last executing test programs:

1m9.91243786s ago: executing program 2 (id=80):
unshare(0x24020400)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, 0x0, 0x0)

1m8.896402803s ago: executing program 2 (id=84):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001940)=@newsa={0x1b0, 0x10, 0x1, 0x0, 0x25dfdbfc, {{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x0, 0x81e, 0x4, 0x0, 0x20, 0x80, 0x21}, {@in=@multicast1, 0x0, 0x33}, @in=@loopback, {0x401, 0x0, 0x8, 0x0, 0xffffffff, 0x3, 0x0, 0x8000000}, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0x80000001}, {0x0, 0x1, 0xfffffffc}, 0x2, 0x0, 0xa, 0x4, 0x1, 0x40}, [@algo_auth={0xc0, 0x1, {{'rmd160\x00'}, 0x3c0, "d5deb33e8d02d5b4c6cdd277a6d0adde7a89a2677f61d0a96eb8706a52adfbdc312b5aeab8894c493c358ef75d4775e5384de91cac1e473fc9d56ec179b21865e3b6f29b2da7d564f2bcd96ec67ffcba725b86698cdf6feaa39b2349840fe7d8529c5418a08a77a548060487d8d648e8d31dd7f65d67c2bd"}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x24040021}, 0x0)

1m8.626799714s ago: executing program 2 (id=86):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000100000000e4ff0000000000000a58000000060a0b040000000000000000020000002c000480280001800a00010072616e6765000000180002800800014000000000080002400000000074ff03800900010073797a30000000000900020073797a32"], 0x80}}, 0x0)

1m8.304003065s ago: executing program 2 (id=88):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000f80)={[{@grpquota}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@noauto_da_alloc}]}, 0xfe, 0x54c, &(0x7f0000000400)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FIGETBSZ(r0, 0x2, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x2, 0x0, 0x0, 0xa, 0x1, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "0609e8dbe108598948224ad5cafac11d875397bdc02d0000b420a1a93c524bfe4ab10000000000008dd4992861ac0100", "90be8b1c551265406c7f306003d8a0f4bd00"}})
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3)
socket(0x10, 0x3, 0x0)
fsopen(0x0, 0x1)

1m7.238277008s ago: executing program 2 (id=92):
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
syz_open_dev$tty1(0xc, 0x4, 0x1)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9)

1m5.879425241s ago: executing program 2 (id=101):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)="957bc3871f54da01138019ebbb3587e39b0af28eea1dc1c5b6b0f27c1111d0f8b71e196a9bb19b466172df083b602f37901653c0b41e9ea3218f6680923cb44fcde97805fe3eaf057d955a0de7c0d5", 0x4f}, {&(0x7f0000000440)="b9c8ea7741e24130b11e66fa8118a2cda01b3f0acd758075e1c9d7949dcabe424ea007a38ff2c228d330852a68f81c6d7ce898bd7e628ae1242068c2e81985e9ee753e1d02319449f6c878bb5726dbc4eda9097bc6315fec72ff234fb9f26512af7b647069e3415c0338618c7adb1ac5b2f77a9effa9b33193a6da989be1900ce5158f956fcb9510d3850911ba7792fbc8ceaff1c9d7ceba64850bf02eeae9c814fb4cdb5e0e9b836ea2cca20b60440969419d09b1a0bbfb1e25c9dc429446bc2ddb467d", 0xc4}, {&(0x7f0000000300)="d4eb0cb9b5afe8a92397fd6083599c6c", 0x10}], 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="14000000000019da2cc7bec5000043"], 0x18}}], 0x1, 0x40004)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000000000048510000006", @ANYRES32, @ANYBLOB="0000000000000004180000000000001000000000000200009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100200000ffffb702000008000000b50a00000000000085"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
sendto$packet(r2, &(0x7f00000006c0)="ad8ad1c0af45208208bcf05aba53d3493ecefc79a341c99594054468e28a59d65690fc6253ad229816d98907c021a21a275d01db304b7e55f4bfac901ab2442ea1b2fb2e53678fbfcbeb14d537273e8a215e3bfee0e464153b3d7d1178aa549f8ea895c3028b6f4fc91e0b99a91fbd64c4322732736ff4b0eb76e39a2f3c0cc984f319a8ed2f756c0db0e4cf9a0648c24a5cc807df20be368e61eb40ed1c7f320722c01bf2d1bb6a0e0dfe3de6b9bcb969f075c59d4bf4", 0xb7, 0x40c0, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1m5.535653369s ago: executing program 32 (id=101):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)="957bc3871f54da01138019ebbb3587e39b0af28eea1dc1c5b6b0f27c1111d0f8b71e196a9bb19b466172df083b602f37901653c0b41e9ea3218f6680923cb44fcde97805fe3eaf057d955a0de7c0d5", 0x4f}, {&(0x7f0000000440)="b9c8ea7741e24130b11e66fa8118a2cda01b3f0acd758075e1c9d7949dcabe424ea007a38ff2c228d330852a68f81c6d7ce898bd7e628ae1242068c2e81985e9ee753e1d02319449f6c878bb5726dbc4eda9097bc6315fec72ff234fb9f26512af7b647069e3415c0338618c7adb1ac5b2f77a9effa9b33193a6da989be1900ce5158f956fcb9510d3850911ba7792fbc8ceaff1c9d7ceba64850bf02eeae9c814fb4cdb5e0e9b836ea2cca20b60440969419d09b1a0bbfb1e25c9dc429446bc2ddb467d", 0xc4}, {&(0x7f0000000300)="d4eb0cb9b5afe8a92397fd6083599c6c", 0x10}], 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="14000000000019da2cc7bec5000043"], 0x18}}], 0x1, 0x40004)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000000000048510000006", @ANYRES32, @ANYBLOB="0000000000000004180000000000001000000000000200009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100200000ffffb702000008000000b50a00000000000085"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
sendto$packet(r2, &(0x7f00000006c0)="ad8ad1c0af45208208bcf05aba53d3493ecefc79a341c99594054468e28a59d65690fc6253ad229816d98907c021a21a275d01db304b7e55f4bfac901ab2442ea1b2fb2e53678fbfcbeb14d537273e8a215e3bfee0e464153b3d7d1178aa549f8ea895c3028b6f4fc91e0b99a91fbd64c4322732736ff4b0eb76e39a2f3c0cc984f319a8ed2f756c0db0e4cf9a0648c24a5cc807df20be368e61eb40ed1c7f320722c01bf2d1bb6a0e0dfe3de6b9bcb969f075c59d4bf4", 0xb7, 0x40c0, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1m4.461690281s ago: executing program 1 (id=107):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@flushpolicy={0x10, 0x12, 0x105}, 0x10}}, 0x20040810)

1m4.39350887s ago: executing program 1 (id=108):
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c)
setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000000)=0x6, 0x4)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
listen(r1, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r5, &(0x7f00000003c0), &(0x7f00000004c0)=@tcp6=r1}, 0x20)
sendmmsg$inet6(r1, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000740)="03", 0x1}], 0x1}}], 0x1, 0x0)
sendmmsg$inet6(r1, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m4.25644818s ago: executing program 1 (id=109):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000180)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "03"}}, 0x119)
writev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)="01000000", 0x4}, {0x0}], 0x2)

1m4.228880009s ago: executing program 1 (id=110):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x1, r1, 0x0, 0xfffffffffffffffa, 0x2})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x1, r1, 0x0, 0x3, 0xfffffffffffffeff})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000700)={0x48, 0x1, r1, 0x0, 0x0, 0xfffffffffffffffe})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000001340)={0x28, 0x2, r1, 0x0, &(0x7f00003bd000/0x3000)=nil, 0x3000, 0x80})

1m4.19779119s ago: executing program 1 (id=111):
r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220)
setpgid(0x0, r1)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
fchdir(r3)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)

1m3.267838007s ago: executing program 1 (id=115):
rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)

48.245524776s ago: executing program 33 (id=115):
rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)

38.396323875s ago: executing program 0 (id=217):
r0 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x3)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000bf00)=@newtaction={0x14, 0x30, 0x200, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000080)
io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1)

38.340319349s ago: executing program 0 (id=220):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00')
preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000180)=""/38, 0x26}], 0x1, 0xffff, 0xddd073cf)

38.274274251s ago: executing program 0 (id=221):
set_mempolicy(0x2, 0x0, 0xf5)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019100))
r3 = timerfd_create(0x0, 0x0)
timerfd_settime(r3, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
readv(r3, &(0x7f0000000000)=[{0x0}], 0x1)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x24020000)
r6 = syz_clone(0x12800100, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r6, 0x39)
syz_clone3(&(0x7f00000004c0)={0x80000, 0x0, 0x0, &(0x7f0000000300), {0x15}, 0x0, 0x0, &(0x7f00000003c0)=""/172, &(0x7f0000000480)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58)
r7 = socket$igmp6(0xa, 0x3, 0x2)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r9=>0x0})
ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r9})
syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0)
syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa"], 0x0)

31.050642346s ago: executing program 0 (id=241):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010)
ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'bridge0\x00', 0x9})

30.946602818s ago: executing program 0 (id=242):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x3)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000bf00)=@newtaction={0x14, 0x30, 0x200, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000080)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1)

30.844406917s ago: executing program 0 (id=243):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f0000000380)=[{&(0x7f0000000100)="89e7ee0c7cdad9b4b47380c988cafbe863cac50580318bc98470cca6f706513d3664c30b249fd55ff380", 0x2a}], 0x1)

15.101941104s ago: executing program 34 (id=243):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f0000000380)=[{&(0x7f0000000100)="89e7ee0c7cdad9b4b47380c988cafbe863cac50580318bc98470cca6f706513d3664c30b249fd55ff380", 0x2a}], 0x1)

8.908050732s ago: executing program 5 (id=318):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c"], 0x48}}, 0x0)
mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4084)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010)

