
[  383.371639][T17497] Quota error (device loop5): write_blk: dquota write failed
[  383.375770][T17497] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  383.380174][T17497] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4830: Failed to acquire dquot type 0
[  383.388752][T17497] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.4830: corrupted inode contents
[  383.395007][T17497] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.4830: mark_inode_dirty error
[  383.400159][T17497] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.4830: corrupted inode contents
[  383.405244][T17497] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.4830: mark_inode_dirty error
[  383.409448][T17497] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.4830: corrupted inode contents
[  383.416483][T17497] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[  383.419433][T17497] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.4830: corrupted inode contents
[  383.423667][T17497] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.4830: mark_inode_dirty error
[  383.427413][T17497] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[  383.432708][T17497] EXT4-fs (loop5): 1 truncate cleaned up
[  383.435436][T17497] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  383.439738][T17497] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  383.481339][T15028] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.615178][T17511] loop5: detected capacity change from 0 to 512
[  383.619375][T17511] EXT4-fs (loop5): invalid inodes per group: 0
[  383.619375][T17511] 
[  385.136426][T17566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4858'.
[  385.502237][T17577] overlayfs: failed to clone upperpath
[  385.940813][   T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  386.175866][   T24] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  386.179664][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  386.183524][   T24] usb 6-1: Product: syz
[  386.185373][   T24] usb 6-1: Manufacturer: syz
[  386.187431][   T24] usb 6-1: SerialNumber: syz
[  386.201561][   T24] usb 6-1: config 0 descriptor??
[  386.206848][   T24] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 009
[  386.250020][T17592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4871'.
[  386.253234][T17592] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  386.256603][T17592] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  386.816224][   T24] i2c i2c-2: failure reading functionality
[  386.833873][   T24] i2c i2c-2: connected i2c-tiny-usb device
[  386.838300][   T24] usb 6-1: USB disconnect, device number 9
[  387.247920][T17638] 9pnet_fd: Insufficient options for proto=fd
[  387.678975][T17652] loop5: detected capacity change from 0 to 512
[  387.711123][T17652] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  387.717061][T17652] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  387.729656][   T34] audit: type=1800 audit(1755054222.438:350): pid=17652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4900" name="file1" dev="loop5" ino=15 res=0 errno=0
[  387.791167][   T34] audit: type=1800 audit(1755054222.508:351): pid=17658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4900" name="file2" dev="loop5" ino=16 res=0 errno=0
[  387.879816][T15028] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  388.897651][T17682] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4912'.
[  389.158775][T17690] loop5: detected capacity change from 0 to 128
[  389.188150][T17690] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: writeback.
[  389.219334][T15028] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  389.751922][ T5854] Bluetooth: hci1: Malformed LE Event: 0x0d
[  390.116785][T17716] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  390.338257][T17727] loop5: detected capacity change from 0 to 128
[  390.341866][T17727] hpfs: Unexpected value for 'help'
[  390.593306][T17747] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4941'.
[  391.861063][   T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  392.010749][   T10] usb 6-1: Using ep0 maxpacket: 32
[  392.014005][   T10] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  392.016964][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.022601][   T10] usb 6-1: config 0 descriptor??
[  392.228845][   T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  392.235222][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  392.239537][   T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  392.244114][   T10] usb 6-1: media controller created
[  392.258210][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  392.370902][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  392.429822][   T10] az6027: usb out operation failed. (-71)
[  392.434425][   T10] az6027: usb out operation failed. (-71)
[  392.436932][   T10] stb0899_attach: Driver disabled by Kconfig
[  392.442559][   T10] az6027: no front-end attached
[  392.442559][   T10] 
[  392.446516][   T10] az6027: usb out operation failed. (-71)
[  392.448948][   T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  392.457065][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input15
[  392.465659][   T10] dvb-usb: schedule remote query interval to 400 msecs.
[  392.468366][   T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  392.481997][   T10] usb 6-1: USB disconnect, device number 10
[  392.552252][   T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  392.594350][T17798] IPv4: Oversized IP packet from 127.202.26.0
[  392.801633][T17810] netlink: 'syz.2.4971': attribute type 11 has an invalid length.
[  393.346052][T17821] loop5: detected capacity change from 0 to 512
[  393.351812][T17821] EXT4-fs: Ignoring removed mblk_io_submit option
[  393.364713][T17821] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  393.372628][T17821] EXT4-fs (loop5): 1 truncate cleaned up
[  393.376194][T17821] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  393.407200][T15028] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  395.138090][   T34] audit: type=1326 audit(1755054229.848:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17885 comm="syz.1.5001" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe342f8ebe9 code=0x7ffc0000
[  395.148986][   T34] audit: type=1326 audit(1755054229.848:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17885 comm="syz.1.5001" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe342f8ebe9 code=0x7ffc0000
[  395.158705][   T34] audit: type=1326 audit(1755054229.868:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17885 comm="syz.1.5001" exe="/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fe342f8ebe9 code=0x7ffc0000
[  395.167917][   T34] audit: type=1326 audit(1755054229.868:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17885 comm="syz.1.5001" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe342f8ebe9 code=0x7ffc0000
[  395.175904][   T34] audit: type=1326 audit(1755054229.868:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17885 comm="syz.1.5001" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe342f8ebe9 code=0x7ffc0000
[  395.429295][T17876] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  395.536785][T17900] loop5: detected capacity change from 0 to 4096
[  395.580261][T17900] ntfs3(loop5): ino=5, "/" indx_read
[  395.587501][T17900] ntfs3(loop5): ino=5, "/" ntfs_readdir
[  395.696224][T17914] loop5: detected capacity change from 0 to 4096
[  395.710439][T17914] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  395.729805][T17914] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  395.817027][T15028] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  395.934849][T17931] netlink: 160 bytes leftover after parsing attributes in process `syz.5.5020'.
[  395.939548][T17931] netlink: 'syz.5.5020': attribute type 1 has an invalid length.
[  395.946019][T17931] netlink: 'syz.5.5020': attribute type 2 has an invalid length.
[  395.949241][T17931] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5020'.
[  397.421134][T17982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5043'.
[  397.488109][T17986] netlink: 'syz.2.5044': attribute type 33 has an invalid length.
[  397.495524][T17986] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  397.536067][T17990] loop5: detected capacity change from 0 to 256
[  397.543598][T17990] exfat: Bad value for 'uid'
[  397.545771][T17990] exfat: Bad value for 'uid'
[  397.766893][T18003] bridge3: entered allmulticast mode
[  397.769565][T17990] loop5: detected capacity change from 0 to 32768
[  397.879375][T17990] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  397.879388][T17990]   allowing incompatible features above 0.0: (unknown version)
[  397.879393][T17990]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  397.905410][T17990] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  397.908338][T17990] bcachefs (loop5): initializing new filesystem
[  397.917463][T17990] bcachefs (loop5): going read-write
[  397.931245][T17990] bcachefs (loop5): marking superblocks
[  397.952908][T17990] bcachefs (loop5): initializing freespace
[  397.968749][T17990] bcachefs (loop5): done initializing freespace
[  397.975037][T17990] bcachefs (loop5): reading snapshots table
[  397.977102][T17990] bcachefs (loop5): reading snapshots done
[  397.999874][   T34] audit: type=1326 audit(1755054232.708:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18027 comm="syz.2.5062" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f063ab8ebe9 code=0x0
[  398.032454][T17990] bcachefs (loop5): done starting filesystem
[  398.103835][T18033] uprobe: syz.2.5062:18033 failed to unregister, leaking uprobe
[  398.113226][T15028] bcachefs (loop5): shutting down
[  398.115544][T15028] bcachefs (loop5): going read-only
[  398.118726][T15028] bcachefs (loop5): finished waiting for writes to stop
[  398.125350][T15028] bcachefs (loop5): flushing journal and stopping allocators, journal seq 2
[  398.193432][T15028] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3
[  398.199693][T15028] bcachefs (loop5): clean shutdown complete, journal seq 4
[  398.205011][T15028] bcachefs (loop5): marking filesystem clean
[  398.233177][T15028] bcachefs (loop5): shutdown complete
[  399.551582][T18086] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  401.296985][T18135] netlink: 'syz.1.5108': attribute type 2 has an invalid length.
[  401.300331][T18135] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5108'.
[  401.315822][   T34] audit: type=1326 audit(1755054236.028:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18136 comm="syz.5.5107" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f625518ebe9 code=0x0
[  402.172202][T18160] openvswitch: netlink: Message has 4 unknown bytes.
[  402.175308][T18160] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  402.267911][T18166] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  402.369422][T18171] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5123'.
[  402.438974][T18178] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5125'.
[  402.775082][T18204] netlink: 'syz.5.5140': attribute type 29 has an invalid length.
[  402.784053][T18204] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5140'.
[  403.571270][T15215] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  403.720823][T15215] usb 6-1: Using ep0 maxpacket: 16
[  403.734793][T15215] usb 6-1: unable to get BOS descriptor or descriptor too short
[  403.741384][T15215] usb 6-1: config 9 has an invalid interface number: 111 but max is 0
[  403.750910][T15215] usb 6-1: config 9 has no interface number 0
[  403.754137][T15215] usb 6-1: config 9 interface 111 has no altsetting 0
[  403.770780][T15215] usb 6-1: New USB device found, idVendor=05ac, idProduct=2536, bcdDevice=e0.5e
[  403.774583][T15215] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.777949][T15215] usb 6-1: Product: syz
[  403.779724][T15215] usb 6-1: Manufacturer: syz
[  403.787214][T15215] usb 6-1: SerialNumber: syz
[  404.008199][T15215] usb 6-1: USB disconnect, device number 11
[  404.279424][T18276] wg1 speed is unknown, defaulting to 1000
[  404.282444][T18276] wg1 speed is unknown, defaulting to 1000
[  404.288364][T18276] wg1 speed is unknown, defaulting to 1000
[  404.299819][T18276] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  404.310912][T18276] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  404.341999][T18276] wg1 speed is unknown, defaulting to 1000
[  404.346302][T18276] wg1 speed is unknown, defaulting to 1000
[  404.350257][T18276] wg1 speed is unknown, defaulting to 1000
[  404.852462][T15215] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  405.010914][T15215] usb 6-1: Using ep0 maxpacket: 8
[  405.042468][T15215] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  405.047049][T15215] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  405.057204][T15215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  405.072777][T15215] usb 6-1: config 0 descriptor??
[  405.083210][T18331] lo: entered allmulticast mode
[  405.085222][T18331] tunl0: entered allmulticast mode
[  405.087303][T18331] gre0: entered allmulticast mode
[  405.089762][T18331] gretap0: entered allmulticast mode
[  405.096949][T18331] erspan0: entered allmulticast mode
[  405.099182][T18331] ip_vti0: entered allmulticast mode
[  405.107722][T18331] ip6_vti0: entered allmulticast mode
[  405.114435][T18331] sit0: entered allmulticast mode
[  405.117017][T18331] ip6tnl0: entered allmulticast mode
[  405.119813][T18331] ip6gre0: entered allmulticast mode
[  405.124750][T18331] ip6gretap0: entered allmulticast mode
[  405.127881][T18331] bridge0: entered allmulticast mode
[  405.143748][T18331] vcan0: entered allmulticast mode
[  405.147391][T18331] bond0: entered allmulticast mode
[  405.149756][T18331] : entered allmulticast mode
[  405.152820][T18331] bond_slave_1: entered allmulticast mode
[  405.155882][T18331] team0: entered allmulticast mode
[  405.158256][T18331] team_slave_0: entered allmulticast mode
[  405.163394][T18331] team_slave_1: entered allmulticast mode
[  405.166351][T18331] dummy0: entered allmulticast mode
[  405.169484][T18331] nlmon0: entered allmulticast mode
[  405.172828][T18331] caif0: entered allmulticast mode
[  405.175459][T18331] vxcan0: entered allmulticast mode
[  405.178061][T18331] vxcan1: entered allmulticast mode
[  405.182281][T18331] veth0: entered allmulticast mode
[  405.186230][T18331] veth1: entered allmulticast mode
[  405.188889][T18331] wg1: entered allmulticast mode
[  405.251039][T18333] overlayfs: failed to clone lowerpath
[  405.265433][T18333] overlayfs: failed to clone upperpath
[  405.313701][T18331] wg2: entered allmulticast mode
[  405.326629][T18331] veth0_to_bridge: entered allmulticast mode
[  405.345451][T18331] veth1_to_bridge: entered allmulticast mode
[  405.391726][T18331] veth1_to_bond: entered allmulticast mode
[  405.398654][T18331] veth0_to_team: entered allmulticast mode
[  405.433723][T18331] veth1_to_team: entered allmulticast mode
[  405.470038][T18331] veth0_to_batadv: entered allmulticast mode
[  405.506673][T18331] batadv_slave_0: entered allmulticast mode
[  405.530062][T18331] veth1_to_batadv: entered allmulticast mode
[  405.543229][T15215] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  405.545869][T18331] batadv_slave_1: entered allmulticast mode
[  405.550337][T18331] xfrm0: left promiscuous mode
[  405.553885][T18331] veth0_to_hsr: entered allmulticast mode
[  405.556557][T18331] hsr_slave_0: entered allmulticast mode
[  405.559083][T18331] veth1_to_hsr: entered allmulticast mode
[  405.562309][T15215] usb 6-1: USB disconnect, device number 12
[  405.575090][T18331] hsr_slave_1: entered allmulticast mode
[  405.578915][T18331] veth1_virt_wifi: entered allmulticast mode
[  405.582269][T18331] veth0_virt_wifi: entered allmulticast mode
[  405.585318][T18331] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  405.588909][T18331] veth1_vlan: entered allmulticast mode
[  405.592002][T18331] : entered allmulticast mode
[  405.594242][T18331] vlan0: entered allmulticast mode
[  405.596459][T18331] vlan1: entered allmulticast mode
[  405.598694][T18331] macvlan1: entered allmulticast mode
[  405.601197][T18331] ipvlan0: entered allmulticast mode
[  405.604048][T18331] ipvlan1: entered allmulticast mode
[  405.606637][T18331] veth1_macvtap: entered allmulticast mode
[  405.609211][T18331] veth0_macvtap: entered allmulticast mode
[  405.612677][T18331] macsec0: entered allmulticast mode
[  405.614734][T18331] geneve0: entered allmulticast mode
[  405.616836][T18331] geneve1: entered allmulticast mode
[  405.618798][T18331] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  405.622383][T18331] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  405.625175][T18331] ip6erspan0: entered allmulticast mode
[  405.627280][T18331] ipip0: entered allmulticast mode
[  405.629265][T18331] bridge1: entered allmulticast mode
[  405.631577][T18331] syztnl1: entered allmulticast mode
[  405.633965][T18331] ip6gre1: entered allmulticast mode
[  405.635911][T18331] ip6gre2: entered allmulticast mode
[  405.638035][T18331] xfrm1: entered allmulticast mode
[  405.639995][T18331] bridge2: entered allmulticast mode
[  405.642733][T18331] netdevsim netdevsim1 eth0: entered allmulticast mode
[  405.645935][T18331] netdevsim netdevsim1 eth1: entered allmulticast mode
[  405.649066][T18331] netdevsim netdevsim1 eth2: entered allmulticast mode
[  405.652856][T18331] netdevsim netdevsim1 eth3: entered allmulticast mode
[  405.655974][T18331] macvlan2: entered allmulticast mode
[  405.658353][T18331] macsec1: entered allmulticast mode
[  405.660897][T18331] vxlan0: entered allmulticast mode
[  405.663220][T18331] syztnl0: entered allmulticast mode
[  405.665645][T18331] bond1: entered allmulticast mode
[  405.667929][T18331] gretap1: entered allmulticast mode
[  405.670448][T18331] dummy0.3: entered allmulticast mode
[  405.673057][T18331] bond2: entered allmulticast mode
[  405.675367][T18331] syztnl2: entered allmulticast mode
[  405.677768][T18331] bridge3: entered allmulticast mode
[  406.071983][T18363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5214'.
