last executing test programs:

20.090259203s ago: executing program 0 (id=304):
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0), 0x0)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000180)=0x7f, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
r0 = socket(0x0, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
sendmsg$nl_route_sched(r0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
write(0xffffffffffffffff, &(0x7f0000000200)="89ba41c97928dec7cec15a160d3dba257872aed129d4b5247c9834550448a4f46c37425b873ec95db3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba2b2f051829a7f66952e57962614db0d03474a4a4bce636ea8d2b882b2b49ef18e76edbec7302a96e41f206d93", 0x6e)
syz_mount_image$f2fs(&(0x7f0000000240), &(0x7f0000000000)='./bus\x00', 0x380801c, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYRES16, @ANYRESOCT], 0x1, 0x5571, &(0x7f0000001a00)="$eJzs3EtvG1UUAOAzSZPSJxFiwa4jVUiJVEd1+hDsCrTiIVpVPBaswImnlts4E8WuE8oGCZaIBf8EgcSKJb+BBWt2iAWoOySQ504opaVqiROn7fdJ4zNzZ3x87siKda4jB/DUmstv/5bF8TgUEdMRcTSLaj+rt8qFFF6IiBMRMfWPLavH/x6YjYjDEXF8lDzlzOpTX50anjz361u/f//jwQNHvv7up8nNGpi0FyOit572N3splp0Ur9fjrWG3ir2zwzqmE70b9XE5jCyL2CyWqwybre3rWlU800nXl+s3+6N4bbW1Moqd7rVqfH0tvWB/mOJmsVw94XprozpuF8tV7PbLKnZupbq2bqW/bbf6g5SnXef7uEofg8F2TOPFVpHms36jiitrg3o85S3bxdYoDutYv1yslKvtqo7lnd3r/ezt7trNrXxYbPS75Vp+brH50mLzfKO5UbaLQXG20eq1z5/N5zuro8sag6LVu9Apy85qsbhS9hby+c7KSqPZzOcvFsvd1lrebC6eWTzdOLdQ753KX7/yfr7azudH8dXu2s3Z7mo/v1Zu5OkZC/nS4pmXF/KTzfzdy1fzq+9cunT56nsfXvzgyiuX33ytvuiesvL5pdNLS43m6cZSc2EfzH/0ufuQ8x/sZP6fp5qP1rU/zPyznd0eeLBHf4N9MrsrhQA8Pu7p/0P/D+y+cfX/EZPp/2Oc/X9E5Pr/+/W/o4+OO/3v1P/o/2+PbuCY+t/92v8/wvrHfps/7IgFJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAp9bPM9+8Ue3MpeMj9fixeui5+jiLiKmI+PM+pmP2rpzTdZ6Z/7h+5l81/JBFlWH0Ggfr7XBEXKi3P57d7bsAAAAAT65vPz3xZerW08PcpAtiL6VFm6mjH40pXxYRM3O/jCnb1Ojh+TElq97fB2JrTNmqBaxnxpQsLbkdGFe2B9peeZveDp8du3OymlCWwtSelAMAAOyp6bvC3nQhAAAATMIXky6AycjizjeC9T/wH0yh/mrz0F3nAAAAgMdQNukCAAAAgF1X9f9+/w8AAACebOn3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YudubtUGojCAXhsM5E9BUfZpJTsoIyVkmWWggDSQJSWQFlJAqIHsUkIET9gjnngCCcQYC3SOZMPY1ucZw+bOSAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoE1/q+X01/dPP67N2Wyvk2c0AAAAwDHrajmtv4yb9pt0/F069CG1i4goI+JY7d6LwUFmL+VUJ66vXvThd0SdsLvHMG2vI+Jz2v6/b/spAAAAwONazReTplpvduOuO8QtNZM25dsvmfKKiKjG/zKllbvdx0xh9f+7H98ypdUTWKNMYc2UW//4ucG5Ia8uumXv4CONZDSrf8S6VV4UBwAA3IXDSuBEFQIAAMAD+Np1B+hGsd/t1xmH8fPP8wVpTTHbQicAAABwc0XXHQAAAABaV9f/d/j+v2ErTwMAAAAeVPP+PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANq0rpbT1XwxOXV+dmbOZnudfCMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAJ/bn3QZAGIzBoHlDh7L/sMgTUKa5qz79VooAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCvNcnS2Bpvkr3XxtHzSHJ2alydGnfnxtMHY/YnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICP/XlJYRgGgijYSRR/dkb3P6xpsM9gDFUgeMwwCwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvNHnevne8WscSUanjX/HM8nSVWPtqrH1oLH3YI6nvwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMnO/fPGUUQBAH+3d3v5AwhjkAsDChIFNMS+hISUUIAsCj4CkuWcg+FCIHFBIgvkBirkOg2CEiEkkOnyHVLHUprQpXBhJGrQ3u1eNonBh+XsLvbvJ83N891o5s3eyfLzjg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADktt+Jl5I8bmcPU6O4eO7OztpS1m890mdubdydzVoWt/Za6Ju3Dz75Znt5fBEj4tRM6ZWv6kgHAACAo6Bd1PcRcS/dXMj6ZGpY/6fFmKxc/f6ZUVzU84/W/Vs7a8fzl2aL+v+3X++/MF5oarRONunyyqA//3gqnSe0xcZ7ds8RneGVH/7aoD18Q5L315/fTofXs/Xt7dvvdofhsSqyBQD243TR50Hx81DW9+pMDIAjo1MqvIv6vz1Vb04AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVdhej6eKuBURs50HcWZrZ21pt/7Wxt3Zop2/eXOjPGc2RRoRyyuDflrhXpru2vUbnywOBv2rkwTJfxm8Z3AqIg50wv0EH04wJuLfx+Qfz6hvF/8ctJqRRq1Bkr8/TcnnIIPis3fwM9f0DQkAgEMrzVtW199LNxey51rTEX/98HD9/1opjgnr//sfnb9TXqtc//cq22Hzza1e/mzu2vUbb6xcXrzUv9T/9M0zvbd6Zy+cO3dhLrtW83PLkfTn604TAACA/7Fu3sr1fzL9+P3/k6U4Jqz/P/+u92V5rbb6f1cPbvrVnQkAAMBR1B1Hz73y5x+tXUa0ut34YnF19Wpv9Dj++szosdJ09+lY3sr1f3u67qwAAACAKmyvtx66/3+xFMeE9/+f/vHFn8tztiPiRMSViOifXroyuFjddhrtyf+hcn56o1v3TgEAAKjLibyV7/+nw/P/yfjIQxIRr786iov/dTVJ/d9+7+ufymuVz/+frW6LjZTMjK7HsJ+J6MzUnREAAACH2fG8ZcX+7+nmwse/nPyg6/w/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNX+DgAA//8y/TPo")
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000180)=0xfffffff9)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003})
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x20242, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8001})

16.311608855s ago: executing program 0 (id=311):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x240840, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendfile(0xffffffffffffffff, r0, 0x0, 0x0)

14.67544194s ago: executing program 2 (id=317):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffffffc, 0xe4}, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x1a}, 0x33db)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB], 0x30}}, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r6)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x30}}, 0x0)

14.568330488s ago: executing program 0 (id=318):
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x5}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