8.732315248s ago: executing program 5 (id=320):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x5599, &(0x7f0000005680)="$eJzs3X1oVecdB/BzTaKhFpPV1alY6RSqdGVTW5DNUeNLZjvfkhq0NTXGaWudrViZW9qJCwliOi2NSh2jrjhkRVtWApO+iFPXoUM2psikszLnim44ahZ1gh2Tjdx7n+u955rk1nVNXz6fknvuc3/nec5zD+eP+731OTcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAKIoSm289OevImvqxM8fNeeA/j7y669ljk5aNPnL25/N3TCuqWv1U3fSGlrq5UzqaKxfPP3p1/aEoSqT6pfsvnHzfA4/OWTizNAxYX53alpd3ecjk4+lUo2/Oi539cv8WRVFUEhugKL2tLMpqJ+IHiFblD9it6k1X3lxWM/XtxssXJg6vHbU3/63TqbS3J9Bb0tfVmWvXUkXysU9sj0w769JL5Fyiqf7xC+4jeRMAwAcypiq5yXwcTX/EzbQb4/VYuyLWbo21wyeE1uzGjUiN27ered4er/fSPCtSUaFfl/OM1dPnP9OuivePtWNR4wPMM3fXdKQp7WqeK2P13ponAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMfJu5PmXZgy/cXLfSfV7hiy4a+z+mxcv+9UbfVLd+2sPrHujf61ddMbWurmTulorlw8/+jV9YeiqDzZL5Hqnnhj08Kn+tbNfHDzQ2srZ0w49FpRetywLc7aOfpjePLVsij6VlblTBj23IAoqsotJJvRj/MLy5JP7g8FAAAAPk2GJB/7ZNqpOFiS004k02Qi+V+QCovVm668uaxm6tuNly9MHF47au+Nj1fVxXgV1x0v0y6/9pfICsYh/sbHu1YPu67KG6d78RHjef7YtHdmnBlRf27rlfNNTWsv7h534K73tkw93/zNd/av6Hf/cyPy8n959/k/nDn5HwAAgP+F/B8fp3s95f+3ZlfOaPvDvT/6/biv/31o9cZ3m/YmVg09vmLkd+ZNPPXa869fzcv/t+ccMi//hxmH/N8nurH8DwAAAB9n/+/8X5E3Tvd6yv/PHDwxdM+ogzWN0furyv6VOLhk36nnvtZ8ec29216oPDvrsf55+X9MYfm/OHva4cXfhQkvL4uiMYWfVAAAACBH+P/u175aCHk99c1BPK+/PP7FnRdLZxYvKf7yrl3bnl5TevcdA5fWLn5l9EtDnjg8/9nVefm/orD8X/LRvF0AAACgAIs23L100D/mjd+2pH32rVePVg66Z/vRO25un7G6Zv2kFbec/kpe/q8qLP/36523AwAAAFzHsfmPLFrxt9071v16xOQxpe9PGTn7e3WX9hwe++9RNR0vjP/GW3n5v76w/H9Tepte+ZDqdCj8K4QtZVFU2vlkZarwm6h1YqYAAAAAfEhCTm/44eylDZuf2fbPizV3vtJ8y8utf374C+V3bpz2s+9vOT63adO+vPy/svv7/4c7HYT1/zn3/8tb/59VSN31b4IbAwAAAPBZlL+eP9weP/XLBV39/n6h6/8fe3r4o1u/+5Olv7itfHfitpNPfumJ5ocrfzpwYHvL6JHNRYNL8vJ/Y2H5vyh7+2H+/h8AAADcgE/a7/89lDdO93q6//+0BesOL2gf+/kDLe3Pjxn02znFDy7Y+af2m/c/Oax9/7nzLcPy8n9rYfk/bPtnv70D4fw0l0XR4M4n6bsJ7grTXR4rtJVkFVInPtZjTuiRLrT1yyokrYz1GFcWRV/sfNIYK3wuFFpjhY4B6cL2WOFIKKSvh0zh1VjhQLjStg5ITzdeeD0U0gss2sIKiv6ZJRGxHpe66tFZuG6Pk5mDAwAAfKaE8JzOsiW5zSgeZdsSPe1wU0879Olph6KediiO7RDfsavXo/rcQnj9L6dXv/f48l/WTmi4Z+7kPcOOP37f2bE/+PbaX83uv6XxxKUpTXn5f3th+T+cir6pTVfr/6Ow/j/9u4aZ9f/1oVAeK7SFQlX8jgFV4RipsLshHKO8Kt2jY3CmAAAAAJ9q4XuBol6eBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBf9u49Sq6qThTw7nd30uk0OI6AykSdJEZMdydBlICLPERUjHQYZFTGPEg65NEkIQ8kwYWBsBwUdQLBxDvDXQS4WYCixDgEERgSlcC9RHnNMAzyFLiBUSFc3nCZ3NV9aleqzulKV0wa0tzv+6NrV/3289Sja59zah8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPj/w+BDv7LgilOeuWnkC3936imNC59+bsxlB3/kiPqb5h48/PUtd8+6fcrxZ10w5eSJO1YeO+Mrd7/591tDaO8uV5EUr/j5RVOX1U6Z9KWLv3zOsZ8/auum2ly9uXgY2PWnMnfn/Njqk4NCuKEihOp0YGRjEqjJ3W+M9b2vMYQDwq5AvkTHgKREuuFwW0MI68KuQL6qGxtCaCwInHTvL2/9blfikoYQhoYQ6tJtPFyXtNGQDgyrTQID0oEF1UnglZ2JfODnlUkA9lp8M+Rf9BvaizM091yuxOuvZp917O2VHl5VTDSXzven8X3cqQK16Qfa9+ppy1RHn8i8PTZ7t/WDd1tmO6/ytBV+kcp9Q9m5K1QXKmd2zJq+tHNJfKQytLRUlaqpj57nh5//+ow9Sfeb12HsQPM+eR1W7dh+59mNn7pu9aD1r64ce+WWve3mQwWbtDDd1+pC7jXXb57HaJzPk37w9st8SxriS1cI4V9vqNv26hcuf/nTa7ZcPem8v13zzIjTW9veuO+F6yctWLXg+v/+i8z8v3n38//4co63lUW5Y6tvNCVz8/hIY0w815TMzQEAAKDf6A97Tac+NOvF4b/5xD9PvvHR7YOO/5tFqw/+de2Wdz34VOX4Z285ecT81zLz/yHlHf+Ph/wbC0e7OYRx3YmVg0M4qPvxJHBN7M6pg0P4QHeqvTgwPhXYHMLB3YkR+apSJepjiSGpwPamXGBcKrA1BtpTgfUxsCoVOD8GNqQCM2JgcyowIQbCnOJxfKQpN46yAw0xMC3ZiBviWQgvNMXWUtvqd/mqAAAA9pHc7LCm+G7BuQ57myFOLzc09JYhnoFdMkNdqob0DDY/rSpZQ3VvNVT2VkN+3Ct2P/xMzRW91Zw5DaOiOMPSb/7h/rFfXDW3euj22sNemnfczN8d8/41O1s++uPanT8cd9fahsz8v2338/+6HjpSkTn+H8Lk7r8xd2Uu0pmPT2svygAAAADshdETP/ZPl733l9fdcuLnfzv4jiOv2PjDqbVjv/XK0nt+uGLCudt+dEFm/j+uvPP/4z6RqoLMYVvcDTFvcAhtxYGk2qOygeSo98BcAAAAAPqD/PH4/LHwObnb5BTt9Hw6m799D/PHA//jesw//pC/fmzDf8z99k8nTjli7TmPzd9+1+EfrWn7m+cf/tIF86Z947JvZub/7eWd/z+g+DbpxNbYi9WDQ6gvCNwee9kV6DYkBh47pjiQG//WuAEujFXlTkzIV3VhLDEtBtpSgXWlStydL3FQcSD3ZOUbX5kfx5xciYIAAAAAvOXi7oB4XD6e/3/fgg/PPmpb3aG3rKr46V/uuKZz4vVtNc+M/VXT61/4whNff63xzMz8f9qenf/fPQ/OnN7fOTCE1uoQqtI/DNg2IFkYMAYaK3KJWwYkdVWlqzp3QAhHdw0sXdXjufX/q9NrDN7bkFQVAwd98Ornh3UlrmwIobUwcP8pl3+sK7EkFcg3/sWGEP6qa7Tpxq+vTxqvSTe+tj6EQwsC+apOrQ+hq7HadFW/rMtdxyBd1XV1IbyrIJCv6oi6EJYFAPqp+K90ZuGDi5ctnze9s7NjUR8m4j78hjBrTmdHy4wFnTPrSvRpZqrPRcsYnZsdU8nlkFLiEkWr7lk7tJx0/neCbYV9ye3Hz5w4mLsfvwvVdI9zdE3R3THpIX/4Q9kmQsE3qbdryAMKK9n1JGbqj/lrw8BQv3Rxx6KWs6YvWbJoVPK33Oyjk79xUMm2GpXeVgN66tt+8PIYXlhJ65LTF7YuXrZ85JzTp5/WcVrH/NFtYw5vO3LMqCM+3to1qrbkby9DHd5T1amh7rz8rR/qIdUFlbwVnxoSEhL9LfE/zjj95DuOnPOpE+5d+oGj1oybcPaNh89qXXPb9ZPWT3ts8I9GXZKZ/y/c/fw/furET/7c+gyljv83x8P8yeO7DvNPi4F15R7/by51ND9/YsCQVGBFDKxwmB8AAIB3hrg7Mu52jHutH6q74qrDL3329C2jJn7tzOaRv57wwXEHfvqML99x3H/+3/d/7xN//N+Z+f+K8n7/v4/W/88vXf+5Usv8j4gl2kqt/59e5j+//v+KUuv/p5f5z6//v+5tWP9/aT6Q2iQvWP8fAAB4J3jr1v/vdXn/9AUCMhl6Xd4/fYGATIZel/Ev9wIBe7z+/5PHXPv0B97/TPvPrr/j8ekXn3HOx9fUD9uxrL7l9m//+y9u/MqpgzLz/1Xlzf8t3A8AAAD7j2uPffLfjr3q+7ec3Pjsj2sWzT7/5vNuahz2WsWsjfMnDJh8zez/ysz/15U3/3/r1/8Lpc7/H1Iq0F5qYUDr/wEAANBPlVr/b/tP6i+9sHHHuk0bXv/ske9+/Tt3fOdrry34wQ8+89H3zV48adyEmzPz/w3lzf/jaReVRbljb95oSta0C+k17Z5ryv9kAAAAAPqHytDSUlNm3qKVUcf/+W3GpUB3ly504nE//WT70HffPufaKa3/cN99Ha2H3NnUsH7+zi+d8PTyp05YeWVm/r+5vPl/0e8yqnZsv/Psxk9d98bqQetfXTn2yi27jv8DAAAAfafc/RIAAAAAAAAAAAAAAMDb770Lxoy/t+Xxd1+0evn5zdddcfmbm1q3fPUfL6na/uHZf7hg7uiGzO//w+TucqV+/x+v+xd/X/AXRbljq72v/5e7f9LxP1nWvWThtqYQPlQYmHfevANC7tr8wwsDt351xHu6EuelS9z8yISnuhJT04HPjDzw5a7E0anAtLhI4sHpQLyq4suDUoG4vOJ96UDcHhvSgdpc4FuDknFUpLfVM43JtqpIb6sHG0MYXBDIb6sbGpM2KtIDvCQVyA/wjHQgDvALuUBlulc/GZj0KgYaY9HLBia9AgBgvxW/BdaEWXM6O9riV/h4e0h18W1UtGTZudlqq8psPi5NtuqetUPLSVelv4vuutZ4TajrGsKozNfVwiwV3aPcN7X0sun+osSQe1vtra82XW3pETUkI2qZsaBzZk2vAx/Te5bR1b1mGZWZ7BRmqezepGXUUkZfyhhRmdumjC7H+5WhpaUqlWtsDDaHIr29Isr9vX5Pa/6VekV0+cSXb/rD41ubPn3Ye9pPO/+eyvff+6sDr3jxQ688dN1hm/7bR9b++urM/L+5vPl/XeG4Xs5dDGBFvLLeUYNDmFbmiAAAAOCdb/b8Ry6+4FcXbX+sfdhTC1ovuvWBZT9YXt10zfnHPnjzmS+d8r2pexu/9skTfvvAb3+0cdj4WxaOGfDEWVdedtw9d92xetvxb95w2P8ZOePRzPx/SHnz/7hjLHcoONnbsTle/3/l4BC6L63fnASuicM9dXAIH+hOtccSyQX1PxdLtCWBa+IOkxGxxLT24qrqY2BDKrC9KRfYnApsjYHcXoqrQ25XzkVNIXysOzW5uMTCWKI5FTghBoakAi0x0JYKDIqBcanAHwflAu2pwJ0xEOYUb6ufDcptKwAAgD2Rm2fVFN8N6XnehureMlT0lmFAbxkqe8tQ11uGUqOI9zfGDDWFx+NzGeJDNelaG1K1ZDLEi+Hvcb8yGcLdxTnTBTNN588kaS7OGTN8+x8f/OT0lx6+YemP3hh+4rmf/PH3tm16be4Tp40cPO3VsfNGfPuPmfl/W3nz/wHFt0nrW+P8f9f1/5LA7bF7q+Op40Ni4LFjigO5HQNb42T3wnxV7bkSuUn7hbHEuBgYkgosjIFxqcC0ybnAuvcUB3Iz7XzjK/ONz8mVKAgAAADAWy7uIIi7aeL8/9K/mz353O+0dqyc9dWnps0Y+ukDL33fpcfcNOk3c9cedOCpd14zLzP/H1fe/D+2N7CwsfNjb54cFMINFbt6kw+MbEwCcT9GY/x5/PsaQzigYAdHvkTHgKREbarhcFtD8gv12nRVNzYkawzE+yfd+8tbv9uVuKQhhKEFe1/ybTxcl7TRkA4Mq00CA9KBBdVJIO75yQd+XpkEYK/l9wrGF1TuVJe85p7LlXj9vVOuCZoeXmYfaA/5evrNVV+pSz+Q26eat2dPW6Y6+kTm7bHZu60/vtuavdsKv0jlvqHs3BWqC5UzO2ZNX9q5JD5S+EvWjD56nnv6Jevu0vvgdbjiz+9t7+rSHWhLfXy09Vyu59dhRayuasf2O89u/NR1qwetf3Xl2Cu3lN2NEuIm/cuvjR/2UMHm7Wt1Ifea63efJ+0+T/rjv4EhnrYQwqbnvlF/5okn/tsB/7Rw0/cf/a/mV7/1zTs2blzW1HJz1ZpJF3722sz8v728+X916rbba3FjLh4cwocLNu62uPknDk4+BwsCyafku7KB5JD7E00lPzkBAABgX8vv7sjvL5iTu01OCE/Pk7P52/cwf9xfMa7H/OX2+4TP3/0vf7vid6u/uGX9AxW/+f3GK04YM3XhYwvvu3jiP/+v31/16I2Z+f+03c//61PddPzf8X/6iOP/Pdrfd0XXpx9YsVe7ojPV0Scc/+/R/v5uc/y/R47/O/7fE8f/e+H4f4/296ct8y1poS9dIYSnn/2XC//hgmUnPfTqu4+4+IE/PTjx7IobOv9j+kPPdLzx0Vdm3XpoZv6/sLz5v/X/el60L7/+37RS6/8tLLX+3wrr/wEAAH2qxEJz6XleZvW+TIb06n2ZDL0uENjrEoPW/9vj9f82nFz9+1/P/ffvf+6+pw+vnHr/f46eP++m4UcdM+KqNU+t+NcX2lsy8/8V5c3/48thYGHr/WX9vyGTS1S1KgYWWhgQAACA/VGpHQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8vcaceedL33lh+2G3Lrlt5cnj/3r1qV//7NEH/+zKnZ/YHL7x4vKX7ply/FkXTDl54o6Vx874yt1v/v3WEOZ0l6tIilf8/KKpy2qnTPrSxV8+59jPH7V1U12u3prc7XuLcsdW32gKYV3BI40x8VxT151dgZOO/8my6q7EtqYQPlQYmHfevAO6EuubQhheGLj1qyPe05U4L13i5kcmPNWVmJoOfGbkgS93JY7OBSrS3b10UNLdinR3vzsohMEFgXx35w4qrirfxnG5QGW6jasakzZioDEW/UFj0kYMdMYSc+pDaK0OoSpd1f+sS6qqSlf1i7qkqqp0VefUhXB0CKE6XdUjtUlV1emR31WbVBUDB33w6ueHdSXW1YbQWhi4/5TLP9aVOCMVyDd+Ym0If9X1kkk3vrEmabwm3fglNSEcGkKoTZd4sTopUZsu8Xh1CO8qCOQbn10dwrLAO0L88JlZ+ODiZcvnTe/s7FjUh4naXFsNYdaczo6WGQs6Z9al+lRKRUF657nZeGWZY3/4+a/P6Lpddc/aoeWkq3Plarq7PLqm6O6YfdX7ij7qfezXgMJKdj0fmfpj/towMNQvXdyxqOWs6UuWLBqV/C03++jkb1UummyrUftqW5Xrz91WwwsraV1y+sLWxcuWj5xz+vTTOk7rmD+6bczhbUeOGXXEx1u7RtWW/N0XQ708G6/q46EeUl1QyVvxASAhIdHfEpVFn25t+/u/7MwX/V0drQl13R/QmWlFYZaK7lHui0GP3318Xw46MyXJjGhUZuKQyTK69yxjMpOJXVkakizd3+syk8PCmiq7N2m8XxlaWkr+p2suvlu4+f7Uw+YtV9x05aYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+H/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuBQAAP//CAsM0g==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000b40)={0x17c04, 0xffffffffffffffff, 0x6995, 0x500000001, 0x8000000000000001, 0x8})
truncate(&(0x7f0000000280)='./file1\x00', 0x1fefff)