[  407.368858][T18410] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5236'.
[  407.523033][T18427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5244'.
[  407.526773][T18427] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5244'.
[  407.532540][   T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  407.547223][T18427] geneve4: entered promiscuous mode
[  407.549430][T18427] geneve4: entered allmulticast mode
[  407.684369][   T10] usb 6-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a
[  407.688312][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.699609][   T10] usb 6-1: config 0 descriptor??
[  407.709341][   T10] gspca_main: sn9c2028-2.14.0 probing 0c45:8001
[  407.911235][   T10] gspca_sn9c2028: read1 error -32
[  407.922095][   T10] gspca_sn9c2028: read1 error -32
[  408.131591][   T10] usb 6-1: USB disconnect, device number 13
[  410.337517][T18485] loop5: detected capacity change from 0 to 32768
[  410.351919][T18485] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  410.378403][T18485] XFS (loop5): Ending clean mount
[  410.386784][T18485] XFS (loop5): Quotacheck needed: Please wait.
[  410.445766][T18485] XFS (loop5): Quotacheck: Done.
[  410.489599][T15028] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  410.697038][T18520] loop5: detected capacity change from 0 to 256
[  411.134337][T18540] tipc: Started in network mode
[  411.136523][T18540] tipc: Node identity ac141441, cluster identity 4711
[  411.180709][T18540] tipc: Enabled bearer <udp:syz2>, priority 10
[  411.230948][T18546] openvswitch: netlink: IPv4 tun info is not correct
[  412.130870][   T51] tipc: Node number set to 2886997057
[  412.361514][   T34] audit: type=1326 audit(1755054247.068:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18575 comm="syz.2.5308" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f063ab8ebe9 code=0x0
[  413.229100][T18581] loop5: detected capacity change from 0 to 8192
[  413.235189][T18581] msdos: Unknown parameter 'dk'
[  413.329970][T18598] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.5319'.
[  413.344351][T18598] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  413.347129][T18598] openvswitch: netlink: Duplicate key (type 0).
[  414.091589][ T5881] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  414.250707][ T5881] usb 6-1: Using ep0 maxpacket: 8
[  414.255026][ T5881] usb 6-1: unable to get BOS descriptor or descriptor too short
[  414.259443][ T5881] usb 6-1: config 0 has an invalid interface number: 88 but max is 0
[  414.264261][ T5881] usb 6-1: config 0 has no interface number 0
[  414.266750][ T5881] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  414.271542][ T5881] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[  414.275441][ T5881] usb 6-1: config 0 interface 88 has no altsetting 0
[  414.282570][ T5881] usb 6-1: string descriptor 0 read error: -22
[  414.285098][ T5881] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  414.288546][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  414.297030][ T5881] usb 6-1: config 0 descriptor??
[  414.306568][ T5881] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input16
[  414.383113][ T6542] udevd[6542]: Error opening device "/dev/input/event3": Input/output error
[  414.387671][ T6542] udevd[6542]: Unable to EVIOCGABS device "/dev/input/event3"
[  414.392017][ T6542] udevd[6542]: Unable to EVIOCGABS device "/dev/input/event3"
[  414.510966][ T5881] usb 6-1: USB disconnect, device number 14
[  415.154586][T18653] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  415.158200][T18653] IPv6: NLM_F_CREATE should be set when creating new route
[  415.166255][T18653] lo: entered allmulticast mode
[  415.173261][T18653] tunl0: entered allmulticast mode
[  415.178773][T18653] gre0: entered allmulticast mode
[  415.189535][T18653] gretap0: entered allmulticast mode
[  415.196760][T18653] erspan0: entered allmulticast mode
[  415.203033][T18653] ip_vti0: entered allmulticast mode
[  415.207872][T18653] ip6_vti0: entered allmulticast mode
[  415.215815][T18653] sit0: entered allmulticast mode
[  415.224462][T18653] ip6tnl0: entered allmulticast mode
[  415.230130][T18653] ip6gre0: entered allmulticast mode
[  415.237641][T18653] syz_tun: entered allmulticast mode
[  415.244887][T18653] ip6gretap0: entered allmulticast mode
[  415.251460][T18653] bridge0: port 2(bridge_slave_1) entered disabled state
[  415.255291][T18653] bridge0: port 1(bridge_slave_0) entered disabled state
[  415.259672][T18653] bridge0: entered allmulticast mode
[  415.269252][T18653] vcan0: entered allmulticast mode
[  415.275470][T18653] bond0: entered allmulticast mode
[  415.286165][T18653] bond_slave_0: entered allmulticast mode
[  415.288624][T18653] bond_slave_1: entered allmulticast mode
[  415.296447][T18653] team0: entered allmulticast mode
[  415.299111][T18653] team_slave_0: entered allmulticast mode
[  415.302734][T18653] team_slave_1: entered allmulticast mode
[  415.312007][T18653] dummy0: entered allmulticast mode
[  415.317563][T18653] nlmon0: entered allmulticast mode
[  415.322774][T18653] caif0: entered allmulticast mode
[  415.325605][T18653] batadv0: entered allmulticast mode
[  415.331926][T18653] vxcan0: entered allmulticast mode
[  415.335497][T18653] vxcan1: entered allmulticast mode
[  415.339004][T18653] veth0: entered allmulticast mode
[  415.351807][T18653] veth1: entered allmulticast mode
[  415.364320][T18653] wg0: entered allmulticast mode
[  415.370303][T18653] wg1: entered allmulticast mode
[  415.377059][T18653] wg2: entered allmulticast mode
[  415.382565][T18653] veth0_to_bridge: entered allmulticast mode
[  415.392793][T18653] veth1_to_bridge: entered allmulticast mode
[  415.400151][T18653] veth0_to_bond: entered allmulticast mode
[  415.407817][T18653] veth1_to_bond: entered allmulticast mode
[  415.423907][T18653] veth0_to_team: entered allmulticast mode
[  415.437887][T18653] veth1_to_team: entered allmulticast mode
[  415.456279][T18653] veth0_to_batadv: entered allmulticast mode
[  415.461897][T18653] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  415.465598][T18653] batadv_slave_0: entered allmulticast mode
[  415.477816][T18653] veth1_to_batadv: entered allmulticast mode
[  415.484977][T18653] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  415.488849][T18653] batadv_slave_1: entered allmulticast mode
[  415.501728][T18653] xfrm0: entered allmulticast mode
[  415.506647][T18653] veth0_to_hsr: entered allmulticast mode
[  415.511726][T18653] hsr_slave_0: entered allmulticast mode
[  415.516136][T18653] veth1_to_hsr: entered allmulticast mode
[  415.521538][T18653] hsr_slave_1: entered allmulticast mode
[  415.528292][T18653] hsr0: entered allmulticast mode
[  415.533720][T18653] veth1_virt_wifi: entered allmulticast mode
[  415.538849][T18653] veth0_virt_wifi: entered allmulticast mode
[  415.545225][T18653] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  415.549041][T18653] veth1_vlan: entered allmulticast mode
[  415.554214][T18653] veth0_vlan: entered allmulticast mode
[  415.572153][T18653] vlan0: entered allmulticast mode
[  415.574756][T18653] vlan1: entered allmulticast mode
[  415.577848][T18653] macvlan0: entered allmulticast mode
[  415.586815][T18653] macvlan1: entered allmulticast mode
[  415.607758][T18653] ipvlan0: entered allmulticast mode
[  415.619278][T18653] ipvlan1: entered allmulticast mode
[  415.622842][T18653] veth1_macvtap: entered allmulticast mode
[  415.634124][T18653] veth0_macvtap: entered allmulticast mode
[  415.653068][T18653] macvtap0: entered allmulticast mode
[  415.662749][T18653] macsec0: entered allmulticast mode
[  415.679457][T18653] geneve0: entered allmulticast mode
[  415.718531][T18653] geneve1: entered allmulticast mode
[  415.746279][T18653] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  415.790991][T18653] netdevsim netdevsim5 netdevsim1: entered allmulticast mode
[  415.814987][T18653] netdevsim netdevsim5 netdevsim2: entered allmulticast mode
[  415.848906][T18653] netdevsim netdevsim5 netdevsim3: entered allmulticast mode
[  415.864148][T18653] mac80211_hwsim hwsim15 wlan0: entered allmulticast mode
[  415.879412][T18653] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode
[  415.884769][T18653] bridge1: left promiscuous mode
[  415.887030][T18653] bridge1: entered allmulticast mode
[  415.892409][T18653] macvlan2: entered allmulticast mode
[  415.898039][T18653] macvlan3: entered allmulticast mode
[  415.903946][T18653] bridge2: entered allmulticast mode
[  415.906489][T18653] gretap1: entered allmulticast mode
[  415.909665][T18653] bridge3: entered allmulticast mode
[  415.921539][T18653] : entered allmulticast mode
[  415.927961][T18653] vlan2: left promiscuous mode
[  415.937887][T18653] macvtap0: left promiscuous mode
[  415.940398][T18653] vlan2: entered allmulticast mode
[  415.945090][T18653] syztnl0: entered allmulticast mode
[  415.948490][T18653] bridge4: entered allmulticast mode
[  415.971230][   T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  415.991284][   T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  415.995215][   T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  415.999077][   T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  416.509856][T18676] loop5: detected capacity change from 0 to 512
[  416.588070][T18676] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.5355: casefold flag without casefold feature
[  416.603140][T18676] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.5355: couldn't read orphan inode 15 (err -117)
[  416.616166][T18676] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  416.836078][T15028] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  417.653988][T18736] openvswitch: netlink: EtherType 0 is less than min 600
[  417.994675][T18719] orangefs_mount: mount request failed with -4
[  418.060292][T18759] loop5: detected capacity change from 0 to 256
[  418.074607][T18759] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  418.079026][T18759] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  418.297131][T18759] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  418.439442][T18762] dvmrp5: entered allmulticast mode
[  418.926718][T18767] loop5: detected capacity change from 0 to 32768
[  418.932653][T18767] OCFS2: ERROR (device loop5): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: i_blkno is 67108929
[  418.939385][T18767] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  418.965325][T18767] OCFS2: File system is now read-only.
[  418.967910][T18767] (syz.5.5396,18767,1):ocfs2_read_locked_inode:597 ERROR: status = -30
[  418.982797][T18767] (syz.5.5396,18767,1):ocfs2_init_global_system_inodes:444 ERROR: status = -30
[  418.988436][T18767] (syz.5.5396,18767,1):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[  419.000507][T18767] (syz.5.5396,18767,1):ocfs2_initialize_super:2198 ERROR: status = -30
[  419.006283][T18767] (syz.5.5396,18767,1):ocfs2_fill_super:1177 ERROR: status = -30
[  419.174354][T18784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5405'.
[  419.178168][T18784] tc_dump_action: action bad kind
[  419.411150][T18800] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5413'.
[  420.094184][   T24] IPVS: starting estimator thread 0...
[  420.190678][T18854] IPVS: using max 49 ests per chain, 117600 per kthread
[  422.187794][T18902] loop5: detected capacity change from 0 to 1024
[  422.213107][T18902] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  422.370743][T15028] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  422.687351][T18932] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5471'.
[  422.696339][T18932] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5471'.
[  423.106837][T18942] loop5: detected capacity change from 0 to 32768
[  423.155668][T18942] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  423.250254][T15028] ocfs2: Unmounting device (7,5) on (node local)
[  423.645931][T18987] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.5493'.
[  424.974127][T19025] tmpfs: Bad value for 'nr_blocks'
[  425.760902][T19052] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5527'.
[  425.874809][T19057] netlink: 'syz.2.5530': attribute type 24 has an invalid length.
[  426.465667][T19074] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5537'.
[  426.928533][T19099] tipc: Failed to remove unknown binding: 66,3,3/0:569321435/569321436
[  427.570323][T19114] netlink: 'syz.2.5556': attribute type 1 has an invalid length.
[  427.601078][T19117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5557'.
[  428.097804][T19148] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  428.650717][T19201] netlink: 'syz.5.5596': attribute type 3 has an invalid length.
[  428.743935][T19212] netlink: 'syz.5.5603': attribute type 4 has an invalid length.
[  429.130107][T19227] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5610'.