13.589170709s ago: executing program 0 (id=321):
mkdirat(0xffffffffffffffff, 0x0, 0x0)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000001c0)='./file0/file0\x00', 0x80000c, &(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES8=r0], 0x1, 0x6ee, &(0x7f0000001e80)="$eJzs3UtsHGcdAPD/rNdrr5FSp82joEpdNVJBWCR2rBTChYAQ8qFCFRw4W4nTWNk4le0iJ0LU5XHnwIlTOfhWcUDlHgnOVJUQVx8rIfXCyTejmZ0Zz77txK+W38+a+b75XvPNNzuvXVkTwP+tpbmoP4sklube3kqXd3cW2xM7i1N5djsiGhFRi6h3gkjWIs2dKJv4epqYx5PBaykK737eCev5lJWvDa83UKM/aTufopWvrNWdP90JJoe0+Env6rvau9vf3hEl5RbeiYhreRjxpxdqFV7Yfp/tMu/jf2XzUdWPctwC51RSvaJXzEbM5BfQ7J4gPzvUTrd3x2/7rDsAAAAAR9U8epWX9mIvtuLCSXQHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvqq63v+/nb3fP0mnViTF+/8beVrk8XNo/IsQP5vqhM9OvjMAAAAAAAAAcOJe34u92IoLxfJ+kv3m/0blN/6vxfuxESuxHtdjK5ZjMzZjPRYiYrbSUGNreXNzfSGrGXFpRM2b8emAmjeH9/HOMW8zAAAAAAAAAJxz02PyH072p/0mlg5+/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPMgiZjoBNl0qYjPRq0eEdMR0UjLbUd8WsS/JJJBic9Ovx8AAADwQqa7F5PpQ9R56YPYi624UCzvJ9kz/5XseXk63o+12IzV2Ix2rMS9/Bk6feqv7e4stnd3Fh+lU3+7P/ziSF3PWozOdw+D1/xqVqIZ92M1S7kedyOJ/Uwtb+XV3Z3FNHxU7dfBY/+HaZ+SH+RG9GaiEr+Xzq5+ksX/0P0tQv1Im/icakNzZrPcyXJE5vO+pTUuFiMweA+N3Tv1kWtaiFr5zc+l0WsaPOYfjl77TE+pgd/cnInekbgZtXIPXRk9EhHf/NvHv3jQXnv44P7G3PnZpIE+GFuidyQWKyNx9Ss0EuPNZyNxuVxeip/Ez2Muvph6J9ZjNX4Zy7EZK60ifzn/PKfz2dEj9dlMdemdcT1Jj8lWef4a1KdWdPUpWvHjLLYcb2T79EKsRhKPI2Il3sr+bsZCeTY42MOXB/e7OClkR33tEGfaimvfyoJymKI5vOxfDtfkcUk362JlXKvn3NksL0/ZTlMORunlgaNUXOsOfz2qqH8jj6Qt/Hbk9eG0dY1EfpUoevfKsM95Z0j/vJ/ON9prD9cfLL93yPW9mYfpcfT7c3WVSPfwyzGdb9zFbJ5kx9R8lvdKeYXtHq9G/otLR60v73JZr3Ok/jQex72uI/W7cau8DbySlZ7su2KlLV0tW+o+h6d56Z1Wvfxhp3q/9TjanfshAM63mW/PNJr/af6z+VHzd80HzbenfzT1vanXGjH5j8nv1+cn3qy9lvw1PopfHzz/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz2/jydOHy+32yvrgSG1wVjK61nJ7v3iR2OAy0ZeS5K/KGdOfNJJsPHm6P6ZMbyR6Uqby7h2y+klGitf2jC/cOsFuJNu9+2t6/L4o3vKUp4zaiqRvwNPKz93nYs0HKZPnYFf2RlrH12Dxga0eREf+9Da791cnayIiBh4yo00cw8kHOFM3Nh+9d2PjydPvrD5afnfl3ZW1yVu3bs/fvvXW4o37q+2V+c68UuFUXn4LnIbq7USpERGvj6874kWtAAAAAAAAAAAAwAk6jf+FOOttBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL7cluai/iySWJi/Pj+Vp+3uLLarYUc9ImoRkfwqIvl7xJ3oTDFbaS4Ztp4/rt7+2b//u/v5QVv1onwtYntovcPZzqdoRcREHpZ2hlecPUR7d3vb69c4iE4NyE7KkUkH7FoxcHDW/hcAAP//dxHlfA==")
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00')
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000002c0)='./file0\x00', 0x3200014, &(0x7f00000006c0)=ANY=[], 0x1, 0x64c, &(0x7f0000001500)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1081000, 0x0)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x18d102, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600016, 0x15)
r3 = creat(&(0x7f0000000580)='./bus\x00', 0x0)
io_setup(0x206, &(0x7f0000000200)=<r4=>0x0)
io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x1a00001a}])
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00008d7000/0x2000)=nil)
madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x14)
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="4ba6224a6818", @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x10, 0xd, 0x2, 0x0, [0x0, 0x0, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000340)={[{@utf8no}, {@utf8no}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@uni_xlateno}, {@rodir}, {@fat=@tz_utc}, {@shortname_win95}, {@uni_xlate}, {@fat=@nfs_nostale_ro}, {@rodir}, {@fat=@dos1xfloppy}, {@fat=@errors_continue}, {}]}, 0x6, 0x2d2, &(0x7f00000008c0)="$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")
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000300)={[{@force}, {@nls={'nls', 0x3d, 'cp1251'}}, {@barrier}, {@nodecompose}, {@umask={'umask', 0x3d, 0x6}}, {@force}, {@uid}, {@force}, {@gid}, {}]}, 0x2, 0x6da, &(0x7f0000000580)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x89101a, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x12578c2, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x0)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0)

13.123102298s ago: executing program 2 (id=324):
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
fcntl$setlease(r0, 0x400, 0x1)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
readv(r1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0)
pread64(r2, &(0x7f0000001440)=""/126, 0x7e, 0x8)

11.703261265s ago: executing program 1 (id=328):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

11.561037196s ago: executing program 1 (id=329):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2a08000, &(0x7f0000000140)={[{@mblk_io_submit}, {@resuid={'resuid', 0x3d, 0xee00}}]}, 0xfc, 0x474, &(0x7f00000003c0)="$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")
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

11.500273392s ago: executing program 2 (id=330):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001300), 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bf0280b3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0x40184810, &(0x7f00000000c0))
ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f00000000c0)={0x3})

10.91020332s ago: executing program 1 (id=334):
socket(0x2, 0x2, 0x0)
syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x44000)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0), 0x501280, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d00000067000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x81, 0xfff, 0x9}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
syz_open_dev$video4linux(&(0x7f00000000c0), 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="15a8fdfd9a9e2789304535316873b885cf367c28d05b5096c34237f56fd288d2a805004072de36de6221dfacde28d9428f76e2"])
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x7fff0006}]})
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x111}}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$lock(r2, 0x11, &(0x7f00000031c0))
mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='qnx4\x00', 0x208000, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x2, &(0x7f0000000380)=[{0x8001, 0x10, 0x2}, {0x29f, 0x7, 0xff, 0x7}]})
r4 = socket$unix(0x1, 0x0, 0x0)
r5 = dup2(r4, r3)
close_range(r5, 0xffffffffffffffff, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0)
r6 = syz_open_dev$sndpcmp(&(0x7f0000002440), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_PAUSE(r6, 0x40044160, 0x0)

10.746085744s ago: executing program 0 (id=335):
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc0505405, &(0x7f00000000c0)={0x3})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x4}, 0x2)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7fd}, 0xe)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x2, 0x7, 0x401}, 0x14}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000faffffff0000"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$SO_COOKIE(r4, 0x1, 0x28, 0x0, &(0x7f00000012c0))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0xa0090199)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
vmsplice(r6, &(0x7f0000000b80)=[{&(0x7f0000000c40)='S', 0x1}], 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
truncate(&(0x7f0000000100)='./file1\x00', 0x0)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x3, 0x300)

10.082878868s ago: executing program 0 (id=342):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000300)={0x0, [[0x9ef8], [0x10000], [0x8000007]], '\x00', [{0x3}, {0x0, 0x10}, {}, {0x0, 0x80000000}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x5f, 0x1}, {}, {}, {0x0, 0x3}, {0x0, 0xfffffffe}, {0x0, 0x80000}], '\x00', 0x1000})
sendmsg$nl_crypto(r1, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f0000000000)=@del={0xe0, 0x11, 0x1, 0x0, 0x0, {{'rfc7539esp(ofb(tea),blake2s-256-x86)\x00'}}}, 0xe0}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000540)=[{{&(0x7f0000000380), 0x6e, &(0x7f0000000480), 0x0, &(0x7f0000000600)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x48}}], 0x1, 0x2081, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200), 0x48)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000007"], 0xd)

9.562363722s ago: executing program 1 (id=347):
mkdirat(0xffffffffffffffff, 0x0, 0x0)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000001c0)='./file0/file0\x00', 0x80000c, &(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES8=r0], 0x1, 0x6ee, &(0x7f0000001e80)="$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")
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00')
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000002c0)='./file0\x00', 0x3200014, &(0x7f00000006c0)=ANY=[], 0x1, 0x64c, &(0x7f0000001500)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1081000, 0x0)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x18d102, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600016, 0x15)
r3 = creat(&(0x7f0000000580)='./bus\x00', 0x0)
io_setup(0x206, &(0x7f0000000200)=<r4=>0x0)
io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x1a00001a}])
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00008d7000/0x2000)=nil)
madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x14)
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @random="4ba6224a6818", @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x10, 0xd, 0x2, 0x0, [0x0, 0x0, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000340)={[{@utf8no}, {@utf8no}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@uni_xlateno}, {@rodir}, {@fat=@tz_utc}, {@shortname_win95}, {@uni_xlate}, {@fat=@nfs_nostale_ro}, {@rodir}, {@fat=@dos1xfloppy}, {@fat=@errors_continue}, {}]}, 0x6, 0x2d2, &(0x7f00000008c0)="$eJzs3T9rZFUYB+D3JpOZWQUnhZUIHtDCatlsazOL7IKYymUKtdDgZmHJBCWBgH/wupWtjYWFn0AQ/CA2fgPBVrBzhYUj9869eyebMJu7OBHd5ymSkzPnN+c9d4bkpsibD18+PLiT4u79L36N8biIjWlM40ER27ERra/ilOk3AQD8lz3IOf7IC31yRUSM11cWALBGF/v5P+iGP11KWQDAGt1+9723b+zu3nwnpXHcOvz6ZFb9Zl99vtIuuRfz2I9rMYmHEfWNwlbUdwvV8FbOuRykyna8dliezE5mEYcf/NyEb/weUed3YhLb9dSju406/9buzZ06nj55ocuXVR3PVfm7cW9a5a/HJF58FD6Vv55SGkVKS/uXMRvG668u8vX+V2MSv3wUH8c87tRFdPkvd1J6M3/75+fvV+VV+aI8mY3qdZ28eakvDAAAAAAAAAAAAAAAAAAAAAAA/2tXF7130ijq/j3VVNN/Z/Nh9cVWpNZyf5+y+hhNH+Dacn+gnHOZ4/u2v861lFJuFnb5Qbw0WG4sCAAAAAAAAAAAAAAAAAAAAM+u408/O9ibz/eP/pFB2w1gEBF/3Y542ueZLs28EqsXj5o99+bzjWZ4es1geSY22zVFxMoyqkM87dUYRK+zXzlTczP44ce+u4+fvGar2qvoV2HPQfvuOtgrzr+Go2hnxk0Z3w0jujXDuOBew8dn8mTxPLnXAYfnPjTpffbh8/WgXLEmilWFvfHb4so1M2depmF9Vc+NbzWDpfhj740LvZ9jvIif/V5R6NYBAAAAAAAAAAAAAAAAAABr1f317zkP3l8Z3cijtZUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJeq+///PQZlE94/Oh48YfEwjo7/5SMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwDPg7AAD//+RmV1Y=")
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000300)={[{@force}, {@nls={'nls', 0x3d, 'cp1251'}}, {@barrier}, {@nodecompose}, {@umask={'umask', 0x3d, 0x6}}, {@force}, {@uid}, {@force}, {@gid}, {}]}, 0x2, 0x6da, &(0x7f0000000580)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x89101a, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x12578c2, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x0)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0)

