last executing test programs:

25m21.897158931s ago: executing program 32 (id=137):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000735500000000000000000000feff000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000005b00"/144]}, 0x108)

24m45.075374685s ago: executing program 33 (id=584):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0)

24m16.093247717s ago: executing program 34 (id=928):
add_key(&(0x7f0000000380)='rxrpc\x00', 0x0, &(0x7f00000003c0)="01000000020000a9584109b35ae059630b008145f94cd9776ef916feff", 0xa918, 0xffffffffffffffff)

23m30.284877313s ago: executing program 35 (id=1407):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000036c0)={0x2, 0xce}, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, 0x0, &(0x7f0000003740))

21m0.634918539s ago: executing program 36 (id=3531):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x3, 0x0, 0x0)
bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
getsockopt$inet6_int(r3, 0x29, 0x2, 0x0, &(0x7f00000000c0))

20m48.671815312s ago: executing program 37 (id=3670):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001200010000000000000000000a00000000004e22fcffffff000000007ecd00"/56, @ANYRES32=0x0, @ANYBLOB="010000000000000000000000002000000800030006064d"], 0x54}}, 0x20000080)

20m15.178995592s ago: executing program 38 (id=4167):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8)
open_by_handle_at(r0, &(0x7f0000000040)=@ocfs2={0xc, 0x1, {0x101, 0x2, 0x5}}, 0x472500)

19m54.469698375s ago: executing program 39 (id=4454):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
sendmmsg$inet(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x85)

18m49.896621733s ago: executing program 40 (id=5445):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100090a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x200c405a)

17m21.784117329s ago: executing program 41 (id=6402):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
symlink(0x0, &(0x7f000001fb00)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15)
socket$netlink(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x200800, 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x23}], 0x2)
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x402, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=cp861,iocharset=cp932,errors=continue,errors=remount-ro,errors=continue,discard,allow_utime=00000000000000000000010,discard,allow_utime=00000000000000000000004,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00'], 0x1, 0x151e, &(0x7f0000007640)="$eJzs3AucT9XaOPDnWWvtMSbp1ySXYa31bH7JZZkkySVJLkmSJEluCUmTHElIDLklDUlILkNyGUJymZg07ve7JCRJkyQhuSXr/5ni73TqvOec9/Qe7+ed5/v57I/1zN7P2s/+PbNnXzDfdh1Wq0nt6o2ICP4t+OsfyQAQCwCDAOAaAAgAoHx8+fjs9bklJv97O2F/rofSrnQF7Eri/uds3P+cjfufs3H/czbuf87G/c/ZuP85G/efsZxsy4xC1/KScxd+/5+T8fX//4aLJx98ua7M9d0AYv7ZPO5/zsb9/z8r+Gc24v7nbNz/nCr2ShfA/hfg8z8nyPV313D/czbuP2M52ZV+/3ylF4jk7M/gSn//McYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLGc74yxQAXBpf6boYY4wxxhhjjDH25/G5rnQFjDHGGGOMMcYY+5+HIECCggBiIBfEQm6IAwEAV0NeuAYicC3Ew3WQD66H/FAACkIhSIDCUAQ0GIgBghCKQjGIwg1QHG6EElASSkFpcFAGEuEmKAs3Qzm4BcrDrVABboOKUAkqQxW4HarCHVAN7oTqcBfUgJpQC2rD3VAH7oG6cC/Ug/ugPtwPDeABaAgPQiN4CBrDw9AEHoGm8Cg0g+bQAlpCq/9W/gvQE16EXtAbkqEP9IWXoB/0hwEwEAbByzAYXoEh8CqkwFAYBq/BcHgdRsAbMBJGwWh4E8bAWzAWxsF4mACpMBEmwdswGd6BKTAVpsF0SIMZMBPehVkwG+bAezAX3od5MB8WwEJIhw9gESyGDPgQlsBHkAlLYRkshxWwElbBalgDa2EdrIcNsBE2wWbYAlthG2yHHfAx7IRPYBd8CrthD+yFz2AffP4v5p/+m/xuCAgoUKBChTEYg7EYi3EYh3kwD+bFvBjBCMZjPObDfJgf82NBLIgJmIBFsAgaNEhIWBSLYhSjWByLYwksgaWwFDp0mIiJWBZvxnJYDstjeayAFbAiVsJKWAWrYFWsitWwGlbH6lgDa2AtrIV3493YB+tiXayH9bA+1r/0egobYSNsjI2xCTbBptgUm2EzbIEtsBW2wtbYGttgG2yH7bA9tscO2AGTMAk7YkfshJ2wM3bGLtgFu2JX7IbdsXvWC7kAX8QXsTfWEH2wL/bFfpiSawAOxIH4Mg7GV/AVfBVTcCgOw9fwNXwdR+ApHImjcDSOxqriLRyL45DEBEzFVJyEk3AyTsYpOBWn4nRMwxk4E2fiLJyNs/E9nIvv4/s4H+fjQkzHdFyEizEDM3AJnsZMXIrLcDmuwJW4AlfjGlyN63A9rsONuBE342bciltxO27Hj/Fj/AQVAH6Ke3APpuA+3If7cT8ewAN4EA9iFmbhITyEh/EwHsEjeBSP4jE8jifwOJ7Ek3gKT+MZPIPn8Byex+cSvm78Scm1KSCyKaFEjIgRsSJWxIk4kUfkEXlFXhEREREv4kU+kU/kF/lFQVFQJIgEUUQUEUYYQSKMAQARFVFRXBQXJUQJUUqUEk44kSgSRVlRVpQT5UR5cauoIG4TFUUl0dZVEVVEVdHOVRN3iuqiuqghaopaoraoLeqIOqKuqCvqiXqivqgvGogHREPRBwfgQyK7M03EUGwqhmEz0VzIiz/BWosR2Ea0Fe3EE2IUjsQOorVLEk+LjmIsdhJ/EePwWdFFTMCu4nnRTXQXPcQLoqdo43qJ3mIK9hF9xXTsJ/qLAWKgmIU1xXs4N3ct8apIEUPFMPGaWIivixHiDTFSjBKjxZtijHhLjBXjxHgxQaSKiWKSeFtMFu+IKWKqmCamizQxQ8wU74pZYraYI94Tc8X7Yp6YLxaIhSJdfCAWicUiQ3woloiPRKZYKpaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie1ih/hY7BSfiF3iU7Fb7BF7xWdin/hc7BdfiAPiS3FQfCWyxNfikPhGHBbfiiPiO3FUfC+OiePihPhBnBQ/ilPitDgjzopz4idxXvwsLggvQKIUUkolAxkjc8lYmVvGyatkHhlc/HSvlfHyOplPXi/zywKyoCwkE2RhWURqaaSVJENZVBaTUXmDLC5vlCVkSVlKlpZOlpGJ8iZZVt4sy8lbZHl5q6wgb5MVZSVZWVaRt8uq8g4JkV/3UUPWlLVkbXm3TIZ7ZF15r6wn75P15f2ygXxANpQPykbyIdlYPiybyEdkU/mobCabyxaypWwlH5Ot5eOyjWwr28knZHv5pOwgn5JJ8mnZUfqL3yLPyi7yOdlVPi+7ye6yh/xZXpBe9pK9JfQB2Ve+JPvJ/nKAHCgHyZflYPmKHCJflSlyqBwmX5PD5etyhHxDjpSj5Gj5phwj35Jj5Tg5Xk6QqXKinCTflpPlO3KKnCqnyekyTc6QAy7ONEfKf5j/9h/kD/ll75vlFrlVbsOLrZCfyF1yl9wtd8u9cq/cJ/fJ/XK/PCAPyIPyoMySWfKQPCQPy8PyiDwij8qj8pg8Ls/KH+RJ+aM8JU/L0/KsPCfPyfMXPwNQqISSSqlAxahcKlblVnHqKpVHXa3yqmtURF2r4tV1Kp+6XuVXBVRBVUglqMKqiNLKKKtIhaqoKqai6oZLVapSqrRyqoxKVDf9K/mquLpRlVAlf5N/qb7kv1NfK9VKtVatVRvVRrVT7VR71V51UB1UkkpSHVVH1Ul1Up1VZ9VFdVFdVVfVTXVTPVQP1VP1VL1UL5WsklVf9ZLqp/qrAWqgGqReVoPVYDVEDVEpKkUNU8PUcDVcjVAj1Eg1Uo1Wo9UYNUaNVWPVeDVepapUNUlNUpPVZDVFTVHT1DSVptLUTDVTzVKz1Bw1R81Vc9U8NU8tUAtUukpXi9QilaEy1BK1RGWqpWqpWq6Wq5VqpVqtVqu1aq1ar9arjWqjylRb1Ba1TW1TO9QOtVPtVLvULrVb7VZ71V61T+1T+9V+dUAdUAfVQZWlstQhdUgdVofVEXVEHVVH1TF1TJ1QJ9RJdVKdUqfUGXVGnVPn1Hl1Xl1QF7Jv+wIRiEAF2VfamCA2iA3igrggT5AnyBvkDSJBJIgP4oN8wfVB/qBAUDAoFCQEhYMigQ5MYANxsenR4IageHBjUCIoGZQKSgcuKBMkBjcFZYObg3LBLUH54NagQnBbUDGoFFQOqgS3B1WDO4JqwZ1B9eCuoEZQM6gV1A7uDuoE9wR1g3uDesF9Qf3g/qBB8EDQMHgwaBQ8FDQOHg6aBI8ETYNHg2ZB86BF0DJo9afO7/2pAo+7zbq3TtZ9dF/9ku6n++sBeqAepF/Wg/Ureoh+VafooXqYfk0P16/rEfoNPVKP0qP1m3qMfkuP1eP0eD1Bp+qJepJ+W0/W7+gpeqqepqfrND1Dz9Tv6ll6tp6j39Nz9ft6np6vF+iFOl1/oBfpxTpDf6iX6I90pl6ql+nleoVeqVfp1XqNXqvX6fV6g96oN+nNeoveqrfp7XqH/ljv1J/oXfpTvVvv0Xv1Z3qf/lzv11/oA/pLfVB/pbP01/qQ/kYf1t/qI/o7fVR/r4/p4/qE/kGf1D/qU/q0PqPP6nP6J31e/6wvaJ99c599eTfKKBNjYkysiTVxJs7kMXlMXpPXREzExJt4k8/kM/lNflPQFDQJJsEUMUVMNjJkipqiJmqiprgpbkqYEqaUKWWccSbRJJqypqwpZ8qZ8qa8qWAqmIqmoqlsKpvbze3mDnOHudPcae4yd5mapqapbWqbOqaOqWvqmnqmnqlv6psGpoFpaBqaRqaRaWwamyamiWlqmppmpplpYVqYVqaVaW1amzamjWln2pn2pr3pYDqYJJNkOpqOppPpZDqbzqaL6WK6mq6mm+lmepgepqfpaXqZXibZJJu+pq/pZ/qZAWaAGWQGmcFmsBlihpgUk2KGmWFmuBluRpgRZqQZZUZnnz7mLTPWjDPjzQSTalLNJDPJTDaTzRQzxUwz00yaSTMzzUwzy8wyc8wcM9fMNfPMPLPALDDpJt0sMotMhskwS8wSk2kyzTKzzKwwK8wqs8qsMWvMOrPObIANZpPZZLaYLWab2WZ2mB1mp9lpdpldZrfZbfaavWaf2Wf2m/3mgDlgDpqDJstkmUPmkDlsDpsj5og5ao6aY+aYOWFOmJPmpDllTpkz5ow5ZwpcvF56E2tz2zh7lc1jr7Z57TX2b+OCtpBNsIVtEattflvgN7Gx1pawJW0pW9o6W8Ym2pt+F1e0lWxlW8XebqvaO2y138V17D22rr3X1rP32dr27t/E9e39toF9xDZEBLDNbWPb0jaxj9im9lHbzDa3LWxL294+aTvYp2ySfdp2tM/8Ll5kF9s1dq1dZ9fb3XaPPWPP2sP2W3vO/mR72d52kH3ZDrav2CH2VZtih/4uHm3ftGPsW3asHWfH2wm/i6fZ6TbNzrAz7bt2lp39uzjdfmDn2gw7z863C+zCX+LsmjLsh3aJ/chm2gCW2eV2hV1pV9nV/7/W5Xaj3WQ32132U7vNbrc77Md256UbYbvH7rWf2X32c3vIfmMP2C/tQXvEZtmvf4mzj++I/c4etd/bY/a4PWF/sCftj+pSdvax/2B/thest0BIQJIUBRRDuSiWclMcXUV56GrKS9dQhK6leLqO8tH1lJ8KUEEqRAlUmIqQJkOWiEIqSsUoSjfQpfJKUWlyVIYS6SYqSzdTObqFytOtVIFuo4pUiSpTFbqdqtIdVI3upOp0F9WgmlSLatPdVIfuobp0L9WD+6g+3U8N6AFqSA9SI3qIGtPD1IQeoab0KDWj5tSCWlIreoxa0+PUhtpSO3qC2tOT1IGeoiR6mjrSM9SJ/kKd6VnqQs9RV3qeulF36kEvUE96kXpRb0qmPtSXXqJ+1J8G0EAaRC/TYHqFhtCrlEJDaRi9RsPpdRpBb9BIGkWj6U0aQ2/RWBpH42kCpdJEmkRv02R6h6bQVJpG0ymNZtBMepdm0WyaQ+/RXHqf5tF8WkALKZ0+oEW0mDLoQ1pCH1EmLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nXbQx7STPqFd9Cntpj20lz6jffQ57acv6AB9SQfpK8qir+kQfUOH6Vs6Qt/53vQ9HaPjdIJ+oJP0I52i03SGztI5+onO0890gTxBiKEIZajCIIwJc4WxYe4wLrwqzBNeHeYNrwkj4bVhfHhdmC+8PswfFggLhoXChLBwWCTUoQltSGEYFg2LhdHwhrB4eGNYIiwZlgpLhy4sEyaGN4Vlw5vDcuEtYfnw1rBCeFtYMawUPnJflfD2sGp4R1gtvDOsHt4V1ghrhrXC2uHdYZ3wnrBueG9YL7wvLBfeHzYIHwgbhg+GjcKHwsbhw2GT8JGwafho2CxsHrYIW4atwsfC1uHjYZuwbdgufCJsHz4ZdgifCpPCp8OO4TO/rL9/8d9fnxz2CfuGL4Uvhd7fKxdEF0bTox9EF0UXRzOiH0aXRD+KZkaXRpdFl0dXRFdGV0VXR9dE10bXRddHN0Q3RjdFN0e9r50LHDrhpFMucDEul4t1uV2cu8rlcVe7vO4aF3HXunh3ncvnrnf5XQFX0BVyCa6wK+K0M846cqEr6oq5qLvBFXc3uhKupCvlSjvnyrhE19K1cq1ca/e4a+PaunbuCfeEe9I96Z5yT7mnXUf3jOvk/uI6u2ddF/ece84977q57q6He8H1dBPz/npOJru+rq/r5/q5AW6AG+QGucFusBvihrgUl+KGuWFuuBvuRrgRbqQb6Ua70W6MG+PGurFuvBvvUl2qm+QmucluspviprhpbppLc2luppvpZrlZrursX/cyz81zC9wCl+7S3SKXfc+Y4Za4JS7TZbplbplb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+F2uJ1up9vldrnd/ppfJ3X73H633x1wB9xB95XLcl+7Q+4bd9h9646479xR97075o67E+4Hd9L96E650+6MO+vOuZ/cefezu+C8S41MjEyKvB2ZHHknMiUyNTItMj2SFpkRmRl5NzIrMjsyJ/JeZG7k/ci8yPzIgsjCSHrkg8iiyOJIRuTDyJLIR5HMyNLIssjyyIrIyoj3hbeFvqgv5qP+Bl/c3+hL+JK+lC/tnS/jE/1Nvqy/2Zfzt/jy/lZfwd/mK/pKvrJ/1DfzzX0L39K38o/51v5x38a39e38E769f9J38E/5JP+07+if8Z38X3xn/6zv4p/zXf3zvpvv7nv4F3xP/6Lv5Xv7ZN/H9/Uv+X6+vx/gB/pB/mU/2L/ih/hXfYof6of51/xw/7of4d/wI/0oPzrmTT/m0iMyTPCpfqKf5N/2k/07cKef6qf56T7Nz/Az/bt+lp/t5/j3/Fz/vp/n5/sFfqFP9x/4RX6xz/Af+iX+I5/pl156qexX+dV+jV/r1/n1foPf6Df5zX6L3+q3+e1+h//Y7/Sf+F3+U7/b7/F7/Wd+n//c7/df+AP+S3/Qf+Wz/Nf+kP/GH/bf+iP+O3/Uf++P+eP+hP/Bn/Q/+lP+tD/jz/pz/id/3v/sL/D/WWOMMcYY+6dMvDwUv13z6+v8Pn+QI/5q474AcPX2Qll/vT77jnJD/l/H/UVC+wgAPN2760OXlho1kpOTL26bKSEoNh/g0t8EZYuBy/FSaAdPQhK0hbJ/WH9/0f0c/YP5o7cCxP1VTixcji/P/wUAJv/B/I89MXpRhfBM/H8x/3yAEsUu5+SGy/FSaPfL+5W2UO7v1F+g9T+oP/eXqQBt/ionD1yOL9efCI/DM5D0my0ZY4wxxhhjjLFf9ReVO196/rz0Lz7/6Pk8QV3OyQWX43/0fM4YY4wxxhhjjLEr79nuPZ56LCmpbed/fVDtv5X1Tw+awv/UzDz4w4H3AJe+ogDg35wQIHsg/5NHsfU/sq+Ui6fO365acdYH8L+jlX/G4Ar/YGKMMcYYY4z96S7f9P/26+pKFcQYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjOVA/4lfJ3alj5ExxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhi70v5fAAAA//85evzE")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
pwritev2(r1, &(0x7f0000000540)=[{&(0x7f0000000240)="1f", 0x1}], 0x1, 0x0, 0x3, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40)
r2 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40)
socket$nl_generic(0x10, 0x3, 0x10)
pwrite64(r2, &(0x7f0000000080)="16", 0xff8d, 0x8000c5d)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28)

17m12.960457475s ago: executing program 42 (id=6486):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x405c5504, 0x0)

14m30.010659546s ago: executing program 43 (id=8658):
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x18, 0x4, 0x0, 0x0, 0x1}, 0x48)

13m24.566060713s ago: executing program 44 (id=9504):
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x80800)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000000c0)={0x0, 0x0, 0x0})

13m0.739402827s ago: executing program 45 (id=9806):
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e22, @empty}})
sendmmsg$inet(r0, &(0x7f0000000d40)=[{{&(0x7f00000001c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000005c0)="1c1a09536a156685513fa2c3a7eeea449ba1012fccbe6cccab5448dd1f84c5d668103fbc3ad936efe042fd6ad257c3407e2e715b195f4d3e5639f7db1367d8b8fe76aca6371796bf66624ab8421b4bc48cc01e3ab7e8f41a58ba80c0f603557ca42cbf56a03d854920f24e402261ec2ffa5197ac716503710b", 0x79}], 0x1, &(0x7f0000000680)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x58, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0xc8, 0x0, 0x4, [0xffff8001, 0x80000000, 0x1, 0xf1bc]}, @rr={0x7, 0xf, 0xa3, [@multicast2, @rand_addr=0x64010101, @multicast1]}, @timestamp={0x44, 0x24, 0x70, 0x0, 0xf, [0x3ff, 0xfffffffe, 0x5, 0x3, 0x783, 0x8001, 0x4f, 0x1]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x2e, 0x3, 0x7, [{@broadcast, 0x80000000}, {@multicast1, 0xa}]}, @end, @rr={0x7, 0xf, 0xe7, [@remote, @broadcast, @local]}, @ssrr={0x89, 0x7, 0x61, [@multicast2]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8b2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7e51}}], 0x158}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000800)="43066483e0447a409414f2aa8c9733747f207feda9e1953c90c10c58edc07073855df43314c82961ed11cf81e4a935bebb239d588746f67baa40cd47b6eb6f9cc02328d9ea0cdbcf232530ea1eb7db9029c642ff73fc3d3800e2d1f528fd6b6e42945a200fa5680d3a804026abe2f9f1f9a64905e4a597e7bd0dfb7a3d4b7ddd73985ae7a872087e3a176cae54a0acc7e847a8c475726ecfc2a11ffdc4c77db6189b32476862dfa5e0c657ad1fb96f0279b4fdcfed7a6d86e2b17363c4c1792884c256db60d49e0d94b1afc8044b5c1e633dac184ea30a847646763b418c2aa4bd6730bb2919fefb45cbc371d8d07d3c", 0xf0}, {&(0x7f0000000900)="c45694950daa5ad1a7fe", 0xa}, {&(0x7f0000000940)="38d64dfc5bd5225c18da944b3abc53b0f272d223", 0x14}, {&(0x7f0000000980)="cf897133777062ff44b43c5b592498c2d73afb94631c2e3f9ee5e1775380521f6258c924365a9da7ab6b615ab4ee47ad58c56383e9937b782fbbfbda10cd0565964fe31b343f9b5c075080678084bc1d3086400532e157f8bc05ef05bf2481b00cfb1a2eb035b8afdf8a6acf0251630cfb7b6aafd1865800487649f27bcb8e77d440777d12967113382ec0bc0427e3bc1feb36407ec65276e6f0e499614c1dc2de76b2c36615c6c0a0358703736ef2ec0df37b27521ab27a1e30add2699f1fc22169f519cbb9074eb984dc95e2edd0a9d0545d81631ce29e6f3aace6df38ded34242e46402d0d03aa65d72010fd71f", 0xef}, {&(0x7f0000000a80)="1899b7c1c39ba863117a84d5db0cf12f6779c471084949719a5c6ee9324cfb2d84773fbde3c1b54895e7fac5087510", 0x2f}], 0x5, &(0x7f0000000b40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80000000}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0x4b, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @multicast2]}, @rr={0x7, 0x17, 0x3c, [@rand_addr=0x64010100, @loopback, @dev={0xac, 0x14, 0x14, 0x3e}, @private=0xa010100, @multicast2]}, @cipso={0x86, 0x2d, 0x0, [{0x1, 0xa, "c2564947deb63b49"}, {0x5, 0x3, "9e"}, {0x2, 0x8, "70619cca7201"}, {0x2, 0xb, "1bbc02bd2c697c32c1"}, {0x5, 0x7, "daaa1beff6"}]}, @cipso={0x86, 0x21, 0x0, [{0x1, 0x12, "39d6a46d6b65ce36012ca00b555b9f6c"}, {0x0, 0x9, "b70b6cf44f4117"}]}, @timestamp_addr={0x44, 0x2c, 0x4b, 0x1, 0x8, [{@multicast1, 0x4}, {@multicast1, 0x1}, {@multicast1, 0x8001}, {@loopback, 0x4}, {@broadcast, 0x3ff}]}, @rr={0x7, 0xb, 0x48, [@loopback, @multicast2]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0x35, [@empty, @remote, @broadcast, @broadcast]}, @timestamp={0x44, 0xc, 0xd5, 0x0, 0x4, [0x100, 0x7ff]}, @generic={0x89, 0x11, "ce6cdeb9ff0acbb7c418832891a823"}, @rr={0x7, 0xb, 0xb2, [@loopback, @multicast1]}]}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0xd8, [@private=0xa010102]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x188}}], 0x2, 0x4004805)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000d00)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x40000000000007c, 0x2000c044)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff}, 0x106, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r9, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118)
write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r9, 0x2}}, 0x18)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}}, 0x0)
write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc)
splice(r1, 0x0, r3, 0x0, 0x714f, 0x0)