[  430.250081][   T34] audit: type=1326 audit(1755054264.541:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19236 comm="syz.5.5615" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f625518ebe9 code=0x0
[  431.185429][T19302] loop5: detected capacity change from 0 to 1024
[  431.215521][T19302] EXT4-fs (loop5): Test dummy encryption mode enabled
[  431.223313][T19302] EXT4-fs (loop5): stripe (9) is not aligned with cluster size (16), stripe is disabled
[  431.247381][T19302] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  431.278428][T19302] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  431.335880][T15028] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  431.384997][T19314] sctp: [Deprecated]: syz.2.5648 (pid 19314) Use of struct sctp_assoc_value in delayed_ack socket option.
[  431.384997][T19314] Use struct sctp_sack_info instead
[  431.534182][T19322] could not allocate digest TFM handle sm3
[  432.200268][T19337] loop5: detected capacity change from 0 to 1024
[  432.215029][T19337] syz.5.5657: attempt to access beyond end of device
[  432.215029][T19337] loop5: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  432.221720][T19337] syz.5.5657: attempt to access beyond end of device
[  432.221720][T19337] loop5: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  432.333852][T19341] loop5: detected capacity change from 0 to 1024
[  432.355719][T19341] hfsplus: bad catalog entry type
[  432.393269][T12482] hfsplus: b-tree write err: -5, ino 4
[  434.667632][T19370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5671'.
[  434.755815][T19376] netlink: 'syz.5.5673': attribute type 16 has an invalid length.
[  434.760727][T19375] ref_ctr increment failed for inode: 0x2a19 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888028b4e0c0
[  434.767631][T19376] netlink: 'syz.5.5673': attribute type 17 has an invalid length.
[  435.102908][T19395] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5682'.
[  435.105799][T19397] netlink: 'syz.2.5683': attribute type 2 has an invalid length.
[  435.110204][T19397] netlink: 'syz.2.5683': attribute type 8 has an invalid length.
[  435.121557][T19397] netlink: 1148 bytes leftover after parsing attributes in process `syz.2.5683'.
[  435.449555][T19421] loop5: detected capacity change from 0 to 2048
[  435.478024][T19421] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  435.481238][T19421] UDF-fs: Scanning with blocksize 512 failed
[  435.509055][T19421] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  435.800571][T19443] binder: 19442:19443 ioctl c018620c 200000000040 returned -22
[  435.972859][T19455] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5704'.
[  436.537763][T19484] usb usb1: check_ctrlrecip: process 19484 (syz.5.5714) requesting ep 01 but needs 81
[  437.325303][T19504] gre1: entered promiscuous mode
[  437.327661][T19504] gre1: entered allmulticast mode
[  437.410077][T15215] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  437.574559][T15215] usb 6-1: Using ep0 maxpacket: 32
[  437.579234][T15215] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  437.588057][T15215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.591875][ T5236] Bluetooth: hci2: command 0x0406 tx timeout
[  437.595017][T15215] usb 6-1: config 0 descriptor??
[  437.606562][T15215] gspca_main: sq930x-2.14.0 probing 041e:403c
[  437.974196][T19517] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  437.982038][T19517] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  437.986783][T19517] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  438.118953][T19517] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  438.123427][T19517] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.128706][T19517] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  438.200037][T19517] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  438.205052][T19517] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.209643][T19517] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  438.296363][T19517] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  438.300861][T19517] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  438.305858][T19517] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  438.492900][T17870] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  438.498129][T17870] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  438.502009][T17870] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  438.517138][T17870] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  438.520516][T17870] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  438.526340][T17870] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  438.543342][T17870] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  438.546743][T17870] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  438.550129][T17870] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  438.571208][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  438.597158][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  438.600673][   T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  438.706164][T19539] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[  439.569538][T15215] gspca_sq930x: reg_w 0105 bc00 failed -71
[  439.572228][T15215] sq930x 6-1:0.0: probe with driver sq930x failed with error -71
[  439.577253][T15215] usb 6-1: USB disconnect, device number 15
[  439.981587][T19565] loop5: detected capacity change from 0 to 164
[  440.568007][T19569] loop5: detected capacity change from 0 to 32768
[  440.591027][T19569] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5752 (19569)
[  440.613342][T19569] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  440.617868][T19569] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm
[  440.621700][T19569] BTRFS info (device loop5): using free-space-tree
[  440.733279][T15028] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  440.857884][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[  440.860589][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[  441.214922][T19619] netlink: 'syz.5.5765': attribute type 4 has an invalid length.
[  441.230950][T19619] netlink: 'syz.5.5765': attribute type 4 has an invalid length.
[  441.796121][T19654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5780'.
[  442.340468][T19668] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5786'.
[  442.387471][T19670] netlink: 'syz.5.5787': attribute type 3 has an invalid length.
[  442.758160][T19693] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5796'.
[  442.767990][T19693] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5796'.
[  442.871296][T19697] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5799'.
[  443.097456][   T34] audit: type=1326 audit(1755054276.552:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19662 comm="syz.1.5784" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe342f8ebe9 code=0x7fc00000
[  444.024368][   T34] audit: type=1326 audit(1755054277.422:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19734 comm="syz.5.5817" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f625518ebe9 code=0x0
[  444.129916][T19743] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5821'.
[  444.133946][T19743] netem: change failed
[  444.351646][T19749] loop5: detected capacity change from 0 to 32768
[  444.372111][T19749] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  444.427882][   T34] audit: type=1800 audit(1755054277.796:363): pid=19749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5824" name="file1" dev="loop5" ino=17059 res=0 errno=0
[  444.476856][T15028] ocfs2: Unmounting device (7,5) on (node local)
[  444.614153][T19780] netlink: 'syz.5.5837': attribute type 1 has an invalid length.
[  444.643360][T19780] bond1: entered promiscuous mode
[  444.645373][T19780] bond1: entered allmulticast mode
[  444.648016][T19780] 8021q: adding VLAN 0 to HW filter on device bond1
[  444.667201][T19780] bridge5: entered promiscuous mode
[  444.670130][T19780] bridge5: entered allmulticast mode
[  444.672907][T19780] bond1: (slave bridge5): Enslaving as a backup interface with an up link
[  444.759042][T17870] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  444.808726][T19793] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5843'.
[  444.886071][T17870] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  445.327829][T19803] netlink: 'syz.2.5847': attribute type 6 has an invalid length.
[  446.453106][T19835] team0: Port device team_slave_0 removed
[  447.816828][T19887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5881'.
[  448.057925][T19898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5886'.
[  448.744171][T19942] veth1_to_bond: entered allmulticast mode
[  448.747833][T19942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5908'.
[  448.779805][T19942] bond0: (slave bond_slave_1): Releasing backup interface
[  448.821920][T19942] veth1_to_bond (unregistering): left allmulticast mode
[  448.865437][T19946] tmpfs: Bad value for 'mpol'
[  449.284371][T19960] erspan1: entered promiscuous mode
[  449.286618][T19960] erspan1: entered allmulticast mode
[  449.688853][T19985] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  452.811941][T20018] wg1 speed is unknown, defaulting to 1000
[  453.974011][T20091] netlink: 'syz.1.5974': attribute type 10 has an invalid length.
[  453.977229][T20091] openvswitch: netlink: Flow key attr not present in new flow.
[  454.146930][T20109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5982'.
[  454.155652][T20109] xfrm1: entered promiscuous mode
[  454.157950][T20109] xfrm1: entered allmulticast mode
[  454.327262][T20117] netlink: 'syz.2.5985': attribute type 11 has an invalid length.
[  454.395994][T20120] autofs: Bad value for 'fd'
[  454.580494][   T51] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  454.750165][   T51] usb 6-1: Using ep0 maxpacket: 16
[  454.754099][   T51] usb 6-1: config 0 has an invalid interface number: 64 but max is 0
[  454.757370][   T51] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  454.761625][   T51] usb 6-1: config 0 has no interface number 0
[  454.763976][   T51] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.1e
[  454.767298][   T51] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.772717][   T51] usb 6-1: config 0 descriptor??
[  454.777735][   T51] uvcvideo 6-1:0.64: probe with driver uvcvideo failed with error -22
[  454.995528][   T51] usb 6-1: USB disconnect, device number 16
[  455.407437][T20137] overlayfs: failed to clone upperpath
[  455.508582][T20143] netlink: 'syz.2.5999': attribute type 10 has an invalid length.
[  455.519410][T20143] 8021q: adding VLAN 0 to HW filter on device bond0
[  455.525394][T20143] team0: Port device bond0 added
[  455.627857][T20147] loop5: detected capacity change from 0 to 4096
[  455.631712][T20147] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  455.665179][T20151] afs: Bad value for 'source'
[  456.184218][T20185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6018'.
[  456.715165][T20189] loop5: detected capacity change from 0 to 512
[  456.735473][T20189] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  456.743087][T20189] ext4 filesystem being mounted at /554/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  456.755315][T20189] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.6019: corrupted inode contents
[  456.764080][T20189] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.6019: mark_inode_dirty error
[  456.770934][T20189] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.6019: corrupted inode contents
[  456.776575][T20189] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.6019: mark_inode_dirty error
[  456.803779][T15028] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  457.230356][ T5881] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  457.421792][T20206] tipc: New replicast peer: 255.255.255.255
[  457.425419][T20206] tipc: Enabled bearer <udp:syz2>, priority 10
[  457.583233][ T5881] usb 6-1: Using ep0 maxpacket: 16
[  457.588706][ T5881] usb 6-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config
[  457.592778][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  457.596455][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 114, changing to 7
[  457.600038][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 25856, setting to 1024
[  457.604010][ T5881] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  457.609964][ T5881] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  457.613163][ T5881] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  457.615910][ T5881] usb 6-1: Manufacturer: syz
[  457.618993][ T5881] usb 6-1: config 0 descriptor??
[  457.788941][T20218] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6030'.
[  457.849013][ T5881] usb 6-1: USB disconnect, device number 17
[  457.872423][T20222] netlink: 'syz.2.6032': attribute type 1 has an invalid length.
[  458.442228][T20224] loop5: detected capacity change from 0 to 512
[  458.489493][T20224] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  458.501832][T20224] ext4 filesystem being mounted at /558/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  458.503106][   T51] tipc: Node number set to 3758096385
[  458.550281][T15028] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  458.948651][T20242] loop5: detected capacity change from 0 to 32768
[  458.956514][T20242] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6040 (20242)
[  458.969302][T20242] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  459.000345][T20242] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  459.009075][T20242] BTRFS info (device loop5): using free-space-tree
[  459.266031][T15028] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  460.930742][T20278] tmpfs: Bad value for 'size'
[  461.399659][   T34] audit: type=1326 audit(1755054293.669:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20281 comm="syz.5.6050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625518ebe9 code=0x7fc00000
[  461.443483][   T34] audit: type=1326 audit(1755054293.679:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20281 comm="syz.5.6050" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f625518ebe9 code=0x7fc00000
[  461.451479][   T34] audit: type=1326 audit(1755054293.679:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20281 comm="syz.5.6050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625518ebe9 code=0x7fc00000
[  461.459605][   T34] audit: type=1326 audit(1755054293.679:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20281 comm="syz.5.6050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625518ebe9 code=0x7fc00000
[  461.470294][   T34] audit: type=1326 audit(1755054293.679:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20281 comm="syz.5.6050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625518ebe9 code=0x7fc00000
[  461.480027][   T34] audit: type=1326 audit(1755054293.679:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20281 comm="syz.5.6050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625518ebe9 code=0x7fc00000
[  461.496389][   T34] audit: type=1326 audit(1755054293.679:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20281 comm="syz.5.6050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625518ebe9 code=0x7fc00000
[  461.505189][   T34] audit: type=1326 audit(1755054293.679:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20281 comm="syz.5.6050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625518ebe9 code=0x7fc00000
[  461.524228][   T34] audit: type=1326 audit(1755054293.679:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20281 comm="syz.5.6050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625518ebe9 code=0x7fc00000
[  461.542504][   T34] audit: type=1326 audit(1755054293.679:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20281 comm="syz.5.6050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625518ebe9 code=0x7fc00000
[  461.557076][T20291] bridge: RTM_NEWNEIGH with invalid ether address
[  461.578143][T20295] overlayfs: failed to clone upperpath
[  461.776913][T20307] macvlan4: entered promiscuous mode
[  461.779275][T20307] bridge0: entered promiscuous mode
[  461.992810][T20319] bridge0: entered promiscuous mode
[  461.995789][T20319] vlan2: entered promiscuous mode
[  463.367617][T15215] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  463.591660][T15215] usb 6-1: Using ep0 maxpacket: 32
[  463.596177][T15215] usb 6-1: config 0 has an invalid interface number: 222 but max is 0
[  463.599713][T15215] usb 6-1: config 0 has no interface number 0
[  463.607698][T15215] usb 6-1: New USB device found, idVendor=0ab4, idProduct=0010, bcdDevice=61.2f
[  463.611672][T15215] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.615535][T15215] usb 6-1: Product: syz
[  463.617541][T15215] usb 6-1: Manufacturer: syz
[  463.619554][T15215] usb 6-1: SerialNumber: syz
[  463.625290][T15215] usb 6-1: config 0 descriptor??
[  463.629497][T15215] esd_usb 6-1:0.222: sending version message failed
[  463.632956][T15215] esd_usb 6-1:0.222: probe with driver esd_usb failed with error -22
[  463.842512][T20374] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6091'.
[  464.200284][T20390] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6099'.
[  464.237869][T20392] netlink: 277 bytes leftover after parsing attributes in process `syz.2.6100'.
[  465.025469][T20427] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6117'.
[  465.058097][T20429] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6118'.
[  465.061684][T20429] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  465.253390][T20439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6123'.
[  465.432991][T20460] tipc: Enabled bearer <ib:gre0>, priority 24
[  465.665389][T15215] usb 6-1: USB disconnect, device number 18
[  465.779724][T20484] netlink: 180 bytes leftover after parsing attributes in process `syz.2.6144'.