8.153392937s ago: executing program 2 (id=353):
bind$alg(0xffffffffffffffff, &(0x7f0000003c40)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d3"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x4c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{}, {}, @broadcast}, 0x0, @val={0x8c, 0x10, {0x0, "0262c80200", @short="010400"}}}}]}, 0x4c}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2e}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
r6 = socket(0x1, 0x803, 0x0)
pipe(&(0x7f0000000100))
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0x1010}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x80000001}}]}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}}, 0x0)

7.745921601s ago: executing program 1 (id=356):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000500)=0x4, 0x4)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000020601040000000000000000000000000500040000000000050001000700000010004300686173683a69702c6d6163000900020073797a30000000000500050000000000"], 0x48}}, 0x0)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8918, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x2f)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000006c0)=@IORING_OP_WRITEV={0x2, 0x52, 0x2007, @fd_index=0x6, 0xffffffffffffff57, &(0x7f0000000680)=[{&(0x7f0000000580)="b14310c5a55094d13ea93f7e6d261981b3fb8ff305f80180ef8f524bb2d696e78a7e64f52bdde58c56e5b2ceec8a5495a4e20496b3be56d88a88a1ce2e1628d8926f5c6db5d6d6829acaebc06c4160a0dbf31ece17762965e3884582853cf4e58a2180d12647553f5eade5f43523e63ec1030000008b395ab8d3a5eaed0ba13308af769c1ebd57cc2824943467eb48f97aaf777263f9ec44d5e5bf7106f7a029a7f8266d5d0d69c2af9a48f1781b9a660e5207b041e1fec2af39b8e0e194a1e2f19be575fb9fb52f197635f269d6", 0xce}], 0x1, 0x9, 0x1, {0x2}})
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@rand_addr=0x64010101, @in6=@mcast1, 0x0, 0x0, 0x4e21, 0x5, 0x2, 0x0, 0x0, 0x84}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x100, 0x2, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@private=0xa010101}}, 0xe8)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0xa)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)

7.559264987s ago: executing program 2 (id=358):
syz_mount_image$minix(&(0x7f0000000100), &(0x7f00000066c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1810002, &(0x7f0000006800)=ANY=[@ANYBLOB="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", @ANYBLOB="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", @ANYRES64=0x0, @ANYBLOB="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", @ANYBLOB="a77a47c7093995493790249b0bed32a055f763e24190111977519571ce7e7842f63886bbf71ffeb820eddf6133ab8ae88bcc3d9004d9c6dbe44fbdcf671794f90a6dc723010be2684f321bdcb0f3a28f37715ba81e0f3b27d1206de5d93037a11c2b5ce35f7ffda7b43c3c9888163a50b7db5daea67d670e8b86c032da653d273cfb7bf3df53e836bb96370c4c637ec105fd520968a03441384810ed179646174536425dd1f0073804e63a43a92c901534484b0a352baee33ac1638bff1e67ee4959717feb229b247c25ae4018f502bdb5e7", @ANYRES16, @ANYRES16, @ANYBLOB="2da97369bd5bd2a022e4fea628166430fb7a26dae38cd827ad7f8cff5d2246bdd2cc0e8101b9631aa9db6c88c4ea13a8fbc6a23601da47409ecba43e29d90521e4a37f2f57fa7ce2366b5b89b5b9529791fb53b47e83c2014cd5779926a7dd8a0de70a50b2baf658b32d6d108efa8d3b6101762c8308a5b3351fd14516c9c33e6c6bd15e956f84604a27325b8ebb315aff3e39aa98ba22dffb1b6a7c1acafedad4ef237de4595f77f679e98e9dcbf01dc5bcbd5c199b9e95c24b", @ANYBLOB="9651c56ad88578a25546d8301a976d6fc5e51f3814a125051a070f7f54437d1ce35d85809048bfebe5ac13dce749226f4eace102819832dc4feee07cbf025529706f80354fcaaaf34bc289d3892a62957f78a9c45fe4e6e8c1332d57018a296c8eca11a25d4a581b17f43b9f4480c9a839e10a15954d4c325da6384fa44e9bb79ff45d24a2a2e805fac936dd9af003a173aec97678f46c000b0eab44f2", @ANYBLOB="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", @ANYRES32], 0x1, 0x1cd, &(0x7f0000002180)="$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")
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x4030582b, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, 0x0, &(0x7f0000000180))
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000080)={{{@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8001}, {}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, 0x0, @in6=@empty, 0x0, 0x4}}, 0xe8)
sendmmsg(r5, &(0x7f0000000180), 0x400000000000077, 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080))

6.388949333s ago: executing program 2 (id=362):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', <r2=>0x0})
unshare(0x62040200)
r3 = gettid()
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000003c0), 0xfe, 0x51c, &(0x7f00000008c0)="$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")
chroot(0x0)
syz_emit_ethernet(0x7a, &(0x7f00000002c0)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}}, 0x0)

5.066866103s ago: executing program 1 (id=369):
socket(0x10, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x88, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4b, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @void, @void, @void, @void, @val={0x71, 0x7}, @val={0x76, 0x6}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x0)

1.995452966s ago: executing program 3 (id=375):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}]}}]}, 0x8c}}, 0x0)

1.890617004s ago: executing program 3 (id=376):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000100000000000000000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="04000000e0000300000000000000000000010b0008"], 0x38}}, 0x0)
r4 = inotify_init()
inotify_add_watch(r4, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001540)={&(0x7f0000001500)='kmem_cache_free\x00'}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058000000"], 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10)
getxattr(0x0, 0x0, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="180000005800010000000000000000000200000000000000bda459e42fb7cbe5734fbc86c70560df5d284d137a13ed4ff4876990eb525f9d490b5fca8a883eac585cf534c69d443e820751edad06b11c841cbbef5f876af0711bdc8b459c42a7d5c103a68978d0d608ba7651f3086201"], 0x18}}, 0x0)

1.597725588s ago: executing program 3 (id=379):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000340)='GPL\x00'}, 0x78)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0, 0xa3cf05dada2710e3}, 0x50)
socket$inet(0x2, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x8080)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40010)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0xffffffffffffffff}, 0xc)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00'}, 0x18)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840), 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48)

1.519392975s ago: executing program 4 (id=380):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00')
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-0', 0x3f}], 0x2)

1.379773057s ago: executing program 4 (id=381):
r0 = timerfd_create(0x9, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000000100), 0x0)

1.263299046s ago: executing program 4 (id=382):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000280)={0x8eabe4237adab112, 0x300})

1.170268644s ago: executing program 3 (id=383):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0x5}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

1.151060275s ago: executing program 4 (id=384):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@getlink={0x24, 0x12, 0x221, 0x0, 0x0, {0x7}, [@IFLA_XDP={0x4}]}, 0x24}}, 0x0)

1.031811985s ago: executing program 4 (id=385):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x81, 0x4100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.025641056s ago: executing program 3 (id=386):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0xc1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000c, 0x12, r1, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x1e, 0x0, &(0x7f0000000000))

837.900211ms ago: executing program 3 (id=387):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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")
quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

