last executing test programs:

3m35.582927801s ago: executing program 2 (id=1042):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040))
writev(r0, &(0x7f0000000900)=[{&(0x7f0000000580)="18", 0x1}], 0x1)

3m35.332732723s ago: executing program 2 (id=1045):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x33fe0}, 0x33fe0}}, 0x0)
sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x3f8, 0x200, 0x7, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12000, 0x0)

3m35.138735052s ago: executing program 2 (id=1047):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x7}, 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'syz_tun\x00', {0x1}})
syz_emit_ethernet(0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000021001122334455000a4242030001fe", @ANYRES32=r0], 0x0)

3m34.942684261s ago: executing program 2 (id=1049):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1204004, &(0x7f00000005c0)={[{@noheap}, {@six_active_logs}, {@fault_injection={'fault_injection', 0x3d, 0x64}}, {@noinline_dentry}, {@fault_type={'fault_type', 0x3d, 0x5}}, {@fastboot}, {@gc_merge}, {@fastboot}, {@fsync_mode_strict}, {@fastboot}, {@heap}]}, 0x21, 0x553a, &(0x7f000000ae00)="$eJzs3E1vG1UXAOBjJ+n32zdCLNh1UIWUSLVVpx+CXYFWfIhWVYEFK3Bs13Jre6LYdUNWLFgiFvwTBBIrlvwGFqzZIRYgdkggz51AU6iEGidu2ueRxmfunTtn7h1Fkc6M5QCeWcvZb79U4nQcj4iFiDgVUexXyq1wJYUXIuJMRFQf2Cpl/18dRyLiREScniZPOSvloS/OTc5e+vntX7/9/ujiyS+/+WF+qwZmpPq4J74UEYONtH9/kGLeTfFO2d+c9Io4uDgpYzowuFu28xTvd9aLDPebO+OaRbzQTePzjXujabzdb7amsdu7XfRvDNMFR5PuTp7ihDvNzaLd7qwXsTfKi9jdTvPa2k7/27ZH45SnXeb7uEgf4/FOTP2drU5az8bdIraG47I/5c3bna1pnJSxvFy08n67mMf6497lJ96L7/SG97aySWdz1MuH2aV64+V643KtsZm3O+POxVpz0L58MVvp9qfDauNOc3Clm+fdfqfeyger2Uq31ao1GtnK1c56rznMGo36hfr52qXVcu9c9saN97N+O1uZxtd6w3vjXn+U3c43s3TGarZWv/DKana2kb17/WZ289a1a9dvvvfh1Q9uvHr9rdfLQf+YVraydn5trdY4X1trrO7tBhyq9X9aTnqG64c9qcx7AgCHj/ofmIf9q/83b0Xsf/0f6v+ZmFP9u6j+fzLWD3ui/gcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeGb9uPTVm8XOcmqfLPv/V3Y9V7YrEVGNiD/+xUIc2ZVzocyz9IjxSw/N4btKFBmm1zhabici4kq5/f7//b4LAAAA8PT6+pMzn6dqPX0sz3tCHKT00KZ66qMZ5atExNLyTzPKVp1+PD+jZMXf92JszShb8QDr2IySpUdui7PK9p8s7ArHHgiVFKoPnzGz1QIAAHOzuxI42CoEAACAg/TZI4/cPdB5cMAqsfMqc+ddcPHN+79f9h1Pba/+AAAA4PCqzHsCAAAAwL4r6n+//wcAAABPt/T7fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwJzv3kps2EMcB+G+DC32pqOq+V+kOjtEjdNllxQF6CY5ArpALcAayyxEiiPA4KETkQTzGSvR9kj3YMr+Z4bGYGWkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC5dVcvZxb+f/9vmbLbt5OkNAAAAcMy6Ws7qF5N0/bm5/7W59b25LiKijIhjY/dBfDjIHDQ51SPPVw/acBlRJ+zqGDXHp4j4lY5tfOv6UwAAAIB3abg7reaLaRqtp9Ok71bR2gnfYZq0Kb/8zlR1ERHV5DpTWrnL+5EprP59D+NvprR6AmucKSxNuQ1zpb1I/Xffz9qN7xVFKsqn35+t7wAAwBkNDorzjkIAAAA4pz99N4AufHz2iSLuljL3S4GjVIwPIiz2AQAAwNtV9N0AAAAAoHP1+P+U/f+in/3/4sb+fwAAAPBqaf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAurSulrPVfDFtm7PZtpOnNwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANyyP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvfveX/xNT40wy99pYeh5J1k6NrVNj79w4+sP4+jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMW+/fPGUUQBAH97e3txAghjkAsjBBIFNORyCQnpEAXIouAjIFnOJZhc+JO4IFGE5IYOuU6DoEQICWS6fAGqdEiJlCZ0KVwEiYbGaPd27T2b4qKQ3Uv8+0mz83Z9N/NmT7L8btYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQ2X5vL07zw/w47pTXbj+4vpr3d/b1uZubd5fylsdJk0k/GV6pnySL7SUCAADA4ZFW9X1E3Mu2lvO+M1/U/1n1mrzm//65cVzV8/vr/qqvav+8/fbr/Zd2J5ofz5MPen5tNDxxMJXu41vlbHv+4KWNydNuceeL717S4gPpfLjx4nZW3M/k21u33u8V4ZGmMgYAHtbxqi+D6u+hvB+0mRgAh0a3VnhX9X86325OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE3Y3ohnqjiJiKXuXpy78+D66n/1NzfvLlXtzI0bm/Ux8yGyiDi/NhqeaHAts+7K1WsXV0aj4eXmg1cjoq3Z3y2Xf/HjKV4c0cr9+b+C/r4r/+zs7DzUOHOzsIpHCDrlhz0r+TwZQYu/lAAAeCplZcvr+nvZ1nJ+LVmI2Plhsv5/oxbHlPX//U/O3K7PVa//B42tcPb11y990b9y9dpba5dWLgwvDD97++TgncGps6dPn+0X35X0fWMCAADAo+mVrV7/dxYO7v8fq8UxZf3/5XeDr/dm+qM4qv8P2tv0azsTAACAw+2F1/7+K6md98o+6fXiq5X19cuD8XH3/OT4GBFzLaU8tSNlq9f/6ULbWQEAAABN2N5IJvb/z9XimHL//9kfX/65PmYaEUfL/f/jq5+PzjW3nJnWxL8Tt71GAAAA2nW0bPX9/6x4/r+z+8hDJyLefD2ZeN809X/6wTc/1d+T1p7/P9XQ+mZVZ3F8P4p+MaK7OPHj31tLDAAAgKfSXNny6v7PbGv501+OfdTz/D8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA0/4NAAD//wxkQoM=")
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0xa, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})

3m32.722188623s ago: executing program 2 (id=1069):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4)
getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000000c0)=""/19, &(0x7f0000000080)=0x13)

3m31.123603586s ago: executing program 2 (id=1084):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="030000"], 0x50)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r0)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r1, @ANYBLOB="290e29bd7000fbdbdf252700000005003100030000001400300053e0e85290ceb080fb816d3cdadf198b0a0001007770616e31000000240032"], 0xd4}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)

3m30.714063175s ago: executing program 32 (id=1084):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="030000"], 0x50)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r0)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r1, @ANYBLOB="290e29bd7000fbdbdf252700000005003100030000001400300053e0e85290ceb080fb816d3cdadf198b0a0001007770616e31000000240032"], 0xd4}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)

2m8.656593807s ago: executing program 5 (id=2006):
r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f00000009c0)={0x34, 0x0, 0x0, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x4}, 0x0, 0x0, 0x0})

2m5.513412621s ago: executing program 5 (id=2039):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x2100, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x75)

2m5.402138676s ago: executing program 5 (id=2041):
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000480)="e3ef7f09", 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9}, 0x4c)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

2m5.263279523s ago: executing program 5 (id=2043):
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x17b, &(0x7f0000000300)="$eJzs28tO4nAUx/FfoVyGuTHDXJLJLGY1mc1QwAR1h49CoBJiUSJuICbqe7hx58PJwp0rMZS2SmWFtEX5fjacHydND4s/nBAQgI3V0B8ZMpSdht/54lnJSHokADGZeI/3EwCbJ32X9AQAkjHek/qSbm5PW0pn/bXgp19M+w2/n8o92x/GF9Iv0+sbeb0L7xdX0l//eqOw8PpC0H+/sP9PRe/+H/RRn/RZRX3RV5W8fju4/scLtyEAADaDoXI4zz2R0n7XsStBzri5qoI5y1k314L+LG8FOefmcuvIaUf4KgAsI6Xy9dMcPv/p0Pk3vfMP4PUbDEcHTcexj2Mq/O8HYr3pagqdr8UYKykyWosxKBYUptZijITfmABEzjrp9a3BcPS/22t27I59WK/V67uVne2q5S7+1vz6D+ANefzQT3oSAAAAAAAAAAAAAACwrG/6nvQIAAAAAGIS2b+IDEmX4pfFAAAAAAAAAAAAAAAAAABE4CEAAP//gNgaag==")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
unlink(&(0x7f0000000040)='./file0/file1\x00')

2m4.918044628s ago: executing program 5 (id=2046):
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1d2)
fanotify_init(0xf00, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00')
pread64(r0, &(0x7f0000002140)=""/17, 0x11, 0x0)

2m4.323645086s ago: executing program 5 (id=2052):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x908, @mcast1, 0x1}, 0x1c)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x4e22, 0xfff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0xfff}, 0x1c)

2m4.201420781s ago: executing program 33 (id=2052):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x908, @mcast1, 0x1}, 0x1c)
connect$inet6(r0, &(0x7f0000000600)={0xa, 0x4e22, 0xfff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0xfff}, 0x1c)

1m6.986240381s ago: executing program 3 (id=2749):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@my=0x1, 0x1})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f00000005c0)={&(0x7f0000001880)={{@host}, {@hyper}, 0x400, "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"}, 0x418, 0x5})

1m6.858384417s ago: executing program 3 (id=2750):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x800000, 0x0, 0x1, 0x1, 0x4, 0x6}, 0x20)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00')
pread64(r1, &(0x7f0000003ec0)=""/4122, 0x101a, 0x105)

1m6.535205632s ago: executing program 3 (id=2751):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000500000000004600000085000000110000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

1m6.285872463s ago: executing program 3 (id=2753):
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16], 0x88, 0x2a9, &(0x7f0000000c00)="$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")
r0 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}})

1m5.987758557s ago: executing program 3 (id=2758):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f00000001c0), 0x4)
setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, 0x0, 0x0)

1m5.231642202s ago: executing program 3 (id=2765):
syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==")
mq_open(&(0x7f0000000000)='.+\x00', 0x80, 0x40, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

1m5.071902189s ago: executing program 34 (id=2765):
syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==")
mq_open(&(0x7f0000000000)='.+\x00', 0x80, 0x40, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

46.619925147s ago: executing program 6 (id=2938):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1020}}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0xc2, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000640), 0x1003, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000080)="af", &(0x7f00000002c0)=""/244}, 0x20)

46.166124558s ago: executing program 6 (id=2945):
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @release={0x40046306, 0x3}], 0x0, 0x0, 0x0})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0x6)

46.035652684s ago: executing program 6 (id=2947):
timer_create(0x7, 0x0, &(0x7f00000000c0))
timer_create(0x2, 0x0, &(0x7f00000003c0))
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00')
preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/109, 0x6d}], 0x1, 0x47, 0x0)

45.807929655s ago: executing program 6 (id=2949):
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x10, &(0x7f0000006d40)=ANY=[@ANYBLOB="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"], 0x1, 0x14fe, &(0x7f0000002ac0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0x1008)

45.135403366s ago: executing program 6 (id=2961):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
write(r0, &(0x7f0000000080)="d98c1fee72d131eace87a106", 0xc)

44.1634329s ago: executing program 6 (id=2976):
syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII")
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x100)
truncate(&(0x7f0000000080)='./file0\x00', 0x3a6800)
truncate(&(0x7f0000000100)='./file0\x00', 0x8000000)

43.826380006s ago: executing program 35 (id=2976):
syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII")
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x100)
truncate(&(0x7f0000000080)='./file0\x00', 0x3a6800)
truncate(&(0x7f0000000100)='./file0\x00', 0x8000000)

16.584109748s ago: executing program 0 (id=3272):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020)

16.353307229s ago: executing program 0 (id=3275):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4)
fcntl$setstatus(r0, 0x4, 0x42000)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x86102, 0x81)

16.252106343s ago: executing program 0 (id=3278):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000000)={@id={0x2, 0x89, @c}, 0x40, 0x0, '\x00', @b})
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00')
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2)

16.121985069s ago: executing program 0 (id=3280):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3, &(0x7f0000000000)={[{@nombcache}, {@nobarrier}, {@norecovery}, {@errors_remount}, {@grpid}]}, 0x8, 0x638, &(0x7f0000000140)="$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")
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00')

15.595549813s ago: executing program 0 (id=3284):
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setreuid(r1, 0x0)
setresuid(0x0, r1, 0x0)

14.667557966s ago: executing program 0 (id=3292):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2c}, 0x84, 0x452, &(0x7f0000000480)="$eJzs20tvG1UUAOAz46bvklDKow/AUBARj6RJC3TBBgRSN0hIsCjLkKZVqdugJki0qmhAqCxRfwGwROIXsIINAlYgtrBHSBXqhsICDRp7nBrHDnbs1Gn9fdIk986Mfc/xzLXvzLUDGFrl/E8SsTMifomI0YgoNe9Qrv27cf3S7F/XL80mkWWv/5HkD4s/r1+are+aFP93FJXxNCL9KIn9LdpduHDxzEylMne+qE8unn1ncuHCxWdOn505NXdq7tz00aNHDk89/9z0s33Jc1ce67735w/sPfbm1Vdnj1996/sv83h3Ftsb86gZ67nNcpSXX5Nmj/f87BvLroZysmmAgdCVvK/nh2uk2v9HoxQ3D95ovPLhQIMD1lWWZdmWFWuXRwBLGXAHS2LQEQCDUf+gz69/68stHH4M3LUXaxdAed43iqW2ZVOkxT4jTde3/VSOiONLf3+aL9HyPgQAQH99nY9/nm41/kvjvob97irmhsYi4u6I2B0R90TEnoi4N6K67/0R8UCX7Zeb6ivHPz9tW1NiHcrHfy8Uc1v/Hf/VR38xVipqu6r5jyQnT1fmDhWvyXiMbMnrU6u08c3LP3/Sblvj+C9f8vbrY8Eijt83Nd2gOzGzONNLzo2ufVC9B3h5Zf7J8kxAEhF7I2LfGp5/a0ScfvKLA+22/3/+q+jDPFP2ecQTteO/FE351yWrz09Obo3K3KHJ+lmx0g8/XnmtXfs95d8H+fHf3vL8X85/LGmcr13ovo0rv37c9ppmref/5uSNanlzse69mcXF81MRm5Olleunbz62Xq/vn+c/frB1/98d8c9nxeP2R0R+Ej8YEQ9FxMNF7I9ExKMRcXCV/L976bG3157/+srzP9HV8e++UDrz7Vft2u/s+B+plsaLNZ28/3UaYC+vHQAAANwu0up34JN0YrmcphMTte/w74ntaWV+YfGpk/PvnjtR+678WIyk9Ttdow33Q6eKe8P1+nRT/XD1vnGWZdm2an1idr6yXnPqQGd2tOn/ud9Kg44OWHddzaO1+0UbcFvye00YXvo/DC/9H4aX/g/Dq1X/vxxxYwChALeYz38YXvo/DC/9H4aX/g9DqZff9a9W2H1svZ75TiuUNkYYXRci3RBhrK2QbowwaoUtEdHpzpfjVgU26HcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/vg3AAD//zLQ7Dk=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}})
quotactl$Q_QUOTAON(0xffffffff80000101, 0x0, 0x0, 0x0)