6.200121972s ago: executing program 5 (id=334):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x1)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="090000001a000000070000004000000042", @ANYRES32=0x1, @ANYBLOB="0001000000000000090000000000", @ANYRES32=0x0, @ANYRES32], 0x50)
r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0xb68, 0x240)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, 0x0)
fstat(r0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)
read$FUSE(r3, &(0x7f0000004a40)={0x2020, 0x0, <r4=>0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
syz_mount_image$hfsplus(&(0x7f00000002c0), &(0x7f0000000300)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1a00804, &(0x7f0000002840)=ANY=[@ANYRES16=r4, @ANYRESHEX=r5, @ANYRES32=r4, @ANYRESHEX=0x0, @ANYRES64=r5, @ANYRESDEC, @ANYRESDEC=r6, @ANYRESDEC=0x0, @ANYBLOB="060000bd00", @ANYRESDEC=r6, @ANYRES64=r3], 0x1, 0x6eb, &(0x7f0000000dc0)="$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")
statx(r2, 0x0, 0x6000, 0x800, 0x0)
mount$binder(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1002, 0x0)
memfd_create(0x0, 0x5)
syz_io_uring_setup(0x2c0e, &(0x7f0000000400)={0x0, 0x6, 0xc002, 0x1000}, 0x0, 0x0)

5.284348608s ago: executing program 4 (id=337):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004)

5.254310549s ago: executing program 6 (id=339):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_4ADDR={0x5}]}, 0x4c}, 0x1, 0x1000000, 0x0, 0x91}, 0x24044884)

5.052371663s ago: executing program 4 (id=341):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r3, r3)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f00000006c0), 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r4, 0x0, 0x2, 0x4044898, &(0x7f0000e68000)={0x2, 0x4e26, @remote}, 0x10)

5.006692801s ago: executing program 6 (id=343):
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_init(0x202, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xf9de, 0x8, 0x1, 0x5000032f}, &(0x7f00000006c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0)

3.900368832s ago: executing program 4 (id=344):
r0 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x3)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000bf00)=@newtaction={0x14, 0x30, 0x200, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000080)
io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1)

3.89992447s ago: executing program 5 (id=345):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]})

3.309006166s ago: executing program 4 (id=347):
socket$key(0xf, 0x3, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r2, 0x0, 0x0)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x9}, {}, 0x1, 0x0, 0x1}, {{@in=@multicast2, 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c)

2.443530008s ago: executing program 3 (id=351):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
io_uring_setup(0x2b66, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00'})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x4048904}, 0x4)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

2.220189272s ago: executing program 3 (id=352):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x1fe)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000200), 0xfea7)
copy_file_range(r1, &(0x7f0000000100), r0, 0x0, 0xffffffffa003e45b, 0x700000000000000)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES64], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x5577c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
readv(r7, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xd)
close(r6)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r8, 0x0)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r10 = accept(r6, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10)
recvfrom(r9, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000080)=ANY=[@ANYBLOB='rodir,shortname=win95,flush,dos1xfloppy=win95,nfs=stale_rw,shortname=winnt,errors=continue,shortname=winnt,\x00'], 0xfc, 0x2b8, &(0x7f0000000300)="$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")

1.98025033s ago: executing program 6 (id=353):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
unshare(0x2a020400)
bind$bt_sco(r0, 0x0, 0x0)

1.34358567s ago: executing program 4 (id=354):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./bus\x00', 0x1800840, &(0x7f0000000600)={[{@fat=@nfs_stale_rw}, {@shortname_winnt}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@uni_xlate}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@fat=@gid}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}]}, 0x1, 0x362, &(0x7f0000000900)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)

1.140384465s ago: executing program 6 (id=355):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x358, 0x0)

1.140030892s ago: executing program 3 (id=356):
syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp936,codepage=iso8859-4,dir_umask=00000000000\x00\x00\x00\x0000000005,part=0x000000000000007e,\x00'], 0x1, 0x307, &(0x7f0000001f80)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f00000016c0)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd52a44fec4f6f1a6f65158bb6911c295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2971f29d9364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e807df4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfdb0c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681a03007e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22f3bb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7c5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cf8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46070039116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c949ca930e7a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4bc700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x143242, 0x0)

1.020488306s ago: executing program 3 (id=357):
r0 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x3)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000bf00)=@newtaction={0x14, 0x30, 0x200, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000080)
io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1)

290.898432ms ago: executing program 7 (id=283):
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x516, &(0x7f0000000740)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe)
truncate(&(0x7f0000000000)='./file1\x00', 0x8000)
fallocate(r0, 0x10, 0x2f5, 0x8)

178.852637ms ago: executing program 6 (id=358):
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000180)={0x3000001d})
epoll_pwait(0xffffffffffffffff, &(0x7f00000003c0)=[{}], 0x1, 0x7, 0x0, 0x0)

178.495222ms ago: executing program 4 (id=359):
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6)
syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1={0xff, 0x0, '\x00', 0x0}}}}}}}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x9b69}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

178.314123ms ago: executing program 5 (id=360):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b400000000000000791000000000000063080000000000009500740000000000c242"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37)

177.376396ms ago: executing program 3 (id=361):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000300)=ANY=[], 0x1, 0x5dd, &(0x7f0000000680)="$eJzs3cFvHFcdB/Dvrp3NOkip4yZtQJWwilQhLJJdWyIpF6AUZKEKVeLA2SJOYmWTVvYWuT1AQBwqTv0TysH/AOJYJB9oj3Dq2ahHJO6+uZrZWXttb107dryb5vORZt9782be/t5vZiczu4oc4Lm1OJfJzdSyOPfWetHe2ljobG0sPOzXk1xMUk+aSWrF6n8k+SJ5nN6Sb/c7BspDPv+kee+zjz79sNdqVku5fe2o/Y5nN5bpXqxleVbjzZ96vP0znEkye7r44Gzs9P13aPcpP5cAwDirJRPD1k8nl6qb9eI5oHdX3LvHfqY9HnUAAAAAcA5e2M521nN51HEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAs6T6+/+1aqn367Op9f/+f6Nal6o+fqaPv+nm04wDAAAAAAAAAM7Jd7eznfVc7rd3auVv/q+Wjavl67fyXtaynNXcyHqW0k03q2kf+J29sb7U7a62j7Hn/NA9589nvgAAAAAAAADwDfXnLO79/g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOOglkz0inK52q9Ppz6ZpJmkUWz3OPlPv/4s2xx1AAAAAHAOXtjOdtZzud/eqZXP/C+Vz/3NvJdH6WYl3XSynDvldwHFU39Rbix0tjYWHhbL4XF/9v8ThdFIUk/vu4fh73y93GIqd7NSrrmR3+WddHIn9XLPwvV+PMPj+lMRU+0nlWNGdqcqixn/qirHw3SZkQu7GWlVsRXZuHJ0Jk54dA6+Uzv13W9+rj6FnF+qymI+b451zucHzr6Xjs5EMvPbv96633n04P7dtbnxmdITOpiJhYFMvPxcZaJVZuLabnsxv8xvMpfZvJ3VrOT3WUo3y5nNm2VtqTqfi9eJozP1032tt78ukkZ1XHpX0ZPF9Gq57+Ws5Nd5J3fKI9rKrdzKfH6U19Pad4SvDY37jztVd/mpr5/sU/+971eVC0l+UZXjocjrlYG8Dl5zp8u+wTV7WZo5+2vj5HeqSnH2vDF218YrB/6V6GfixaMz8bfyxFnrPHqwen/p3WO+32tVWWTg54cysTNx6gk9seJ8mSkOVtnaf3YUfS8O7WuXfVd3++qH+q7t9n3dJ7VR3cMdHmm+7Ht5aF9vv+sDfcPutwAYe5d+cKkx9b+pf099PPWXqftTbzXfuHj74iuNXPjXhR9PtiZeq79S+3s+zh/2nv8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAnt/b+Bw+WOp3lVZVTVupJxiAMFZUzqYz6ygQ8bTe7D9+9ufb+Bz9cebh0b/ne8qPXW7dvt9vtW62bd1c6y9XrqKMEAM7S3k3/qCMBAAAAAAAAAAAAAAC+ynn8d+JRzxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhmW5zL5GZqabdutIr21sZCp1j69b0tm0lqReWfSb5IHqe3ZHpguNpXvc/nnzTvffbRpx/ujdXsb187ar/j2RdL/UBMpx1v/tTj7c1wNslMVcLIfRkAAP//eU0DaA==")
shutdown(0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
setxattr$security_ima(&(0x7f0000000340)='./file1\x00', &(0x7f0000000000), &(0x7f0000000180)=@v2={0x5, 0x1, 0x14, 0x4}, 0x9, 0x1)

76.431785ms ago: executing program 6 (id=362):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r2, {0xf000, 0xffff}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

56.010152ms ago: executing program 5 (id=363):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200))
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
pread64(r5, &(0x7f0000002300)=""/176, 0xb0, 0x2)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="882b66011c34", @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8, @ANYRES16], 0x50)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

