last executing test programs:

5m46.901163014s ago: executing program 2 (id=209):
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000380), 0x4)

5m46.545221074s ago: executing program 2 (id=212):
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
mknodat$loop(r0, &(0x7f0000000340)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
rename(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file1\x00')
syz_usb_connect(0x3, 0x24, 0x0, 0x0)

5m45.197101622s ago: executing program 2 (id=217):
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3008014, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f00000020c0)="$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")
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x1, 0x10, 0x0, 0x0, 0x1f, 0x5, "6bf125058e637b44e58c1c72a4c01c47e50a2793c042d4aea4dcf9c014d0e072a3f096bdbdce0ceb94cb576a5d539a0f68412e32c7881104f7a2a88bb4a033af", "563e7e5b61a321b296a4d858a1a07e3c87df2f85a1df2c809cda49a11ff76e906b13a0c26ef2f2b08d4dcaffbc3200f99d6f328ccecaf9ec49aa55fba663c523", "6dd01086736c1613ad1d72b5e9aa72a58f30d74d3a7893dcfc2d1e56229263b3", [0xa2, 0x3562]})

5m42.549752134s ago: executing program 2 (id=223):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$unix(0x1, 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
pread64(r1, &(0x7f0000000480)=""/154, 0x9a, 0xe4)

5m42.401682078s ago: executing program 0 (id=224):
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffff4f, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc048094)

5m39.549484921s ago: executing program 0 (id=231):
syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000280)='./file0\x00', 0x3000cc0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x11, 0x308, &(0x7f0000000400)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40)
open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe)

5m38.345661024s ago: executing program 0 (id=235):
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
creat(0x0, 0x14e)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xac901, 0x28)
write$tcp_congestion(r2, &(0x7f00000000c0)='lp\x00', 0xfffffdef)
dup2(r2, r0)

5m36.297574813s ago: executing program 2 (id=237):
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1a, 0x23, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000200000000000000070000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000a077b7030000000000008500000083000000bf09000000000000558ba600000000007f00000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000004007010000f8ffffffbfa400000000000007040000f8ffffffb7020000", @ANYRES32, @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
write$sndseq(0xffffffffffffffff, &(0x7f0000000300)=[{0x84, 0x77, 0x0, 0x0, @tick, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}], 0x1c)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

5m36.185612634s ago: executing program 0 (id=239):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r3, 0x400455c8, 0x0)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)

5m36.042980428s ago: executing program 2 (id=240):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000280)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r4, 0x0, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x200a017, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0)

5m31.323024695s ago: executing program 0 (id=248):
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$packet(r5, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14)
shutdown(r5, 0x1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x4044080)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
fchdir(0xffffffffffffffff)
r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$FS_IOC_GETFSUUID(r8, 0x80111500, &(0x7f00000001c0))

5m29.183215051s ago: executing program 0 (id=249):
syz_pidfd_open(0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x3, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0)
r11 = socket$packet(0x11, 0x3, 0x300)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc30000000000000000089"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f00000008c0)=r12, 0x4)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)={0xe0, 0x31, 0x107, 0x0, 0x25dfdbfc, {0x1, 0x7c}, [@generic="0d59a091aab0a7953625e228226fa29d1d6d1ce05949cc6266f03dcdaf477ad17ac1dca10576f20e6f2bfe83eabc1f1941d69296bec252c3743b1401962e7dc836d1b00baac6d9ba00c6c170cfec44cd5af470c80b28e38655ca32cd508f", @nested={0x6c, 0x116, 0x0, 0x1, [@nested={0x67, 0xe1, 0x0, 0x1, [@generic="a54421fdc3e45eca8d9a63e4c8e1b63c1e1f86d38a87d94745cf31a383596f9a3618f98c9d10e2f6e4166e85c081b54a3f98c8924edf648f7ffd9c916114372ae25c3ccb89cf091f0e1aafe43d9fa33e411c8e7e14de0648ba0b744427d6ca95990075"]}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x48001}, 0x44890)
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000)

5m20.330173542s ago: executing program 32 (id=240):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000280)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r4, 0x0, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x200a017, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0)

5m13.096045225s ago: executing program 33 (id=249):
syz_pidfd_open(0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x3, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0)
r11 = socket$packet(0x11, 0x3, 0x300)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f00000008c0)=r12, 0x4)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)={0xe0, 0x31, 0x107, 0x0, 0x25dfdbfc, {0x1, 0x7c}, [@generic="0d59a091aab0a7953625e228226fa29d1d6d1ce05949cc6266f03dcdaf477ad17ac1dca10576f20e6f2bfe83eabc1f1941d69296bec252c3743b1401962e7dc836d1b00baac6d9ba00c6c170cfec44cd5af470c80b28e38655ca32cd508f", @nested={0x6c, 0x116, 0x0, 0x1, [@nested={0x67, 0xe1, 0x0, 0x1, [@generic="a54421fdc3e45eca8d9a63e4c8e1b63c1e1f86d38a87d94745cf31a383596f9a3618f98c9d10e2f6e4166e85c081b54a3f98c8924edf648f7ffd9c916114372ae25c3ccb89cf091f0e1aafe43d9fa33e411c8e7e14de0648ba0b744427d6ca95990075"]}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x48001}, 0x44890)
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000)

45.407920607s ago: executing program 4 (id=899):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {0x0}], 0x2, 0x14, 0xc)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x4a2602, 0x0)
r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
prlimit64(0x0, 0x0, &(0x7f0000000240)={0xfffffffffffffff9, 0x1000189}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0xfffffe45, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmmsg(r3, &(0x7f0000023d40)=[{{&(0x7f0000000680)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000700)}, {0x0}, {&(0x7f00000008c0)=""/128, 0x80}, {&(0x7f0000000940)=""/11, 0xb}, {&(0x7f0000000980)=""/244, 0xf4}, {&(0x7f0000000a80)=""/247, 0xf7}], 0x6, &(0x7f0000000c00)=""/4096, 0x1000}, 0xfff}, {{&(0x7f0000001c00)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f000001f080)=[{&(0x7f0000001c80)=""/44, 0x2c}, {&(0x7f0000001cc0)=""/249, 0xf9}, {&(0x7f000001d040)=""/4096, 0x1000}, {&(0x7f000001e080)=""/4096, 0x1000}], 0x4, &(0x7f000001f100)=""/128, 0x80}, 0x901e}, {{0x0, 0x0, &(0x7f000001f280)=[{&(0x7f000001f180)=""/77, 0x4d}, {&(0x7f000001f200)=""/77, 0x4d}], 0x2, &(0x7f000001f2c0)=""/146, 0x92}, 0x656d}, {{&(0x7f000001f380)=@alg, 0x80, &(0x7f0000020680)=[{&(0x7f000001f400)=""/14, 0xe}, {&(0x7f000001f440)=""/4096, 0x1000}, {&(0x7f0000020440)=""/207, 0xcf}, {&(0x7f0000020540)=""/152, 0x98}, {&(0x7f0000020600)=""/113, 0x71}], 0x5, &(0x7f0000020700)=""/54, 0x36}, 0x6}, {{&(0x7f0000020740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000021e80)=[{&(0x7f00000207c0)=""/47, 0x2f}, {0x0}, {&(0x7f0000020900)=""/189, 0xbd}, {&(0x7f00000209c0)=""/228, 0xe4}, {&(0x7f0000020b40)=""/170, 0xaa}, {&(0x7f0000020c00)=""/4096, 0x1000}, {&(0x7f0000021c00)=""/76, 0x4c}, {&(0x7f0000021c80)=""/207, 0xcf}], 0x8}, 0x10001}, {{0x0, 0x0, &(0x7f0000022080)=[{0x0}], 0x1}, 0x3}, {{&(0x7f0000022140)=@hci, 0x80, &(0x7f0000022300)=[{&(0x7f00000221c0)=""/32, 0x20}, {&(0x7f0000022200)}, {&(0x7f0000022280)=""/86, 0x56}], 0x3, &(0x7f0000022380)=""/72, 0x48}, 0x5}, {{&(0x7f0000001dc0)=@qipcrtr, 0x80, &(0x7f0000022540)=[{&(0x7f0000001e40)=""/163, 0xa3}, {0x0}, {&(0x7f0000022200)=""/24, 0x18}], 0x3}, 0xfffff801}, {{0x0, 0x0, &(0x7f0000023b80)=[{&(0x7f0000022600)=""/240, 0xf0}, {&(0x7f0000022700)=""/74, 0x4a}, {&(0x7f0000022780)=""/22, 0x16}, {0x0}, {&(0x7f00000237c0)=""/202, 0xca}, {&(0x7f00000238c0)=""/122, 0x7a}, {&(0x7f0000023940)=""/171, 0xab}, {0x0}, {&(0x7f0000023b00)=""/111, 0x6f}], 0x9, &(0x7f0000023c40)=""/249, 0xf9}, 0x81}], 0x9, 0x12122, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000)
mount(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x210818, 0x0)
mlockall(0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)

44.177652222s ago: executing program 4 (id=905):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r0, &(0x7f0000000840)=[{0x0}], 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00')
getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002)

42.877745848s ago: executing program 4 (id=909):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = gettid()
sched_setscheduler(r0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0)
r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r7, 0x800442d2, 0x0)
splice(r3, 0x0, r6, 0x0, 0x80, 0x4)
timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

40.909046352s ago: executing program 4 (id=915):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, 0x0)
setns(r1, 0x8020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20)

40.509575783s ago: executing program 4 (id=918):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x40, 0x4, 0x2d7})
syz_open_procfs$pagemap(0x0, &(0x7f0000000280))
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16)
r1 = openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0186415, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0)
epoll_create1(0x80000)
setrlimit(0xb, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000200))
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

39.445728982s ago: executing program 4 (id=921):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r2 = userfaultfd(0x1)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8000000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x9, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
close(0x3)
r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f)
r5 = dup2(r4, r4)
read$FUSE(r5, &(0x7f00000063c0)={0x2020}, 0x2020)

12.563031156s ago: executing program 7 (id=988):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
r1 = fcntl$dupfd(r0, 0x406, r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000240), 0xb375)

11.991266324s ago: executing program 3 (id=989):
socket(0x2, 0x3, 0xff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0))
write$P9_ROPEN(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x0)

11.949010541s ago: executing program 1 (id=990):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7003f00)

11.118813415s ago: executing program 7 (id=992):
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan1\x00'})

11.118063553s ago: executing program 5 (id=993):
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r2 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x6, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @local, @rand_addr, {[@lsrr={0x83, 0x3}]}}}}}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"])
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000080), 0xfffffffffffffffe, 0x40040)
ioctl$FICLONE(r6, 0x40049409, 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x28, 0x0, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x20000800)
ioctl$XFS_IOC_GOINGDOWN(r6, 0x8004587d, &(0x7f0000000300)=0x9)
socket$nl_generic(0x10, 0x3, 0x10)

9.912656299s ago: executing program 1 (id=995):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd700007000000241e0000080003", @ANYRES32=r3, @ANYBLOB='\b\x00\f'], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x24000800)

9.819745859s ago: executing program 7 (id=996):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {0x0}], 0x2, 0x14, 0xc)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x4a2602, 0x0)
r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
prlimit64(0x0, 0x0, &(0x7f0000000240)={0xfffffffffffffff9, 0x1000189}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0xfffffe45, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmmsg(r3, &(0x7f0000023d40)=[{{&(0x7f0000000680)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000700)}, {0x0}, {&(0x7f00000008c0)=""/128, 0x80}, {&(0x7f0000000940)=""/11, 0xb}, {&(0x7f0000000980)=""/244, 0xf4}, {&(0x7f0000000a80)=""/247, 0xf7}], 0x6, &(0x7f0000000c00)=""/4096, 0x1000}, 0xfff}, {{&(0x7f0000001c00)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f000001f080)=[{&(0x7f0000001c80)=""/44, 0x2c}, {&(0x7f0000001cc0)=""/249, 0xf9}, {&(0x7f000001d040)=""/4096, 0x1000}, {&(0x7f000001e080)=""/4096, 0x1000}], 0x4, &(0x7f000001f100)=""/128, 0x80}, 0x901e}, {{0x0, 0x0, &(0x7f000001f280)=[{&(0x7f000001f180)=""/77, 0x4d}, {&(0x7f000001f200)=""/77, 0x4d}], 0x2, &(0x7f000001f2c0)=""/146, 0x92}, 0x656d}, {{&(0x7f000001f380)=@alg, 0x80, &(0x7f0000020680)=[{&(0x7f000001f400)=""/14, 0xe}, {&(0x7f000001f440)=""/4096, 0x1000}, {&(0x7f0000020440)=""/207, 0xcf}, {&(0x7f0000020540)=""/152, 0x98}, {&(0x7f0000020600)=""/113, 0x71}], 0x5, &(0x7f0000020700)=""/54, 0x36}, 0x6}, {{&(0x7f0000020740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000021e80)=[{&(0x7f00000207c0)=""/47, 0x2f}, {0x0}, {&(0x7f0000020900)=""/189, 0xbd}, {&(0x7f00000209c0)=""/228, 0xe4}, {&(0x7f0000020b40)=""/170, 0xaa}, {&(0x7f0000020c00)=""/4096, 0x1000}, {&(0x7f0000021c00)=""/76, 0x4c}, {&(0x7f0000021c80)=""/207, 0xcf}], 0x8}, 0x10001}, {{0x0, 0x0, &(0x7f0000022080)=[{0x0}], 0x1}, 0x3}, {{&(0x7f0000022140)=@hci, 0x80, &(0x7f0000022300)=[{&(0x7f00000221c0)=""/32, 0x20}, {&(0x7f0000022200)}, {&(0x7f0000022280)=""/86, 0x56}], 0x3, &(0x7f0000022380)=""/72, 0x48}, 0x5}, {{&(0x7f0000001dc0)=@qipcrtr, 0x80, &(0x7f0000022540)=[{&(0x7f0000001e40)=""/163, 0xa3}, {0x0}, {&(0x7f0000022200)=""/24, 0x18}], 0x3}, 0xfffff801}, {{0x0, 0x0, &(0x7f0000023b80)=[{&(0x7f0000022600)=""/240, 0xf0}, {&(0x7f0000022700)=""/74, 0x4a}, {&(0x7f0000022780)=""/22, 0x16}, {0x0}, {&(0x7f00000237c0)=""/202, 0xca}, {&(0x7f00000238c0)=""/122, 0x7a}, {&(0x7f0000023940)=""/171, 0xab}, {0x0}, {&(0x7f0000023b00)=""/111, 0x6f}], 0x9, &(0x7f0000023c40)=""/249, 0xf9}, 0x81}], 0x9, 0x12122, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000)
mount(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x210818, 0x0)
mlockall(0x6)
brk(0x689d80000000)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20)

9.6388304s ago: executing program 1 (id=997):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
dup3(0xffffffffffffffff, r0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)

8.342214485s ago: executing program 1 (id=1000):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@newqdisc={0xfc, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xcc, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x3, [0x8, 0x9, 0x3, 0x8, 0x0, 0x5, 0x2, 0x9, 0x8, 0x8, 0x2, 0xd, 0xb, 0x5, 0xb, 0xa], 0x1, [0x4, 0x1, 0x8, 0x3, 0x9, 0x796c, 0x3, 0x5, 0x0, 0xfff, 0xb, 0x1, 0x0, 0xcfcd, 0xf81e, 0x7], [0x2, 0x9, 0x9, 0x8000, 0x40, 0x5d00, 0x1, 0xffff, 0x4, 0x6, 0xe, 0x401, 0x1, 0x40b, 0x0, 0x8000]}}]}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x810}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
r10 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r10, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @multicast}, 0x14)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)

8.143418226s ago: executing program 5 (id=1001):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)

8.134760486s ago: executing program 7 (id=1002):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
dup(0xffffffffffffffff)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.sectors\x00', 0x275a, 0x0)

7.816460456s ago: executing program 5 (id=1003):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r4, r3, 0x0, 0x3a)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
mq_open(&(0x7f0000000040)='-\'$(:*{:\x00', 0x40, 0x24, 0x0)
r6 = userfaultfd(0x80001)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x6}})
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, 0x0)

6.38607779s ago: executing program 6 (id=1005):
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
r2 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, 0x0, 0x0, 0xffffffffffffff9c)
r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, &(0x7f0000000040)={0x6, 0x100, "4383afb7ff950dc956dc7ca6b460517eabffe4c257a594055ae392ee6d91e676", 0x9, 0xd, 0x4, 0x100, 0x431})
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = accept4(r4, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
sendmmsg$unix(r5, &(0x7f0000000680), 0x4924924924925c6, 0x0)

5.777233474s ago: executing program 3 (id=1006):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50)
write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x3002a8d, 0x1)
ioctl$BLKPG(r4, 0x1269, &(0x7f0000000640)={0x1, 0x0, 0x98, &(0x7f0000000580)={0xfffffffffffffffd, 0x2001f, 0xb}})

4.905900595s ago: executing program 3 (id=1007):
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket$pppl2tp(0x18, 0x1, 0x1)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r2, 0xffffffffffffffff, 0x0)

3.70390154s ago: executing program 3 (id=1008):
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan1\x00'})

2.882620021s ago: executing program 6 (id=1009):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="010027bd700007000000241e000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00\f'], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x24000800)

2.681622195s ago: executing program 7 (id=1010):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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")
truncate(&(0x7f0000000040)='./file1\x00', 0x8de8)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00')
pread64(r0, 0x0, 0x0, 0x97)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
close_range(r1, 0xffffffffffffffff, 0x0)

2.677059122s ago: executing program 6 (id=1011):
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000000340)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
unlinkat(r0, &(0x7f0000000240)='./file1\x00', 0x0)
rename(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file1\x00')

2.521171926s ago: executing program 6 (id=1012):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
dup3(0xffffffffffffffff, r0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)

1.997748742s ago: executing program 6 (id=1013):
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r2 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x6, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @local, @rand_addr, {[@lsrr={0x83, 0x3}]}}}}}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"])
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000080), 0xfffffffffffffffe, 0x40040)
ioctl$FICLONE(r6, 0x40049409, 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x28, 0x0, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x20000800)
ioctl$XFS_IOC_GOINGDOWN(r6, 0x8004587d, &(0x7f0000000300)=0x9)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)