14.511780733s ago: executing program 36 (id=3292):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2c}, 0x84, 0x452, &(0x7f0000000480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}})
quotactl$Q_QUOTAON(0xffffffff80000101, 0x0, 0x0, 0x0)

5.926332578s ago: executing program 7 (id=3371):
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', <r1=>0x0})
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x68, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0xf, 0x0, 0x8, 0x0, 0x5c4, 0x1, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MODE={0x5}]}}}]}, 0x98}}, 0x20000000)

5.762863495s ago: executing program 7 (id=3374):
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff)
r0 = syz_open_dev$media(&(0x7f0000000000), 0x100000000, 0x200)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

5.310245906s ago: executing program 4 (id=3382):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/failslab/cache-filter\x00', 0x1, 0x0)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000002f40)='o', 0x1}, {0x0}], 0x2)

5.101937716s ago: executing program 4 (id=3393):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a3000000000540003800800024000000000080001400000000040f503801400010076657468315f742f5f62726964676500140001007767320000000000000000000000000014000100766574683069746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4040895}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x659e2417a3274cbf, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

4.78836089s ago: executing program 4 (id=3387):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0x7a1, 0x3}, 0x20)
getpeername(r0, 0x0, &(0x7f00000001c0))

4.549754931s ago: executing program 4 (id=3390):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3, &(0x7f0000000000)={[{@nombcache}, {@nobarrier}, {@norecovery}, {@errors_remount}, {@grpid}]}, 0x8, 0x638, &(0x7f0000000140)="$eJzs3c9rVNceAPDvnZn8MHnvJcrjvedbPAOPh8KriYlapBSqexH7Y9dVaqJYo5EkpY0VGsFuCqWbFgpddVH7D3TdCoWuuui2i266KoIUyaIWqVPunR9OJpn8GGdyY/L54HXuuWfmnnOTfHPOnJxzJ4A9ayT9rxBxMCKuJxFDDXmlqGaOVJ63/ODmheUH6bFy+dVfk7j5XrLUeK6k+jhYffEfQ5H8UIg4UFxd7vzijSuTMzPTc9X02MLV62PzizeOXr46eWn60vS1iecnTp08cfLU+LH2L66Y/as7e/vNt4c+OPf6F589Ssa//OlcEqfjcfUJ6bU1v7yv/ZIzIzES5YqHjcfTr+uppzz3TvHbUO3n5Imk+QA71sXqz2NPRPwzhqLY8N0civdfzrVyQFeVk6i1UcCek7QV//2drwiwzWr9gMp7+8q2ca+h0OVeCbAd7p+pDABUYr8nImrxX6qMDUZ/NjYwsJysGOdJIuIpRubq0jK+//bc7XSLpnG4FcOGn3SgMGCFpVvZKHct1Bra/ySLzeHoz1IDy4UV8V9o2NLjr7RZ/khTenP9D6ATlm5FxL+q7X/v1uJ/pCH+32izfPEPAAAAAAAAnXP3TEQ8t9b8v0J9/s93X5XLzfN/BiPidAfK3/jvf4V71Z2kA8UBDe6fiXhxzfm/9Tm+w8Vq6q/ZfICe5OLlmeljEfG3iDgSPX1perzpvI0zhI9+eODTVuU3zv9Lt7T82lzA6pnulZoW4k5NLkw+7XUDEfdvRfw7m/97qHpk5fyftP1P1pj/m8b39U2WceB/d863yts4/oFuKX8ecXjN9v9JdztZ//4cY1l/YKzWK1jtP+9+9HWr8sU/5Cdt/wcq8d8ba8d/X9J4v575rZ2/NyKOL5bKrfLb7f/3Jq8VYyk7f20R48LceERvcrZYKzf1zuTCwtzE1uoMu1UtHrLH8Ur8H/nv+uN/9f5/Qxzui4ilTZb5j8eDP7fK0/5DftL4n1q//z+8sv3f+s7EneFvWhSfnN9U+38ia9OPVI8Y/4NGq+/HsdkAzaW6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCMK0TEXyIpjNb3C4XR0YjBiPh7DBRmZucX/n9x9q1rU2le9vn/hdon/Q5V0knt8/+HI6InItL0RDVdyz8eEfsj4uPiviw9emF2ZirviwcAAAAAAAAAAAAAAAAAAIAdYjBb81/ua17/n/qlmHftgK4rVR/FO+w9pbZfWe7raEWAbdd+/APPus3Hf09X6wFsv9bx//BRObOt1QG2kf4/7F1txr8/F8AuoP2HvWqTY3r93a4HkAftPwAAAAAA7Cr7D939MYmIpRf2ZVuqt5pnsj/sboW8KwDkxhxe2LtKs3nXAMhLO+/xB7pQDyA/SX3v9zUX+7ee/Z90p0IAAAAAAAAAAAAAwCqHD1r/D3vV+uv/ze2H3Wyd9f9rBb/bBcAu0vqjP7T9sNt5jw8kG/wisP4fAAAAAAAAAAAAAHaA/htXJmdmpufmF5+9nZfaeFVf3pVfmtwJX7rO7jzuzpl7ImJnXGCndpKIqB2JUusn127BkWNVc/69BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1P0ZAAD//07JJFQ=")
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00')

3.369978455s ago: executing program 9 (id=3400):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a3000000000540003800800024000000000080001400000000040f503801400010076657468315f742f5f62726964676500140001007767320000000000000000000000000014000100766574683069746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4040895}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x659e2417a3274cbf, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

3.369894425s ago: executing program 4 (id=3401):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
listen(r0, 0x0)

3.242166141s ago: executing program 9 (id=3402):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x400, &(0x7f0000001040)=ANY=[], 0x9, 0xadc, &(0x7f0000001900)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x80)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000001700)=ANY=[@ANYBLOB="06"])

3.236704041s ago: executing program 1 (id=3412):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x6, @remote, 0x5000, 0x0, 'rr\x00', 0x4, 0x0, 0xffffffff}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000000c0)={{0x6, @remote, 0x5000, 0x0, 'rr\x00', 0x0, 0x0, 0xffffffff}, {@loopback, 0x5000, 0x2000, 0x1}}, 0x44)
syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @remote}, {{0x1234, 0x5000, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, 0x1000}}}}}}, 0x0)

3.136771386s ago: executing program 1 (id=3415):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x2834, 0x7}}}}}}, 0x0)

2.8225693s ago: executing program 9 (id=3417):
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="58bc0d25", @ANYRES16, @ANYBLOB="080029bd7000fddbdf2708000000440003800800030003000000080003000b00000008000300165d00000800030000000000080001"], 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x10)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x4000}, 0x4)

2.82153318s ago: executing program 1 (id=3406):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bind$vsock_stream(r0, &(0x7f0000000000)={0x10}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00')
lseek(r1, 0x8001, 0x1)

2.743785314s ago: executing program 4 (id=3407):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='dev_mnt\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='dev_mnt/zram0\x00', 0x2, 0x0)
ioctl$HIDIOCSFEATURE(r0, 0x125f, 0x0)

2.708393276s ago: executing program 7 (id=3408):
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0x9, 0x6, 0x3)
syz_clone3(&(0x7f0000000180)={0x23800000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mlock(&(0x7f00000bc000/0x4000)=nil, 0x4000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x2)

2.688680457s ago: executing program 1 (id=3409):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)={[{@acl}, {@heartbeat_none}, {@err_cont}, {@coherency_full}, {@resv_level}, {@localflocks}, {@coherency_full}, {@inode64}]}, 0x1, 0x4428, &(0x7f000000c300)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140))
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f00000000c0))
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

2.38667062s ago: executing program 37 (id=3407):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='dev_mnt\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='dev_mnt/zram0\x00', 0x2, 0x0)
ioctl$HIDIOCSFEATURE(r0, 0x125f, 0x0)

2.376292141s ago: executing program 7 (id=3414):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3, &(0x7f0000000000)={[{@nombcache}, {@nobarrier}, {@norecovery}, {@errors_remount}, {@grpid}]}, 0x8, 0x638, &(0x7f0000000140)="$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")
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00')

2.339963253s ago: executing program 9 (id=3416):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x6, @remote, 0x5000, 0x0, 'rr\x00', 0x4, 0x0, 0xffffffff}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000000c0)={{0x6, @remote, 0x5000, 0x0, 'rr\x00', 0x0, 0x0, 0xffffffff}, {@loopback, 0x5000, 0x2000, 0x1}}, 0x44)
syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @remote}, {{0x1234, 0x5000, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, 0x1000}}}}}}, 0x0)

1.611921496s ago: executing program 7 (id=3419):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000003c0)='cpuset.sched_load_balance\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x100000000)

1.609216616s ago: executing program 9 (id=3420):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
listen(r0, 0x0)

1.455764373s ago: executing program 9 (id=3421):
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff)
r0 = syz_open_dev$media(&(0x7f0000000000), 0x100000000, 0x200)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

1.210937894s ago: executing program 8 (id=3423):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)={0x40, r0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "cc3c10fea8"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x40}}, 0x0)

893.044309ms ago: executing program 8 (id=3424):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', <r1=>0x0})
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3f, 0x4)
sendto$packet(r0, &(0x7f00000000c0)="3f0302e90302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdc9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

752.298616ms ago: executing program 8 (id=3425):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

632.883821ms ago: executing program 8 (id=3426):
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0x9, 0x6, 0x3)
syz_clone3(&(0x7f0000000180)={0x23800000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mlock(&(0x7f00000bc000/0x4000)=nil, 0x4000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x2)

632.768651ms ago: executing program 7 (id=3427):
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FIBMAP(r0, 0x2285, 0x0)

629.323661ms ago: executing program 1 (id=3429):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x402)
syz_emit_ethernet(0x56, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0xf500, {[@fastopen={0x1e, 0xc, "4808912ea3f09e8b28b2"}]}}}}}}}}, 0x0)

428.382581ms ago: executing program 38 (id=3427):
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FIBMAP(r0, 0x2285, 0x0)

366.769813ms ago: executing program 8 (id=3431):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="ffffff8d0100"})

111.153995ms ago: executing program 8 (id=3432):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x6, 0xff99ce9, 0xffeffffa, 0x7, 0xf, "3c2b2d2f9f4335aa62a9177afe68fa77d3da01"})
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000000040)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e083860090890e0878f0f1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31310d3b5d0936cd3b78070daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5003a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd7072f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d27df2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2c1cde360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)

0s ago: executing program 1 (id=3433):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0xdddd1000, 0xffff1000, 0xf000, 0x5, 0x7f, 0x9, 0x81, 0xfc, 0x0, 0x6, 0x0, 0xb}, {0xd000, 0xd000, 0xf, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x44, 0xfa, 0x5}, {0xdddd1000, 0x4, 0x0, 0x4, 0x10, 0x81, 0x6, 0x13, 0x5, 0x1, 0x9a, 0x80}, {0x10000, 0x25000, 0x10, 0x7, 0x1, 0x7, 0x2, 0x0, 0xfd, 0x29, 0x19, 0x9}, {0x50000, 0x41000, 0xd, 0x9, 0x5, 0x2, 0x7, 0x4, 0x5, 0x6e, 0x4, 0x2}, {0x9000, 0xdddd1000, 0xe, 0x22, 0xad, 0x2, 0x4, 0x5, 0xf7, 0xe, 0x6, 0xa}, {0x54000, 0x60000, 0x10, 0x3, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0xf000, 0x8, 0xe, 0x13, 0x7f, 0x3, 0x0, 0x7f, 0x1, 0x4, 0x7f}, {0xd000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x3021, 0x0, 0x9d00, 0x8000900, 0x1, [0x0, 0x3ff, 0x3, 0x7ffffffffffffffd]})

kernel console output (not intermixed with test programs):