11m39.643487039s ago: executing program 46 (id=11015):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000100)={[{@compress_force}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@ssd}, {@noenospc_debug}]}, 0x1, 0x559d, &(0x7f0000005680)="$eJzs3X1sVWcdB/BzeynlJaFlyjLUhfkPThCpmFiEoEVgAoPRgSbDwCgO2BAGhQRhY9OOOZ0jk4Y5xoovDKQCxq6+rJiYIbqIcU4mi8OGEXnJIuICK4yoJNOZ3nufy73n0vYO5zq3z4e05z73d57nPPfk/HG/lz7nRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABBF0cHlC/627gfLv/nQdSenbLz/zAMnap57fNP4u+fsHnX4gVVXtp1uaip99fmzNyy67+GqoSf2zD8URYlUv0Sm/7xPTZ65aNa86X3CgLU3prcVFZ0dMt31WLrRO+/Jjn75P/OjKCqNDZDMbCf1z2kn4geIVhYO2KXtVWNWDdw4cdrmssmDFibrGgtfOh369PQEekrmunrx4rVUnfpdEtsj28659BJ5l2i6f/yCe1NeBADwulTWpDbZt6OZt7jZdn28HmtXx9oNsXZ4h9CQ27gc6XF7dzbPa+L1HppndToqlHU6z1g9c/6z7Zp4/1g7FjVexzzzd81Emj6dzbMuVu+peQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8ldx9/JanSzb96H1L149MHh887BdfbdryvUnt5VO+tm9D2+9bn3tPU1Ppq8+fvWHRfQ9XDT2xZ/6hKKpI9Uukuyfm7mjd8LMVU1b/fM6jzefee8euZGbcsO2Vs3PUFh58vDyKPp9TeTEMe2pAFNXkF1LN6NHCwuLUgymhAAAAwNvJ4NTvkmw7HQdL89qJVJpMpP4F6bC4vWrMqoEbJ07bXDZ50MJkXePlj1fTyXjVlxwv2664+JPICcYh/sbHu1gPu64sGKdr8RHjeX7U0AuHj3x9+Ya1jf1P7u87MDnpV1+uHXzFnNGvXDt2zG1/fWRHQf6v6Dr/hzMn/wMAAPDfkP/j43Stu/w/7Mj9Z+469dN1tZ/ZNvf4+G/UDnhX5Zo/NX/4c+uHTZ3Y69iVWwry/zV5hyzI/2HGIf+XRJeX/wEAAOCt7H+d/6sLxulad/l/2ZoRf592YdbEJ8Zd+OGZO4f88uCRaG/9iC+03P6B/bP7DWj4SUH+rywu//fKnXZ48pkw4SXlUVRZ/EkFAAAA8oT/d7/40ULI6+lPDuJ5fc75g5NuLn3w7EdmXzt029Ehu9rP/2PJ8k0XRjfPGF716acrNhTk/+ri8n/pm/NyAQAAgCI8tfgTN+2Mpk/6UPU9h/cv2P5I/bK1K5c2liWm/ntl2/X/au5dkP9risv/ZT3zcgAAAIBLOPSlbbtfm7msdXhz2fmtf3jtz49fPXz1gabKoyt/O7B0RWvt4oL8X1tc/u+X2WZWPqQ77Q9/hfBQeRT16XhQly78Jmr4ZLYAAAAAvEFCTv/nsbaRO68r+/VT339586zvfHvQ3m/NONj43Qn9b5n44IEZB56sLcj/dV3f/z/c6SCs/8+7/1/B+v+cQvquf2PdGAAAAIB3osL1/OH2+OlvLujs+/eLXf9/4xdbXzp++/yvtL97yE3LXr7tils/Nv7UH6ffmdw57q6SqVNfOl2Q/+uLy//J3O0b+f1/AAAAcBn+377/b3bBOF3r7v7/Mx+752j7X14YN2Jm49pFJ8dv/PG8Lc88trvq6nMLbu77wWeX7i3I/w3F5f+w7Z/78vaF83NveRRd1fEgczfBXWG6S2KFltKcQvrEx3rMCj0yhZaynEJKXazHqPIoen/Hg/pYYWAoNMQK7QMyha2xwrOhkLkesoXmWGFfuNI2DchMN17YEwqZBRYtYQVF/+ySiFiPVzrr0VG4ZI8XsgcHAAB4RwnhOZNlS/ObUTzKtiS626FfdzuUdLdDsrsdesV2iO/Y2fNRbX4hPH9+zRO/q/xoyWcP3XrHhOEjF667t2HsgeTcCdc/uaPvuRWnR68uyP9bi8v/4VT0Tm86W/8fhfX/me81zK7/rw2FilihJRRq4ncMqAnHSIfd9eEYFTWZHu1XZQsAAADwthY+F0j28DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgP+zde5xU1Z0g8NNNP2homhbjK2JsdW1Fh6ZBUT/BB2omGmBNo+zMuPhohEaRVhBhIq5RULObxMEoKlFnRmEVRlZx8AVkNQE1ooloNI5mRh1DMGrcjR/FiH6yxrif7lunqLrVZRcCSjvf7x9dp+p3nrceXefeW+cCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/Max/9MYj/umiJ0eP2jBvwPJXDv/vH9YfumzRO//rT89ed9ve8763ftWSJZV/en7jSZO/c8PhjRtWTnghhJbOcmVJ8bLTF6/4waoLvvGtB0+76e5395y9tCpTbyYe+nb8Kc/cuTK2+tt+IawsC6EiHRhcmwQqM/drY30Da0PYKWwOZEu09UlKpBsOj9WEsDBsDmSr+lFNCLU5gXG/fGT1vI7E9TUh7B9CqE638e/VSRs16UBjVRLokw5Mq0gCH3ycyAZWlScB2GrxzZB90S9vyc9Q33W5Iq+/ym3Wsc9Xeni9YqK+eL63jt3OncpRlX6gZauetoLq2C4K3h5rvNt6wLutYDtf42nL/SKV+Yby8eZQdSif1DZ5wqz2mfGR8tDU1KtYTdvpeX5x4yUTtyTdY16HsQP12+R1+Pj5A+9c0Dhm15sf3jD59apnF2xtN4tt3u2tOmRecz3meYxG+jzpAW+/gm9JDb50hRBuP37T2799aez//dWDTw9+75tDzxrywitD627+7rR+f332/6m8ZerGgvl//SfP/+PLOd6W5+WOrX5Yl8zN4yO1MfF2XTI3BwAAgB6jJ+w1fWPEQW/Xrmt4eN+vr5h83qJ5r51+7p+rftp3wkEnnjL0+3fcOPW0gvl/Q2nH/+Mh/9rc0a4JYWRn4or+Ieze+XgSWBq7c1b/EPbpTLXkB45NBdaEsEdnYlC2qlSJ3rFEQyrwRl0mMDIVWBsDLanA4hi4JhW4MgaWpwITY2BNKnBcDIQp+eM4qC4zjpIDNTHQmmzE5fEshD/UxdZS2+qlbFUAAADbSGZ2WJl/N+dch63NEKeXy2u6yxDPwC6aoTpVQ3oGm51WFa2horsayrurITvuOZ88/IKay7qrueA0jLL8DO8deN/c1Q/8249vnHDYUwd92HrGy+tXPTp6U6+/e2fMjy8dN3/Y+IL5f/Mnz/+ru+hIWcHx/xDGdv6NucszkfZsvLUlLwMAAACwFSpeW3ryL+Z+VLbkZ+ds3P8vTxt3de8V++47YO3B9/2/hjcHHL9q/4L5/8jSzv+P+0R65WQO6+JuiKn9Q2jODyTVjigMJEe9+2YCAAAA0BNkj8dnj4VPydwmp2in59OF+Vu2MH888D+yy/yDx129rnn17adMGXHomjWbztj15WUbntpl/3deOPDk00+4f2rDPQXz/5bSzv/vk3+bdGJt7MV1/UPonRN4PPayI9CpIQbWH5MfyIx/bdwAV8WqMicmZKu6KpZojYHmVGBhsRLPZEvsnh/IPFnZxq/IjmNKpkROAAAAAD5zcXdAPC4fz/9/+tx+j/7jslsueXDJutD37OW/uOzo4QPnD+791rRnDnnkb989eWrB/L91y87/75wHF5ze3943hCEVIfRK/zBgXZ9kYcAYqC3LJH7cJ6mrV7qqy/uEMKJjYOmqNmTW/69IrzH4XE1SVQzsvu8dGxs7ErfXhDAkN/DC+EXDOxKzUoFs439VE8LeHaNNN76id9J4ZbrxG3uH8JWcQLaqib1D6GisKl3Vo9WZ6xikq1peHcLOOYFsVYdXhzA7ANBTxf+lk3IfvHD2xVMntLe3zdiOibgTvyZMntLe1jRxWvuk6iJ9mpTqc946RnMLx1TqpW9ezqxRdNeopv6lpLM/FGzObSuzI7/gzMHM/fhlqLJznMMq8+4ekh7ygfsVNhFyvkoVG3L5dh5yn9xKNj+JBfXH/FWhb+g968K2GU0XTZg5c8bQ5G+p2Yclf+NxpmRbDU1vqz5d9a2El0fR5bJSPu22asytZMjM86YPuXD2xYOnnDfh7Laz284/bPhhRxwx7NBDhw/pGFRz8rebkTZ2VXNqpB8vKnFY23CkX67IqeSz+NCQkJDoaYlVv9vj5aN3Wfq9FbcsnvHz9qPafv71nXces6Tqmy9suvSy/Z/+Hx8UzP+nf/L8P37qxA/+zPoMxY7/18fD/Mnjmw/zt8bAwlKP/9cXO5qfPTGgIRWYEwNzHOYHAADgiyHujox7M+NO6Ufm7/Yvd467b8z89Qc/ue65svV9Dv77D39fXnnZuP9yzAMNt333bwrm/3NK+/3/Nlr/P7t0/ahiy/wPiiWai63/n17mP7v+/5xi6/+nl/nPrv+/8HNY/39WNpDaJH+w/j8AAPBF8Nmt/9/t8v7pCwQUZOh2ef/0BQIKMnS7jH+pFwjY4vX/H2k4aORPVn/nN43LLpj2zn8bct/oAXs2/O6Rva6cNHXk6NEjBv9Lwfz/mtLm/xbuBwAAgB3HAROPfWrjpL2Pvfp/3rbTHj9p/fauh+3y/WVHts3ftH7i39z27jl/XTD/X1ja/P+zX/8vFDv/v6FYoKXYwoDW/wMAAKCHKrb+39Abv3X5q4uPu/+ey6eNam0dP/uKq/dbfUD1qeGl0fMb/mLGvR8VzP+Xlzb/j6ddlOfljr35sC5Z0y6k17R7uy77kwEAAADoGcpDU1NliXnzFkY99tO3+WJmKdBPSud68sH9nn/gqyNOnL+46urXynYb9vFT1888+Piv/fDVjXtdcse55+1XMP9fU9r8P+93GY+fP/DOBY1jdv3w5oc3TH696tkFm4//AwAAANtPqfslAAAAAAAAAAAAAACAz98JD//k6rcnLvnanIW/3PWnvcY+u3zDrDlNs2uvf/WH1/7qiDsfHlfw+/8wtrNcsd//x+v+xd8XfCkvd2y1+/X/MvfHjb57dueShevqQtgvNzD18qk7hcy1+Q/IDaw+fdBuHYnL0yUeeuW41zoSZ6YDJw4e8H5H4shUoDUukrhHOhCvqvh+v1QgLq/4XDoQt8fydKAqE/hev2QcZelt9WZtsq3K0tvqxdoQ+ucEsttqZW3SRll6gNenAtkBXpAOxAGelAmUp3t1d9+kVzFQG4ve2jfpFQAAO6z4LbAyTJ7S3tYcv8LH2y9X5N9GeUuWzS2stqzE5l/OLE1216im/qWke6W/i26+1nhlqO4YwtCCr6u5Wco6R7ltaulm032pyJC7W+2tvEi5tC3ddFXFR1STjKhp4rT2SZXdDvyQ7rMMq+g2y9CCyU5ulvLOTVpCLSX0pYQRlbhtSuhyvF8empp6pXJ9NQbrQ57uXhGl/l4/d52/Yq+C3DxPvtn+1BP//PzKfR7/89Nnf/BXk7596byzznj3yHOq/+E/lz39XwfuXDD/ry9t/l+dO673MxcDmBOvrDeifwitJY4IAAAAvvjOOf+V+d999No31rc0vjZtyLWr/3X2jRdX1C298i9ffOhvN42/+sytjb/58zv2eXjyhGe+dO4hy054fZ+DL2s88637/mLeuAev6nvLD+ff8YOC+X9DafP/uAcrcyg42duxJl7//4r+IXReWr8+CSyNwz2rfwj7dKZaYonkgvqjYonmJLA07jAZFEu0tuRX1TsGlqcCb9RlAmtSgbUxkNlLcUfI7Mq5ti6E4Z2psfklpscS9anAN2OgIRVoioHmVKBfDIxMBX7fLxNoSQWejIEwJX9b3dcvs60AAAC2RGaeVZl/N6TnecsrustQ1l2GPt1lKO8uQ3V3GYqNIt6/N2aoTJ28UpaTqTJda02qloIM8WL4W9yvggzhmfyc6YIFTcfzD7LnG5TlZ3jg5K/ec9WCyYPKf/XR2qWt790/ccWts49eec5Df/fEpH0X3XX93gXz/+bS5v998m+T1tfG+f/m6/8lgcdj966Lp443xMD6Y/IDmR0Da+Nk96psVS2ZEplJ+1WxxMgYaEgFpsfAyFSgdWwmsHC3/EBmpp1t/Ips41MyJXICAAAA8JmLOwjibpo4///jsmePeqxi0V3/+ur4u+6d89Y99/70nntuvXf07Zu+/twVF7970UcF8/+Rpc3/Y3t9cxu7Mvbmt/1CWFm2uTfZwODaJBD3Y9TGn8cPrA1hp5wdHNkSbX2SElWphsNjNckv1KvSVf2oJlljIN4f98tHVs/rSFxfE8L+OXtfsm38e3XSRk060FiVBPqkA9MqkkDc85MNrCpPArDVsnsF4wsqc6pLVn3X5Yq8/r4o1wRND69gH2gX+br6zdX2Up1+ILNPNWvLnraC6tguCt4ea7zbeuK7rd67LfeLVOYbysebQ9WhfFLb5Amz2mfGR3J/yVpgOz3Pub9SLSW9DV6Hcz59b7tXne5Ac+rjo7nrcl2/DstidY+fP/DOBY1jdr354Q2TX696dkHJ3Sgi/lD4maoB9bmbd3urDpnXXI/7PGnxedIT/w00eNpCCBsuPeG6kVXTr1g5+pAj93rttFOqZ7437+/vf+mBd/f9xxUTh31tQMH8v6W0+X9F6rbTH+PGvLB/CAfmbNx1cfMf3z/5HMwJJJ+SOxcGkkPur9YV/eQEAACAbS27uyO7v2BK5jY5ITw9Ty7M37KF+eP+ipFd5i+13z8adMpe9+9297hrTz3qpn/+zdh+G8e/uOSYFa1HNS49+mf/6cyaeQXz/9ZPnv/3TnXT8X/H/9lOHP/v0o6+K7p3+oE5W7UruqA6tgvH/7u0o7/bHP/vkuP/jv93xfH/bjj+36Ud/Wkr+JY03ZeuEMKwMWcMrr1r8BPvD1z96yeemvJvc1sn3PONq27Z8+Nv1y9eUL9r34L5//TS5v/W/+t60b7s+n+txdb/m15s/b851v8DAAC2qyILzaXneQWr9xVkSK/eV5Ch2wUCu11i0Pp/W7z+32NHHTl++ejFv16z95gDLus7d+6puzx504stM9+vue2D93f7xYGjCub/c0qb/8eXQ9/c1nvK+n8NY4tUdU0MTLcwIAAAADuiYjsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HztfsN1449prj7pN8dfWjP6+w+tO6D6mldOvXTZhFsnfeX28wfNWrFkSeWfnt940uTv3HB444aVE14IYUpnubKkeNnpi1f8YNUF3/jWg6fddPe7e85eWp2ptzJzu2de7tjqh3UhLMx5pDYm3q7ruLM5MG703bMrOhLr6kLYLzcw9fKpO3UkFteFcEBuYPXpg3brSFyeLvHQK8e91pE4Mx04cfCA9zsSR2YCZenu/kO/pLtl6e7O6xdC/5xAtrvn9suvKtvGCZlAebqNf6pN2oiB2lj0xtqkjRhojyWm9A5hSEUIvdJV/aw6qapXuqr/XZ1U1Std1WXVIYwIIVSkq/p1VVJVRXrkz1QlVcXA7vvesbGxI7GoKoQhuYEXxi8a3pGYkQpkGz+lKoS9O14y6cbvq0war0w3fkNlCF8JIVSlS2yqSEpUpUtsqAhh55zA5o1YEcLswBdD/PSZlPvghbMvnjqhvb1txnZMVGXaqgmTp7S3NU2c1j6pOtWnYspy0h/P/fRjf3njJRM7bu8a1dS/lHRFplxlZ5eHVebdPWRH733sV5/cSjY/HwX1x/xVoW/oPevCthlNF02YOXPG0ORvqdmHJX97ZaLJthraU7ZVY24lQ2aeN33IhbMvHjzlvAlnt53ddv5hww874ohhhx46fEjHoJqTv9tipIs++5F+uSKnks/i/S8hIdHTEuV5n27NO/rneMEX/c0drQzVnR/QBdOK3CxlnaPcFoM+9lOO+NN8Tel2REMLJg4FWYZ1n+WQgsnE5iw1SZbOr3UFk8Pcmso7N2m8Xx6amnoV2w71+XdzN+9bW7F5X8xsulLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/ZwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IFjAQAAAABh/tZh9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwKAAD//y85Ijg=")
fallocate(0xffffffffffffffff, 0x0, 0x4, 0xfffffffffffffffd)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

10m57.725546887s ago: executing program 47 (id=11634):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x1, 0x5, @rand_addr=' \x01\x00', 0x8}, 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x1}, @in6={0xa, 0x4e24, 0x3b, @mcast1, 0x8}], 0x38)

10m46.854220762s ago: executing program 48 (id=11802):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r0, 0x84, 0x9, &(0x7f00000001c0)=""/4120, &(0x7f0000000000)=0x9b)

8m21.87017796s ago: executing program 49 (id=14252):
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0)
preadv(r0, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x3f, 0x0, 0x0)

8m3.430876111s ago: executing program 50 (id=14510):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x905, 0x0, 0x0, {0x0, 0x0, 0x4c, 0x0, 0x20081, 0x300}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x30}, 0x1, 0xffffa888}, 0x0)

7m46.211757435s ago: executing program 51 (id=14661):
syz_emit_ethernet(0xab, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c20000002059249b379086dd601081140075"], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="180000006a00db78"], 0x18}], 0x1}, 0x0)

6m37.566519809s ago: executing program 52 (id=15356):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x803, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0xe23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0xedcb, 0x10001, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}]}, 0x140}}, 0x844)