0s ago: executing program 4 (id=388):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f00000013c0)=ANY=[], 0xf, 0x6a2, &(0x7f0000000100)="$eJzs3c1vHGcdB/DvrNeuHargtEkboSKiRCpIFolf5IK5EBBCPlSoKgfOVuI0VjZOZbvIrRC4FMEJiUP/gILkGyck7kHhXG69+lgJiUvEIeJiNLOz9tq7ju3Eb4HPJxo/z8zzzDO//e0zM951Vhvg/9bsWJoPU2R27O3Vcn1jfaq1sT71Ut3cSlLWG0mzXaRYTIpHyc2yveha0lX2+HRh5t0vHm982V5r1kvVv/G0/fro03etXnIlyUBd9ho86CF2jHcrycs9XYYOOtaOjmXSrtUlnLrNHmuH2f0w5y1wxnTuTkX7vtljNDmXZLj+PSD11aFxchEej0Nd5QAAAOAF9fmD044AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXjz19/8X9dKoy1xJ0fn+/6HOtrr+Qnt42gEAAAAAAAAAwBH4xpM8yWrOd9Y3i+pv/lerlYv5z2bylXyQ5cxnKdezmrmsZCVLmUgy2jXQ0OrcysrSxNaepf57Tvbdc/KkHjEAAAAAAAAA/E/6dWa3//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABnQZEMtItqudipj6bRbFczVP5YS/7Rqb8gin4bH558HAAAAPBchp9hn68+yZOs5nxnfbOoXvO/Vr1eHs4HWcxKFrKSVuZzu34NXb7qb2ysT7U21qful0vvuD/416HCqEZM+72H/ke+XPUYyZ0sVFuu51YVzO00qj1Llzvx9I/r4zKm4vu1A0bWrNNaHuwPe72LcCQO+1bEaBlcspWR8Tq2MhsX2hkoqjdqkt2Z2PfZae4+UhoZ3DrSRBpb7/xcPIacn6vL8vH89lhzflhbmWikysRk1+x77emZSL751z//7G5r8d7dO8tjZ+ch7WNgj+2758RUVyZe75eJ7oHOdCaah+w/XmXi0tb6bH6cn2YsV/JOlrKQn2cuK5nPZt0+V8/n8ufo0+fMzR1r7+wXyVD9vLRTfZCYruRHVW0uV6t9z2chRR7kdubzVvVvMhP5TqYznZmuZ/jSnnFXj6066xu7z/rOM/23vsFf+1ZdGUnyu7rsycEue83Oo9K+9pd5vdCV1/asf7zV60LXeTDelaVXOtkZ7Dv4s1wbm1+rK+UxPqnLs2G0zkR5AnXuEp3oXm1nolndi3rn+R+rc2O5tXhv6e7c+3uMv7Zr/c26LKfV+tcPGmX/p+JolfPllQzXV5Kds6Nse3XrKnNhx111qP6LS7ut0dN2qWoris6Z+pOeM7Wcr+WZOlT/Dtc70mTV9nrftqmq7XJX247ft/Igrdw+gfwB8JxGc25o5J8jn498NvKbkbsjbw//8KXvvvTGUAb/Pvi95vjAm403ir/ks/xy+/U/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw7JY//OjeXKs1v9S/0ti7aZ/KfiPvqhT1F/o807HOYGU4yY4tg+WGIzvEJwfsPLI7jJ7K5q+SE89P50sE+/f5fVlp5iAD3tyvz8enPhPOemUg/SfAKV+YgGN3Y+X++zeWP/zo2wv3596bf29+cXB6emZ8ZvqtqRt3Flrz4+2fpx0lcBy2b/qnHQkAAAAAAAAAAABwUP0+GHD15f0+NHKgz3j4n4UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAkZgdS/NhikyMXx8v1zfWp1rl0qlv92wmaTSS4hdJ8Si5mfaS0a7hivzpUTb7HOfThZl3v3i88eX2WM12/6RRl89hrV5yJclAXR7VeLeee7zi351HWCbsWidxcNr+GwAA///UmvRo")
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f00000003c0)="26640f1c45bff26ff00fbabc080000670f78ad00600000baf80c66b881faeb8666efbafc0cb02aee66b9e109000066b80f00000066ba000000000f30baf80c66b8347c5b8d66efbafc0c66ed0f01c9baf80c66b8e5574e8566efbafc0cecbaf80c66b80753f38e66efbafc0cb000ee", 0xfffffffffffffd23}], 0x1, 0x53, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x10d000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
socket$nl_route(0x10, 0x3, 0x0)

kernel console output (not intermixed with test programs):