[  465.924282][T20494] loop5: detected capacity change from 0 to 128
[  465.928957][T20494] EXT4-fs (loop5): Test dummy encryption mode enabled
[  465.948815][T20494] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  465.960483][T20494] ext4 filesystem being mounted at /583/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  465.979360][T20494] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  466.011342][T15028] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  466.147870][T20508] loop5: detected capacity change from 0 to 512
[  466.183517][T20508] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  466.187900][T20508] EXT4-fs (loop5): orphan cleanup on readonly fs
[  466.201472][T20508] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.6154: corrupted inode contents
[  466.206820][T20508] EXT4-fs (loop5): Remounting filesystem read-only
[  466.212176][T20508] EXT4-fs (loop5): 1 truncate cleaned up
[  466.218471][   T69] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  466.223181][   T69] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  466.228022][   T69] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started
[  466.236198][T20508] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  466.257563][T15028] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  466.725084][T20543] netem: unknown loss type 0
[  466.727736][T20543] netem: change failed
[  468.133348][T20562] ptrace attach of "/syz-executor exec"[5852] was attempted by ""[20562]
[  468.159440][T20564] loop5: detected capacity change from 0 to 128
[  468.181033][T20564] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  468.192167][T20564] ext4 filesystem being mounted at /593/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  468.198560][T20564] EXT4-fs (loop5): resizing filesystem from 64 to 2 blocks
[  468.213620][T20564] EXT4-fs warning (device loop5): ext4_resize_fs:2042: can't shrink FS - resize aborted
[  468.243132][T15028] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  468.387364][T20586] netlink: 'syz.1.6192': attribute type 1 has an invalid length.
[  468.391073][T20586] netlink: 'syz.1.6192': attribute type 2 has an invalid length.
[  468.395994][T20586] netlink: 1172 bytes leftover after parsing attributes in process `syz.1.6192'.
[  468.551765][ T5854] Bluetooth: hci2: command 0x0406 tx timeout
[  468.989591][T20606] netlink: 'syz.2.6201': attribute type 4 has an invalid length.
[  470.762789][T20637] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[  472.074278][T17870] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96
[  472.481099][T15215] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  472.656956][T15215] usb 6-1: Using ep0 maxpacket: 16
[  472.664894][T15215] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  472.670200][T15215] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  472.674585][T15215] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  472.703635][T15215] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  472.707534][T15215] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.711296][T15215] usb 6-1: Product: syz
[  472.713251][T15215] usb 6-1: Manufacturer: syz
[  472.715255][T15215] usb 6-1: SerialNumber: syz
[  473.153654][T15215] usb 6-1: 0:2 : does not exist
[  473.694964][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  473.813232][T15215] usb 6-1: USB disconnect, device number 19
[  473.832061][ T6055] udevd[6055]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  473.958833][T20695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6240'.
[  475.762503][T20766] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6270'.
[  475.768635][T20766] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6270'.
[  476.239222][T20783] netlink: 536 bytes leftover after parsing attributes in process `syz.2.6278'.
[  476.316022][T20787] netlink: 'syz.2.6280': attribute type 12 has an invalid length.
[  477.204788][T20822] usb usb8: usbfs: process 20822 (syz.5.6296) did not claim interface 0 before use
[  477.208049][T20824] vlan2: entered promiscuous mode
[  477.211083][T20824] bridge0: entered promiscuous mode
[  477.212957][T20824] vlan2: entered allmulticast mode
[  477.262122][T20828] erspan1: entered allmulticast mode
[  477.265744][T20829] bridge_slave_0: left promiscuous mode
[  477.280012][T20829] bridge0: port 1(bridge_slave_0) entered disabled state
[  477.306185][T20829] bridge_slave_1: left promiscuous mode
[  477.312485][T20829] bridge0: port 2(bridge_slave_1) entered disabled state
[  477.329976][T20829] bond0: (slave 30): Releasing backup interface
[  477.343776][T20829] bond0: (slave bond_slave_1): Releasing backup interface
[  477.352634][T20829] team0: Port device team_slave_0 removed
[  477.357618][T20829] team0: Port device team_slave_1 removed
[  477.378800][T20829] bond1: (slave gretap1): Releasing active interface
[  477.389746][T20835] bond0: Removing last ns target with arp_interval on
[  478.912950][   T34] kauditd_printk_skb: 44 callbacks suppressed
[  478.912965][   T34] audit: type=1326 audit(1755054310.058:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20882 comm="syz.2.6320" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063ab8ebe9 code=0x7fc00000
[  478.926001][   T34] audit: type=1326 audit(1755054310.067:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20882 comm="syz.2.6320" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f063ab8ebe9 code=0x7fc00000
[  478.935366][   T34] audit: type=1326 audit(1755054310.067:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20882 comm="syz.2.6320" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063ab8ebe9 code=0x7fc00000
[  478.944933][   T34] audit: type=1326 audit(1755054310.067:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20882 comm="syz.2.6320" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063ab8ebe9 code=0x7fc00000
[  478.954660][   T34] audit: type=1326 audit(1755054310.067:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20882 comm="syz.2.6320" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063ab8ebe9 code=0x7fc00000
[  478.963851][   T34] audit: type=1326 audit(1755054310.067:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20882 comm="syz.2.6320" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063ab8ebe9 code=0x7fc00000
[  478.973543][   T34] audit: type=1326 audit(1755054310.067:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20882 comm="syz.2.6320" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063ab8ebe9 code=0x7fc00000
[  478.982954][   T34] audit: type=1326 audit(1755054310.067:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20882 comm="syz.2.6320" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063ab8ebe9 code=0x7fc00000
[  478.992734][   T34] audit: type=1326 audit(1755054310.067:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20882 comm="syz.2.6320" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063ab8ebe9 code=0x7fc00000
[  479.001979][   T34] audit: type=1326 audit(1755054310.067:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20882 comm="syz.2.6320" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063ab8ebe9 code=0x7fc00000
[  479.145116][T20894] overlayfs: failed to clone upperpath
[  479.223681][T20900] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6327'.
[  479.227413][T20900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6327'.
[  480.717649][ T5881] usb 6-1: new full-speed USB device number 20 using dummy_hcd
[  480.901755][ T5881] usb 6-1: config 7 has an invalid interface number: 34 but max is 0
[  480.905188][ T5881] usb 6-1: config 7 has no interface number 0
[  480.912164][ T5881] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db51, bcdDevice=5e.35
[  480.921359][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.924711][ T5881] usb 6-1: Product: syz
[  480.926472][ T5881] usb 6-1: Manufacturer: syz
[  480.928400][ T5881] usb 6-1: SerialNumber: syz
[  481.168605][ T5881] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual USB' in warm state.
[  481.172107][ T5881] dvb-usb: bulk message failed: -22 (2/0)
[  481.180944][ T5881] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  481.185662][ T5881] dvb-usb: DViCO FusionHDTV DVB-T Dual USB error while loading driver (-19)
[  481.189654][ T5881] dvb_usb_cxusb 6-1:7.34: probe with driver dvb_usb_cxusb failed with error -22
[  481.194062][ T5881] usb 6-1: USB disconnect, device number 20
[  482.193369][ T6043] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  482.374769][ T6043] usb 6-1: Using ep0 maxpacket: 32
[  482.759657][ T6043] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  482.770219][ T6043] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  482.782392][ T6043] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  482.791586][ T6043] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  482.795062][ T6043] usb 6-1: Product: syz
[  482.796858][ T6043] usb 6-1: Manufacturer: syz
[  482.804378][ T6043] hub 6-1:4.0: USB hub found
[  483.023639][ T6043] hub 6-1:4.0: 2 ports detected
[  483.548763][T21041] 9pnet_fd: Insufficient options for proto=fd
[  484.283900][T21054] loop5: detected capacity change from 0 to 128
[  484.312610][T21054] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  484.329201][T21054] ext4 filesystem being mounted at /625/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  484.371703][T15028] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  484.381203][T21058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6397'.
[  484.396528][T21058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6397'.
[  484.468609][ T6043] usb 6-1: USB disconnect, device number 21
[  484.600061][T21068] netlink: 'syz.5.6402': attribute type 27 has an invalid length.
[  484.603561][T21068] lo: left allmulticast mode
[  484.606029][T21068] tunl0: left allmulticast mode
[  484.608633][T21068] gre0: left allmulticast mode
[  484.614306][T21068] gretap0: left allmulticast mode
[  484.616822][T21068] erspan0: left allmulticast mode
[  484.622019][T21068] ip_vti0: left allmulticast mode
[  484.624540][T21068] ip6_vti0: left allmulticast mode
[  484.657578][T21068] sit0: left allmulticast mode
[  484.660027][T21068] ip6tnl0: left allmulticast mode
[  484.663077][T21068] ip6gre0: left allmulticast mode
[  484.665488][T21068] syz_tun: left allmulticast mode
[  484.667826][T21068] ip6gretap0: left allmulticast mode
[  484.670253][T21068] bridge0: left allmulticast mode
[  484.684166][T21068] vcan0: left allmulticast mode
[  484.686404][T21068] bond0: left allmulticast mode
[  484.715742][T21068] team0: left allmulticast mode
[  484.718192][T21068] dummy0: left allmulticast mode
[  484.720377][T21068] nlmon0: left allmulticast mode
[  484.722652][T21068] caif0: left allmulticast mode
[  484.724873][T21068] batadv0: left allmulticast mode
[  484.738581][T21068] vxcan0: left allmulticast mode
[  484.746005][T21068] vxcan1: left allmulticast mode
[  484.748526][T21068] veth0: left allmulticast mode
[  484.752850][T21068] veth1: left allmulticast mode
[  484.760543][T21068] wg0: left allmulticast mode
[  484.762583][T21068] wg1: left allmulticast mode
[  484.764679][T21068] wg2: left allmulticast mode
[  484.784264][T21068] veth0_to_bridge: left allmulticast mode
[  484.786878][T21068] veth1_to_bridge: left allmulticast mode
[  484.789484][T21068] veth0_to_bond: left allmulticast mode
[  484.792189][T21068] bond_slave_0: left allmulticast mode
[  484.794364][T21068] veth1_to_bond: left allmulticast mode
[  484.796959][T21068] bond_slave_1: left allmulticast mode
[  484.799058][T21068] veth0_to_team: left allmulticast mode
[  484.801032][T21068] team_slave_0: left allmulticast mode
[  484.807948][T21068] veth1_to_team: left allmulticast mode
[  484.809981][T21068] team_slave_1: left allmulticast mode
[  484.811956][T21068] veth0_to_batadv: left allmulticast mode
[  484.815582][T21068] batadv_slave_0: left allmulticast mode
[  484.818329][T21068] veth1_to_batadv: left allmulticast mode
[  484.820555][T21068] batadv_slave_1: left allmulticast mode
[  484.826101][T21068] xfrm0: left allmulticast mode
[  484.828221][T21068] veth0_to_hsr: left allmulticast mode
[  484.830559][T21068] veth1_to_hsr: left allmulticast mode
[  484.832707][T21068] hsr0: left allmulticast mode
[  484.836190][T21068] hsr_slave_0: left allmulticast mode
[  484.839170][T21068] hsr_slave_1: left allmulticast mode
[  484.841150][T21068] veth1_virt_wifi: left allmulticast mode
[  484.843802][T21068] veth0_virt_wifi: left allmulticast mode
[  484.847157][T21068] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  484.849816][T21068] veth1_vlan: left allmulticast mode
[  484.851881][T21068] vlan0: left allmulticast mode
[  484.853628][T21068] vlan1: left allmulticast mode
[  484.855878][T21068] macvlan0: left allmulticast mode
[  484.857728][T21068] macvlan1: left allmulticast mode
[  484.859620][T21068] ipvlan0: left allmulticast mode
[  484.861499][T21068] ipvlan1: left allmulticast mode
[  484.863288][T21068] veth0_vlan: left allmulticast mode
[  484.865155][T21068] veth1_macvtap: left allmulticast mode
[  484.868625][T21068] veth0_macvtap: left allmulticast mode
[  484.870713][T21068] macsec0: left allmulticast mode
[  484.872565][T21068] geneve0: left allmulticast mode
[  484.874463][T21068] geneve1: left allmulticast mode
[  484.876714][T21068] netdevsim netdevsim5 netdevsim0: left allmulticast mode
[  484.879910][T21068] netdevsim netdevsim5 netdevsim1: left allmulticast mode
[  484.882465][T21068] netdevsim netdevsim5 netdevsim2: left allmulticast mode
[  484.884904][T21068] netdevsim netdevsim5 netdevsim3: left allmulticast mode
[  484.888870][T21068] mac80211_hwsim hwsim15 wlan0: left allmulticast mode
[  484.891306][T21068] mac80211_hwsim hwsim16 wlan1: left allmulticast mode
[  484.893752][T21068] bridge1: left allmulticast mode
[  484.895553][T21068] macvlan2: left allmulticast mode
[  484.897415][T21068] macvlan3: left allmulticast mode
[  484.900512][T21068] bridge2: left allmulticast mode
[  484.902490][T21068] gretap1: left allmulticast mode
[  484.906396][T21068] bridge3: left allmulticast mode
[  484.908399][T21068] : left allmulticast mode
[  484.912560][T21068] vlan2: left allmulticast mode
[  484.915063][T21068] macvtap0: left allmulticast mode
[  484.917550][T21068] syztnl0: left allmulticast mode
[  484.921848][T21068] bridge4: left allmulticast mode
[  484.929016][T21068] bond1: left promiscuous mode
[  484.933362][T21068] bridge5: left promiscuous mode
[  484.935538][T21068] bond1: left allmulticast mode
[  484.937336][T21068] bridge5: left allmulticast mode
[  484.943289][T21068] bridge0: left promiscuous mode
[  484.945298][T21068] macvlan4: left promiscuous mode
[  484.950722][T21068] erspan1: left allmulticast mode
[  485.090198][T21084] netlink: 'syz.2.6410': attribute type 1 has an invalid length.
[  486.620572][T21112] vlan2: entered promiscuous mode
[  486.623119][T21112] vlan2: entered allmulticast mode
[  486.625449][T21112] bridge0: entered allmulticast mode
[  486.643478][T21112] team0: Port device bond0 removed
[  486.648069][T21112] bridge_slave_0: left allmulticast mode
[  486.650761][T21112] bridge_slave_0: left promiscuous mode
[  486.654297][T21112] bridge0: port 1(bridge_slave_0) entered disabled state
[  486.668335][T21112] bridge_slave_1: left allmulticast mode
[  486.671025][T21112] bridge_slave_1: left promiscuous mode
[  486.675977][T21112] bridge0: port 2(bridge_slave_1) entered disabled state
[  486.696686][T21112] team0: Port device team_slave_1 removed
[  486.701404][T21112] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  486.706218][T21112] batman_adv: batadv0: Removing interface: batadv_slave_0
[  486.711196][T21112] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  486.711853][T21120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6424'.