6m11.771267469s ago: executing program 53 (id=15569):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="540100001800010027bd7000fcdbdf251d01040008000500f9f8f5e11e0106000602f802ff71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9652575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bda693770338925f824bd246893d221a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b752e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8bbaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c03551cdd9226016700000000000000000000000000000015000300030000200503000054831bdbae1d82b306"], 0x154}, 0x1, 0x0, 0x0, 0x5b10df4d84c3f683}, 0x0)

5m41.88743764s ago: executing program 54 (id=15902):
syz_usb_connect$cdc_ecm(0x0, 0x67, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090255000101080000090400000002060000052406000005240000000d24320100000000000000000005241300"], 0x0)

4m37.914086736s ago: executing program 2 (id=16702):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x64, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x9}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x9}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x2}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x5}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x400c000}, 0x44)

4m37.9136107s ago: executing program 2 (id=16703):
r0 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0x541b, 0x0)

4m37.869493235s ago: executing program 2 (id=16704):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000003c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x3, 0x365}]})
close(0x3)

4m37.762490871s ago: executing program 2 (id=16705):
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x2a803)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000400)={0x2, 0x100004, 0x1})

4m37.762344524s ago: executing program 2 (id=16706):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0/file0\x00', 0x0, 0x10}, 0x14)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

4m36.864549046s ago: executing program 2 (id=16710):
r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101", @ANYBLOB="32b683adf11f83220156c564000400000000000089c5"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x448}}, 0x0, 0x0, 0x0}, 0x0)

4m20.802056457s ago: executing program 55 (id=16710):
r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101", @ANYBLOB="32b683adf11f83220156c564000400000000000089c5"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x448}}, 0x0, 0x0, 0x0}, 0x0)

3m56.655563674s ago: executing program 3 (id=17024):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000180)={'nat\x00', 0x2, [{}, {}]}, 0x48)

3m56.127777003s ago: executing program 3 (id=17026):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000003c0)=0x8, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000400)=0x2a12, 0x4)

3m56.036576501s ago: executing program 3 (id=17028):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0xe9fb82144ec686d2, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x40044103, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
ioctl$RTC_UIE_ON(r3, 0x7003)

3m55.081868586s ago: executing program 3 (id=17037):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

3m55.010275691s ago: executing program 3 (id=17039):
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0)
write$sndseq(r0, 0x0, 0x0)

3m54.950333034s ago: executing program 9 (id=17041):
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
syz_usb_connect$uac3(0x3, 0xab, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x582, 0xeb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0x1, 0xc0, 0x5, {0x8, 0xb, 0x0, 0x3, 0x1, 0x1, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xe, 0xa, 0x40000000}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0xf, 0x2, 0x1ee7, 0x0, 0xb, 0x1, 0x7}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x7, 0x5, 0x66}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x1, 0x6, 0x8, "fd"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x9, 0x10, 0x7, {0xa, 0x25, 0x25, 0x0, 0x7, 0x9f59}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x8, 0x5, 0x1, {0xa, 0x25, 0x25, 0xfffffff8, 0x8, 0x6}}}}}}}}]}}, 0x0)

3m54.637137584s ago: executing program 3 (id=17044):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40000000000000079a0fffd000000006200000000000000950074000000000002bf7ac06b0bba6dae5599772183b0be1ce6508a4bcdfe52782f28f91e7fdaa8e2e6dbedd2309cbbdb7835c610f677b40089f20c1250843791e0e134073a88cfcabe01ba5e03ab30"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21)

3m54.583776157s ago: executing program 56 (id=17044):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40000000000000079a0fffd000000006200000000000000950074000000000002bf7ac06b0bba6dae5599772183b0be1ce6508a4bcdfe52782f28f91e7fdaa8e2e6dbedd2309cbbdb7835c610f677b40089f20c1250843791e0e134073a88cfcabe01ba5e03ab30"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21)

3m53.518955661s ago: executing program 9 (id=17053):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe}, 0x1c)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="fa0e9000000020"], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = epoll_create(0x4)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
r3 = syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000004500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
fsync(r3)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000000)={0x3000001d})
socket$alg(0x26, 0x5, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff)

3m51.555660366s ago: executing program 9 (id=17058):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffec2, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x50}, 0x48)

3m51.39544613s ago: executing program 9 (id=17059):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@nombcache}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x44d, &(0x7f0000000340)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
r1 = fspick(r0, &(0x7f00000000c0)='.\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
statx(r2, &(0x7f0000000100)='./file0\x00', 0x800, 0x1, 0x0)
getdents64(r2, &(0x7f0000000400)=""/4096, 0x1000)

3m51.008530982s ago: executing program 9 (id=17061):
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000000)="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")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="680000000b06010200000000000000000000000005000100070000000900020073797a3100000000400007800c001a00"], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x80)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0)

3m50.469162426s ago: executing program 9 (id=17067):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x2, @private2, 0xfffffffc}, {0xa, 0x4e22, 0x0, @empty}, 0xc5, {[0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfffffff8]}}, 0x5c)

3m50.306484698s ago: executing program 57 (id=17067):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x2, @private2, 0xfffffffc}, {0xa, 0x4e22, 0x0, @empty}, 0xc5, {[0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfffffff8]}}, 0x5c)

3m23.44017854s ago: executing program 5 (id=17351):
syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00')
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r0, 0xffffffffffffffff, 0x0)

3m23.356871637s ago: executing program 5 (id=17352):
r0 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, &(0x7f0000000100))

3m23.356517004s ago: executing program 5 (id=17353):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000100)={[{@utf8no}, {@uni_xlateno}, {@utf8no}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@shortname_lower}, {@utf8no}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@utf8no}, {@uni_xlate}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@utf8no}, {@shortname_winnt}, {@shortname_mixed}]}, 0x2a, 0x34c, &(0x7f0000001240)="$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")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0)

3m23.186909155s ago: executing program 5 (id=17355):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(0x0, &(0x7f0000001740)='./file0\x00', 0x0, 0x80000, 0x0)

3m23.12291003s ago: executing program 5 (id=17356):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40049409, 0x0)

3m22.863525636s ago: executing program 5 (id=17357):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9e}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040800)

3m22.778818782s ago: executing program 58 (id=17357):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9e}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040800)

1m22.787402275s ago: executing program 1 (id=19335):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x34, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x881}, 0x40000)

1m22.734148977s ago: executing program 1 (id=19338):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
r7 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r7, 0x0, 0x0)

1m21.674811951s ago: executing program 1 (id=19351):
syz_mount_image$exfat(&(0x7f0000000700), &(0x7f00000001c0)='./file0\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x5, 0x1512, &(0x7f0000000740)="$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")
r0 = open(&(0x7f0000000100)='./file1\x00', 0x109042, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
fallocate(r0, 0x10, 0x100000, 0x9)

1m21.41677288s ago: executing program 1 (id=19358):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x880, &(0x7f00000005c0)=ANY=[@ANYBLOB='time_offset=0x0000000000000006,iocharset=iso8859-13,utf8,allow_utime=00000000000000000000003,discard,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d69736f383835392d372c6572726f72733d72656d6f756e742d726f2c646d61736b3d30303030303030303030303030303030303030303030302c616c6c6f775f7574696d653d30303030303030303030303030303030303030313337312c005d67be522c4eeab3afbfa43bbda48ee0a6d7e18a4e550bdf9e0bcbde43fae869be71181fad5ff81e5aa8c3f569597539170150666b645fa1a84ee198c78c3f620cb2562a161a2eca8f47"], 0x1, 0x1548, &(0x7f0000003300)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140))
rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00')
connect$unix(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)

1m21.302273337s ago: executing program 1 (id=19360):
r0 = socket$inet6(0xa, 0x5, 0x0)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c)
r1 = socket$inet6(0xa, 0x5, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000001340)=[{&(0x7f0000004940)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)

1m21.048581218s ago: executing program 1 (id=19365):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
unshare(0x28000600)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, 0x0, 0x4)
ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, 0x0)
ptrace(0x10, r0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x1)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(0xffffffffffffffff, 0x10040)
syz_emit_ethernet(0x3a, &(0x7f0000000300)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x25}}, {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x5}]}}}}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket(0x2b, 0x80801, 0x1)
ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x894b, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0)
openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r5, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
read$FUSE(r4, &(0x7f0000000880)={0x2020}, 0x2020)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r6, 0xffffffffffffffff, 0x0)
pread64(r4, &(0x7f0000000500)=""/210, 0xd2, 0x0)

1m20.978943251s ago: executing program 59 (id=19365):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
unshare(0x28000600)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, 0x0, 0x4)
ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, 0x0)
ptrace(0x10, r0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x1)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(0xffffffffffffffff, 0x10040)
syz_emit_ethernet(0x3a, &(0x7f0000000300)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x25}}, {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x5}]}}}}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket(0x2b, 0x80801, 0x1)
ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x894b, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0)
openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r5, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
read$FUSE(r4, &(0x7f0000000880)={0x2020}, 0x2020)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r6, 0xffffffffffffffff, 0x0)
pread64(r4, &(0x7f0000000500)=""/210, 0xd2, 0x0)

50.550840266s ago: executing program 6 (id=19804):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x29}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0)

50.486684879s ago: executing program 6 (id=19805):
r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

50.48649652s ago: executing program 6 (id=19806):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005ff80000008000000000000004a", @ANYRES32=0x0, @ANYBLOB="7f1500004a9d01001c0012800b00010067656e65766500000c000280060005004e2300000a0001"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20000840)

50.41166492s ago: executing program 6 (id=19807):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2010002, &(0x7f0000000140)={[{@bsdgroups}, {@usrquota}, {@noinit_itable}, {@resuid}, {@errors_remount}, {@bh}]}, 0x1, 0x558, &(0x7f0000001000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)

50.411202421s ago: executing program 6 (id=19808):
r0 = socket(0x1d, 0x2, 0x6)
bind$inet(r0, &(0x7f00000000c0)={0x1d, 0x4e23, @loopback}, 0x10)

50.068573941s ago: executing program 6 (id=19811):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmmsg(r0, &(0x7f0000002500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4092, 0xffc}, {&(0x7f0000001e40)=""/232, 0xe8}, {&(0x7f0000001700)=""/161, 0xa1}], 0x3}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000003340)=""/4085, 0xff5}, {&(0x7f0000000240)=""/175, 0xaf}, {&(0x7f0000001c00)=""/155, 0x9b}, {&(0x7f0000002e80)=""/246, 0xf6}, {&(0x7f0000001500)=""/245, 0xf5}, {&(0x7f0000001d40)=""/249, 0xf9}, {&(0x7f00000000c0)=""/82, 0x52}], 0x7}, 0x7f}], 0x4, 0x40012032, 0x0)

49.960263584s ago: executing program 60 (id=19811):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmmsg(r0, &(0x7f0000002500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4092, 0xffc}, {&(0x7f0000001e40)=""/232, 0xe8}, {&(0x7f0000001700)=""/161, 0xa1}], 0x3}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000003340)=""/4085, 0xff5}, {&(0x7f0000000240)=""/175, 0xaf}, {&(0x7f0000001c00)=""/155, 0x9b}, {&(0x7f0000002e80)=""/246, 0xf6}, {&(0x7f0000001500)=""/245, 0xf5}, {&(0x7f0000001d40)=""/249, 0xf9}, {&(0x7f00000000c0)=""/82, 0x52}], 0x7}, 0x7f}], 0x4, 0x40012032, 0x0)

8.536112391s ago: executing program 0 (id=20334):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000b0300000000000000000000030000000005000000010000001c0000000000000012000003"], 0x0, 0x56, 0x0, 0x1}, 0x28)

8.535905239s ago: executing program 0 (id=20335):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x6f6e}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44040}, 0x4000010)

8.535805941s ago: executing program 0 (id=20336):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r0, &(0x7f00000000c0)="3b13", 0x0}, 0x20)

8.445006053s ago: executing program 0 (id=20337):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)

8.444745168s ago: executing program 0 (id=20338):
clock_gettime(0x9, &(0x7f0000000000))

8.114531696s ago: executing program 0 (id=20343):
r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
readv(r0, &(0x7f0000001940)=[{&(0x7f0000001700)=""/14, 0xe}, {0x0}], 0x2)

7.931740376s ago: executing program 61 (id=20343):
r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
readv(r0, &(0x7f0000001940)=[{&(0x7f0000001700)=""/14, 0xe}, {0x0}], 0x2)

1.298719781s ago: executing program 8 (id=20379):
r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
bind$rxrpc(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r4)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r5, 0x701, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)

401.846213ms ago: executing program 7 (id=20390):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x36}, 0xfffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x0, 0x4}}, [@tmpl={0x144, 0x5, [{{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@dev}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in=@local, 0xfffffffe}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x100000, 0x6c}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{@in=@remote, 0x4d5, 0x3c}, 0x0, @in6=@private1, 0x3d01, 0x5, 0x2, 0x0, 0x0, 0x9}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x0)

400.684601ms ago: executing program 8 (id=20391):
unshare(0x20000400)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffdc4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20)

324.941915ms ago: executing program 7 (id=20392):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x10000000, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0)

324.591181ms ago: executing program 4 (id=20393):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x837}], 0x3}, 0x0)

270.182382ms ago: executing program 4 (id=20394):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f00"], 0x28}}, 0x0)

269.782569ms ago: executing program 8 (id=20395):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xfffffffc, 0x0, 0x30, 0x700, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e20, @local}}}, 0x118)

269.35973ms ago: executing program 7 (id=20396):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d)
landlock_restrict_self(r0, 0xa)
r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)
r3 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0)
landlock_restrict_self(r3, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r1, &(0x7f0000000000)='./file0\x00', 0x4)

196.794177ms ago: executing program 4 (id=20397):
r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35b", 0x6)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)

196.572581ms ago: executing program 7 (id=20398):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)={0x44, r1, 0x1, 0x0, 0xffffffff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4}]}]}]}, 0x44}}, 0x0)

196.434558ms ago: executing program 8 (id=20399):
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0)
get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3)

119.541355ms ago: executing program 7 (id=20400):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x80}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}}, 0x0)

119.258671ms ago: executing program 8 (id=20401):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0, &(0x7f0000000300)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0xce, 0x8, 0x0, 0x0}}, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xd0, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xa0, 0x2, {{0x3, 0x0, 0x3, 0xe, 0x2, 0xff}, [@TCA_NETEM_LOSS={0x74}, @TCA_NETEM_CORR={0x10, 0x1, {0x3, 0x5}}]}}}]}, 0xd0}}, 0x4000010)

66.870363ms ago: executing program 7 (id=20402):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x3000000}, 0x8)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001500))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092})
r2 = eventfd2(0x1, 0x80001)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000240)={0x0, r2})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

66.697298ms ago: executing program 4 (id=20403):
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x110, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xfffffffffffffff9}, {0xc, 0x90, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xfc1}, {0xc, 0x90, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x7fffffffffffffff}, {0xc, 0x90, 0x8000000000000001}}]}, 0x110}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x4, 0x20, 0x6b0, 0x5}, &(0x7f0000000200)=0x18)

437.118µs ago: executing program 4 (id=20404):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0)
syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x0)

98.744µs ago: executing program 8 (id=20405):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000014c0)={0x29c, 0x25, 0x1, 0x0, 0x0, "", [@nested={0x28c, 0x20b1, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}, @nested={0x165, 0x1fc, 0x0, 0x1, [@generic="aacb078fbe8fcbd3844064688b2b4f72c8b118a6a90ed572e0926e98ff65077497ecdfa2dd0b5be86a30b081592ea9aee28a5b9348e4309e890e00a64b80b2f24c4e21bbf0e68a8e654b69e6ffbeb86cad20e8b308763f888071387b6411d1d7a3daf18fa5b322cf482b526b0a09ec57b041b4725cdc1a60af0c680b1c0876c75d014155cffa2183cb7b0cef3d0fb8771666304bb326ae16138cf54860b3b23ea42b6d60982de3c6ad7bddef702a654f13fff71f05637e0a13e0534ac5ddf248333a135ad7629cff78c318eefec08d0d3b67eb20d03f38eb4ac5ec825788c56d07a5ef39bdbc3913dd175f1b1f1fc98ec55124715319", @generic="fae644f50596f81d9ad9081d397c66b15f5eaf36bc97fc82590eed387df8a1852954f8892f18315574824837ae0ffbd6ee87e5a331e118cfdbd0ea0cb2c9afbcc6c7f301d71f0a16bff8718e908545b6008dd320da4618006dccda8c1c3249c67738b4e6ecd1164f16d2ad"]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29", @generic="5caea6b5632cbdaeb803efb9c9e1daf5c4b73ad69ccfec1417b90e4f5754149da8393b98f8718558afcc", @typed={0xc, 0x96, 0x0, 0x0, @u64=0x4}, @nested={0x4, 0xab}]}]}, 0x29c}], 0x1}, 0x0)

0s ago: executing program 4 (id=20406):
ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x1, 'ip6tnl0\x00'})
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
sendmmsg(r0, &(0x7f0000005380)=[{{&(0x7f0000000180)=@can={0x1d, r1}, 0x80, 0x0}}], 0x1, 0x0)

kernel console output (not intermixed with test programs):