th: hci1: command 0x041b tx timeout
[   60.095061][ T3612] Bluetooth: hci2: command 0x041b tx timeout
[   60.107829][ T3569] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.109361][ T3612] Bluetooth: hci3: command 0x041b tx timeout
[   60.138376][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   60.153176][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   60.165616][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   60.178668][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   60.186573][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   60.194660][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   60.202515][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   60.210419][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   60.218688][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   60.229513][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   60.237288][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   60.250359][ T3570] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.272454][ T3571] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.281363][ T3568] device veth0_vlan entered promiscuous mode
[   60.294196][ T3568] device veth1_vlan entered promiscuous mode
[   60.324948][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   60.334200][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   60.343570][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   60.351925][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   60.360186][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   60.368803][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   60.377598][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   60.385385][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   60.398363][ T3572] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.414992][ T3571] 8021q: adding VLAN 0 to HW filter on device team0
[   60.446624][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   60.455737][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   60.464451][ T3613] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.471625][ T3613] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.480413][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   60.488981][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   60.497540][ T3613] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.504672][ T3613] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.514722][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   60.558210][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   60.567011][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   60.577046][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   60.586727][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   60.608032][ T3570] device veth0_vlan entered promiscuous mode
[   60.626384][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   60.637892][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   60.647421][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   60.656465][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   60.665025][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   60.674108][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   60.682863][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   60.691246][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   60.705082][ T3570] device veth1_vlan entered promiscuous mode
[   60.722268][ T3569] device veth0_vlan entered promiscuous mode
[   60.734282][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   60.742609][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   60.752872][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   60.761072][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   60.769051][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   60.777454][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   60.785305][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   60.793268][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   60.802640][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   60.827051][ T3568] device veth0_macvtap entered promiscuous mode
[   60.839106][ T3569] device veth1_vlan entered promiscuous mode
[   60.854420][ T3571] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   60.865091][ T3571] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   60.877790][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   60.886116][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   60.894324][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   60.904265][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   60.913480][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   60.922568][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   60.931530][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   60.940298][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   60.949063][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   60.978997][ T3568] device veth1_macvtap entered promiscuous mode
[   60.988523][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   60.998104][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   61.007489][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   61.016223][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   61.027013][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   61.035648][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   61.044384][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   61.052813][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   61.063098][ T3572] device veth0_vlan entered promiscuous mode
[   61.081236][ T3569] device veth0_macvtap entered promiscuous mode
[   61.088865][ T3570] device veth0_macvtap entered promiscuous mode
[   61.097331][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   61.106067][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   61.121294][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   61.140277][ T3572] device veth1_vlan entered promiscuous mode
[   61.152418][ T3569] device veth1_macvtap entered promiscuous mode
[   61.164844][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   61.174011][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   61.183313][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   61.202990][ T3568] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.215065][ T3568] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.226972][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.238670][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.251135][ T3569] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.258520][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   61.267270][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   61.276219][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   61.285243][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   61.293935][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   61.302695][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   61.312361][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   61.334831][ T3570] device veth1_macvtap entered promiscuous mode
[   61.353995][ T3568] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.363867][ T3568] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.374259][ T3568] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.383340][ T3568] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.396206][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   61.405308][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   61.412910][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   61.420456][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   61.428889][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   61.440241][ T3572] device veth0_macvtap entered promiscuous mode
[   61.454285][ T3571] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.488583][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.503491][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.515739][ T3569] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.530555][ T3572] device veth1_macvtap entered promiscuous mode
[   61.538430][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.561507][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.573881][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.584928][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.596602][ T3570] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.606179][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   61.615006][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   61.624230][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   61.634177][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   61.649432][ T3569] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.658142][ T3569] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.667229][ T3569] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.676259][ T3569] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.700068][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.719665][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.735824][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.746792][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.761093][ T3570] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.783957][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   61.793622][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   61.806255][ T3570] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.815108][ T3570] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.825880][ T3570] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.834976][ T3570] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.896821][ T3572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.915632][ T3572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.925789][ T3572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.936666][ T3572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.946833][ T3572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.957572][ T3572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.969093][ T3572] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.005516][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   62.020929][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   62.031682][ T3572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.042538][ T3572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.052782][ T3572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.063540][ T3572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.073410][ T3572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.084969][ T3572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.096375][ T3572] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.119803][ T3627] Bluetooth: hci2: command 0x040f tx timeout
[   62.127798][ T3627] Bluetooth: hci1: command 0x040f tx timeout
[   62.133737][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   62.134786][ T3627] Bluetooth: hci4: command 0x040f tx timeout
[   62.143823][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   62.155956][ T3627] Bluetooth: hci0: command 0x040f tx timeout
[   62.167928][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.174255][ T3572] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.182188][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.198303][ T3627] Bluetooth: hci3: command 0x040f tx timeout
[   62.201335][ T3572] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.213875][ T3572] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.223119][ T3572] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.240705][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.261013][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.268734][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   62.285453][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   62.322890][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.336957][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.345351][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   62.355193][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   62.364891][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   62.421999][ T1444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.436214][ T1444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.455412][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   62.471188][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   62.484357][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   62.495233][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   62.506599][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   62.516241][ T1444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.518715][ T3571] device veth0_vlan entered promiscuous mode
[   62.532890][ T1444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.542405][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   62.606193][ T3571] device veth1_vlan entered promiscuous mode
[   62.673200][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.706439][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.717287][ T1444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.749764][ T3649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.758882][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   62.767153][ T1444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.786105][ T3649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.791535][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   62.817073][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   62.852888][ T3571] device veth0_macvtap entered promiscuous mode
[   62.878669][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   62.888532][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   62.908267][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   62.941856][ T3571] device veth1_macvtap entered promiscuous mode
[   63.026594][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.066622][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.095731][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.116558][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.139089][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.162885][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.173952][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.186706][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.200565][ T3571] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.222013][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   63.231683][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   63.241398][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   63.266232][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.284957][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.298357][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.309616][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.320896][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.331989][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.355198][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.367466][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.380181][ T3571] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.398759][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   63.407787][ T3646] loop0: detected capacity change from 0 to 32768
[   63.415815][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   63.432765][ T3571] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.444021][ T3571] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.461624][ T3571] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.477566][ T3571] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.508853][ T3668] loop2: detected capacity change from 0 to 16
[   63.576003][ T3668] erofs: (device loop2): mounted with root inode @ nid 36.
[   63.669638][ T3646] XFS (loop0): Mounting V5 Filesystem
[   63.875132][ T3649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.893112][ T3649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.151753][ T3684] 9pnet: Insufficient options for proto=fd
[   64.201496][ T3627] Bluetooth: hci0: command 0x0419 tx timeout
[   64.614721][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   64.662892][ T3627] Bluetooth: hci4: command 0x0419 tx timeout
[   64.668981][ T3627] Bluetooth: hci1: command 0x0419 tx timeout
[   64.675771][ T3627] Bluetooth: hci2: command 0x0419 tx timeout
[   64.681219][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.683049][ T3627] Bluetooth: hci3: command 0x0419 tx timeout
[   64.716065][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.725200][ T3686] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   64.732955][ T3646] XFS (loop0): Ending clean mount
[   64.743345][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   65.092015][ T3700] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   65.165508][ T3646] XFS (loop0): User initiated shutdown received.