1.381668666s ago: executing program 5 (id=1014):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x8)
setsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, 0x0)

1.344672047s ago: executing program 3 (id=1015):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/240, 0xf0}, {0x0}], 0x2, 0x14, 0xc)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x4a2602, 0x0)
r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
prlimit64(0x0, 0x0, &(0x7f0000000240)={0xfffffffffffffff9, 0x1000189}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0xfffffe45, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmmsg(r3, &(0x7f0000023d40)=[{{&(0x7f0000000680)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000700)}, {0x0}, {&(0x7f00000008c0)=""/128, 0x80}, {&(0x7f0000000940)=""/11, 0xb}, {&(0x7f0000000980)=""/244, 0xf4}, {&(0x7f0000000a80)=""/247, 0xf7}], 0x6, &(0x7f0000000c00)=""/4096, 0x1000}, 0xfff}, {{&(0x7f0000001c00)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f000001f080)=[{&(0x7f0000001c80)=""/44, 0x2c}, {&(0x7f0000001cc0)=""/249, 0xf9}, {&(0x7f000001d040)=""/4096, 0x1000}, {&(0x7f000001e080)=""/4096, 0x1000}], 0x4, &(0x7f000001f100)=""/128, 0x80}, 0x901e}, {{0x0, 0x0, &(0x7f000001f280)=[{&(0x7f000001f180)=""/77, 0x4d}, {&(0x7f000001f200)=""/77, 0x4d}], 0x2, &(0x7f000001f2c0)=""/146, 0x92}, 0x656d}, {{&(0x7f000001f380)=@alg, 0x80, &(0x7f0000020680)=[{&(0x7f000001f400)=""/14, 0xe}, {&(0x7f000001f440)=""/4096, 0x1000}, {&(0x7f0000020440)=""/207, 0xcf}, {&(0x7f0000020540)=""/152, 0x98}, {&(0x7f0000020600)=""/113, 0x71}], 0x5, &(0x7f0000020700)=""/54, 0x36}, 0x6}, {{&(0x7f0000020740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000021e80)=[{&(0x7f00000207c0)=""/47, 0x2f}, {0x0}, {&(0x7f0000020900)=""/189, 0xbd}, {&(0x7f00000209c0)=""/228, 0xe4}, {&(0x7f0000020b40)=""/170, 0xaa}, {&(0x7f0000020c00)=""/4096, 0x1000}, {&(0x7f0000021c00)=""/76, 0x4c}, {&(0x7f0000021c80)=""/207, 0xcf}], 0x8}, 0x10001}, {{0x0, 0x0, &(0x7f0000022080)=[{0x0}], 0x1}, 0x3}, {{&(0x7f0000022140)=@hci, 0x80, &(0x7f0000022300)=[{&(0x7f00000221c0)=""/32, 0x20}, {&(0x7f0000022200)}, {&(0x7f0000022280)=""/86, 0x56}], 0x3, &(0x7f0000022380)=""/72, 0x48}, 0x5}, {{&(0x7f0000001dc0)=@qipcrtr, 0x80, &(0x7f0000022540)=[{&(0x7f0000001e40)=""/163, 0xa3}, {0x0}, {&(0x7f0000022200)=""/24, 0x18}], 0x3}, 0xfffff801}, {{0x0, 0x0, &(0x7f0000023b80)=[{&(0x7f0000022600)=""/240, 0xf0}, {&(0x7f0000022700)=""/74, 0x4a}, {&(0x7f0000022780)=""/22, 0x16}, {0x0}, {&(0x7f00000237c0)=""/202, 0xca}, {&(0x7f00000238c0)=""/122, 0x7a}, {&(0x7f0000023940)=""/171, 0xab}, {0x0}, {&(0x7f0000023b00)=""/111, 0x6f}], 0x9, &(0x7f0000023c40)=""/249, 0xf9}, 0x81}], 0x9, 0x12122, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000)
mount(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x210818, 0x0)
mlockall(0x6)
brk(0x689d80000000)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20)

1.233500723s ago: executing program 5 (id=1016):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
getrlimit(0x2, &(0x7f0000000040))
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(0x0, 0xd, 0x0, 0x0)
getpid()
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1.225013718s ago: executing program 1 (id=1017):
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000040000000400", @ANYRES32, @ANYBLOB="00000000000000000900000000000000f5ffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x50)

1.132620273s ago: executing program 7 (id=1018):
socket(0x2, 0x3, 0xff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0))
write$P9_ROPEN(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x0)

745.7168ms ago: executing program 1 (id=1019):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2}, 0x50)
read$FUSE(r0, &(0x7f0000002900)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10)
ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000002340)={r1, 0x0, 0x400000, 0x0, 0x0, &(0x7f00000022c0)={@_ha_fsid}, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x3c}})

179.63634ms ago: executing program 5 (id=1020):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600), 0xfec8)
recvmmsg(r1, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1}, 0x80000000}], 0x1, 0x100, 0x0)

78.961797ms ago: executing program 6 (id=1021):
connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci={0x1f, 0x0, 0x4}, 0x80)
syz_open_procfs(0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0)
semctl$GETZCNT(0x0, 0x0, 0xf, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
clock_gettime(0x0, 0x0)
connect$llc(r0, 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000240)={0x7fff, 0x0, 0x1, 'queue1\x00', 0x6})
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000300)=""/111)
syz_mount_image$squashfs(&(0x7f0000000280), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0x228, &(0x7f0000002380)="$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")

0s ago: executing program 3 (id=1022):
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
r2 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, 0x0, 0x0, 0xffffffffffffff9c)
r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, &(0x7f0000000040)={0x6, 0x100, "4383afb7ff950dc956dc7ca6b460517eabffe4c257a594055ae392ee6d91e676", 0x9, 0xd, 0x4, 0x100, 0x431})
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
sendmmsg$unix(r4, &(0x7f0000000680), 0x4924924924925c6, 0x0)

kernel console output (not intermixed with test programs):