0s ago: executing program 3 (id=364):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0x11)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.140' (ED25519) to the list of known hosts.
[   39.296610][ T6519] cgroup: Unknown subsys name 'net'
[   39.425139][ T6519] cgroup: Unknown subsys name 'cpuset'
[   39.429094][ T6519] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   39.635603][ T6519] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SS
[   42.018822][ T6531] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   42.032945][ T6531] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   42.042567][ T6531] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   42.046219][ T6531] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   42.049197][ T6531] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   42.077183][ T6531] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   42.080092][ T6531] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   42.082852][ T6531] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   42.087925][ T6531] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   42.091908][ T6531] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   42.121650][ T6531] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   42.127492][ T6531] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   42.151133][   T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   42.155768][ T6540] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   42.159564][ T6540] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   42.168959][ T6543] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   42.171854][ T6543] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   42.175293][ T6543] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   42.178445][ T6543] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   42.188304][ T6543] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   42.189124][ T6543] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   42.193840][ T6543] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   42.197166][ T6543] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   42.202332][ T6543] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   42.205343][ T6543] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   42.342828][ T6529] chnl_net:caif_netlink_parms(): no params data found
[   42.358006][ T6532] chnl_net:caif_netlink_parms(): no params data found
[   42.506649][ T6529] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.506790][ T6529] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.506963][ T6529] bridge_slave_0: entered allmulticast mode
[   42.507930][ T6529] bridge_slave_0: entered promiscuous mode
[   42.525743][ T6532] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.525848][ T6532] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.525966][ T6532] bridge_slave_0: entered allmulticast mode
[   42.526857][ T6532] bridge_slave_0: entered promiscuous mode
[   42.528658][ T6532] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.528710][ T6532] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.528819][ T6532] bridge_slave_1: entered allmulticast mode
[   42.529759][ T6532] bridge_slave_1: entered promiscuous mode
[   42.550756][ T6529] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.550879][ T6529] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.551039][ T6529] bridge_slave_1: entered allmulticast mode
[   42.553911][ T6529] bridge_slave_1: entered promiscuous mode
[   42.599520][ T6529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   42.601510][ T6529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   42.616763][ T6532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   42.618543][ T6532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   42.656848][ T6529] team0: Port device team_slave_0 added
[   42.691040][ T6529] team0: Port device team_slave_1 added
[   42.693641][ T6532] team0: Port device team_slave_0 added
[   42.715530][ T6537] chnl_net:caif_netlink_parms(): no params data found
[   42.721333][ T6532] team0: Port device team_slave_1 added
[   42.743492][ T6529] batman_adv: batadv0: Adding interface: batadv_slave_0
[   42.743565][ T6529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   42.743601][ T6529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   42.774900][ T6529] batman_adv: batadv0: Adding interface: batadv_slave_1
[   42.774963][ T6529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   42.775007][ T6529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   42.804964][ T6529] hsr_slave_0: entered promiscuous mode
[   42.805599][ T6529] hsr_slave_1: entered promiscuous mode
[   42.806453][ T6535] chnl_net:caif_netlink_parms(): no params data found
[   42.810622][ T6532] batman_adv: batadv0: Adding interface: batadv_slave_0
[   42.812451][ T6532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   42.812494][ T6532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   42.816365][ T6532] batman_adv: batadv0: Adding interface: batadv_slave_1
[   42.816398][ T6532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   42.816432][ T6532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   42.841863][ T6538] chnl_net:caif_netlink_parms(): no params data found
[   42.930176][ T6537] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.930291][ T6537] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.930417][ T6537] bridge_slave_0: entered allmulticast mode
[   42.931448][ T6537] bridge_slave_0: entered promiscuous mode
[   42.950486][ T6532] hsr_slave_0: entered promiscuous mode
[   42.951021][ T6532] hsr_slave_1: entered promiscuous mode
[   42.951425][ T6532] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   42.951519][ T6532] Cannot create hsr debugfs directory
[   42.962799][ T6537] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.965324][ T6537] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.966602][ T6537] bridge_slave_1: entered allmulticast mode
[   42.967511][ T6537] bridge_slave_1: entered promiscuous mode
[   43.006150][ T6537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   43.033275][ T6537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   43.095406][ T6538] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.097740][ T6538] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.100120][ T6538] bridge_slave_0: entered allmulticast mode
[   43.102912][ T6538] bridge_slave_0: entered promiscuous mode
[   43.118424][ T6537] team0: Port device team_slave_0 added
[   43.120671][ T6535] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.120749][ T6535] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.120894][ T6535] bridge_slave_0: entered allmulticast mode
[   43.121783][ T6535] bridge_slave_0: entered promiscuous mode
[   43.123891][ T6535] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.123942][ T6535] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.124076][ T6535] bridge_slave_1: entered allmulticast mode
[   43.124910][ T6535] bridge_slave_1: entered promiscuous mode
[   43.146150][ T6538] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.148672][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.150918][ T6538] bridge_slave_1: entered allmulticast mode
[   43.154121][ T6538] bridge_slave_1: entered promiscuous mode
[   43.164003][ T6537] team0: Port device team_slave_1 added
[   43.184618][ T6535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   43.210285][ T6537] batman_adv: batadv0: Adding interface: batadv_slave_0
[   43.210351][ T6537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   43.210407][ T6537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   43.211660][ T6537] batman_adv: batadv0: Adding interface: batadv_slave_1
[   43.211687][ T6537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   43.211721][ T6537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   43.219443][ T6535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   43.239332][ T6538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   43.240976][ T6538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   43.306097][ T6535] team0: Port device team_slave_0 added
[   43.308413][ T6538] team0: Port device team_slave_0 added
[   43.346198][ T6535] team0: Port device team_slave_1 added
[   43.348672][ T6538] team0: Port device team_slave_1 added
[   43.360232][ T6529] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   43.377322][ T6537] hsr_slave_0: entered promiscuous mode
[   43.377902][ T6537] hsr_slave_1: entered promiscuous mode
[   43.378237][ T6537] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   43.378268][ T6537] Cannot create hsr debugfs directory
[   43.404865][ T6538] batman_adv: batadv0: Adding interface: batadv_slave_0
[   43.404929][ T6538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   43.405173][ T6538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   43.405870][ T6529] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   43.424138][ T6535] batman_adv: batadv0: Adding interface: batadv_slave_0
[   43.424190][ T6535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   43.424287][ T6535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   43.425552][ T6535] batman_adv: batadv0: Adding interface: batadv_slave_1
[   43.425581][ T6535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   43.425623][ T6535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   43.441511][ T6538] batman_adv: batadv0: Adding interface: batadv_slave_1
[   43.441544][ T6538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   43.441591][ T6538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   43.447704][ T6529] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   43.484917][ T6529] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   43.506807][ T6535] hsr_slave_0: entered promiscuous mode
[   43.508126][ T6535] hsr_slave_1: entered promiscuous mode
[   43.508470][ T6535] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   43.508501][ T6535] Cannot create hsr debugfs directory
[   43.547564][ T6538] hsr_slave_0: entered promiscuous mode
[   43.550068][ T6538] hsr_slave_1: entered promiscuous mode
[   43.550455][ T6538] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   43.550485][ T6538] Cannot create hsr debugfs directory
[   43.654111][ T6532] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   43.679520][ T6532] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   43.684084][ T6532] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   43.699554][ T6532] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   43.775225][ T6537] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   43.787026][ T6537] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   43.794435][ T6537] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   43.818149][ T6537] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   43.864565][ T6538] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   43.877658][ T6538] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   43.904518][ T6529] 8021q: adding VLAN 0 to HW filter on device bond0
[   43.904747][ T6538] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   43.908385][ T6538] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   43.964092][ T6529] 8021q: adding VLAN 0 to HW filter on device team0
[   43.975691][ T6535] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   43.988490][  T663] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.988639][  T663] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.993810][  T663] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.993883][  T663] bridge0: port 2(bridge_slave_1) entered forwarding state
[   44.010735][ T6535] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   44.027348][ T6535] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   44.038978][ T6535] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   44.066274][ T6537] 8021q: adding VLAN 0 to HW filter on device bond0
[   44.092944][ T6543] Bluetooth: hci0: command tx timeout
[   44.100747][ T6538] 8021q: adding VLAN 0 to HW filter on device bond0
[   44.104136][ T6537] 8021q: adding VLAN 0 to HW filter on device team0
[   44.110970][ T6538] 8021q: adding VLAN 0 to HW filter on device team0
[   44.121537][ T6532] 8021q: adding VLAN 0 to HW filter on device bond0
[   44.146398][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.146490][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[   44.148501][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.148556][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[   44.163662][ T6532] 8021q: adding VLAN 0 to HW filter on device team0
[   44.172729][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.172813][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   44.173822][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.173883][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   44.174770][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.174826][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   44.186828][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.186883][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   44.191099][ T6543] Bluetooth: hci1: command tx timeout
[   44.241200][ T6537] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   44.246403][ T6537] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   44.252468][ T6543] Bluetooth: hci3: command tx timeout
[   44.252795][   T52] Bluetooth: hci4: command tx timeout
[   44.253000][   T52] Bluetooth: hci2: command tx timeout
[   44.264070][ T6532] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   44.280673][ T6538] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   44.280753][ T6538] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   44.358626][ T6535] 8021q: adding VLAN 0 to HW filter on device bond0
[   44.378303][ T6535] 8021q: adding VLAN 0 to HW filter on device team0
[   44.417220][ T6529] 8021q: adding VLAN 0 to HW filter on device batadv0
[   44.422017][   T14] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.422165][   T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[   44.423535][   T14] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.423597][   T14] bridge0: port 2(bridge_slave_1) entered forwarding state
[   44.487490][ T6537] 8021q: adding VLAN 0 to HW filter on device batadv0
[   44.498566][ T6532] 8021q: adding VLAN 0 to HW filter on device batadv0
[   44.513391][ T6538] 8021q: adding VLAN 0 to HW filter on device batadv0
[   44.547639][ T6537] veth0_vlan: entered promiscuous mode
[   44.570546][ T6538] veth0_vlan: entered promiscuous mode
[   44.589521][ T6537] veth1_vlan: entered promiscuous mode
[   44.605733][ T6529] veth0_vlan: entered promiscuous mode
[   44.608810][ T6529] veth1_vlan: entered promiscuous mode
[   44.620251][ T6538] veth1_vlan: entered promiscuous mode
[   44.640277][ T6537] veth0_macvtap: entered promiscuous mode
[   44.649295][ T6532] veth0_vlan: entered promiscuous mode
[   44.658826][ T6529] veth0_macvtap: entered promiscuous mode
[   44.670890][ T6532] veth1_vlan: entered promiscuous mode
[   44.691669][ T6529] veth1_macvtap: entered promiscuous mode
[   44.693757][ T6537] veth1_macvtap: entered promiscuous mode
[   44.728556][ T6532] veth0_macvtap: entered promiscuous mode
[   44.737837][ T6532] veth1_macvtap: entered promiscuous mode
[   44.741506][ T6538] veth0_macvtap: entered promiscuous mode
[   44.745501][ T6529] batman_adv: batadv0: Interface activated: batadv_slave_0
[   44.749750][ T6538] veth1_macvtap: entered promiscuous mode