 change from 0 to 4096
[ 1415.324515][T17921] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512).
[ 1415.390815][T17922] loop4: detected capacity change from 0 to 4096
[ 1415.404923][T17922] ntfs3(loop4): ino=1, mi_enum_attr
[ 1415.414399][T17922] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[ 1415.431225][T17922] ntfs3(loop4): mft corrupted
[ 1415.439583][T17922] ntfs3(loop4): Failed to load $MFT.
[ 1415.538250][T17922] loop4: detected capacity change from 0 to 64
[ 1416.147333][ T5355] 8021q: adding VLAN 0 to HW filter on device eth24
[ 1416.440599][   T33] audit: type=1326 audit(2188.241:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17946 comm="syz.4.17369" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f179cdd9 code=0x7ffc0000
[ 1416.475851][   T33] audit: type=1326 audit(2188.250:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17946 comm="syz.4.17369" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f179cdd9 code=0x7ffc0000
[ 1416.507796][   T33] audit: type=1326 audit(2188.250:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17946 comm="syz.4.17369" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc7f179cdd9 code=0x7ffc0000
[ 1416.544087][   T33] audit: type=1326 audit(2188.250:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17946 comm="syz.4.17369" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f179cdd9 code=0x7ffc0000
[ 1416.562439][   T33] audit: type=1326 audit(2188.250:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17946 comm="syz.4.17369" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f179cdd9 code=0x7ffc0000
[ 1416.573228][   T33] audit: type=1326 audit(2188.250:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17946 comm="syz.4.17369" exe="/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fc7f179cdd9 code=0x7ffc0000
[ 1416.620129][   T33] audit: type=1326 audit(2188.250:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17946 comm="syz.4.17369" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f179cdd9 code=0x7ffc0000
[ 1416.654213][   T33] audit: type=1326 audit(2188.250:2916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17946 comm="syz.4.17369" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f179cdd9 code=0x7ffc0000
[ 1416.874192][T17956] loop4: detected capacity change from 0 to 32768
[ 1416.921578][T17956] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1416.945274][T17956] XFS (loop4): Ending clean mount
[ 1416.973743][T16995] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1416.996975][ T5713] Bluetooth: hci0: command tx timeout
[ 1417.365341][T17982] loop4: detected capacity change from 0 to 128
[ 1417.376893][T17982] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1417.393465][T17982] hpfs: filesystem error: improperly stopped
[ 1417.401087][T17982] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1417.416954][T17982] hpfs: You really don't want any checks? You are crazy...
[ 1417.419942][T17982] hpfs: hpfs_map_sector(): read error
[ 1417.432026][T17982] hpfs: code page support is disabled
[ 1417.465431][T17982] hpfs: hpfs_map_4sectors(): unaligned read
[ 1417.468189][T17982] hpfs: hpfs_map_4sectors(): unaligned read
[ 1417.470964][T17982] hpfs: filesystem error: unable to find root dir
[ 1417.510205][T17982] hpfs: hpfs_map_4sectors(): unaligned read
[ 1417.528051][T17982] hpfs: hpfs_map_sector(): read error
[ 1417.816847][T17874] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1417.819958][T17874] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1417.820679][T17874] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1417.836660][T17874] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1417.847403][T17874] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1417.852832][T17874] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1417.856548][T17874] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1417.862290][T17874] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1417.955443][T17874] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1417.970866][T17874] 8021q: adding VLAN 0 to HW filter on device team0
[ 1417.978180][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1417.981079][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1417.997200][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1418.000071][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1418.489573][T17874] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1418.586554][T17874] veth0_vlan: entered promiscuous mode
[ 1418.604795][T17874] veth1_vlan: entered promiscuous mode
[ 1418.772113][T17874] veth0_macvtap: entered promiscuous mode
[ 1418.778306][T17874] veth1_macvtap: entered promiscuous mode
[ 1418.789363][T17874] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1418.809220][T17874] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1418.814933][T27222] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1418.837515][T27222] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1418.985675][T27222] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1419.046169][T27222] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1419.205534][ T5713] Bluetooth: hci0: command tx timeout
[ 1419.326139][T18214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1419.345989][T18214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1419.452942][T16756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1419.459739][T16756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1419.661076][T18069] loop4: detected capacity change from 0 to 16
[ 1419.667138][T18069] MTD: Attempt to mount non-MTD device "/dev/loop4"
[ 1419.832810][T18082] netlink: 56 bytes leftover after parsing attributes in process `syz.4.17392'.
[ 1419.858890][T18084] virtiofs: Unknown parameter 'always 1      V3
[ 1419.858890][T18084] 				010000E0     1 0:00000000		0
[ 1419.858890][T18084] 18	nlmon0    :     1      V3
[ 1419.858890][T18084] 				010000E0     1 0:00000000		0
[ 1419.858890][T18084] 19	batadv0   :     1      V3
[ 1419.858890][T18084] 				010000E0     1 0:00000000		0
[ 1419.858890][T18084] 20	vxcan0    :     1      V3
[ 1419.858890][T18084] 				010000E0     1 0:00000000		0
[ 1419.858890][T18084] 21	vxcan1    :     1      V3
[ 1419.858890][T18084] 				010000E0     1 0:00000000		0
[ 1419.858890][T18084] 22	veth0     :     1      V3
[ 1419.858890][T18084] 				010000E0     1 0:00000000		0
[ 1419.858890][T18084] 23	veth1     :     1      V3
[ 1419.858890][T18084] 				010000E0     1 0:00000000		0
[ 1419.858890][T18084] 24	wg0       :     1      V3
[ 1419.858890][T18084] 				010000E0     1 0:00000000		0
[ 1419.858890][T18084] 25	wg1       :     1      V3
[ 1419.858890][T18084] 				010000E0     1 0:00000000		0
[ 1419.858890][T18084] 26	wg2       :     1      trans'
[ 1419.926530][T18086] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1420.067579][T18089] loop4: detected capacity change from 0 to 8192
[ 1420.521067][T18092] loop4: detected capacity change from 0 to 32768
[ 1420.554753][T18092] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1420.564285][T18092] XFS (loop4): Ending clean mount
[ 1420.570044][T18092] XFS (loop4): Quotacheck needed: Please wait.
[ 1420.908178][T18092] XFS (loop4): Quotacheck: Done.
[ 1420.948879][T16995] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1421.276082][T18118] loop4: detected capacity change from 0 to 1024
[ 1421.299510][T18116] overlay: filesystem on ./file0 is read-only
[ 1421.441178][ T5713] Bluetooth: hci0: command tx timeout
[ 1421.633958][T18134] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17410'.
[ 1421.674947][T18134] netlink: 'syz.6.17410': attribute type 1 has an invalid length.
[ 1421.841242][T18144] veth0: Caught tx_queue_len zero misconfig
[ 1421.887385][ T4189] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[ 1422.468021][T18148] loop6: detected capacity change from 0 to 131072
[ 1422.489664][T18148] XFS (loop6): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[ 1422.532517][T18148] XFS (loop6): Starting recovery (logdev: internal)
[ 1422.553732][T18148] XFS (loop6): Ending recovery (logdev: internal)
[ 1422.555893][ T4189] usb 2-1: Using ep0 maxpacket: 16
[ 1422.559645][T18148] XFS (loop6): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[ 1422.639197][ T4189] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1422.642375][ T4189] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[ 1422.649266][ T4189] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1422.652325][ T4189] usb 2-1: config 1 has no interface number 1
[ 1422.654926][ T4189] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1422.659990][ T4189] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 52, changing to 7
[ 1422.676863][ T4189] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 9272, setting to 1024
[ 1422.975746][ T4189] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1422.979736][ T4189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1422.982318][ T4189] usb 2-1: Product: syz
[ 1422.983595][ T4189] usb 2-1: Manufacturer: syz
[ 1422.985217][ T4189] usb 2-1: SerialNumber: syz
[ 1422.998781][ T4189] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[ 1423.001500][ T4189] usb 2-1: found format II with max.bitrate = 0, frame size=0
[ 1423.003871][ T4189] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[ 1423.092048][T18167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17422'.
[ 1423.158163][T18170] futex_wake_op: syz.6.17423 tries to shift op by -1; fix this program
[ 1423.374605][ T4189] usb 2-1: USB disconnect, device number 48
[ 1423.458105][T10066] udevd[10066]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1424.150134][T18192] binder: 18191:18192 ioctl c018620b 0 returned -14
[ 1424.514474][T18202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17439'.
[ 1424.587963][T18206] bond0: option fail_over_mac: unable to set because the bond device has slaves
[ 1424.697093][T18212] loop1: detected capacity change from 0 to 128
[ 1424.717894][T18212] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1424.742973][T18212] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1424.880696][T17874] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1424.973248][T18223] loop6: detected capacity change from 0 to 32768
[ 1424.976824][T18223] btrfs: Deprecated parameter 'usebackuproot'
[ 1424.979355][T18223] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[ 1424.983923][T18223] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.17449 (18223)
[ 1424.991922][T18223] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1424.996015][T18223] BTRFS info (device loop6): using crc32c checksum algorithm
[ 1425.088218][T16756] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[ 1425.106628][ T1377] ieee802154 phy0 wpan0: encryption failed: -22
[ 1425.181632][T18223] BTRFS error (device loop6): failed to load root extent
[ 1425.184497][T18223] BTRFS warning (device loop6): try to load backup roots slot 1
[ 1425.187822][   T85] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[ 1425.205986][T18223] BTRFS warning (device loop6): couldn't read tree root
[ 1425.208881][T18223] BTRFS warning (device loop6): try to load backup roots slot 2
[ 1425.212718][T16756] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[ 1425.234382][T18223] BTRFS warning (device loop6): couldn't read tree root
[ 1425.236850][T18223] BTRFS warning (device loop6): try to load backup roots slot 3
[ 1425.245913][T18223] BTRFS info (device loop6): rebuilding free space tree
[ 1425.288490][T18223] BTRFS info (device loop6): checking UUID tree
[ 1425.291350][T18223] BTRFS info (device loop6): enabling ssd optimizations
[ 1425.294112][T18223] BTRFS info (device loop6): turning on async discard
[ 1425.296902][T18223] BTRFS info (device loop6): enabling free space tree
[ 1425.299522][T18223] BTRFS info (device loop6): force clearing of disk cache
[ 1425.302346][T18223] BTRFS info (device loop6): enabling auto defrag
[ 1425.304834][T18223] BTRFS info (device loop6): trying to use backup root at mount time
[ 1425.308569][T18223] BTRFS info (device loop6): use zstd compression, level 3
[ 1426.231299][T10149] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1426.553087][T18279] wg2 speed is unknown, defaulting to 1000
[ 1426.560342][T18279] wg2 speed is unknown, defaulting to 1000
[ 1426.563229][T18279] wg2 speed is unknown, defaulting to 1000
[ 1426.709132][T18279] infiniband syz2: set active
[ 1426.711637][T18279] infiniband syz2: added wg2
[ 1426.734140][T18279] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[ 1426.740134][T18279] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[ 1426.746821][T18279] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[ 1426.850151][T18279] RDS/IB: syz2: added
[ 1426.852576][T18279] smc: adding ib device syz2 with port count 1
[ 1426.855329][T18279] smc:    ib device syz2 port 1 has no pnetid
[ 1426.987364][T15224] wg2 speed is unknown, defaulting to 1000
[ 1426.993073][T18279] wg2 speed is unknown, defaulting to 1000
[ 1427.150168][T18279] wg2 speed is unknown, defaulting to 1000
[ 1427.255275][T18279] wg2 speed is unknown, defaulting to 1000
[ 1427.344029][T18279] wg2 speed is unknown, defaulting to 1000
[ 1427.437651][T18279] wg2 speed is unknown, defaulting to 1000
[ 1427.523404][T18279] wg2 speed is unknown, defaulting to 1000
[ 1427.622039][T18279] wg2 speed is unknown, defaulting to 1000
[ 1427.759601][ T6954] wg2 speed is unknown, defaulting to 1000
[ 1428.404611][T18294] loop1: detected capacity change from 0 to 131072
[ 1428.409595][T18294] F2FS-fs (loop1): invalid crc value
[ 1428.441007][T18294] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1428.455016][T18294] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[ 1428.484910][   T33] audit: type=1800 audit(2199.527:2917): pid=18294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.17470" name="file1" dev="loop1" ino=7 res=0 errno=0
[ 1428.510374][T18307] loop6: detected capacity change from 0 to 128
[ 1428.527701][T18307] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1428.600046][T18307] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1428.742272][T18319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17478'.
[ 1429.836334][T18341] loop1: detected capacity change from 0 to 1024
[ 1429.841766][T18341] EXT4-fs: inline encryption not supported
[ 1429.873672][T18341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1429.883105][T18341] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.17484: lblock 0 mapped to illegal pblock 0 (length 6)
[ 1429.905437][T18341] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.17484: lblock 0 mapped to illegal pblock 0 (length 1)
[ 1429.922344][T18341] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[ 1429.928124][T18341] EXT4-fs (loop1): This should not happen!! Data will be lost
[ 1429.928124][T18341] 
[ 1430.022994][T17874] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[ 1430.041751][T17874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1430.088566][T18347] netlink: 'syz.6.17487': attribute type 13 has an invalid length.
[ 1430.094669][T18347] netlink: 'syz.6.17487': attribute type 27 has an invalid length.
[ 1430.786438][T18367] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1430.952738][T18381] loop1: detected capacity change from 0 to 64
[ 1430.968112][T18381] syz.1.17498: attempt to access beyond end of device
[ 1430.968112][T18381] loop1: rw=0, sector=1024, nr_sectors = 2 limit=64
[ 1430.982326][T18381] Buffer I/O error on dev loop1, logical block 512, async page read
[ 1430.990014][T18381] syz.1.17498: attempt to access beyond end of device
[ 1430.990014][T18381] loop1: rw=0, sector=113152, nr_sectors = 2 limit=64
[ 1431.001362][T18381] Buffer I/O error on dev loop1, logical block 56576, async page read
[ 1431.015756][T18385] tipc: Enabling of bearer <ud`:s> rejected, media not registered
[ 1431.112709][T18390] IPVS: Error connecting to the multicast addr
[ 1431.277232][T18402] bridge_slave_0: Caught tx_queue_len zero misconfig
[ 1431.330086][T18404] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.17507'.
[ 1431.494460][T18418] netlink: 'syz.1.17513': attribute type 1 has an invalid length.
[ 1431.497657][T18418] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17513'.
[ 1431.985493][T18451] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 1432.402503][ T6954] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 1432.542332][T18486] lo: Caught tx_queue_len zero misconfig
[ 1432.577450][ T6954] usb 2-1: Using ep0 maxpacket: 32
[ 1432.588509][ T6954] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1432.592598][ T6954] usb 2-1: config 105 has an invalid interface number: 143 but max is 0
[ 1432.595998][ T6954] usb 2-1: config 105 has no interface number 0
[ 1432.598644][ T6954] usb 2-1: config 105 interface 143 has no altsetting 0
[ 1432.603528][ T6954] usb 2-1: New USB device found, idVendor=090a, idProduct=1050, bcdDevice= 1.00
[ 1432.607559][ T6954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1432.610763][ T6954] usb 2-1: Product: syz
[ 1432.612506][ T6954] usb 2-1: Manufacturer: syz
[ 1432.614440][ T6954] usb 2-1: SerialNumber: syz
[ 1432.851611][ T6954] usb-storage 2-1:105.143: USB Mass Storage device detected
[ 1432.888597][ T6954] usb 2-1: USB disconnect, device number 49
[ 1433.084673][T18504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17552'.
[ 1433.127574][T18506] netlink: 'syz.4.17553': attribute type 11 has an invalid length.
[ 1434.042196][T18546] netlink: 7060 bytes leftover after parsing attributes in process `syz.4.17573'.
[ 1434.245658][T18553] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17576'.
[ 1435.207551][T18590] batadv_slave_1: entered promiscuous mode
[ 1435.213797][T18590] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17590'.
[ 1435.219298][T18590] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1435.254219][T18590] batadv_slave_1 (unregistering): left promiscuous mode
[ 1435.263326][T18590] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1435.308043][T18597] loop1: detected capacity change from 0 to 256
[ 1435.328238][T18597] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1435.369532][T18600] netlink: 'syz.6.17594': attribute type 7 has an invalid length.
[ 1435.372501][T18600] netlink: 'syz.6.17594': attribute type 7 has an invalid length.
[ 1435.406510][T18601] exFAT-fs (loop1): start_clu is invalid cluster(0xffffffff)
[ 1435.660656][T18623] netlink: 188 bytes leftover after parsing attributes in process `syz.6.17605'.
[ 1435.923390][T18648] veth2: entered allmulticast mode
[ 1435.992816][ T6954] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[ 1436.152868][ T6954] usb 2-1: Using ep0 maxpacket: 32
[ 1436.157335][ T6954] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1436.169240][ T6954] usb 2-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=aa.5f
[ 1436.174357][ T6954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1436.177084][ T6954] usb 2-1: Product: syz
[ 1436.178770][ T6954] usb 2-1: Manufacturer: syz
[ 1436.180737][ T6954] usb 2-1: SerialNumber: syz
[ 1436.185896][ T6954] usb 2-1: config 0 descriptor??
[ 1436.418422][T15224] usb 2-1: USB disconnect, device number 50
[ 1436.804276][T18660] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17623'.
[ 1436.905218][T18668] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17627'.
[ 1437.114488][T18681] loop1: detected capacity change from 0 to 256
[ 1437.132933][T18681] FAT-fs (loop1): Directory bread(block 64) failed
[ 1437.139443][T18681] FAT-fs (loop1): Directory bread(block 65) failed
[ 1437.145106][T18681] FAT-fs (loop1): Directory bread(block 66) failed
[ 1437.165971][T18681] FAT-fs (loop1): Directory bread(block 67) failed
[ 1437.172195][T18681] FAT-fs (loop1): Directory bread(block 68) failed
[ 1437.177489][T18681] FAT-fs (loop1): Directory bread(block 69) failed
[ 1437.186650][T18681] FAT-fs (loop1): Directory bread(block 70) failed
[ 1437.189162][T18681] FAT-fs (loop1): Directory bread(block 71) failed
[ 1437.199166][T18681] FAT-fs (loop1): Directory bread(block 72) failed
[ 1437.211920][T18681] FAT-fs (loop1): Directory bread(block 73) failed
[ 1437.562069][T18712] loop1: detected capacity change from 0 to 512
[ 1437.600345][T18712] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.17648: corrupted in-inode xattr: e_value size too large
[ 1437.613263][T18712] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1437.613665][T18712] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.17648: couldn't read orphan inode 15 (err -117)
[ 1437.617466][    C1] EXT4-fs (loop1): error count since last fsck: 1
[ 1437.617481][    C1] EXT4-fs (loop1): initial error at time 2208: ext4_iget_extra_inode:5128: inode 15
[ 1437.617499][    C1] EXT4-fs (loop1): last error at time 2208: ext4_iget_extra_inode:5128: inode 15
[ 1437.659628][T18712] loop1: lost filesystem error report for type 5 error -117
[ 1437.661376][T18712] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1437.700636][T17874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1437.775459][T18724] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17653'.
[ 1437.781086][T18724] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17653'.
[ 1437.849662][T18731] loop1: detected capacity change from 0 to 8
[ 1437.995857][T18742] loop1: detected capacity change from 0 to 256
[ 1438.010042][T18742] FAT-fs (loop1): Directory bread(block 64) failed
[ 1438.012708][T18742] FAT-fs (loop1): Directory bread(block 65) failed
[ 1438.018645][T18742] FAT-fs (loop1): Directory bread(block 66) failed
[ 1438.021789][T18742] FAT-fs (loop1): Directory bread(block 67) failed
[ 1438.024928][T18742] FAT-fs (loop1): Directory bread(block 68) failed
[ 1438.027088][T18742] FAT-fs (loop1): Directory bread(block 69) failed
[ 1438.029820][T18742] FAT-fs (loop1): Directory bread(block 70) failed
[ 1438.032185][T18742] FAT-fs (loop1): Directory bread(block 71) failed
[ 1438.035975][T18742] FAT-fs (loop1): Directory bread(block 72) failed
[ 1438.038139][T18742] FAT-fs (loop1): Directory bread(block 73) failed
[ 1438.355809][T18753] CIFS: VFS: UNC: missing delimiter between hostname and share name
[ 1438.359999][T18753] CIFS: VFS: Malformed UNC in devname
[ 1438.865832][T18760] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.17670'.
[ 1438.871297][T18760] netlink: Unknown conntrack attr (0)
[ 1439.131881][T18782] loop1: detected capacity change from 0 to 512
[ 1439.136638][T18782] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1439.159344][T18782] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.17680: invalid indirect mapped block 32768 (level 2)
[ 1439.166002][T18782] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[ 1439.166399][    C0] EXT4-fs (loop1): error count since last fsck: 1
[ 1439.173356][    C0] EXT4-fs (loop1): initial error at time 2209: ext4_free_branches:1023: inode 16
[ 1439.177015][    C0] EXT4-fs (loop1): last error at time 2209: ext4_free_branches:1023: inode 16
[ 1439.193288][T18782] EXT4-fs (loop1): 1 orphan inode deleted
[ 1439.195845][T18782] EXT4-fs (loop1): 1 truncate cleaned up
[ 1439.200029][T18782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1439.220127][T18782] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[ 1439.261530][T17874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1440.712458][T18815] netlink: 32 bytes leftover after parsing attributes in process `syz.6.17694'.
[ 1440.788937][T18820] fuse: Bad value for 'fd'
[ 1440.812376][ T6954] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[ 1440.974788][ T6954] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1440.979793][ T6954] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1440.985161][ T6954] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[ 1440.991260][ T6954] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1440.995229][ T6954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1440.999135][ T6954] usb 2-1: Product: syz
[ 1441.001043][ T6954] usb 2-1: Manufacturer: syz
[ 1441.002980][ T6954] usb 2-1: SerialNumber: syz
[ 1441.008003][ T6954] usb 2-1: config 0 descriptor??
[ 1441.010794][T18812] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1441.013205][T18812] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1441.018234][ T6954] usb 2-1: ucan: probing device on interface #0
[ 1441.236329][ T6954] usb 2-1: ucan: could not read protocol version, ret=-71
[ 1441.239111][ T6954] usb 2-1: ucan: probe failed; try to update the device firmware
[ 1441.246829][ T6954] usb 2-1: USB disconnect, device number 51
[ 1441.380390][T18828] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input49
[ 1441.530466][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[ 1441.818859][T18858] loop1: detected capacity change from 0 to 128
[ 1441.889490][T18860] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1442.002644][T18866]  speed is unknown, defaulting to 1000