ght_resched+0x10/0x10
[  226.102540][ T5975]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.102593][ T5975]  f2fs_write_cache_pages+0x21c0/0x2720
[  226.102675][ T5975]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  226.102733][ T5975]  ? kfree+0x1f6/0x6b0
[  226.102770][ T5975]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.102823][ T5975]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.102868][ T5975]  ? ieee80211_inform_bss+0x8da/0x1150
[  226.102946][ T5975]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.103059][ T5975]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.103107][ T5975]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.103152][ T5975]  ? rcu_is_watching+0x12/0xc0
[  226.103201][ T5975]  f2fs_write_data_pages+0x799/0x16d0
[  226.103276][ T5975]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  226.103342][ T5975]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.103393][ T5975]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.103440][ T5975]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  226.103500][ T5975]  do_writepages+0x278/0x600
[  226.103560][ T5975]  ? __pfx_do_writepages+0x10/0x10
[  226.103622][ T5975]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.103672][ T5975]  __writeback_single_inode+0x164/0x13c0
[  226.103723][ T5975]  ? find_held_lock+0x2b/0x80
[  226.103773][ T5975]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.103821][ T5975]  ? __pfx___writeback_single_inode+0x10/0x10
[  226.103872][ T5975]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.103918][ T5975]  ? do_raw_spin_unlock+0x145/0x1e0
[  226.103961][ T5975]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.104019][ T5975]  writeback_sb_inodes+0x766/0x1c70
[  226.104088][ T5975]  ? __pick_eevdf+0x14c/0x440
[  226.104138][ T5975]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  226.104188][ T5975]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.104240][ T5975]  ? wakeup_preempt_fair+0x541/0xd30
[  226.104347][ T5975]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.104393][ T5975]  ? rcu_is_watching+0x12/0xc0
[  226.104434][ T5975]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.104480][ T5975]  ? queue_io+0x287/0x550
[  226.104526][ T5975]  wb_writeback+0x1c0/0xbe0
[  226.104571][ T5975]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.104628][ T5975]  ? __pfx_wb_writeback+0x10/0x10
[  226.104690][ T5975]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.104734][ T5975]  ? mark_held_locks+0x40/0x70
[  226.104792][ T5975]  ? _raw_spin_unlock_irq+0x23/0x50
[  226.104857][ T5975]  wb_workfn+0x142/0xc00
[  226.104910][ T5975]  ? try_to_wake_up+0x160/0x1a80
[  226.104959][ T5975]  ? __pfx_wb_workfn+0x10/0x10
[  226.105012][ T5975]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.105062][ T5975]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.105112][ T5975]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.105157][ T5975]  ? rcu_is_watching+0x12/0xc0
[  226.105207][ T5975]  process_one_work+0xa23/0x19a0
[  226.105275][ T5975]  ? __pfx_process_one_work+0x10/0x10
[  226.105311][ T5975]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.105371][ T5975]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.105431][ T5975]  worker_thread+0x5ef/0xe50
[  226.105482][ T5975]  ? __pfx_worker_thread+0x10/0x10
[  226.105521][ T5975]  ? kthread+0x13a/0x450
[  226.105552][ T5975]  ? __pfx_worker_thread+0x10/0x10
[  226.105588][ T5975]  kthread+0x370/0x450
[  226.105619][ T5975]  ? __pfx_kthread+0x10/0x10
[  226.105655][ T5975]  ret_from_fork+0x754/0xd80
[  226.105694][ T5975]  ? __pfx_ret_from_fork+0x10/0x10
[  226.105733][ T5975]  ? srso_alias_return_thunk+0x5/0xfbef5
[  226.105779][ T5975]  ? __switch_to+0x7b4/0x1120
[  226.105824][ T5975]  ? __pfx_kthread+0x10/0x10
[  226.105861][ T5975]  ret_from_fork_asm+0x1a/0x30
[  226.105929][ T5975]  </TASK>
[  226.105945][ T5975] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  226.174169][ T7062] loop3: detected capacity change from 0 to 2048
[  226.370765][ T6823] batman_adv: batadv0: Adding interface: batadv_slave_0
[  226.621534][ T6823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  226.648490][ T6823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  226.695069][ T7062] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  226.742738][ T6823] batman_adv: batadv0: Adding interface: batadv_slave_1
[  226.749753][ T6823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  226.820067][ T7069] loop5: detected capacity change from 0 to 2048
[  226.888735][ T6823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  226.922386][ T7069] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  227.383256][ T7077] netlink: 60 bytes leftover after parsing attributes in process `syz.3.326'.
[  227.475361][ T6860] hsr_slave_0: entered promiscuous mode
[  227.514580][ T6860] hsr_slave_1: entered promiscuous mode
[  227.634699][ T6860] debugfs: 'hsr0' already exists in 'hsr'
[  227.640519][ T6860] Cannot create hsr debugfs directory
[  228.531664][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  228.633075][ T6823] hsr_slave_0: entered promiscuous mode
[  228.641164][ T6823] hsr_slave_1: entered promiscuous mode
[  228.647659][ T6823] debugfs: 'hsr0' already exists in 'hsr'
[  228.653445][ T6823] Cannot create hsr debugfs directory
[  229.072326][ T7099] loop4: detected capacity change from 0 to 16
[  229.086108][ T7099] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  230.228974][ T7108] loop5: detected capacity change from 0 to 2048
[  230.267686][ T7108] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  230.317014][ T7111] fuse: Bad value for 'group_id'
[  230.324046][ T7111] fuse: Bad value for 'group_id'
[  230.344286][   T30] audit: type=1800 audit(2000000017.449:87): pid=7108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.333" name="file2" dev="loop5" ino=1416 res=0 errno=0
[  230.424548][   T30] audit: type=1800 audit(2000000017.489:88): pid=7108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.333" name="file1" dev="loop5" ino=1415 res=0 errno=0
[  231.064575][ T7119] loop1: detected capacity change from 0 to 512
[  231.079978][ T7119] EXT4-fs: Ignoring removed mblk_io_submit option
[  231.839334][ T7119] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  231.849989][ T7119] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #13: comm syz.1.336: invalid indirect mapped block 33554432 (level 0)
[  231.864657][ T7119] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  231.868119][ T7119] EXT4-fs error (device loop1): ext4_clear_blocks:874: inode #13: comm syz.1.336: attempt to clear invalid blocks 2 len 1
[  231.877731][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  231.877770][    C0] EXT4-fs (loop1): initial error at time 2000000018: ext4_free_branches:1020: inode 13
[  231.877828][    C0] EXT4-fs (loop1): last error at time 2000000018: ext4_free_branches:1020: inode 13
[  231.917444][ T7119] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  232.094763][ T7119] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz.1.336: bg 0: block 255: padding at end of block bitmap is not set
[  232.129298][ T7119] loop1: lost filesystem error report for type 5 error -117
[  232.890574][ T7119] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  232.906906][ T7119] loop1: lost filesystem error report for type 5 error -117
[  232.929267][ T7119] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #13: comm syz.1.336: invalid indirect mapped block 1819239214 (level 0)
[  232.951710][ T7119] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  232.958276][ T7119] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #13: comm syz.1.336: invalid indirect mapped block 1819239214 (level 1)
[  232.982020][ T7119] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  232.984893][ T7119] EXT4-fs (loop1): 1 truncate cleaned up
[  233.003611][ T7119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  233.428285][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.470021][ T7127] loop4: detected capacity change from 0 to 2048
[  233.516636][ T7130] fuse: Unknown parameter 'user_i00000000000000000000'
[  233.546652][ T7127] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  233.840863][ T1012] bridge_slave_1: left allmulticast mode
[  233.850593][ T1012] bridge_slave_1: left promiscuous mode
[  233.880446][ T1012] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.916761][ T1012] bridge_slave_0: left allmulticast mode
[  233.933373][ T1012] bridge_slave_0: left promiscuous mode
[  233.988273][ T1012] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.013476][ T7151] loop1: detected capacity change from 0 to 16
[  236.021107][ T7151] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  236.332327][ T7159] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  236.332327][ T7159] The task syz.5.344 (7159) triggered the difference, watch for misbehavior.
[  236.507498][ T7164] fuse: Bad value for 'group_id'
[  236.544859][ T7164] fuse: Bad value for 'group_id'
[  237.395970][ T7174] loop1: detected capacity change from 0 to 256
[  237.424208][ T1012] bond1 (unregistering): (slave macvlan2): Removing an active aggregator
[  237.448342][ T1012] bond1 (unregistering): (slave macvlan2): Releasing backup interface
[  237.469390][ T7174] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1d73664b, utbl_chksum : 0xe619d30d)
[  237.522610][ T1012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  237.545641][ T1012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  237.566323][ T1012] bond0 (unregistering): Released all slaves
[  237.596257][ T1012] bond1 (unregistering): Released all slaves
[  237.671985][   T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  237.748346][ T7178] exFAT-fs (loop1): start_clu is invalid cluster(0xffffffff)
[  237.896489][   T24] usb 6-1: too many configurations: 9, using maximum allowed: 8
[  237.972635][   T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  238.043666][   T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  238.162752][   T24] usb 6-1: config 0 interface 0 has no altsetting 0
[  238.318227][   T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  238.351390][   T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  238.433692][   T24] usb 6-1: config 0 interface 0 has no altsetting 0
[  238.460477][ T6860] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  238.500723][   T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  238.502358][ T6860] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  238.532560][   T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  238.553456][   T24] usb 6-1: config 0 interface 0 has no altsetting 0
[  238.562453][   T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  238.631414][   T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  238.657945][   T24] usb 6-1: config 0 interface 0 has no altsetting 0
[  238.664943][ T6860] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  238.703467][   T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  238.896806][ T7186] fuse: Unknown parameter 'fd0x0000000000000003'
[  238.912949][ T6860] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  239.683320][   T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  239.698101][   T24] usb 6-1: config 0 interface 0 has no altsetting 0
[  239.733224][   T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  239.956552][ T7184] loop1: detected capacity change from 0 to 131072
[  239.970783][ T7200] loop3: detected capacity change from 0 to 16
[  239.978607][ T7200] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  240.289539][ T7184] F2FS-fs (loop1): invalid crc value
[  240.571337][   T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  240.597549][   T24] usb 6-1: config 0 interface 0 has no altsetting 0
[  240.696967][ T7184] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  240.792928][ T7184] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  240.823064][   T24] usb 6-1: unable to read config index 6 descriptor/start: -71
[  240.831821][   T24] usb 6-1: can't read configurations, error -71
[  241.175746][   T30] audit: type=1800 audit(2000000028.279:89): pid=7212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.352" name="file1" dev="loop1" ino=7 res=0 errno=0
[  241.878928][ T1012] hsr_slave_0: left promiscuous mode
[  242.171712][ T1012] hsr_slave_1: left promiscuous mode
[  242.178753][ T1012] batman_adv: batadv0: Removing interface: batadv_slave_0
[  242.239935][ T1012] batman_adv: batadv0: Removing interface: batadv_slave_1
[  242.839262][ T7226] process 'syz.5.361' launched '/dev/fd/3' with NULL argv: empty string added
[  242.913516][ T7226] fuse: Bad value for 'fd'
[  244.200675][ T1012] team0 (unregistering): Port device team_slave_1 removed
[  244.317714][ T1012] team0 (unregistering): Port device team_slave_0 removed
[  245.123647][ T6823] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  245.356133][ T6823] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  245.443851][ T6823] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  245.551504][ T6823] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  245.801309][ T7257] loop5: detected capacity change from 0 to 16
[  245.814761][ T7257] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  246.796430][ T6860] 8021q: adding VLAN 0 to HW filter on device bond0
[  247.000464][ T6860] 8021q: adding VLAN 0 to HW filter on device team0
[  247.022037][ T1012] IPVS: stop unused estimator thread 0...
[  247.088965][  T235] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.096230][  T235] bridge0: port 1(bridge_slave_0) entered forwarding state
[  247.197552][  T235] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.204945][  T235] bridge0: port 2(bridge_slave_1) entered forwarding state
[  247.909511][ T6823] 8021q: adding VLAN 0 to HW filter on device bond0
[  248.017490][ T6823] 8021q: adding VLAN 0 to HW filter on device team0
[  248.105672][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.112956][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state
[  248.400660][ T5975] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.407992][ T5975] bridge0: port 2(bridge_slave_1) entered forwarding state
[  249.011515][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  249.725166][ T7298] loop3: detected capacity change from 0 to 32768
[  249.829215][ T7298] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  250.052042][ T7298] XFS (loop3): Ending clean mount
[  250.066700][ T7298] XFS (loop3): Quotacheck needed: Please wait.
[  250.666365][ T7298] XFS (loop3): Quotacheck: Done.
[  250.971588][ T5821] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  251.416519][ T6860] 8021q: adding VLAN 0 to HW filter on device batadv0
[  251.542323][ T7335] loop3: detected capacity change from 0 to 16
[  251.549949][ T7335] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  253.436819][ T7349] netlink: 60 bytes leftover after parsing attributes in process `syz.1.385'.
[  253.548470][ T6823] 8021q: adding VLAN 0 to HW filter on device batadv0
[  254.122076][ T7352] loop4: detected capacity change from 0 to 2048
[  254.165579][ T7352] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  254.369425][   T30] audit: type=1800 audit(2000000041.449:90): pid=7352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.386" name="file2" dev="loop4" ino=1416 res=0 errno=0
[  254.482198][   T30] audit: type=1800 audit(2000000041.579:91): pid=7364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.386" name="file1" dev="loop4" ino=1415 res=0 errno=0
[  254.814286][ T7349] Dead loop on virtual device ip6_vti0, fix it urgently!
[  255.441887][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  255.448387][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  255.610760][ T7349] Dead loop on virtual device ip6_vti0, fix it urgently!
[  255.669637][ T7349] Dead loop on virtual device ip6_vti0, fix it urgently!
[  256.416813][ T7384] loop4: detected capacity change from 0 to 16
[  256.433990][ T7384] erofs (device loop4): invalid ishare xattr prefix id 0
[  256.870498][ T7389] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  256.878488][ T7389] overlayfs: failed to set xattr on upper
[  256.885283][ T7389] overlayfs: ...falling back to redirect_dir=nofollow.
[  256.892342][ T7389] overlayfs: ...falling back to index=off.
[  256.900245][ T7389] overlayfs: ...falling back to uuid=null.
[  256.906480][ T7389] overlayfs: ...falling back to xino=off.
[  258.832543][ T7410] loop1: detected capacity change from 0 to 16
[  258.844536][ T7410] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  259.983980][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  259.999546][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  260.583569][ T6860] veth0_vlan: entered promiscuous mode
[  260.710287][ T6860] veth1_vlan: entered promiscuous mode
[  260.727486][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  260.811439][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  260.833334][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  260.978522][ T6860] veth0_macvtap: entered promiscuous mode
[  261.000171][ T6860] veth1_macvtap: entered promiscuous mode
[  261.079607][ T7428] loop4: detected capacity change from 0 to 8
[  261.211735][ T7428] SQUASHFS error: xz decompression failed, data probably corrupt
[  261.220340][ T7428] SQUASHFS error: Failed to read block 0x108: -5
[  261.227924][ T7428] SQUASHFS error: Unable to read metadata cache entry [106]
[  261.235414][ T7428] SQUASHFS error: Unable to read inode 0x11f
[  261.464512][ T7412] lo speed is unknown, defaulting to 1000
[  262.041863][ T7431] loop3: detected capacity change from 0 to 512
[  262.185208][ T7431] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  263.113294][ T5833] Bluetooth: hci0: command tx timeout
[  263.424350][ T7431] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1139: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  263.446165][ T7431] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz.3.398: bg 0: block 248: padding at end of block bitmap is not set
[  263.461725][ T7431] loop3: lost filesystem error report for type 5 error -117
[  263.462448][ T7431] Quota error (device loop3): write_blk: dquota write failed
[  263.477539][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  263.477572][    C0] EXT4-fs (loop3): last error at time 2000000050: ext4_validate_block_bitmap:440
[  263.493305][ T7431] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  263.503262][ T7431] EXT4-fs error (device loop3): ext4_acquire_dquot:7024: comm syz.3.398: Failed to acquire dquot type 1
[  263.514520][ T7431] loop3: lost filesystem error report for type 5 error -28
[  263.530982][ T7431] EXT4-fs (loop3): 1 truncate cleaned up
[  263.564726][ T6860] batman_adv: batadv0: Interface activated: batadv_slave_0
[  263.602153][ T7431] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  263.660430][ T6860] batman_adv: batadv0: Interface activated: batadv_slave_1
[  264.819629][ T5973] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  265.225523][ T5833] Bluetooth: hci0: command tx timeout
[  265.316998][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  265.756639][ T5973] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  265.810141][ T5973] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  265.870490][ T5973] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  266.092560][ T7476] loop1: detected capacity change from 0 to 16
[  266.106517][ T7476] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  266.318599][ T7473] fuse: Unknown parameter 'user_id00000000000000000000'
[  266.798815][ T7481] mmap: syz.3.404 (7481) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  267.199796][ T5836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  267.220526][ T5836] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  267.241490][ T5836] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  267.275397][ T5836] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  267.283594][ T5836] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  267.311778][ T5836] Bluetooth: hci0: command tx timeout
[  267.816846][ T7496] loop5: detected capacity change from 0 to 8
[  267.869021][ T7496] SQUASHFS error: xz decompression failed, data probably corrupt
[  267.947954][ T7496] SQUASHFS error: Failed to read block 0x108: -5
[  267.990712][ T7496] SQUASHFS error: Unable to read metadata cache entry [106]
[  268.076850][ T7496] SQUASHFS error: Unable to read inode 0x11f
[  268.220702][ T7485] lo speed is unknown, defaulting to 1000
[  268.649978][ T7412] chnl_net:caif_netlink_parms(): no params data found
[  268.665847][ T7501] loop5: detected capacity change from 0 to 2048
[  269.085358][ T7508] loop4: detected capacity change from 0 to 512
[  269.381393][ T5836] Bluetooth: hci6: command tx timeout
[  269.397426][ T5836] Bluetooth: hci0: command tx timeout
[  269.742161][ T7508] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  269.783476][ T7508] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1139: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  269.794198][ T7501] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  269.809559][ T7508] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.415: bg 0: block 248: padding at end of block bitmap is not set
[  269.831666][ T7508] loop4: lost filesystem error report for type 5 error -117
[  269.841316][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  269.855331][    C1] EXT4-fs (loop4): last error at time 2000000056: ext4_validate_block_bitmap:440
[  269.866349][ T7508] Quota error (device loop4): write_blk: dquota write failed
[  269.874117][ T7508] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  269.884652][ T7508] EXT4-fs error (device loop4): ext4_acquire_dquot:7024: comm syz.4.415: Failed to acquire dquot type 1
[  269.896039][ T7508] loop4: lost filesystem error report for type 5 error -28