[   44.762806][ T6538] batman_adv: batadv0: Interface activated: batadv_slave_0
[   44.768365][ T6538] batman_adv: batadv0: Interface activated: batadv_slave_1
[   44.775413][ T6537] batman_adv: batadv0: Interface activated: batadv_slave_0
[   44.778548][ T6538] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   44.778648][ T6538] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   44.778702][ T6538] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   44.778738][ T6538] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   44.780718][ T6529] batman_adv: batadv0: Interface activated: batadv_slave_1
[   44.803801][ T6532] batman_adv: batadv0: Interface activated: batadv_slave_0
[   44.805823][ T6532] batman_adv: batadv0: Interface activated: batadv_slave_1
[   44.806614][ T6529] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   44.806656][ T6529] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   44.806690][ T6529] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   44.806723][ T6529] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   44.809584][ T6532] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   44.809628][ T6532] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   44.809660][ T6532] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   44.809692][ T6532] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   44.826267][ T6535] 8021q: adding VLAN 0 to HW filter on device batadv0
[   44.844391][ T6537] batman_adv: batadv0: Interface activated: batadv_slave_1
[   44.848392][ T6537] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   44.851743][ T6537] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   44.855137][ T6537] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   44.857806][ T6537] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.020504][  T740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.025411][  T740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.050970][  T740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.051041][  T740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.066186][   T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.066255][   T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.098768][ T6535] veth0_vlan: entered promiscuous mode
[   45.110161][ T6535] veth1_vlan: entered promiscuous mode
[   45.144319][   T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.144387][   T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.144578][   T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.144601][   T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.168311][ T6535] veth0_macvtap: entered promiscuous mode
[   45.179810][ T6538] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   45.184294][ T6535] veth1_macvtap: entered promiscuous mode
[   45.235224][ T6535] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.237257][ T6535] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.238795][ T6535] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.238836][ T6535] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.238866][ T6535] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.238895][ T6535] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.245080][   T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.245116][   T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.317515][ T2157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.317574][ T2157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.441961][   T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.442040][   T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.172479][ T6543] Bluetooth: hci0: command tx timeout
[   46.220325][ T2118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.223387][ T2118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.224773][ T6651] loop3: detected capacity change from 0 to 1024
[   46.225660][ T6651] =======================================================
[   46.225660][ T6651] WARNING: The mand mount option has been deprecated and
[   46.225660][ T6651]          and is ignored by this kernel. Remove the mand
[   46.225660][ T6651]          option from the mount to silence this warning.
[   46.225660][ T6651] =======================================================
[   46.252679][ T6543] Bluetooth: hci1: command tx timeout
[   46.283857][ T6651] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.351211][ T6543] Bluetooth: hci2: command tx timeout
[   46.351302][ T6543] Bluetooth: hci4: command tx timeout
[   46.351361][ T6543] Bluetooth: hci3: command tx timeout
[   46.389705][ T2157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.389764][ T2157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.057014][ T6605] IPVS: starting estimator thread 0...
[   48.282594][ T6531] Bluetooth: hci0: command tx timeout
[   48.284624][ T6678] IPVS: using max 34 ests per chain, 81600 per kthread
[   48.332502][ T6531] Bluetooth: hci1: command tx timeout
[   48.395294][ T6538] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.415415][ T6543] Bluetooth: hci4: command tx timeout
[   48.415493][ T6543] Bluetooth: hci2: command tx timeout
[   48.419216][ T6531] Bluetooth: hci3: command tx timeout
[   48.604108][ T6684] loop1: detected capacity change from 0 to 16
[   48.624940][ T6684] erofs (device loop1): mounted with root inode @ nid 36.
[   48.707479][ T6687] netlink: 1068 bytes leftover after parsing attributes in process `syz.2.9'.
[   49.199804][ T6684] erofs (device loop1): readahead error at folio 12 @ nid 36
[   49.199999][ T6684] erofs (device loop1): readahead error at folio 9 @ nid 36
[   49.200257][ T6684] syz.1.11: attempt to access beyond end of device
[   49.200257][ T6684] loop1: rw=524288, sector=67108872, nr_sectors = 16 limit=16
[   49.200387][ T6684] syz.1.11: attempt to access beyond end of device
[   49.200387][ T6684] loop1: rw=524288, sector=720, nr_sectors = 8 limit=16
[   50.382422][ T6531] Bluetooth: hci0: command tx timeout
[   50.419616][ T6531] Bluetooth: hci1: command tx timeout
[   50.618424][ T6531] Bluetooth: hci3: command tx timeout
[   50.618502][ T6531] Bluetooth: hci2: command tx timeout
[   50.618559][ T6531] Bluetooth: hci4: command tx timeout
[   50.672527][ T6700] tipc: Started in network mode
[   50.672651][ T6700] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[   50.675070][ T6700] tipc: Enabled bearer <udp:s>, priority 10
[   50.709319][ T6697] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   51.271248][ T6710] loop0: detected capacity change from 0 to 40427
[   51.344138][ T6710] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   52.490401][   T10] tipc: Node number set to 4269801488
[   52.787174][ T6532] syz-executor: attempt to access beyond end of device
[   52.787174][ T6532] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   52.787502][ T6532] CPU: 1 UID: 0 PID: 6532 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT 
[   52.787520][ T6532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   52.787527][ T6532] Call trace:
[   52.787531][ T6532]  show_stack+0x2c/0x3c (C)
[   52.787549][ T6532]  __dump_stack+0x30/0x40
[   52.787563][ T6532]  dump_stack_lvl+0xd8/0x12c
[   52.787576][ T6532]  dump_stack+0x1c/0x28
[   52.787589][ T6532]  f2fs_handle_critical_error+0x34c/0x4b8
[   52.787602][ T6532]  f2fs_stop_checkpoint+0x5c/0x70
[   52.787615][ T6532]  f2fs_write_end_io+0x58c/0x818
[   52.787627][ T6532]  bio_endio+0x804/0x840
[   52.787639][ T6532]  submit_bio_noacct+0x158/0x176c
[   52.787653][ T6532]  submit_bio+0x354/0x4d4
[   52.787665][ T6532]  f2fs_submit_write_bio+0x13c/0x324
[   52.787676][ T6532]  __submit_merged_bio+0x254/0x704
[   52.787687][ T6532]  __submit_merged_write_cond+0x23c/0x4ac
[   52.787698][ T6532]  f2fs_write_data_pages+0x1d28/0x2634
[   52.787710][ T6532]  do_writepages+0x270/0x468
[   52.787724][ T6532]  filemap_fdatawrite+0x144/0x1e8
[   52.787735][ T6532]  f2fs_sync_dirty_inodes+0x2b8/0x788
[   52.787748][ T6532]  f2fs_write_checkpoint+0x684/0x1694
[   52.787762][ T6532]  kill_f2fs_super+0x21c/0x584
[   52.787773][ T6532]  deactivate_locked_super+0xc4/0x12c
[   52.787785][ T6532]  deactivate_super+0xe0/0x100
[   52.787795][ T6532]  cleanup_mnt+0x31c/0x3ac
[   52.787806][ T6532]  __cleanup_mnt+0x20/0x30
[   52.787817][ T6532]  task_work_run+0x1dc/0x260
[   52.787828][ T6532]  do_notify_resume+0x174/0x1f4
[   52.787840][ T6532]  el0_svc+0xb8/0x180
[   52.787852][ T6532]  el0t_64_sync_handler+0x84/0x12c
[   52.787863][ T6532]  el0t_64_sync+0x198/0x19c
[   52.787877][ T6532] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   52.900515][ T6730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   52.900885][ T6730] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   53.445633][ T6733] loop0: detected capacity change from 0 to 4096
[   53.615101][ T6734] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   55.603886][ T6752] bridge_slave_0: left allmulticast mode
[   55.603967][ T6752] bridge_slave_0: left promiscuous mode
[   55.608317][ T6752] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.655296][ T6752] bridge_slave_1: left allmulticast mode
[   55.679194][ T6752] bridge_slave_1: left promiscuous mode
[   55.679401][ T6752] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.902535][ T6752] bond0: (slave bond_slave_0): Releasing backup interface
[   56.812166][ T6752] bond0: (slave bond_slave_1): Releasing backup interface
[   57.110499][ T6743] loop4: detected capacity change from 0 to 32768
[   57.159173][ T6752] team0: Port device team_slave_0 removed
[   57.196922][ T6752] team0: Port device team_slave_1 removed
[   57.197554][ T6752] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.197607][ T6752] batman_adv: batadv0: Removing interface: batadv_slave_0
[   57.201150][ T6771] loop0: detected capacity change from 0 to 65
[   57.303583][ T6752] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   57.306060][ T6752] batman_adv: batadv0: Removing interface: batadv_slave_1
[   57.350662][ T6771] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway
[   58.627656][ T6773] tipc: Started in network mode
[   58.627732][ T6773] tipc: Node identity 928cdc86981, cluster identity 4711
[   58.627920][ T6773] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.656359][ T6775] syzkaller0: entered promiscuous mode
[   58.656436][ T6775] syzkaller0: entered allmulticast mode
[   59.190852][ T6769] tipc: Resetting bearer <eth:syzkaller0>
[   59.194087][ T6769] loop3: detected capacity change from 0 to 16
[   59.219935][ T6769] erofs (device loop3): mounted with root inode @ nid 36.
[   59.715045][ T6767] tipc: Resetting bearer <eth:syzkaller0>
[   59.796922][ T6767] tipc: Disabling bearer <eth:syzkaller0>
[   59.852834][ T6592] tipc: Node number set to 178052230
[   60.658068][ T6805] binder: BINDER_SET_CONTEXT_MGR already set
[   60.658165][ T6805] binder: 6799:6805 ioctl 4018620d 20000040 returned -16
[   60.658640][ T6805] binder: 6799:6805 got transaction to invalid handle, 1
[   60.658750][ T6805] binder: 6805:6799 cannot find target node
[   60.658794][ T6805] binder: 6799:6805 transaction async to 0:0 failed 3/29201/-22, code 0 size 88-24 line 3152
[   60.659513][ T6805] usb usb8: usbfs: process 6805 (syz.0.37) did not claim interface 0 before use
[   60.864059][   T10] binder: undelivered TRANSACTION_ERROR: 29201
[   60.935659][ T6809] loop4: detected capacity change from 0 to 256
[   60.937056][ T6809] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   61.091040][ T6812] loop3: detected capacity change from 0 to 1024
[   61.180559][ T6812] EXT4-fs: Ignoring removed nobh option
[   61.213114][ T6812] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869)
[   61.213287][ T6812] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   61.213342][ T6812] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal
[   61.424480][ T6817] loop2: detected capacity change from 0 to 256
[   62.142893][ T6817] exfat: Deprecated parameter 'namecase'
[   62.172367][ T6817] exfat: Deprecated parameter 'namecase'
[   62.211958][ T6817] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[   64.132010][ T6834] loop3: detected capacity change from 0 to 1024
[   64.132831][ T6834] EXT4-fs: Ignoring removed oldalloc option
[   64.132906][ T6834] EXT4-fs: Ignoring removed bh option
[   64.494625][ T2409] ieee802154 phy0 wpan0: encryption failed: -22
[   64.986712][ T6846] loop1: detected capacity change from 0 to 4096
[   65.079663][ T6853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   65.079976][ T6853] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   65.417038][ T6834] EXT4-fs: error -4 creating inode table initialization thread
[   65.417401][ T6834] EXT4-fs (loop3): mount failed
[   65.564015][ T6854] loop2: detected capacity change from 0 to 32768
[   65.619106][ T6854] JBD2: Ignoring recovery information on journal
[   65.709849][ T6854] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   65.739387][ T6854] (syz.2.53,6854,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=0, inode=51539607617, rec_len=0, name_len=0
[   65.745332][ T6854] (syz.2.53,6854,1):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -2
[   65.748776][ T6854] (syz.2.53,6854,1):ocfs2_mknod:298 ERROR: status = -2
[   65.748841][ T6854] (syz.2.53,6854,1):ocfs2_mknod:502 ERROR: status = -2
[   65.748873][ T6854] (syz.2.53,6854,1):ocfs2_create:675 ERROR: status = -2
[   65.777541][ T6869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   65.777854][ T6869] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   65.841475][ T6537] ocfs2: Unmounting device (7,2) on (node local)
[   66.263112][ T6865] loop0: detected capacity change from 0 to 40427
[   66.267740][ T6872] loop4: detected capacity change from 0 to 32768
[   66.268564][ T6865] F2FS-fs (loop0): build fault injection rate: 14
[   66.268638][ T6865] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[   66.278469][ T6865] F2FS-fs (loop0): invalid crc value
[   66.280073][    C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of bio_endio+0x804/0x840
[   66.283885][    C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of bio_endio+0x804/0x840
[   66.361919][ T6865] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x148/0x4a8
[   66.377961][ T6865] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   66.398106][ T6880] loop2: detected capacity change from 0 to 40427
[   66.417474][ T6865] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x19c/0x9ac
[   66.427901][ T6865] F2FS-fs (loop0): inject dquot initialize in f2fs_dquot_initialize of __f2fs_tmpfile+0x88/0x350
[   66.460679][ T6889] netlink: 68 bytes leftover after parsing attributes in process `syz.1.62'.
[   66.492428][ T6891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   66.493555][ T6891] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   66.497669][ T6865] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x19c/0x9ac
[   66.516156][ T6865] F2FS-fs (loop0): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x3e8/0xd78
[   66.654182][ T6532] syz-executor: attempt to access beyond end of device
[   66.654182][ T6532] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[   66.654879][ T6532] CPU: 0 UID: 0 PID: 6532 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT 
[   66.654910][ T6532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   66.654918][ T6532] Call trace:
[   66.654922][ T6532]  show_stack+0x2c/0x3c (C)
[   66.654941][ T6532]  __dump_stack+0x30/0x40
[   66.654956][ T6532]  dump_stack_lvl+0xd8/0x12c
[   66.654969][ T6532]  dump_stack+0x1c/0x28