cted capacity change from 0 to 256
[  272.578587][ T4232] hid-generic 0000:0000:0001.0007: unknown main item tag 0x0
[  272.587534][ T4232] hid-generic 0000:0000:0001.0007: unknown main item tag 0x0
[  272.595282][ T4232] hid-generic 0000:0000:0001.0007: unknown main item tag 0x0
[  272.603893][ T4232] hid-generic 0000:0000:0001.0007: unknown main item tag 0x0
[  272.611588][ T4232] hid-generic 0000:0000:0001.0007: unknown main item tag 0x0
[  272.619712][ T4232] hid-generic 0000:0000:0001.0007: unknown main item tag 0x0
[  272.627955][ T4232] hid-generic 0000:0000:0001.0007: unknown main item tag 0x0
[  272.648187][ T4232] hid-generic 0000:0000:0001.0007: unknown main item tag 0x0
[  272.661136][ T4232] hid-generic 0000:0000:0001.0007: hidraw0: <UNKNOWN> HID v0.10 Device [syz0] on syz1
[  272.690380][T10362] exfat: Deprecated parameter 'namecase'
[  272.696449][T10362] exfat: Deprecated parameter 'namecase'
[  272.804323][T10362] exfat: Deprecated parameter 'namecase'
[  272.911812][T10362] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  272.977603][T10369] fido_id[10369]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  273.145277][ T4178] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (4178)
[  273.779146][T10349] loop6: detected capacity change from 0 to 32768
[  273.877821][T10392] usb usb2: usbfs: process 10392 (syz.3.2245) did not claim interface 0 before use
[  274.083041][T10349] XFS (loop6): Mounting V5 Filesystem
[  274.229864][ T6515] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  274.306336][T10349] XFS (loop6): Ending clean mount
[  274.544139][ T9771] XFS (loop6): Unmounting Filesystem
[  274.629067][ T6515] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  274.659742][ T6515] usb 5-1: config 0 has no interfaces?
[  274.829127][ T6515] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  274.848638][ T6515] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.889282][ T6515] usb 5-1: Product: syz
[  274.893524][ T6515] usb 5-1: Manufacturer: syz
[  274.918998][ T6515] usb 5-1: SerialNumber: syz
[  275.114528][T10415] loop0: detected capacity change from 0 to 32768
[  275.264685][T10415] read_mapping_page failed!
[  275.294120][T10415] ERROR: (device loop0): txCommit: 
[  275.294120][T10415] 
[  275.329247][T10430] loop1: detected capacity change from 0 to 32768
[  275.577900][T10430] XFS (loop1): Mounting V5 Filesystem
[  275.652223][T10430] XFS (loop1): Ending clean mount
[  275.692413][T10470] loop6: detected capacity change from 0 to 4096
[  275.795007][ T4192] XFS (loop1): Unmounting Filesystem
[  275.828991][T10470] NILFS (loop6): invalid segment: Checksum error in segment payload
[  275.837124][T10470] NILFS (loop6): trying rollback from an earlier position
[  275.938918][T10470] NILFS (loop6): recovery complete
[  275.988577][T10476] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  276.652030][T10493] loop0: detected capacity change from 0 to 1024
[  276.688403][T10478] loop3: detected capacity change from 0 to 32768
[  276.787777][T10478] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  276.850405][T10478] BTRFS info (device loop3): using free space tree
[  276.856997][T10478] BTRFS info (device loop3): has skinny extents
[  276.964876][   T13] usb 5-1: USB disconnect, device number 8
[  277.148032][T10478] BTRFS info (device loop3): enabling ssd optimizations
[  277.225706][T10529] loop1: detected capacity change from 0 to 16
[  277.279478][T10529] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  277.858620][T10561] loop6: detected capacity change from 0 to 256
[  277.938300][   T13] kernel write not supported for file /input/event0 (pid: 13 comm: kworker/0:1)
[  278.469654][T10557] loop1: detected capacity change from 0 to 32768
[  278.548336][T10579] rtc_cmos 00:00: Alarms can be up to one day in the future
[  278.615679][   T13] rtc_cmos 00:00: Alarms can be up to one day in the future
[  278.629619][   T13] rtc_cmos 00:00: Alarms can be up to one day in the future
[  278.648663][   T13] rtc_cmos 00:00: Alarms can be up to one day in the future
[  278.658626][   T13] rtc_cmos 00:00: Alarms can be up to one day in the future
[  278.679809][   T13] rtc rtc0: __rtc_set_alarm: err=-22
[  278.750678][T10557] XFS (loop1): Mounting V5 Filesystem
[  278.911878][T10557] XFS (loop1): Ending clean mount
[  279.132732][ T4192] XFS (loop1): Unmounting Filesystem
[  279.358077][T10630] loop4: detected capacity change from 0 to 64
[  279.441486][   T26] audit: type=1400 audit(1789128740.741:98): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=10631 comm="syz.6.2336"
[  280.027395][T10651] loop0: detected capacity change from 0 to 256
[  280.133185][T10659] loop4: detected capacity change from 0 to 128
[  280.190225][T10658] loop6: detected capacity change from 0 to 1024
[  280.199730][T10651] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 196)
[  280.220897][T10659] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  280.268588][T10659] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  280.312660][T10662] program syz.3.2349 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  280.389513][T10658] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  280.400963][ T4189] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 196)
[  280.906343][T10671] loop4: detected capacity change from 0 to 8192
[  280.954563][T10671] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  280.989695][T10656] loop1: detected capacity change from 0 to 32768
[  280.992694][T10671] REISERFS (device loop4): using ordered data mode
[  280.992750][T10671] reiserfs: using flush barriers
[  280.993951][T10671] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  280.994350][T10671] REISERFS (device loop4): checking transaction log (loop4)
[  281.001574][T10671] REISERFS (device loop4): Using r5 hash to sort names
[  281.001650][T10671] REISERFS (device loop4): using 3.5.x disk format
[  281.001957][T10671] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  281.294213][T10656] XFS (loop1): Mounting V5 Filesystem
[  281.392680][T10656] XFS (loop1): Ending clean mount
[  281.610401][ T4192] XFS (loop1): Unmounting Filesystem
[  281.627912][T10684] loop0: detected capacity change from 0 to 32768
[  281.819912][T10684] JBD2: Ignoring recovery information on journal
[  281.906912][T10684] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  282.026365][T10711] netlink: 'syz.6.2363': attribute type 1 has an invalid length.
[  282.116221][T10711] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  282.124365][T10711] IPv6: NLM_F_CREATE should be set when creating new route
[  282.131951][T10711] IPv6: NLM_F_CREATE should be set when creating new route
[  282.293018][ T4189] ocfs2: Unmounting device (7,0) on (node local)
[  282.452557][T10721] program syz.6.2366 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  282.758425][T10699] loop4: detected capacity change from 0 to 40427
[  282.824313][T10699] F2FS-fs (loop4): Invalid log blocks per segment (4278190089)
[  282.841336][T10699] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  282.896827][T10699] F2FS-fs (loop4): invalid crc value
[  282.966132][T10699] F2FS-fs (loop4): Found nat_bits in checkpoint
[  283.010617][T10735] loop1: detected capacity change from 0 to 4096
[  283.019665][T10744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2374'.
[  283.070442][T10745] loop6: detected capacity change from 0 to 1024
[  283.122660][T10735] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  283.191344][T10745] hfsplus: walked past end of dir
[  283.232305][T10699] F2FS-fs (loop4): recover fsync data on readonly fs
[  283.335394][T10699] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30
[  283.347891][  T144] hfsplus: bad catalog file entry
[  283.375871][T10699] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  283.413108][T10752] program syz.3.2377 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  283.587291][T10760] input: syz1 as /devices/virtual/input/input14
[  283.652807][T10699] F2FS-fs (loop4): Corrupted max_depth of 3: 255
[  283.731631][T10699] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  283.770332][T10768] program syz.6.2381 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  283.830689][T10766] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  284.363891][   T26] audit: type=1326 audit(1789128745.661:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10800 comm="syz.1.2395" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe1f897d159 code=0x0
[  284.810323][T10813] zram0: detected capacity change from 0 to 8
[  285.248859][ T9147] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  285.288109][T10798] loop0: detected capacity change from 0 to 40427
[  285.318407][T10833] loop1: detected capacity change from 0 to 128
[  285.424033][T10798] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  285.452179][T10798] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  285.473708][T10833] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  285.500009][T10798] F2FS-fs (loop0): invalid crc value
[  285.524124][T10833] ext4 filesystem being mounted at /496/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  285.597035][T10798] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  285.811064][T10855] loop3: detected capacity change from 0 to 512
[  285.830046][T10858] block2mtd: device name too long
[  285.884168][ T9147] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  285.933378][ T9147] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.965939][ T9147] usb 5-1: Product: syz
[  285.975481][T10798] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  285.984591][ T9147] usb 5-1: Manufacturer: syz
[  285.989878][T10798] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  285.997605][ T9147] usb 5-1: SerialNumber: syz
[  286.011656][T10855] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  286.090615][   T26] audit: type=1800 audit(1789128747.391:100): pid=10798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2394" name="file1" dev="loop0" ino=10 res=0 errno=0
[  286.105902][T10855] ext4 filesystem being mounted at /460/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  286.141700][T10867] loop6: detected capacity change from 0 to 2048
[  286.194125][ T4189] attempt to access beyond end of device
[  286.194125][ T4189] loop0: rw=2049, want=40992, limit=40427
[  286.296288][T10867] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  286.555864][T10867] EXT4-fs (loop6): re-mounted. Opts: (null). Quota mode: none.
[  287.374566][T10908] loop3: detected capacity change from 0 to 4096
[  287.668529][T10893] loop6: detected capacity change from 0 to 32768
[  287.879959][T10893] XFS (loop6): Mounting V5 Filesystem
[  287.985952][ T6520] usb 5-1: USB disconnect, device number 9
[  288.082490][T10910] loop1: detected capacity change from 0 to 32768
[  288.086655][T10893] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  288.128364][T10893] XFS (loop6): Tail block (0x29) overwrite detected. Updated to 0x30
[  288.272773][T10893] XFS (loop6): Ending clean mount
[  288.312244][T10910] XFS (loop1): Mounting V5 Filesystem
[  288.356645][T10954] ima: policy update failed
[  288.365029][   T26] audit: type=1802 audit(1789128749.661:101): pid=10954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2428" res=0 errno=0
[  288.410095][T10956] netlink: 'syz.3.2429': attribute type 1 has an invalid length.
[  288.519362][T10962] loop3: detected capacity change from 0 to 2048
[  288.591619][T10893] XFS (loop6): Metadata corruption detected at xfs_dinode_verify+0x2bf/0xd50, inode 0x1803 dinode
[  288.612023][T10962] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  288.656644][T10910] XFS (loop1): Ending clean mount
[  288.682517][T10893] XFS (loop6): Unmount and run xfs_repair
[  288.688320][T10893] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[  288.764654][T10893] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[  288.818883][T10893] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  288.886238][T10893] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d  4.Xh....4.Xh...=
[  288.935856][T10893] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20  4.Xh...=....... 
[  288.955482][ T4192] XFS (loop1): Unmounting Filesystem
[  289.015126][T10893] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  289.090949][T10893] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1  ..............=.
[  289.137556][T10893] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04  ....n..-........
[  289.169110][T10893] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06  ................
[  289.339084][ T9771] XFS (loop6): Unmounting Filesystem
[  289.713739][T11007] loop3: detected capacity change from 0 to 512
[  289.826020][T11007] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  289.855214][T11007] ext4 filesystem being mounted at /473/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  289.938606][T11016] program syz.0.2449 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  290.070839][T11007] EXT4-fs error (device loop3): ext4_readdir:223: inode #12: comm syz.3.2447: path /473/file0/file0: directory fails checksum at offset 0
[  290.156539][T11023] loop4: detected capacity change from 0 to 164
[  290.226061][T11026] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  290.643952][T11047] loop0: detected capacity change from 0 to 1024
[  290.731749][T11047] hfsplus: catalog record size mismatch (type 1, got 46, expected 88)
[  290.772649][T11053] loop1: detected capacity change from 0 to 512
[  290.804365][T11056] loop6: detected capacity change from 0 to 256
[  290.855640][T11053] EXT4-fs (loop1): Ignoring removed oldalloc option
[  290.930602][T11060] netlink: 71 bytes leftover after parsing attributes in process `syz.4.2465'.
[  291.001410][T11053] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none.
[  291.463774][T11089] loop3: detected capacity change from 0 to 2048
[  291.626508][T11089] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  291.738939][T11089] ext4 filesystem being mounted at /480/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  292.199459][T11130] program syz.3.2489 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  292.220837][T11135] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2491'.
[  292.382407][T11139] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  292.479369][T11142] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  292.713118][T11155] Invalid ELF header len 1
[  292.903512][T11165] loop6: detected capacity change from 0 to 256
[  293.174665][T11178] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  293.219630][T11136] loop4: detected capacity change from 0 to 32768
[  293.264526][T11178] CIFS: Attempting to mount \\127.0.0.1\share
[  293.284834][T11178] CIFS: VFS: Error connecting to socket. Aborting operation.
[  293.293744][T11178] CIFS: VFS: cifs_mount failed w/return code = -111
[  293.481988][T11179] loop6: detected capacity change from 0 to 8192
[  293.550159][T11188] loop0: detected capacity change from 0 to 256
[  293.553066][T11190] ALSA: seq fatal error: cannot create timer (-22)
[  293.673591][T11188] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[  294.095871][T11208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2527'.
[  294.302316][T11222] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2532'.
[  294.566252][T11231] netem: change failed
[  294.587780][   T26] audit: type=1400 audit(1789128755.881:102): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="//o" pid=11232 comm="syz.3.2536" name="//o" offset=35
[  295.207488][T11225] loop4: detected capacity change from 0 to 131072
[  295.217842][ T9147] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  295.249259][T11225] XFS: ikeep mount option is deprecated.
[  295.358213][T11225] XFS (loop4): Mounting V5 Filesystem
[  295.514871][T11225] XFS (loop4): Starting recovery (logdev: internal)
[  295.522640][ T1325] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  295.580867][T11229] loop1: detected capacity change from 0 to 32768
[  295.589997][T11225] XFS (loop4): Ending recovery (logdev: internal)
[  295.619314][ T9147] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  295.635430][ T9147] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  295.661102][T11225] XFS (loop4): Unmounting Filesystem
[  295.677979][ T9147] usb 7-1: config 0 interface 0 has no altsetting 0
[  295.703491][T11263] ip_tables: iptables: counters copy to user failed while replacing table
[  295.709280][ T9147] usb 7-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  295.729923][ T9147] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.906908][T11229] XFS (loop1): Mounting V5 Filesystem
[  295.971409][ T1325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  295.989486][ T1325] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  296.035867][ T1325] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  296.053930][ T1325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.109945][T11229] XFS (loop1): Ending clean mount
[  296.227709][ T4192] XFS (loop1): Unmounting Filesystem
[  296.735007][T11277] loop4: detected capacity change from 0 to 256
[  296.781278][T11277] FAT-fs (loop4): "posix" option is obsolete, not supported now
[  296.988443][T11287] loop1: detected capacity change from 0 to 512
[  297.024757][T11287] EXT4-fs (loop1): Test dummy encryption mode enabled
[  297.054080][ T1325] usb 7-1: USB disconnect, device number 3
[  297.171434][T11287] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,usrquota,errors=remount-ro,. Quota mode: writeback.
[  297.486377][T11313] loop6: detected capacity change from 0 to 512
[  297.542015][T11313] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option
[  297.555485][T11313] EXT4-fs (loop6): Ignoring removed nobh option
[  297.596087][T11313] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option
[  297.631457][T11313] EXT4-fs (loop6): Ignoring removed bh option
[  297.647317][T11313] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[  297.688239][T11313] EXT4-fs (loop6): 1 orphan inode deleted
[  297.694407][T11313] EXT4-fs (loop6): mounted filesystem without journal. Opts: nomblk_io_submit,nobh,prjquota,bsdgroups,nodiscard,sysvgroups,jqfmt=vfsold,nomblk_io_submit,discard,bh,nodelalloc,noinit_itable,jqfmt=vfsv1,,errors=continue. Quota mode: writeback.
[  297.868610][T11327] loop4: detected capacity change from 0 to 512
[  297.913253][T11327] EXT4-fs (loop4): Test dummy encryption mode enabled
[  297.961933][T11327] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #15: comm syz.4.2571: inode has both inline data and extents flags
[  297.983847][T11327] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.2571: couldn't read orphan inode 15 (err -117)
[  297.999111][T11327] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  298.095427][T11334] dyndbg: expected <4096 bytes into control
[  298.154186][T11339] pim6reg0: tun_chr_ioctl cmd 1074025677
[  298.161498][T11339] pim6reg0: linktype set to 773
[  298.223933][T11327] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  298.236595][   T26] audit: type=1800 audit(1789128759.531:103): pid=11327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2571" name="file1" dev="loop4" ino=18 res=0 errno=0
[  298.329275][ T1325] usb 4-1: USB disconnect, device number 10
[  298.507036][T11356] netlink: 'syz.3.2581': attribute type 15 has an invalid length.
[  298.539901][T11356] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2581'.