[   65.271216][ T3646] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x10c/0x150 (fs/xfs/xfs_fsops.c:481).  Shutting down filesystem.
[   65.762798][ T3646] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[   66.026590][ T3719] loop3: detected capacity change from 0 to 512
[   66.074841][ T3568] XFS (loop0): Unmounting Filesystem
[   66.083380][ T3719] =======================================================
[   66.083380][ T3719] WARNING: The mand mount option has been deprecated and
[   66.083380][ T3719]          and is ignored by this kernel. Remove the mand
[   66.083380][ T3719]          option from the mount to silence this warning.
[   66.083380][ T3719] =======================================================
[   66.165352][ T3725] loop1: detected capacity change from 0 to 47
[   66.262997][ T3719] EXT4-fs (loop3): 1 truncate cleaned up
[   66.274243][ T3719] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   66.285346][ T3731] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[   66.285346][ T3731] The task syz.2.23 (3731) triggered the difference, watch for misbehavior.
[   66.504906][ T3727] loop4: detected capacity change from 0 to 32768
[   66.521651][ T3733] trusted_key: encrypted_key: insufficient parameters specified
[   66.626931][ T3727] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop4 scanned by syz.4.28 (3727)
[   66.730551][ T3727] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[   66.769910][ T3727] BTRFS info (device loop4): using free space tree
[   66.789686][ T3727] BTRFS info (device loop4): has skinny extents
[   66.986707][ T3749] loop3: detected capacity change from 0 to 4096
[   67.080558][ T3749] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[   68.111612][ T3727] BTRFS info (device loop4): enabling ssd optimizations
[   69.017539][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #108!!!
[   69.029702][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[   69.038808][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!!
[   71.232992][ T1389] ieee802154 phy0 wpan0: encryption failed: -22
[   71.239685][ T1389] ieee802154 phy1 wpan1: encryption failed: -22
[   72.547708][ T3809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.47'.
[   72.586108][ T3809] netlink: 'syz.3.47': attribute type 6 has an invalid length.
[   72.671207][ T3816] loop2: detected capacity change from 0 to 128
[   72.676905][ T3809] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   72.688726][ T3809] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   72.697740][ T3809] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   72.706501][ T3809] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   72.719492][ T3809] device vxlan0 entered promiscuous mode
[   72.856012][ T3829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.51'.
[   73.152628][ T3839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.45'.
[   73.614722][ T3840] loop0: detected capacity change from 0 to 256
[   73.960716][ T3846] loop4: detected capacity change from 0 to 1024
[   74.013705][ T3840] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[   74.211977][ T3840] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   74.245145][ T3860] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   74.249593][ T3858] loop4: detected capacity change from 0 to 1024
[   74.364025][ T3840] exFAT-fs (loop0): hint_cluster is invalid (17)
[   74.388785][ T3865] loop2: detected capacity change from 0 to 64
[   74.660638][   T26] audit: type=1800 audit(1723038859.987:2): pid=3865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.62" name="bus" dev="loop2" ino=21 res=0 errno=0
[   74.729515][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!!
[   74.748731][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[   74.804895][ T3868] loop3: detected capacity change from 0 to 512
[   74.873709][   T26] audit: type=1800 audit(1723038860.087:3): pid=3858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.57" name="bus" dev="loop4" ino=6 res=0 errno=0
[   75.026389][ T3868] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #15: comm syz.3.63: corrupted in-inode xattr
[   75.097866][ T3868] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.63: couldn't read orphan inode 15 (err -117)
[   75.119016][ T3868] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000008,data_err=ignore,,errors=continue. Quota mode: writeback.
[   75.362984][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[   75.430098][ T3878] sg_write: data in/out 364107400/53 bytes for SCSI command 0x7-- guessing data in;
[   75.430098][ T3878]    program syz.2.65 not setting count and/or reply_len properly
[   75.564823][ T3878] loop2: detected capacity change from 0 to 512
[   75.644880][ T3878] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[   75.658579][ T3878] UDF-fs: Scanning with blocksize 512 failed
[   75.669102][ T3878] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[   75.678909][ T3878] UDF-fs: Scanning with blocksize 1024 failed
[   75.692016][ T3878] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[   75.724409][ T3885] loop0: detected capacity change from 0 to 2048
[   75.759325][ T3878] UDF-fs: Scanning with blocksize 2048 failed
[   75.789439][ T3878] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   75.828212][ T3878] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   75.928267][ T3885] NILFS (loop0): invalid segment: Magic number mismatch
[   75.964803][ T3885] NILFS (loop0): trying rollback from an earlier position
[   76.026448][ T3714] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.155652][ T3885] NILFS (loop0): recovery complete
[   76.256150][ T3890] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   76.274563][ T3714] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.455088][ T3889] loop3: detected capacity change from 0 to 8192
[   76.538144][ T3714] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.768549][ T3889] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[   77.461104][ T3714] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.538164][ T3889] REISERFS (device loop3): using ordered data mode
[   77.557647][ T3889] reiserfs: using flush barriers
[   77.582817][ T3889] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   77.616055][ T3889] REISERFS (device loop3): checking transaction log (loop3)
[   77.889425][ T3826] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   77.917012][ T3896] chnl_net:caif_netlink_parms(): no params data found
[   77.967582][ T3889] REISERFS (device loop3): Using tea hash to sort names
[   77.982787][ T3889] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[   78.407078][ T3896] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.421748][ T3896] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.440912][ T3896] device bridge_slave_0 entered promiscuous mode
[   78.473422][ T3896] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.519726][ T3826] usb 3-1: New USB device found, idVendor=041e, idProduct=400a, bcdDevice=9e.b6
[   78.529141][ T3826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.548808][ T3896] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.587759][ T3896] device bridge_slave_1 entered promiscuous mode
[   78.597092][ T3927] netlink: 'syz.0.78': attribute type 1 has an invalid length.
[   78.611571][ T3826] usb 3-1: Product: syz
[   78.615763][ T3826] usb 3-1: Manufacturer: syz
[   78.639978][ T3826] usb 3-1: SerialNumber: syz
[   78.662425][ T3826] usb 3-1: config 0 descriptor??
[   78.753336][ T3826] gspca_main: spca500-2.14.0 probing 041e:400a
[   78.829395][ T3644] Bluetooth: hci2: command 0x0409 tx timeout
[   78.939166][ T3932] Zero length message leads to an empty skb
[   79.061201][ T3896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.079852][   T13] usb 3-1: USB disconnect, device number 2
[   79.138401][ T3896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.170845][ T3938] loop0: detected capacity change from 0 to 1024
[   79.262507][ T3896] team0: Port device team_slave_0 added
[   79.316357][ T3896] team0: Port device team_slave_1 added
[   79.401638][ T3650] hfsplus: b-tree write err: -5, ino 4
[   79.478250][ T3896] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.516202][ T3896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.617813][ T3896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.639269][ T3644] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   79.666520][ T3896] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.700190][ T3896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.767838][ T3896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.862872][ T3929] loop1: detected capacity change from 0 to 32768
[   79.887278][ T3960] loop2: detected capacity change from 0 to 2048
[   79.904345][ T3896] device hsr_slave_0 entered promiscuous mode
[   79.919871][ T3896] device hsr_slave_1 entered promiscuous mode
[   79.927294][ T3896] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.936432][ T3896] Cannot create hsr debugfs directory
[   79.953327][ T3929] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   79.958478][ T3960] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[   79.976696][ T3929] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   80.013498][ T3644] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.032597][ T3644] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   80.048806][ T3644] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[   80.058440][ T3644] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.076858][ T3644] usb 4-1: config 0 descriptor??
[   80.087415][ T3929] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[   80.087450][ T3960] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,minixdf,i_version,max_dir_size_kb=0x0000000000008001,. Quota mode: none.
[   80.107492][ T3614] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[   80.127646][ T3614] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[   80.213085][ T3960] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   80.255265][ T3614] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 127ms
[   80.274249][ T3614] gfs2: fsid=syz:syz.0: jid=0: Done
[   80.301042][ T3929] gfs2: fsid=syz:syz.0: first mount done, others may mount
[   80.527273][ T3971] loop2: detected capacity change from 0 to 64
[   81.327579][   T13] Bluetooth: hci2: command 0x041b tx timeout
[   81.472716][ T1078] cfg80211: failed to load regulatory.db
[   81.498810][ T3988] loop2: detected capacity change from 0 to 512
[   81.635691][ T3714] device hsr_slave_0 left promiscuous mode
[   81.648021][ T3714] device hsr_slave_1 left promiscuous mode
[   81.657841][ T3714] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.673118][ T3714] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.684830][ T3714] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.692444][ T3714] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.704904][ T3714] device bridge_slave_1 left promiscuous mode
[   81.714133][ T3714] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.737479][ T3714] device bridge_slave_0 left promiscuous mode
[   81.744142][ T3714] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.772410][ T3714] device veth1_macvtap left promiscuous mode
[   81.778808][ T3714] device veth0_macvtap left promiscuous mode
[   81.785093][ T3714] device veth1_vlan left promiscuous mode
[   81.791213][ T3714] device veth0_vlan left promiscuous mode
[   82.012342][ T3714] team0 (unregistering): Port device team_slave_1 removed
[   82.030113][ T3714] team0 (unregistering): Port device team_slave_0 removed
[   82.045323][ T3714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   82.061949][ T3714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   82.139996][ T3714] bond0 (unregistering): Released all slaves
[   82.388589][ T3995] loop0: detected capacity change from 0 to 128
[   82.581092][ T3644] usbhid 4-1:0.0: can't add hid device: -71
[   82.587468][ T3644] usbhid: probe of 4-1:0.0 failed with error -71
[   82.680433][ T3644] usb 4-1: USB disconnect, device number 2
[   83.407959][ T3615] Bluetooth: hci2: command 0x040f tx timeout
[   83.557072][ T4021] netlink: 12 bytes leftover after parsing attributes in process `syz.3.94'.
[   83.583067][ T4021] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   83.657111][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[   83.679246][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   83.688165][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   83.697071][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   84.598462][ T4029] loop3: detected capacity change from 0 to 2048
[   84.727721][ T4029] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   84.792378][ T3896] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   84.842439][ T3615] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   84.864689][ T3896] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   84.911177][ T3896] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   84.960924][ T3896] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   85.045539][ T4044] input: syz1 as /devices/virtual/input/input5
[   85.308255][ T3896] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.780799][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   85.841804][ T3830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   85.963627][ T3896] 8021q: adding VLAN 0 to HW filter on device team0
[   86.022707][ T3614] Bluetooth: hci2: command 0x0419 tx timeout
[   86.060259][ T3615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.075683][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   86.078696][ T3615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.111736][ T3615] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[   86.138163][ T3615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.179113][ T3615] usb 1-1: config 0 descriptor??
[   86.207369][ T4061] loop2: detected capacity change from 0 to 512
[   86.269504][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   86.277964][ T3826] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.285060][ T3826] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.295523][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   86.312756][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   86.328762][ T4061] EXT4-fs (loop2): Ignoring removed orlov option
[   86.335944][ T3826] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.343062][ T3826] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.751185][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   86.811712][ T4061] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #17: comm syz.2.105: corrupted in-inode xattr
[   86.880922][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   87.038099][ T4061] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.105: couldn't read orphan inode 17 (err -117)
[   87.060731][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   87.083219][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   87.098479][ T4061] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,quota,noinit_itable,noload,nombcache,bsddf,,errors=continue. Quota mode: writeback.
[   87.151536][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   87.232345][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   87.247859][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   87.281661][ T3615] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0
[   87.288098][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   87.324074][ T3615] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0
[   87.336989][ T3615] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x7
[   87.345630][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   87.362650][ T3615] mcp2221 0003:04D8:00DD.0001: item fetching failed at offset 4/5
[   87.380128][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   87.388563][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   87.406002][ T3615] mcp2221 0003:04D8:00DD.0001: can't parse reports
[   87.438644][ T3615] mcp2221: probe of 0003:04D8:00DD.0001 failed with error -22
[   87.449900][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   87.460633][ T3896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   87.633964][ T3615] usb 1-1: USB disconnect, device number 2
[   87.850610][ T4092] syz.3.109 uses obsolete (PF_INET,SOCK_PACKET)
[   88.729734][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   88.737426][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   88.781790][ T4102] sp0: Synchronizing with TNC
[   88.817674][ T3896] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.877765][ T4105] loop0: detected capacity change from 0 to 256
[   89.026812][ T4105] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[   89.427456][ T4105] exFAT-fs (loop0): hint_cluster is invalid (1)
[   89.445195][ T4105] exFAT-fs (loop0): error, invalid access to exfat cache (entry 0x00000000)
[   89.454872][ T4105] exFAT-fs (loop0): Filesystem has been set read-only
[   89.463393][ T4105] exFAT-fs (loop0): error, failed to bmap (inode : ffff888063ae1b60 iblock : 9, err : -5)