[   66.654981][ T6532]  f2fs_handle_critical_error+0x34c/0x4b8
[   66.655006][ T6532]  f2fs_stop_checkpoint+0x5c/0x70
[   66.655019][ T6532]  f2fs_write_end_io+0x58c/0x818
[   66.655032][ T6532]  bio_endio+0x804/0x840
[   66.655043][ T6532]  submit_bio_noacct+0x158/0x176c
[   66.655056][ T6532]  submit_bio+0x354/0x4d4
[   66.655069][ T6532]  f2fs_submit_write_bio+0x13c/0x324
[   66.655080][ T6532]  __submit_merged_bio+0x254/0x704
[   66.655091][ T6532]  __submit_merged_write_cond+0x23c/0x4ac
[   66.655102][ T6532]  f2fs_write_data_pages+0x1d28/0x2634
[   66.655114][ T6532]  do_writepages+0x270/0x468
[   66.655128][ T6532]  filemap_fdatawrite+0x144/0x1e8
[   66.655138][ T6532]  f2fs_sync_dirty_inodes+0x2b8/0x788
[   66.655152][ T6532]  f2fs_write_checkpoint+0x684/0x1694
[   66.655165][ T6532]  kill_f2fs_super+0x21c/0x584
[   66.655176][ T6532]  deactivate_locked_super+0xc4/0x12c
[   66.655188][ T6532]  deactivate_super+0xe0/0x100
[   66.655198][ T6532]  cleanup_mnt+0x31c/0x3ac
[   66.655210][ T6532]  __cleanup_mnt+0x20/0x30
[   66.655220][ T6532]  task_work_run+0x1dc/0x260
[   66.655232][ T6532]  do_notify_resume+0x174/0x1f4
[   66.655244][ T6532]  el0_svc+0xb8/0x180
[   66.655256][ T6532]  el0t_64_sync_handler+0x84/0x12c
[   66.655267][ T6532]  el0t_64_sync+0x198/0x19c
[   66.657773][ T6532] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   66.657955][ T6532] CPU: 0 UID: 0 PID: 6532 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT 
[   66.657975][ T6532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   66.657995][ T6532] Call trace:
[   66.658000][ T6532]  show_stack+0x2c/0x3c (C)
[   66.658019][ T6532]  __dump_stack+0x30/0x40
[   66.658033][ T6532]  dump_stack_lvl+0xd8/0x12c
[   66.658046][ T6532]  dump_stack+0x1c/0x28
[   66.658058][ T6532]  f2fs_handle_critical_error+0x34c/0x4b8
[   66.658072][ T6532]  f2fs_stop_checkpoint+0x5c/0x70
[   66.658085][ T6532]  f2fs_write_end_io+0x58c/0x818
[   66.658098][ T6532]  bio_endio+0x804/0x840
[   66.658109][ T6532]  submit_bio_noacct+0x158/0x176c
[   66.658122][ T6532]  submit_bio+0x354/0x4d4
[   66.658134][ T6532]  f2fs_submit_write_bio+0x13c/0x324
[   66.658145][ T6532]  __submit_merged_bio+0x254/0x704
[   66.658156][ T6532]  __submit_merged_write_cond+0x23c/0x4ac
[   66.658168][ T6532]  f2fs_write_data_pages+0x1d28/0x2634
[   66.658179][ T6532]  do_writepages+0x270/0x468
[   66.658194][ T6532]  filemap_fdatawrite+0x144/0x1e8
[   66.658204][ T6532]  f2fs_sync_dirty_inodes+0x2b8/0x788
[   66.658218][ T6532]  f2fs_write_checkpoint+0x684/0x1694
[   66.658232][ T6532]  kill_f2fs_super+0x21c/0x584
[   66.658243][ T6532]  deactivate_locked_super+0xc4/0x12c
[   66.658254][ T6532]  deactivate_super+0xe0/0x100
[   66.658264][ T6532]  cleanup_mnt+0x31c/0x3ac
[   66.658276][ T6532]  __cleanup_mnt+0x20/0x30
[   66.658287][ T6532]  task_work_run+0x1dc/0x260
[   66.658298][ T6532]  do_notify_resume+0x174/0x1f4
[   66.658310][ T6532]  el0_svc+0xb8/0x180
[   66.658321][ T6532]  el0t_64_sync_handler+0x84/0x12c
[   66.658344][ T6532]  el0t_64_sync+0x198/0x19c
[   66.658544][ T6532] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   66.725594][ T6880] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   67.386039][ T6537] syz-executor: attempt to access beyond end of device
[   67.386039][ T6537] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   67.386139][ T6537] CPU: 0 UID: 0 PID: 6537 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT 
[   67.386156][ T6537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   67.386163][ T6537] Call trace:
[   67.386167][ T6537]  show_stack+0x2c/0x3c (C)
[   67.386184][ T6537]  __dump_stack+0x30/0x40
[   67.386199][ T6537]  dump_stack_lvl+0xd8/0x12c
[   67.386212][ T6537]  dump_stack+0x1c/0x28
[   67.386225][ T6537]  f2fs_handle_critical_error+0x34c/0x4b8
[   67.386238][ T6537]  f2fs_stop_checkpoint+0x5c/0x70
[   67.386251][ T6537]  f2fs_write_end_io+0x58c/0x818
[   67.386263][ T6537]  bio_endio+0x804/0x840
[   67.386275][ T6537]  submit_bio_noacct+0x158/0x176c
[   67.386290][ T6537]  submit_bio+0x354/0x4d4
[   67.386303][ T6537]  f2fs_submit_write_bio+0x13c/0x324
[   67.386314][ T6537]  __submit_merged_bio+0x254/0x704
[   67.386325][ T6537]  __submit_merged_write_cond+0x23c/0x4ac
[   67.386339][ T6537]  f2fs_write_data_pages+0x1d28/0x2634
[   67.386351][ T6537]  do_writepages+0x270/0x468
[   67.386365][ T6537]  filemap_fdatawrite+0x144/0x1e8
[   67.386375][ T6537]  f2fs_sync_dirty_inodes+0x2b8/0x788
[   67.386388][ T6537]  f2fs_write_checkpoint+0x684/0x1694
[   67.386402][ T6537]  kill_f2fs_super+0x21c/0x584
[   67.386414][ T6537]  deactivate_locked_super+0xc4/0x12c
[   67.386425][ T6537]  deactivate_super+0xe0/0x100
[   67.386435][ T6537]  cleanup_mnt+0x31c/0x3ac
[   67.386446][ T6537]  __cleanup_mnt+0x20/0x30
[   67.386457][ T6537]  task_work_run+0x1dc/0x260
[   67.386468][ T6537]  do_notify_resume+0x174/0x1f4
[   67.386480][ T6537]  el0_svc+0xb8/0x180
[   67.386492][ T6537]  el0t_64_sync_handler+0x84/0x12c
[   67.386502][ T6537]  el0t_64_sync+0x198/0x19c
[   67.391060][ T6537] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   67.418979][ T6902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   67.419307][ T6902] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   67.987138][ T6912] loop4: detected capacity change from 0 to 16
[   68.090363][ T6912] erofs (device loop4): mounted with root inode @ nid 36.
[   68.351132][ T6912] erofs (device loop4): readahead error at folio 87 @ nid 36
[   68.351332][ T6912] erofs (device loop4): readahead error at folio 86 @ nid 36
[   68.352221][ T6912] erofs (device loop4): bogus lookback distance 363 @ lcn 82 of nid 36
[   68.352322][ T6912] erofs (device loop4): readahead error at folio 83 @ nid 36
[   68.352436][ T6912] erofs (device loop4): bogus lookback distance 363 @ lcn 82 of nid 36
[   68.352527][ T6912] erofs (device loop4): readahead error at folio 82 @ nid 36
[   68.353285][ T6912] erofs (device loop4): readahead error at folio 79 @ nid 36
[   68.353383][ T6912] erofs (device loop4): readahead error at folio 78 @ nid 36
[   68.353780][ T6912] erofs (device loop4): bogus lookback distance 1485 @ lcn 75 of nid 36
[   68.353871][ T6912] erofs (device loop4): readahead error at folio 76 @ nid 36
[   68.353963][ T6912] erofs (device loop4): bogus lookback distance 1485 @ lcn 75 of nid 36
[   68.354070][ T6912] erofs (device loop4): readahead error at folio 75 @ nid 36
[   68.354404][ T6912] erofs (device loop4): readahead error at folio 74 @ nid 36
[   68.354778][ T6912] erofs (device loop4): readahead error at folio 72 @ nid 36
[   68.354871][ T6912] erofs (device loop4): readahead error at folio 71 @ nid 36
[   68.355131][ T6912] erofs (device loop4): readahead error at folio 70 @ nid 36
[   68.356713][ T6912] erofs (device loop4): readahead error at folio 63 @ nid 36
[   68.357219][ T6912] erofs (device loop4): readahead error at folio 61 @ nid 36
[   68.357571][ T6912] erofs (device loop4): bogus lookback distance 1024 @ lcn 58 of nid 36
[   68.357663][ T6912] erofs (device loop4): readahead error at folio 59 @ nid 36
[   68.357755][ T6912] erofs (device loop4): bogus lookback distance 1024 @ lcn 58 of nid 36
[   68.357845][ T6912] erofs (device loop4): readahead error at folio 58 @ nid 36
[   68.358236][ T6912] erofs (device loop4): readahead error at folio 56 @ nid 36
[   68.359626][ T6912] erofs (device loop4): bogus lookback distance 1586 @ lcn 46 of nid 36
[   68.359726][ T6912] erofs (device loop4): readahead error at folio 47 @ nid 36
[   68.359818][ T6912] erofs (device loop4): bogus lookback distance 1586 @ lcn 46 of nid 36
[   68.359907][ T6912] erofs (device loop4): readahead error at folio 46 @ nid 36
[   68.360144][ T6912] erofs (device loop4): readahead error at folio 45 @ nid 36
[   68.360469][ T6912] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36
[   68.360558][ T6912] erofs (device loop4): readahead error at folio 43 @ nid 36
[   68.360650][ T6912] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36
[   68.360745][ T6912] erofs (device loop4): readahead error at folio 42 @ nid 36
[   68.360949][ T6912] erofs (device loop4): bogus lookback distance 774 @ lcn 40 of nid 36
[   68.361048][ T6912] erofs (device loop4): readahead error at folio 41 @ nid 36
[   68.361139][ T6912] erofs (device loop4): bogus lookback distance 774 @ lcn 40 of nid 36
[   68.361228][ T6912] erofs (device loop4): readahead error at folio 40 @ nid 36
[   68.361437][ T6912] erofs (device loop4): readahead error at folio 39 @ nid 36
[   68.361534][ T6912] erofs (device loop4): readahead error at folio 38 @ nid 36
[   68.362604][ T6912] erofs (device loop4): readahead error at folio 36 @ nid 36
[   68.363972][ T6912] erofs (device loop4): bogus lookback distance 1468 @ lcn 31 of nid 36
[   68.364092][ T6912] erofs (device loop4): readahead error at folio 31 @ nid 36
[   68.365378][ T6912] erofs (device loop4): readahead error at folio 25 @ nid 36
[   68.365630][ T6912] erofs (device loop4): readahead error at folio 24 @ nid 36
[   68.366652][ T6912] erofs (device loop4): readahead error at folio 19 @ nid 36
[   68.368856][ T6912] syz.4.69: attempt to access beyond end of device
[   68.368856][ T6912] loop4: rw=524288, sector=784, nr_sectors = 64 limit=16
[   68.369900][ T6912] syz.4.69: attempt to access beyond end of device
[   68.369900][ T6912] loop4: rw=524288, sector=13478624080, nr_sectors = 24 limit=16
[   68.370921][ T6912] syz.4.69: attempt to access beyond end of device
[   68.370921][ T6912] loop4: rw=524288, sector=13478624032, nr_sectors = 48 limit=16
[   68.371918][ T6912] syz.4.69: attempt to access beyond end of device
[   68.371918][ T6912] loop4: rw=524288, sector=32, nr_sectors = 64 limit=16
[   68.372676][ T6912] syz.4.69: attempt to access beyond end of device
[   68.372676][ T6912] loop4: rw=524288, sector=8, nr_sectors = 24 limit=16
[   68.373687][ T6912] syz.4.69: attempt to access beyond end of device
[   68.373687][ T6912] loop4: rw=524288, sector=14425508768, nr_sectors = 8 limit=16
[   68.626333][ T6915] netlink: 'syz.1.73': attribute type 12 has an invalid length.
[   68.704757][ T6917] tipc: Started in network mode
[   68.707006][ T6917] tipc: Node identity , cluster identity 4711
[   68.709018][ T6917] tipc: Failed to obtain node identity
[   68.710736][ T6917] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   68.714586][ T6917] syzkaller0: entered promiscuous mode
[   68.716500][ T6917] syzkaller0: entered allmulticast mode
[   68.854395][ T6925] loop2: detected capacity change from 0 to 128
[   68.857423][ T6925] EXT4-fs: Ignoring removed nobh option
[   68.898188][ T6925] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   69.638296][ T3923] cfg80211: failed to load regulatory.db
[   69.956095][ T6537] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   70.850754][ T6942] loop1: detected capacity change from 0 to 2048
[   70.939060][ T6951] process 'syz.4.83' launched '/dev/fd/4' with NULL argv: empty string added
[   71.152562][ T3923] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   71.206432][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.86'.
[   71.304787][ T3923] usb 1-1: Using ep0 maxpacket: 16
[   71.317573][ T3923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.317683][ T3923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   71.317719][ T3923] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   71.317764][ T3923] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   71.317795][ T3923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.352411][ T3923] usb 1-1: config 0 descriptor??
[   71.522590][ T6965] loop2: detected capacity change from 0 to 1024
[   71.557000][ T6965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.591899][ T6949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   71.594039][ T6949] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   72.488273][ T3923] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   72.502413][ T3923] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   72.503035][ T3923] microsoft 0003:045E:07DA.0001: reserved main item tag 0xe
[   72.503082][ T3923] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   72.503115][ T3923] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   72.503146][ T3923] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   72.525553][ T3923] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0001/input/input2
[   72.825437][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   72.842251][   T10] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   73.725029][ T3923] microsoft 0003:045E:07DA.0001: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[   73.777048][ T7001] loop1: detected capacity change from 0 to 16
[   73.783190][ T7001] erofs (device loop1): mounted with root inode @ nid 36.
[   74.135269][ T6999] fido_id[6999]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   74.431920][ T6531] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   74.436200][ T6531] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   74.442358][ T6531] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   74.446475][ T6531] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   74.449526][ T6531] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   74.477785][  T740] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.521290][ T3923] usb 1-1: USB disconnect, device number 2
[   75.377628][  T740] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.506889][ T6605] hid-generic 0000:0000:0000.0003: item fetching failed at offset 0/1
[   75.509869][ T6605] hid-generic 0000:0000:0000.0003: probe with driver hid-generic failed with error -22
[   75.555641][  T740] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.755782][  T740] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.928835][ T7041] binder: 7040:7041 tried to acquire reference to desc 0, got 1 instead
[   75.931953][ T7041] binder: 7040:7041 unknown command 0
[   75.936122][ T7041] binder: 7040:7041 ioctl c0306201 200003c0 returned -22
[   75.943065][ T7041] binder: 7040:7041 got transaction with invalid handle, 5
[   75.945530][ T7041] binder: 7041:7040 translate handle failed
[   75.947893][ T7041] binder: 7040:7041 transaction call to 7040:0 failed 8/29201/-22, code 0 size 96-24 line 3499
[   75.956787][ T6539] binder: undelivered TRANSACTION_ERROR: 29201
[   76.492177][ T6531] Bluetooth: hci4: command tx timeout
[   77.259203][ T7076] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   77.320338][ T7077] Zero length message leads to an empty skb
[   78.225210][  T740] bond0 (unregistering): Released all slaves
[   78.234974][ T7015] chnl_net:caif_netlink_parms(): no params data found
[   78.277245][ T7063] team_slave_0: entered promiscuous mode
[   78.277556][ T7063] team_slave_1: entered promiscuous mode
[   78.286941][ T7063] vlan2: entered promiscuous mode
[   78.287033][ T7063] team0: entered promiscuous mode
[   78.404433][ T7080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   78.404728][ T7080] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   78.460937][  T740] tipc: Disabling bearer <udp:s>
[   78.469331][  T740] tipc: Left network mode
[   78.572953][ T6531] Bluetooth: hci4: command tx timeout
[   78.809136][ T7015] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.811077][ T7015] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.811272][ T7015] bridge_slave_0: entered allmulticast mode
[   78.813725][ T7015] bridge_slave_0: entered promiscuous mode