[  298.606269][T11362] loop6: detected capacity change from 0 to 1024
[  298.614120][T11360] loop1: detected capacity change from 0 to 2048
[  298.736818][T11360] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #2: comm syz.1.2580: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5)
[  298.766571][T11360] EXT4-fs (loop1): get root inode failed
[  298.787457][T11360] EXT4-fs (loop1): mount failed
[  299.045760][T11382] loop3: detected capacity change from 0 to 16
[  299.103852][T11382] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  299.172104][T11386] loop6: detected capacity change from 0 to 512
[  299.333668][ T9147] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  299.351543][T11390] loop3: detected capacity change from 0 to 164
[  299.474480][T11390] rock: directory entry would overflow storage
[  299.483340][T11390] rock: sig=0x4543, size=28, remaining=18
[  299.702358][T11406] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2602'.
[  299.740043][ T9147] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11
[  299.760322][ T9147] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  299.808577][ T9147] usb 5-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00
[  299.850724][ T9147] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.257579][T11432] rtc_cmos 00:00: Alarms can be up to one day in the future
[  300.334823][T11436] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[  300.602622][T11450] loop4: detected capacity change from 0 to 7
[  300.612339][ T6515] rtc_cmos 00:00: Alarms can be up to one day in the future
[  300.622492][ T6515] rtc_cmos 00:00: Alarms can be up to one day in the future
[  300.633950][ T6515] rtc_cmos 00:00: Alarms can be up to one day in the future
[  300.643245][ T6515] rtc_cmos 00:00: Alarms can be up to one day in the future
[  300.655119][    C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  300.666629][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  300.678530][ T6515] rtc rtc0: __rtc_set_alarm: err=-22
[  300.686662][    C0] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  300.697951][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[  300.709618][    C0] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  300.721074][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[  300.760102][T11451] loop_set_block_size: loop4 (���������C�j̖�P=�	) has still dirty pages (nrpages=1)
[  300.774389][    C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  300.785646][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  300.795949][    C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  300.807273][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  300.815970][    C0] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  300.827050][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[  300.845250][    C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  300.856417][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  300.869341][T11450] ldm_validate_partition_table(): Disk read failed.
[  300.882392][    C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  300.893789][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  300.945845][    C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  300.957152][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  300.976668][    C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  300.987843][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  301.004075][T11450] Dev loop4: unable to read RDB block 0
[  301.010878][T11450]  loop4: unable to read partition table
[  301.016879][T11450] loop4: partition table beyond EOD, truncated
[  301.048120][T11457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2626'.
[  301.058881][T11450] loop_reread_partitions: partition scan of loop4 (���������C�j̖�P=�	) failed (rc=-5)
[  301.406147][T11472] netlink: 'syz.0.2632': attribute type 5 has an invalid length.
[  301.429392][T11472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2632'.
[  301.901111][T11468] loop3: detected capacity change from 0 to 32768
[  302.058121][ T9147] usb 5-1: USB disconnect, device number 10
[  302.144096][T11468] XFS (loop3): Mounting V5 Filesystem
[  302.270900][T11468] XFS (loop3): Ending clean mount
[  302.571374][ T4195] XFS (loop3): Unmounting Filesystem
[  302.673023][T11482] loop0: detected capacity change from 0 to 32768
[  302.804888][T11527] program syz.1.2655 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  302.869513][T11482] XFS (loop0): Mounting V5 Filesystem
[  303.005024][T11545] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  303.185536][T11482] XFS (loop0): Ending clean mount
[  303.252637][T11482] XFS (loop0): Quotacheck needed: Please wait.
[  303.402849][T11482] XFS (loop0): Quotacheck: Done.
[  303.428095][T11553] loop3: detected capacity change from 0 to 512
[  303.474814][T11553] EXT4-fs (loop3): inline encryption not supported
[  303.500615][T11553] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  303.574641][ T4189] XFS (loop0): Unmounting Filesystem
[  303.601217][T11553] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  303.678710][    C1] vkms_vblank_simulate: vblank timer overrun
[  303.696846][T11553] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2652: invalid indirect mapped block 2683928664 (level 1)
[  303.775009][T11553] EXT4-fs (loop3): 1 truncate cleaned up
[  303.785267][T11553] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,init_itable=0x0000000000000b8f,jqfmt=vfsv1,inlinecrypt,usrjquota=.sb=0x0000000000000007,nodiscard,jqfmt=vfsv0,noload,debug_want_extra_isize=0x0000000000000006,noload,,,errors=continue. Quota mode: writeback.
[  303.814002][    C1] vkms_vblank_simulate: vblank timer overrun
[  303.879110][    C1] vkms_vblank_simulate: vblank timer overrun
[  303.908616][T11541] loop1: detected capacity change from 0 to 40427
[  303.921261][T11553] EXT4-fs (loop3): shut down requested (2)
[  304.012563][    C1] vkms_vblank_simulate: vblank timer overrun
[  304.061077][T11541] F2FS-fs (loop1): invalid crc value
[  304.114822][T11541] F2FS-fs (loop1): Found nat_bits in checkpoint
[  304.322847][T11541] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0
[  304.392588][T11541] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  304.488568][T11584] loop3: detected capacity change from 0 to 128
[  304.554915][T11584] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  304.664037][T11541] attempt to access beyond end of device
[  304.664037][T11541] loop1: rw=2049, want=53256, limit=40427
[  304.797715][ T4192] attempt to access beyond end of device
[  304.797715][ T4192] loop1: rw=2049, want=45104, limit=40427
[  304.836719][T11590] loop6: detected capacity change from 0 to 256
[  304.922886][T11590] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011a39, chksum : 0x174015ec, utbl_chksum : 0xe619d30d)
[  305.028444][ T4192] attempt to access beyond end of device
[  305.028444][ T4192] loop1: rw=2051, want=45064, limit=40427
[  305.053975][ T4192] attempt to access beyond end of device
[  305.053975][ T4192] loop1: rw=2051, want=131072, limit=40427
[  305.112820][T11593] exFAT-fs (loop6): error, invalid size(size(4096) > aligned(9223372036854777344)
[  305.112820][T11593] 
[  305.128872][ T4192] attempt to access beyond end of device
[  305.128872][ T4192] loop1: rw=2051, want=53248, limit=40427
[  305.162565][ T4192] F2FS-fs (loop1): Issue discard(4614, 4614, 1019) failed, ret: -5
[  305.162612][ T4192] F2FS-fs (loop1): Issue discard(6657, 6657, 9727) failed, ret: -5
[  305.170130][T11593] exFAT-fs (loop6): Filesystem has been set read-only
[  305.229748][ T4192] F2FS-fs (loop1): Issue discard(5638, 5638, 1018) failed, ret: -5
[  305.533806][T11586] loop0: detected capacity change from 0 to 32768
[  305.623039][T11586] add_index: next_index = 0.  Resetting!
[  305.644864][T11586] find_entry called with index >= next_index
[  305.665078][T11586] find_entry called with index >= next_index
[  305.686399][T11586] find_entry called with index >= next_index
[  305.703376][T11586] find_entry called with index >= next_index
[  305.746883][T11586] non-latin1 character 0x3ff found in JFS file name
[  305.754788][T11586] mount with iocharset=utf8 to access
[  306.132816][T11599] loop3: detected capacity change from 0 to 131072
[  306.254225][T11599] F2FS-fs (loop3): invalid crc value
[  306.328238][T11599] F2FS-fs (loop3): Found nat_bits in checkpoint
[  306.364642][T11605] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input16
[  306.439703][T11599] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2
[  306.479033][T11599] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  306.572005][T11613] tipc: Started in network mode
[  306.577718][T11613] tipc: Node identity 785634120000000021436587, cluster identity 4711
[  306.615247][T11613] tipc: Enabled bearer <eth:gre0>, priority 10
[  307.098851][ T7322] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  307.119991][T11630] loop6: detected capacity change from 0 to 2048
[  307.313294][T11630] UDF-fs: warning (device loop6): udf_fill_super: No fileset found
[  307.467163][T11638] loop6: detected capacity change from 0 to 256
[  307.523260][T11640] loop0: detected capacity change from 0 to 512
[  307.576150][T11640] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  307.589237][ T7322] usb 5-1: unable to get BOS descriptor or descriptor too short
[  307.678198][T11640] Quota error (device loop0): find_tree_dqentry: Getting block too big (196613 >= 6)
[  307.689009][ T7322] usb 5-1: config 1 has an invalid interface number: 3 but max is 2
[  307.689039][ T7322] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  307.689058][ T7322] usb 5-1: config 1 has no interface number 2
[  307.689111][ T7322] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  307.689135][ T7322] usb 5-1: config 1 interface 1 has no altsetting 0
[  307.735225][ T6515] tipc: Node number set to 1494569365
[  307.762567][T11640] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  307.779209][T11640] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.2696: Failed to acquire dquot type 1
[  307.807326][T11640] EXT4-fs (loop0): 1 truncate cleaned up
[  307.813768][T11640] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  307.919500][ T7322] usb 5-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40
[  307.960553][ T7322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.998789][ T7322] usb 5-1: Product: syz
[  308.016912][ T7322] usb 5-1: Manufacturer: syz
[  308.022701][ T7322] usb 5-1: SerialNumber: syz
[  308.095219][T11648] loop1: detected capacity change from 0 to 4096
[  308.216101][T11648] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[  308.316859][T11657] loop6: detected capacity change from 0 to 256
[  308.488286][T11661] hfsplus: walked past end of dir
[  308.684436][ T6942] hfsplus: bad catalog file entry
[  308.919935][T11678] set_capacity_and_notify: 1 callbacks suppressed
[  308.919954][T11678] loop1: detected capacity change from 0 to 1024
[  308.941261][T11680] loop3: detected capacity change from 0 to 128
[  309.045347][T11680] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  309.367323][T11683] attempt to access beyond end of device
[  309.367323][T11683] loop3: rw=2049, want=237, limit=128
[  309.709398][T11682] loop0: detected capacity change from 0 to 32768
[  309.795619][T11682] JBD2: Ignoring recovery information on journal
[  309.846442][T11701] loop6: detected capacity change from 0 to 4096
[  309.856675][ T6515] usb 5-1: USB disconnect, device number 11
[  309.901729][T11701] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512)
[  309.997897][T11682] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  310.128392][T11682] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048
[  310.215136][T11682] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  310.268873][T11682] OCFS2: Returning error to the calling process.
[  310.303574][T11682] (syz.0.2712,11682,0):ocfs2_search_chain:1783 ERROR: status = -5
[  310.348320][T11682] (syz.0.2712,11682,0):ocfs2_search_chain:1893 ERROR: status = -5
[  310.367832][T11682] (syz.0.2712,11682,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -5
[  310.377495][T11682] (syz.0.2712,11682,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5
[  310.388209][T11682] (syz.0.2712,11682,0):ocfs2_claim_new_inode:2248 ERROR: status = -5
[  310.396983][T11682] (syz.0.2712,11682,0):ocfs2_claim_new_inode:2263 ERROR: status = -5
[  310.427557][T11682] (syz.0.2712,11682,0):ocfs2_mknod_locked:639 ERROR: status = -5
[  310.446828][   T26] audit: type=1326 audit(1789128771.741:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11721 comm="syz.4.2725" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ce9e17159 code=0x0
[  310.478527][T11682] (syz.0.2712,11682,0):ocfs2_mknod:385 ERROR: status = -5
[  310.497025][T11682] (syz.0.2712,11682,0):ocfs2_mknod:502 ERROR: status = -5
[  310.514016][T11682] (syz.0.2712,11682,0):ocfs2_mkdir:659 ERROR: status = -5
[  310.630105][T11682] (syz.0.2712,11682,0):ocfs2_remount:667 ERROR: Cannot remount RDWR filesystem due to previous errors.
[  310.797697][ T4189] ocfs2: Unmounting device (7,0) on (node local)
[  311.237311][T11749] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2732'.
[  312.132428][T11753] loop4: detected capacity change from 0 to 32768
[  312.157842][T11771] loop1: detected capacity change from 0 to 8192
[  312.274011][T11771] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  312.291449][T11771] REISERFS (device loop1): using ordered data mode
[  312.314157][T11771] reiserfs: using flush barriers
[  312.349587][T11771] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  312.378056][T11753] XFS (loop4): Mounting V5 Filesystem
[  312.510022][T11771] REISERFS (device loop1): checking transaction log (loop1)
[  312.517888][T11753] XFS (loop4): Ending clean mount
[  312.598989][T11771] REISERFS (device loop1): Using r5 hash to sort names
[  312.814609][T11797] loop3: detected capacity change from 0 to 256
[  312.882789][ T4185] XFS (loop4): Unmounting Filesystem
[  312.967346][T11801] loop6: detected capacity change from 0 to 512
[  313.066754][ T4195] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  313.112586][ T4195] FAT-fs (loop3): Filesystem has been set read-only
[  313.120795][T11801] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  313.121320][ T4195] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  313.838837][    T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.935296][    T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.104440][    T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.253810][    T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.391387][T11836] loop6: detected capacity change from 0 to 128
[  314.437509][T11836] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  314.929680][T11837] attempt to access beyond end of device
[  314.929680][T11837] loop6: rw=2049, want=237, limit=128
[  315.040199][T11832] chnl_net:caif_netlink_parms(): no params data found
[  315.308636][T11832] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.325791][T11832] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.334663][T11832] device bridge_slave_0 entered promiscuous mode
[  315.353917][T11832] bridge0: port 2(bridge_slave_1) entered blocking state
[  315.362835][T11832] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.376474][T11832] device bridge_slave_1 entered promiscuous mode
[  315.429293][T11832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  315.451962][T11832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  315.479012][ T7322] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  315.510587][T11832] team0: Port device team_slave_0 added
[  315.520390][ T1325] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  315.547026][T11832] team0: Port device team_slave_1 added
[  315.570212][T11832] batman_adv: batadv0: Adding interface: batadv_slave_0
[  315.577459][T11832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  315.606630][T11832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  315.636641][T11832] batman_adv: batadv0: Adding interface: batadv_slave_1
[  315.643887][T11832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  315.670523][T11832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  315.745060][T11832] device hsr_slave_0 entered promiscuous mode
[  315.758136][T11832] device hsr_slave_1 entered promiscuous mode
[  315.767542][T11832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  315.784827][T11832] Cannot create hsr debugfs directory
[  315.929350][ T7322] usb 2-1: unable to get BOS descriptor or descriptor too short
[  315.959249][ T1325] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11
[  315.989755][ T1325] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  316.032606][    T9] device hsr_slave_0 left promiscuous mode
[  316.039219][ T7322] usb 2-1: config 1 has an invalid interface number: 3 but max is 2
[  316.047699][ T7322] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  316.058110][    T9] device hsr_slave_1 left promiscuous mode
[  316.060145][ T1325] usb 7-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00
[  316.076415][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  316.084140][ T7322] usb 2-1: config 1 has no interface number 2
[  316.091156][ T1325] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.097567][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  316.100880][ T7322] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  316.117607][ T7322] usb 2-1: config 1 interface 1 has no altsetting 0
[  316.137074][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  316.144905][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  316.176778][    T9] device veth1_macvtap left promiscuous mode
[  316.208785][    T9] device veth0_macvtap left promiscuous mode
[  316.215090][    T9] device veth1_vlan left promiscuous mode
[  316.230021][    T9] device veth0_vlan left promiscuous mode
[  316.319676][ T7322] usb 2-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40
[  316.336945][ T7322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.348609][ T7322] usb 2-1: Product: syz
[  316.374779][ T7322] usb 2-1: Manufacturer: syz
[  316.382281][ T7322] usb 2-1: SerialNumber: syz
[  316.488952][ T7322] Bluetooth: hci3: command 0x0409 tx timeout
[  316.656916][T11884] loop4: detected capacity change from 0 to 40427
[  316.725846][    T9] team0 (unregistering): Port device team_slave_1 removed
[  316.726155][T11884] F2FS-fs (loop4): invalid crc value
[  316.753288][    T9] team0 (unregistering): Port device team_slave_0 removed
[  316.763430][T11884] F2FS-fs (loop4): Found nat_bits in checkpoint
[  316.773871][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  316.802917][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  316.831716][    T9] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  316.842927][T11884] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0
[  316.859246][T11884] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  316.927769][T11884] attempt to access beyond end of device
[  316.927769][T11884] loop4: rw=2049, want=53256, limit=40427
[  316.985582][    T9] bond0 (unregistering): Released all slaves
[  317.004977][ T4185] attempt to access beyond end of device
[  317.004977][ T4185] loop4: rw=2049, want=45104, limit=40427
[  317.096959][ T4185] attempt to access beyond end of device
[  317.096959][ T4185] loop4: rw=2051, want=45064, limit=40427