[ 1442.017876][T18866] wg2 speed is unknown, defaulting to 1000
[ 1442.079686][T18869]  speed is unknown, defaulting to 1000
[ 1442.578276][T18869] wg2 speed is unknown, defaulting to 1000
[ 1443.049592][T18895] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[ 1443.812485][T18935] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17747'.
[ 1443.870649][T18937] bond0: Caught tx_queue_len zero misconfig
[ 1444.757709][T18951] loop1: detected capacity change from 0 to 131072
[ 1444.762099][T18951] F2FS-fs (loop1): invalid crc value
[ 1444.817400][T18951] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1444.835228][T18951] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[ 1445.184810][T18986] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17771'.
[ 1445.385433][T19002] batman_adv: batadv0: Adding interface: gretap1
[ 1445.390429][T19002] batman_adv: batadv0: Interface activated: gretap1
[ 1445.533417][T19004] overlayfs: failed to clone upperpath
[ 1445.792522][T19007] fuse: Bad value for 'fd'
[ 1446.251326][ T6954] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[ 1446.413981][ T6954] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1446.418757][ T6954] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1446.423344][ T6954] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1446.426817][ T6954] usb 2-1: config 1 interface 1 has no altsetting 0
[ 1446.465894][ T6954] usb 2-1: string descriptor 0 read error: -22
[ 1446.474390][ T6954] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[ 1446.479805][ T6954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1446.850528][ T6954] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1446.865743][ T6954] usb 2-1: USB disconnect, device number 52
[ 1446.915560][T19047] bond0: entered promiscuous mode
[ 1446.917152][T19047] bond_slave_0: entered promiscuous mode
[ 1446.919366][T19047] bond_slave_1: entered promiscuous mode
[ 1446.930808][T19047] batadv0: entered promiscuous mode
[ 1446.938890][T19047] 8021q: adding VLAN 0 to HW filter on device hsr1
[ 1446.947297][T19047] bond0: left promiscuous mode
[ 1446.948992][T19047] bond_slave_0: left promiscuous mode
[ 1446.951055][T19047] bond_slave_1: left promiscuous mode
[ 1446.953670][T19047] batadv0: left promiscuous mode
[ 1447.089032][T19051] netlink: 'syz.6.17800': attribute type 34 has an invalid length.
[ 1447.527021][T19073] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17810'.
[ 1447.660352][T19084] netlink: 'syz.4.17815': attribute type 12 has an invalid length.
[ 1447.787877][T19092] netlink: zone id is out of range
[ 1447.792265][T19092] netlink: del zone limit has 4 unknown bytes
[ 1448.501897][ T6960] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[ 1448.687616][ T6960] usb 2-1: Using ep0 maxpacket: 16
[ 1448.691980][ T6960] usb 2-1: config 0 has an invalid interface number: 68 but max is 0
[ 1448.695404][ T6960] usb 2-1: config 0 has no interface number 0
[ 1448.698029][ T6960] usb 2-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1448.707320][ T6960] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4
[ 1448.712252][ T6960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1448.715631][ T6960] usb 2-1: Product: syz
[ 1448.717493][ T6960] usb 2-1: Manufacturer: syz
[ 1448.723195][ T6960] usb 2-1: SerialNumber: syz
[ 1448.728058][ T6960] usb 2-1: config 0 descriptor??
[ 1448.749637][ T6960] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1448.950118][T27225] usb 2-1: Failed to submit usb control message: -71
[ 1448.950515][T15224] usb 2-1: USB disconnect, device number 53
[ 1449.034869][T27225] usb 2-1: unable to send the bmi data to the device: -71
[ 1449.044491][T27225] usb 2-1: unable to get target info from device
[ 1449.047166][T27225] usb 2-1: could not get target info (-71)
[ 1449.049545][T27225] usb 2-1: could not probe fw (-71)
[ 1449.741832][T19156] netlink: 'syz.1.17846': attribute type 1 has an invalid length.
[ 1449.794344][T19158] netlink: 76 bytes leftover after parsing attributes in process `syz.4.17848'.
[ 1449.804956][T19158] netlink: 32 bytes leftover after parsing attributes in process `syz.4.17848'.
[ 1449.812899][T19158] netlink: 76 bytes leftover after parsing attributes in process `syz.4.17848'.
[ 1449.837369][T19160] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17849'.
[ 1450.206457][T19183] x_tables: duplicate underflow at hook 1
[ 1450.979072][T19197] loop1: detected capacity change from 0 to 32768
[ 1450.982839][T19197] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.17866 (19197)
[ 1451.039053][T19197] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1451.045209][T19197] BTRFS info (device loop1): using blake2b checksum algorithm
[ 1451.120924][T19197] BTRFS info (device loop1): enabling ssd optimizations
[ 1451.126409][T19197] BTRFS info (device loop1): turning on async discard
[ 1451.136119][T19197] BTRFS info (device loop1): enabling free space tree
[ 1451.141831][T19197] BTRFS info (device loop1): use zstd compression, level 3
[ 1451.274458][T19226] fuse: Bad value for 'fd'
[ 1451.293199][T17874] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1451.819610][T19244] loop1: detected capacity change from 0 to 4096
[ 1451.833927][T19244] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[ 1451.929820][T19244] ntfs3(loop1): ino=19, mi_enum_attr
[ 1451.933392][T19244] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[ 1451.967433][   T33] audit: type=1800 audit(2221.490:2918): pid=19244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.17882" name="file1" dev="loop1" ino=33 res=0 errno=0
[ 1452.254694][T19261] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1452.258178][T19261] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1452.365235][T19261] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1452.373652][T19261] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1452.576569][T27225] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1452.594980][T27225] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1452.599398][T15227] wg2 speed is unknown, defaulting to 1000
[ 1452.601916][T15227] syz2: Port: 1 Link DOWN
[ 1452.609222][T27225] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1452.619245][T27225] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1452.623575][T15227] wg2 speed is unknown, defaulting to 1000
[ 1452.638667][   T33] audit: type=1326 audit(2222.126:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.6.17893" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da999cdd9 code=0x7ffc0000
[ 1452.653688][   T33] audit: type=1326 audit(2222.126:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.6.17893" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da999cdd9 code=0x7ffc0000
[ 1452.668957][   T33] audit: type=1326 audit(2222.145:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.6.17893" exe="/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f6da999cdd9 code=0x7ffc0000
[ 1452.679839][   T33] audit: type=1326 audit(2222.145:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.6.17893" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da999cdd9 code=0x7ffc0000
[ 1452.696334][   T33] audit: type=1326 audit(2222.145:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.6.17893" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6da999cdd9 code=0x7ffc0000
[ 1453.121728][T19296] netlink: 'syz.1.17904': attribute type 39 has an invalid length.
[ 1453.196916][T19299] netlink: 32 bytes leftover after parsing attributes in process `syz.6.17907'.
[ 1454.062492][T19305] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17910'.
[ 1454.131320][T19312] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[ 1454.251952][T19322] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[ 1454.578903][T19332] block device autoloading is deprecated and will be removed.
[ 1454.896514][T19343] loop1: detected capacity change from 0 to 8192
[ 1454.981171][ T5713] Bluetooth: hci1: unexpected event for opcode 0x0c26
[ 1455.727385][T19364] loop1: detected capacity change from 0 to 164
[ 1455.866351][T19367] "syz.4.17937" (19367) uses obsolete ecb(arc4) skcipher
[ 1456.045540][   T27] smc: removing ib device syz2
[ 1456.172774][   T27] smbdirect: ib_dev[syz2] removed
[ 1456.187214][T19393] smb3: Unexpected value for 'rdma'
[ 1458.645855][T19433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17965'.
[ 1458.916686][T19448] loop1: detected capacity change from 0 to 128
[ 1458.923754][T19448] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[ 1458.944320][T19448] UDF-fs: error (device loop1): udf_read_inode: (ino 87) failed !bh
[ 1458.949947][T19448] UDF-fs: error (device loop1): udf_fill_super: Error in udf_iget, block=3, partition=0
[ 1459.007803][   T33] audit: type=1326 audit(2228.087:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19450 comm="syz.1.17973" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7df9cdd9 code=0x7ffc0000
[ 1459.031811][   T33] audit: type=1326 audit(2228.087:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19450 comm="syz.1.17973" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7df9cdd9 code=0x7ffc0000
[ 1459.039081][   T33] audit: type=1326 audit(2228.087:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19450 comm="syz.1.17973" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7df9cdd9 code=0x7ffc0000
[ 1459.047009][   T33] audit: type=1326 audit(2228.087:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19450 comm="syz.1.17973" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7df9cdd9 code=0x7ffc0000
[ 1459.055846][   T33] audit: type=1326 audit(2228.097:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19450 comm="syz.1.17973" exe="/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f8e7df9cdd9 code=0x7ffc0000
[ 1459.063632][   T33] audit: type=1326 audit(2228.097:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19450 comm="syz.1.17973" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7df9cdd9 code=0x7ffc0000
[ 1459.075902][   T33] audit: type=1326 audit(2228.106:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19450 comm="syz.1.17973" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8e7df9cdd9 code=0x7ffc0000
[ 1459.090690][   T33] audit: type=1326 audit(2228.106:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19450 comm="syz.1.17973" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8e7df9cdd9 code=0x7ffc0000
[ 1459.099202][   T33] audit: type=1326 audit(2228.116:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19450 comm="syz.1.17973" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7df9cdd9 code=0x7ffc0000
[ 1459.144524][T19454] loop1: detected capacity change from 0 to 2048
[ 1459.174342][T19454] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[ 1459.186797][T19454] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[ 1459.195287][T19454] UDF-fs: Scanning with blocksize 512 failed
[ 1459.210666][T19454] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1459.266584][T19465] kernel read not supported for file /file0 (pid: 19465 comm: syz.6.17980)
[ 1459.269709][   T33] audit: type=1800 audit(2228.340:2933): pid=19465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.17980" name="file0" dev="mqueue" ino=162863 res=0 errno=0
[ 1459.379145][T19469] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1459.413094][T19480] loop1: detected capacity change from 0 to 256
[ 1459.431802][T19480] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d)
[ 1459.447522][T19480] exFAT-fs (loop1): start_clu is invalid cluster(0xffffffff)
[ 1459.464030][T19480] exfat: Unknown parameter ''
[ 1459.497317][T19490] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1459.703237][T19503] loop1: detected capacity change from 0 to 4096
[ 1459.711906][T19503] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1459.719088][T19503] EXT4-fs (loop1): unsupported descriptor size 255
[ 1460.011775][T19515] /dev/nbd4: Can't lookup blockdev
[ 1460.207250][T15124] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[ 1460.371007][T15124] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[ 1460.376942][T15124] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1460.380705][T19537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18015'.
[ 1460.382226][T15124] usb 2-1: Product: syz
[ 1460.385253][T15124] usb 2-1: Manufacturer: syz
[ 1460.386780][T15124] usb 2-1: SerialNumber: syz
[ 1460.394378][T15124] usb 2-1: config 0 descriptor??
[ 1460.399276][T15124] gspca_main: sq905c-2.14.0 probing 2770:9052
[ 1461.491862][T15124] gspca_sq905c: sq905c_command: usb_control_msg failed (-110)
[ 1461.498973][T15124] sq905c 2-1:0.0: probe with driver sq905c failed with error -110
[ 1461.669054][ T6960] usb 2-1: USB disconnect, device number 54
[ 1461.761028][T19570] loop1: detected capacity change from 0 to 256
[ 1461.822089][T19572] loop1: detected capacity change from 0 to 512
[ 1461.836864][T19572] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1461.859268][T19572] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.18031: corrupted in-inode xattr: invalid ea_ino
[ 1461.868180][T19572] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1461.868555][T19572] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.18031: couldn't read orphan inode 15 (err -117)
[ 1461.876420][    C0] EXT4-fs (loop1): error count since last fsck: 1
[ 1461.876432][    C0] EXT4-fs (loop1): initial error at time 2230: ext4_iget_extra_inode:5128: inode 15
[ 1461.876445][    C0] EXT4-fs (loop1): last error at time 2230: ext4_iget_extra_inode:5128: inode 15
[ 1461.885132][T19572] loop1: lost filesystem error report for type 5 error -117
[ 1461.886931][T19572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1461.900780][T19572] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 234 vs 220 free clusters
[ 1461.938438][T17874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1462.498330][T19602] xt_hashlimit: size too large, truncated to 1048576
[ 1462.862313][T19612] openvswitch: netlink: IP tunnel dst address not specified
[ 1463.309086][T19647] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only
[ 1463.312181][T19647] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[ 1463.315609][T19647] overlayfs: failed to get uuid (398/file2, err=-13); falling back to uuid=null.
[ 1463.374398][T19643] loop1: detected capacity change from 0 to 40427
[ 1463.378361][T19643] F2FS-fs (loop1): invalid crc value
[ 1463.727451][T19667] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18074'.
[ 1463.739514][T19667] ?`: entered promiscuous mode
[ 1463.898522][T19679] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1463.902418][T19679] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1464.021157][T19683] tmpfs: Bad value for 'grpquota_inode_hardlimit'
[ 1464.068012][T19643] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[ 1464.093589][T19643] F2FS-fs (loop1): Start checkpoint disabled!
[ 1464.115599][T19643] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[ 1464.120060][T19643] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[ 1464.405297][T19695] loop1: detected capacity change from 0 to 512
[ 1464.427900][T19695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1464.440751][T19695] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 18: comm syz.1.18086: lblock 23 mapped to illegal pblock 18 (length 1)
[ 1464.458405][T17874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1464.562950][T19699] loop1: detected capacity change from 0 to 16
[ 1464.597885][T19699] erofs (device loop1): mounted with root inode @ nid 36.
[ 1464.615491][T19699] syz.1.18087: attempt to access beyond end of device
[ 1464.615491][T19699] loop1: rw=524288, sector=12296, nr_sectors = 8 limit=16
[ 1464.625833][T19699] syz.1.18087: attempt to access beyond end of device
[ 1464.625833][T19699] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16
[ 1464.635040][T19699] syz.1.18087: attempt to access beyond end of device
[ 1464.635040][T19699] loop1: rw=0, sector=12296, nr_sectors = 8 limit=16
[ 1464.652782][T19699] erofs (device loop1): read error -5 @ 0 of nid 89
[ 1464.665244][   T33] kauditd_printk_skb: 26 callbacks suppressed
[ 1464.665256][   T33] audit: type=1800 audit(2233.384:2960): pid=19699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.18087" name="file2" dev="loop1" ino=89 res=0 errno=0
[ 1464.902314][T19713] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[ 1464.909171][T19713] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[ 1464.917051][T19713] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[ 1464.928466][T19713] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[ 1465.016263][T15227] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[ 1465.178141][T15227] usb 2-1: config 1 has an invalid interface number: 7 but max is 0
[ 1465.184817][T15227] usb 2-1: config 1 has no interface number 0
[ 1465.189019][T15227] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 32
[ 1465.193046][T15227] usb 2-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x6, skipping
[ 1465.216843][T15227] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[ 1465.230116][T15227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1465.237017][T15227] usb 2-1: Product: syz
[ 1465.241026][T15227] usb 2-1: Manufacturer: syz
[ 1465.245749][T15227] usb 2-1: SerialNumber: syz
[ 1465.251462][T19703] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1465.255189][T19703] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1465.260681][T15227] usb 2-1: Expected 3 endpoints, found: 2
[ 1465.483257][ T6960] usb 2-1: USB disconnect, device number 55
[ 1465.535130][T19756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18113'.
[ 1466.628212][T19801] netlink: 207952 bytes leftover after parsing attributes in process `syz.6.18132'.
[ 1467.440037][T19833] openvswitch: netlink: Tunnel attr 109 out of range max 16
[ 1467.484883][T19837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18150'.
[ 1467.526230][T19841] fuse: Bad value for 'fd'
[ 1467.559457][T15222] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[ 1467.721130][T15222] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1467.729211][T15222] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1467.740844][T15222] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1467.753423][T15222] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1467.761491][T15222] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1467.779396][T15222] usb 2-1: config 0 descriptor??
[ 1468.265292][T15222] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 1468.361169][T19893] netlink: 'syz.6.18176': attribute type 32 has an invalid length.
[ 1468.440862][T19899] netlink: 64 bytes leftover after parsing attributes in process `syz.4.18179'.
[ 1468.449671][T19899] netlink: 64 bytes leftover after parsing attributes in process `syz.4.18179'.
[ 1468.458301][T19900] netlink: 60 bytes leftover after parsing attributes in process `syz.6.18177'.
[ 1468.962795][T15124] usb 2-1: USB disconnect, device number 56
[ 1469.935066][T19954] fuse: Bad value for 'fd'
[ 1470.187990][T16217] Bluetooth: hci2: command tx timeout
[ 1470.618571][T15227] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[ 1470.926867][T15227] usb 2-1: Using ep0 maxpacket: 16
[ 1470.963376][T15227] usb 2-1: config 252 has an invalid interface number: 15 but max is 0
[ 1470.976930][T15227] usb 2-1: config 252 has no interface number 0
[ 1470.986364][T15227] usb 2-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 27578, setting to 64
[ 1471.026771][T15227] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29
[ 1471.034828][T15227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1471.042013][T15227] usb 2-1: Product: syz
[ 1471.046531][T15227] usb 2-1: Manufacturer: syz
[ 1471.048023][T15227] usb 2-1: SerialNumber: syz
[ 1471.068626][T15227] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1471.174947][T19995] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[ 1471.178815][T19995] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[ 1471.186708][T19995] overlayfs: missing 'lowerdir'
[ 1471.276783][T27222] usb 2-1: Failed to submit usb control message: -71
[ 1471.276826][T15227] usb 2-1: USB disconnect, device number 57
[ 1471.282747][T27222] usb 2-1: unable to send the bmi data to the device: -71
[ 1471.289894][T27222] usb 2-1: unable to get target info from device
[ 1471.292125][T27222] usb 2-1: could not get target info (-71)
[ 1471.294204][T27222] usb 2-1: could not probe fw (-71)
[ 1471.514289][T19999] fuse: Bad value for 'fd'
[ 1471.555300][T20001] netlink: 20 bytes leftover after parsing attributes in process `syz.6.18222'.
[ 1471.917151][T20006] netlink: 36 bytes leftover after parsing attributes in process `syz.6.18225'.
[ 1471.921653][T20007] loop1: detected capacity change from 0 to 512
[ 1471.931859][T20007] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[ 1471.944319][T20007] EXT4-fs (loop1): orphan cleanup on readonly fs
[ 1471.949920][T20007] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.18224: Block bitmap for bg 0 marked uninitialized
[ 1471.960820][T20007] loop1: lost filesystem error report for type 5 error -117
[ 1471.961210][T20007] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem
[ 1471.964218][    C0] EXT4-fs (loop1): error count since last fsck: 1
[ 1471.964236][    C0] EXT4-fs (loop1): initial error at time 2240: ext4_read_block_bitmap_nowait:517
[ 1471.964254][    C0] EXT4-fs (loop1): last error at time 2240: ext4_read_block_bitmap_nowait:517
[ 1471.982110][T20007] loop1: lost filesystem error report for type 5 error -117
[ 1471.982606][T20007] EXT4-fs (loop1): 1 orphan inode deleted
[ 1471.992188][T20007] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[ 1472.008063][T20007] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[ 1472.016211][T20007] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[ 1472.032773][T20007] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.18224: Block bitmap for bg 0 marked uninitialized
[ 1472.061394][T20007] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.18224: Block bitmap for bg 0 marked uninitialized
[ 1472.082635][T20007] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.18224: Block bitmap for bg 0 marked uninitialized
[ 1472.088502][T20007] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.18224: Block bitmap for bg 0 marked uninitialized
[ 1472.095891][T20007] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.18224: Block bitmap for bg 0 marked uninitialized
[ 1472.101908][T20007] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.18224: Block bitmap for bg 0 marked uninitialized
[ 1472.145168][T17874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1472.189469][T20019] tmpfs: Bad value for 'mpol'
[ 1473.007017][T20024] EXT4-fs (loop13): unable to read superblock
[ 1473.274368][T20037] netlink: 'syz.4.18237': attribute type 12 has an invalid length.
[ 1473.279780][T20037] netlink: 132 bytes leftover after parsing attributes in process `syz.4.18237'.
[ 1473.368725][T20041] loop1: detected capacity change from 0 to 256
[ 1473.390351][T20041] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xcbfa8d46, utbl_chksum : 0xe619d30d)
[ 1473.408312][T20041] exFAT-fs (loop1): failed to load alloc-bitmap
[ 1473.413722][T20041] exFAT-fs (loop1): failed to recognize exfat type
[ 1473.828524][T20061] loop1: detected capacity change from 0 to 512
[ 1473.844181][T20061] EXT4-fs (loop1): 1 truncate cleaned up
[ 1473.851664][T20061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1473.926372][T20063] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.18248: bg 0: block 465: padding at end of block bitmap is not set
[ 1473.959119][T20063] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1144 with error 28
[ 1473.973903][T20063] EXT4-fs (loop1): This should not happen!! Data will be lost
[ 1473.973903][T20063] 
[ 1473.986442][T20063] EXT4-fs (loop1): Total free blocks count 0
[ 1473.995169][T20063] EXT4-fs (loop1): Free/Dirty block details
[ 1474.000122][T20063] EXT4-fs (loop1): free_blocks=0
[ 1474.003941][T20063] EXT4-fs (loop1): dirty_blocks=1144
[ 1474.010785][T20063] EXT4-fs (loop1): Block reservation details
[ 1474.016668][T20063] EXT4-fs (loop1): i_reserved_data_blocks=1144
[ 1474.735503][T17874] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[ 1474.743788][T17874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1474.902388][T20097] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18264'.
[ 1474.905339][T20097] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18264'.
[ 1475.103868][ T6960] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[ 1475.279467][ T6960] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32
[ 1475.283183][ T6960] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 129