[   78.818042][ T7015] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.818178][ T7015] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.818328][ T7015] bridge_slave_1: entered allmulticast mode
[   78.819773][ T7015] bridge_slave_1: entered promiscuous mode
[   78.907494][ T7104] No source specified
[   79.681755][ T7015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.686318][ T7015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.713369][ T7015] team0: Port device team_slave_0 added
[   79.749001][ T7110] netlink: 104 bytes leftover after parsing attributes in process `syz.4.125'.
[   79.776058][  T740] hsr_slave_0: left promiscuous mode
[   79.778044][  T740] hsr_slave_1: left promiscuous mode
[   79.796469][  T740] veth1_macvtap: left promiscuous mode
[   79.798383][  T740] veth0_macvtap: left promiscuous mode
[   79.800344][  T740] veth1_vlan: left promiscuous mode
[   79.802369][  T740] veth0_vlan: left promiscuous mode
[   80.264316][ T7128] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   80.663228][ T6531] Bluetooth: hci4: command tx timeout
[   81.268116][ T6539] libceph: connect (1)[c::]:6789 error -101
[   81.270365][ T6539] libceph: mon0 (1)[c::]:6789 connect error
[   82.082403][ T6539] libceph: connect (1)[c::]:6789 error -101
[   82.084887][ T6539] libceph: mon0 (1)[c::]:6789 connect error
[   82.117619][ T7136] ceph: No mds server is up or the cluster is laggy
[   82.408217][ T7145] trusted_key: syz.4.137 sent an empty control message without MSG_MORE.
[   82.732199][ T6531] Bluetooth: hci4: command tx timeout
[   83.168695][ T7150] loop3: detected capacity change from 0 to 32768
[   83.170088][ T7150] XFS: attr2 mount option is deprecated.
[   83.187902][ T7150] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   83.240072][ T7150] XFS (loop3): Ending clean mount
[   83.250190][ T7150] XFS (loop3): Quotacheck needed: Please wait.
[   83.307730][ T7150] XFS (loop3): Quotacheck: Done.
[   83.335766][ T6538] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   83.489646][ T7160] loop3: detected capacity change from 0 to 2048
[   83.499909][ T7160] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=3932051, location=3932051
[   83.511211][ T7160] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   83.988458][   T26] IPVS: starting estimator thread 0...
[   84.074069][ T7170] IPVS: using max 33 ests per chain, 79200 per kthread
[   85.070866][ T7179] loop3: detected capacity change from 0 to 4096
[   85.077404][ T7179] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[   85.084426][ T7179] ntfs3(loop3): mft corrupted
[   85.086270][ T7179] ntfs3(loop3): Failed to load $MFT.
[   85.142230][ T7181] Driver unsupported XDP return value 0 on prog  (id 6) dev N/A, expect packet loss!
[   86.917753][ T7015] team0: Port device team_slave_1 added
[   86.919765][ T7126] netlink: 'syz.0.132': attribute type 1 has an invalid length.
[   87.083165][ T7015] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.083242][ T7015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.089396][ T7015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.091809][ T7015] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.091844][ T7015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.091892][ T7015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.246864][ T7015] hsr_slave_0: entered promiscuous mode
[   87.249305][ T7015] hsr_slave_1: entered promiscuous mode
[   87.251886][ T7015] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.255519][ T7015] Cannot create hsr debugfs directory
[   87.291435][    T9] IPVS: starting estimator thread 0...
[   87.373376][ T7199] IPVS: using max 34 ests per chain, 81600 per kthread
[   87.488545][ T7015] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   87.496983][ T7015] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   87.497370][  T740] IPVS: stop unused estimator thread 0...
[   87.504814][ T7015] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   87.509401][ T7015] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   87.610683][ T7015] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.633737][ T7015] 8021q: adding VLAN 0 to HW filter on device team0
[   87.641722][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.641816][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.656016][  T663] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.656132][  T663] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.729077][ T7015] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   87.879944][ T7015] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.728348][ T7015] veth0_vlan: entered promiscuous mode
[   89.014311][ T7015] veth1_vlan: entered promiscuous mode
[   89.091136][ T7015] veth0_macvtap: entered promiscuous mode
[   89.104201][ T7015] veth1_macvtap: entered promiscuous mode
[   89.157584][ T7015] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.181869][ T7015] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.197248][ T7015] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.201504][ T7015] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.204649][ T7015] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.207150][ T7015] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.229501][ T7235] loop3: detected capacity change from 0 to 32768
[   89.273321][ T7235] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   89.345672][ T7235] XFS (loop3): Ending clean mount
[   89.358285][ T7235] XFS (loop3): Quotacheck needed: Please wait.
[   89.390577][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.393209][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.443456][ T7235] XFS (loop3): Quotacheck: Done.
[   89.514453][ T7258] loop0: detected capacity change from 0 to 40427
[   89.544560][ T2157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.544623][ T2157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.556140][ T6538] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   89.691492][ T7258] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   89.699674][ T7282] loop3: detected capacity change from 0 to 512
[   89.753716][ T7282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.819596][ T7282] EXT4-fs: Ignoring removed orlov option
[   89.819725][ T7282] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   89.850060][ T7258] syz.0.156: attempt to access beyond end of device
[   89.850060][ T7258] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   89.877102][ T7282] EXT4-fs (loop3): can't enable nombcache during remount
[   90.070982][ T7294] loop4: detected capacity change from 0 to 40427
[   90.075259][ T7294] F2FS-fs (loop4): invalid crc value
[   90.089426][ T6532] syz-executor: attempt to access beyond end of device
[   90.089426][ T6532] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[   90.089540][ T6532] CPU: 1 UID: 0 PID: 6532 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT 
[   90.089557][ T6532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   90.089564][ T6532] Call trace:
[   90.089569][ T6532]  show_stack+0x2c/0x3c (C)
[   90.089586][ T6532]  __dump_stack+0x30/0x40
[   90.089601][ T6532]  dump_stack_lvl+0xd8/0x12c
[   90.089614][ T6532]  dump_stack+0x1c/0x28
[   90.089627][ T6532]  f2fs_handle_critical_error+0x34c/0x4b8
[   90.089640][ T6532]  f2fs_stop_checkpoint+0x5c/0x70
[   90.089654][ T6532]  f2fs_write_end_io+0x58c/0x818
[   90.089666][ T6532]  bio_endio+0x804/0x840
[   90.089680][ T6532]  submit_bio_noacct+0x158/0x176c
[   90.089694][ T6532]  submit_bio+0x354/0x4d4
[   90.089707][ T6532]  f2fs_submit_write_bio+0x13c/0x324
[   90.089718][ T6532]  __submit_merged_bio+0x254/0x704
[   90.089730][ T6532]  __submit_merged_write_cond+0x23c/0x4ac
[   90.089741][ T6532]  f2fs_write_data_pages+0x1d28/0x2634
[   90.089753][ T6532]  do_writepages+0x270/0x468
[   90.089767][ T6532]  filemap_fdatawrite+0x144/0x1e8
[   90.089778][ T6532]  f2fs_sync_dirty_inodes+0x2b8/0x788
[   90.089792][ T6532]  f2fs_write_checkpoint+0x684/0x1694
[   90.089806][ T6532]  kill_f2fs_super+0x21c/0x584
[   90.089818][ T6532]  deactivate_locked_super+0xc4/0x12c
[   90.089830][ T6532]  deactivate_super+0xe0/0x100
[   90.089840][ T6532]  cleanup_mnt+0x31c/0x3ac
[   90.089852][ T6532]  __cleanup_mnt+0x20/0x30
[   90.089863][ T6532]  task_work_run+0x1dc/0x260
[   90.089874][ T6532]  do_notify_resume+0x174/0x1f4
[   90.089886][ T6532]  el0_svc+0xb8/0x180
[   90.089898][ T6532]  el0t_64_sync_handler+0x84/0x12c
[   90.089910][ T6532]  el0t_64_sync+0x198/0x19c
[   90.238478][ T7294] F2FS-fs (loop4): Start checkpoint disabled!
[   90.274847][ T6532] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   90.517858][ T7294] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[   90.756108][ T6538] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.005131][ T7312] loop5: detected capacity change from 0 to 8
[   91.087167][ T7312] SQUASHFS error: lzo decompression failed, data probably corrupt
[   91.087299][ T7312] SQUASHFS error: Failed to read block 0x28d: -5
[   91.087321][ T7312] SQUASHFS error: Unable to read metadata cache entry [28b]
[   91.087341][ T7312] SQUASHFS error: Unable to read inode 0x11f
[   91.506947][  T663] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   91.608854][ T7346] netlink: 28 bytes leftover after parsing attributes in process `syz.4.177'.
[   91.608936][ T7346] netlink: 28 bytes leftover after parsing attributes in process `syz.4.177'.
[   91.646686][   T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   91.651108][   T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   91.654218][   T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   91.657138][   T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   91.661716][   T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   91.782895][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.179'.
[   92.000375][ T7344] loop5: detected capacity change from 0 to 32768
[   92.108133][ T7344] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   92.959124][ T7344] XFS (loop5): Ending clean mount
[   92.960531][ T7344] XFS (loop5): Quotacheck needed: Please wait.
[   93.021199][ T7347] chnl_net:caif_netlink_parms(): no params data found
[   93.053412][ T7344] XFS (loop5): Quotacheck: Done.
[   93.693219][   T52] Bluetooth: hci5: command tx timeout
[   93.867026][ T7393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.875649][ T7393] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.524833][ T7015] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   94.565682][ T7347] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.567964][ T7347] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.570528][ T7347] bridge_slave_0: entered allmulticast mode
[   94.579751][ T7347] bridge_slave_0: entered promiscuous mode
[   94.585931][ T7347] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.588229][ T7347] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.590540][ T7347] bridge_slave_1: entered allmulticast mode
[   94.595961][ T7347] bridge_slave_1: entered promiscuous mode
[   94.662561][ T7347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.691506][ T7347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.880245][ T7347] team0: Port device team_slave_0 added
[   95.021439][ T7410] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   95.027145][ T7410] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.028189][ T7410] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.487193][ T7347] team0: Port device team_slave_1 added
[   95.629942][   T31] audit: type=1326 audit(95.610:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7413 comm="syz.4.195" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b15ce28 code=0x0
[   95.667954][ T7347] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.668030][ T7347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.668105][ T7347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.669307][ T7347] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.669350][ T7347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.669417][ T7347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.773836][   T52] Bluetooth: hci5: command 0x041b tx timeout
[   95.864112][ T7347] hsr_slave_0: entered promiscuous mode
[   95.864749][ T7347] hsr_slave_1: entered promiscuous mode
[   95.871512][ T7347] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   95.871550][ T7347] Cannot create hsr debugfs directory
[   96.898091][ T7445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   96.898438][ T7445] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   96.939241][ T7447] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   96.974528][ T7447] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   97.086231][ T7347] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   97.097975][ T7347] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   97.168116][ T7347] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   97.185310][ T7347] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   97.398385][ T7347] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.440493][ T7347] 8021q: adding VLAN 0 to HW filter on device team0
[   97.453075][ T2118] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.453164][ T2118] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.454099][ T2118] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.454143][ T2118] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.852518][ T6531] Bluetooth: hci5: command 0x041b tx timeout
[   98.268743][ T7347] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.325319][ T7451] loop4: detected capacity change from 0 to 32768
[   98.422359][ T7451] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   99.211642][ T7451] XFS (loop4): Ending clean mount
[   99.411610][ T7512] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   99.440258][ T6535] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   99.862174][ T7523] loop5: detected capacity change from 0 to 512
[   99.869747][ T7523] EXT4-fs: Ignoring removed bh option
[   99.897866][ T7523] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   99.898097][ T7523] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[   99.898198][ T7523] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[   99.932256][ T6531] Bluetooth: hci5: command 0x041b tx timeout
[   99.990002][ T7523] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[   99.996362][ T7523] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  100.029402][ T7523] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.497413][ T7015] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.509110][ T7533] bridge0: entered promiscuous mode
[  100.509889][ T7533] bond0: entered promiscuous mode
[  100.509919][ T7533] bond_slave_0: entered promiscuous mode
[  100.510040][ T7533] bond_slave_1: entered promiscuous mode
[  100.511414][ T7533] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network
[  100.550162][ T7533] hsr1: entered allmulticast mode
[  100.550631][ T7533] bridge0: entered allmulticast mode
[  100.550890][ T7533] bond0: entered allmulticast mode
[  100.551105][ T7533] bond_slave_0: entered allmulticast mode
[  100.551176][ T7533] bond_slave_1: entered allmulticast mode
[  100.952244][ T7539] bridge0: port 3(team0) entered blocking state
[  100.952346][ T7539] bridge0: port 3(team0) entered disabled state
[  100.952574][ T7539] team0: entered allmulticast mode
[  100.952610][ T7539] team_slave_0: entered allmulticast mode
[  100.952642][ T7539] team_slave_1: entered allmulticast mode
[  100.953924][ T7539] team0: entered promiscuous mode