[  269.898951][ T7508] EXT4-fs (loop4): 1 truncate cleaned up
[  269.916035][ T7508] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  270.561677][ T7519] loop1: detected capacity change from 0 to 2048
[  270.633983][ T7519] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  270.909680][ T7412] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.942117][ T7412] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.968073][ T7412] bridge_slave_0: entered allmulticast mode
[  271.005826][ T7412] bridge_slave_0: entered promiscuous mode
[  271.444925][ T7412] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.481332][ T5833] Bluetooth: hci6: command tx timeout
[  271.491836][ T7412] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.521548][ T7412] bridge_slave_1: entered allmulticast mode
[  271.558578][ T7412] bridge_slave_1: entered promiscuous mode
[  271.829643][ T7416] bridge_slave_1: left allmulticast mode
[  271.833704][ T5834] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  271.835805][ T7416] bridge_slave_1: left promiscuous mode
[  271.877530][ T7416] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.008036][ T7416] bridge_slave_0: left allmulticast mode
[  272.081894][ T7416] bridge_slave_0: left promiscuous mode
[  272.174347][ T7416] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.713132][ T7545] loop4: detected capacity change from 0 to 16
[  272.727374][ T7545] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  273.541769][ T5833] Bluetooth: hci6: command tx timeout
[  274.605033][ T7561] loop1: detected capacity change from 0 to 8
[  274.658371][ T7561] SQUASHFS error: xz decompression failed, data probably corrupt
[  274.754335][ T7561] SQUASHFS error: Failed to read block 0x108: -5
[  274.789349][ T7561] SQUASHFS error: Unable to read metadata cache entry [106]
[  274.831087][ T7561] SQUASHFS error: Unable to read inode 0x11f
[  275.144142][ T7416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  275.216687][ T7416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  275.245233][ T7416] bond0 (unregistering): Released all slaves
[  275.337984][ T7412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  275.459037][ T7568] loop1: detected capacity change from 0 to 2048
[  275.497951][ T7412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  275.588560][ T7416] hsr_slave_0: left promiscuous mode
[  275.622209][ T5833] Bluetooth: hci6: command tx timeout
[  275.632270][ T7416] hsr_slave_1: left promiscuous mode
[  275.633890][ T7568] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  275.639691][ T7416] batman_adv: batadv0: Removing interface: batadv_slave_0
[  275.666928][ T7416] batman_adv: batadv0: Removing interface: batadv_slave_1
[  275.736764][ T7580] loop5: detected capacity change from 0 to 16
[  275.745658][ T7580] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  277.597331][ T7592] tipc: Can't bind to reserved service type 1
[  277.788049][ T7594] loop1: detected capacity change from 0 to 2048
[  277.809515][ T7594] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  277.903012][ T7416] team0 (unregistering): Port device team_slave_1 removed
[  277.929167][ T7416] team0 (unregistering): Port device team_slave_0 removed
[  278.833492][ T7598] loop5: detected capacity change from 0 to 2048
[  278.868699][ T7598] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  279.960694][ T7412] team0: Port device team_slave_0 added
[  279.991320][ T5924] IPVS: starting estimator thread 0...
[  279.996993][ T7584] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  280.111427][ T7605] IPVS: using max 22 ests per chain, 52800 per kthread
[  280.206690][ T7485] chnl_net:caif_netlink_parms(): no params data found
[  280.244959][ T7412] team0: Port device team_slave_1 added
[  280.344841][ T7609] loop5: detected capacity change from 0 to 8
[  280.407858][ T7609] SQUASHFS error: xz decompression failed, data probably corrupt
[  280.443812][ T7609] SQUASHFS error: Failed to read block 0x108: -5
[  280.479497][ T7609] SQUASHFS error: Unable to read metadata cache entry [106]
[  280.489603][ T7609] SQUASHFS error: Unable to read inode 0x11f
[  280.573409][ T7412] batman_adv: batadv0: Adding interface: batadv_slave_0
[  280.580432][ T7412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  280.659142][ T7412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  280.745696][ T7620] loop1: detected capacity change from 0 to 16
[  280.749770][ T7412] batman_adv: batadv0: Adding interface: batadv_slave_1
[  280.771458][ T7412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  280.785234][ T7620] erofs (device loop1): invalid ishare xattr prefix id 0
[  280.863976][ T7412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  281.694984][ T7625] loop5: detected capacity change from 0 to 16
[  281.703226][ T7625] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  282.032833][ T7627] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  282.040134][ T7627] overlayfs: failed to set xattr on upper
[  282.046301][ T7627] overlayfs: ...falling back to redirect_dir=nofollow.
[  282.053467][ T7627] overlayfs: ...falling back to index=off.
[  282.060077][ T7627] overlayfs: ...falling back to uuid=null.
[  282.066259][ T7627] overlayfs: ...falling back to xino=off.
[  282.449284][ T7485] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.519577][ T7485] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.548160][ T7485] bridge_slave_0: entered allmulticast mode
[  282.570406][ T7485] bridge_slave_0: entered promiscuous mode
[  282.740177][ T7485] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.782543][ T7485] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.841581][ T7485] bridge_slave_1: entered allmulticast mode
[  282.884371][ T7485] bridge_slave_1: entered promiscuous mode
[  282.969808][ T7640] loop4: detected capacity change from 0 to 2048
[  283.067633][ T7640] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  283.090896][ T7412] hsr_slave_0: entered promiscuous mode
[  283.108610][ T7412] hsr_slave_1: entered promiscuous mode
[  283.481626][ T7644] loop3: detected capacity change from 0 to 2048
[  284.111256][ T7412] debugfs: 'hsr0' already exists in 'hsr'
[  284.130779][ T7644] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  284.137654][ T7412] Cannot create hsr debugfs directory
[  285.319643][ T7651] lo speed is unknown, defaulting to 1000
[  285.640118][ T7416] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.896351][ T7666] netlink: 56 bytes leftover after parsing attributes in process `syz.3.452'.
[  286.143722][ T7669] loop1: detected capacity change from 0 to 32768
[  286.164757][ T7669] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.453 (7669)
[  286.195748][ T7669] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  286.206134][ T7669] BTRFS info (device loop1): using sha256 checksum algorithm
[  286.240450][ T7485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  286.346496][ T7669] BTRFS info (device loop1): enabling ssd optimizations
[  286.353745][ T7669] BTRFS info (device loop1): turning on async discard
[  286.360559][ T7669] BTRFS info (device loop1): enabling free space tree
[  286.652482][ T7416] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.132017][   T30] audit: type=1800 audit(2000000074.169:92): pid=7687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.453" name="file2" dev="loop1" ino=261 res=0 errno=0
[  287.501104][ T7485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  287.621019][ T5829] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  287.669052][ T7416] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.820051][ T7693] loop3: detected capacity change from 0 to 16
[  287.828740][ T7693] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  289.135312][ T7416] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.243026][ T7485] team0: Port device team_slave_0 added
[  289.278987][ T7485] team0: Port device team_slave_1 added
[  290.014672][ T7485] batman_adv: batadv0: Adding interface: batadv_slave_0
[  290.418754][ T7485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  290.490332][ T7485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  290.933823][ T7718] loop3: detected capacity change from 0 to 2048
[  290.941130][ T7485] batman_adv: batadv0: Adding interface: batadv_slave_1
[  290.966335][ T7485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  291.284445][ T7718] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  291.320066][ T7485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  292.628777][ T7485] hsr_slave_0: entered promiscuous mode
[  292.684603][ T7485] hsr_slave_1: entered promiscuous mode
[  292.701026][ T7485] debugfs: 'hsr0' already exists in 'hsr'
[  292.709698][ T7485] Cannot create hsr debugfs directory
[  292.991861][ T7735] netlink: 56 bytes leftover after parsing attributes in process `syz.1.465'.
[  293.226440][ T7734] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.242726][ T7734] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.560599][ T7416] bridge_slave_1: left allmulticast mode
[  293.583824][ T7416] bridge_slave_1: left promiscuous mode
[  293.589770][ T7416] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.664659][ T7416] bridge_slave_0: left allmulticast mode
[  293.670627][ T7416] bridge_slave_0: left promiscuous mode
[  293.681407][ T7416] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.006076][ T7416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  295.117205][ T7416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  295.236397][ T7416] bond0 (unregistering): Released all slaves
[  295.413093][ T7764] loop1: detected capacity change from 0 to 8
[  295.479945][ T7764] SQUASHFS error: xz decompression failed, data probably corrupt
[  295.488006][ T7764] SQUASHFS error: Failed to read block 0x108: -5
[  295.494426][ T7764] SQUASHFS error: Unable to read metadata cache entry [106]
[  295.502728][ T7764] SQUASHFS error: Unable to read inode 0x11f
[  297.016604][ T7416] hsr_slave_0: left promiscuous mode
[  297.150602][ T7416] hsr_slave_1: left promiscuous mode
[  297.286493][ T7416] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  297.393338][ T7416] batman_adv: batadv0: Removing interface: batadv_slave_0
[  297.566370][ T7416] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  297.705814][ T7416] batman_adv: batadv0: Removing interface: batadv_slave_1
[  297.774339][ T7776] netlink: 188 bytes leftover after parsing attributes in process `syz.5.476'.
[  297.858399][ T7416] veth1_macvtap: left promiscuous mode
[  297.874464][ T7416] veth0_macvtap: left promiscuous mode
[  297.891443][ T7416] veth1_vlan: left promiscuous mode
[  297.906194][ T7416] veth0_vlan: left promiscuous mode
[  300.243652][ T7416] team0 (unregistering): Port device team_slave_1 removed
[  300.356499][ T7416] team0 (unregistering): Port device team_slave_0 removed
[  301.011523][ T7811] loop4: detected capacity change from 0 to 32768
[  301.148717][ T7819] loop5: detected capacity change from 0 to 8
[  301.253557][ T7819] SQUASHFS error: xz decompression failed, data probably corrupt
[  301.261785][ T7819] SQUASHFS error: Failed to read block 0x108: -5
[  301.268250][ T7819] SQUASHFS error: Unable to read metadata cache entry [106]
[  301.275881][ T7819] SQUASHFS error: Unable to read inode 0x11f
[  301.368885][ T7811] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  302.006986][ T7811] XFS (loop4): Ending clean mount
[  302.027272][ T7811] XFS (loop4): Quotacheck needed: Please wait.
[  302.161931][ T7811] XFS (loop4): Quotacheck: Done.
[  302.293217][ T5834] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  302.677204][ T7831] loop4: detected capacity change from 0 to 2048
[  302.751930][ T7834] loop3: detected capacity change from 0 to 64
[  303.094270][ T7831] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  303.239087][ T7412] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  303.648116][ T7837] loop5: detected capacity change from 0 to 2048
[  304.467395][ T7837] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  304.783773][ T7412] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  305.734112][ T7412] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  306.158632][ T7412] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  306.309068][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.495'.
[  308.346114][ T7873] loop4: detected capacity change from 0 to 8
[  308.390983][ T7873] SQUASHFS error: xz decompression failed, data probably corrupt
[  308.399099][ T7873] SQUASHFS error: Failed to read block 0x108: -5
[  308.406460][ T7873] SQUASHFS error: Unable to read metadata cache entry [106]
[  308.414268][ T7873] SQUASHFS error: Unable to read inode 0x11f
[  309.203473][ T7412] 8021q: adding VLAN 0 to HW filter on device bond0
[  309.462519][ T7412] 8021q: adding VLAN 0 to HW filter on device team0
[  309.531892][ T6735] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.539185][ T6735] bridge0: port 1(bridge_slave_0) entered forwarding state
[  309.706726][ T6735] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.713989][ T6735] bridge0: port 2(bridge_slave_1) entered forwarding state
[  312.426966][ T7890] loop3: detected capacity change from 0 to 2048
[  312.475775][ T7485] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  312.493417][ T7890] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  312.753833][ T7485] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  315.038847][ T7485] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  315.088608][ T7485] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  316.006203][ T7412] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  316.527911][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  316.534544][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  316.963089][ T7485] 8021q: adding VLAN 0 to HW filter on device bond0
[  317.105022][ T7485] 8021q: adding VLAN 0 to HW filter on device team0
[  317.242846][ T6735] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.250455][ T6735] bridge0: port 1(bridge_slave_0) entered forwarding state
[  317.314559][ T7951] SET target dimension over the limit!
[  317.787158][ T7412] 8021q: adding VLAN 0 to HW filter on device batadv0
[  317.845058][ T6735] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.852431][ T6735] bridge0: port 2(bridge_slave_1) entered forwarding state
[  320.348151][ T7979] overlayfs: failed lookup in lower (newroot/97, name='file1', err=-40): overlapping layers
[  320.691494][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  321.358144][ T7981] loop4: detected capacity change from 0 to 40427
[  321.454361][ T7981] F2FS-fs (loop4): invalid crc value
[  321.566150][ T7981] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  321.576135][ T7981] F2FS-fs (loop4): Start checkpoint disabled!
[  321.584028][ T7981] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  321.598593][ T7981] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  322.459275][ T7986] loop1: detected capacity change from 0 to 512
[  322.502261][ T7986] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  322.622687][ T7986] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1139: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  322.640395][ T7986] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz.1.521: bg 0: block 248: padding at end of block bitmap is not set
[  322.654787][ T7986] loop1: lost filesystem error report for type 5 error -117
[  322.655808][ T7986] Quota error (device loop1): write_blk: dquota write failed
[  322.663225][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  322.663259][    C0] EXT4-fs (loop1): last error at time 2000000109: ext4_validate_block_bitmap:440
[  322.686680][ T7986] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  322.697006][ T7986] EXT4-fs error (device loop1): ext4_acquire_dquot:7024: comm syz.1.521: Failed to acquire dquot type 1
[  322.708246][ T7986] loop1: lost filesystem error report for type 5 error -28
[  322.709889][ T7986] EXT4-fs (loop1): 1 truncate cleaned up
[  322.725191][ T7986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  322.843800][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  322.862553][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  322.871806][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  322.903990][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  322.921714][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  322.955864][   T36] kworker/u8:2: attempt to access beyond end of device
[  322.955864][   T36] loop4: rw=1, sector=77824, nr_sectors = 408 limit=40427
[  323.007779][   T36] kworker/u8:2: attempt to access beyond end of device
[  323.007779][   T36] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  323.049509][ T8006] fuse: Unknown parameter 'group_i00000000000000000000'
[  323.056935][   T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  323.056982][   T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  323.057010][   T36] Workqueue: writeback wb_workfn (flush-7:4)
[  323.057074][   T36] Call Trace:
[  323.057086][   T36]  <TASK>
[  323.057100][   T36]  dump_stack_lvl+0x100/0x190
[  323.057161][   T36]  f2fs_handle_critical_error+0x5d7/0x970
[  323.057211][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  323.057260][   T36]  ? f2fs_build_fault_attr+0x53/0x280
[  323.057318][   T36]  f2fs_write_end_io+0xc3f/0xf30
[  323.057371][   T36]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  323.057428][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  323.057486][   T36]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  323.057535][   T36]  bio_endio+0x7a3/0x910
[  323.057583][   T36]  submit_bio_noacct+0x64c/0x2010
[  323.057651][   T36]  f2fs_submit_write_bio+0x133/0x350
[  323.057700][   T36]  __submit_merged_bio+0x331/0x7b0
[  323.057757][   T36]  __submit_merged_write_cond+0x3fe/0x510
[  323.057817][   T36]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  323.057879][   T36]  ? __pfx___might_resched+0x10/0x10
[  323.057922][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  323.057977][   T36]  f2fs_write_cache_pages+0x21c0/0x2720
[  323.058059][   T36]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  323.058121][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  323.058177][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  323.058223][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  323.058269][   T36]  ? find_held_lock+0x2b/0x80
[  323.058324][   T36]  ? nr_blockdev_pages+0xde/0x120
[  323.058380][   T36]  ? nr_blockdev_pages+0xde/0x120
[  323.058431][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  323.058496][   T36]  ? si_meminfo+0x118/0x230
[  323.058532][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  323.058578][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  323.058686][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  323.058732][   T36]  ? rcu_is_watching+0x12/0xc0
[  323.058782][   T36]  f2fs_write_data_pages+0x799/0x16d0
[  323.058840][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  323.058899][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  323.058978][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  323.059026][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  323.059088][   T36]  do_writepages+0x278/0x600
[  323.059178][   T36]  ? __pfx_do_writepages+0x10/0x10
[  323.059240][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  323.059293][   T36]  __writeback_single_inode+0x164/0x13c0
[  323.059355][   T36]  ? find_held_lock+0x2b/0x80
[  323.059404][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  323.059453][   T36]  ? __pfx___writeback_single_inode+0x10/0x10
[  323.059504][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  323.059550][   T36]  ? do_raw_spin_unlock+0x145/0x1e0
[  323.059593][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  323.059645][   T36]  writeback_sb_inodes+0x766/0x1c70
[  323.059718][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  323.059767][   T36]  ? do_raw_spin_lock+0x128/0x260
[  323.059810][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  323.059912][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  323.059958][   T36]  ? rcu_is_watching+0x12/0xc0
[  323.060001][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  323.060047][   T36]  ? queue_io+0x287/0x550
[  323.060094][   T36]  wb_writeback+0x1c0/0xbe0
[  323.060157][   T36]  ? __pfx_wb_writeback+0x10/0x10
[  323.060219][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  323.060263][   T36]  ? mark_held_locks+0x40/0x70
[  323.060328][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  323.060398][   T36]  wb_workfn+0x142/0xc00
[  323.060452][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  323.060498][   T36]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  323.060562][   T36]  ? __pfx_wb_workfn+0x10/0x10
[  323.060616][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  323.060668][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  323.060718][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  323.060764][   T36]  ? rcu_is_watching+0x12/0xc0
[  323.060814][   T36]  process_one_work+0xa23/0x19a0
[  323.060873][   T36]  ? __pfx_process_one_work+0x10/0x10
[  323.060910][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  323.060972][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  323.061025][   T36]  worker_thread+0x5ef/0xe50
[  323.061075][   T36]  ? __pfx_worker_thread+0x10/0x10
[  323.061115][   T36]  ? kthread+0x13a/0x450
[  323.061146][   T36]  ? __pfx_worker_thread+0x10/0x10
[  323.061182][   T36]  kthread+0x370/0x450
[  323.061213][   T36]  ? __pfx_kthread+0x10/0x10
[  323.061249][   T36]  ret_from_fork+0x754/0xd80
[  323.061287][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  323.061335][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  323.061380][   T36]  ? __switch_to+0x7b4/0x1120