[   89.478542][ T4105] exFAT-fs (loop0): error, tried to truncate zeroed cluster.
[   89.487092][ T4105] exFAT-fs (loop0): error, tried to truncate zeroed cluster.
[   89.638758][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   89.661941][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   89.794203][ T3896] device veth0_vlan entered promiscuous mode
[   89.840261][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   89.857883][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   89.913656][ T3896] device veth1_vlan entered promiscuous mode
[   89.959313][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   89.969121][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   90.000012][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   90.098741][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   90.129112][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   90.155330][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   90.212783][ T3896] device veth0_macvtap entered promiscuous mode
[   90.251306][ T3896] device veth1_macvtap entered promiscuous mode
[   90.355085][ T3896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.389247][ T3896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.399102][ T3896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.414260][ T3896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.447135][ T3896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.478402][ T3896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.479457][ T1075] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   90.493711][ T3896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   90.526569][ T3896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.607169][ T3896] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.631971][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   90.652875][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   90.661641][ T4166] Bluetooth: (null): Invalid header checksum
[   90.671713][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   90.690870][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   90.710932][ T3896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.734174][ T3896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.745341][ T3896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.756414][ T1075] usb 3-1: Using ep0 maxpacket: 8
[   90.766551][ T3896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.787071][ T3896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.807836][ T3896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.818402][ T3896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   90.831627][ T3896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   90.843977][ T3896] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.854349][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   90.864341][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   90.879446][ T1075] usb 3-1: config 0 has an invalid interface number: 228 but max is 0
[   90.891445][ T3896] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.907352][ T1075] usb 3-1: config 0 has no interface number 0
[   90.926904][ T3896] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.949508][ T3896] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.968495][ T3896] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.079537][ T1075] usb 3-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a
[   91.098883][ T1075] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.147630][ T1075] usb 3-1: Product: syz
[   91.157133][ T1075] usb 3-1: Manufacturer: syz
[   91.167690][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.189297][ T1075] usb 3-1: SerialNumber: syz
[   91.195009][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.217746][ T1075] usb 3-1: config 0 descriptor??
[   91.238023][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   91.295897][ T3651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.295969][ T3651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.315852][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   91.518306][ T1075] usb 3-1: USB disconnect, device number 3
[   92.556467][ T4207] loop0: detected capacity change from 0 to 512
[   92.610104][ T4205] loop3: detected capacity change from 0 to 4096
[   92.672197][ T4207] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   92.686872][ T4207] EXT4-fs (loop0): filesystem is read-only
[   92.689722][ T4205] NILFS (loop3): unrecognized mount option "fsname=*"
[   92.937042][ T4205] loop3: detected capacity change from 0 to 256
[   92.948502][ T4223] loop4: detected capacity change from 0 to 512
[   92.968744][ T4209] chnl_net:caif_netlink_parms(): no params data found
[   93.005047][ T4223] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   93.016333][ T4205] FAT-fs (loop3): Unrecognized mount option "uni_xlat?M��F3�e=1" or missing value
[   93.165364][ T4223] EXT4-fs (loop4): 1 truncate cleaned up
[   93.191767][ T4223] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000000,,errors=continue. Quota mode: none.
[   93.209176][ T4207] loop0: detected capacity change from 0 to 164
[   93.284007][ T4209] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.291900][ T4209] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.355621][ T4209] device bridge_slave_0 entered promiscuous mode
[   93.392837][ T4226] iso9660: Corrupted directory entry in block 4 of inode 1792
[   93.421733][ T4209] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.432330][ T4232] futex_wake_op: syz.2.133 tries to shift op by -1; fix this program
[   93.444310][ T3573] Bluetooth: hci1: ACL packet for unknown connection handle 0
[   93.448975][ T4209] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.477880][ T4242] overlayfs: conflicting lowerdir path
[   93.501546][ T4209] device bridge_slave_1 entered promiscuous mode
[   93.582377][ T4209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.606933][ T4209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.820649][ T4209] team0: Port device team_slave_0 added
[   93.854104][ T4252] tmpfs: Bad value for 'mpol'
[   93.877762][ T4209] team0: Port device team_slave_1 added
[   94.005080][ T4259] netlink: 'syz.0.138': attribute type 11 has an invalid length.
[   94.041439][ T4209] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.048514][ T4209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.074424][    C0] vkms_vblank_simulate: vblank timer overrun
[   94.178348][ T4209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.222018][ T4209] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.249573][ T4209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.283731][ T4209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.338342][ T4280] netlink: 132 bytes leftover after parsing attributes in process `syz.2.144'.
[   94.459855][ T4209] device hsr_slave_0 entered promiscuous mode
[   94.499825][ T4209] device hsr_slave_1 entered promiscuous mode
[   94.510846][ T4209] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   94.529023][ T4209] Cannot create hsr debugfs directory
[   94.536824][ T4288] device bridge0 entered promiscuous mode
[   94.669355][ T1075] Bluetooth: hci5: command 0x0409 tx timeout
[   94.831862][ T4209] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.841252][ T4293] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   95.838036][ T4209] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.851875][ T4301] MTD: Attempt to mount non-MTD device "./file0"
[   95.865780][ T4301] blk_update_request: I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   96.008108][ T4209] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.030614][ T3644] Bluetooth: hci0: command 0x0c1a tx timeout
[   96.038390][ T4284] loop2: detected capacity change from 0 to 32768
[   96.218732][ T4209] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.249167][ T4284] XFS (loop2): Mounting V5 Filesystem
[   96.329611][ T3825] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   96.519221][ T4319] loop3: detected capacity change from 0 to 512
[   96.891790][ T3825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   96.943674][ T3825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[   97.012986][ T4209] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   97.022305][ T3644] Bluetooth: hci5: command 0x041b tx timeout
[   97.030601][ T3825] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   97.054281][ T3825] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   97.055939][ T4284] XFS (loop2): Ending clean mount
[   97.074009][ T3825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.096392][ T3825] usb 1-1: config 0 descriptor??
[   97.106717][ T4209] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   97.120446][ T4284] XFS (loop2): Quotacheck needed: Please wait.
[   97.126713][ T4209] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   97.136692][ T4300] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   97.144440][ T4319] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002]
[   97.152671][ T4319] System zones: 0-2, 18-18, 34-35
[   97.178345][ T4319] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   97.182376][ T4209] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   97.189586][ T4319] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038 (0x7fffffff)
[   97.272056][ T4284] XFS (loop2): Quotacheck: Done.
[   97.417781][ T4209] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.434185][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   97.450992][ T4324] loop4: detected capacity change from 0 to 512
[   97.500156][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   97.511804][ T4209] 8021q: adding VLAN 0 to HW filter on device team0
[   97.535342][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   97.555835][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   97.565499][ T3826] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.572630][ T3826] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.586385][ T4324] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   97.604170][ T4324] ext4 filesystem being mounted at /10/bus supports timestamps until 2038 (0x7fffffff)
[   97.611260][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   97.623041][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   97.641247][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   97.650399][ T3824] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.657623][ T3824] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.673126][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   97.689850][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   97.698714][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   97.708264][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   97.717708][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   97.728805][ T3825] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[   97.741421][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   97.761593][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   97.776320][ T3825] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   97.828907][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   97.840863][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   97.869692][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   97.878281][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   97.891883][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   98.062019][ T3615] usb 1-1: USB disconnect, device number 3
[   98.065727][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   98.087999][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   98.105380][ T4209] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.160582][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   98.177175][ T3569] XFS (loop2): Unmounting Filesystem
[   98.184982][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   98.209905][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   98.218166][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   98.230259][ T4209] device veth0_vlan entered promiscuous mode
[   98.249983][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   98.261185][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   98.273024][ T4209] device veth1_vlan entered promiscuous mode
[   98.361068][ T4209] device veth0_macvtap entered promiscuous mode
[   98.379256][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   98.387538][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   98.405417][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   98.414800][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   98.426814][ T4209] device veth1_macvtap entered promiscuous mode
[   98.447951][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   98.461220][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   98.485433][ T4209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.516850][ T4209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.728389][ T4209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.515039][ T4343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.161'.
[   99.532812][ T1075] Bluetooth: hci5: command 0x040f tx timeout
[   99.539302][ T4209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.609307][ T4209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.629369][ T4209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.644498][ T4349] syz.3.163[4349] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   99.644606][ T4349] syz.3.163[4349] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   99.686858][ T4209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.790558][ T4345] loop4: detected capacity change from 0 to 32768
[   99.796432][ T4209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.837876][ T4209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.859358][   T13] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   99.870912][ T4356] loop2: detected capacity change from 0 to 512
[   99.876576][ T4354] loop3: detected capacity change from 0 to 128
[   99.877403][ T4209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.896882][ T4209] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.910628][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   99.920384][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   99.942521][ T4356] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   99.957056][ T4345] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.161 (4345)
[   99.981064][ T4209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.000935][ T4209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.023918][ T4209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.069366][ T4209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.101599][ T4209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.118561][ T4209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.131829][ T4209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.150744][ T4209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.165354][ T4209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.178339][ T4209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.197293][ T4209] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.219002][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  100.234640][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  100.241985][   T13] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  100.256755][ T4209] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.275872][   T13] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  100.279265][ T4209] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.300331][ T4345] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  100.309167][ T4345] BTRFS info (device loop4): setting nodatacow, compression disabled
[  100.317330][ T4345] BTRFS info (device loop4): turning on flush-on-commit
[  100.324417][ T4345] BTRFS info (device loop4): max_inline at 0
[  100.330567][ T4345] BTRFS info (device loop4): enabling auto defrag
[  100.337153][ T4345] BTRFS info (device loop4): max_inline at 63
[  100.343320][ T4345] BTRFS info (device loop4): using free space tree
[  100.350367][ T4345] BTRFS info (device loop4): has skinny extents
[  100.369640][   T13] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  100.373067][ T4209] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.387842][   T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  100.406398][   T13] usb 1-1: SerialNumber: syz
[  100.426651][ T4209] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.599831][ T4345] BTRFS info (device loop4): enabling ssd optimizations
[  100.612734][ T3651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.625164][ T3651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.677665][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  100.705785][   T13] usb 1-1: 0:2 : does not exist
[  100.713928][ T4067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.723792][   T13] usb 1-1: unit 5: unexpected type 0x03
[  100.730350][ T4067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.773137][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  100.848671][   T13] usb 1-1: USB disconnect, device number 4