[  486.714781][T21112] batman_adv: batadv0: Removing interface: batadv_slave_1
[  486.718901][T21120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6424'.
[  486.731751][T21112] batman_adv: batadv0: Interface deactivated: gretap1
[  486.734810][T21112] batman_adv: batadv0: Removing interface: gretap1
[  486.741585][T21112] bond2: (slave geneve3): Releasing active interface
[  486.744692][T21112] geneve3: left promiscuous mode
[  486.769964][ T5881] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  487.271051][ T5881] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  488.076714][T21148] vlan3: entered promiscuous mode
[  488.082266][T21148] bridge0: entered promiscuous mode
[  488.089964][T21148] vlan3: entered allmulticast mode
[  488.092175][T21148] bridge0: entered allmulticast mode
[  488.128565][T21153] bridge_slave_0: left allmulticast mode
[  488.131045][T21153] bridge_slave_0: left promiscuous mode
[  488.134643][T21153] bridge0: port 1(bridge_slave_0) entered disabled state
[  488.142974][T21153] bridge_slave_1: left allmulticast mode
[  488.145091][T21153] bridge_slave_1: left promiscuous mode
[  488.148917][T21153] bridge0: port 2(bridge_slave_1) entered disabled state
[  488.155142][T21153] bond0: (slave bond_slave_0): Releasing backup interface
[  488.161173][T21153] bond0: (slave bond_slave_1): Releasing backup interface
[  488.169422][T21153] team0: Port device team_slave_0 removed
[  488.174574][T21153] team0: Port device team_slave_1 removed
[  488.176764][T21153] batman_adv: batadv0: Removing interface: batadv_slave_0
[  488.192710][T21153] batman_adv: batadv0: Removing interface: batadv_slave_1
[  488.200207][T21153] bond1: (slave bridge5): Removing an active aggregator
[  488.207174][T21153] bond1: (slave bridge5): Releasing backup interface
[  488.241925][T21159] wg1 speed is unknown, defaulting to 1000
[  489.336421][ T5881] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  489.507243][ T5881] usb 6-1: config 0 has an invalid interface number: 47 but max is 0
[  489.510965][ T5881] usb 6-1: config 0 has no interface number 0
[  489.513689][ T5881] usb 6-1: config 0 interface 47 has no altsetting 0
[  489.519429][ T5881] usb 6-1: New USB device found, idVendor=7d15, idProduct=31b2, bcdDevice=57.4b
[  489.525195][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  489.531676][ T5881] usb 6-1: config 0 descriptor??
[  489.539158][ T5881] usb-storage 6-1:0.47: USB Mass Storage device detected
[  489.755492][ T5881] usb 6-1: USB disconnect, device number 22
[  490.327617][   T34] kauditd_printk_skb: 52 callbacks suppressed
[  490.327626][   T34] audit: type=1326 audit(1755054320.731:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21237 comm="syz.5.6475" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f625518ebe9 code=0x0
[  490.473996][   T34] audit: type=1800 audit(1755054320.871:475): pid=21240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.5.6476" name="/" dev="sockfs" ino=50480 res=0 errno=0
[  490.568289][T21246] overlay: filesystem on ./bus is read-only
[  490.620496][T21248] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6479'.
[  490.870792][T21250] loop5: detected capacity change from 0 to 32768
[  490.885300][T21250] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  490.912659][T21262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6485'.
[  490.915873][T21262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6485'.
[  490.980312][T15028] ocfs2: Unmounting device (7,5) on (node local)
[  493.367241][T21352] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6526'.
[  493.425204][T21358] netlink: 'syz.5.6527': attribute type 7 has an invalid length.
[  493.692001][T21362] loop5: detected capacity change from 0 to 32768
[  493.700652][T21362] jfs_mount: Mount Failure: superblock is corrupt!
[  493.703379][T21362] Mount JFS Failure: -22
[  493.705178][T21362] jfs_mount failed w/return code = -22
[  494.938245][T21413] loop5: detected capacity change from 0 to 1024
[  498.916900][T21532] loop5: detected capacity change from 0 to 512
[  498.921458][T21532] EXT4-fs: Ignoring removed nomblk_io_submit option
[  498.933340][T21532] EXT4-fs: Ignoring removed i_version option
[  499.002935][T21532] EXT4-fs (loop5): 1 orphan inode deleted
[  499.006610][T21532] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  499.055036][T21532] EXT4-fs (loop5): shut down requested (1)
[  499.080663][T15028] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  499.251983][T21552] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  499.254820][T21552] team0: Device macvtap0 is already an upper device of the team interface
[  499.575895][ T5881] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  499.747199][ T5881] usb 6-1: Using ep0 maxpacket: 16
[  499.751662][ T5881] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  499.756665][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  499.764332][ T5881] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  499.769544][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.773082][ T5881] usb 6-1: Product: syz
[  499.774908][ T5881] usb 6-1: Manufacturer: syz
[  499.776863][ T5881] usb 6-1: SerialNumber: syz
[  499.784120][ T5881] usb 6-1: config 0 descriptor??
[  499.789172][ T5881] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  499.793584][ T5881] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[  500.450214][ T5881] em28xx 6-1:0.0: unknown em28xx chip ID (250)
[  500.665417][ T5881] em28xx 6-1:0.0: Config register raw data: 0xfffffffb
[  500.733473][T21604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6612'.
[  500.739444][T21604] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6612'.
[  500.809612][T21608] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  500.893892][ T5881] em28xx 6-1:0.0: AC97 chip type couldn't be determined
[  500.898120][ T5881] em28xx 6-1:0.0: No AC97 audio processor
[  500.916300][ T5881] usb 6-1: USB disconnect, device number 23
[  500.919880][ T5881] em28xx 6-1:0.0: Disconnecting em28xx
[  500.939678][ T5881] em28xx 6-1:0.0: Freeing device
[  500.947704][ T6055] udevd[6055]: setting mode of /dev/bus/usb/006/023 to 020664 failed: No such file or directory
[  500.955926][ T6055] udevd[6055]: setting owner of /dev/bus/usb/006/023 to uid=0, gid=0 failed: No such file or directory
[  501.989672][T21626] loop5: detected capacity change from 0 to 512
[  501.998590][T21626] EXT4-fs: inline encryption not supported
[  502.024110][T21626] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  502.058869][T21626] EXT4-fs (loop5): 1 truncate cleaned up
[  502.062478][T21626] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  502.222650][T15028] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  502.265478][T21634] netlink: 'syz.2.6625': attribute type 3 has an invalid length.
[  502.293579][T21636] loop5: detected capacity change from 0 to 128
[  502.317414][T21636] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  502.325388][T21636] ext4 filesystem being mounted at /668/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  502.377856][T15028] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  502.878904][T21683] netlink: 124 bytes leftover after parsing attributes in process `syz.5.6646'.
[  502.923829][   T34] audit: type=1800 audit(1755054332.517:476): pid=21685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6648" name="file0" dev="tmpfs" ino=12598 res=0 errno=0
[  502.937074][T21688] loop5: detected capacity change from 0 to 256
[  503.451764][T21719] netlink: 196 bytes leftover after parsing attributes in process `syz.5.6664'.
[  503.455035][T21719] netlink: 196 bytes leftover after parsing attributes in process `syz.5.6664'.
[  503.459371][T21719] netlink: 19 bytes leftover after parsing attributes in process `syz.5.6664'.
[  503.618523][T21723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6666'.
[  503.755997][ T5881] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  503.927007][ T5881] usb 6-1: Using ep0 maxpacket: 16
[  503.933742][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 245, changing to 11
[  503.940144][ T5881] usb 6-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00
[  503.949551][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  503.960956][ T5881] usb 6-1: config 0 descriptor??
[  504.522305][ T5881] hid-alps 0003:044E:120B.000F: hidraw0: USB HID v0.06 Device [HID 044e:120b] on usb-dummy_hcd.5-1/input0
[  504.788311][ T6043] usb 6-1: USB disconnect, device number 24
[  505.576469][T21753] loop5: detected capacity change from 0 to 32768
[  505.582916][T21753] bcachefs (/dev/loop5): error reading default superblock: Bad minimum version 1.536: (unknown version), greater than version field 1.7: mi_btree_bitmap
[  505.595002][T21753] bcachefs (/dev/loop5): error validating superblock: Invalid option invalid compression opt 7
[  505.599308][T21753] bcachefs: bch2_fs_get_tree() error: invalid_sb_opt_compression
[  506.533093][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[  506.536044][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[  508.860446][T21855] netlink: 'syz.5.6723': attribute type 12 has an invalid length.
[  508.898733][   T34] audit: type=1326 audit(1755054338.110:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21858 comm="syz.1.6724" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe342f8ebe9 code=0x7ffc0000
[  508.907152][   T34] audit: type=1326 audit(1755054338.110:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21858 comm="syz.1.6724" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe342f8ebe9 code=0x7ffc0000
[  508.932038][   T34] audit: type=1326 audit(1755054338.110:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21858 comm="syz.1.6724" exe="/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fe342f8ebe9 code=0x7ffc0000
[  508.942620][   T34] audit: type=1326 audit(1755054338.110:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21858 comm="syz.1.6724" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe342f8ebe9 code=0x7ffc0000
[  508.950749][   T34] audit: type=1326 audit(1755054338.110:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21858 comm="syz.1.6724" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe342f8ebe9 code=0x7ffc0000
[  509.572700][   T34] audit: type=1326 audit(1755054338.728:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21885 comm="syz.1.6737" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe342f8ebe9 code=0x0
[  510.313835][T21930] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  510.722045][   T34] audit: type=1326 audit(1755054339.803:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21946 comm="syz.1.6764" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe342f8ebe9 code=0x7ffc0000
[  510.732177][   T34] audit: type=1326 audit(1755054339.803:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21946 comm="syz.1.6764" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe342f8ebe9 code=0x7ffc0000
[  510.742057][   T34] audit: type=1326 audit(1755054339.822:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21946 comm="syz.1.6764" exe="/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fe342f8ebe9 code=0x7ffc0000
[  510.751910][   T34] audit: type=1326 audit(1755054339.822:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21946 comm="syz.1.6764" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe342f8ebe9 code=0x7ffc0000
[  510.808076][T21951] virt_wifi0 speed is unknown, defaulting to 1000
[  510.814596][T21951] virt_wifi0 speed is unknown, defaulting to 1000
[  510.817989][T21951] virt_wifi0 speed is unknown, defaulting to 1000
[  510.831716][T21951] infiniband : RDMA CMA: cma_listen_on_dev, error -98
[  510.851229][T21951] virt_wifi0 speed is unknown, defaulting to 1000
[  510.856609][T21951] virt_wifi0 speed is unknown, defaulting to 1000
[  510.860288][T21951] virt_wifi0 speed is unknown, defaulting to 1000
[  510.910363][T21953] /dev/nbd1: Can't lookup blockdev
[  510.928656][T21955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6768'.
[  510.934265][T21955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6768'.
[  511.045988][T21965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6773'.
[  511.049629][T21965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6773'.
[  511.302665][T21978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6778'.
[  511.332793][T21974] loop5: detected capacity change from 0 to 4096
[  511.336968][T21974] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  511.357287][T21974] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  511.380906][T21974] ntfs3(loop5): ino=19, mi_enum_attr
[  511.393537][T21974] ntfs3(loop5): failed to convert "c46c" to cp857
[  511.407073][T21974] ntfs3(loop5): ino=20, mi_enum_attr
[  511.567187][T21992] overlayfs: failed to clone upperpath
[  512.447137][T21990] atomic_op ffff88812aebb198 conn xmit_atomic 0000000000000000
[  512.821826][ T5881] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  512.984118][ T5881] usb 6-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  512.989371][ T5881] usb 6-1: config 0 interface 0 has no altsetting 0
[  512.993640][ T5881] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  512.997485][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  513.001767][ T5881] usb 6-1: config 0 descriptor??
[  513.210368][T22051] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  513.453680][ T5881] hid-thrustmaster 0003:044F:B65D.0010: hidraw0: USB HID v1.03 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0
[  513.461337][ T5881] hid-thrustmaster 0003:044F:B65D.0010: Wrong number of endpoints?
[  513.657300][    C0] hid-thrustmaster 0003:044F:B65D.0010: Unknown packet type 0x0, unable to proceed further with wheel init
[  513.882379][ T5881] usb 6-1: USB disconnect, device number 25
[  514.478137][T22112] loop5: detected capacity change from 0 to 256
[  514.508427][T22112] FAT-fs (loop5): Directory bread(block 64) failed
[  514.513407][T22112] FAT-fs (loop5): Directory bread(block 65) failed
[  514.515728][T22112] FAT-fs (loop5): Directory bread(block 66) failed
[  514.517943][T22112] FAT-fs (loop5): Directory bread(block 67) failed
[  514.520118][T22112] FAT-fs (loop5): Directory bread(block 68) failed
[  514.601940][T22112] FAT-fs (loop5): Directory bread(block 69) failed
[  514.640402][T22112] FAT-fs (loop5): Directory bread(block 70) failed
[  514.666211][T22112] FAT-fs (loop5): Directory bread(block 71) failed
[  514.690978][T22112] FAT-fs (loop5): Directory bread(block 72) failed
[  514.703222][T22112] FAT-fs (loop5): Directory bread(block 73) failed
[  516.441727][T22171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6866'.
[  516.445402][T22171] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  516.457380][T22171] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  517.445781][T22198] netlink: 'syz.5.6878': attribute type 10 has an invalid length.
[  517.448919][T22198] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6878'.
[  517.454424][T22198] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  517.746276][T22216] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6887'.
[  518.203164][T22246] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 3, id = 0
[  518.603500][   T34] kauditd_printk_skb: 7 callbacks suppressed
[  518.603514][   T34] audit: type=1326 audit(1755054603.180:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22213 comm="syz.1.6885" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe342f8ebe9 code=0x7fc00000
[  520.497413][ T6043] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  520.679095][T22317] netlink: 'syz.2.6932': attribute type 32 has an invalid length.