[  323.061425][   T36]  ? __pfx_kthread+0x10/0x10
[  323.061461][   T36]  ret_from_fork_asm+0x1a/0x30
[  323.061527][   T36]  </TASK>
[  323.657793][   T36] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  323.685162][ T7996] lo speed is unknown, defaulting to 1000
[  323.690722][ T7485] 8021q: adding VLAN 0 to HW filter on device batadv0
[  323.713995][ T8007] loop5: detected capacity change from 0 to 8
[  324.047685][ T8007] SQUASHFS error: xz decompression failed, data probably corrupt
[  324.055882][ T8007] SQUASHFS error: Failed to read block 0x108: -5
[  324.062861][ T8007] SQUASHFS error: Unable to read metadata cache entry [106]
[  324.070966][ T8007] SQUASHFS error: Unable to read inode 0x11f
[  324.986841][ T5836] Bluetooth: hci1: command tx timeout
[  325.335577][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  327.073921][ T5836] Bluetooth: hci1: command tx timeout
[  327.948832][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  327.989603][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  328.106254][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  328.114664][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  328.124174][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  328.998116][ T8048] loop5: detected capacity change from 0 to 4096
[  329.151450][ T5836] Bluetooth: hci1: command tx timeout
[  329.622582][ T8053] loop4: detected capacity change from 0 to 32768
[  329.645581][ T8055] netlink: 48 bytes leftover after parsing attributes in process `syz.3.535'.
[  329.696144][ T8053] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  329.758744][ T8053] XFS (loop4): Ending clean mount
[  329.803346][ T8053] XFS (loop4): Quotacheck needed: Please wait.
[  329.917042][ T8053] XFS (loop4): Quotacheck: Done.
[  330.006767][ T5834] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  330.181805][ T5836] Bluetooth: hci0: command tx timeout
[  330.431301][ T8042] lo speed is unknown, defaulting to 1000
[  330.628253][ T8079] loop5: detected capacity change from 0 to 8
[  330.682551][ T8079] SQUASHFS error: xz decompression failed, data probably corrupt
[  330.690576][ T8079] SQUASHFS error: Failed to read block 0x108: -5
[  330.697169][ T8079] SQUASHFS error: Unable to read metadata cache entry [106]
[  330.704587][ T8079] SQUASHFS error: Unable to read inode 0x11f
[  331.317116][ T5836] Bluetooth: hci1: command tx timeout
[  331.621006][ T8080] loop3: detected capacity change from 0 to 2048
[  331.639352][ T7996] chnl_net:caif_netlink_parms(): no params data found
[  331.771769][ T8075] loop4: detected capacity change from 0 to 4096
[  331.793458][ T8075] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  331.833250][ T8080] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  332.281795][ T5836] Bluetooth: hci0: command tx timeout
[  333.357823][ T8075] ntfs3(loop4): ino=19, mi_enum_attr
[  333.401700][ T8075] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  334.012588][ T8100] loop5: detected capacity change from 0 to 512
[  334.091327][ T8100] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  334.270221][ T8100] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1139: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  334.292194][ T8100] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.539: bg 0: block 248: padding at end of block bitmap is not set
[  334.307559][ T8100] loop5: lost filesystem error report for type 5 error -117
[  334.311207][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  334.325364][    C1] EXT4-fs (loop5): last error at time 2000000121: ext4_validate_block_bitmap:440
[  334.355103][ T5836] Bluetooth: hci0: command tx timeout
[  334.373502][ T8100] Quota error (device loop5): write_blk: dquota write failed
[  334.382146][ T8100] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota
[  334.392741][ T8100] EXT4-fs error (device loop5): ext4_acquire_dquot:7024: comm syz.5.539: Failed to acquire dquot type 1
[  334.404218][ T8100] loop5: lost filesystem error report for type 5 error -28
[  334.435690][ T8100] EXT4-fs (loop5): 1 truncate cleaned up
[  334.451460][ T8100] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  335.851013][ T7996] bridge0: port 1(bridge_slave_0) entered blocking state
[  335.928318][ T7996] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.041714][ T7996] bridge_slave_0: entered allmulticast mode
[  336.050046][ T7996] bridge_slave_0: entered promiscuous mode
[  336.675022][ T5836] Bluetooth: hci0: command tx timeout
[  336.684369][ T7996] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.789993][ T7996] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.901847][ T7996] bridge_slave_1: entered allmulticast mode
[  336.961444][ T7996] bridge_slave_1: entered promiscuous mode
[  337.292785][ T5828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  337.961850][ T8124] netlink: 60 bytes leftover after parsing attributes in process `syz.1.547'.
[  338.234901][ T7996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  338.294340][ T7996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  339.555337][ T8124] Dead loop on virtual device ip6_vti0, fix it urgently!
[  339.576186][ T8137] netlink: 48 bytes leftover after parsing attributes in process `syz.5.548'.
[  339.585741][ T8124] Dead loop on virtual device ip6_vti0, fix it urgently!
[  339.609738][ T7996] team0: Port device team_slave_0 added
[  339.626695][ T8124] Dead loop on virtual device ip6_vti0, fix it urgently!
[  339.681121][ T1012] bridge_slave_1: left allmulticast mode
[  339.687006][ T1012] bridge_slave_1: left promiscuous mode
[  339.699669][ T1012] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.718393][ T1012] bridge_slave_0: left allmulticast mode
[  339.729739][ T1012] bridge_slave_0: left promiscuous mode
[  339.740048][ T1012] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.901769][ T8147] fuse: Unknown parameter 'fd0x0000000000000003'
[  340.826790][ T8152] loop3: detected capacity change from 0 to 16
[  340.853190][ T8152] erofs (device loop3): mounted with root inode @ nid 36.
[  340.876997][ T8152] syz.3.555: attempt to access beyond end of device
[  340.876997][ T8152] loop3: rw=524288, sector=256, nr_sectors = 8 limit=16
[  340.900097][ T8152] syz.3.555: attempt to access beyond end of device
[  340.900097][ T8152] loop3: rw=524288, sector=0, nr_sectors = 1024 limit=16
[  340.914371][ T1012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  340.926756][ T1012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  340.940425][ T1012] bond0 (unregistering): Released all slaves
[  340.965749][ T7996] team0: Port device team_slave_1 added
[  340.982249][ T8042] chnl_net:caif_netlink_parms(): no params data found
[  341.092670][ T8152] syz.3.555: attempt to access beyond end of device
[  341.092670][ T8152] loop3: rw=524288, sector=0, nr_sectors = 1792 limit=16
[  341.141519][ T8152] syz.3.555: attempt to access beyond end of device
[  341.141519][ T8152] loop3: rw=0, sector=256, nr_sectors = 8 limit=16
[  341.163137][ T8152] erofs (device loop3): read error -5 @ 1 of nid 89
[  341.327284][   T30] audit: type=1800 audit(2000000128.289:93): pid=8152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.555" name="file2" dev="loop3" ino=89 res=0 errno=0
[  341.995727][ T7996] batman_adv: batadv0: Adding interface: batadv_slave_0
[  342.002959][ T7996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  342.033652][ T7996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  342.081326][   T30] audit: type=1326 audit(2000000129.179:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.5.557" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0fb719c819 code=0x0
[  342.190771][ T1012] hsr_slave_0: left promiscuous mode
[  342.244489][ T1012] hsr_slave_1: left promiscuous mode
[  342.268193][ T1012] batman_adv: batadv0: Removing interface: batadv_slave_0
[  342.540971][ T1012] batman_adv: batadv0: Removing interface: batadv_slave_1
[  342.889296][ T8177] loop3: detected capacity change from 0 to 512
[  343.600982][ T8177] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  344.151021][ T8177] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1139: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  344.166176][ T8177] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz.3.559: bg 0: block 248: padding at end of block bitmap is not set
[  344.180473][ T8177] loop3: lost filesystem error report for type 5 error -117
[  344.181245][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  344.195132][    C0] EXT4-fs (loop3): last error at time 2000000131: ext4_validate_block_bitmap:440
[  344.204767][ T8177] Quota error (device loop3): write_blk: dquota write failed
[  344.212343][ T8177] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  344.222258][ T8177] EXT4-fs error (device loop3): ext4_acquire_dquot:7024: comm syz.3.559: Failed to acquire dquot type 1
[  344.234838][ T8177] loop3: lost filesystem error report for type 5 error -28
[  344.237384][ T8177] EXT4-fs (loop3): 1 truncate cleaned up
[  344.264333][ T8177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  345.944520][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  346.150490][ T8199] fuse: Unknown parameter 'fd0x0000000000000003'
[  346.220018][ T8203] netlink: 60 bytes leftover after parsing attributes in process `syz.3.563'.
[  346.245320][ T1012] team0 (unregistering): Port device team_slave_1 removed
[  348.188508][ T1012] team0 (unregistering): Port device team_slave_0 removed
[  349.021386][ T7996] batman_adv: batadv0: Adding interface: batadv_slave_1
[  349.028391][ T7996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  349.261886][ T7996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  350.085557][ T7996] hsr_slave_0: entered promiscuous mode
[  350.132616][ T7996] hsr_slave_1: entered promiscuous mode
[  350.152270][ T7996] debugfs: 'hsr0' already exists in 'hsr'
[  350.169204][   T30] audit: type=1326 audit(2000000137.269:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8231 comm="syz.1.572" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe3cfb9c819 code=0x0
[  350.192126][ T7996] Cannot create hsr debugfs directory
[  350.273962][ T8234] loop3: detected capacity change from 0 to 2048
[  350.357934][ T8234] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  350.370802][ T8042] bridge0: port 1(bridge_slave_0) entered blocking state
[  350.471757][ T8042] bridge0: port 1(bridge_slave_0) entered disabled state
[  350.588709][ T8042] bridge_slave_0: entered allmulticast mode
[  350.942235][ T8042] bridge_slave_0: entered promiscuous mode
[  350.969382][ T8042] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.011113][ T8042] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.043992][ T8042] bridge_slave_1: entered allmulticast mode
[  351.124729][ T8042] bridge_slave_1: entered promiscuous mode
[  352.305026][ T8042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  352.347961][ T8258] netlink: 60 bytes leftover after parsing attributes in process `syz.1.579'.
[  352.571418][ T8042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  353.350691][ T8042] team0: Port device team_slave_0 added
[  353.383325][ T8267] loop4: detected capacity change from 0 to 32768
[  353.458323][ T8271] netlink: 48 bytes leftover after parsing attributes in process `syz.5.567'.
[  353.483961][ T8267] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  353.485211][ T8042] team0: Port device team_slave_1 added
[  353.956022][ T8267] XFS (loop4): Ending clean mount
[  353.971559][ T8267] XFS (loop4): Quotacheck needed: Please wait.
[  354.156622][ T8267] XFS (loop4): Quotacheck: Done.
[  354.248516][ T5834] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  354.485091][   T30] audit: type=1326 audit(2000000141.579:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8288 comm="syz.5.586" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0fb719c819 code=0x0
[  354.523306][ T8042] batman_adv: batadv0: Adding interface: batadv_slave_0
[  354.532253][ T8042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  354.669820][ T8042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  354.783498][ T8298] loop3: detected capacity change from 0 to 8
[  355.292050][ T8298] SQUASHFS error: xz decompression failed, data probably corrupt
[  355.300211][ T8298] SQUASHFS error: Failed to read block 0x108: -5
[  355.308466][ T8298] SQUASHFS error: Unable to read metadata cache entry [106]
[  355.316449][ T8298] SQUASHFS error: Unable to read inode 0x11f
[  355.734492][ T8042] batman_adv: batadv0: Adding interface: batadv_slave_1
[  355.743464][ T8042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  355.769517][ T8042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  357.122492][ T8293] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.678946][ T8042] hsr_slave_0: entered promiscuous mode
[  357.713073][ T8042] hsr_slave_1: entered promiscuous mode
[  357.719849][ T8042] debugfs: 'hsr0' already exists in 'hsr'
[  357.727424][ T8042] Cannot create hsr debugfs directory
[  357.784539][ T8317] bridge_slave_0: left allmulticast mode
[  357.811253][ T8317] bridge_slave_0: left promiscuous mode
[  357.818677][ T8317] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.880000][ T8317] bridge_slave_1: left allmulticast mode
[  357.930526][ T8317] bridge_slave_1: left promiscuous mode
[  357.951096][ T8317] bridge0: port 2(bridge_slave_1) entered disabled state
[  358.015600][ T8317] bond0: (slave bond_slave_0): Releasing backup interface
[  358.270214][ T8317] bond0: (slave bond_slave_1): Releasing backup interface
[  358.288433][ T8317] team0: Port device team_slave_0 removed
[  358.299056][ T8317] team0: Port device team_slave_1 removed
[  358.308186][ T8317] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  358.315811][ T8317] batman_adv: batadv0: Removing interface: batadv_slave_0
[  358.342902][ T8317] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  358.351565][ T8317] batman_adv: batadv0: Removing interface: batadv_slave_1
[  358.444676][ T8317] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  358.965755][ T8319] team0: Mode changed to "loadbalance"
[  359.044161][ T8293] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  359.286022][ T8293] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.045856][   T30] audit: type=1326 audit(2000000148.149:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.3.599" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f217b19c819 code=0x0
[  361.069620][ T8293] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.972013][ T8372] loop5: detected capacity change from 0 to 128
[  363.798503][ T8390] binder: 8388:8390 ioctl c0306201 0 returned -14
[  363.842210][   T77] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  363.913697][   T77] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  364.843314][ T5975] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  365.327356][ T5973] bridge_slave_1: left allmulticast mode
[  365.448945][ T5973] bridge_slave_1: left promiscuous mode
[  365.455187][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state
[  365.544696][ T5973] bridge_slave_0: left allmulticast mode
[  365.560937][ T5973] bridge_slave_0: left promiscuous mode
[  365.577767][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.744325][ T5973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  367.769712][ T5973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  367.820331][ T5973] bond0 (unregistering): Released all slaves
[  367.855136][   T58] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  367.993872][ T7996] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  368.088997][ T7996] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  368.144152][ T7996] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  368.188965][ T7996] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  368.276116][ T5973] hsr_slave_0: left promiscuous mode
[  368.324746][ T5973] hsr_slave_1: left promiscuous mode
[  368.351063][ T5973] batman_adv: batadv0: Removing interface: batadv_slave_0
[  368.403526][ T5973] batman_adv: batadv0: Removing interface: batadv_slave_1
[  368.616020][ T8447] IPVS: length: 218 != 24
[  368.830332][ T5973] team0 (unregistering): Port device team_slave_1 removed
[  368.857827][ T5973] team0 (unregistering): Port device team_slave_0 removed
[  370.293174][ T7996] 8021q: adding VLAN 0 to HW filter on device bond0
[  370.390539][ T7996] 8021q: adding VLAN 0 to HW filter on device team0
[  370.550524][ T7416] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.557785][ T7416] bridge0: port 1(bridge_slave_0) entered forwarding state
[  370.590768][ T7416] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.598034][ T7416] bridge0: port 2(bridge_slave_1) entered forwarding state
[  370.617928][ T8042] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  370.886450][ T8042] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  370.949338][ T8042] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  371.017130][ T8042] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  371.792955][ T7996] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  372.539047][ T8042] 8021q: adding VLAN 0 to HW filter on device bond0
[  374.057040][ T8042] 8021q: adding VLAN 0 to HW filter on device team0
[  374.117922][ T7416] bridge0: port 1(bridge_slave_0) entered blocking state
[  374.125156][ T7416] bridge0: port 1(bridge_slave_0) entered forwarding state
[  374.153101][ T8529] IPVS: length: 218 != 24
[  374.254701][   T77] bridge0: port 2(bridge_slave_1) entered blocking state
[  374.262000][   T77] bridge0: port 2(bridge_slave_1) entered forwarding state
[  374.519409][ T7996] 8021q: adding VLAN 0 to HW filter on device batadv0
[  376.819893][ T8042] 8021q: adding VLAN 0 to HW filter on device batadv0
[  377.049349][ T8588] loop4: detected capacity change from 0 to 2048
[  377.108800][ T8588] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  378.191896][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  378.198277][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  380.200895][ T8611] IPVS: length: 218 != 24
[  381.856615][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  381.867248][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  382.201034][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  382.239474][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  382.251995][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  382.296218][ T8042] veth0_vlan: entered promiscuous mode
[  382.350517][ T8042] veth1_vlan: entered promiscuous mode
[  382.425644][ T8645] lo speed is unknown, defaulting to 1000
[  382.450771][ T8042] veth0_macvtap: entered promiscuous mode
[  383.774555][ T8042] veth1_macvtap: entered promiscuous mode
[  384.283931][ T8042] batman_adv: batadv0: Interface activated: batadv_slave_0
[  384.401479][ T5836] Bluetooth: hci1: command tx timeout
[  384.689511][ T8042] batman_adv: batadv0: Interface activated: batadv_slave_1
[  384.934753][   T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  384.960664][   T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  385.000324][   T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  385.028322][ T8672] loop1: detected capacity change from 0 to 2048
[  385.118668][ T8672] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  385.271632][   T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  386.406609][ T8645] chnl_net:caif_netlink_parms(): no params data found
[  386.421311][ T5836] Bluetooth: hci1: command tx timeout
[  386.574117][ T8685] loop4: detected capacity change from 0 to 2048
[  386.978857][ T8685] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  387.450410][   T13] bridge_slave_1: left allmulticast mode
[  387.577107][   T13] bridge_slave_1: left promiscuous mode
[  387.703792][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  388.651240][ T5836] Bluetooth: hci1: command tx timeout
[  388.658450][   T13] bridge_slave_0: left allmulticast mode
[  388.691247][   T13] bridge_slave_0: left promiscuous mode
[  388.727938][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  388.795743][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  388.806488][ T5833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  388.817228][ T5833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  388.828418][ T5833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  388.836255][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  389.078623][ T8710] loop1: detected capacity change from 0 to 2048
[  389.121683][ T8710] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  390.661438][ T5836] Bluetooth: hci1: command tx timeout
[  390.901530][ T5836] Bluetooth: hci6: command tx timeout
[  390.910002][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  390.960019][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  390.985308][   T13] bond0 (unregistering): Released all slaves
[  391.385529][   T13] hsr_slave_0: left promiscuous mode
[  391.431295][   T13] hsr_slave_1: left promiscuous mode
[  391.447896][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  391.479481][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  392.010610][   T13] team0 (unregistering): Port device team_slave_1 removed
[  392.029164][   T13] team0 (unregistering): Port device team_slave_0 removed
[  392.214172][ T8645] bridge0: port 1(bridge_slave_0) entered blocking state
[  392.221888][ T8645] bridge0: port 1(bridge_slave_0) entered disabled state
[  392.229471][ T8645] bridge_slave_0: entered allmulticast mode
[  392.238374][ T8645] bridge_slave_0: entered promiscuous mode
[  392.285928][ T8645] bridge0: port 2(bridge_slave_1) entered blocking state
[  392.326618][ T8645] bridge0: port 2(bridge_slave_1) entered disabled state
[  392.348212][ T8645] bridge_slave_1: entered allmulticast mode
[  392.366752][ T8645] bridge_slave_1: entered promiscuous mode