[ 1475.293356][ T6960] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[ 1475.296421][ T6960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1475.299028][ T6960] usb 2-1: Product: syz
[ 1475.300483][ T6960] usb 2-1: Manufacturer: syz
[ 1475.301962][ T6960] usb 2-1: SerialNumber: syz
[ 1475.305092][ T6960] usb 2-1: config 0 descriptor??
[ 1475.377260][T20116] overlayfs: failed to clone lowerpath
[ 1475.954165][ T6960] mos7840 2-1:0.0: required endpoints missing
[ 1475.962935][ T6960] usb 2-1: USB disconnect, device number 58
[ 1476.737599][T20189] loop1: detected capacity change from 0 to 1024
[ 1476.747883][T20189] hfsplus: failed to load extents file
[ 1476.881977][T20197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18312'.
[ 1477.403149][T20233] loop1: detected capacity change from 0 to 64
[ 1477.414113][T20233] MINIX-fs: bad superblock or unable to read bitmaps
[ 1477.608919][T20249] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[ 1477.611954][T20249] overlayfs: conflicting lowerdir path
[ 1477.792985][T20266] overlayfs: conflicting options: nfs_export=on,index=off
[ 1477.884087][T20276] netlink: 176 bytes leftover after parsing attributes in process `syz.4.18348'.
[ 1477.890497][T20276] sch_tbf: peakrate 3 is lower than or equals to rate 183 !
[ 1478.491705][T20280] loop1: detected capacity change from 0 to 131072
[ 1478.549261][T20280] F2FS-fs (loop1): invalid crc value
[ 1478.552137][T20280] F2FS-fs (loop1): Skip to start discard thread for readonly image
[ 1478.641522][T20280] F2FS-fs (loop1): Mismatch valid blocks 4 vs. 6
[ 1478.646151][T20280] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117)
[ 1478.965943][T20296] netlink: 'syz.4.18357': attribute type 49 has an invalid length.
[ 1479.027821][T20298] fuse: Bad value for 'fd'
[ 1479.452782][T15224] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[ 1479.613083][T15224] usb 2-1: Using ep0 maxpacket: 8
[ 1479.622377][T15224] usb 2-1: config 0 has an invalid interface number: 186 but max is 0
[ 1479.627140][T15224] usb 2-1: config 0 has no interface number 0
[ 1479.631766][T15224] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1479.642785][T15224] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1479.650012][T15224] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1479.659864][T15224] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1479.666994][T15224] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1479.676434][T15224] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1479.686141][T15224] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[ 1479.698731][T15224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1479.702240][T15224] usb 2-1: Product: syz
[ 1479.704243][T15224] usb 2-1: Manufacturer: syz
[ 1479.705972][T15224] usb 2-1: SerialNumber: syz
[ 1479.713268][T15224] usb 2-1: config 0 descriptor??
[ 1479.720541][T20312] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1480.017585][T15224] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0
[ 1480.035831][T15224] usb 2-1: USB disconnect, device number 59
[ 1480.183928][T20380] fuse: Bad value for 'fd'
[ 1480.699223][T20398] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.18407'.
[ 1480.739974][T20400] loop1: detected capacity change from 0 to 128
[ 1480.746973][T20400] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002]
[ 1480.750581][T20400] System zones: 1-3, 19-19, 35-36
[ 1480.756128][T20400] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1480.815901][T17874] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1480.937027][T20409] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18412'.
[ 1481.096429][T20422] overlayfs: failed to resolve 'cgroup': -2
[ 1481.517675][T20450] 9p: Bad value for 'rfdno'
[ 1481.560701][T20453] fuse: fd is not a fuse device
[ 1481.662638][T20459] netlink: 28 bytes leftover after parsing attributes in process `syz.6.18433'.
[ 1481.879279][T20466] binfmt_misc: register: failed to install interpreter file ./file2
[ 1481.944457][T20467] fuse: fd is not a fuse device
[ 1482.192919][T20475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18440'.
[ 1482.947541][T20517] netlink: 12 bytes leftover after parsing attributes in process `syz.6.18457'.
[ 1483.609752][T15222] usb 2-1: new low-speed USB device number 60 using dummy_hcd
[ 1483.867424][T15222] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1483.874974][T15222] usb 2-1: config 0 has no interface number 0
[ 1483.880283][T15222] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1483.885052][T15222] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1483.889474][T15222] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1483.896833][T15222] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1483.907217][T15222] usb 2-1: config 0 descriptor??
[ 1483.914269][T20529] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1483.934069][T15222] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1484.163523][T15224] usb 2-1: USB disconnect, device number 60
[ 1484.195383][T20560] Bluetooth: MGMT ver 1.23
[ 1484.354489][T20568] xt_cgroup: path and classid specified
[ 1484.429067][   T33] audit: type=1326 audit(2251.875:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20571 comm="syz.4.18483" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc7f179cdd9 code=0x0
[ 1485.583383][T20617] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18497'.
[ 1485.592317][T20617] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18497'.
[ 1486.128940][T20644] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[ 1486.134035][T20644] overlayfs: missing 'lowerdir'
[ 1486.753033][T20673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1486.757912][T20673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1487.861883][   T33] audit: type=1326 audit(2255.085:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20728 comm="syz.1.18547" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7df9cdd9 code=0x7ffc0000
[ 1487.884494][   T33] audit: type=1326 audit(2255.085:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20728 comm="syz.1.18547" exe="/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f8e7df9cdd9 code=0x7ffc0000
[ 1487.903818][   T33] audit: type=1326 audit(2255.085:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20728 comm="syz.1.18547" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7df9cdd9 code=0x7ffc0000
[ 1487.931140][   T33] audit: type=1326 audit(2255.085:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20728 comm="syz.1.18547" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7df9cdd9 code=0x7ffc0000
[ 1487.954562][   T33] audit: type=1326 audit(2255.085:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20728 comm="syz.1.18547" exe="/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f8e7df9cdd9 code=0x7ffc0000
[ 1487.974920][   T33] audit: type=1326 audit(2255.085:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20728 comm="syz.1.18547" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7df9cdd9 code=0x7ffc0000
[ 1487.982327][T20734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18549'.
[ 1487.994278][   T33] audit: type=1326 audit(2255.085:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20728 comm="syz.1.18547" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e7df9cdd9 code=0x7ffc0000
[ 1489.414128][T20771] loop1: detected capacity change from 0 to 131072
[ 1489.419217][T20771] F2FS-fs (loop1): Test dummy encryption mode enabled
[ 1489.421958][T20771] F2FS-fs (loop1): invalid crc value
[ 1489.449879][T20771] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1489.455814][   T33] audit: type=1326 audit(2256.573:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20796 comm="syz.6.18578" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6da999cdd9 code=0x0
[ 1489.463348][T20771] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 1490.046350][T20808] loop1: detected capacity change from 0 to 32768
[ 1490.049320][T20808] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.18582 (20808)
[ 1490.055890][T20808] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1490.059142][T20808] BTRFS info (device loop1): using sha256 checksum algorithm
[ 1490.140054][T20808] BTRFS info (device loop1): rebuilding free space tree
[ 1490.208010][T20808] BTRFS info (device loop1): enabling ssd optimizations
[ 1490.213793][T20808] BTRFS info (device loop1): using spread ssd allocation scheme
[ 1490.219947][T20808] BTRFS info (device loop1): enabling free space tree
[ 1490.225141][T20808] BTRFS info (device loop1): force clearing of disk cache
[ 1490.230402][T20808] BTRFS info (device loop1): enabling auto defrag
[ 1490.234776][T20808] BTRFS info (device loop1): max_inline set to 0
[ 1490.308338][   T33] audit: type=1400 audit(2257.378:2970): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F26AE18 pid=20825 comm="syz.4.18583"
[ 1490.617268][T27223] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[ 1490.619734][T17874] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1490.699312][T20851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18595'.
[ 1490.811656][ T1377] ieee802154 phy0 wpan0: encryption failed: -22
[ 1491.591958][T20885] netlink: 'syz.6.18609': attribute type 10 has an invalid length.
[ 1491.777158][T20885] team0: Device wg2 is of different type
[ 1492.845010][T20926] fuse: fd is not a fuse device
[ 1493.733488][T20964] netlink: 20 bytes leftover after parsing attributes in process `syz.6.18642'.
[ 1494.064121][T20976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18648'.
[ 1494.067395][T20976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18648'.
[ 1494.235285][T20982] loop1: detected capacity change from 0 to 4096
[ 1494.239283][T20982] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[ 1494.255635][T20982] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[ 1494.462068][T20986] loop1: detected capacity change from 0 to 512
[ 1494.493427][T20986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1494.509079][T17874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1494.760348][T21016] loop1: detected capacity change from 0 to 1024
[ 1494.766855][T21016] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[ 1495.168587][T21038] loop1: detected capacity change from 0 to 64
[ 1495.183830][   T33] audit: type=1800 audit(2261.945:2971): pid=21038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.18677" name="file1" dev="loop1" ino=5 res=0 errno=0
[ 1495.616797][T21052] loop1: detected capacity change from 0 to 4096
[ 1496.324444][T21063] bond1: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[ 1496.333994][T21063] bond1 (unregistering): Released all slaves
[ 1496.742973][T15224] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[ 1496.905224][T15224] usb 2-1: Using ep0 maxpacket: 16
[ 1496.909859][T15224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1496.915557][T15224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1496.920142][T15224] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1496.925824][T15224] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 1496.929683][T15224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1496.935351][T15224] usb 2-1: config 0 descriptor??
[ 1497.381984][T15224] shield 0003:0955:7214.002B: item fetching failed at offset 4/5
[ 1497.388144][T15224] shield 0003:0955:7214.002B: Parse failed
[ 1497.390630][T15224] shield 0003:0955:7214.002B: probe with driver shield failed with error -22
[ 1497.602668][T15224] usb 2-1: USB disconnect, device number 61
[ 1497.689232][T21090] netlink: 84 bytes leftover after parsing attributes in process `syz.6.18700'.
[ 1498.291193][T21104] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18706'.
[ 1498.300542][T21104] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18706'.
[ 1498.550208][T21108] libceph: resolve '96.' (ret=-3): failed
[ 1499.015696][T21117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18713'.
[ 1500.834619][T21186] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 2
[ 1500.917411][   T33] audit: type=1326 audit(2267.307:2972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21190 comm="syz.1.18745" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e7df9cdd9 code=0x0
[ 1501.876117][T21218] loop1: detected capacity change from 0 to 8
[ 1501.917951][T21218] SQUASHFS error: Failed to read block 0x1ec: -5
[ 1501.920332][T21218] SQUASHFS error: Unable to read metadata cache entry [1ea]
[ 1501.934678][T21218] SQUASHFS error: Unable to read metadata cache entry [1ea]
[ 1502.185000][T21230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18763'.
[ 1502.201003][T21230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18763'.
[ 1502.224093][T12173] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1502.228297][T21230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18763'.
[ 1502.232877][T12173] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1502.237976][T12173] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1502.246341][T21230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18763'.
[ 1502.250803][T12173] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1502.445937][   T33] audit: type=1326 audit(2268.739:2973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21245 comm="syz.4.18771" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f179cdd9 code=0x7ffc0000
[ 1502.469570][   T33] audit: type=1326 audit(2268.748:2974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21245 comm="syz.4.18771" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f179cdd9 code=0x7ffc0000
[ 1502.488313][   T33] audit: type=1326 audit(2268.748:2975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21245 comm="syz.4.18771" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f179cdd9 code=0x7ffc0000
[ 1502.504855][   T33] audit: type=1326 audit(2268.748:2976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21245 comm="syz.4.18771" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f179cdd9 code=0x7ffc0000
[ 1502.516772][   T33] audit: type=1326 audit(2268.748:2977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21245 comm="syz.4.18771" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc7f179cdd9 code=0x7ffc0000
[ 1502.532591][   T33] audit: type=1326 audit(2268.748:2978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21245 comm="syz.4.18771" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f179cdd9 code=0x7ffc0000
[ 1502.552708][   T33] audit: type=1326 audit(2268.748:2979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21245 comm="syz.4.18771" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f179cdd9 code=0x7ffc0000
[ 1502.566008][   T33] audit: type=1326 audit(2268.748:2980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21245 comm="syz.4.18771" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc7f179cdd9 code=0x7ffc0000
[ 1502.580241][   T33] audit: type=1326 audit(2268.748:2981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21245 comm="syz.4.18771" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc7f179cdd9 code=0x7ffc0000
[ 1502.769319][T21268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18778'.
[ 1502.773105][T21268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18778'.
[ 1503.728800][T21305] netlink: 44 bytes leftover after parsing attributes in process `syz.4.18798'.
[ 1503.734666][T21305] netlink: 43 bytes leftover after parsing attributes in process `syz.4.18798'.
[ 1503.737750][T21305] netlink: 'syz.4.18798': attribute type 6 has an invalid length.
[ 1503.740691][T21305] netlink: 'syz.4.18798': attribute type 5 has an invalid length.
[ 1503.744167][T21305] netlink: 43 bytes leftover after parsing attributes in process `syz.4.18798'.
[ 1504.185057][T21322] loop1: detected capacity change from 0 to 32768
[ 1504.272148][T21326] /dev/nullb0: Can't lookup blockdev
[ 1504.456719][T21341] loop1: detected capacity change from 0 to 512
[ 1504.473168][T21341] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1504.506059][T21341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1504.713841][T21353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1505.726917][T21360] netlink: 4108 bytes leftover after parsing attributes in process `syz.4.18818'.
[ 1505.768701][T21362] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1505.840854][T21367] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[ 1505.941635][T17874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1506.110398][T21381]  speed is unknown, defaulting to 1000
[ 1506.451896][T21403] loop1: detected capacity change from 0 to 1024
[ 1506.781153][T21425] netlink: 'syz.4.18848': attribute type 3 has an invalid length.
[ 1506.783810][T21425] netlink: 'syz.4.18848': attribute type 3 has an invalid length.
[ 1506.788695][T21425] netlink: 'syz.4.18848': attribute type 10 has an invalid length.
[ 1506.794480][T21425] 8021q: adding VLAN 0 to HW filter on device team0
[ 1506.806984][T21425] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1508.430232][T21475] tmpfs: Bad value for 'mpol'
[ 1508.652589][T21489] __nla_validate_parse: 2 callbacks suppressed
[ 1508.652599][T21489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18878'.
[ 1509.079472][T21523] loop1: detected capacity change from 0 to 8
[ 1509.095626][T21523] unable to read id index table
[ 1509.134225][T21525] /dev/loop4: Can't lookup blockdev
[ 1509.184629][T21530] loop1: detected capacity change from 0 to 512
[ 1509.199327][T21530] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1509.223385][T21530] EXT4-fs (loop1): 1 truncate cleaned up
[ 1509.241388][T21530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1509.269900][T17874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1509.587629][T15124] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[ 1509.668610][T21561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18910'.
[ 1509.674999][T21561] ip6gretap1: entered promiscuous mode
[ 1509.676793][T21561] ip6gretap1: entered allmulticast mode
[ 1509.747970][T15124] usb 2-1: Using ep0 maxpacket: 32
[ 1509.752999][T15124] usb 2-1: config 0 has an invalid interface number: 86 but max is 0
[ 1509.755821][T15124] usb 2-1: config 0 has no interface number 0
[ 1509.757889][T15124] usb 2-1: config 0 interface 86 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1509.762953][T15124] usb 2-1: config 0 interface 86 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1509.766749][T15124] usb 2-1: config 0 interface 86 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0
[ 1509.770980][T15124] usb 2-1: config 0 interface 86 has no altsetting 0
[ 1509.777219][T15124] usb 2-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=6a.32
[ 1509.781236][T15124] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1509.784244][T15124] usb 2-1: Product: syz
[ 1509.785992][T15124] usb 2-1: Manufacturer: syz
[ 1509.787547][T15124] usb 2-1: SerialNumber: syz
[ 1509.791092][T15124] usb 2-1: config 0 descriptor??
[ 1509.796564][T21541] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1510.023427][T15124] ljca 2-1:0.86: submit rx urb failed: -90
[ 1510.027734][T15124] ljca 2-1:0.86: probe with driver ljca failed with error -90
[ 1510.039769][T15124] usb 2-1: USB disconnect, device number 62
[ 1510.541013][T21581] netlink: 212360 bytes leftover after parsing attributes in process `syz.6.18920'.
[ 1510.773286][T21603] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1510.976745][T15222] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[ 1511.324609][T15222] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1511.328610][T15222] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1511.337538][T15222] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1511.341108][T15222] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[ 1511.344115][T15222] usb 2-1: SerialNumber: syz
[ 1511.566131][T15222] usb 2-1: 0:2 : does not exist
[ 1511.582505][T15222] usb 2-1: USB disconnect, device number 63
[ 1511.608349][T10066] udevd[10066]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1512.653185][T21647] loop1: detected capacity change from 0 to 32768
[ 1512.656746][T21647] btrfs: Deprecated parameter 'usebackuproot'
[ 1512.659123][T21647] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[ 1512.665437][T21647] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.18949 (21647)
[ 1512.673028][T21647] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1512.677075][T21647] BTRFS info (device loop1): using crc32c checksum algorithm
[ 1512.777604][   T27] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[ 1512.785612][T21647] BTRFS error (device loop1): failed to load root extent
[ 1512.788622][T21647] BTRFS warning (device loop1): try to load backup roots slot 1
[ 1512.792018][T18230] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[ 1512.863341][T21647] BTRFS warning (device loop1): couldn't read tree root
[ 1512.865709][T21647] BTRFS warning (device loop1): try to load backup roots slot 2
[ 1512.870988][ T3402] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[ 1512.898109][T21647] BTRFS warning (device loop1): couldn't read tree root
[ 1512.901773][T21647] BTRFS warning (device loop1): try to load backup roots slot 3
[ 1512.932936][T21647] BTRFS info (device loop1): rebuilding free space tree
[ 1512.958323][T21647] BTRFS info (device loop1): disabling free space tree
[ 1512.961345][T21647] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1512.965637][T21647] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1512.972605][T21647] BTRFS info (device loop1): checking UUID tree
[ 1512.978817][T21647] BTRFS info (device loop1): enabling ssd optimizations
[ 1512.981593][T21647] BTRFS info (device loop1): using spread ssd allocation scheme
[ 1512.984783][T21647] BTRFS info (device loop1): turning on async discard
[ 1512.987785][T21647] BTRFS info (device loop1): force clearing of disk cache
[ 1512.990336][T21647] BTRFS info (device loop1): enabling auto defrag
[ 1512.992448][T21647] BTRFS info (device loop1): trying to use backup root at mount time
[ 1512.994993][T21647] BTRFS info (device loop1): use zstd compression, level 3
[ 1513.120417][T16217] Bluetooth: hci1: unexpected event for opcode 0x204b
[ 1513.170173][T17874] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1513.214311][T21694] fuse: fd is not a fuse device
[ 1513.294500][T21696] fuse: Bad value for 'fd'
[ 1513.294729][T21698] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1513.301145][T21698] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1514.094682][T21734] loop1: detected capacity change from 0 to 256
[ 1514.250129][T21739] loop1: detected capacity change from 0 to 1024
[ 1514.717127][T15227] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[ 1514.879984][T15227] usb 2-1: config 0 has no interfaces?
[ 1514.883949][T15227] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[ 1514.886956][T15227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1514.890087][T15227] usb 2-1: Product: syz
[ 1514.891963][T15227] usb 2-1: Manufacturer: syz
[ 1514.893764][T15227] usb 2-1: SerialNumber: syz
[ 1514.897319][T15227] usb 2-1: config 0 descriptor??
[ 1515.131228][T15222] usb 2-1: USB disconnect, device number 64
[ 1515.809391][T21778] sctp: [Deprecated]: syz.1.18999 (pid 21778) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1515.809391][T21778] Use struct sctp_sack_info instead
[ 1515.992356][T21786] xt_hashlimit: size too large, truncated to 1048576
[ 1516.541672][T21824] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[ 1516.846409][T21855] netlink: 'syz.6.19035': attribute type 29 has an invalid length.
[ 1516.859840][T21855] netlink: 'syz.6.19035': attribute type 29 has an invalid length.
[ 1516.870473][T21855] netlink: 500 bytes leftover after parsing attributes in process `syz.6.19035'.
[ 1516.921534][T15227] kernel write not supported for file [eventfd] (pid: 15227 comm: kworker/1:14)
[ 1517.201843][T21890] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1517.305685][T21899] loop1: detected capacity change from 0 to 256
[ 1517.322896][T21899] exFAT-fs (loop1): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001)
[ 1517.330009][T21899] exFAT-fs (loop1): failed to count the number of clusters in root
[ 1517.335983][T21899] exFAT-fs (loop1): failed to recognize exfat type
[ 1517.581149][T21910] loop1: detected capacity change from 0 to 32768
[ 1517.588046][T21910] xfs: Deprecated parameter 'attr2'
[ 1517.591623][T21910] XFS: attr2 mount option is deprecated.
[ 1517.603929][T21910] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1517.640620][T21910] XFS (loop1): Ending clean mount
[ 1517.651027][T21910] XFS (loop1): Quotacheck needed: Please wait.
[ 1517.753344][T21910] XFS (loop1): Quotacheck: Done.
[ 1517.789133][T17874] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1518.818701][T21991] 9p: Bad value for 'rfdno'
[ 1519.693773][T22023] loop1: detected capacity change from 0 to 2048