[  317.146616][ T4185] attempt to access beyond end of device
[  317.146616][ T4185] loop4: rw=2051, want=131072, limit=40427
[  317.188955][ T4185] attempt to access beyond end of device
[  317.188955][ T4185] loop4: rw=2051, want=53248, limit=40427
[  317.212476][ T4185] F2FS-fs (loop4): Issue discard(4614, 4614, 1019) failed, ret: -5
[  317.212529][ T4185] F2FS-fs (loop4): Issue discard(6657, 6657, 9727) failed, ret: -5
[  317.226616][T11832] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  317.293028][ T4185] F2FS-fs (loop4): Issue discard(5638, 5638, 1018) failed, ret: -5
[  317.293995][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  317.309918][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  317.335161][T11832] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  317.361796][T11832] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  317.377523][T11832] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  317.470297][T11902] netlink: 'syz.0.2785': attribute type 1 has an invalid length.
[  317.478249][T11902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  317.485575][T11902] IPv6: NLM_F_CREATE should be set when creating new route
[  317.493059][T11902] IPv6: NLM_F_CREATE should be set when creating new route
[  317.684642][T11906] netlink: 'syz.0.2786': attribute type 1 has an invalid length.
[  317.796653][T11832] 8021q: adding VLAN 0 to HW filter on device bond0
[  317.850511][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  317.870813][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  317.910147][T11832] 8021q: adding VLAN 0 to HW filter on device team0
[  317.942195][ T6942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  317.977063][ T6942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  318.000846][ T6942] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.007996][ T6942] bridge0: port 1(bridge_slave_0) entered forwarding state
[  318.045446][ T6942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  318.054558][T11914] ima: policy update failed
[  318.072503][   T26] audit: type=1802 audit(1789128779.371:105): pid=11914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.2782" res=0 errno=0
[  318.093940][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  318.133954][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  318.180225][ T1242] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.187427][ T1242] bridge0: port 2(bridge_slave_1) entered forwarding state
[  318.210494][ T7322] usb 2-1: USB disconnect, device number 9
[  318.253480][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  318.263811][T11919] loop4: detected capacity change from 0 to 64
[  318.285152][ T6498] usb 7-1: USB disconnect, device number 4
[  318.342051][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  318.367413][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  318.437825][T11919] hfs: session requires an argument
[  318.447610][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  318.474181][T11919] hfs: unable to parse mount options
[  318.523831][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  318.558355][T11832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  318.571024][ T9147] Bluetooth: hci3: command 0x041b tx timeout
[  318.652117][T11832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  318.709902][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  318.734273][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  318.801716][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  318.887373][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  318.940299][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  318.962421][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  318.995296][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  319.028537][T11945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2798'.
[  319.499283][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  319.527491][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  319.586635][T11832] 8021q: adding VLAN 0 to HW filter on device batadv0
[  320.146330][T11994] netlink: 71 bytes leftover after parsing attributes in process `syz.6.2813'.
[  320.205228][T11996] loop1: detected capacity change from 0 to 256
[  320.366613][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  320.410193][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  320.512884][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  320.527391][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  320.550248][T11832] device veth0_vlan entered promiscuous mode
[  320.598972][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  320.630002][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  320.664889][ T7323] Bluetooth: hci3: command 0x040f tx timeout
[  320.697875][T11966] loop4: detected capacity change from 0 to 32768
[  320.710607][T11832] device veth1_vlan entered promiscuous mode
[  320.847620][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  320.861847][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  320.882493][T11966] XFS (loop4): Mounting V5 Filesystem
[  320.896707][T11832] device veth0_macvtap entered promiscuous mode
[  320.967163][T11832] device veth1_macvtap entered promiscuous mode
[  321.025933][T11832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  321.038328][T11832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.068807][T11832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  321.096437][T11832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.107409][T11832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  321.119180][T11832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.133679][T11832] batman_adv: batadv0: Interface activated: batadv_slave_0
[  321.160323][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  321.168193][T11966] XFS (loop4): Ending clean mount
[  321.205424][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  321.244275][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  321.287748][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  321.380515][T11832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  321.418093][T11832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.463629][T11832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  321.548921][T11832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.595202][T11832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  321.657104][T11832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.713474][T11832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  321.739399][T11832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.751684][ T4185] XFS (loop4): Unmounting Filesystem
[  321.767765][T11832] batman_adv: batadv0: Interface activated: batadv_slave_1
[  321.814156][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  321.833921][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  321.866876][T11832] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  321.896421][T11832] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  321.927716][T11832] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  321.953488][T11832] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  322.247521][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  322.260823][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.302140][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  322.367326][T12007] loop1: detected capacity change from 0 to 32768
[  322.393669][ T4238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  322.414267][ T4238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.473071][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  322.675768][T12007] XFS (loop1): Mounting V5 Filesystem
[  322.681584][ T6498] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  322.729158][ T4264] Bluetooth: hci3: command 0x0419 tx timeout
[  322.760255][T12007] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  322.823056][T12007] XFS (loop1): Tail block (0x29) overwrite detected. Updated to 0x30
[  322.915379][T12007] XFS (loop1): Ending clean mount
[  323.015999][T12007] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x2bf/0xd50, inode 0x1803 dinode
[  323.042720][T12007] XFS (loop1): Unmount and run xfs_repair
[  323.067620][ T6498] usb 7-1: not running at top speed; connect to a high speed hub
[  323.085424][T12007] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  323.107911][T12007] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[  323.168180][T12007] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  323.177764][ T6498] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  323.211571][ T6498] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00
[  323.231362][T12007] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d  4.Xh....4.Xh...=
[  323.251329][ T6498] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.295625][T12007] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20  4.Xh...=....... 
[  323.321910][T12007] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  323.338833][T12007] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1  ..............=.
[  323.413759][T12007] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04  ....n..-........
[  323.456707][T12007] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06  ................
[  323.585156][ T4192] XFS (loop1): Unmounting Filesystem
[  323.794418][T12070] loop7: detected capacity change from 0 to 512
[  323.869862][T12070] EXT4-fs (loop7): Ignoring removed oldalloc option
[  323.946659][T12070] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none.
[  324.168735][    C0] sched: RT throttling activated
[  324.243976][T12063] loop4: detected capacity change from 0 to 131072
[  324.338556][T12063] F2FS-fs (loop4): invalid crc value
[  324.385751][T12063] F2FS-fs (loop4): Found nat_bits in checkpoint
[  324.484474][T12063] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2
[  324.516683][T12063] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  325.150028][T12104] loop1: detected capacity change from 0 to 512
[  325.282472][T12104] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  325.370193][ T1325] usb 7-1: USB disconnect, device number 5
[  325.380667][T12104] ext4 filesystem being mounted at /588/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  325.451305][T12104] EXT4-fs error (device loop1): ext4_readdir:223: inode #12: comm syz.1.2843: path /588/file0/file0: directory fails checksum at offset 0
[  325.949021][   T13] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  326.329331][   T13] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11
[  326.371291][   T13] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  326.439268][   T13] usb 8-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00
[  326.527613][   T13] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.668106][T12129] loop1: detected capacity change from 0 to 131072
[  326.719489][T12139] loop6: detected capacity change from 0 to 64
[  326.793739][T12142] ieee802154 phy0 wpan0: encryption failed: -22
[  326.830288][T12129] F2FS-fs (loop1): invalid crc value
[  326.889340][T12129] F2FS-fs (loop1): Found nat_bits in checkpoint
[  326.935995][T12129] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2
[  326.957696][T12129] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  327.558999][ T1325] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  327.896932][T12184] netlink: 'syz.6.2858': attribute type 2 has an invalid length.
[  327.959030][ T1325] usb 5-1: not running at top speed; connect to a high speed hub
[  328.059101][ T1325] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  328.089188][ T1325] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00
[  328.112849][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.671476][ T1325] usb 8-1: USB disconnect, device number 2
[  328.799625][T12217] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2872'.
[  329.037410][   T26] audit: type=1400 audit(1789128790.331:106): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=12229 comm="syz.1.2877" name="p" offset=64
[  329.086425][T12232] loop7: detected capacity change from 0 to 256
[  329.175803][T12232] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d)
[  329.240002][T12237] netlink: 'syz.1.2880': attribute type 12 has an invalid length.
[  329.267972][T12237] netlink: 'syz.1.2880': attribute type 29 has an invalid length.
[  329.299210][T12232] overlayfs: filesystem on './file0' not supported
[  329.322622][T12237] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2880'.
[  329.387574][T12237] netlink: 51 bytes leftover after parsing attributes in process `syz.1.2880'.
[  329.711394][T12258] loop6: detected capacity change from 0 to 512
[  329.843162][T12258] EXT4-fs (loop6): VFS: Can't find ext4 filesystem
[  330.208135][ T9147] usb 5-1: USB disconnect, device number 12
[  330.787359][T12323] loop4: detected capacity change from 0 to 128
[  330.911743][T12335] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2918'.
[  330.921094][   T13] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  331.012110][T12342] loop4: detected capacity change from 0 to 512
[  331.054957][T12344] loop7: detected capacity change from 0 to 256
[  331.092714][T12342] EXT4-fs (loop4): 1 truncate cleaned up
[  331.098587][T12342] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none.
[  331.121254][T12344] exfat: Deprecated parameter 'namecase'
[  331.127030][T12344] exfat: Deprecated parameter 'namecase'
[  331.186590][   T26] audit: type=1800 audit(1789128792.481:107): pid=12342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2919" name="file1" dev="loop4" ino=13 res=0 errno=0
[  331.235631][T12344] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x93e0b04e, utbl_chksum : 0xe619d30d)
[  331.249021][   T13] usb 2-1: not running at top speed; connect to a high speed hub
[  331.261791][T12354] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  331.309285][T12354] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  331.324949][T12356] ALSA: seq fatal error: cannot create timer (-22)
[  331.349073][   T13] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  331.383137][   T13] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00
[  331.412984][   T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.420191][T12359] CIFS: Attempting to mount \\127.0.0.1\share
[  331.489703][T12363] loop0: detected capacity change from 0 to 256
[  332.246218][T12359] CIFS: VFS: Error connecting to socket. Aborting operation.
[  332.256776][T12359] CIFS: VFS: cifs_mount failed w/return code = -4
[  332.321679][T12372] CUSE: unknown device info "�x�KJ�H+��ۤ2Lh��nL�1�`�Cc��n�����8���0:��SU�3նi�"
[  332.336809][T12372] CUSE: unknown device info "ٮ,��
�<�_e�F��"
[  332.343810][T12372] CUSE: unknown device info "3�ܟ�,��̘�"
[  332.364070][T12372] CUSE: unknown device info "J���2SZ�� !e/��������J�+-n��a4��\N���4��"
[  332.384000][T12372] CUSE: unknown device info "��
[  332.384000][T12372] f����z��X�S!
[  332.384000][T12372] �A�x��j��T�ǔ��w���xR�ɐQ��(hҏj	p�VdY0��|M?2J��I�v�^
R�@��"
[  332.403276][T12372] CUSE: unknown device info "!To�}ݝ&|L+U��o��ϲ���"��FstV�:׌E�gJ�����<@c�����4�T�M��_����/��V�����{���"
[  332.416301][T12372] CUSE: unknown device info "��whU~���V�߶�ݸFs�X�,x�k��q��/�Q]�3��H"
[  332.424964][T12372] CUSE: zero length info key specified
[  332.880334][T12397] loop7: detected capacity change from 0 to 8
[  332.887808][T12396] netem: change failed
[  332.980171][T12397] MTD: Attempt to mount non-MTD device "/dev/loop7"
[  333.003395][ T4175] udevd[4175]: incorrect cramfs checksum on /dev/loop7
[  333.083967][ T4175] udevd[4175]: incorrect cramfs checksum on /dev/loop7
[  333.201609][T12406] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2948'.
[  333.282810][T12408] loop6: detected capacity change from 0 to 256
[  333.464912][T12408] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  333.549223][T12418] netlink: 'syz.7.2955': attribute type 8 has an invalid length.
[  333.610474][T12408] exFAT-fs (loop6): error, invalid access to FAT free cluster (entry 0x00000008)
[  333.667505][T12408] exFAT-fs (loop6): error, failed to bmap (inode : ffff88806050dc60 iblock : 8, err : -5)
[  333.725084][ T9147] usb 2-1: USB disconnect, device number 10
[  333.748914][T12408] exFAT-fs (loop6): error, invalid access to FAT free cluster (entry 0x00000008)
[  333.792751][T12427] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2957'.
[  333.838555][T12408] exFAT-fs (loop6): error, invalid access to FAT free cluster (entry 0x00000008)
[  334.246702][T12446] loop7: detected capacity change from 0 to 64
[  334.955684][T12472] loop7: detected capacity change from 0 to 1024
[  335.018852][  T154] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.075174][T12472] EXT4-fs (loop7): Ignoring removed orlov option
[  335.119189][  T154] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.154553][T12472] EXT4-fs (loop7): mounted filesystem without journal. Opts: block_validity,bsddf,max_dir_size_kb=0x0000000000000003,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x000000000000000e,orlov,nogrpid,min_batch_time=0x0000000000000007,grpjquota=,,errors=continue. Quota mode: none.
[  335.289196][  T154] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.396643][  T154] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.510290][T12489] batman_adv: batadv0: Adding interface: ipvlan2
[  335.539015][T12489] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  335.571069][T12492] loop0: detected capacity change from 0 to 1024
[  335.655311][T12489] batman_adv: batadv0: Interface activated: ipvlan2
[  335.731782][T12492] hfsplus: catalog searching failed
[  335.981008][ T4266] hfsplus: bad catalog file entry
[  336.016889][ T4266] hfsplus: b-tree write err: -5, ino 3
[  336.334686][ T6511] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  336.586340][T12510] chnl_net:caif_netlink_parms(): no params data found
[  336.673616][T12548] program syz.0.3001 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  336.699040][ T6511] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  336.719069][ T6511] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  336.769180][ T6511] usb 5-1: config 0 interface 0 has no altsetting 0
[  336.776048][ T6511] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  336.833575][ T6511] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.087333][T12510] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.123221][T12510] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.133810][T12510] device bridge_slave_0 entered promiscuous mode
[  337.171185][T12510] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.205937][T12510] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.249117][T12510] device bridge_slave_1 entered promiscuous mode
[  337.344114][T12510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  337.372443][T12581] program syz.0.3010 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  337.411727][T12510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  337.555013][T12510] team0: Port device team_slave_0 added
[  337.573836][T12587] loop7: detected capacity change from 0 to 512
[  337.605374][T12587] EXT4-fs (loop7): Test dummy encryption mode enabled
[  337.619813][T12510] team0: Port device team_slave_1 added
[  337.730393][T12510] batman_adv: batadv0: Adding interface: batadv_slave_0
[  337.749557][T12510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  337.785326][T12587] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,usrquota,errors=remount-ro,. Quota mode: writeback.