[  392.468082][ T8738] fuse: Unknown parameter 'group_i00000000000000000000'
[  392.486459][ T8703] lo speed is unknown, defaulting to 1000
[  392.584710][ T8645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  392.981791][ T5836] Bluetooth: hci6: command tx timeout
[  393.202543][ T8645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  394.058357][ T8645] team0: Port device team_slave_0 added
[  394.094964][ T8645] team0: Port device team_slave_1 added
[  394.355437][ T8645] batman_adv: batadv0: Adding interface: batadv_slave_0
[  394.381987][ T8645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  394.469591][ T8645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  394.564964][ T8645] batman_adv: batadv0: Adding interface: batadv_slave_1
[  394.589824][ T8645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  394.885625][ T8645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  395.072486][ T5836] Bluetooth: hci6: command tx timeout
[  395.428191][ T8787] loop4: detected capacity change from 0 to 2048
[  395.467954][ T8787] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  395.482907][   T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.107048][   T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.116567][ T8807] fuse: Unknown parameter 'group_i00000000000000000000'
[  397.141781][ T5836] Bluetooth: hci6: command tx timeout
[  397.654896][ T8645] hsr_slave_0: entered promiscuous mode
[  397.783444][ T8645] hsr_slave_1: entered promiscuous mode
[  398.136958][ T8645] debugfs: 'hsr0' already exists in 'hsr'
[  398.143261][ T8645] Cannot create hsr debugfs directory
[  398.344956][   T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.531597][ T8703] chnl_net:caif_netlink_parms(): no params data found
[  399.558277][   T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.182613][ T8847] loop5: detected capacity change from 0 to 512
[  400.868471][ T8848] loop3: detected capacity change from 0 to 8
[  401.016294][ T8847] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  401.217006][ T8848] SQUASHFS error: xz decompression failed, data probably corrupt
[  401.225231][ T8848] SQUASHFS error: Failed to read block 0x108: -5
[  401.231782][ T8848] SQUASHFS error: Unable to read metadata cache entry [106]
[  401.239171][ T8848] SQUASHFS error: Unable to read inode 0x11f
[  401.499124][ T8847] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1139: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  401.530180][ T8847] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.701: bg 0: block 248: padding at end of block bitmap is not set
[  401.545335][ T8847] loop5: lost filesystem error report for type 5 error -117
[  401.561211][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  401.575058][    C1] EXT4-fs (loop5): last error at time 2000000188: ext4_validate_block_bitmap:440
[  401.725061][ T8847] Quota error (device loop5): write_blk: dquota write failed
[  401.736207][ T8847] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota
[  401.747447][ T8847] EXT4-fs error (device loop5): ext4_acquire_dquot:7024: comm syz.5.701: Failed to acquire dquot type 1
[  401.758684][ T8847] loop5: lost filesystem error report for type 5 error -28
[  401.761209][ T8847] EXT4-fs (loop5): 1 truncate cleaned up
[  401.778304][ T8847] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  401.854501][ T8703] bridge0: port 1(bridge_slave_0) entered blocking state
[  401.862063][ T8703] bridge0: port 1(bridge_slave_0) entered disabled state
[  401.869394][ T8703] bridge_slave_0: entered allmulticast mode
[  401.878399][ T8703] bridge_slave_0: entered promiscuous mode
[  401.965549][ T8703] bridge0: port 2(bridge_slave_1) entered blocking state
[  401.973028][ T8703] bridge0: port 2(bridge_slave_1) entered disabled state
[  401.980336][ T8703] bridge_slave_1: entered allmulticast mode
[  402.037092][ T8703] bridge_slave_1: entered promiscuous mode
[  402.281147][ T8703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  402.378114][ T8703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  402.818672][ T8703] team0: Port device team_slave_0 added
[  403.293880][ T5828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  403.387568][ T8703] team0: Port device team_slave_1 added
[  404.568674][   T13] bridge_slave_1: left allmulticast mode
[  404.586595][   T13] bridge_slave_1: left promiscuous mode
[  404.611673][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  404.700884][   T13] bridge_slave_0: left allmulticast mode
[  404.716474][   T13] bridge_slave_0: left promiscuous mode
[  404.740565][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  406.086879][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  406.096655][  T790] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  406.144268][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  406.165794][   T13] bond0 (unregistering): Released all slaves
[  406.231821][ T8703] batman_adv: batadv0: Adding interface: batadv_slave_0
[  406.239239][ T8703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  406.265524][  T790] usb 6-1: Using ep0 maxpacket: 16
[  406.269167][  T790] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  406.271604][ T8703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  406.346954][  T790] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  406.375012][  T790] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.411724][  T790] usb 6-1: Product: syz
[  406.416067][  T790] usb 6-1: Manufacturer: syz
[  406.420686][  T790] usb 6-1: SerialNumber: syz
[  406.452462][  T790] usb 6-1: config 0 descriptor??
[  406.480129][  T790] hub 6-1:0.0: bad descriptor, ignoring hub
[  406.491016][  T790] hub 6-1:0.0: probe with driver hub failed with error -5
[  406.532693][  T790] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input5
[  406.550277][ T8703] batman_adv: batadv0: Adding interface: batadv_slave_1
[  406.565343][ T8703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  406.613276][ T8703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  406.876989][   T13] hsr_slave_0: left promiscuous mode
[  406.886416][   T13] hsr_slave_1: left promiscuous mode
[  406.931547][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  406.949483][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  406.996730][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  407.015589][  T790] usb 6-1: USB disconnect, device number 4
[  407.040301][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  407.087539][   T13] veth1_macvtap: left promiscuous mode
[  407.093276][   T13] veth0_macvtap: left promiscuous mode
[  407.098845][   T13] veth1_vlan: left promiscuous mode
[  407.105329][   T13] veth0_vlan: left promiscuous mode
[  407.384752][ T8919] loop1: detected capacity change from 0 to 512
[  407.466191][ T8919] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  407.559363][ T8919] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1139: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  407.589136][ T8919] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz.1.718: bg 0: block 248: padding at end of block bitmap is not set
[  407.603623][ T8919] loop1: lost filesystem error report for type 5 error -117
[  407.608163][ T8919] Quota error (device loop1): write_blk: dquota write failed
[  407.615627][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  407.615663][    C0] EXT4-fs (loop1): last error at time 2000000194: ext4_validate_block_bitmap:440
[  407.642252][ T8919] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  407.652739][ T8919] EXT4-fs error (device loop1): ext4_acquire_dquot:7024: comm syz.1.718: Failed to acquire dquot type 1
[  407.664014][ T8919] loop1: lost filesystem error report for type 5 error -28
[  407.718971][ T8919] EXT4-fs (loop1): 1 truncate cleaned up
[  407.752431][ T8919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  407.913269][ T8924] IPVS: length: 218 != 24
[  408.007875][ T8927] loop5: detected capacity change from 0 to 2048
[  408.045766][ T8927] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  408.235893][   T13] team0 (unregistering): Port device team_slave_1 removed
[  408.266902][   T13] team0 (unregistering): Port device team_slave_0 removed
[  409.796735][ T8703] hsr_slave_0: entered promiscuous mode
[  409.819191][ T8703] hsr_slave_1: entered promiscuous mode
[  409.841744][ T8703] debugfs: 'hsr0' already exists in 'hsr'
[  409.853838][ T8703] Cannot create hsr debugfs directory
[  410.055382][ T8939] fuse: Unknown parameter 'group_id00000000000000000000'
[  410.113836][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  411.705929][ T8645] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  411.774476][ T8645] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  411.901580][ T8645] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  411.979873][ T8645] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  414.070169][ T8988] loop1: detected capacity change from 0 to 2048
[  414.169251][ T8988] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  414.225960][ T8992] warning: `syz.5.735' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  415.319449][ T8645] 8021q: adding VLAN 0 to HW filter on device bond0
[  415.413493][ T8645] 8021q: adding VLAN 0 to HW filter on device team0
[  415.420716][ T9004] fuse: Unknown parameter 'group_id00000000000000000000'
[  415.450205][ T7416] bridge0: port 1(bridge_slave_0) entered blocking state
[  415.457484][ T7416] bridge0: port 1(bridge_slave_0) entered forwarding state
[  415.538752][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  415.546007][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  416.065735][ T8703] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  416.233116][ T8703] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  416.271929][ T8703] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  416.329349][ T8703] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  416.571750][ T9027] loop5: detected capacity change from 0 to 2048
[  416.582958][ T9027] ext3: Unknown parameter 'dont_measure'
[  416.655282][ T9027] overlayfs: missing 'lowerdir'
[  418.225601][ T8703] 8021q: adding VLAN 0 to HW filter on device bond0
[  418.287305][ T8703] 8021q: adding VLAN 0 to HW filter on device team0
[  418.313636][ T7416] bridge0: port 1(bridge_slave_0) entered blocking state
[  418.321031][ T7416] bridge0: port 1(bridge_slave_0) entered forwarding state
[  418.360540][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  418.367786][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  418.579005][ T8645] 8021q: adding VLAN 0 to HW filter on device batadv0
[  419.029056][ T9056] bridge_slave_0: left allmulticast mode
[  419.063586][ T9056] bridge_slave_0: left promiscuous mode
[  419.082676][ T9056] bridge0: port 1(bridge_slave_0) entered disabled state
[  419.197965][ T9044] loop1: detected capacity change from 0 to 32768
[  419.245383][ T9056] bridge_slave_1: left allmulticast mode
[  419.253193][ T9044] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  419.304169][ T9056] bridge_slave_1: left promiscuous mode
[  419.339016][ T9056] bridge0: port 2(bridge_slave_1) entered disabled state
[  419.348355][ T9044] XFS (loop1): Ending clean mount
[  419.422749][ T9044] XFS (loop1): Quotacheck needed: Please wait.
[  419.473069][ T9056] bond0: (slave bond_slave_0): Releasing backup interface
[  419.491425][ T9056] bond0: (slave bond_slave_1): Releasing backup interface
[  419.559704][ T9044] XFS (loop1): Quotacheck: Done.
[  419.592334][ T9056] team0: Port device team_slave_0 removed
[  419.655618][ T9056] team0: Port device team_slave_1 removed
[  419.678523][ T9056] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  419.688748][ T9056] batman_adv: batadv0: Removing interface: batadv_slave_0
[  419.715336][ T9056] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  419.730131][ T9056] batman_adv: batadv0: Removing interface: batadv_slave_1
[  419.739485][ T5829] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  419.769492][ T9075] fuse: Unknown parameter 'group_id00000000000000000000'
[  419.774909][ T9056] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  419.962827][ T9058] team0: Mode changed to "loadbalance"
[  420.078883][ T8703] 8021q: adding VLAN 0 to HW filter on device batadv0
[  420.828330][ T8645] veth0_vlan: entered promiscuous mode
[  420.932346][ T8645] veth1_vlan: entered promiscuous mode
[  421.086443][ T8645] veth0_macvtap: entered promiscuous mode
[  421.197664][ T8645] veth1_macvtap: entered promiscuous mode
[  421.610423][ T8645] batman_adv: batadv0: Interface activated: batadv_slave_0
[  421.690920][ T8645] batman_adv: batadv0: Interface activated: batadv_slave_1
[  421.841536][ T5975] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  421.925816][ T5975] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  421.974073][ T5975] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  422.013370][ T5975] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  423.510519][ T8703] veth0_vlan: entered promiscuous mode
[  423.536147][ T8352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  423.585137][ T8352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  423.698723][ T8703] veth1_vlan: entered promiscuous mode
[  423.799199][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  423.850905][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  424.015895][ T8703] veth0_macvtap: entered promiscuous mode
[  424.065084][ T8703] veth1_macvtap: entered promiscuous mode
[  424.170610][ T8703] batman_adv: batadv0: Interface activated: batadv_slave_0
[  424.258317][ T8703] batman_adv: batadv0: Interface activated: batadv_slave_1
[  424.331533][ T5975] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  424.340489][ T5975] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  424.409721][ T5975] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  424.461118][ T5975] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  425.485574][ T9143] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  426.329632][ T5973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  426.357309][ T5973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  426.400897][ T9157] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  426.554974][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  426.583541][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  426.721083][ T9162] netlink: 60 bytes leftover after parsing attributes in process `syz.5.774'.
[  426.821458][ T9165] overlayfs: failed to resolve './file1': -2
[  429.084519][   T30] audit: type=1326 audit(2000000216.169:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9178 comm="syz.6.778" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcb24d9c819 code=0x0
[  431.947128][ T9229] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  433.619403][ T9239] input: syz1 as /devices/virtual/input/input6
[  435.294811][ T9246] loop5: detected capacity change from 0 to 131072
[  435.306097][ T9246] F2FS-fs (loop5): invalid crc value
[  435.434676][ T9246] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  435.453729][ T9246] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  435.546980][ T9254] overlayfs: failed to resolve './file1': -2
[  437.741907][ T9276] fuse: Unknown parameter 'use00000000000000000000'
[  438.010117][ T9282] loop3: detected capacity change from 0 to 2048
[  438.057375][ T9282] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  439.386562][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  439.394040][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  439.583858][ T9293] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  442.390572][ T9324] loop4: detected capacity change from 0 to 8
[  442.442324][ T9324] SQUASHFS error: xz decompression failed, data probably corrupt
[  442.451655][ T9324] SQUASHFS error: Failed to read block 0x108: -5
[  442.458069][ T9324] SQUASHFS error: Unable to read metadata cache entry [106]
[  442.466167][ T9324] SQUASHFS error: Unable to read inode 0x11f
[  443.500483][ T9326] overlayfs: failed to resolve './file1': -2
[  444.712413][ T9337] fuse: Unknown parameter 'user_i00000000000000000000'
[  445.246790][ T9351] loop6: detected capacity change from 0 to 2048
[  445.322302][ T9351] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  446.943141][ T9365] netlink: 60 bytes leftover after parsing attributes in process `syz.5.823'.
[  447.283609][ T5906] IPVS: starting estimator thread 0...
[  447.443080][ T9372] IPVS: using max 23 ests per chain, 55200 per kthread
[  448.959686][ T9396] fuse: Unknown parameter 'user_i00000000000000000000'
[  449.042177][ T9397] loop6: detected capacity change from 0 to 1024
[  449.079975][ T9397] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  450.579340][ T9425] loop1: detected capacity change from 0 to 8
[  450.602206][ T9425] SQUASHFS error: xz decompression failed, data probably corrupt
[  450.610013][ T9425] SQUASHFS error: Failed to read block 0x108: -5
[  450.616435][ T9425] SQUASHFS error: Unable to read metadata cache entry [106]
[  450.623794][ T9425] SQUASHFS error: Unable to read inode 0x11f
[  453.257209][ T9445] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  454.022693][ T8352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.180124][ T9470] fuse: Unknown parameter 'user_i00000000000000000000'
[  455.530686][ T9476] fuse: Bad value for 'fd'
[  456.805428][ T9483] loop7: detected capacity change from 0 to 131072
[  456.993492][ T9483] F2FS-fs (loop7): invalid crc value
[  457.090222][ T9483] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  457.105292][ T9483] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  457.377506][ T9495] fuse: Unknown parameter 'use00000000000000000000'
[  457.393001][ T9497] overlayfs: failed to resolve './file0': -2
[  458.034163][ T9501] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  458.193732][ T9474] loop3: detected capacity change from 0 to 32768
[  458.209529][ T5906] IPVS: starting estimator thread 0...
[  458.233514][ T9474] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.849 (9474)
[  458.341342][ T9504] IPVS: using max 23 ests per chain, 55200 per kthread
[  459.005546][ T9515] fuse: Unknown parameter 'user_id00000000000000000000'
[  459.226161][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.823653][ T9523] loop4: detected capacity change from 0 to 2048
[  459.907466][ T9523] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  460.312018][ T9532] fuse: Bad value for 'fd'
[  462.049193][ T9544] loop5: detected capacity change from 0 to 131072
[  462.098654][ T9544] F2FS-fs (loop5): invalid crc value
[  462.369750][ T9544] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  462.464141][ T9544] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  463.195567][ T9559] fuse: Unknown parameter 'use00000000000000000000'
[  463.261084][ T9560] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  463.613420][ T9563] loop7: detected capacity change from 0 to 40427
[  463.640136][ T9563] F2FS-fs (loop7): invalid crc value
[  463.728784][ T9563] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  463.740724][ T9563] F2FS-fs (loop7): Start checkpoint disabled!
[  463.754562][ T9563] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0
[  463.782222][ T9563] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  464.772673][   T36] kworker/u8:2: attempt to access beyond end of device
[  464.772673][   T36] loop7: rw=1, sector=77824, nr_sectors = 408 limit=40427
[  464.836678][ T9577] overlayfs: failed to resolve './file0': -2
[  464.842533][ T9576] fuse: Unknown parameter 'user_id00000000000000000000'
[  464.845328][   T36] kworker/u8:2: attempt to access beyond end of device
[  464.845328][   T36] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  464.931693][   T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  464.931743][   T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  464.931769][   T36] Workqueue: writeback wb_workfn (flush-7:7)
[  464.931833][   T36] Call Trace:
[  464.931845][   T36]  <TASK>
[  464.931858][   T36]  dump_stack_lvl+0x100/0x190
[  464.931919][   T36]  f2fs_handle_critical_error+0x5d7/0x970
[  464.931968][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.932015][   T36]  ? f2fs_build_fault_attr+0x53/0x280
[  464.932063][   T36]  f2fs_write_end_io+0xc3f/0xf30
[  464.932117][   T36]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  464.932172][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.932228][   T36]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  464.932277][   T36]  bio_endio+0x7a3/0x910
[  464.932323][   T36]  submit_bio_noacct+0x64c/0x2010
[  464.932391][   T36]  f2fs_submit_write_bio+0x133/0x350
[  464.932438][   T36]  __submit_merged_bio+0x331/0x7b0
[  464.932498][   T36]  __submit_merged_write_cond+0x3fe/0x510
[  464.932558][   T36]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  464.932619][   T36]  ? __pfx___might_resched+0x10/0x10
[  464.932661][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.932714][   T36]  f2fs_write_cache_pages+0x21c0/0x2720
[  464.932796][   T36]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  464.932852][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.932908][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.932955][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.933001][   T36]  ? find_held_lock+0x2b/0x80
[  464.933049][   T36]  ? nr_blockdev_pages+0xde/0x120
[  464.933102][   T36]  ? nr_blockdev_pages+0xde/0x120
[  464.933153][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.933219][   T36]  ? si_meminfo+0x118/0x230
[  464.933255][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.933301][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.933413][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.933464][   T36]  ? rcu_is_watching+0x12/0xc0
[  464.933513][   T36]  f2fs_write_data_pages+0x799/0x16d0