[  100.953976][ T7539] team_slave_0: entered promiscuous mode
[  100.954254][ T7539] team_slave_1: entered promiscuous mode
[  100.954724][ T7539] bridge0: port 3(team0) entered blocking state
[  100.955760][ T7539] bridge0: port 3(team0) entered forwarding state
[  101.319673][ T7347] veth0_vlan: entered promiscuous mode
[  101.326657][ T7347] veth1_vlan: entered promiscuous mode
[  101.513956][ T7347] veth0_macvtap: entered promiscuous mode
[  101.516050][ T7347] veth1_macvtap: entered promiscuous mode
[  101.528529][ T7347] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.530560][ T7347] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.589784][ T7347] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.622529][ T7347] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.622601][ T7347] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.622638][ T7347] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.012647][ T6531] Bluetooth: hci5: command 0x041b tx timeout
[  102.538390][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.538462][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.651283][ T7563] loop4: detected capacity change from 0 to 4096
[  102.678647][ T2118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.678709][ T2118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.725882][ T7563] NILFS (loop4): invalid segment: Checksum error in segment payload
[  102.729659][ T7563] NILFS (loop4): trying rollback from an earlier position
[  102.791531][ T7563] NILFS (loop4): recovery complete
[  102.801312][ T7568] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  103.875583][ T7587] netlink: 'syz.3.225': attribute type 2 has an invalid length.
[  103.875645][ T7587] netlink: 'syz.3.225': attribute type 1 has an invalid length.
[  104.806132][ T7597] loop5: detected capacity change from 0 to 16
[  104.823853][ T7597] erofs (device loop5): mounted with root inode @ nid 36.
[  106.663546][ T7619] loop6: detected capacity change from 0 to 512
[  106.664235][ T7619] EXT4-fs: Ignoring removed i_version option
[  106.704326][ T7619] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  106.865916][ T7619] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  106.874318][ T7619] EXT4-fs (loop6): 1 truncate cleaned up
[  106.875284][ T7619] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.104401][ T7625] loop3: detected capacity change from 0 to 4096
[  107.604430][ T7625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.771560][ T7347] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.868331][ T6538] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.947398][ T7636] loop5: detected capacity change from 0 to 4096
[  107.967777][ T7641] warning: `syz.6.236' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  107.998255][ T7636] ntfs3(loop5): mft corrupted
[  107.998381][ T7636] ntfs3(loop5): Failed to load $Volume (-22).
[  108.237407][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.5.238'.
[  109.023645][ T7672] tipc: Started in network mode
[  109.023715][ T7672] tipc: Node identity 66cf79258a54, cluster identity 4711
[  109.023812][ T7672] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.066702][ T7672] syzkaller0: entered promiscuous mode
[  109.066778][ T7672] syzkaller0: entered allmulticast mode
[  109.072588][ T7672] tipc: Resetting bearer <eth:syzkaller0>
[  109.094530][ T7671] tipc: Resetting bearer <eth:syzkaller0>
[  109.169851][ T7675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.170211][ T7675] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.249010][ T7681] loop5: detected capacity change from 0 to 1024
[  110.514408][   T26] tipc: Node number set to 3969612069
[  110.553226][ T2077] hfsplus: b-tree write err: -5, ino 4
[  111.649050][ T7710] loop5: detected capacity change from 0 to 512
[  111.686470][ T7710] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  111.891406][ T7710] EXT4-fs (loop5): 1 truncate cleaned up
[  111.896611][ T7710] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.924685][ T7693] loop6: detected capacity change from 0 to 262144
[  111.989158][ T7693] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  112.045140][ T7717] netlink: 24 bytes leftover after parsing attributes in process `syz.5.250'.
[  112.574156][ T7732] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709551615
[  114.358058][ T7743] loop6: detected capacity change from 0 to 1024
[  114.553112][ T7750] loop3: detected capacity change from 0 to 1024
[  114.561256][ T7750] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  114.580259][ T7750] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.723607][    T9] Process accounting resumed
[  115.738979][ T7761] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.767862][   T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  124.771742][   T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  124.779004][   T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  124.781394][   T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  124.782636][   T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  125.097230][ T7671] tipc: Disabling bearer <eth:syzkaller0>
[  125.230348][ T7812] loop4: detected capacity change from 0 to 1024
[  125.231076][ T7812] EXT4-fs: Ignoring removed bh option
[  125.354355][ T7015] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.358800][ T7812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.495751][ T6535] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.679626][ T7840] loop5: detected capacity change from 0 to 512
[  125.709146][ T7845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  125.709476][ T7845] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  125.759963][ T7840] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.934868][ T2409] ieee802154 phy0 wpan0: encryption failed: -22
[  126.319186][ T7855] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.293: corrupted inode contents
[  126.336701][ T7855] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #2: comm syz.5.293: mark_inode_dirty error
[  126.341358][ T7855] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.293: corrupted inode contents
[  126.348726][ T7855] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.293: mark_inode_dirty error
[  126.691181][ T7798] chnl_net:caif_netlink_parms(): no params data found
[  126.822447][   T52] Bluetooth: hci0: command tx timeout
[  126.861172][ T7015] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.181708][ T7878] loop5: detected capacity change from 0 to 32768
[  127.186220][ T7878] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.296 (7878)
[  127.323492][ T7878] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  127.323696][ T7878] BTRFS info (device loop5): using sha256 (sha256-arm64) checksum algorithm
[  127.323742][ T7878] BTRFS info (device loop5): using free-space-tree
[  127.345104][ T7798] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.345193][ T7798] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.345351][ T7798] bridge_slave_0: entered allmulticast mode
[  127.346294][ T7798] bridge_slave_0: entered promiscuous mode
[  127.347530][ T7798] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.347595][ T7798] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.347725][ T7798] bridge_slave_1: entered allmulticast mode
[  127.348634][ T7798] bridge_slave_1: entered promiscuous mode
[  128.202522][ T7798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  128.256712][ T7798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  128.310498][ T7015] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  128.409963][ T7798] team0: Port device team_slave_0 added
[  128.411902][ T7798] team0: Port device team_slave_1 added
[  128.963892][   T52] Bluetooth: hci0: command tx timeout
[  129.159882][ T7919] loop6: detected capacity change from 0 to 2048
[  129.229033][ T7919] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  129.274636][ T7919] syz.6.309: attempt to access beyond end of device
[  129.274636][ T7919] loop6: rw=0, sector=111568486480, nr_sectors = 2 limit=2048
[  129.280699][ T7919] NILFS (loop6): I/O error reading meta-data file (ino=4, block-offset=0)
[  129.281068][ T7919] NILFS (loop6): error -5 while loading last checkpoint (checkpoint number=2)
[  129.362629][ T7798] batman_adv: batadv0: Adding interface: batadv_slave_0
[  129.362695][ T7798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.362767][ T7798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  129.364084][ T7798] batman_adv: batadv0: Adding interface: batadv_slave_1
[  129.364128][ T7798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.364182][ T7798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  129.689052][ T7798] hsr_slave_0: entered promiscuous mode
[  129.705719][ T7798] hsr_slave_1: entered promiscuous mode
[  129.713685][ T7798] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  129.716105][ T7798] Cannot create hsr debugfs directory
[  130.953533][ T7963] netlink: 24 bytes leftover after parsing attributes in process `syz.5.318'.
[  130.969327][ T7965] netlink: 20 bytes leftover after parsing attributes in process `syz.4.319'.
[  130.976504][ T6531] Bluetooth: hci0: command tx timeout
[  131.010256][ T7798] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  131.035583][ T7961] overlayfs: missing 'workdir'
[  131.058967][ T7798] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  131.158145][ T7798] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  131.229269][ T7798] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  131.399330][ T7976] loop6: detected capacity change from 0 to 1764
[  131.587457][ T7798] 8021q: adding VLAN 0 to HW filter on device bond0
[  131.621561][ T7798] 8021q: adding VLAN 0 to HW filter on device team0
[  133.070753][ T2077] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.070849][ T2077] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.104225][ T2077] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.104322][ T2077] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.121455][ T7972] loop5: detected capacity change from 0 to 32768
[  133.142281][ T6531] Bluetooth: hci0: command tx timeout
[  133.164292][ T7972] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.320 (7972)
[  133.212396][ T7972] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  133.212495][ T7972] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  133.212560][ T7972] BTRFS info (device loop5): using free-space-tree
[  133.422303][ T8027] netlink: 20 bytes leftover after parsing attributes in process `syz.6.331'.
[  133.700826][ T7798] 8021q: adding VLAN 0 to HW filter on device batadv0
[  134.411626][ T7015] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  134.489560][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.336'.
[  134.491360][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.336'.
[  135.879035][ T7798] veth0_vlan: entered promiscuous mode
[  136.218438][ T7798] veth1_vlan: entered promiscuous mode
[  136.430617][ T7798] veth0_macvtap: entered promiscuous mode
[  136.494952][ T7798] veth1_macvtap: entered promiscuous mode
[  136.535013][ T7798] batman_adv: batadv0: Interface activated: batadv_slave_0
[  136.569203][ T7798] batman_adv: batadv0: Interface activated: batadv_slave_1
[  136.583115][ T7798] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.583198][ T7798] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.583229][ T7798] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.583258][ T7798] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.673306][ T8097] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  136.677236][ T8097] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  137.427506][ T8106] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.351'.
[  138.542144][  T341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.542212][  T341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.595459][ T8122] loop4: detected capacity change from 0 to 256
[  138.633263][  T250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.633328][  T250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.661064][ T8122] FAT-fs (loop4): Directory bread(block 64) failed
[  138.661157][ T8122] FAT-fs (loop4): Directory bread(block 65) failed
[  138.661220][ T8122] FAT-fs (loop4): Directory bread(block 66) failed
[  138.661252][ T8122] FAT-fs (loop4): Directory bread(block 67) failed
[  138.661303][ T8122] FAT-fs (loop4): Directory bread(block 68) failed
[  138.661334][ T8122] FAT-fs (loop4): Directory bread(block 69) failed
[  138.661381][ T8122] FAT-fs (loop4): Directory bread(block 70) failed
[  138.661412][ T8122] FAT-fs (loop4): Directory bread(block 71) failed
[  138.661460][ T8122] FAT-fs (loop4): Directory bread(block 72) failed
[  138.661490][ T8122] FAT-fs (loop4): Directory bread(block 73) failed
[  139.626744][ T8138] loop7: detected capacity change from 0 to 512
[  139.639063][ T8138] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  139.639126][ T8138] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem
[  139.661055][ T8138] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended
[  139.667730][ T8138] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  139.667829][ T8138] System zones: 0-2, 18-18, 34-35
[  139.671469][ T8138] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.779636][ T8155] 
[  139.780521][ T8155] =============================
[  139.781827][ T8155] WARNING: suspicious RCU usage
[  139.783338][ T8155] 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 Not tainted
[  139.785117][ T8155] -----------------------------
[  139.786356][ T8155] net/core/netclassid_cgroup.c:24 suspicious rcu_dereference_check() usage!
[  139.788844][ T8155] 
[  139.788844][ T8155] other info that might help us debug this:
[  139.788844][ T8155] 
[  139.791544][ T8155] 
[  139.791544][ T8155] rcu_scheduler_active = 2, debug_locks = 1
[  139.794083][ T8155] 1 lock held by syz.3.364/8155:
[  139.795564][ T8155]  #0: ffff80008f869b60 (rcu_read_lock_trace){....}-{0:0}, at: rcu_lock_acquire+0x18/0x54
[  139.798181][ T8155] 
[  139.798181][ T8155] stack backtrace:
[  139.799742][ T8155] CPU: 1 UID: 0 PID: 8155 Comm: syz.3.364 Not tainted 6.16.0-rc7-syzkaller-g82af5ea7c611 #0 PREEMPT 
[  139.802650][ T8155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  139.805443][ T8155] Call trace:
[  139.806343][ T8155]  show_stack+0x2c/0x3c (C)
[  139.807547][ T8155]  __dump_stack+0x30/0x40
[  139.808745][ T8155]  dump_stack_lvl+0xd8/0x12c
[  139.810081][ T8155]  dump_stack+0x1c/0x28
[  139.811217][ T8155]  lockdep_rcu_suspicious+0x168/0x274
[  139.812713][ T8155]  task_cls_state+0x1d0/0x1f0
[  139.813952][ T8155]  bpf_get_cgroup_classid_curr+0x1c/0x6c
[  139.815555][ T8155]  bpf_prog_cd2e46495e8fe8a5+0x4c/0x70
[  139.817096][ T8155]  bpf_prog_run_pin_on_cpu+0x70/0x1e8
[  139.818628][ T8155]  bpf_prog_test_run_syscall+0x2fc/0x4ac
[  139.820181][ T8155]  bpf_prog_test_run+0x2b4/0x33c
[  139.821535][ T8155]  __sys_bpf+0x4b0/0x614
[  139.822724][ T8155]  __arm64_sys_bpf+0x80/0x98
[  139.824036][ T8155]  invoke_syscall+0x98/0x2b8
[  139.825312][ T8155]  el0_svc_common+0x130/0x23c
[  139.826567][ T8155]  do_el0_svc+0x48/0x58
[  139.827711][ T8155]  el0_svc+0x58/0x180
[  139.828811][ T8155]  el0t_64_sync_handler+0x84/0x12c
[  139.830332][ T8155]  el0t_64_sync+0x198/0x19c
[  139.874052][ T7798] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.281672][ T8163] hub 6-0:1.0: USB hub found
[  140.285478][ T8163] hub 6-0:1.0: 8 ports detected