[  337.813709][T12510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  337.827599][T12510] batman_adv: batadv0: Adding interface: batadv_slave_1
[  337.838665][T12510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  337.879036][T12510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  338.017419][ T6515] Bluetooth: hci2: command 0x0409 tx timeout
[  338.034094][T12510] device hsr_slave_0 entered promiscuous mode
[  338.095663][T12510] device hsr_slave_1 entered promiscuous mode
[  338.108099][T12510] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  338.116722][T12510] Cannot create hsr debugfs directory
[  339.009889][ T6515] usb 5-1: USB disconnect, device number 13
[  339.161825][T12606] loop0: detected capacity change from 0 to 131072
[  339.223196][T12606] XFS: ikeep mount option is deprecated.
[  339.251686][T12610] loop7: detected capacity change from 0 to 32768
[  339.252016][T12623] loop1: detected capacity change from 0 to 512
[  339.334613][T12623] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  339.348005][T12623] EXT4-fs (loop1): Ignoring removed nobh option
[  339.366654][T12606] XFS (loop0): Mounting V5 Filesystem
[  339.376101][T12623] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  339.384567][  T154] device hsr_slave_0 left promiscuous mode
[  339.389657][T12623] EXT4-fs (loop1): Ignoring removed bh option
[  339.400308][  T154] device hsr_slave_1 left promiscuous mode
[  339.406963][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  339.415952][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  339.445468][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  339.458986][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  339.484154][T12623] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[  339.523105][T12610] XFS (loop7): Mounting V5 Filesystem
[  339.550263][  T154] device bridge_slave_1 left promiscuous mode
[  339.562148][T12621] IPVS: persistence engine module ip_vs_pe_�� not found
[  339.573755][T12623] EXT4-fs (loop1): 1 orphan inode deleted
[  339.598301][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.603051][T12606] XFS (loop0): Starting recovery (logdev: internal)
[  339.611473][T12623] EXT4-fs (loop1): mounted filesystem without journal. Opts: nomblk_io_submit,nobh,prjquota,bsdgroups,nodiscard,sysvgroups,jqfmt=vfsold,nomblk_io_submit,discard,bh,nodelalloc,noinit_itable,jqfmt=vfsv1,,errors=continue. Quota mode: writeback.
[  339.685971][T12606] XFS (loop0): Ending recovery (logdev: internal)
[  339.701982][T12606] XFS (loop0): Unmounting Filesystem
[  339.719924][T12610] XFS (loop7): Ending clean mount
[  339.727834][  T154] device bridge_slave_0 left promiscuous mode
[  339.780207][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.807416][T12610] XFS (loop7): Quotacheck needed: Please wait.
[  339.994672][  T154] device veth1_macvtap left promiscuous mode
[  340.010787][  T154] device veth0_macvtap left promiscuous mode
[  340.032553][  T154] device veth1_vlan left promiscuous mode
[  340.068245][  T154] device veth0_vlan left promiscuous mode
[  340.088878][ T6511] Bluetooth: hci2: command 0x041b tx timeout
[  340.166965][T12610] XFS (loop7): Quotacheck: Done.
[  340.287293][T12650] loop0: detected capacity change from 0 to 512
[  340.378179][T12650] EXT4-fs (loop0): Test dummy encryption mode enabled
[  340.443609][T11832] XFS (loop7): Unmounting Filesystem
[  340.552143][T12650] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,usrquota,errors=remount-ro,. Quota mode: writeback.
[  341.505259][  T154] team0 (unregistering): Port device team_slave_1 removed
[  341.549715][  T154] team0 (unregistering): Port device team_slave_0 removed
[  341.598408][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  341.692297][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  341.893729][  T154] bond0 (unregistering): Released all slaves
[  341.895496][T12660] loop4: detected capacity change from 0 to 32768
[  341.929096][T12660] XFS (loop4): Invalid device [./bus], error=-16
[  341.978630][T12680] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3038'.
[  342.224475][   T13] Bluetooth: hci2: command 0x040f tx timeout
[  342.367588][T12510] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  342.415919][T12510] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  342.456977][T12510] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  342.475063][T12510] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  342.765598][T12510] 8021q: adding VLAN 0 to HW filter on device bond0
[  342.867777][T12510] 8021q: adding VLAN 0 to HW filter on device team0
[  342.876337][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  342.902418][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  342.945780][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  342.969751][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  343.005012][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  343.012287][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  343.079314][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  343.109371][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  343.139064][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  343.146283][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  343.224648][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  343.244440][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  343.270256][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  343.312689][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  343.350118][T12726] loop4: detected capacity change from 0 to 512
[  343.377178][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  343.439943][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  343.464307][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  343.477901][T12726] EXT4-fs (loop4): orphan cleanup on readonly fs
[  343.486620][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  343.516549][T12726] EXT4-fs error (device loop4): ext4_quota_enable:6444: inode #4: comm syz.4.3052: casefold flag without casefold feature
[  343.545688][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  343.592986][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  343.626525][T12707] loop1: detected capacity change from 0 to 32768
[  343.635590][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  343.644730][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  343.652675][T12726] EXT4-fs error (device loop4): ext4_quota_enable:6447: comm syz.4.3052: Bad quota inode: 4, type: 1
[  343.665854][T12726] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  343.683926][T12726] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  343.693870][T12510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  343.696136][T12726] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,journal_ioprio=0x0000000000000005,,errors=continue. Quota mode: writeback.
[  343.723746][T12726] EXT4-fs (loop4): shut down requested (2)
[  343.730613][T12726] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  343.751998][T12707] XFS (loop1): Mounting V5 Filesystem
[  343.797087][T12726] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  343.870571][T12707] XFS (loop1): Ending clean mount
[  344.229437][ T4192] XFS (loop1): Unmounting Filesystem
[  344.249063][ T6511] Bluetooth: hci2: command 0x0419 tx timeout
[  344.390546][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  344.398390][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  344.484096][T12510] 8021q: adding VLAN 0 to HW filter on device batadv0
[  344.683185][T12776] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  344.709143][T12776] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  344.736170][T12778] loop4: detected capacity change from 0 to 128
[  344.924873][T12778] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  344.957024][T12778] hpfs: filesystem error: improperly stopped
[  345.009067][T12778] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  345.092668][T12778] hpfs: You really don't want any checks? You are crazy...
[  345.130115][T12778] hpfs: hpfs_map_sector(): read error
[  345.136005][T12778] hpfs: code page support is disabled
[  345.219080][T12778] hpfs: hpfs_map_4sectors(): unaligned read
[  345.248852][T12778] hpfs: hpfs_map_4sectors(): unaligned read
[  345.254905][T12778] hpfs: filesystem error: unable to find root dir
[  345.379013][T12798] bonding: no command found in bonding_masters - use +ifname or -ifname
[  345.414505][T12778] hpfs: hpfs_map_4sectors(): unaligned read
[  345.469594][T12778] hpfs: hpfs_map_sector(): read error
[  345.489243][ T4264] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  345.491706][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  345.542261][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  345.629869][T12510] device veth0_vlan entered promiscuous mode
[  345.690459][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  345.739351][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  345.750433][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  345.784638][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  345.817384][T12809] netlink: 'syz.1.3069': attribute type 15 has an invalid length.
[  345.835774][T12809] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3069'.
[  345.869726][T12510] device veth1_vlan entered promiscuous mode
[  345.903772][ T4264] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  345.935456][ T4264] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  345.996206][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  346.016522][ T4264] usb 8-1: config 0 interface 0 has no altsetting 0
[  346.035003][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  346.038902][ T4264] usb 8-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  346.076408][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  346.082948][ T4264] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.131975][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  346.202236][T12510] device veth0_macvtap entered promiscuous mode
[  346.266133][T12510] device veth1_macvtap entered promiscuous mode
[  346.313342][T12822] loop0: detected capacity change from 0 to 1024
[  346.356846][T12510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  346.402978][T12510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.443283][T12510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  346.505688][T12510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.536205][T12510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  346.567466][T12510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.609670][T12510] batman_adv: batadv0: Interface activated: batadv_slave_0
[  346.636241][T12827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3075'.
[  346.689926][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  346.703113][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  346.737744][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  346.752272][T12840] loop0: detected capacity change from 0 to 512
[  346.770157][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  346.830133][T12510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  346.848183][T12840] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.3088: bg 0: block 5: invalid block bitmap
[  346.875847][T12510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.886461][T12510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  346.906100][T12510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.917660][T12840] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  346.932874][T12510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  346.944820][T12510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.955218][T12510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  346.966002][T12510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.971934][T12840] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.3088: invalid indirect mapped block 3 (level 2)
[  346.987281][T12510] batman_adv: batadv0: Interface activated: batadv_slave_1
[  346.999094][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  347.010198][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  347.035681][T12510] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  347.065006][T12840] EXT4-fs (loop0): 1 orphan inode deleted
[  347.090175][T12510] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  347.109672][T12510] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  347.122902][T12840] EXT4-fs (loop0): 1 truncate cleaned up
[  347.138810][T12510] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  347.155472][T12840] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  347.436263][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  347.456460][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  347.516018][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  347.633329][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  347.671204][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  347.695149][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  347.957415][T12878] loop1: detected capacity change from 0 to 512
[  348.119640][T12878] EXT4-fs (loop1): Test dummy encryption mode enabled
[  348.147120][T12878] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #15: comm syz.1.3101: inode has both inline data and extents flags
[  348.170465][T12878] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.3101: couldn't read orphan inode 15 (err -117)
[  348.233178][T12878] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  348.259449][ T6520] usb 8-1: USB disconnect, device number 3
[  348.327128][   T26] audit: type=1800 audit(1789128809.621:108): pid=12878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3101" name="file1" dev="loop1" ino=18 res=0 errno=0
[  348.690354][T12907] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3102'.
[  348.722978][T12907] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3102'.
[  348.762233][T12907] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3102'.
[  348.804626][T12907] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3102'.
[  350.059008][T12967] loop7: detected capacity change from 0 to 64
[  350.499833][T12931] loop0: detected capacity change from 0 to 40427
[  350.546525][T12985] loop1: detected capacity change from 0 to 1024
[  350.587655][T12931] F2FS-fs (loop0): invalid crc value
[  350.657700][T12931] F2FS-fs (loop0): Found nat_bits in checkpoint
[  350.712300][T12985] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,. Quota mode: none.
[  350.731222][T12985] ext4 filesystem being mounted at /643/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  350.753426][T12985] EXT4-fs error (device loop1): ext4_free_blocks:6231: comm syz.1.3130: Freeing blocks not in datazone - block = 0, count = 16
[  350.772893][T12985] EXT4-fs (loop1): Remounting filesystem read-only
[  351.032247][T12931] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  351.213441][ T4189] attempt to access beyond end of device
[  351.213441][ T4189] loop0: rw=2049, want=45104, limit=40427
[  351.401047][T13016] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3138'.
[  351.422496][T13016] netem: invalid attributes len -24
[  351.427765][T13016] netem: change failed
[  351.598054][T13025] loop1: detected capacity change from 0 to 1024
[  351.685426][T13025] EXT4-fs (loop1): Ignoring removed nobh option
[  351.711107][T13025] EXT4-fs (loop1): Ignoring removed bh option
[  351.809661][T13025] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002]
[  351.875841][T13025] System zones: 0-1, 3-12
[  351.886462][T13035] loop4: detected capacity change from 0 to 7
[  351.943092][T13025] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,sysvgroups,errors=remount-ro,stripe=0x0000000000000011,bh,debug,. Quota mode: none.
[  351.993000][    C0] print_req_error: 10 callbacks suppressed
[  351.993021][    C0] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  352.010402][    C0] buffer_io_error: 10 callbacks suppressed
[  352.010421][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[  352.036191][    C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  352.047213][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  352.096216][    C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  352.107217][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  352.145297][T13042] EXT4-fs error (device loop1): ext4_check_all_de:667: inode #12: block 7: comm syz.1.3141: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0
[  352.189840][T13042] EXT4-fs (loop1): Remounting filesystem read-only
[  352.221474][T13038] loop_set_block_size: loop4 (���������C�j̖�P=�	) has still dirty pages (nrpages=1)
[  352.244598][    C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  352.255747][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  352.268630][    C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  352.279864][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  352.292989][    C0] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  352.304237][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[  352.339642][    C0] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  352.350703][    C0] Buffer I/O error on dev loop4, logical block 0, async page read
[  352.362854][T13035] ldm_validate_partition_table(): Disk read failed.
[  352.379286][    C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  352.390542][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  352.428476][    C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  352.439643][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  352.460416][T13050] loop7: detected capacity change from 0 to 256
[  352.479665][    C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  352.491036][    C1] Buffer I/O error on dev loop4, logical block 0, async page read
[  352.516313][T13035] Dev loop4: unable to read RDB block 0
[  352.565111][T13035]  loop4: unable to read partition table
[  352.591933][T13035] loop4: partition table beyond EOD, truncated
[  352.644305][T13035] loop_reread_partitions: partition scan of loop4 (���������C�j̖�P=�	) failed (rc=-5)
[  352.659494][T13050] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d)
[  352.946592][T13068] loop8: detected capacity change from 0 to 64
[  353.313307][T13086] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  353.420245][T13088] sctp: [Deprecated]: syz.8.3159 (pid 13088) Use of struct sctp_assoc_value in delayed_ack socket option.
[  353.420245][T13088] Use struct sctp_sack_info instead
[  353.423860][T13087] loop1: detected capacity change from 0 to 2048
[  353.581408][T13094] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  354.016995][T13074] loop4: detected capacity change from 0 to 32768
[  354.047207][T13106] ima: Unable to open file: /e (-2)
[  354.048035][T13105] ima: policy update failed
[  354.068904][   T26] audit: type=1802 audit(1789128815.361:109): pid=13105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.3165" res=0 errno=0
[  354.253607][T13118] binder: binder_mmap: 13114 200000000000-200000b36000 bad vm_flags failed -1
[  354.293739][T13074] XFS (loop4): Mounting V5 Filesystem
[  354.444740][T13074] XFS (loop4): Ending clean mount
[  354.595431][ T4185] XFS (loop4): Unmounting Filesystem
[  354.755286][T13145] loop1: detected capacity change from 0 to 128