[  464.933569][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.933628][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  464.933700][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.933747][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  464.933809][   T36]  do_writepages+0x278/0x600
[  464.933875][   T36]  ? __pfx_do_writepages+0x10/0x10
[  464.933937][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.933990][   T36]  __writeback_single_inode+0x164/0x13c0
[  464.934042][   T36]  ? find_held_lock+0x2b/0x80
[  464.934092][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.934141][   T36]  ? __pfx___writeback_single_inode+0x10/0x10
[  464.934190][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.934236][   T36]  ? do_raw_spin_unlock+0x145/0x1e0
[  464.934278][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.934330][   T36]  writeback_sb_inodes+0x766/0x1c70
[  464.934403][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  464.934456][   T36]  ? do_raw_spin_lock+0x128/0x260
[  464.934498][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.934601][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.934646][   T36]  ? rcu_is_watching+0x12/0xc0
[  464.934688][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.934734][   T36]  ? queue_io+0x287/0x550
[  464.934781][   T36]  wb_writeback+0x1c0/0xbe0
[  464.934844][   T36]  ? __pfx_wb_writeback+0x10/0x10
[  464.934906][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.934952][   T36]  ? mark_held_locks+0x40/0x70
[  464.935010][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  464.935077][   T36]  wb_workfn+0x142/0xc00
[  464.935132][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.935177][   T36]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  464.935241][   T36]  ? __pfx_wb_workfn+0x10/0x10
[  464.935294][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.935344][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.935394][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.935439][   T36]  ? rcu_is_watching+0x12/0xc0
[  464.935495][   T36]  process_one_work+0xa23/0x19a0
[  464.935555][   T36]  ? __pfx_process_one_work+0x10/0x10
[  464.935592][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.935653][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.935706][   T36]  worker_thread+0x5ef/0xe50
[  464.935756][   T36]  ? __pfx_worker_thread+0x10/0x10
[  464.935797][   T36]  ? kthread+0x13a/0x450
[  464.935828][   T36]  ? __pfx_worker_thread+0x10/0x10
[  464.935864][   T36]  kthread+0x370/0x450
[  464.935896][   T36]  ? __pfx_kthread+0x10/0x10
[  464.935933][   T36]  ret_from_fork+0x754/0xd80
[  464.935971][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  464.936009][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  464.936055][   T36]  ? __switch_to+0x7b4/0x1120
[  464.936100][   T36]  ? __pfx_kthread+0x10/0x10
[  464.936136][   T36]  ret_from_fork_asm+0x1a/0x30
[  464.936204][   T36]  </TASK>
[  464.936218][   T36] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  465.109037][ T1012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  469.610944][ T9613] fuse: Unknown parameter 'user_i00000000000000000000'
[  470.808964][ T9628] fuse: Unknown parameter 'user_id00000000000000000000'
[  470.963025][ T9631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.896'.
[  471.651661][ T9623] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  472.022886][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.572990][ T9674] loop7: detected capacity change from 0 to 8
[  474.625966][ T9674] SQUASHFS error: xz decompression failed, data probably corrupt
[  474.634303][ T9674] SQUASHFS error: Failed to read block 0x108: -5
[  474.640673][ T9674] SQUASHFS error: Unable to read metadata cache entry [106]
[  474.648151][ T9674] SQUASHFS error: Unable to read inode 0x11f
[  475.384362][ T9678] fuse: Unknown parameter 'user_i00000000000000000000'
[  476.330630][ T9685] overlayfs: failed to resolve './file0': -2
[  478.784768][ T5973] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.023155][ T9706] bridge_slave_0: left allmulticast mode
[  479.036115][ T9706] bridge_slave_0: left promiscuous mode
[  479.042948][ T9706] bridge0: port 1(bridge_slave_0) entered disabled state
[  479.067716][ T9706] bridge_slave_1: left allmulticast mode
[  479.082502][ T9706] bridge_slave_1: left promiscuous mode
[  479.088356][ T9706] bridge0: port 2(bridge_slave_1) entered disabled state
[  479.121915][ T9706] bond0: (slave bond_slave_0): Releasing backup interface
[  479.169959][ T9706] bond0: (slave bond_slave_1): Releasing backup interface
[  479.205114][ T9706] team0: Port device team_slave_0 removed
[  479.243371][ T9706] team0: Port device team_slave_1 removed
[  479.250592][ T9706] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  479.281517][ T9706] batman_adv: batadv0: Removing interface: batadv_slave_0
[  479.326291][ T9706] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  479.335494][ T9706] batman_adv: batadv0: Removing interface: batadv_slave_1
[  479.360199][ T9706] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  479.439398][ T9707] team0: Mode changed to "loadbalance"
[  479.578819][ T5973] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.666037][ T9721] fuse: Unknown parameter 'user_i00000000000000000000'
[  479.733151][ T9711] loop5: detected capacity change from 0 to 32768
[  479.805167][ T9711] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  479.827918][ T5973] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.850574][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  479.862995][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  479.872808][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  479.905800][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  479.910344][ T9711] XFS (loop5): Ending clean mount
[  479.922387][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  479.962696][ T9711] XFS (loop5): Quotacheck needed: Please wait.
[  480.038101][ T9735] bridge_slave_0: left allmulticast mode
[  480.108281][ T9711] XFS (loop5): Quotacheck: Done.
[  480.152124][ T9735] bridge_slave_0: left promiscuous mode
[  480.192068][ T9735] bridge0: port 1(bridge_slave_0) entered disabled state
[  480.300853][ T9740] fuse: Bad value for 'fd'
[  480.310740][ T9735] bridge_slave_1: left allmulticast mode
[  480.374031][ T9735] bridge_slave_1: left promiscuous mode
[  480.379917][ T9735] bridge0: port 2(bridge_slave_1) entered disabled state
[  480.380356][ T9744] overlayfs: failed to resolve './file0': -2
[  480.400275][ T5828] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  480.460243][ T9735] bond0: (slave bond_slave_0): Releasing backup interface
[  480.540431][ T9735] bond0: (slave bond_slave_1): Releasing backup interface
[  480.616614][ T9735] team0: Port device team_slave_0 removed
[  480.662717][ T9735] team0: Port device team_slave_1 removed
[  480.689895][ T9735] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  480.698038][ T9735] batman_adv: batadv0: Removing interface: batadv_slave_0
[  480.715171][ T9735] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  480.723034][ T9735] batman_adv: batadv0: Removing interface: batadv_slave_1
[  480.734415][ T9735] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  480.829020][ T5973] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.956368][ T9736] team0: Mode changed to "loadbalance"
[  481.247548][ T9732] lo speed is unknown, defaulting to 1000
[  482.022965][ T5836] Bluetooth: hci0: command tx timeout
[  482.445960][ T9758] fuse: Bad value for 'fd'
[  482.801662][ T9763] loop6: detected capacity change from 0 to 164
[  483.681870][ T9763] Unable to read rock-ridge attributes
[  483.882691][ T9773] Unable to read rock-ridge attributes
[  483.896898][ T9770] fuse: Unknown parameter 'user_id00000000000000000000'
[  484.184176][ T5836] Bluetooth: hci0: command tx timeout
[  484.362533][ T9773] iso9660: Corrupted directory entry in block 4 of inode 1792
[  485.050590][ T5973] bond0 (unregistering): Released all slaves
[  485.371615][ T9785] loop6: detected capacity change from 0 to 40427
[  485.382372][ T9785] F2FS-fs (loop6): invalid crc value
[  485.446392][ T9785] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  485.463059][ T9785] F2FS-fs (loop6): Start checkpoint disabled!
[  485.474235][ T9785] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0
[  485.489686][ T9785] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  485.736249][  T994] kworker/u8:7: attempt to access beyond end of device
[  485.736249][  T994] loop6: rw=1, sector=77824, nr_sectors = 408 limit=40427
[  485.843439][  T994] kworker/u8:7: attempt to access beyond end of device
[  485.843439][  T994] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  485.861796][  T994] CPU: 1 UID: 0 PID: 994 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) 
[  485.861847][  T994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  485.861872][  T994] Workqueue: writeback wb_workfn (flush-7:6)
[  485.861937][  T994] Call Trace:
[  485.861948][  T994]  <TASK>
[  485.861963][  T994]  dump_stack_lvl+0x100/0x190
[  485.862030][  T994]  f2fs_handle_critical_error+0x5d7/0x970
[  485.862080][  T994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  485.862128][  T994]  ? f2fs_build_fault_attr+0x53/0x280
[  485.862178][  T994]  f2fs_write_end_io+0xc3f/0xf30
[  485.862234][  T994]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  485.862293][  T994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  485.862351][  T994]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  485.862402][  T994]  bio_endio+0x7a3/0x910
[  485.862449][  T994]  submit_bio_noacct+0x64c/0x2010
[  485.862521][  T994]  f2fs_submit_write_bio+0x133/0x350
[  485.862569][  T994]  __submit_merged_bio+0x331/0x7b0
[  485.862628][  T994]  __submit_merged_write_cond+0x3fe/0x510
[  485.862693][  T994]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  485.862764][  T994]  ? __pfx___might_resched+0x10/0x10
[  485.862806][  T994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  485.862864][  T994]  f2fs_write_cache_pages+0x21c0/0x2720
[  485.862951][  T994]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  485.863010][  T994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  485.863064][  T994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  485.863109][  T994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  485.863151][  T994]  ? find_held_lock+0x2b/0x80
[  485.863196][  T994]  ? nr_blockdev_pages+0xde/0x120
[  485.863246][  T994]  ? nr_blockdev_pages+0xde/0x120
[  485.863293][  T994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  485.863358][  T994]  ? si_meminfo+0x118/0x230
[  485.863392][  T994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  485.863437][  T994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  485.863554][  T994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  485.863597][  T994]  ? rcu_is_watching+0x12/0xc0
[  485.863645][  T994]  f2fs_write_data_pages+0x799/0x16d0
[  485.863699][  T994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  485.863763][  T994]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  485.863834][  T994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  485.863878][  T994]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  485.863937][  T994]  do_writepages+0x278/0x600
[  485.864000][  T994]  ? __pfx_do_writepages+0x10/0x10
[  485.864062][  T994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  485.864112][  T994]  __writeback_single_inode+0x164/0x13c0
[  485.864160][  T994]  ? find_held_lock+0x2b/0x80
[  485.864208][  T994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  485.864255][  T994]  ? __pfx___writeback_single_inode+0x10/0x10
[  485.864302][  T994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  485.864345][  T994]  ? do_raw_spin_unlock+0x145/0x1e0
[  485.864385][  T994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  485.864435][  T994]  writeback_sb_inodes+0x766/0x1c70
[  485.864507][  T994]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  485.864553][  T994]  ? do_raw_spin_lock+0x128/0x260
[  485.864593][  T994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  485.864701][  T994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  485.864750][  T994]  ? rcu_is_watching+0x12/0xc0
[  485.864790][  T994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  485.864833][  T994]  ? queue_io+0x287/0x550
[  485.864879][  T994]  wb_writeback+0x1c0/0xbe0
[  485.864940][  T994]  ? __pfx_wb_writeback+0x10/0x10
[  485.865000][  T994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  485.865043][  T994]  ? mark_held_locks+0x40/0x70
[  485.865098][  T994]  ? _raw_spin_unlock_irq+0x23/0x50
[  485.865163][  T994]  wb_workfn+0x142/0xc00
[  485.865215][  T994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  485.865257][  T994]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  485.865318][  T994]  ? __pfx_wb_workfn+0x10/0x10
[  485.865370][  T994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  485.865418][  T994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  485.865466][  T994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  485.865509][  T994]  ? rcu_is_watching+0x12/0xc0
[  485.865558][  T994]  process_one_work+0xa23/0x19a0
[  485.865618][  T994]  ? __pfx_process_one_work+0x10/0x10
[  485.865652][  T994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  485.865713][  T994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  485.865770][  T994]  worker_thread+0x5ef/0xe50
[  485.865826][  T994]  ? kthread+0x13a/0x450
[  485.865855][  T994]  ? __pfx_worker_thread+0x10/0x10
[  485.865889][  T994]  kthread+0x370/0x450
[  485.865918][  T994]  ? __pfx_kthread+0x10/0x10
[  485.865954][  T994]  ret_from_fork+0x754/0xd80
[  485.865991][  T994]  ? __pfx_ret_from_fork+0x10/0x10
[  485.866029][  T994]  ? srso_alias_return_thunk+0x5/0xfbef5
[  485.866072][  T994]  ? __switch_to+0x7b4/0x1120
[  485.866115][  T994]  ? __pfx_kthread+0x10/0x10
[  485.866150][  T994]  ret_from_fork_asm+0x1a/0x30
[  485.866218][  T994]  </TASK>
[  485.867907][  T994] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  486.347388][ T5836] Bluetooth: hci0: command tx timeout
[  487.630113][ T9804] fuse: Invalid rootmode
[  488.013538][ T9732] chnl_net:caif_netlink_parms(): no params data found
[  488.424232][ T5836] Bluetooth: hci0: command tx timeout
[  488.646259][ T5973] hsr_slave_0: left promiscuous mode
[  488.681885][ T5973] hsr_slave_1: left promiscuous mode
[  488.733040][ T5973] veth1_macvtap: left promiscuous mode
[  488.783258][ T5973] veth0_macvtap: left promiscuous mode
[  488.856371][ T5973] veth1_vlan: left promiscuous mode
[  489.203373][ T5973] veth0_vlan: left promiscuous mode
[  491.070344][   T10] IPVS: starting estimator thread 0...
[  491.571330][ T9840] IPVS: using max 24 ests per chain, 57600 per kthread
[  492.016949][ T9849] loop5: detected capacity change from 0 to 40427
[  492.062897][ T9849] F2FS-fs (loop5): invalid crc value
[  492.130084][ T9849] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  492.140375][ T9849] F2FS-fs (loop5): Start checkpoint disabled!
[  492.161882][ T9849] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[  492.172435][ T9849] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  492.357947][ T7416] kworker/u8:12: attempt to access beyond end of device
[  492.357947][ T7416] loop5: rw=1, sector=77824, nr_sectors = 408 limit=40427
[  492.409198][ T7416] kworker/u8:12: attempt to access beyond end of device
[  492.409198][ T7416] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  492.425380][ T7416] CPU: 0 UID: 0 PID: 7416 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) 
[  492.425428][ T7416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  492.425453][ T7416] Workqueue: writeback wb_workfn (flush-7:5)
[  492.425518][ T7416] Call Trace:
[  492.425531][ T7416]  <TASK>
[  492.425544][ T7416]  dump_stack_lvl+0x100/0x190
[  492.425607][ T7416]  f2fs_handle_critical_error+0x5d7/0x970
[  492.425657][ T7416]  ? srso_alias_return_thunk+0x5/0xfbef5
[  492.425709][ T7416]  ? f2fs_build_fault_attr+0x53/0x280
[  492.425763][ T7416]  f2fs_write_end_io+0xc3f/0xf30
[  492.425819][ T7416]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  492.425878][ T7416]  ? srso_alias_return_thunk+0x5/0xfbef5
[  492.425936][ T7416]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  492.425985][ T7416]  bio_endio+0x7a3/0x910
[  492.426034][ T7416]  submit_bio_noacct+0x64c/0x2010
[  492.426106][ T7416]  f2fs_submit_write_bio+0x133/0x350
[  492.426154][ T7416]  __submit_merged_bio+0x331/0x7b0
[  492.426212][ T7416]  __submit_merged_write_cond+0x3fe/0x510
[  492.426275][ T7416]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  492.426340][ T7416]  ? __pfx___might_resched+0x10/0x10
[  492.426382][ T7416]  ? srso_alias_return_thunk+0x5/0xfbef5
[  492.426441][ T7416]  f2fs_write_cache_pages+0x21c0/0x2720
[  492.426529][ T7416]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  492.426588][ T7416]  ? srso_alias_return_thunk+0x5/0xfbef5
[  492.426646][ T7416]  ? srso_alias_return_thunk+0x5/0xfbef5
[  492.426693][ T7416]  ? srso_alias_return_thunk+0x5/0xfbef5
[  492.426747][ T7416]  ? find_held_lock+0x2b/0x80
[  492.426794][ T7416]  ? nr_blockdev_pages+0xde/0x120
[  492.426849][ T7416]  ? nr_blockdev_pages+0xde/0x120
[  492.426901][ T7416]  ? srso_alias_return_thunk+0x5/0xfbef5
[  492.426971][ T7416]  ? si_meminfo+0x118/0x230
[  492.427010][ T7416]  ? srso_alias_return_thunk+0x5/0xfbef5
[  492.427054][ T7416]  ? srso_alias_return_thunk+0x5/0xfbef5
[  492.427170][ T7416]  ? srso_alias_return_thunk+0x5/0xfbef5
[  492.427213][ T7416]  ? rcu_is_watching+0x12/0xc0
[  492.427260][ T7416]  f2fs_write_data_pages+0x799/0x16d0
[  492.427314][ T7416]  ? srso_alias_return_thunk+0x5/0xfbef5
[  492.427371][ T7416]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  492.427442][ T7416]  ? srso_alias_return_thunk+0x5/0xfbef5
[  492.427486][ T7416]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  492.427545][ T7416]  do_writepages+0x278/0x600
[  492.427607][ T7416]  ? __pfx_do_writepages+0x10/0x10
[  492.427665][ T7416]  ? srso_alias_return_thunk+0x5/0xfbef5
[  492.427716][ T7416]  __writeback_single_inode+0x164/0x13c0
[  492.427767][ T7416]  ? find_held_lock+0x2b/0x80
[  492.427813][ T7416]  ? srso_alias_return_thunk+0x5/0xfbef5
[  492.427860][ T7416]  ? __pfx___writeback_single_inode+0x10/0x10
[  492.427907][ T7416]  ? srso_alias_return_thunk+0x5/0xfbef5
[  492.427949][ T7416]  ? do_raw_spin_unlock+0x145/0x1e0
[  492.427989][ T7416]  ? srso_alias_return_thunk+0x5/0xfbef5
[  492.428040][ T7416]  writeback_sb_inodes+0x766/0x1c70
[  492.428111][ T7416]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  492.428226][ T7416]  ? srso_alias_return_thunk+0x5/0xfbef5
[  492.428269][ T7416]  ? rcu_is_watching+0x12/0xc0
[  492.428308][ T7416]  ? srso_alias_return_thunk+0x5/0xfbef5
[  492.428351][ T7416]  ? queue_io+0x287/0x550
[  492.428395][ T7416]  wb_writeback+0x1c0/0xbe0
[  492.428455][ T7416]  ? __pfx_wb_writeback+0x10/0x10
[  492.428515][ T7416]  ? srso_alias_return_thunk+0x5/0xfbef5
[  492.428557][ T7416]  ? mark_held_locks+0x40/0x70
[  492.428612][ T7416]  ? _raw_spin_unlock_irq+0x23/0x50
[  492.428676][ T7416]  wb_workfn+0x142/0xc00
[  492.428735][ T7416]  ? srso_alias_return_thunk+0x5/0xfbef5
[  492.428777][ T7416]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  492.428838][ T7416]  ? __pfx_wb_workfn+0x10/0x10
[  492.428890][ T7416]  ? srso_alias_return_thunk+0x5/0xfbef5
[  492.428937][ T7416]  ? srso_alias_return_thunk+0x5/0xfbef5
[  492.428984][ T7416]  ? srso_alias_return_thunk+0x5/0xfbef5
[  492.429027][ T7416]  ? rcu_is_watching+0x12/0xc0
[  492.429075][ T7416]  process_one_work+0xa23/0x19a0
[  492.429135][ T7416]  ? __pfx_process_one_work+0x10/0x10
[  492.429169][ T7416]  ? srso_alias_return_thunk+0x5/0xfbef5
[  492.429228][ T7416]  ? srso_alias_return_thunk+0x5/0xfbef5
[  492.429279][ T7416]  worker_thread+0x5ef/0xe50
[  492.429329][ T7416]  ? __pfx_worker_thread+0x10/0x10
[  492.429367][ T7416]  ? kthread+0x13a/0x450
[  492.429396][ T7416]  ? __pfx_worker_thread+0x10/0x10
[  492.429429][ T7416]  kthread+0x370/0x450
[  492.429459][ T7416]  ? __pfx_kthread+0x10/0x10
[  492.429495][ T7416]  ret_from_fork+0x754/0xd80
[  492.429531][ T7416]  ? __pfx_ret_from_fork+0x10/0x10
[  492.429569][ T7416]  ? srso_alias_return_thunk+0x5/0xfbef5
[  492.429611][ T7416]  ? __switch_to+0x7b4/0x1120
[  492.429653][ T7416]  ? __pfx_kthread+0x10/0x10
[  492.429689][ T7416]  ret_from_fork_asm+0x1a/0x30
[  492.429760][ T7416]  </TASK>
[  492.890200][ T7416] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  494.758129][ T9863] loop7: detected capacity change from 0 to 8
[  494.791807][ T9863] SQUASHFS error: xz decompression failed, data probably corrupt
[  494.800720][ T9863] SQUASHFS error: Failed to read block 0x108: -5
[  494.807275][ T9863] SQUASHFS error: Unable to read metadata cache entry [106]
[  494.814771][ T9863] SQUASHFS error: Unable to read inode 0x11f
[  495.611507][ T9732] bridge0: port 1(bridge_slave_0) entered blocking state
[  495.698497][ T9732] bridge0: port 1(bridge_slave_0) entered disabled state
[  495.792557][ T9732] bridge_slave_0: entered allmulticast mode
[  495.933672][ T9732] bridge_slave_0: entered promiscuous mode
[  495.976624][ T9732] bridge0: port 2(bridge_slave_1) entered blocking state
[  495.998255][ T9732] bridge0: port 2(bridge_slave_1) entered disabled state
[  496.036361][ T9732] bridge_slave_1: entered allmulticast mode
[  497.303277][ T9732] bridge_slave_1: entered promiscuous mode
[  498.013836][ T9732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  498.454348][ T9732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  498.692778][ T5973] IPVS: stop unused estimator thread 0...
[  498.802197][ T9732] team0: Port device team_slave_0 added
[  498.811746][ T9732] team0: Port device team_slave_1 added
[  498.851073][ T9732] batman_adv: batadv0: Adding interface: batadv_slave_0