[ 1519.735859][T22023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1519.780598][T17874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1520.103278][T22048] netem: change failed
[ 1520.115248][T15227] usb 2-1: new full-speed USB device number 65 using dummy_hcd
[ 1520.175007][T22058] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19119'.
[ 1520.274721][T15227] usb 2-1: not running at top speed; connect to a high speed hub
[ 1520.279257][T15227] usb 2-1: config 64 has an invalid interface number: 145 but max is 0
[ 1520.282173][T15227] usb 2-1: config 64 has no interface number 0
[ 1520.284946][T15227] usb 2-1: config 64 interface 145 has no altsetting 0
[ 1520.289077][T15227] usb 2-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 4.20
[ 1520.292492][T15227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1520.296120][T15227] usb 2-1: Product: syz
[ 1520.298409][T15227] usb 2-1: Manufacturer: syz
[ 1520.300390][T15227] usb 2-1: SerialNumber: syz
[ 1520.545395][T15227] rtsx_usb 2-1:64.145: probe with driver rtsx_usb failed with error -22
[ 1520.554122][T15227] usb 2-1: USB disconnect, device number 65
[ 1521.620574][ T6960] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[ 1521.780610][ T6960] usb 2-1: Using ep0 maxpacket: 8
[ 1521.786744][ T6960] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1521.790246][ T6960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1521.794375][ T6960] usb 2-1: Product: syz
[ 1521.796176][ T6960] usb 2-1: Manufacturer: syz
[ 1521.798075][ T6960] usb 2-1: SerialNumber: syz
[ 1521.803023][ T6960] usb 2-1: config 0 descriptor??
[ 1522.024416][ T6960] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1522.246133][ T6960] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1522.252685][ T6960] usb 2-1: USB disconnect, device number 66
[ 1522.551447][T22122] netlink: 92 bytes leftover after parsing attributes in process `syz.4.19149'.
[ 1522.820770][T22131] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19153'.
[ 1523.376600][T22143] netlink: 'syz.4.19157': attribute type 9 has an invalid length.
[ 1524.149413][T22182] loop1: detected capacity change from 0 to 512
[ 1524.157589][T22182] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1524.165573][T22182] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1524.175304][T22182] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.19176: invalid indirect mapped block 83886080 (level 1)
[ 1524.187159][T22182] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[ 1524.187409][T22182] EXT4-fs (loop1): Remounting filesystem read-only
[ 1524.194184][    C0] EXT4-fs (loop1): error count since last fsck: 1
[ 1524.196771][    C0] EXT4-fs (loop1): initial error at time 2295: ext4_free_branches:1023: inode 16
[ 1524.200268][    C0] EXT4-fs (loop1): last error at time 2295: ext4_free_branches:1023: inode 16
[ 1524.217234][T22182] EXT4-fs (loop1): 1 orphan inode deleted
[ 1524.219643][T22182] EXT4-fs (loop1): 1 truncate cleaned up
[ 1524.222620][T22182] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1524.232316][T22182] EXT4-fs warning (device loop1): ext4_empty_dir:3104: inode #2: comm syz.1.19176: directory missing '..'
[ 1524.247810][T17874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1524.842662][T22218] fuse: Bad value for 'fd'
[ 1524.878437][T22222] loop1: detected capacity change from 0 to 128
[ 1524.885734][T22222] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1524.959111][T17874] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1526.645986][T22325] netlink: 'syz.1.19242': attribute type 30 has an invalid length.
[ 1526.681802][T22327] loop1: detected capacity change from 0 to 1024
[ 1526.967232][T22340] nfs: Unknown parameter 'ntext'
[ 1528.823693][T22346] Set syz1 is full, maxelem 65536 reached
[ 1528.889067][T22369] netlink: 44 bytes leftover after parsing attributes in process `syz.6.19262'.
[ 1528.891919][T22369] netlink: 43 bytes leftover after parsing attributes in process `syz.6.19262'.
[ 1528.896352][T22369] netlink: 'syz.6.19262': attribute type 6 has an invalid length.
[ 1528.899100][T22369] netlink: 'syz.6.19262': attribute type 5 has an invalid length.
[ 1528.901730][T22369] netlink: 43 bytes leftover after parsing attributes in process `syz.6.19262'.
[ 1529.843988][T22396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19274'.
[ 1530.140794][T22416] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19286'.
[ 1530.626550][T22451] siw: device registration error -23
[ 1531.291711][T16217] Bluetooth: hci2: command 0x0406 tx timeout
[ 1531.444518][T22469] loop1: detected capacity change from 0 to 131072
[ 1531.451797][T22469] F2FS-fs (loop1): invalid crc value
[ 1531.498685][T22469] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1531.510707][T22469] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 1531.519413][T22499] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1531.545972][T22469] F2FS-fs (loop1): Corrupted max_depth of 3: 769
[ 1532.306932][T22550] netlink: 'syz.6.19333': attribute type 1 has an invalid length.
[ 1532.309538][T22550] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19333'.
[ 1532.463298][T22562] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[ 1532.581245][T22570] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19342'.
[ 1532.924895][T22585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19348'.
[ 1533.507380][T22591] loop1: detected capacity change from 0 to 256
[ 1533.529646][T22591] exfat: Deprecated parameter 'namecase'
[ 1533.542153][T22591] exfat: Deprecated parameter 'namecase'
[ 1533.559907][T22591] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8300b014, utbl_chksum : 0xe619d30d)
[ 1533.568665][T22591] exFAT-fs (loop1): start_clu is invalid cluster(0xff000008)
[ 1533.720922][T22610] loop1: detected capacity change from 0 to 256
[ 1533.726450][T22610] exfat: Deprecated parameter 'utf8'
[ 1533.742826][T22611] ptrace attach of "/syz-executor exec"[22603] was attempted by "/syz-executor exec"[22611]
[ 1533.749197][T22610] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[ 1534.202613][T22624] netlink: 60 bytes leftover after parsing attributes in process `syz.6.19368'.
[ 1534.205535][T22624] netlink: 48 bytes leftover after parsing attributes in process `syz.6.19368'.
[ 1534.243816][T16217] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1534.270090][T16217] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1534.271533][T22628] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[ 1534.278950][T16217] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1534.282120][T22628] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.19369'.
[ 1534.293104][T16217] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1534.296947][T16217] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1534.411511][T22642] Timeout policy `syz0' can only be used by L3 protocol number 0
[ 1534.525742][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1534.633935][T22625]  speed is unknown, defaulting to 1000
[ 1534.690332][T22666] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1534.695611][T22666] bridge0: port 3(syz_tun) entered disabled state
[ 1534.698592][T22666] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1534.701805][T22666] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1534.796607][T22675] netlink: 56 bytes leftover after parsing attributes in process `syz.6.19387'.
[ 1534.910764][T22625] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1534.913793][T22625] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1534.916868][T22625] bridge_slave_0: entered allmulticast mode
[ 1534.924606][T22625] bridge_slave_0: entered promiscuous mode
[ 1534.928179][T22625] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1534.930873][T22625] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1534.933563][T22625] bridge_slave_1: entered allmulticast mode
[ 1534.937005][T22625] bridge_slave_1: entered promiscuous mode
[ 1534.958929][T22625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1534.965009][T22625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1534.982324][T22625] team0: Port device team_slave_0 added
[ 1534.985995][T22625] team0: Port device team_slave_1 added
[ 1535.001345][T22625] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1535.003471][T22625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1535.011897][T22625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1535.016724][T22625] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1535.019097][T22625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1535.027678][T22625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1535.063362][T22625] hsr_slave_0: entered promiscuous mode
[ 1535.065798][T22625] hsr_slave_1: entered promiscuous mode
[ 1535.067999][T22625] debugfs: 'hsr0' already exists in 'hsr'
[ 1535.070230][T22625] Cannot create hsr debugfs directory
[ 1536.086184][T22722] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1536.580358][T16217] Bluetooth: hci0: command tx timeout
[ 1536.588837][T22625] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1536.595017][T22625] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1536.599772][T22625] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1536.649030][T22625] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1536.652127][T22625] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1536.656166][T22625] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1536.663604][T22625] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1536.679561][T22625] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1536.701833][T22749] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19399'.
[ 1536.713541][T22749] hsr_slave_1 (unregistering): left promiscuous mode
[ 1536.755628][T22625] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1536.786527][T22625] 8021q: adding VLAN 0 to HW filter on device team0
[ 1536.802592][T12420] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1536.805007][T12420] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1536.815465][T12420] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1536.817808][T12420] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1537.449592][T22625] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1537.528611][T22625] veth0_vlan: entered promiscuous mode
[ 1537.534830][T22625] veth1_vlan: entered promiscuous mode
[ 1537.564117][T22625] veth0_macvtap: entered promiscuous mode
[ 1537.572483][T22625] veth1_macvtap: entered promiscuous mode
[ 1537.588904][T22625] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1537.599305][T22625] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1537.617864][ T5751] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1537.625977][ T5751] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1537.632836][ T5751] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1537.642116][ T5751] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1537.894092][ T3402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1537.906242][ T3402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1537.961458][ T3402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1537.964427][ T3402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1538.803053][T16217] Bluetooth: hci0: command tx timeout
[ 1538.959018][T27222] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1
[ 1539.557391][T22838] IPVS: dh: FWM 3 0x00000003 - no destination available
[ 1539.585985][ T6954] IPVS: starting estimator thread 0...
[ 1539.685625][T22839] IPVS: using max 86 ests per chain, 206400 per kthread
[ 1539.927527][T22851] netlink: 16 bytes leftover after parsing attributes in process `syz.6.19425'.
[ 1539.964201][T22853] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19426'.
[ 1540.170610][T22860] netlink: 16 bytes leftover after parsing attributes in process `syz.6.19429'.
[ 1540.175245][T22860] netlink: 16 bytes leftover after parsing attributes in process `syz.6.19429'.
[ 1540.335410][T22868] (syz.0.19433,22868,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory.
[ 1541.024916][T16217] Bluetooth: hci0: command tx timeout
[ 1541.370640][   T33] audit: type=1800 audit(2567.166:2982): pid=22912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.19455" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0
[ 1541.469082][T22920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19459'.
[ 1541.474151][T22920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19459'.
[ 1541.714190][T22931] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1542.541097][T22955] netlink: 6024 bytes leftover after parsing attributes in process `syz.6.19475'.
[ 1542.584930][T22958] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bond, syncid = 66, id = 0
[ 1542.588979][T22957] IPVS: stopping backup sync thread 22958 ...
[ 1542.671546][T22962] fuse: fd is not a fuse device
[ 1543.080922][T22986] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1543.083275][T22986] IPv6: NLM_F_CREATE should be set when creating new route
[ 1543.086599][T22986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19490'.
[ 1543.245883][T16217] Bluetooth: hci0: command tx timeout
[ 1543.799030][T23033] fuse: fd is not a fuse device
[ 1543.885195][T23037] netlink: 80 bytes leftover after parsing attributes in process `syz.6.19514'.
[ 1543.892072][T23037] netlink: 80 bytes leftover after parsing attributes in process `syz.6.19514'.
[ 1546.028852][T23090] netlink: 144 bytes leftover after parsing attributes in process `syz.4.19537'.
[ 1546.114852][T16217] Bluetooth: hci2: unexpected event for opcode 0x203c
[ 1546.747636][T23106] netlink: 80 bytes leftover after parsing attributes in process `syz.4.19542'.
[ 1546.946511][T23121] netlink: 'syz.6.19549': attribute type 1 has an invalid length.
[ 1547.733243][T23161]  speed is unknown, defaulting to 1000
[ 1547.980686][T23171] Bluetooth: MGMT ver 1.23
[ 1548.388049][T23186] netlink: 'syz.6.19577': attribute type 4 has an invalid length.
[ 1548.402872][T23188] xt_TCPMSS: Only works on TCP SYN packets
[ 1549.065640][T23219] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19593'.
[ 1549.294464][T23224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19593'.
[ 1550.056918][T23242] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check.
[ 1550.186232][T23249] netlink: 'syz.6.19603': attribute type 1 has an invalid length.
[ 1551.163937][   T33] audit: type=1800 audit(2576.150:2983): pid=23269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.19611" name="file0" dev="overlay" ino=5224 res=0 errno=0
[ 1552.430972][T23290] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19620'.
[ 1554.864203][T23375] afs: Bad value for 'flock'
[ 1555.036516][T23387] openvswitch: netlink: Unknown nsh attribute 0
[ 1555.331535][T23404] sctp: [Deprecated]: syz.6.19671 (pid 23404) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1555.331535][T23404] Use struct sctp_sack_info instead
[ 1556.418750][ T1377] ieee802154 phy0 wpan0: encryption failed: -22
[ 1558.000531][T23446] fuse: Bad value for 'fd'
[ 1559.681045][T23501] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[ 1562.149392][T23581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1562.159514][T23581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1562.160093][T23585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19754'.
[ 1562.183728][T23580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1562.276519][T23591] netlink: 44 bytes leftover after parsing attributes in process `syz.0.19757'.
[ 1563.656499][T23642] netlink: 104 bytes leftover after parsing attributes in process `syz.6.19782'.
[ 1563.994160][T23660] bridge_slave_0 (unregistering): left allmulticast mode
[ 1563.997393][T23660] bridge_slave_0 (unregistering): left promiscuous mode
[ 1564.000355][T23660] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1564.117670][T23665] netlink: 272 bytes leftover after parsing attributes in process `syz.6.19793'.
[ 1564.340275][T16217] Bluetooth: hci2: unknown advertising packet type: 0x09
[ 1564.340346][T16217] Bluetooth: hci2: unknown advertising packet type: 0x21
[ 1564.360795][T23675] netlink: zone id is out of range
[ 1564.373400][T23675] netlink: zone id is out of range
[ 1564.384960][T23675] netlink: set zone limit has 4 unknown bytes
[ 1564.635683][T23689] 9p: Bad value for 'rfdno'
[ 1564.913828][   T26] smbdirect: ib_dev[syz1] removed
[ 1564.931796][T20893] syz_tun (unregistering): left allmulticast mode
[ 1564.935265][T20893] syz_tun (unregistering): left promiscuous mode
[ 1564.938965][T20893] bridge0: port 3(syz_tun) entered disabled state
[ 1564.962874][   T10] infiniband syz1: ib_query_port failed (-19)
[ 1565.284677][ T5713] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1565.296652][ T5713] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1565.304700][ T5713] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1565.307478][ T5713] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1565.317039][ T5713] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1565.504727][T23704]  speed is unknown, defaulting to 1000
[ 1565.744041][T23704] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1565.747111][T23704] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1565.750348][T23704] bridge_slave_0: entered allmulticast mode
[ 1565.754186][T23704] bridge_slave_0: entered promiscuous mode
[ 1565.758900][T23704] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1565.762043][T23704] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1565.765741][T23704] bridge_slave_1: entered allmulticast mode
[ 1565.769481][T23704] bridge_slave_1: entered promiscuous mode
[ 1565.797307][T23704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1565.804202][T23704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1565.831314][T23704] team0: Port device team_slave_0 added
[ 1565.838113][T23704] team0: Port device team_slave_1 added
[ 1565.867720][T23704] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1565.870615][T23704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1565.880625][T23704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1565.884930][T23704] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1565.886991][T23704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1565.895765][T23704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1565.927095][T23704] hsr_slave_0: entered promiscuous mode
[ 1565.931581][T23704] hsr_slave_1: entered promiscuous mode
[ 1565.938321][T23704] debugfs: 'hsr0' already exists in 'hsr'
[ 1565.941372][T23704] Cannot create hsr debugfs directory
[ 1566.534199][T23746] random: crng reseeded on system resumption
[ 1566.811426][T23748] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1566.814819][T23748] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1567.522693][T16217] Bluetooth: hci1: command tx timeout
[ 1567.650006][T23774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19830'.
[ 1568.214539][T23812] netlink: 'syz.4.19842': attribute type 3 has an invalid length.
[ 1568.277985][T23704] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1568.287674][T23704] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1568.292272][T23704] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1568.299697][T23704] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1568.304097][T23704] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1568.316292][T23704] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1568.324594][T23704] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1568.340423][T23704] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1568.439515][T23704] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1568.464343][T23704] 8021q: adding VLAN 0 to HW filter on device team0
[ 1568.477244][T18230] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1568.479487][T18230] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1568.486654][T16756] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1568.489348][T16756] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1568.737592][T23704] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1568.874852][T23704] veth0_vlan: entered promiscuous mode
[ 1568.887241][T23704] veth1_vlan: entered promiscuous mode
[ 1568.904534][T23704] veth0_macvtap: entered promiscuous mode
[ 1568.910204][T23704] veth1_macvtap: entered promiscuous mode
[ 1568.919374][T23704] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1568.926939][T23704] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1568.936834][T12173] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1568.943032][T12173] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1568.960666][T12173] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1568.972138][T12173] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1569.154761][T19909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1569.175243][T19909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1569.261208][T18230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1569.284184][T18230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1569.622161][   T33] audit: type=1326 audit(2593.602:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23901 comm="syz.7.19859" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb68f9cdd9 code=0x0
[ 1569.777891][T16217] Bluetooth: hci1: command tx timeout
[ 1571.141418][T23945] loop7: detected capacity change from 0 to 256
[ 1571.159069][T23945] FAT-fs (loop7): Directory bread(block 64) failed
[ 1571.163480][T23945] FAT-fs (loop7): Directory bread(block 65) failed
[ 1571.168942][T23945] FAT-fs (loop7): Directory bread(block 66) failed
[ 1571.171312][T23945] FAT-fs (loop7): Directory bread(block 67) failed
[ 1571.173503][T23945] FAT-fs (loop7): Directory bread(block 68) failed
[ 1571.175661][T23945] FAT-fs (loop7): Directory bread(block 69) failed
[ 1571.179321][T23945] FAT-fs (loop7): Directory bread(block 70) failed
[ 1571.181845][T23945] FAT-fs (loop7): Directory bread(block 71) failed
[ 1571.184034][T23945] FAT-fs (loop7): Directory bread(block 72) failed
[ 1571.186160][T23945] FAT-fs (loop7): Directory bread(block 73) failed
[ 1571.970486][T16217] Bluetooth: hci1: command tx timeout
[ 1572.611706][T23965] netlink: 40 bytes leftover after parsing attributes in process `syz.4.19886'.
[ 1573.655890][T23983] openvswitch: netlink: Duplicate key (type 2).
[ 1574.017466][   T33] audit: type=1326 audit(2597.711:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23990 comm="syz.0.19898" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76eab9cdd9 code=0x0
[ 1574.191998][T16217] Bluetooth: hci1: command tx timeout
[ 1574.231607][T23993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19900'.
[ 1575.123907][T24007] pimreg3: entered allmulticast mode
[ 1575.225745][T24013] netlink: 92 bytes leftover after parsing attributes in process `syz.7.19909'.
[ 1575.230274][T24013] netlink: 92 bytes leftover after parsing attributes in process `syz.7.19909'.
[ 1575.288677][T24015] loop7: detected capacity change from 0 to 4096
[ 1575.320983][T24015] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[ 1575.326658][T24015] ntfs3(loop7): RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only.
[ 1575.380758][T24015] ntfs3(loop7): ino=19, mi_enum_attr
[ 1575.383872][T24015] ntfs3(loop7): ino=19, mi_enum_attr
[ 1575.386092][T24015] ntfs3(loop7): Failed to initialize $Extend/$ObjId.
[ 1575.546234][T24019] netlink: 36 bytes leftover after parsing attributes in process `syz.7.19912'.
[ 1575.583005][T24011] CIFS mount error: No usable UNC path provided in device string!
[ 1575.583005][T24011] 
[ 1575.586926][T24011] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1575.926890][T24041] netlink: 16 bytes leftover after parsing attributes in process `syz.7.19923'.
[ 1578.303852][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[ 1578.365954][T24100] netlink: 60 bytes leftover after parsing attributes in process `syz.4.19949'.
[ 1578.373106][T24100] netlink: 60 bytes leftover after parsing attributes in process `syz.4.19949'.
[ 1578.897674][T24117] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19957'.
[ 1579.059308][T24125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19961'.
[ 1579.062452][T24125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19961'.
[ 1582.519332][T24208] netlink: 'syz.4.19999': attribute type 1 has an invalid length.
[ 1582.522589][T24208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19999'.
[ 1582.559200][T24210] batadv_slave_0: entered promiscuous mode
[ 1582.563555][T24210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20000'.
[ 1582.615728][T24209] batadv_slave_0: left promiscuous mode
[ 1582.894036][T24228] netlink: 180 bytes leftover after parsing attributes in process `syz.4.20008'.
[ 1583.208166][T24259] loop7: detected capacity change from 0 to 2048