[  354.865796][T13145] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  354.896877][T13145] ext4 filesystem being mounted at /658/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  355.237612][T13154] loop4: detected capacity change from 0 to 512
[  355.315701][T13154] EXT4-fs (loop4): Test dummy encryption mode enabled
[  355.347759][T13154] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  355.377211][T13165] loop7: detected capacity change from 0 to 256
[  355.389784][T13154] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[  355.397532][T13154] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,inode_readahead_blks=0x0000000000080000,prjquota,noauto_da_alloc,barrier=0x0000000000000003,usrjquota=min_batch_time=0x00000000ffffffff,nouid32,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  355.451607][T13165] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[  355.477196][T13154] EXT4-fs error (device loop4): htree_dirblock_to_tree:1083: inode #2: comm syz.4.3174: Directory hole found for htree leaf block 0
[  355.580299][T13172] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3182'.
[  355.592425][   T26] audit: type=1800 audit(1789128816.891:110): pid=13165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3179" name="file1" dev="loop7" ino=1048771 res=0 errno=0
[  355.725509][T13177] loop1: detected capacity change from 0 to 16
[  355.843169][T13177] erofs: (device loop1): erofs_load_compr_cfgs: try to load compressed fs with unsupported algorithms fffe
[  355.915874][T13187] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3186'.
[  356.529177][T13165] attempt to access beyond end of device
[  356.529177][T13165] loop7: rw=16777216, want=34359738496, limit=256
[  356.561440][T13203] loop1: detected capacity change from 0 to 128
[  356.862284][T13217] sctp: [Deprecated]: syz.4.3194 (pid 13217) Use of struct sctp_assoc_value in delayed_ack socket option.
[  356.862284][T13217] Use struct sctp_sack_info instead
[  356.917276][T13218] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3195'.
[  356.960799][T13220] loop0: detected capacity change from 0 to 256
[  357.081337][T13225] loop7: detected capacity change from 0 to 512
[  357.116122][T13220] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[  357.176621][T13225] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  357.200831][   T26] audit: type=1800 audit(1789128818.501:111): pid=13220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3208" name="file1" dev="loop0" ino=1048772 res=0 errno=0
[  357.311126][T13225] Quota error (device loop7): find_tree_dqentry: Getting block too big (196613 >= 6)
[  357.339441][T13225] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0
[  357.352294][T13225] EXT4-fs error (device loop7): ext4_acquire_dquot:6236: comm syz.7.3196: Failed to acquire dquot type 1
[  357.387117][T13225] EXT4-fs (loop7): 1 truncate cleaned up
[  357.412341][T13225] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  357.548938][ T6520] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  357.714753][T13248] loop7: detected capacity change from 0 to 128
[  357.777397][T13248] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  357.859538][T13248] ext4 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  357.899954][ T6520] usb 2-1: not running at top speed; connect to a high speed hub
[  357.984938][T13252] loop8: detected capacity change from 0 to 512
[  358.022447][T13248] fscrypt (loop7, inode 12): Direct key flag not allowed with different contents and filenames modes
[  358.063179][T13220] attempt to access beyond end of device
[  358.063179][T13220] loop0: rw=16777216, want=34359738496, limit=256
[  358.085463][T13252] EXT4-fs (loop8): Test dummy encryption mode enabled
[  358.139062][ T6520] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00
[  358.159153][T13252] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended
[  358.168897][ T6520] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.196321][T13252] EXT4-fs (loop8): Errors on filesystem, clearing orphan list.
[  358.269245][ T6520] usb 2-1: Product: syz
[  358.273480][ T6520] usb 2-1: Manufacturer: syz
[  358.301848][T13252] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,inode_readahead_blks=0x0000000000080000,prjquota,noauto_da_alloc,barrier=0x0000000000000003,usrjquota=min_batch_time=0x00000000ffffffff,nouid32,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  358.331817][ T6520] usb 2-1: SerialNumber: syz
[  358.360924][T13262] loop4: detected capacity change from 0 to 16
[  358.393336][T13252] EXT4-fs error (device loop8): htree_dirblock_to_tree:1083: inode #2: comm syz.8.3204: Directory hole found for htree leaf block 0
[  358.438873][T13262] erofs: (device loop4): erofs_load_compr_cfgs: try to load compressed fs with unsupported algorithms fffe
[  358.514055][T13266] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3210'.
[  358.777971][T13282] loop8: detected capacity change from 0 to 512
[  358.850500][T13282] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  358.973625][T13287] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3217'.
[  359.010370][T13282] Quota error (device loop8): find_tree_dqentry: Getting block too big (196613 >= 6)
[  359.035296][T13282] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0
[  359.045572][T13282] EXT4-fs error (device loop8): ext4_acquire_dquot:6236: comm syz.8.3214: Failed to acquire dquot type 1
[  359.102638][T13282] EXT4-fs (loop8): 1 truncate cleaned up
[  359.167464][T13282] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  359.683996][T13314] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[  359.766858][   T26] audit: type=1800 audit(1789128821.061:112): pid=13314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3220" name="file1" dev="loop8" ino=1048773 res=0 errno=0
[  359.794815][T13317] erofs: (device loop0): erofs_load_compr_cfgs: try to load compressed fs with unsupported algorithms fffe
[  360.019146][T13327] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3229'.
[  360.322023][ T4264] usb 2-1: USB disconnect, device number 11
[  360.710438][T13314] attempt to access beyond end of device
[  360.710438][T13314] loop8: rw=16777216, want=34359738496, limit=256
[  360.755580][T13360] set_capacity_and_notify: 2 callbacks suppressed
[  360.755597][T13360] loop0: detected capacity change from 0 to 256
[  360.895227][T13366] loop7: detected capacity change from 0 to 512
[  360.904211][T13360] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  361.014972][T13366] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  361.090993][T13366] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13
[  361.136574][T13372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3245'.
[  361.136796][T13376] netlink: 'syz.4.3248': attribute type 2 has an invalid length.
[  361.156791][T13376] netlink: 'syz.4.3248': attribute type 2 has an invalid length.
[  361.271828][T13366] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.3244: invalid indirect mapped block 2683928664 (level 1)
[  361.329236][T13366] EXT4-fs (loop7): Remounting filesystem read-only
[  361.336174][T13366] EXT4-fs (loop7): 1 truncate cleaned up
[  361.392378][T13366] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.,. Quota mode: writeback.
[  361.458466][   T26] audit: type=1807 audit(1789128822.751:113): func=FILE_CHECK res=0
[  361.499375][   T26] audit: type=1802 audit(1789128822.791:114): pid=13390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.3252" res=0 errno=0
[  361.520926][T13389] ima: policy update failed
[  361.570382][T13366] EXT4-fs (loop7): shut down requested (2)
[  361.576359][   T26] audit: type=1802 audit(1789128822.821:115): pid=13389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.3252" res=0 errno=0
[  361.665860][T13402] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  362.354580][T13435] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  362.370286][T13436] loop1: detected capacity change from 0 to 512
[  362.417208][T13436] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  362.496517][T13436] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  362.514817][T13436] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3268: invalid indirect mapped block 2683928664 (level 1)
[  362.536098][T13436] EXT4-fs (loop1): Remounting filesystem read-only
[  362.549382][T13436] EXT4-fs (loop1): 1 truncate cleaned up
[  362.555090][T13436] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.,. Quota mode: writeback.
[  362.610326][T13436] EXT4-fs (loop1): shut down requested (2)
[  362.838834][   T13] usb 9-1: new full-speed USB device number 2 using dummy_hcd
[  362.998276][T13460] loop0: detected capacity change from 0 to 1024
[  363.053089][T13460] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  363.075707][T13416] loop4: detected capacity change from 0 to 32768
[  363.209058][   T13] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  363.273989][T13416] JBD2: Ignoring recovery information on journal
[  363.281622][   T13] usb 9-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  363.299956][T13460] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,grpid,. Quota mode: writeback.
[  363.389851][   T13] usb 9-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  363.420828][T13416] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  363.466089][ T4189] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 48: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=5, size=1024 fake=0
[  363.491618][ T4189] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz-executor: corrupted in-inode xattr
[  363.506499][ T4189] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz-executor: corrupted in-inode xattr
[  363.631316][   T13] usb 9-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  363.642145][T13477] loop7: detected capacity change from 0 to 256
[  363.668980][T13416] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048
[  363.689440][   T13] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.719285][   T13] usb 9-1: Product: syz
[  363.723399][T13477] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011a39, chksum : 0x174015ec, utbl_chksum : 0xe619d30d)
[  363.743635][   T13] usb 9-1: Manufacturer: syz
[  363.752528][   T13] usb 9-1: SerialNumber: syz
[  363.766659][T13416] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  363.788948][T13416] OCFS2: Returning error to the calling process.
[  363.795457][T13416] (syz.4.3260,13416,0):ocfs2_search_chain:1783 ERROR: status = -5
[  363.803934][T13416] (syz.4.3260,13416,0):ocfs2_search_chain:1893 ERROR: status = -5
[  363.812307][T13416] (syz.4.3260,13416,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -5
[  363.830309][T13416] (syz.4.3260,13416,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5
[  363.851090][T13416] (syz.4.3260,13416,0):ocfs2_claim_new_inode:2248 ERROR: status = -5
[  363.875783][T13416] (syz.4.3260,13416,0):ocfs2_claim_new_inode:2263 ERROR: status = -5
[  363.884721][T13416] (syz.4.3260,13416,0):ocfs2_mknod_locked:639 ERROR: status = -5
[  363.892631][T13416] (syz.4.3260,13416,0):ocfs2_mknod:385 ERROR: status = -5
[  363.900400][T13416] (syz.4.3260,13416,0):ocfs2_mknod:502 ERROR: status = -5
[  363.907569][T13416] (syz.4.3260,13416,0):ocfs2_mkdir:659 ERROR: status = -5
[  363.952976][T13477] exFAT-fs (loop7): error, invalid size(size(4096) > aligned(9223372036854777344)
[  363.952976][T13477] 
[  363.984756][T13477] exFAT-fs (loop7): Filesystem has been set read-only
[  364.033333][T13416] (syz.4.3260,13416,0):ocfs2_remount:667 ERROR: Cannot remount RDWR filesystem due to previous errors.
[  364.106817][ T4185] ocfs2: Unmounting device (7,4) on (node local)
[  364.270076][T13482] tipc: Started in network mode
[  364.275014][T13482] tipc: Node identity 785634120000000021436587, cluster identity 4711
[  364.299748][T13486] tipc: Enabled bearer <eth:gre0>, priority 10
[  364.821674][T13493] chnl_net:caif_netlink_parms(): no params data found
[  364.877113][T13493] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.884521][T13493] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.893642][T13493] device bridge_slave_0 entered promiscuous mode
[  364.904422][T13493] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.912150][T13493] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.920689][T13493] device bridge_slave_1 entered promiscuous mode
[  364.945124][T13493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  364.957339][T13493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  364.986493][T13493] team0: Port device team_slave_0 added
[  364.995332][T13493] team0: Port device team_slave_1 added
[  365.018701][T13493] batman_adv: batadv0: Adding interface: batadv_slave_0
[  365.026466][T13493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  365.055084][T13493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  365.080385][ T4238] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.093689][T13493] batman_adv: batadv0: Adding interface: batadv_slave_1
[  365.100859][T13493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  365.128337][T13493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  365.170084][T13493] device hsr_slave_0 entered promiscuous mode
[  365.176952][T13493] device hsr_slave_1 entered promiscuous mode
[  365.184045][T13493] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  365.192532][T13493] Cannot create hsr debugfs directory
[  365.204613][ T4238] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.297006][ T4238] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.370801][ T4238] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.419062][ T4267] tipc: Node number set to 1494569365
[  365.511415][T13493] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  365.533082][ T6520] usb 9-1: USB disconnect, device number 2
[  365.589553][T13493] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  365.638343][T13493] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  365.756870][T13493] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  365.930312][T13517] loop1: detected capacity change from 0 to 256
[  366.043965][T13517] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0x174015ec, utbl_chksum : 0xe619d30d)
[  366.231770][T13517] exFAT-fs (loop1): error, invalid size(size(4096) > aligned(9223372036854777344)
[  366.231770][T13517] 
[  366.280639][T13517] exFAT-fs (loop1): Filesystem has been set read-only
[  366.369402][T13493] 8021q: adding VLAN 0 to HW filter on device bond0
[  366.396071][ T4267] FS-Cache: Duplicate cookie detected
[  366.403452][ T4267] FS-Cache: O-cookie c=00000009 [p=00000006 fl=222 nc=0 na=1]
[  366.411836][ T4267] FS-Cache: O-cookie d=ffffffff8c747d80{AFS.cell} n=ffff888025be7800
[  366.420090][ T4267] FS-Cache: O-key=[4] '73797a30'
[  366.425111][ T4267] FS-Cache: N-cookie c=0000000a [p=00000006 fl=2 nc=0 na=1]
[  366.432469][ T4267] FS-Cache: N-cookie d=ffffffff8c747d80{AFS.cell} n=ffff888022f44000
[  366.440728][ T4267] FS-Cache: N-key=[4] '73797a30'
[  366.483872][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  366.513896][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  366.563454][T13493] 8021q: adding VLAN 0 to HW filter on device team0
[  366.633080][T13541] loop8: detected capacity change from 0 to 2048
[  366.646055][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  366.666702][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  366.693864][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.701087][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  366.732799][ T4264] Bluetooth: hci1: command 0x0409 tx timeout
[  366.746917][ T4267] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  366.761976][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  366.779096][T13547] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  366.809831][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  366.863603][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.870924][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  366.936122][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  366.967993][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  366.997171][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  367.008026][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  367.022412][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  367.032311][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  367.069908][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  367.088418][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  367.107972][T13493] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  367.128581][T13493] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  367.151930][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  367.159706][ T4267] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  367.171717][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  367.179720][ T4267] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  367.179752][ T4267] usb 5-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  367.225376][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  367.235291][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  367.274097][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  367.288238][T13528] loop7: detected capacity change from 0 to 32768
[  367.340010][ T4267] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  367.378291][ T4267] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.407643][ T4267] usb 5-1: Product: syz
[  367.423620][ T4267] usb 5-1: Manufacturer: syz
[  367.438784][ T4267] usb 5-1: SerialNumber: syz
[  367.468225][T13528] JBD2: Ignoring recovery information on journal
[  367.593058][T13528] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  367.715596][T13528] OCFS2: ERROR (device loop7): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048
[  367.743781][T13528] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  367.754701][ T4238] device hsr_slave_0 left promiscuous mode
[  367.763810][ T4238] device hsr_slave_1 left promiscuous mode
[  367.770342][T13528] OCFS2: Returning error to the calling process.
[  367.776977][T13528] (syz.7.3301,13528,1):ocfs2_search_chain:1783 ERROR: status = -5
[  367.786664][T13528] (syz.7.3301,13528,1):ocfs2_search_chain:1893 ERROR: status = -5
[  367.795071][ T4238] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  367.802684][ T4238] batman_adv: batadv0: Removing interface: batadv_slave_0
[  367.809997][T13528] (syz.7.3301,13528,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -5
[  367.818636][T13528] (syz.7.3301,13528,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5
[  367.828896][ T4238] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  367.836821][ T4238] batman_adv: batadv0: Removing interface: batadv_slave_1
[  367.846716][T13528] (syz.7.3301,13528,0):ocfs2_claim_new_inode:2248 ERROR: status = -5
[  367.860088][T13528] (syz.7.3301,13528,0):ocfs2_claim_new_inode:2263 ERROR: status = -5
[  367.868342][T13528] (syz.7.3301,13528,0):ocfs2_mknod_locked:639 ERROR: status = -5
[  367.876539][T13528] (syz.7.3301,13528,0):ocfs2_mknod:385 ERROR: status = -5
[  367.884102][T13528] (syz.7.3301,13528,0):ocfs2_mknod:502 ERROR: status = -5
[  367.895588][T13528] (syz.7.3301,13528,0):ocfs2_mkdir:659 ERROR: status = -5
[  367.906753][ T4238] device veth1_macvtap left promiscuous mode
[  367.914032][ T4238] device veth0_macvtap left promiscuous mode
[  367.922895][ T4238] device veth1_vlan left promiscuous mode
[  367.929610][ T4238] device veth0_vlan left promiscuous mode