[  520.689930][ T6043] usb 6-1: Using ep0 maxpacket: 32
[  520.698124][ T6043] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[  520.701526][ T6043] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.704222][ T6043] usb 6-1: Product: syz
[  520.705607][ T6043] usb 6-1: Manufacturer: syz
[  520.707209][ T6043] usb 6-1: SerialNumber: syz
[  520.726860][ T6043] usb 6-1: config 0 descriptor??
[  521.307590][ T6043] snd-usb-6fire 6-1:0.0: unknown device firmware state received from device:
[  521.311132][ T6043] eb 9a 47 80 9b f8 7a f0 
[  521.313107][ T6043] snd-usb-6fire 6-1:0.0: probe with driver snd-usb-6fire failed with error -5
[  521.320748][ T6043] usb 6-1: USB disconnect, device number 26
[  521.928903][T22331] loop5: detected capacity change from 0 to 4096
[  521.945763][T22334] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  522.278838][T22352] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6946'.
[  522.456508][T22362] netlink: 'syz.2.6951': attribute type 39 has an invalid length.
[  522.604299][T22368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6954'.
[  522.714141][T22378] macsec1: entered promiscuous mode
[  523.291381][T22391] loop5: detected capacity change from 0 to 32768
[  523.296556][T22391] (syz.5.6964,22391,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  523.305207][T22391] (syz.5.6964,22391,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  523.322123][T22391] JBD2: Ignoring recovery information on journal
[  523.381634][T22391] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  523.562866][T15028] ocfs2: Unmounting device (7,5) on (node local)
[  524.062184][T22434] loop5: detected capacity change from 0 to 32768
[  524.094666][T22434] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  524.139609][T15028] ocfs2: Unmounting device (7,5) on (node local)
[  524.476039][T22468] loop5: detected capacity change from 0 to 2048
[  524.502071][T22468] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  525.533361][ T6043] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  525.705855][ T6043] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  525.709599][ T6043] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  525.713912][ T6043] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  525.717825][ T6043] usb 6-1: config 1 has no interface number 1
[  525.720447][ T6043] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  525.726241][ T6043] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  525.733953][ T6043] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  525.738672][ T6043] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  525.742209][ T6043] usb 6-1: Product: syz
[  525.743991][ T6043] usb 6-1: Manufacturer: syz
[  525.745956][ T6043] usb 6-1: SerialNumber: syz
[  525.975433][ T6043] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  525.977953][ T6043] usb 6-1: MIDIStreaming interface descriptor not found
[  526.000175][ T6043] usb 6-1: USB disconnect, device number 27
[  526.039524][ T5933] udevd[5933]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  526.992322][T22563] virtio-fs: tag </dev/md0> not found
[  526.997541][ T6043] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  527.194104][ T6043] usb 6-1: Using ep0 maxpacket: 8
[  527.203960][ T6043] usb 6-1: unable to get BOS descriptor or descriptor too short
[  527.208024][ T6043] usb 6-1: config 0 has no interfaces?
[  527.212958][ T6043] usb 6-1: New USB device found, idVendor=05ac, idProduct=1240, bcdDevice= 0.3c
[  527.216246][ T6043] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.218923][ T6043] usb 6-1: Product: syz
[  527.220658][ T6043] usb 6-1: Manufacturer: syz
[  527.235689][ T6043] usb 6-1: SerialNumber: syz
[  527.238817][ T6043] apple-mfi-fastcharge 6-1: config 0 descriptor??
[  527.306428][T22583] netlink: 'syz.2.7050': attribute type 1 has an invalid length.
[  527.311424][T22583] netlink: 'syz.2.7050': attribute type 2 has an invalid length.
[  527.464221][ T6043] apple-mfi-fastcharge 6-1: USB disconnect, device number 28
[  528.545670][T22634] loop5: detected capacity change from 0 to 512
[  528.576174][T22634] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  528.586440][T22634] ext4 filesystem being mounted at /780/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  528.665882][T15028] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  529.124225][T22661] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  529.924478][T22682] tap0: tun_chr_ioctl cmd 2148553947
[  530.243675][T22712] loop5: detected capacity change from 0 to 128
[  530.256716][T22712] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  530.270231][T22712] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  530.736127][T22716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7108'.
[  530.740441][T22716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7108'.
[  531.190122][  T184] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  531.218975][T22737] loop5: detected capacity change from 0 to 128
[  531.584171][T15215] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  531.748988][T15215] usb 6-1: config 0 has an invalid interface number: 199 but max is 1
[  531.752505][T15215] usb 6-1: config 0 has no interface number 1
[  531.758266][T15215] usb 6-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  531.762922][T15215] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  531.770299][T15215] usb 6-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  531.774094][T15215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  531.779946][T15215] usb 6-1: SerialNumber: syz
[  531.784460][T15215] usb 6-1: config 0 descriptor??
[  531.790326][T15215] usb 6-1: Found UVC 0.00 device <unnamed> (0002:0000)
[  531.793455][T15215] usb 6-1: No valid video chain found.
[  531.946068][T22765] overlayfs: failed to clone upperpath
[  532.024272][ T6043] usb 6-1: USB disconnect, device number 29
[  532.759062][T22781] vivid-000: disconnect
[  532.765282][T22780] vivid-000: reconnect
[  533.057463][T22797] loop5: detected capacity change from 0 to 2048
[  533.076237][T22797] NILFS (loop5): couldn't find nilfs on the device
[  534.279966][T22846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7169'.
[  534.287390][T22846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7169'.
[  534.852220][T22872] loop5: detected capacity change from 0 to 4096
[  534.969912][T22872] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  534.985068][T22872] ntfs3(loop5): Failed to load $Extend (-22).
[  534.987638][T22872] ntfs3(loop5): Failed to initialize $Extend.
[  535.510931][   T34] audit: type=1326 audit(1755054618.998:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22859 comm="syz.2.7175" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063ab8ebe9 code=0x7fc00000
[  535.520801][   T34] audit: type=1326 audit(1755054618.998:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22859 comm="syz.2.7175" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f063ab8ebe9 code=0x7fc00000
[  535.530951][   T34] audit: type=1326 audit(1755054618.998:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22859 comm="syz.2.7175" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063ab8ebe9 code=0x7fc00000
[  535.676326][T22878] loop5: detected capacity change from 0 to 40427
[  535.687499][T22878] F2FS-fs (loop5): Small segment_count (9 < 1 * 24)
[  535.690205][T22878] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  535.734702][T22878] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  535.756915][T22878] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  535.759415][T22878] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  535.772132][T22878] syz.5.7182: attempt to access beyond end of device
[  535.772132][T22878] loop5: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  535.823581][T15028] syz-executor: attempt to access beyond end of device
[  535.823581][T15028] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  535.832848][T15028] CPU: 1 UID: 0 PID: 15028 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  535.832872][T15028] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  535.832880][T15028] Call Trace:
[  535.832885][T15028]  <TASK>
[  535.832892][T15028]  dump_stack_lvl+0x189/0x250
[  535.832916][T15028]  ? __pfx_dump_stack_lvl+0x10/0x10
[  535.832932][T15028]  ? __pfx_queue_work_on+0x10/0x10
[  535.832944][T15028]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  535.832960][T15028]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  535.832985][T15028]  f2fs_handle_critical_error+0x37c/0x540
[  535.833008][T15028]  f2fs_write_end_io+0x886/0xb60
[  535.833043][T15028]  __submit_merged_bio+0x27a/0x6a0
[  535.833065][T15028]  __submit_merged_write_cond+0x255/0x530
[  535.833088][T15028]  f2fs_write_data_pages+0x261d/0x3000
[  535.833135][T15028]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  535.833150][T15028]  ? is_bpf_text_address+0x26/0x2b0
[  535.833180][T15028]  ? arch_stack_walk+0xfc/0x150
[  535.833223][T15028]  ? __pfx___bad_area_nosemaphore+0x10/0x10
[  535.833244][T15028]  ? spurious_kernel_fault+0x1c7/0x6b0
[  535.833280][T15028]  ? do_kern_addr_fault+0x30/0x80
[  535.833329][T15028]  ? __lock_acquire+0xab9/0xd20
[  535.833370][T15028]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  535.833388][T15028]  do_writepages+0x32e/0x550
[  535.833415][T15028]  ? do_raw_spin_unlock+0x4d/0x240
[  535.833434][T15028]  filemap_fdatawrite+0x199/0x240
[  535.833452][T15028]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  535.833509][T15028]  ? do_raw_spin_unlock+0x4d/0x240
[  535.833528][T15028]  f2fs_sync_dirty_inodes+0x31f/0x830
[  535.833561][T15028]  f2fs_write_checkpoint+0x95a/0x1df0
[  535.833600][T15028]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  535.833658][T15028]  ? call_rcu+0x6ff/0x9c0
[  535.833672][T15028]  ? lockdep_hardirqs_on+0x9c/0x150
[  535.833687][T15028]  ? kill_f2fs_super+0x298/0x6c0
[  535.833710][T15028]  kill_f2fs_super+0x2c3/0x6c0
[  535.833734][T15028]  ? __pfx_kill_f2fs_super+0x10/0x10
[  535.833778][T15028]  ? radix_tree_delete_item+0x2b6/0x400
[  535.833800][T15028]  ? shrinker_free+0x2ce/0x3e0
[  535.833817][T15028]  deactivate_locked_super+0xbc/0x130
[  535.833835][T15028]  cleanup_mnt+0x425/0x4c0
[  535.833849][T15028]  ? lockdep_hardirqs_on+0x9c/0x150
[  535.833865][T15028]  task_work_run+0x1d4/0x260
[  535.833884][T15028]  ? __pfx_task_work_run+0x10/0x10
[  535.833898][T15028]  ? __x64_sys_umount+0x122/0x160
[  535.833918][T15028]  ? exit_to_user_mode_loop+0x40/0x110
[  535.833939][T15028]  exit_to_user_mode_loop+0xec/0x110
[  535.833957][T15028]  do_syscall_64+0x2bd/0x3b0
[  535.833971][T15028]  ? lockdep_hardirqs_on+0x9c/0x150
[  535.833985][T15028]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.833998][T15028]  ? exc_page_fault+0x9f/0xf0
[  535.834014][T15028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.834026][T15028] RIP: 0033:0x7f625518ff17
[  535.834039][T15028] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  535.834050][T15028] RSP: 002b:00007ffdf34321b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  535.834065][T15028] RAX: 0000000000000000 RBX: 00007f6255211c05 RCX: 00007f625518ff17
[  535.834074][T15028] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf3432270
[  535.834081][T15028] RBP: 00007ffdf3432270 R08: 0000000000000000 R09: 0000000000000000
[  535.834089][T15028] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdf3433300
[  535.834096][T15028] R13: 00007f6255211c05 R14: 000000000008103e R15: 00007ffdf3433340
[  535.834120][T15028]  </TASK>
[  535.835110][T15028] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  536.058929][T22904] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7195'.
[  536.063041][T22904] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7195'.
[  536.069506][T22906] netlink: 'syz.2.7196': attribute type 2 has an invalid length.
[  536.153203][T22910] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  536.176400][T22912] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7199'.
[  536.254705][T22918] loop5: detected capacity change from 0 to 1024
[  536.369218][   T66] hfsplus: b-tree write err: -5, ino 3
[  536.375655][T15028] hfsplus: node 4:3 still has 1 user(s)!
[  537.040651][T22978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7228'.
[  538.097852][   T34] audit: type=1804 audit(1755054621.420:498): pid=23011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7243" name="bus" dev="tmpfs" ino=13823 res=1 errno=0
[  538.246629][T23019] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7246'.
[  538.492289][T23046] loop5: detected capacity change from 0 to 1024
[  538.562869][T23050] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7262'.
[  538.585611][T23052] netlink: 'syz.5.7263': attribute type 29 has an invalid length.
[  538.590273][T23052] netlink: 'syz.5.7263': attribute type 29 has an invalid length.
[  538.896014][ T5881] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  539.056321][ T5881] usb 6-1: Using ep0 maxpacket: 32
[  539.060253][ T5881] usb 6-1: config 186 has an invalid interface number: 85 but max is 0
[  539.063889][ T5881] usb 6-1: config 186 has no interface number 0
[  539.069820][ T5881] usb 6-1: config 186 interface 85 has no altsetting 0
[  539.084982][ T5881] usb 6-1: New USB device found, idVendor=04b4, idProduct=931d, bcdDevice=bb.43
[  539.093974][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  539.097479][ T5881] usb 6-1: Product: syz
[  539.099594][ T5881] usb 6-1: Manufacturer: syz
[  539.101630][ T5881] usb 6-1: SerialNumber: syz
[  539.341033][ T5881] usb 6-1: can't set first interface for hiFace device.
[  539.344623][ T5881] snd-usb-hiface 6-1:186.85: probe with driver snd-usb-hiface failed with error -5
[  539.357852][ T5881] usb 6-1: USB disconnect, device number 30
[  539.765598][T23097] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7285'.
[  539.769004][T23097] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7285'.
[  539.772371][T23097] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7285'.
[  540.122724][T23125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7298'.
[  540.128279][T23125] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7298'.
[  540.139374][T23125] gretap0: entered promiscuous mode
[  540.141882][T23125] macvlan0: entered promiscuous mode
[  540.398935][ T6043] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  540.869488][ T6043] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02
[  540.874586][ T6043] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.878779][ T6043] usb 6-1: Product: syz
[  540.880872][ T6043] usb 6-1: Manufacturer: syz
[  540.884466][ T6043] usb 6-1: SerialNumber: syz
[  540.891997][ T6043] usb 6-1: config 0 descriptor??