[  498.858298][ T9732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  498.885989][ T9732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  498.900328][ T9732] batman_adv: batadv0: Adding interface: batadv_slave_1
[  499.772263][ T9732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  499.854702][ T9732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  500.826674][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  500.854700][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  500.928073][ T9907] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  500.951315][ T9913] team0: Unable to change to the same mode the team is in
[  501.020463][ T9732] hsr_slave_0: entered promiscuous mode
[  501.027805][ T9732] hsr_slave_1: entered promiscuous mode
[  501.343761][ T9922] overlayfs: failed to resolve './file0': -2
[  504.026520][ T9962] netlink: 8 bytes leftover after parsing attributes in process `syz.7.984'.
[  504.513496][ T9962] gtp0: entered promiscuous mode
[  504.518513][ T9962] gtp0: entered allmulticast mode
[  504.705855][ T9732] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  504.963027][ T9732] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  505.268969][ T9732] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  505.326767][ T9732] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  507.420679][ T9996] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  507.557708][ T9732] 8021q: adding VLAN 0 to HW filter on device bond0
[  507.637635][ T9732] 8021q: adding VLAN 0 to HW filter on device team0
[  507.723809][   T77] bridge0: port 1(bridge_slave_0) entered blocking state
[  507.731038][   T77] bridge0: port 1(bridge_slave_0) entered forwarding state
[  507.836028][   T77] bridge0: port 2(bridge_slave_1) entered blocking state
[  507.843267][   T77] bridge0: port 2(bridge_slave_1) entered forwarding state
[  508.269851][ T5836] Bluetooth: hci1: command 0x0406 tx timeout
[  509.590272][T10034] syzkaller0: entered promiscuous mode
[  509.639776][T10034] syzkaller0: entered allmulticast mode
[  511.704895][T10039] loop7: detected capacity change from 0 to 40427
[  511.737448][T10039] F2FS-fs (loop7): invalid crc value
[  511.913243][T10039] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  511.937370][T10039] F2FS-fs (loop7): Start checkpoint disabled!
[  511.955708][T10039] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0
[  511.999097][T10039] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  513.141668][ T5836] Bluetooth: hci6: command 0x0406 tx timeout
[  514.627106][   T36] kworker/u8:2: attempt to access beyond end of device
[  514.627106][   T36] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  514.642920][   T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  514.642968][   T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  514.642994][   T36] Workqueue: writeback wb_workfn (flush-7:7)
[  514.643058][   T36] Call Trace:
[  514.643070][   T36]  <TASK>
[  514.643083][   T36]  dump_stack_lvl+0x100/0x190
[  514.643148][   T36]  f2fs_handle_critical_error+0x5d7/0x970
[  514.643199][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.643247][   T36]  ? f2fs_build_fault_attr+0x53/0x280
[  514.643297][   T36]  f2fs_write_end_io+0xc3f/0xf30
[  514.643354][   T36]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  514.643414][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.643473][   T36]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  514.643524][   T36]  bio_endio+0x7a3/0x910
[  514.643574][   T36]  submit_bio_noacct+0x64c/0x2010
[  514.643647][   T36]  f2fs_submit_write_bio+0x133/0x350
[  514.643697][   T36]  __submit_merged_bio+0x331/0x7b0
[  514.643763][   T36]  __submit_merged_write_cond+0x3fe/0x510
[  514.643828][   T36]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  514.643894][   T36]  ? __pfx___might_resched+0x10/0x10
[  514.643936][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.643996][   T36]  f2fs_write_cache_pages+0x21c0/0x2720
[  514.644087][   T36]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  514.644145][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.644204][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.644251][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.644297][   T36]  ? find_held_lock+0x2b/0x80
[  514.644345][   T36]  ? nr_blockdev_pages+0xde/0x120
[  514.644398][   T36]  ? nr_blockdev_pages+0xde/0x120
[  514.644451][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.644523][   T36]  ? si_meminfo+0x118/0x230
[  514.644560][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.644609][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.644737][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.644789][   T36]  ? rcu_is_watching+0x12/0xc0
[  514.644842][   T36]  f2fs_write_data_pages+0x799/0x16d0
[  514.644900][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.644963][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  514.645042][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.645091][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  514.645156][   T36]  do_writepages+0x278/0x600
[  514.645225][   T36]  ? __pfx_do_writepages+0x10/0x10
[  514.645289][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.645344][   T36]  __writeback_single_inode+0x164/0x13c0
[  514.645396][   T36]  ? find_held_lock+0x2b/0x80
[  514.645448][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.645499][   T36]  ? __pfx___writeback_single_inode+0x10/0x10
[  514.645550][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.645597][   T36]  ? do_raw_spin_unlock+0x145/0x1e0
[  514.645641][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.645697][   T36]  writeback_sb_inodes+0x766/0x1c70
[  514.645782][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  514.645910][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.645958][   T36]  ? rcu_is_watching+0x12/0xc0
[  514.646001][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.646048][   T36]  ? queue_io+0x287/0x550
[  514.646097][   T36]  wb_writeback+0x1c0/0xbe0
[  514.646163][   T36]  ? __pfx_wb_writeback+0x10/0x10
[  514.646229][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.646276][   T36]  ? mark_held_locks+0x40/0x70
[  514.646338][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  514.646408][   T36]  wb_workfn+0x142/0xc00
[  514.646465][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.646512][   T36]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  514.646578][   T36]  ? __pfx_wb_workfn+0x10/0x10
[  514.646636][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.646688][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.646740][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.646795][   T36]  ? rcu_is_watching+0x12/0xc0
[  514.646848][   T36]  process_one_work+0xa23/0x19a0
[  514.646913][   T36]  ? __pfx_process_one_work+0x10/0x10
[  514.646951][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.647016][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.647071][   T36]  worker_thread+0x5ef/0xe50
[  514.647126][   T36]  ? __pfx_worker_thread+0x10/0x10
[  514.647167][   T36]  ? kthread+0x13a/0x450
[  514.647200][   T36]  ? __pfx_worker_thread+0x10/0x10
[  514.647234][   T36]  kthread+0x370/0x450
[  514.647267][   T36]  ? __pfx_kthread+0x10/0x10
[  514.647305][   T36]  ret_from_fork+0x754/0xd80
[  514.647346][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  514.647387][   T36]  ? srso_alias_return_thunk+0x5/0xfbef5
[  514.647433][   T36]  ? __switch_to+0x7b4/0x1120
[  514.647480][   T36]  ? __pfx_kthread+0x10/0x10
[  514.647518][   T36]  ret_from_fork_asm+0x1a/0x30
[  514.647591][   T36]  </TASK>
[  514.647605][   T36] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  515.642230][T10090] loop7: detected capacity change from 0 to 2048
[  515.697290][T10090] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  515.985414][T10086] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  516.081278][T10087] team0: Unable to change to the same mode the team is in
[  516.464947][ T9732] 8021q: adding VLAN 0 to HW filter on device batadv0
[  517.350007][T10117] ==================================================================
[  517.358134][T10117] BUG: KASAN: slab-out-of-bounds in af_alg_pull_tsgl+0x8fb/0xa80
[  517.365887][T10117] Read of size 8 at addr ffff888035647260 by task syz.5.1020/10117
[  517.373795][T10117] 
[  517.376136][T10117] CPU: 1 UID: 0 PID: 10117 Comm: syz.5.1020 Not tainted syzkaller #0 PREEMPT(full) 
[  517.376185][T10117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  517.376209][T10117] Call Trace:
[  517.376222][T10117]  <TASK>
[  517.376236][T10117]  dump_stack_lvl+0x100/0x190
[  517.376299][T10117]  print_report+0x156/0x4c9
[  517.376355][T10117]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.376403][T10117]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.376456][T10117]  ? __phys_addr+0xe8/0x180
[  517.376599][T10117]  ? af_alg_pull_tsgl+0x8fb/0xa80
[  517.376638][T10117]  kasan_report+0xdf/0x1e0
[  517.376695][T10117]  ? af_alg_pull_tsgl+0x8fb/0xa80
[  517.376739][T10117]  af_alg_pull_tsgl+0x8fb/0xa80
[  517.376790][T10117]  skcipher_recvmsg+0x512/0x1020
[  517.376844][T10117]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  517.376888][T10117]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.376935][T10117]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  517.376972][T10117]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.377019][T10117]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  517.377066][T10117]  sock_recvmsg+0x1a4/0x1f0
[  517.377113][T10117]  ____sys_recvmsg+0x218/0x640
[  517.377163][T10117]  ? __pfx_____sys_recvmsg+0x10/0x10
[  517.377218][T10117]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.377266][T10117]  ? __lock_acquire+0x4a5/0x2630
[  517.377339][T10117]  ___sys_recvmsg+0x16a/0x1a0
[  517.377389][T10117]  ? __pfx____sys_recvmsg+0x10/0x10
[  517.377437][T10117]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.377522][T10117]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.377569][T10117]  ? find_held_lock+0x2b/0x80
[  517.377634][T10117]  do_recvmmsg+0x301/0x760
[  517.377686][T10117]  ? __pfx_do_recvmmsg+0x10/0x10
[  517.377733][T10117]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.377779][T10117]  ? vfs_write+0x15d/0x1070
[  517.377831][T10117]  ? __pfx_sock_write_iter+0x10/0x10
[  517.377879][T10117]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.377926][T10117]  ? do_futex+0x192/0x350
[  517.377971][T10117]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.378017][T10117]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.378069][T10117]  __x64_sys_recvmmsg+0x22a/0x280
[  517.378108][T10117]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  517.378149][T10117]  ? srso_alias_return_thunk+0x5/0xfbef5
[  517.378201][T10117]  do_syscall_64+0x106/0xf80
[  517.378242][T10117]  ? irqentry_exit+0x138/0x670
[  517.378283][T10117]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.378323][T10117] RIP: 0033:0x7f0fb719c819
[  517.378354][T10117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  517.378392][T10117] RSP: 002b:00007f0fb7f72028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  517.378429][T10117] RAX: ffffffffffffffda RBX: 00007f0fb7415fa0 RCX: 00007f0fb719c819
[  517.378455][T10117] RDX: 0000000000000001 RSI: 0000200000001d40 RDI: 0000000000000004
[  517.378487][T10117] RBP: 00007f0fb7232c91 R08: 0000000000000000 R09: 0000000000000000
[  517.378511][T10117] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000000
[  517.378536][T10117] R13: 00007f0fb7416038 R14: 00007f0fb7415fa0 R15: 00007ffc368889c8
[  517.378576][T10117]  </TASK>
[  517.378589][T10117] 
[  517.688582][T10117] Allocated by task 10117:
[  517.693015][T10117]  kasan_save_stack+0x30/0x50
[  517.697718][T10117]  kasan_save_track+0x14/0x30
[  517.702413][T10117]  __kasan_kmalloc+0xaa/0xb0
[  517.707025][T10117]  __kmalloc_noprof+0x301/0x850
[  517.711893][T10117]  sock_kmalloc+0x111/0x170
[  517.716415][T10117]  skcipher_recvmsg+0x48b/0x1020
[  517.721461][T10117]  sock_recvmsg+0x1a4/0x1f0
[  517.726337][T10117]  ____sys_recvmsg+0x218/0x640
[  517.731115][T10117]  ___sys_recvmsg+0x16a/0x1a0
[  517.735808][T10117]  do_recvmmsg+0x301/0x760
[  517.740244][T10117]  __x64_sys_recvmmsg+0x22a/0x280
[  517.745283][T10117]  do_syscall_64+0x106/0xf80
[  517.749884][T10117]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.755810][T10117] 
[  517.758127][T10117] The buggy address belongs to the object at ffff888035647240
[  517.758127][T10117]  which belongs to the cache kmalloc-32 of size 32
[  517.772447][T10117] The buggy address is located 0 bytes to the right of
[  517.772447][T10117]  allocated 32-byte region [ffff888035647240, ffff888035647260)
[  517.786866][T10117] 
[  517.789184][T10117] The buggy address belongs to the physical page:
[  517.795585][T10117] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35647
[  517.804372][T10117] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  517.811540][T10117] page_type: f5(slab)
[  517.815532][T10117] raw: 00fff00000000000 ffff88813fe3b780 dead000000000100 dead000000000122
[  517.824122][T10117] raw: 0000000000000000 0000000800400040 00000000f5000000 0000000000000000
[  517.832790][T10117] page dumped because: kasan: bad access detected
[  517.839195][T10117] page_owner tracks the page as allocated
[  517.844901][T10117] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 24899578159, free_ts 24899296288
[  517.864897][T10117]  post_alloc_hook+0x153/0x170
[  517.869676][T10117]  get_page_from_freelist+0x111d/0x3140
[  517.875241][T10117]  __alloc_frozen_pages_noprof+0x27c/0x2ba0
[  517.881173][T10117]  new_slab+0xa6/0x6b0
[  517.885253][T10117]  refill_objects+0x26b/0x400
[  517.889939][T10117]  __pcs_replace_empty_main+0x1ab/0x660
[  517.895502][T10117]  __kmalloc_noprof+0x688/0x850
[  517.900388][T10117]  kobject_get_path+0xcf/0x2c0
[  517.905191][T10117]  kobject_uevent_env+0x287/0x18b0
[  517.910329][T10117]  param_sysfs_builtin_init+0x37b/0x3f0
[  517.915906][T10117]  do_one_initcall+0x11d/0x760
[  517.920685][T10117]  kernel_init_freeable+0x6e5/0x7a0
[  517.925914][T10117]  kernel_init+0x1f/0x1e0
[  517.930264][T10117]  ret_from_fork+0x754/0xd80
[  517.934860][T10117]  ret_from_fork_asm+0x1a/0x30
[  517.939656][T10117] page last free pid 974 tgid 974 stack trace:
[  517.945810][T10117]  __free_frozen_pages+0x7e1/0x10d0
[  517.951022][T10117]  vfree.part.0+0x12b/0x9d0
[  517.955560][T10117]  delayed_vfree_work+0x8e/0xd0
[  517.960445][T10117]  process_one_work+0xa23/0x19a0
[  517.965396][T10117]  worker_thread+0x5ef/0xe50
[  517.969992][T10117]  kthread+0x370/0x450
[  517.974062][T10117]  ret_from_fork+0x754/0xd80
[  517.978659][T10117]  ret_from_fork_asm+0x1a/0x30
[  517.983437][T10117] 
[  517.985752][T10117] Memory state around the buggy address:
[  517.991380][T10117]  ffff888035647100: 00 00 00 fc fc fc fc fc 00 00 00 fc fc fc fc fc
[  517.999442][T10117]  ffff888035647180: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[  518.007507][T10117] >ffff888035647200: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc
[  518.015563][T10117]                                                        ^
[  518.022761][T10117]  ffff888035647280: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc
[  518.030828][T10117]  ffff888035647300: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc
[  518.038889][T10117] ==================================================================
[  518.175472][T10117] Disabling lock debugging due to kernel taint
[  518.286018][T10124] loop6: detected capacity change from 0 to 8
[  518.645121][T10124] SQUASHFS error: xz decompression failed, data probably corrupt
[  518.653218][T10124] SQUASHFS error: Failed to read block 0x108: -5
[  518.659822][T10124] SQUASHFS error: Unable to read metadata cache entry [106]
[  518.667544][T10124] SQUASHFS error: Unable to read inode 0x11f
[  519.118668][T10117] ------------[ cut here ]------------
[  519.124575][T10117] kernel BUG at ./include/linux/scatterlist.h:139!
[  519.198053][T10117] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
[  519.204729][T10117] CPU: 1 UID: 0 PID: 10117 Comm: syz.5.1020 Tainted: G    B               syzkaller #0 PREEMPT(full) 
[  519.215744][T10117] Tainted: [B]=BAD_PAGE
[  519.220021][T10117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  519.230110][T10117] RIP: 0010:af_alg_pull_tsgl+0x81c/0xa80
[  519.235768][T10117] Code: e8 69 5d 7c fd e9 7b fc ff ff e8 0f 9c 3e fd 49 8d 47 ff 48 89 04 24 e9 92 fb ff ff e8 fd 9b 3e fd 90 0f 0b e8 f5 9b 3e fd 90 <0f> 0b e8 ed 9b 3e fd 48 8b 3c 24 48 c7 c6 a0 53 16 8c e8 fd b7 8a
[  519.255394][T10117] RSP: 0018:ffffc90005f977d8 EFLAGS: 00010246
[  519.261480][T10117] RAX: 0000000000080000 RBX: ffffea0001f04740 RCX: ffffc90005fb9000
[  519.269526][T10117] RDX: 0000000000080000 RSI: ffffffff84ca400b RDI: ffff888057dd0000
[  519.277549][T10117] RBP: ffffea0001f04740 R08: 0000000000000007 R09: 0000000000000000
[  519.285531][T10117] R10: 0000000000000001 R11: 6e696c6261736944 R12: dffffc0000000000
[  519.293513][T10117] R13: ffff88805365a044 R14: 0000000000000001 R15: 0000000000000000
[  519.301636][T10117] FS:  00007f0fb7f726c0(0000) GS:ffff888124439000(0000) knlGS:0000000000000000
[  519.310595][T10117] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  519.317183][T10117] CR2: 00007fb0fa68a6b0 CR3: 0000000025dd0000 CR4: 0000000000350ef0
[  519.325245][T10117] Call Trace:
[  519.328519][T10117]  <TASK>
[  519.331453][T10117]  skcipher_recvmsg+0x512/0x1020
[  519.336432][T10117]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  519.341819][T10117]  ? srso_alias_return_thunk+0x5/0xfbef5
[  519.347466][T10117]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  519.353108][T10117]  ? srso_alias_return_thunk+0x5/0xfbef5
[  519.358768][T10117]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  519.364249][T10117]  sock_recvmsg+0x1a4/0x1f0
[  519.369227][T10117]  ____sys_recvmsg+0x218/0x640
[  519.374025][T10117]  ? __pfx_____sys_recvmsg+0x10/0x10
[  519.379412][T10117]  ? srso_alias_return_thunk+0x5/0xfbef5
[  519.385082][T10117]  ? __lock_acquire+0x4a5/0x2630
[  519.390042][T10117]  ___sys_recvmsg+0x16a/0x1a0
[  519.394727][T10117]  ? __pfx____sys_recvmsg+0x10/0x10
[  519.399933][T10117]  ? srso_alias_return_thunk+0x5/0xfbef5
[  519.405585][T10117]  ? srso_alias_return_thunk+0x5/0xfbef5
[  519.411312][T10117]  ? find_held_lock+0x2b/0x80
[  519.416020][T10117]  do_recvmmsg+0x301/0x760
[  519.420446][T10117]  ? __pfx_do_recvmmsg+0x10/0x10
[  519.425393][T10117]  ? srso_alias_return_thunk+0x5/0xfbef5
[  519.431048][T10117]  ? vfs_write+0x15d/0x1070
[  519.435691][T10117]  ? __pfx_sock_write_iter+0x10/0x10
[  519.441092][T10117]  ? srso_alias_return_thunk+0x5/0xfbef5
[  519.446739][T10117]  ? do_futex+0x192/0x350
[  519.451079][T10117]  ? srso_alias_return_thunk+0x5/0xfbef5
[  519.456729][T10117]  ? srso_alias_return_thunk+0x5/0xfbef5
[  519.462393][T10117]  __x64_sys_recvmmsg+0x22a/0x280
[  519.467422][T10117]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  519.472971][T10117]  ? srso_alias_return_thunk+0x5/0xfbef5
[  519.478643][T10117]  do_syscall_64+0x106/0xf80
[  519.483286][T10117]  ? irqentry_exit+0x138/0x670
[  519.488070][T10117]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.494288][T10117] RIP: 0033:0x7f0fb719c819
[  519.498717][T10117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  519.518518][T10117] RSP: 002b:00007f0fb7f72028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  519.526960][T10117] RAX: ffffffffffffffda RBX: 00007f0fb7415fa0 RCX: 00007f0fb719c819
[  519.534936][T10117] RDX: 0000000000000001 RSI: 0000200000001d40 RDI: 0000000000000004
[  519.543257][T10117] RBP: 00007f0fb7232c91 R08: 0000000000000000 R09: 0000000000000000
[  519.551231][T10117] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000000
[  519.559235][T10117] R13: 00007f0fb7416038 R14: 00007f0fb7415fa0 R15: 00007ffc368889c8
[  519.567339][T10117]  </TASK>
[  519.570357][T10117] Modules linked in:
[  519.575676][T10117] ---[ end trace 0000000000000000 ]---
[  519.780344][T10117] RIP: 0010:af_alg_pull_tsgl+0x81c/0xa80
[  519.824676][T10117] Code: e8 69 5d 7c fd e9 7b fc ff ff e8 0f 9c 3e fd 49 8d 47 ff 48 89 04 24 e9 92 fb ff ff e8 fd 9b 3e fd 90 0f 0b e8 f5 9b 3e fd 90 <0f> 0b e8 ed 9b 3e fd 48 8b 3c 24 48 c7 c6 a0 53 16 8c e8 fd b7 8a
[  519.886275][ T9732] veth0_vlan: entered promiscuous mode
[  519.897746][ T9732] veth1_vlan: entered promiscuous mode
[  519.911688][T10117] RSP: 0018:ffffc90005f977d8 EFLAGS: 00010246
[  519.928888][T10117] RAX: 0000000000080000 RBX: ffffea0001f04740 RCX: ffffc90005fb9000
[  519.963023][T10117] RDX: 0000000000080000 RSI: ffffffff84ca400b RDI: ffff888057dd0000
[  519.965522][ T9732] veth0_macvtap: entered promiscuous mode
[  520.003994][T10117] RBP: ffffea0001f04740 R08: 0000000000000007 R09: 0000000000000000
[  520.018561][ T9732] veth1_macvtap: entered promiscuous mode
[  520.042569][T10117] R10: 0000000000000001 R11: 6e696c6261736944 R12: dffffc0000000000
[  520.062689][T10117] R13: ffff88805365a044 R14: 0000000000000001 R15: 0000000000000000
[  520.075377][ T9732] batman_adv: batadv0: Interface activated: batadv_slave_0
[  520.092624][T10117] FS:  00007f0fb7f726c0(0000) GS:ffff888124439000(0000) knlGS:0000000000000000
[  520.109257][ T9732] batman_adv: batadv0: Interface activated: batadv_slave_1
[  520.138435][T10117] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  520.152828][  T994] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  520.162541][  T994] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  520.182422][T10117] CR2: 00002000003eb030 CR3: 0000000025dd0000 CR4: 0000000000350ef0
[  520.190985][  T994] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  520.204104][T10117] Kernel panic - not syncing: Fatal exception
[  520.210968][T10117] Kernel Offset: disabled
[  520.215292][T10117] Rebooting in 86400 seconds..