[ 1583.233088][T24262] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1583.288348][T24259] NILFS (loop7): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0
[ 1583.296374][T24259] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1583.318020][T24259] Remounting filesystem read-only
[ 1583.321691][T24259] NILFS (loop7): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0
[ 1583.326079][T24259] NILFS error (device loop7): nilfs_bmap_last_key: broken bmap (inode number=16)
[ 1583.331303][T24259] NILFS (loop7): error -5 truncating bmap (ino=16)
[ 1583.362254][T23704] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer
[ 1584.382483][T24282] loop7: detected capacity change from 0 to 512
[ 1584.386892][T24282] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1584.406629][T24282] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.20031: bad orphan inode 16
[ 1584.410834][T24282] loop7: lost filesystem error report for type 5 error -117
[ 1584.411171][T24282] ext4_test_bit(bit=15, block=4) = 0
[ 1584.416535][T24282] EXT4-fs (loop7): 1 orphan inode deleted
[ 1584.418947][    C1] EXT4-fs (loop7): error count since last fsck: 1
[ 1584.418964][    C1] EXT4-fs (loop7): initial error at time 2607: ext4_orphan_get:1423
[ 1584.418979][    C1] EXT4-fs (loop7): last error at time 2607: ext4_orphan_get:1423
[ 1584.432481][T24282] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1584.478685][T23704] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1584.792497][   T33] audit: type=1326 audit(2607.799:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24297 comm="syz.7.20038" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb68f9cdd9 code=0x0
[ 1585.048467][T24307] IPVS: ovf: FWM 3 0x00000003 - no destination available
[ 1585.912456][T24336] loop7: detected capacity change from 0 to 1024
[ 1585.916604][T24336] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1585.918860][T24336] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1585.923299][T24336] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1585.936206][T24336] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1585.957143][T23704] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1586.115713][T24343] batadv_slave_1: entered promiscuous mode
[ 1586.121412][T24342] batadv_slave_1: left promiscuous mode
[ 1588.765657][T24393] loop7: detected capacity change from 0 to 131072
[ 1588.770729][T24393] F2FS-fs (loop7): invalid crc value
[ 1588.802413][T24393] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1588.813264][T24393] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[ 1588.955093][T24427] netlink: 36 bytes leftover after parsing attributes in process `syz.4.20095'.
[ 1590.818055][T24475] netlink: 16 bytes leftover after parsing attributes in process `syz.4.20117'.
[ 1591.102274][T24491] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1591.130593][T24491] bond1: (slave lo): Enslaving as an active interface with an up link
[ 1591.139256][T24491] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[ 1591.323236][T24500] netlink: 32 bytes leftover after parsing attributes in process `syz.4.20129'.
[ 1591.326319][T24500] netlink: 32 bytes leftover after parsing attributes in process `syz.4.20129'.
[ 1592.468004][T24534] loop7: detected capacity change from 0 to 512
[ 1592.471237][T24534] ext4: Unknown parameter 'obj_user'
[ 1593.725851][T24562] loop7: detected capacity change from 0 to 8
[ 1594.073070][T24581] netlink: 12 bytes leftover after parsing attributes in process `syz.7.20164'.
[ 1594.323036][T16217] Bluetooth: hci2: unexpected event for opcode 0x2028
[ 1596.902780][T24660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20205'.
[ 1596.905764][T24660] netlink: 'syz.4.20205': attribute type 30 has an invalid length.
[ 1596.918093][T30922] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1596.922183][T30922] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1596.928158][T30922] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1596.935300][T30922] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1596.980301][T24662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20206'.
[ 1596.986980][T24662] netlink: 184 bytes leftover after parsing attributes in process `syz.4.20206'.
[ 1596.991107][T24662] netlink: 'syz.4.20206': attribute type 3 has an invalid length.
[ 1597.177299][T24673] fuse: Bad value for 'fd'
[ 1597.507125][T24689] netlink: 16 bytes leftover after parsing attributes in process `syz.4.20219'.
[ 1597.633658][T24699] overlayfs: failed to resolve '/!B!B!B!B!B!B!B!B!B!B!B!B!B!B!B!B!B!B!B!B!B!B./file0': -2
[ 1597.944334][T24730] netlink: 76 bytes leftover after parsing attributes in process `syz.7.20239'.
[ 1598.802046][T24755] xt_hashlimit: size too large, truncated to 1048576
[ 1599.090876][T24770] binder: 24769:24770 ioctl c0306201 2000000003c0 returned -14
[ 1599.693484][T24795] CIFS mount error: No usable UNC path provided in device string!
[ 1599.693484][T24795] 
[ 1599.696766][T24795] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1599.995998][T24811] netlink: 40 bytes leftover after parsing attributes in process `syz.4.20275'.
[ 1600.001283][T24811] netlink: 40 bytes leftover after parsing attributes in process `syz.4.20275'.
[ 1600.105597][T24822] tmpfs: Bad value for 'mpol'
[ 1602.404673][T24848] netlink: 36 bytes leftover after parsing attributes in process `syz.7.20290'.
[ 1602.473137][T24852] syz_tun: entered promiscuous mode
[ 1602.475651][T24852] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[ 1602.636644][T24856] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20293'.
[ 1602.692312][T24856] bridge0: port 3(netdevsim0) entered blocking state
[ 1602.695507][T24856] bridge0: port 3(netdevsim0) entered disabled state
[ 1602.699194][T24856] netdevsim netdevsim7 netdevsim0: entered allmulticast mode
[ 1602.729925][T24856] netdevsim netdevsim7 netdevsim0: entered promiscuous mode
[ 1602.739792][T24856] bridge0: port 3(netdevsim0) entered blocking state
[ 1602.742011][T24856] bridge0: port 3(netdevsim0) entered forwarding state
[ 1603.839548][T24876] netlink: 'syz.0.20302': attribute type 2 has an invalid length.
[ 1603.842321][T24876] netlink: 'syz.0.20302': attribute type 8 has an invalid length.
[ 1603.846360][T24876] netlink: 132 bytes leftover after parsing attributes in process `syz.0.20302'.
[ 1604.078877][T24898] sctp: [Deprecated]: syz.4.20313 (pid 24898) Use of int in maxseg socket option.
[ 1604.078877][T24898] Use struct sctp_assoc_value instead
[ 1604.815509][T16217] Bluetooth: hci2: unexpected event for opcode 0x0c2d
[ 1606.301777][T24937] PKCS7: Unknown OID: [4] 0.0.0.0(bad)
[ 1606.304086][T24937] PKCS7: Only support pkcs7_signedData type
[ 1606.539257][T24944] netlink: 'syz.0.20333': attribute type 21 has an invalid length.
[ 1607.165727][T12173] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1607.439538][ T5713] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1607.442481][T12173] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1607.472044][ T5713] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1607.476889][ T5713] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1607.481884][ T5713] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1607.493735][ T5713] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1607.615676][T12173] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1607.796929][T12173] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1607.985195][T24972]  speed is unknown, defaulting to 1000
[ 1608.077698][T12173] bridge_slave_1: left allmulticast mode
[ 1608.083677][T12173] bridge_slave_1: left promiscuous mode
[ 1608.089476][T12173] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1608.101241][T12173] bridge_slave_0: left allmulticast mode
[ 1608.106010][T12173] bridge_slave_0: left promiscuous mode
[ 1608.111207][T12173] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1608.458200][T12173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1608.485454][T12173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1608.493672][T12173] bond0 (unregistering): Released all slaves
[ 1608.521570][ T5355] 8021q: adding VLAN 0 to HW filter on device eth5
[ 1608.865711][ T5355] 8021q: adding VLAN 0 to HW filter on device eth6
[ 1608.967043][T12173] hsr_slave_0: left promiscuous mode
[ 1608.969920][T12173] hsr_slave_1: left promiscuous mode
[ 1608.972503][T12173] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1608.977222][T12173] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1608.990744][T12173] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1608.993230][T12173] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1609.012588][T12173] veth1_macvtap: left promiscuous mode
[ 1609.014649][T12173] veth0_macvtap: left promiscuous mode
[ 1609.017019][T12173] veth1_vlan: left promiscuous mode
[ 1609.019153][T12173] veth0_vlan: left promiscuous mode
[ 1609.310845][T12173] team0 (unregistering): Port device team_slave_1 removed
[ 1609.324832][T12173] team0 (unregistering): Port device team_slave_0 removed
[ 1609.475331][ T5355] 8021q: adding VLAN 0 to HW filter on device eth7
[ 1609.544463][T24972] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1609.548119][T24972] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1609.555979][T24972] bridge_slave_0: entered allmulticast mode
[ 1609.567441][T24972] bridge_slave_0: entered promiscuous mode
[ 1609.576287][T24972] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1609.579705][T24972] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1609.585853][T24972] bridge_slave_1: entered allmulticast mode
[ 1609.617731][T24972] bridge_slave_1: entered promiscuous mode
[ 1609.674552][ T5713] Bluetooth: hci0: command tx timeout
[ 1609.744111][T24972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1609.781753][T24972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1609.895494][T24972] team0: Port device team_slave_0 added
[ 1609.916228][T24972] team0: Port device team_slave_1 added
[ 1609.996107][T24972] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1610.011239][T24972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1610.042110][T24972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1610.047712][T24972] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1610.050439][T24972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1610.075764][T24972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1610.229372][T24972] hsr_slave_0: entered promiscuous mode
[ 1610.244516][T24972] hsr_slave_1: entered promiscuous mode
[ 1610.258547][T24972] debugfs: 'hsr0' already exists in 'hsr'
[ 1610.261204][T24972] Cannot create hsr debugfs directory
[ 1610.301534][T12173] IPVS: stop unused estimator thread 0...
[ 1610.359721][ T5355] 8021q: adding VLAN 0 to HW filter on device eth8
[ 1611.276836][T25074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20365'.
[ 1611.346005][T25076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20365'.
[ 1611.422579][T25076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20365'.
[ 1611.896017][ T5713] Bluetooth: hci0: command tx timeout
[ 1612.213874][T24972] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1612.260420][T24972] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1612.265382][T24972] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1612.294956][T24972] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1612.302782][T24972] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1612.335946][T24972] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1612.339628][T24972] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1612.344679][T24972] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1612.452108][T24972] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1612.471023][T24972] 8021q: adding VLAN 0 to HW filter on device team0
[ 1612.475916][T18214] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1612.478175][T18214] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1612.490329][T18214] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1612.493081][T18214] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1612.876135][T24972] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1613.102660][T24972] veth0_vlan: entered promiscuous mode
[ 1613.114258][T24972] veth1_vlan: entered promiscuous mode
[ 1613.141465][T24972] veth0_macvtap: entered promiscuous mode
[ 1613.148563][T24972] veth1_macvtap: entered promiscuous mode
[ 1613.166829][T24972] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1613.180062][T24972] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1613.191059][ T5751] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1613.204251][ T5751] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1613.219954][ T5751] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1613.244412][ T5751] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1613.423708][T13515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1613.434890][T13515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1613.550186][   T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1613.554951][   T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1613.752394][T25179] netlink: 132 bytes leftover after parsing attributes in process `syz.8.20378'.
[ 1613.755966][T25179] netlink: 132 bytes leftover after parsing attributes in process `syz.8.20378'.
[ 1613.758936][T25179] netlink: 39 bytes leftover after parsing attributes in process `syz.8.20378'.
[ 1614.114266][ T5713] Bluetooth: hci0: command tx timeout
[ 1614.518952][T25199] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.20387'.
[ 1615.073897][T25228] netlink: 16 bytes leftover after parsing attributes in process `syz.8.20401'.
[ 1615.079936][T25228] netem: incorrect gi model size
[ 1615.089828][T25228] netem: change failed
[ 1615.111919][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1615.116853][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1615.141393][T25237] netlink: 'syz.8.20405': attribute type 1 has an invalid length.
[ 1615.148755][T25237] netlink: 276 bytes leftover after parsing attributes in process `syz.8.20405'.
[ 1615.153385][T15222] ------------[ cut here ]------------
[ 1615.159207][T15222] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[ 1615.162329][T15222] WARNING: net/mac80211/rate.c:406 at __rate_control_send_low+0x524/0x800, CPU#0: kworker/0:9/15222
[ 1615.165548][T15222] Modules linked in:
[ 1615.167515][T15222] CPU: 0 UID: 0 PID: 15222 Comm: kworker/0:9 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1615.171812][T15222] Tainted: [L]=SOFTLOCKUP
[ 1615.173243][T15222] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1615.176503][T15222] Workqueue: mld mld_ifc_work
[ 1615.178285][T15222] RIP: 0010:__rate_control_send_low+0x5bb/0x800
[ 1615.180663][T15222] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80
[ 1615.187186][T15222] RSP: 0018:ffffc900046b6658 EFLAGS: 00010246
[ 1615.189528][T15222] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000
[ 1615.192097][T15222] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90422ad0
[ 1615.194696][T15222] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1615.197195][T15222] R10: 0000000000000004 R11: 0000000000000000 R12: ffff888104f630a8
[ 1615.199871][T15222] R13: 0000000000000000 R14: ffffffff90422ad0 R15: ffff88811f8231b8
[ 1615.202924][T15222] FS:  0000000000000000(0000) GS:ffff88818dc96000(0000) knlGS:0000000000000000
[ 1615.206417][T15222] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1615.209032][T15222] CR2: 00007fc7f254da08 CR3: 000000000e74a000 CR4: 00000000000006f0
[ 1615.211627][T15222] Call Trace:
[ 1615.212712][T15222]  <TASK>
[ 1615.213722][T15222]  rate_control_send_low+0x1a7/0x7b0
[ 1615.215935][T15222]  rate_control_get_rate+0x20b/0x5d0
[ 1615.217693][T15222]  ieee80211_tx_h_rate_ctrl+0xaf6/0x1760
[ 1615.219731][T15222]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[ 1615.222126][T15222]  invoke_tx_handlers_late+0xba/0x18a0
[ 1615.224143][T15222]  ? ieee80211_tx_h_select_key+0xd1b/0x1ab0
[ 1615.226526][T15222]  ieee80211_tx_dequeue+0x403e/0x54d0
[ 1615.228294][T15222]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[ 1615.230071][T15222]  ? ieee80211_next_txq+0x82e/0x9a0
[ 1615.231701][T15222]  ieee80211_handle_wake_tx_queue+0x132/0x2c0
[ 1615.234039][T15222]  ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10
[ 1615.236241][T15222]  ? ieee80211_queue_skb+0x182d/0x22c0
[ 1615.238154][T15222]  ? __local_bh_enable_ip+0xd0/0x130
[ 1615.239990][T15222]  ieee80211_queue_skb+0x1a1f/0x22c0
[ 1615.241984][T15222]  ieee80211_tx+0x2c2/0x4b0
[ 1615.243691][T15222]  ? __pfx_ieee80211_tx+0x10/0x10
[ 1615.245418][T15222]  ? ieee80211_xmit+0x315/0x400
[ 1615.247121][T15222]  __ieee80211_subif_start_xmit+0xd12/0x1660
[ 1615.249063][T15222]  ? __ieee80211_subif_start_xmit+0x2cf/0x1660
[ 1615.251445][T15222]  ? process_scheduled_works+0xb5d/0x1860
[ 1615.253510][T15222]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[ 1615.255556][T15222]  ? skb_network_protocol+0x23d/0x400
[ 1615.257366][T15222]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[ 1615.259459][T15222]  ieee80211_subif_start_xmit+0xf3/0x570
[ 1615.261640][T15222]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[ 1615.263961][T15222]  ? __pfx_netif_skb_features+0x10/0x10
[ 1615.266079][T15222]  dev_hard_start_xmit+0x2cd/0x830
[ 1615.267833][T15222]  __dev_queue_xmit+0x14d9/0x3950
[ 1615.269449][T15222]  ? __dev_queue_xmit+0x2b6/0x3950
[ 1615.271071][T15222]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 1615.272766][T15222]  ? neigh_resolve_output+0x438/0x750
[ 1615.274700][T15222]  ? eth_header+0x11b/0x200
[ 1615.276251][T15222]  ? __asan_memcpy+0x40/0x70
[ 1615.277788][T15222]  ? ip6_output+0x126/0x550
[ 1615.279385][T15222]  ip6_output+0x340/0x550
[ 1615.280761][T15222]  ? __pfx_ip6_output+0x10/0x10
[ 1615.282319][T15222]  NF_HOOK+0x177/0x4f0
[ 1615.283648][T15222]  ? __pfx_NF_HOOK+0x10/0x10
[ 1615.285299][T15222]  ? __pfx_dst_output+0x10/0x10
[ 1615.286924][T15222]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1615.288655][T15222]  ? __local_bh_enable_ip+0xd0/0x130
[ 1615.290613][T15222]  ? icmp6_dst_alloc+0x3a6/0x440
[ 1615.292370][T15222]  mld_sendpack+0x8b4/0xe40
[ 1615.294132][T15222]  ? mld_sendpack+0x213/0xe40
[ 1615.295807][T15222]  ? __pfx_mld_sendpack+0x10/0x10
[ 1615.297954][T15222]  mld_ifc_work+0x835/0xe70
[ 1615.299746][T15222]  ? process_scheduled_works+0xa70/0x1860
[ 1615.301560][T15222]  process_scheduled_works+0xb5d/0x1860
[ 1615.303661][T15222]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1615.305796][T15222]  ? assign_work+0x3d5/0x5e0
[ 1615.307748][T15222]  worker_thread+0xa53/0xfc0
[ 1615.309126][T15222]  kthread+0x388/0x470
[ 1615.310570][T15222]  ? __pfx_worker_thread+0x10/0x10
[ 1615.312639][T15222]  ? __pfx_kthread+0x10/0x10
[ 1615.314405][T15222]  ret_from_fork+0x514/0xb70
[ 1615.315834][T15222]  ? __pfx_ret_from_fork+0x10/0x10
[ 1615.317436][T15222]  ? __switch_to+0xc79/0x1410
[ 1615.318935][T15222]  ? __pfx_kthread+0x10/0x10
[ 1615.320454][T15222]  ret_from_fork_asm+0x1a/0x30
[ 1615.322083][T15222]  </TASK>
[ 1615.323099][T15222] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1615.325937][T15222] CPU: 0 UID: 0 PID: 15222 Comm: kworker/0:9 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1615.329934][T15222] Tainted: [L]=SOFTLOCKUP
[ 1615.331676][T15222] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1615.335075][T15222] Workqueue: mld mld_ifc_work
[ 1615.336574][T15222] Call Trace:
[ 1615.337660][T15222]  <TASK>
[ 1615.338637][T15222]  vpanic+0x56c/0xa60
[ 1615.339907][T15222]  ? __pfx__printk+0x10/0x10
[ 1615.341303][T15222]  ? __pfx_vpanic+0x10/0x10
[ 1615.342636][T15222]  ? is_bpf_text_address+0x292/0x2b0
[ 1615.344299][T15222]  ? is_bpf_text_address+0x26/0x2b0
[ 1615.345932][T15222]  panic+0xc5/0xd0
[ 1615.347171][T15222]  ? __pfx_panic+0x10/0x10
[ 1615.348589][T15222]  ? ret_from_fork_asm+0x1a/0x30
[ 1615.350187][T15222]  __warn+0x315/0x4c0
[ 1615.351671][T15222]  ? __rate_control_send_low+0x524/0x800
[ 1615.353485][T15222]  ? __rate_control_send_low+0x524/0x800
[ 1615.355258][T15222]  __report_bug+0x29a/0x540
[ 1615.356694][T15222]  ? __rate_control_send_low+0x524/0x800
[ 1615.358860][T15222]  ? __pfx___report_bug+0x10/0x10
[ 1615.360887][T15222]  report_bug_entry+0x19a/0x290
[ 1615.362793][T15222]  ? __rate_control_send_low+0x5bb/0x800
[ 1615.364782][T15222]  ? __rate_control_send_low+0x5c0/0x800
[ 1615.366580][T15222]  handle_bug+0xce/0x200
[ 1615.367927][T15222]  exc_invalid_op+0x1a/0x50
[ 1615.369536][T15222]  asm_exc_invalid_op+0x1a/0x20
[ 1615.371030][T15222] RIP: 0010:__rate_control_send_low+0x5bb/0x800
[ 1615.373183][T15222] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80
[ 1615.379282][T15222] RSP: 0018:ffffc900046b6658 EFLAGS: 00010246
[ 1615.381173][T15222] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000
[ 1615.383628][T15222] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90422ad0
[ 1615.386232][T15222] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1615.388770][T15222] R10: 0000000000000004 R11: 0000000000000000 R12: ffff888104f630a8
[ 1615.391491][T15222] R13: 0000000000000000 R14: ffffffff90422ad0 R15: ffff88811f8231b8
[ 1615.394280][T15222]  ? __rate_control_send_low+0x58d/0x800
[ 1615.396050][T15222]  rate_control_send_low+0x1a7/0x7b0
[ 1615.397717][T15222]  rate_control_get_rate+0x20b/0x5d0
[ 1615.399414][T15222]  ieee80211_tx_h_rate_ctrl+0xaf6/0x1760
[ 1615.401199][T15222]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[ 1615.403096][T15222]  invoke_tx_handlers_late+0xba/0x18a0
[ 1615.404803][T15222]  ? ieee80211_tx_h_select_key+0xd1b/0x1ab0
[ 1615.406689][T15222]  ieee80211_tx_dequeue+0x403e/0x54d0
[ 1615.408420][T15222]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[ 1615.410220][T15222]  ? ieee80211_next_txq+0x82e/0x9a0
[ 1615.411776][T15222]  ieee80211_handle_wake_tx_queue+0x132/0x2c0
[ 1615.413664][T15222]  ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10
[ 1615.415610][T15222]  ? ieee80211_queue_skb+0x182d/0x22c0
[ 1615.417363][T15222]  ? __local_bh_enable_ip+0xd0/0x130
[ 1615.418968][T15222]  ieee80211_queue_skb+0x1a1f/0x22c0
[ 1615.420549][T15222]  ieee80211_tx+0x2c2/0x4b0
[ 1615.421862][T15222]  ? __pfx_ieee80211_tx+0x10/0x10
[ 1615.423484][T15222]  ? ieee80211_xmit+0x315/0x400
[ 1615.424922][T15222]  __ieee80211_subif_start_xmit+0xd12/0x1660
[ 1615.426798][T15222]  ? __ieee80211_subif_start_xmit+0x2cf/0x1660
[ 1615.429220][T15222]  ? process_scheduled_works+0xb5d/0x1860
[ 1615.431454][T15222]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[ 1615.433943][T15222]  ? skb_network_protocol+0x23d/0x400
[ 1615.436076][T15222]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[ 1615.438510][T15222]  ieee80211_subif_start_xmit+0xf3/0x570
[ 1615.440645][T15222]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[ 1615.442846][T15222]  ? __pfx_netif_skb_features+0x10/0x10
[ 1615.445728][T15222]  dev_hard_start_xmit+0x2cd/0x830
[ 1615.447532][T15222]  __dev_queue_xmit+0x14d9/0x3950
[ 1615.449179][T15222]  ? __dev_queue_xmit+0x2b6/0x3950
[ 1615.451185][T15222]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 1615.453432][T15222]  ? neigh_resolve_output+0x438/0x750
[ 1615.455609][T15222]  ? eth_header+0x11b/0x200
[ 1615.457028][T15222]  ? __asan_memcpy+0x40/0x70
[ 1615.458533][T15222]  ? ip6_output+0x126/0x550
[ 1615.460190][T15222]  ip6_output+0x340/0x550
[ 1615.461777][T15222]  ? __pfx_ip6_output+0x10/0x10
[ 1615.463309][T15222]  NF_HOOK+0x177/0x4f0
[ 1615.464702][T15222]  ? __pfx_NF_HOOK+0x10/0x10
[ 1615.466351][T15222]  ? __pfx_dst_output+0x10/0x10
[ 1615.468060][T15222]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1615.470234][T15222]  ? __local_bh_enable_ip+0xd0/0x130
[ 1615.471931][T15222]  ? icmp6_dst_alloc+0x3a6/0x440
[ 1615.473468][T15222]  mld_sendpack+0x8b4/0xe40
[ 1615.474915][T15222]  ? mld_sendpack+0x213/0xe40
[ 1615.476391][T15222]  ? __pfx_mld_sendpack+0x10/0x10
[ 1615.477985][T15222]  mld_ifc_work+0x835/0xe70
[ 1615.479426][T15222]  ? process_scheduled_works+0xa70/0x1860
[ 1615.481199][T15222]  process_scheduled_works+0xb5d/0x1860
[ 1615.483210][T15222]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1615.485509][T15222]  ? assign_work+0x3d5/0x5e0
[ 1615.487385][T15222]  worker_thread+0xa53/0xfc0
[ 1615.489235][T15222]  kthread+0x388/0x470
[ 1615.490848][T15222]  ? __pfx_worker_thread+0x10/0x10
[ 1615.492849][T15222]  ? __pfx_kthread+0x10/0x10
[ 1615.494683][T15222]  ret_from_fork+0x514/0xb70
[ 1615.496531][T15222]  ? __pfx_ret_from_fork+0x10/0x10
[ 1615.498565][T15222]  ? __switch_to+0xc79/0x1410
[ 1615.500437][T15222]  ? __pfx_kthread+0x10/0x10
[ 1615.502289][T15222]  ret_from_fork_asm+0x1a/0x30
[ 1615.504203][T15222]  </TASK>
[ 1615.506163][T15222] Kernel Offset: disabled
[ 1615.507883][T15222] Rebooting in 86400 seconds..