[  541.158633][ T6043] hso 6-1:0.0: Failed to find BULK IN ep
[  542.775034][T23201] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  543.170455][ T6043] usb 6-1: USB disconnect, device number 31
[  543.505498][T23253] loop5: detected capacity change from 0 to 512
[  543.516638][T23253] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  543.525373][T23253] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  543.532098][T23253] EXT4-fs (loop5): 1 truncate cleaned up
[  543.537736][T23253] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  543.562189][T15028] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  543.939703][   T34] audit: type=1326 audit(1755054626.874:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23278 comm="syz.2.7368" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063ab8ebe9 code=0x7ffc0000
[  543.957270][   T34] audit: type=1326 audit(1755054626.874:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23278 comm="syz.2.7368" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063ab8ebe9 code=0x7ffc0000
[  543.976568][   T34] audit: type=1326 audit(1755054626.902:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23278 comm="syz.2.7368" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f063ab8ebe9 code=0x7ffc0000
[  543.996844][   T34] audit: type=1326 audit(1755054626.902:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23278 comm="syz.2.7368" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f063ab8ec23 code=0x7ffc0000
[  544.016772][   T34] audit: type=1326 audit(1755054626.902:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23278 comm="syz.2.7368" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f063ab8d69f code=0x7ffc0000
[  544.034684][   T34] audit: type=1326 audit(1755054626.902:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23278 comm="syz.2.7368" exe="/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f063ab8ec77 code=0x7ffc0000
[  544.061112][   T34] audit: type=1326 audit(1755054626.911:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23278 comm="syz.2.7368" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f063ab8d550 code=0x7ffc0000
[  544.069595][   T34] audit: type=1326 audit(1755054626.911:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23278 comm="syz.2.7368" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f063ab8d84a code=0x7ffc0000
[  544.091613][   T34] audit: type=1326 audit(1755054626.911:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23278 comm="syz.2.7368" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063ab8ebe9 code=0x7ffc0000
[  544.098797][   T34] audit: type=1326 audit(1755054626.911:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23278 comm="syz.2.7368" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063ab8ebe9 code=0x7ffc0000
[  545.227639][ T1059] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1
[  545.232320][ T1059] ata1: failed to read log page 10h (errno=-5)
[  545.234695][ T1059] ata1.00: exception Emask 0x1 SAct 0x2000 SErr 0x0 action 0x0
[  545.237528][ T1059] ata1.00: irq_stat 0x40000000
[  545.239334][ T1059] ata1.00: failed command: WRITE FPDMA QUEUED
[  545.243719][ T1059] ata1.00: cmd 61/08:68:32:c1:0c/00:00:00:00:00/40 tag 13 ncq dma 4096 out
[  545.243719][ T1059]          res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[  545.249802][ T1059] ata1.00: status: { DRDY }
[  545.251457][ T1059] ata1.00: error: { ABRT }
[  545.271704][ T1059] ata1.00: configured for UDMA/100
[  545.275020][ T1059] ata1: EH complete
[  545.619863][T15215] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  546.095018][T15215] usb 6-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77
[  546.098238][T15215] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.100882][T15215] usb 6-1: Product: syz
[  546.102783][T15215] usb 6-1: Manufacturer: syz
[  546.104404][T15215] usb 6-1: SerialNumber: syz
[  546.110364][T15215] usb 6-1: config 0 descriptor??
[  546.114976][T15215] usb 6-1: disable ehci-hcd to run US-144
[  546.337346][T15215] usb 6-1: USB disconnect, device number 32
[  546.418015][T23332] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7392'.
[  547.310196][T23357] loop5: detected capacity change from 0 to 32768
[  547.324440][T23357] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  547.346087][T23357] XFS (loop5): Ending clean mount
[  547.352050][T23357] XFS (loop5): Quotacheck needed: Please wait.
[  547.401579][T23357] XFS (loop5): Quotacheck: Done.
[  547.585796][T15028] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  548.027390][T23403] fuse: Bad value for 'fd'
[  548.222077][T23424] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7431'.
[  548.226113][T23423] delete_channel: no stack
[  548.231428][T23426] netlink: 666 bytes leftover after parsing attributes in process `syz.1.7433'.
[  548.255360][T23428] overlayfs: failed to clone upperpath
[  548.873200][T23465] loop5: detected capacity change from 0 to 128
[  548.877399][T23465] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  548.887411][T23465] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  549.241667][T23477] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7456'.
[  549.255821][   T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  549.259518][   T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  549.263225][T23477] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7456'.
[  549.276926][ T5879] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  549.283536][ T5879] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  549.485276][T23497] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  550.141986][T23510] netlink: 'syz.1.7471': attribute type 237 has an invalid length.
[  550.397005][T23523] ieee802154 phy0 wpan0: encryption failed: -22
[  550.742666][   T34] kauditd_printk_skb: 9 callbacks suppressed
[  550.742684][   T34] audit: type=1326 audit(1755054633.235:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23532 comm="syz.5.7481" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f625518ebe9 code=0x0
[  552.268405][T23559] netlink: 'syz.2.7491': attribute type 5 has an invalid length.
[  554.581940][T23628] atomic_op ffff88810a82a198 conn xmit_atomic 0000000000000000
[  554.833973][T23634] sctp: [Deprecated]: syz.2.7523 (pid 23634) Use of int in max_burst socket option.
[  554.833973][T23634] Use struct sctp_assoc_value instead
[  554.901928][T23638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7525'.
[  554.905104][T23638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7525'.
[  554.936259][T23631] loop5: detected capacity change from 0 to 32768
[  554.948365][T23631] bcachefs (/dev/loop5): error validating superblock: Invalid option metadata_replicas_required: too small (min 1)
[  554.960907][T23631] bcachefs: bch2_fs_get_tree() error: ERANGE_option_too_small
[  555.058140][T23649] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.7530'.
[  555.072265][T23649] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.7530'.
[  555.690243][T23686] netlink: 'syz.5.7547': attribute type 21 has an invalid length.
[  555.693790][T23686] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7547'.
[  555.998370][   T34] audit: type=1326 audit(1755054638.155:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23705 comm="syz.1.7557" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe342f8ebe9 code=0x0
[  556.055113][T23694] loop5: detected capacity change from 0 to 32768
[  556.059442][T23694] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.7551 (23694)
[  556.083430][T23694] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  556.086927][T23694] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm
[  556.090148][T23694] BTRFS info (device loop5): using free-space-tree
[  556.158111][T15028] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  556.250779][T23734] netlink: 'syz.5.7562': attribute type 1 has an invalid length.
[  556.810030][T23750] loop5: detected capacity change from 0 to 32768
[  556.819588][T23750] (syz.5.7569,23750,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  557.033651][T23750] (syz.5.7569,23750,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  557.105130][T23750] JBD2: Ignoring recovery information on journal
[  557.127707][T23750] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  557.193086][T15028] ocfs2: Unmounting device (7,5) on (node local)
[  557.415608][T23765] loop5: detected capacity change from 0 to 32768
[  557.525983][T23768] loop5: detected capacity change from 0 to 8
[  557.975191][T23776] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7578'.
[  558.387642][T23790] lo: left allmulticast mode
[  559.236854][T23798] loop5: detected capacity change from 0 to 32768
[  559.366212][T23800] loop5: detected capacity change from 0 to 256
[  559.436106][T23802] loop5: detected capacity change from 0 to 512
[  559.439279][T23802] EXT4-fs: Ignoring removed i_version option
[  559.441536][T23802] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  559.457755][T23802] EXT4-fs (loop5): 1 truncate cleaned up
[  559.460379][T23802] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  560.593299][T15028] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  560.663179][T23810] overlayfs: failed to clone lowerpath
[  561.202153][T23833] overlayfs: failed to clone upperpath
[  561.234258][T23835] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  561.860377][T23883] netlink: 348 bytes leftover after parsing attributes in process `syz.1.7625'.
[  561.989016][T23881] loop5: detected capacity change from 0 to 32768
[  562.007352][T23881] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  562.015945][T23881] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  562.111880][T23897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7630'.
[  562.165584][T23897] vlan2: entered allmulticast mode
[  562.167988][T23897] bridge4: port 1(vlan2) entered blocking state
[  562.174128][T23897] bridge4: port 1(vlan2) entered disabled state
[  562.186836][T23897] vlan2: entered promiscuous mode
[  562.255770][T23897] gretap2: entered promiscuous mode
[  562.266009][T23897] bridge4: port 2(gretap2) entered blocking state
[  562.269689][T23897] bridge4: port 2(gretap2) entered disabled state
[  562.273304][T23897] gretap2: entered allmulticast mode
[  562.622041][T23906] syzkaller0: entered allmulticast mode
[  562.624741][T23906] syzkaller0: entered promiscuous mode
[  562.657891][T23906] syzkaller0 (unregistering): left allmulticast mode
[  562.661858][T23906] syzkaller0 (unregistering): left promiscuous mode
[  563.126491][T23911] gre0: MTU too low for tipc bearer
[  563.129085][T23911] tipc: Disabling bearer <ib:gre0>
[  563.507794][T15028] ocfs2: Unmounting device (7,5) on (node local)
[  564.194746][T23923] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7641'.
[  564.198429][T23923] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7641'.
[  564.570333][T23950] loop5: detected capacity change from 0 to 256
[  564.842107][T15215] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  565.002472][T15215] usb 6-1: Using ep0 maxpacket: 16
[  565.006783][T15215] usb 6-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config
[  565.011132][T15215] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  565.016557][T15215] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  565.019697][T15215] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  565.022794][T15215] usb 6-1: Product: syz
[  565.024649][T15215] usb 6-1: Manufacturer: syz
[  565.026728][T15215] usb 6-1: SerialNumber: syz
[  565.254146][T15215] usb 6-1: 0:2 : does not exist
[  565.259597][T15215] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  565.278368][T15215] usb 6-1: USB disconnect, device number 33
[  565.299398][T23641] udevd[23641]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  566.028076][T23986] loop5: detected capacity change from 0 to 32768
[  566.034566][T23986] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  566.057523][T23986] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  566.069695][   T34] audit: type=1800 audit(1755054647.574:520): pid=23986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7671" name="file1" dev="loop5" ino=17058 res=0 errno=0
[  566.101974][T15028] ocfs2: Unmounting device (7,5) on (node local)
[  566.279201][T24012] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7682'.
[  567.057515][T24028] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  568.915324][ T5882] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  569.075719][ T5882] usb 6-1: Using ep0 maxpacket: 8
[  569.083843][ T5882] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  569.088883][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  569.091958][ T5882] usb 6-1: Product: syz
[  569.093412][ T5882] usb 6-1: Manufacturer: syz
[  569.095280][ T5882] usb 6-1: SerialNumber: syz
[  569.112109][ T5882] usb 6-1: config 0 descriptor??