[  367.953265][T13528] (syz.7.3301,13528,0):ocfs2_remount:667 ERROR: Cannot remount RDWR filesystem due to previous errors.
[  367.996388][T11832] ocfs2: Unmounting device (7,7) on (node local)
[  368.315635][ T4238] team0 (unregistering): Port device team_slave_1 removed
[  368.335845][ T4238] team0 (unregistering): Port device team_slave_0 removed
[  368.352859][ T4238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  368.372028][ T4238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  368.456146][ T4238] bond0 (unregistering): Released all slaves
[  368.485835][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  368.494488][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  368.517215][T13493] 8021q: adding VLAN 0 to HW filter on device batadv0
[  368.817936][ T6520] Bluetooth: hci1: command 0x041b tx timeout
[  368.923433][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  368.938487][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  368.981129][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  369.000424][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  369.016195][T13493] device veth0_vlan entered promiscuous mode
[  369.025103][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  369.041545][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  369.067290][T13493] device veth1_vlan entered promiscuous mode
[  369.108350][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  369.124344][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  369.135745][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  369.152623][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  369.170724][T13493] device veth0_macvtap entered promiscuous mode
[  369.183283][T13493] device veth1_macvtap entered promiscuous mode
[  369.202980][T13493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  369.215456][T13493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.238781][T13493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  369.257848][T13493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.278856][T13493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  369.295270][T13493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.320469][T13493] batman_adv: batadv0: Interface activated: batadv_slave_0
[  369.328520][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  369.350211][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  369.359652][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  369.376975][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  369.404387][T13493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  369.417682][ T4267] usb 5-1: USB disconnect, device number 14
[  369.426692][T13493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.448564][T13493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  369.473401][T13493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.484171][T13493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  369.496480][T13493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.506998][T13493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  369.517858][T13493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  369.538042][T13493] batman_adv: batadv0: Interface activated: batadv_slave_1
[  369.578280][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  369.601044][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  369.626053][T13493] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  369.651707][T13493] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  369.665318][T13493] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  369.675233][T13493] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  369.803625][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  369.823901][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  369.844630][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  369.879542][ T4429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  369.887798][ T4429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  369.909291][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  370.112168][T13604] loop7: detected capacity change from 0 to 2048
[  370.121216][   T26] audit: type=1807 audit(1789128831.421:116): func=FILE_CHECK res=0
[  370.122637][T13607] ima: policy update failed
[  370.145924][   T26] audit: type=1802 audit(1789128831.421:117): pid=13608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.9.3293" res=0 errno=0
[  370.265655][   T26] audit: type=1802 audit(1789128831.471:118): pid=13607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.9.3293" res=0 errno=0
[  370.369414][T13604] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  370.721088][T13634] loop1: detected capacity change from 0 to 64
[  370.784461][T13634] hfs: session requires an argument
[  370.864854][T13634] hfs: unable to parse mount options
[  370.889792][ T6511] Bluetooth: hci1: command 0x040f tx timeout
[  370.915357][T13642] loop8: detected capacity change from 0 to 64
[  371.463627][T13664] loop4: detected capacity change from 0 to 2048
[  371.632115][T13664] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  371.668990][ T4264] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[  371.821471][T13691] loop8: detected capacity change from 0 to 64
[  371.864314][T13691] hfs: session requires an argument
[  371.876467][T13691] hfs: unable to parse mount options
[  372.039222][T13698] loop4: detected capacity change from 0 to 64
[  372.059155][ T4264] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  372.086715][ T4264] usb 10-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  372.128032][ T4264] usb 10-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  372.372646][ T4264] usb 10-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  372.401417][T13712] netlink: 'syz.1.3363': attribute type 2 has an invalid length.
[  372.420213][ T4264] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.450849][ T4264] usb 10-1: Product: syz
[  372.455360][ T4264] usb 10-1: Manufacturer: syz
[  372.488149][ T4264] usb 10-1: SerialNumber: syz
[  372.695730][T13728] loop1: detected capacity change from 0 to 2048
[  372.907299][T13728] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  372.971946][   T13] Bluetooth: hci1: command 0x0419 tx timeout
[  373.152263][T13757] netlink: 'syz.8.3368': attribute type 2 has an invalid length.
[  373.368525][T13768] program syz.4.3375 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  374.085980][T13792] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3393'.
[  374.121031][T13787] loop1: detected capacity change from 0 to 2048
[  374.241448][T13797] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  374.396282][ T9147] usb 10-1: USB disconnect, device number 2
[  374.601860][T13811] loop4: detected capacity change from 0 to 1024
[  374.719306][T13811] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  374.874749][T13817] loop1: detected capacity change from 0 to 1024
[  375.178232][T13817] FS-Cache: Cache "CacheFiles" added (type cachefiles)
[  375.220842][T13811] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,grpid,. Quota mode: writeback.
[  375.226495][T13817] CacheFiles: File cache on loop1 registered
[  375.287109][T13815] CacheFiles: File cache on loop1 unregistering
[  375.358822][T13815] FS-Cache: Withdrawing cache "CacheFiles"
[  375.522851][ T4185] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 48: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=5, size=1024 fake=0
[  375.623866][ T4185] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz-executor: corrupted in-inode xattr
[  375.676491][ T4185] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz-executor: corrupted in-inode xattr
[  375.733859][T13843] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3400'.
[  375.991488][T13852] loop9: detected capacity change from 0 to 2048
[  376.083094][T13856] netlink: 'syz.8.3404': attribute type 12 has an invalid length.
[  376.103267][T13856] netlink: 'syz.8.3404': attribute type 29 has an invalid length.
[  376.138408][T13856] netlink: 148 bytes leftover after parsing attributes in process `syz.8.3404'.
[  376.150006][T13859] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  376.199640][T13856] netlink: 51 bytes leftover after parsing attributes in process `syz.8.3404'.
[  376.391429][ T4238] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.470011][T13867] netlink: 'syz.9.3417': attribute type 12 has an invalid length.
[  376.514778][T13867] netlink: 'syz.9.3417': attribute type 29 has an invalid length.
[  376.535570][T13867] netlink: 148 bytes leftover after parsing attributes in process `syz.9.3417'.
[  376.581692][T13867] netlink: 51 bytes leftover after parsing attributes in process `syz.9.3417'.
[  376.622717][ T4238] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.766785][ T4238] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.845026][T13883] loop7: detected capacity change from 0 to 1024
[  376.854677][T13888] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  376.920908][ T4238] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.994691][T13883] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  377.177318][T13869] loop1: detected capacity change from 0 to 32768
[  377.243500][T13883] EXT4-fs (loop7): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,grpid,. Quota mode: writeback.
[  377.500455][T11832] EXT4-fs error (device loop7): htree_dirblock_to_tree:1112: inode #2: block 48: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=5, size=1024 fake=0
[  377.523394][T13869] JBD2: Ignoring recovery information on journal
[  377.631473][T11832] EXT4-fs error (device loop7): ext4_iget_extra_inode:4573: inode #15: comm syz-executor: corrupted in-inode xattr
[  377.727339][T11832] EXT4-fs error (device loop7): ext4_iget_extra_inode:4573: inode #15: comm syz-executor: corrupted in-inode xattr
[  377.750930][T13869] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  377.939416][T13869] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048
[  377.984436][T13869] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  378.002756][T13869] OCFS2: Returning error to the calling process.
[  378.030385][T13869] (syz.1.3409,13869,1):ocfs2_search_chain:1783 ERROR: status = -5
[  378.038289][T13869] (syz.1.3409,13869,1):ocfs2_search_chain:1893 ERROR: status = -5
[  378.054323][T13869] (syz.1.3409,13869,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -5
[  378.063498][T13869] (syz.1.3409,13869,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5
[  378.073647][T13869] (syz.1.3409,13869,1):ocfs2_claim_new_inode:2248 ERROR: status = -5
[  378.084661][T13869] (syz.1.3409,13869,1):ocfs2_claim_new_inode:2263 ERROR: status = -5
[  378.106198][T13869] (syz.1.3409,13869,1):ocfs2_mknod_locked:639 ERROR: status = -5
[  378.127216][T13869] (syz.1.3409,13869,1):ocfs2_mknod:385 ERROR: status = -5
[  378.135061][T13869] (syz.1.3409,13869,1):ocfs2_mknod:502 ERROR: status = -5
[  378.162755][T13869] (syz.1.3409,13869,1):ocfs2_mkdir:659 ERROR: status = -5
[  378.262472][T13894] chnl_net:caif_netlink_parms(): no params data found
[  378.288380][T13869] (syz.1.3409,13869,1):ocfs2_remount:667 ERROR: Cannot remount RDWR filesystem due to previous errors.
[  378.537294][ T4192] ocfs2: Unmounting device (7,1) on (node local)
[  378.683028][T13894] bridge0: port 1(bridge_slave_0) entered blocking state
[  378.737433][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  378.743840][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  378.758980][T13894] bridge0: port 1(bridge_slave_0) entered disabled state
[  378.800244][T13894] device bridge_slave_0 entered promiscuous mode
[  378.857574][T13894] bridge0: port 2(bridge_slave_1) entered blocking state
[  378.886519][T13894] bridge0: port 2(bridge_slave_1) entered disabled state
[  378.930386][T13894] device bridge_slave_1 entered promiscuous mode
[  379.133856][T13942] ==================================================================
[  379.134025][T13942] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1ba8/0x25d0
[  379.134120][T13942] Write of size 4 at addr ffffc90004ed1380 by task syz.8.3432/13942
[  379.134140][T13942] 
[  379.134148][T13942] CPU: 0 PID: 13942 Comm: syz.8.3432 Not tainted syzkaller #0
[  379.134171][T13942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  379.134227][T13942] Call Trace:
[  379.134236][T13942]  <TASK>
[  379.134247][T13942]  dump_stack_lvl+0x188/0x250
[  379.134298][T13942]  ? show_regs_print_info+0x20/0x20
[  379.134330][T13942]  ? load_image+0x410/0x410
[  379.134383][T13942]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  379.134450][T13942]  print_address_description+0x60/0x2d0
[  379.134476][T13942]  ? sys_imageblit+0x1ba8/0x25d0
[  379.134499][T13942]  kasan_report+0xdf/0x130
[  379.134576][T13942]  ? sys_imageblit+0x1ba8/0x25d0
[  379.134607][T13942]  sys_imageblit+0x1ba8/0x25d0
[  379.134651][T13942]  ? sys_copyarea+0x2530/0x2530
[  379.134674][T13942]  ? __lock_acquire+0x13dc/0x7b50
[  379.134811][T13942]  ? verify_lock_unused+0x140/0x140
[  379.134850][T13942]  drm_fb_helper_sys_imageblit+0x2e/0x510
[  379.134898][T13942]  ? drm_fbdev_fb_imageblit+0x184/0x200
[  379.134927][T13942]  soft_cursor+0x9fd/0xc30
[  379.134963][T13942]  bit_cursor+0x16b5/0x1f40
[  379.135013][T13942]  ? bit_clear_margins+0x550/0x550
[  379.135055][T13942]  ? bit_clear_margins+0x550/0x550
[  379.135084][T13942]  ? add_softcursor+0x8c/0x440
[  379.135122][T13942]  con_flush_chars+0x1f6/0x270
[  379.135150][T13942]  con_write+0x29/0x40
[  379.135179][T13942]  n_tty_write+0xd19/0x1220
[  379.135294][T13942]  ? n_tty_read+0x1a50/0x1a50
[  379.135320][T13942]  ? wait_woken+0x1b0/0x1b0
[  379.135373][T13942]  ? __virt_addr_valid+0x3c6/0x470
[  379.135431][T13942]  ? __phys_addr_symbol+0x2b/0x70
[  379.135453][T13942]  ? __check_object_size+0x30c/0x410
[  379.135506][T13942]  file_tty_write+0x50c/0x8a0
[  379.135538][T13942]  ? n_tty_read+0x1a50/0x1a50
[  379.135567][T13942]  vfs_write+0x748/0xd70
[  379.135625][T13942]  ? file_end_write+0x250/0x250
[  379.135656][T13942]  ? __fget_files+0x402/0x470
[  379.135696][T13942]  ? __fdget_pos+0x1e2/0x370
[  379.135715][T13942]  ? ksys_write+0x70/0x260
[  379.135740][T13942]  ksys_write+0x153/0x260
[  379.135765][T13942]  ? __ia32_sys_read+0x80/0x80
[  379.135792][T13942]  ? lockdep_hardirqs_on+0x94/0x140
[  379.135857][T13942]  do_syscall_64+0x4c/0xa0
[  379.135876][T13942]  ? clear_bhb_loop+0x30/0x80
[  379.135923][T13942]  ? clear_bhb_loop+0x30/0x80
[  379.135947][T13942]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  379.135977][T13942] RIP: 0033:0x7f9acccab159
[  379.135997][T13942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  379.136016][T13942] RSP: 002b:00007f9acaf03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  379.136041][T13942] RAX: ffffffffffffffda RBX: 00007f9accf32fa0 RCX: 00007f9acccab159
[  379.136057][T13942] RDX: 0000000000001006 RSI: 0000200000000040 RDI: 0000000000000004
[  379.136073][T13942] RBP: 00007f9accd4203b R08: 0000000000000000 R09: 0000000000000000
[  379.136088][T13942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  379.136103][T13942] R13: 00007f9accf33038 R14: 00007f9accf32fa0 R15: 00007ffd1f650388
[  379.136140][T13942]  </TASK>
[  379.136148][T13942] 
[  379.136153][T13942] 
[  379.136159][T13942] Memory state around the buggy address:
[  379.136171][T13942]  ffffc90004ed1280: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  379.136186][T13942]  ffffc90004ed1300: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  379.136209][T13942] >ffffc90004ed1380: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  379.136221][T13942]                    ^
[  379.136232][T13942]  ffffc90004ed1400: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  379.136247][T13942]  ffffc90004ed1480: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  379.136259][T13942] ==================================================================
[  379.136269][T13942] Disabling lock debugging due to kernel taint
[  379.136347][T13942] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  379.136359][T13942] CPU: 0 PID: 13942 Comm: syz.8.3432 Tainted: G    B             syzkaller #0
[  379.136380][T13942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  379.136392][T13942] Call Trace:
[  379.136398][T13942]  <TASK>
[  379.136405][T13942]  dump_stack_lvl+0x188/0x250
[  379.136431][T13942]  ? show_regs_print_info+0x20/0x20
[  379.136453][T13942]  ? load_image+0x410/0x410
[  379.136481][T13942]  panic+0x2f8/0x850
[  379.136504][T13942]  ? bpf_jit_dump+0xd0/0xd0
[  379.136526][T13942]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  379.136546][T13942]  ? _raw_spin_unlock+0x40/0x40
[  379.136565][T13942]  ? sys_imageblit+0x1ba8/0x25d0
[  379.136586][T13942]  check_panic_on_warn+0x80/0xa0
[  379.136664][T13942]  ? sys_imageblit+0x1ba8/0x25d0
[  379.136684][T13942]  end_report+0x6d/0xf0
[  379.136705][T13942]  kasan_report+0x102/0x130
[  379.136727][T13942]  ? sys_imageblit+0x1ba8/0x25d0
[  379.136749][T13942]  sys_imageblit+0x1ba8/0x25d0
[  379.136778][T13942]  ? sys_copyarea+0x2530/0x2530
[  379.136796][T13942]  ? __lock_acquire+0x13dc/0x7b50
[  379.136824][T13942]  ? verify_lock_unused+0x140/0x140
[  379.136852][T13942]  drm_fb_helper_sys_imageblit+0x2e/0x510
[  379.136873][T13942]  ? drm_fbdev_fb_imageblit+0x184/0x200
[  379.136896][T13942]  soft_cursor+0x9fd/0xc30
[  379.136921][T13942]  bit_cursor+0x16b5/0x1f40
[  379.136950][T13942]  ? bit_clear_margins+0x550/0x550
[  379.136975][T13942]  ? bit_clear_margins+0x550/0x550
[  379.136999][T13942]  ? add_softcursor+0x8c/0x440
[  379.137022][T13942]  con_flush_chars+0x1f6/0x270
[  379.137045][T13942]  con_write+0x29/0x40
[  379.137066][T13942]  n_tty_write+0xd19/0x1220
[  379.137100][T13942]  ? n_tty_read+0x1a50/0x1a50
[  379.137123][T13942]  ? wait_woken+0x1b0/0x1b0
[  379.137148][T13942]  ? __virt_addr_valid+0x3c6/0x470
[  379.137169][T13942]  ? __phys_addr_symbol+0x2b/0x70
[  379.137198][T13942]  ? __check_object_size+0x30c/0x410
[  379.137223][T13942]  file_tty_write+0x50c/0x8a0
[  379.137256][T13942]  ? n_tty_read+0x1a50/0x1a50
[  379.137279][T13942]  vfs_write+0x748/0xd70
[  379.137301][T13942]  ? file_end_write+0x250/0x250
[  379.137324][T13942]  ? __fget_files+0x402/0x470
[  379.137347][T13942]  ? __fdget_pos+0x1e2/0x370
[  379.137364][T13942]  ? ksys_write+0x70/0x260
[  379.137389][T13942]  ksys_write+0x153/0x260
[  379.137409][T13942]  ? __ia32_sys_read+0x80/0x80
[  379.137431][T13942]  ? lockdep_hardirqs_on+0x94/0x140
[  379.137457][T13942]  do_syscall_64+0x4c/0xa0
[  379.137475][T13942]  ? clear_bhb_loop+0x30/0x80
[  379.137495][T13942]  ? clear_bhb_loop+0x30/0x80
[  379.137516][T13942]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  379.137538][T13942] RIP: 0033:0x7f9acccab159
[  379.137554][T13942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  379.137573][T13942] RSP: 002b:00007f9acaf03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  379.137596][T13942] RAX: ffffffffffffffda RBX: 00007f9accf32fa0 RCX: 00007f9acccab159
[  379.137611][T13942] RDX: 0000000000001006 RSI: 0000200000000040 RDI: 0000000000000004
[  379.137624][T13942] RBP: 00007f9accd4203b R08: 0000000000000000 R09: 0000000000000000
[  379.137637][T13942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  379.137651][T13942] R13: 00007f9accf33038 R14: 00007f9accf32fa0 R15: 00007ffd1f650388
[  379.137673][T13942]  </TASK>
[  379.137981][T13942] Kernel Offset: disabled
[  379.872588][T13942] Rebooting in 86400 seconds..