[  569.116946][ T5882] gspca_main: sq905-2.14.0 probing 2770:9120
[  569.544607][ T5882] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71)
[  569.547895][ T5882] sq905 6-1:0.0: probe with driver sq905 failed with error -71
[  569.558281][ T5882] usb 6-1: USB disconnect, device number 34
[  570.841494][T24138] cgroup: Bad value for 'name'
[  570.966820][T24146] ==================================================================
[  570.970380][T24146] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  570.973615][T24146] Read of size 4 at addr ffff8880380ae944 by task syz.5.7740/24146
[  570.977861][T24146] 
[  570.978900][T24146] CPU: 0 UID: 0 PID: 24146 Comm: syz.5.7740 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  570.978917][T24146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  570.978924][T24146] Call Trace:
[  570.978929][T24146]  <TASK>
[  570.978936][T24146]  dump_stack_lvl+0x189/0x250
[  570.978954][T24146]  ? __kasan_check_byte+0x12/0x40
[  570.978974][T24146]  ? __pfx_dump_stack_lvl+0x10/0x10
[  570.978987][T24146]  ? lock_release+0x4b/0x3e0
[  570.979005][T24146]  ? __virt_addr_valid+0x4a5/0x5c0
[  570.979020][T24146]  print_report+0xca/0x240
[  570.979031][T24146]  ? xfrm_alloc_spi+0x570/0xf30
[  570.979049][T24146]  kasan_report+0x118/0x150
[  570.979066][T24146]  ? xfrm_alloc_spi+0x570/0xf30
[  570.979086][T24146]  xfrm_alloc_spi+0x570/0xf30
[  570.979104][T24146]  ? xfrm_alloc_spi+0x2a0/0xf30
[  570.979127][T24146]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  570.979144][T24146]  ? xfrm_find_acq+0x87/0xa0
[  570.979163][T24146]  xfrm_alloc_userspi+0x70b/0xc90
[  570.979181][T24146]  ? apparmor_capable+0x137/0x1b0
[  570.979193][T24146]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  570.979205][T24146]  ? __nla_parse+0x40/0x60
[  570.979222][T24146]  xfrm_user_rcv_msg+0x7a3/0xab0
[  570.979236][T24146]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  570.979257][T24146]  ? __pfx___mutex_trylock_common+0x10/0x10
[  570.979298][T24146]  ? rcu_is_watching+0x15/0xb0
[  570.979312][T24146]  ? trace_contention_end+0x39/0x120
[  570.979324][T24146]  ? __mutex_lock+0x335/0x1360
[  570.979343][T24146]  netlink_rcv_skb+0x208/0x470
[  570.979359][T24146]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  570.979370][T24146]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  570.979389][T24146]  ? netlink_deliver_tap+0x2e/0x1b0
[  570.979402][T24146]  ? netlink_deliver_tap+0x2e/0x1b0
[  570.979417][T24146]  xfrm_netlink_rcv+0x79/0x90
[  570.979428][T24146]  netlink_unicast+0x82f/0x9e0
[  570.979444][T24146]  ? __pfx_netlink_unicast+0x10/0x10
[  570.979457][T24146]  ? netlink_sendmsg+0x642/0xb30
[  570.979471][T24146]  ? skb_put+0x11b/0x210
[  570.979487][T24146]  netlink_sendmsg+0x805/0xb30
[  570.979504][T24146]  ? __pfx_netlink_sendmsg+0x10/0x10
[  570.979520][T24146]  ? aa_sock_msg_perm+0xf1/0x1d0
[  570.979536][T24146]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  570.979549][T24146]  ? __pfx_netlink_sendmsg+0x10/0x10
[  570.979564][T24146]  __sock_sendmsg+0x21c/0x270
[  570.979578][T24146]  ____sys_sendmsg+0x505/0x830
[  570.979597][T24146]  ? __pfx_____sys_sendmsg+0x10/0x10
[  570.979615][T24146]  ? import_iovec+0x74/0xa0
[  570.979627][T24146]  ___sys_sendmsg+0x21f/0x2a0
[  570.979645][T24146]  ? __pfx____sys_sendmsg+0x10/0x10
[  570.979671][T24146]  ? __fget_files+0x2a/0x420
[  570.979688][T24146]  ? __fget_files+0x3a0/0x420
[  570.979708][T24146]  __x64_sys_sendmsg+0x19b/0x260
[  570.979726][T24146]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  570.979748][T24146]  ? do_syscall_64+0xbe/0x3b0
[  570.979765][T24146]  do_syscall_64+0xfa/0x3b0
[  570.979779][T24146]  ? lockdep_hardirqs_on+0x9c/0x150
[  570.979792][T24146]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  570.979804][T24146]  ? exc_page_fault+0x9f/0xf0
[  570.979818][T24146]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  570.979830][T24146] RIP: 0033:0x7f625518ebe9
[  570.979842][T24146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  570.979861][T24146] RSP: 002b:00007f625600a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  570.979876][T24146] RAX: ffffffffffffffda RBX: 00007f62553b5fa0 RCX: 00007f625518ebe9
[  570.979886][T24146] RDX: 0000000004000080 RSI: 0000200000000540 RDI: 0000000000000003
[  570.979895][T24146] RBP: 00007f6255211e19 R08: 0000000000000000 R09: 0000000000000000
[  570.979904][T24146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  570.979912][T24146] R13: 00007f62553b6038 R14: 00007f62553b5fa0 R15: 00007ffdf3432f28
[  570.979927][T24146]  </TASK>
[  570.979932][T24146] 
[  571.136490][T24146] Allocated by task 18178:
[  571.138157][T24146]  kasan_save_track+0x3e/0x80
[  571.139799][T24146]  __kasan_slab_alloc+0x6c/0x80
[  571.141505][T24146]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  571.143711][T24146]  xfrm_state_alloc+0x24/0x2f0
[  571.145727][T24146]  __find_acq_core+0x8a7/0x1c00
[  571.147456][T24146]  xfrm_find_acq+0x78/0xa0
[  571.149010][T24146]  xfrm_alloc_userspi+0x6b3/0xc90
[  571.150692][T24146]  xfrm_user_rcv_msg+0x7a3/0xab0
[  571.152472][T24146]  netlink_rcv_skb+0x208/0x470
[  571.154143][T24146]  xfrm_netlink_rcv+0x79/0x90
[  571.155781][T24146]  netlink_unicast+0x82f/0x9e0
[  571.157415][T24146]  netlink_sendmsg+0x805/0xb30
[  571.158998][T24146]  __sock_sendmsg+0x21c/0x270
[  571.160516][T24146]  ____sys_sendmsg+0x505/0x830
[  571.162121][T24146]  ___sys_sendmsg+0x21f/0x2a0
[  571.164024][T24146]  __x64_sys_sendmsg+0x19b/0x260
[  571.166106][T24146]  do_syscall_64+0xfa/0x3b0
[  571.168083][T24146]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  571.170580][T24146] 
[  571.171639][T24146] Freed by task 15215:
[  571.173438][T24146]  kasan_save_track+0x3e/0x80
[  571.175477][T24146]  kasan_save_free_info+0x46/0x50
[  571.177649][T24146]  __kasan_slab_free+0x5b/0x80
[  571.179687][T24146]  kmem_cache_free+0x18f/0x400
[  571.181768][T24146]  xfrm_state_gc_task+0x52d/0x6b0
[  571.183953][T24146]  process_scheduled_works+0xae1/0x17b0
[  571.186294][T24146]  worker_thread+0x8a0/0xda0
[  571.188326][T24146]  kthread+0x711/0x8a0
[  571.190117][T24146]  ret_from_fork+0x3fc/0x770
[  571.192134][T24146]  ret_from_fork_asm+0x1a/0x30
[  571.194206][T24146] 
[  571.195251][T24146] The buggy address belongs to the object at ffff8880380ae880
[  571.195251][T24146]  which belongs to the cache xfrm_state of size 928
[  571.201035][T24146] The buggy address is located 196 bytes inside of
[  571.201035][T24146]  freed 928-byte region [ffff8880380ae880, ffff8880380aec20)
[  571.206817][T24146] 
[  571.207886][T24146] The buggy address belongs to the physical page:
[  571.210610][T24146] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880380aed00 pfn:0x380ac
[  571.214657][T24146] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  571.218048][T24146] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  571.221168][T24146] page_type: f5(slab)
[  571.222918][T24146] raw: 00fff00000000040 ffff88801c397c80 dead000000000122 0000000000000000
[  571.226581][T24146] raw: ffff8880380aed00 00000000800e0004 00000000f5000000 0000000000000000
[  571.230242][T24146] head: 00fff00000000040 ffff88801c397c80 dead000000000122 0000000000000000
[  571.233756][T24146] head: ffff8880380aed00 00000000800e0004 00000000f5000000 0000000000000000
[  571.237248][T24146] head: 00fff00000000002 ffffea0000e02b01 00000000ffffffff 00000000ffffffff
[  571.240816][T24146] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  571.244485][T24146] page dumped because: kasan: bad access detected
[  571.247043][T24146] page_owner tracks the page as allocated
[  571.249437][T24146] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 13652, tgid 13649 (syz.4.3186), ts 283142415391, free_ts 260944379631
[  571.257209][T24146]  post_alloc_hook+0x240/0x2a0
[  571.259259][T24146]  get_page_from_freelist+0x21e4/0x22c0
[  571.261612][T24146]  __alloc_frozen_pages_noprof+0x181/0x370
[  571.264066][T24146]  alloc_pages_mpol+0x232/0x4a0
[  571.266085][T24146]  allocate_slab+0x8a/0x370
[  571.268028][T24146]  ___slab_alloc+0xbeb/0x1410
[  571.270079][T24146]  kmem_cache_alloc_noprof+0x283/0x3c0
[  571.272362][T24146]  xfrm_state_alloc+0x24/0x2f0
[  571.274402][T24146]  xfrm_state_find+0x37d4/0x5400
[  571.276596][T24146]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  571.279185][T24146]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  571.281508][T24146]  xfrm_lookup_route+0x3c/0x1c0
[  571.283609][T24146]  rawv6_sendmsg+0xdab/0x1820
[  571.285662][T24146]  __sock_sendmsg+0x19c/0x270
[  571.287685][T24146]  ____sys_sendmsg+0x52d/0x830
[  571.289767][T24146]  ___sys_sendmsg+0x21f/0x2a0
[  571.291795][T24146] page last free pid 12788 tgid 12787 stack trace:
[  571.294570][T24146]  __free_frozen_pages+0xbc4/0xd30
[  571.296947][T24146]  __put_partials+0x156/0x1a0
[  571.298995][T24146]  put_cpu_partial+0x17c/0x250
[  571.301118][T24146]  __slab_free+0x2d5/0x3c0
[  571.303069][T24146]  qlist_free_all+0x97/0x140
[  571.305078][T24146]  kasan_quarantine_reduce+0x148/0x160
[  571.307443][T24146]  __kasan_slab_alloc+0x22/0x80
[  571.309574][T24146]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  571.311948][T24146]  ptlock_alloc+0x20/0x70
[  571.313817][T24146]  pte_alloc_one+0x7d/0x170
[  571.315769][T24146]  __pte_alloc+0x25/0x1a0
[  571.317646][T24146]  __handle_mm_fault+0x49b3/0x5440
[  571.319867][T24146]  handle_mm_fault+0x40a/0x8e0
[  571.321949][T24146]  do_user_addr_fault+0xa81/0x1390
[  571.324157][T24146]  exc_page_fault+0x76/0xf0
[  571.326105][T24146]  asm_exc_page_fault+0x26/0x30
[  571.328196][T24146] 
[  571.329287][T24146] Memory state around the buggy address:
[  571.331695][T24146]  ffff8880380ae800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  571.335112][T24146]  ffff8880380ae880: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  571.338542][T24146] >ffff8880380ae900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  571.341939][T24146]                                            ^
[  571.344566][T24146]  ffff8880380ae980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  571.347996][T24146]  ffff8880380aea00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  571.351442][T24146] ==================================================================
[  571.355046][T24146] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  571.358155][T24146] CPU: 0 UID: 0 PID: 24146 Comm: syz.5.7740 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  571.363346][T24146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  571.367674][T24146] Call Trace:
[  571.369112][T24146]  <TASK>
[  571.370370][T24146]  dump_stack_lvl+0x99/0x250
[  571.372334][T24146]  ? __asan_memcpy+0x40/0x70
[  571.373921][T24146]  ? __pfx_dump_stack_lvl+0x10/0x10
[  571.375824][T24146]  ? __pfx__printk+0x10/0x10
[  571.377490][T24146]  vpanic+0x281/0x750
[  571.378859][T24146]  ? __pfx_vpanic+0x10/0x10
[  571.380547][T24146]  ? irqentry_exit+0x74/0x90
[  571.382311][T24146]  panic+0xb9/0xc0
[  571.383613][T24146]  ? __pfx_panic+0x10/0x10
[  571.385238][T24146]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  571.387326][T24146]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  571.389290][T24146]  ? xfrm_alloc_spi+0x570/0xf30
[  571.390937][T24146]  check_panic_on_warn+0x89/0xb0
[  571.392590][T24146]  ? xfrm_alloc_spi+0x570/0xf30
[  571.394245][T24146]  end_report+0x78/0x160
[  571.395687][T24146]  kasan_report+0x129/0x150
[  571.397201][T24146]  ? xfrm_alloc_spi+0x570/0xf30
[  571.398875][T24146]  xfrm_alloc_spi+0x570/0xf30
[  571.400397][T24146]  ? xfrm_alloc_spi+0x2a0/0xf30
[  571.402023][T24146]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  571.403760][T24146]  ? xfrm_find_acq+0x87/0xa0
[  571.405308][T24146]  xfrm_alloc_userspi+0x70b/0xc90
[  571.406981][T24146]  ? apparmor_capable+0x137/0x1b0
[  571.408698][T24146]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  571.410531][T24146]  ? __nla_parse+0x40/0x60
[  571.411989][T24146]  xfrm_user_rcv_msg+0x7a3/0xab0
[  571.413575][T24146]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  571.415379][T24146]  ? __pfx___mutex_trylock_common+0x10/0x10
[  571.417282][T24146]  ? rcu_is_watching+0x15/0xb0
[  571.418861][T24146]  ? trace_contention_end+0x39/0x120
[  571.420609][T24146]  ? __mutex_lock+0x335/0x1360
[  571.422193][T24146]  netlink_rcv_skb+0x208/0x470
[  571.423794][T24146]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  571.425564][T24146]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  571.427311][T24146]  ? netlink_deliver_tap+0x2e/0x1b0
[  571.429057][T24146]  ? netlink_deliver_tap+0x2e/0x1b0
[  571.430796][T24146]  xfrm_netlink_rcv+0x79/0x90
[  571.432371][T24146]  netlink_unicast+0x82f/0x9e0
[  571.433961][T24146]  ? __pfx_netlink_unicast+0x10/0x10
[  571.435718][T24146]  ? netlink_sendmsg+0x642/0xb30
[  571.437372][T24146]  ? skb_put+0x11b/0x210
[  571.438789][T24146]  netlink_sendmsg+0x805/0xb30
[  571.440386][T24146]  ? __pfx_netlink_sendmsg+0x10/0x10
[  571.442134][T24146]  ? aa_sock_msg_perm+0xf1/0x1d0
[  571.443791][T24146]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  571.445553][T24146]  ? __pfx_netlink_sendmsg+0x10/0x10
[  571.447305][T24146]  __sock_sendmsg+0x21c/0x270
[  571.448887][T24146]  ____sys_sendmsg+0x505/0x830
[  571.450474][T24146]  ? __pfx_____sys_sendmsg+0x10/0x10
[  571.452215][T24146]  ? import_iovec+0x74/0xa0
[  571.453726][T24146]  ___sys_sendmsg+0x21f/0x2a0
[  571.455220][T24146]  ? __pfx____sys_sendmsg+0x10/0x10
[  571.456905][T24146]  ? __fget_files+0x2a/0x420
[  571.458396][T24146]  ? __fget_files+0x3a0/0x420
[  571.459960][T24146]  __x64_sys_sendmsg+0x19b/0x260
[  571.461612][T24146]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  571.463423][T24146]  ? do_syscall_64+0xbe/0x3b0
[  571.464993][T24146]  do_syscall_64+0xfa/0x3b0
[  571.466516][T24146]  ? lockdep_hardirqs_on+0x9c/0x150
[  571.468228][T24146]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  571.470235][T24146]  ? exc_page_fault+0x9f/0xf0
[  571.471788][T24146]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  571.473666][T24146] RIP: 0033:0x7f625518ebe9
[  571.475142][T24146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  571.481512][T24146] RSP: 002b:00007f625600a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  571.484251][T24146] RAX: ffffffffffffffda RBX: 00007f62553b5fa0 RCX: 00007f625518ebe9
[  571.486873][T24146] RDX: 0000000004000080 RSI: 0000200000000540 RDI: 0000000000000003
[  571.489391][T24146] RBP: 00007f6255211e19 R08: 0000000000000000 R09: 0000000000000000
[  571.491973][T24146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  571.494499][T24146] R13: 00007f62553b6038 R14: 00007f62553b5fa0 R15: 00007ffdf3432f28
[  571.497087][T24146]  </TASK>
[  571.498814][T24146] Kernel Offset: disabled
[  571.500252][T24146] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:06:33  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000034 RBX=0000000000000034 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000133b RDI=000000000000133c RBP=00000000000003f8 RSP=ffffc900086e69f0
R8 =ffff8881072e8237 R9 =1ffff11020e5d046 R10=dffffc0000000000 R11=ffffffff854e72a0
R12=dffffc0000000000 R13=ffffffff99af18fd R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e731c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f625600a6c0 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=fffffffffffffffd CR3=000000012abae000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f6255387498 00007f6255387470 XMM03=00007f62553874a8 00007f62553874a0
XMM04=00007f6255eed100 00007f6255387460 XMM05=00007f6255387478 00007f62553874c0
XMM06=00007f62553874b8 00007f62553874b0 XMM07=00007f62553874a8 00007f62553874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f6255212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=19a3966c54b34c00 RBX=ffffffff81968308 RCX=19a3966c54b34c00 RDX=0000000000000001
RSI=ffffffff8d9b4408 RDI=ffffffff8be32600 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa34230 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b7893f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=fffffffffffffffd CR3=000000012346e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f6255212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