[  100.983820][ T4382] input: syz1 as /devices/virtual/input/input6
[  101.258061][ T3743] udevd[3743]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  101.549979][    T7] Bluetooth: hci5: command 0x0419 tx timeout
[  102.469771][ T4401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.171'.
[  102.690124][ T4409] loop2: detected capacity change from 0 to 8
[  102.738029][ T4411] loop0: detected capacity change from 0 to 8
[  102.956222][ T4409] SQUASHFS error: zlib decompression failed, data probably corrupt
[  102.975093][ T4409] SQUASHFS error: Failed to read block 0x4e8: -5
[  103.000547][ T4416] binder: BINDER_SET_CONTEXT_MGR already set
[  103.010403][ T4417] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  103.021725][ T4416] binder: 4412:4416 ioctl 4018620d 20000040 returned -16
[  103.033926][ T4409] SQUASHFS error: zlib decompression failed, data probably corrupt
[  103.056312][ T4409] SQUASHFS error: Failed to read block 0x4e9: -5
[  103.079635][   T26] audit: type=1800 audit(1723038888.407:4): pid=4409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.174" name="file1" dev="loop2" ino=5 res=0 errno=0
[  103.171221][ T4419] netlink: 40 bytes leftover after parsing attributes in process `syz.0.178'.
[  103.309881][   T26] audit: type=1326 audit(1723038888.627:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.0.178" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efcc547c9f9 code=0x0
[  103.492714][ T4424] loop2: detected capacity change from 0 to 512
[  103.711131][ T4424] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #15: comm syz.2.179: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964)
[  103.738255][ T4424] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.179: couldn't read orphan inode 15 (err -117)
[  103.832294][ T4424] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  104.057419][ T4432] loop3: detected capacity change from 0 to 1024
[  104.084074][ T4430] loop4: detected capacity change from 0 to 4096
[  104.099453][ T4434] capability: warning: `syz.0.184' uses deprecated v2 capabilities in a way that may be insecure
[  104.113601][ T4416] syz.1.176 (4416): drop_caches: 2
[  104.132432][ T4434] program syz.0.184 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  104.147992][ T4432] EXT4-fs (loop3): Unrecognized mount option "audit" or missing value
[  104.188375][ T4432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.183'.
[  104.470035][ T4441] tc_dump_action: action bad kind
[  105.265064][ T4442] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  105.364735][ T4446] loop3: detected capacity change from 0 to 512
[  105.451468][ T4446] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  105.581267][ T4450] loop0: detected capacity change from 0 to 1024
[  105.591991][ T4446] EXT4-fs (loop3): 1 truncate cleaned up
[  105.597691][ T4446] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,resgid=0x000000000000ee00,init_itable,noload,minixdf,usrjquota=,,errors=continue. Quota mode: none.
[  105.644024][ T4454] loop4: detected capacity change from 0 to 1024
[  105.770222][ T4454] EXT4-fs (loop4): Ignoring removed orlov option
[  105.817971][ T4457] loop1: detected capacity change from 0 to 256
[  105.818982][ T4437] loop2: detected capacity change from 0 to 32768
[  105.824346][ T4454] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  105.824378][ T4454] EXT4-fs (loop4): Unrecognized mount option "hash" or missing value
[  105.943973][ T4450] EXT4-fs (loop0): Test dummy encryption mode enabled
[  105.999411][ T4450] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[  106.027033][ T4450] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  106.048698][ T4450] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003]
[  106.081008][ T4450] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,noblock_validity,debug,test_dummy_encryption,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  106.389358][ T4450] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  106.529532][ T1078] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  106.949989][ T1078] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  107.002348][ T1078] usb 2-1: config 0 has no interface number 0
[  107.086787][ T1078] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  107.339818][ T4478] fscrypt (loop0): Error allocating 'xts(aes)' transform: -4
[  107.379594][ T4450] fscrypt (loop0): Error allocating 'xts(aes)' transform: -4
[  107.402025][ T1078] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  107.420676][ T4478] overlayfs: upper fs does not support tmpfile.
[  107.428049][ T4478] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  107.447069][ T1078] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[  107.475925][ T4478] overlayfs: failed index dir cleanup (-512)
[  107.492313][ T1078] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.519135][ T1078] usb 2-1: config 0 descriptor??
[  107.531416][ T4478] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[  107.707983][   T26] audit: type=1326 audit(1723038893.027:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4495 comm="syz.2.196" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82623d99f9 code=0x0
[  108.120497][ T4509] loop3: detected capacity change from 0 to 256
[  108.980185][ T1078] input: HID 04d9:a055 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:04D9:A055.0003/input/input7
[  109.096022][ T4514] loop1: detected capacity change from 0 to 8192
[  109.104569][ T4520] loop0: detected capacity change from 0 to 512
[  109.193277][ T1078] holtek_kbd 0003:04D9:A055.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.1-1/input1
[  109.346708][ T4514]  loop1: p1 p3 p4
[  109.360626][ T4514] loop1: partition table partially beyond EOD, truncated
[  109.383052][ T3714] device hsr_slave_0 left promiscuous mode
[  109.404095][ T3714] device hsr_slave_1 left promiscuous mode
[  109.426396][ T4520] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.206: bg 0: block 248: padding at end of block bitmap is not set
[  109.487300][ T4520] Quota error (device loop0): write_blk: dquota write failed
[  109.496547][ T4514] loop1: p1 size 3523149824 extends beyond EOD, truncated
[  109.497728][ T4520] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  109.515989][ T4520] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz.0.206: Failed to acquire dquot type 1
[  109.516603][ T3714] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  109.552697][ T4514] loop1: p3 start 4294901760 is beyond EOD, truncated
[  109.572605][ T4514] loop1: p4 size 50331648 extends beyond EOD, truncated
[  109.581276][ T4527] devtmpfs: Too few inodes for current use
[  109.601432][ T4520] EXT4-fs (loop0): 1 truncate cleaned up
[  109.609367][ T1078] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  109.621002][ T4520] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,noload,,errors=continue. Quota mode: writeback.
[  109.623848][ T3714] batman_adv: batadv0: Removing interface: batadv_slave_0
[  109.664705][ T3714] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  109.678506][ T3027]  loop1: p1 p3 p4
[  109.682983][ T3714] batman_adv: batadv0: Removing interface: batadv_slave_1
[  109.688805][ T3027] loop1: partition table partially beyond EOD, 
[  109.691400][ T4520] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038 (0x7fffffff)
[  109.708791][ T3027] truncated
[  109.711465][ T3714] device bridge_slave_1 left promiscuous mode
[  109.713208][ T3027] loop1: p1 size 3523149824 extends beyond EOD, truncated
[  109.728576][   T21] usb 2-1: USB disconnect, device number 2
[  109.735308][ T3027] loop1: p3 start 4294901760 is beyond EOD, truncated
[  109.740598][ T3714] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.749066][ T3027] loop1: p4 size 50331648 extends beyond EOD, truncated
[  109.795085][ T3714] device bridge_slave_0 left promiscuous mode
[  109.808104][ T3714] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.810877][ T4520] EXT4-fs error (device loop0): ext4_lookup:1859: inode #2: comm syz.0.206: deleted inode referenced: 12
[  109.854638][ T3714] device veth1_macvtap left promiscuous mode
[  109.869554][ T3714] device veth0_macvtap left promiscuous mode
[  109.878845][ T3714] device veth1_vlan left promiscuous mode
[  109.900063][ T3714] device veth0_vlan left promiscuous mode
[  109.911200][ T4520] EXT4-fs error (device loop0): ext4_find_dest_de:2112: inode #2: block 3: comm syz.0.206: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=2164260880, rec_len=231, size=4096 fake=0
[  110.031782][ T1078] usb 3-1: config index 0 descriptor too short (expected 45327, got 309)
[  110.053843][ T1078] usb 3-1: config 15 has an invalid descriptor of length 0, skipping remainder of the config
[  110.082516][ T1078] usb 3-1: config 15 has 0 interfaces, different from the descriptor's value: 2
[  110.103927][ T1078] usb 3-1: New USB device found, idVendor=12d1, idProduct=1c1f, bcdDevice=63.46
[  110.125203][ T1078] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.167291][  T155] Quota error (device loop0): remove_tree: Getting block too big (0 >= 6)
[  110.179766][  T155] EXT4-fs error (device loop0): ext4_release_dquot:6219: comm kworker/u4:3: Failed to release dquot type 1
[  110.488427][ T1078] usb 3-1: USB disconnect, device number 4
[  110.536636][ T3562] udevd[3562]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  110.553668][ T4535] udevd[4535]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  110.608089][ T3714] team0 (unregistering): Port device team_slave_1 removed
[  110.619801][    T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  110.635888][ T3714] team0 (unregistering): Port device team_slave_0 removed
[  110.652118][ T3714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  110.670308][ T3714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  110.753800][ T3714] bond0 (unregistering): Released all slaves
[  110.863976][    T7] usb 1-1: Using ep0 maxpacket: 32
[  110.999644][    T7] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  111.125021][ T4554] loop1: detected capacity change from 0 to 256
[  111.141371][ T4556] loop2: detected capacity change from 0 to 47
[  111.173940][    T7] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  111.188130][    T7] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  111.215871][    T7] usb 1-1: Product: syz
[  111.220642][    T7] usb 1-1: Manufacturer: syz
[  111.223158][ T4554] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  111.231389][    T7] usb 1-1: SerialNumber: syz
[  111.277683][    T7] usb 1-1: config 0 descriptor??
[  111.309584][ T4541] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  111.557587][ T4565] loop2: detected capacity change from 0 to 512
[  111.700779][ T4569] netlink: 19 bytes leftover after parsing attributes in process `syz.3.223'.
[  112.476107][ T4209] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000005)
[  112.519402][ T4209] exFAT-fs (loop1): Filesystem has been set read-only
[  112.538843][ T3615] usb 1-1: USB disconnect, device number 5
[  112.576998][ T4565] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  112.630502][ T4565] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038 (0x7fffffff)
[  112.695960][ T4565] EXT4-fs error (device loop2): ext4_do_update_inode:5160: inode #2: comm syz.2.222: corrupted inode contents
[  112.725856][ T4565] EXT4-fs error (device loop2): ext4_dirty_inode:5993: inode #2: comm syz.2.222: mark_inode_dirty error
[  112.760003][ T4565] EXT4-fs error (device loop2): ext4_do_update_inode:5160: inode #2: comm syz.2.222: corrupted inode contents
[  112.839890][ T4565] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.222: mark_inode_dirty error
[  112.929289][   T13] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  113.309548][   T13] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  113.337874][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.408630][   T13] usb 4-1: config 0 descriptor??
[  113.460713][   T13] cp210x 4-1:0.0: cp210x converter detected
[  113.916290][ T4579] loop2: detected capacity change from 0 to 32768
[  114.119618][   T13] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71
[  114.132567][   T13] cp210x 4-1:0.0: GPIO initialisation failed: -71
[  114.169819][ T4589] loop0: detected capacity change from 0 to 1024
[  114.192218][   T13] usb 4-1: cp210x converter now attached to ttyUSB0
[  114.208496][   T13] usb 4-1: USB disconnect, device number 3
[  114.235316][   T13] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  114.258013][   T13] cp210x 4-1:0.0: device disconnected
[  114.292989][ T4589] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  114.369514][ T4586] chnl_net:caif_netlink_parms(): no params data found
[  114.857574][ T4586] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.879322][ T4586] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.887588][ T4586] device bridge_slave_0 entered promiscuous mode
[  114.981768][ T4586] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.051548][ T4586] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.064772][ T4586] device bridge_slave_1 entered promiscuous mode
[  115.181095][ T4586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  115.233393][ T4586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.299286][ T3825] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  115.396940][ T4586] team0: Port device team_slave_0 added
[  115.423733][ T4586] team0: Port device team_slave_1 added
[  115.506023][ T4586] batman_adv: batadv0: Adding interface: batadv_slave_0
[  115.539235][ T4586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.565168][    C1] vkms_vblank_simulate: vblank timer overrun
[  115.619240][ T4586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  115.619798][ T4603] loop2: detected capacity change from 0 to 32768
[  115.647755][ T4586] batman_adv: batadv0: Adding interface: batadv_slave_1
[  115.669334][ T4586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.695375][    C1] vkms_vblank_simulate: vblank timer overrun
[  115.718326][ T4601] loop3: detected capacity change from 0 to 32768
[  115.749354][ T3825] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  115.789344][ T3644] Bluetooth: hci3: command 0x0409 tx timeout
[  115.811669][ T4586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  115.823200][ T3825] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  115.869570][ T3825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.886145][ T4603] XFS (loop2): Mounting V5 Filesystem
[  115.898596][ T3825] usb 1-1: config 0 descriptor??
[  115.907142][ T4586] device hsr_slave_0 entered promiscuous mode
[  115.925132][ T4586] device hsr_slave_1 entered promiscuous mode
[  115.935310][ T4601] XFS (loop3): Mounting V5 Filesystem
[  115.953061][ T4586] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  115.965871][ T4586] Cannot create hsr debugfs directory
[  116.105720][ T4603] XFS (loop2): Ending clean mount
[  116.141713][ T4603] XFS (loop2): Quotacheck needed: Please wait.
[  116.160083][ T4601] XFS (loop3): Ending clean mount
[  116.336037][ T4586] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.352039][ T4603] XFS (loop2): Quotacheck: Done.
[  116.419133][ T4628] device bridge_slave_1 left promiscuous mode
[  116.442841][ T3825] usb 1-1: string descriptor 0 read error: -71
[  116.454548][ T3825] usb 1-1: Found UVC 0.00 device <unnamed> (046d:08c1)
[  116.465871][ T4628] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.509476][ T3825] usb 1-1: No valid video chain found.
[  116.535765][ T3825] usb 1-1: USB disconnect, device number 6
[  116.550104][ T4586] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.566494][ T4631] loop0: detected capacity change from 0 to 256
[  116.574699][ T3572] XFS (loop3): Unmounting Filesystem
[  116.602563][ T3569] XFS (loop2): Unmounting Filesystem
[  116.723562][ T4586] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.796812][   T26] audit: type=1804 audit(1723038902.117:7): pid=4636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.238" name="/newroot/54/file0/cgroup.controllers" dev="loop0" ino=1048621 res=1 errno=0
[  116.889724][ T4586] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.102699][ T3825] kernel write not supported for file bpf-prog (pid: 3825 comm: kworker/1:15)
[  117.155031][ T4631] device vlan2 entered promiscuous mode
[  117.185817][ T4631] device macvtap0 entered promiscuous mode
[  117.217392][ T4586] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  117.266935][ T4586] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  117.303180][ T4586] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  117.481547][ T4644] loop3: detected capacity change from 0 to 32768
[  117.541877][ T4586] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  117.572891][ T4644] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.239 (4644)
[  117.612994][ T4644] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  117.622820][ T4644] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  117.635630][ T4644] BTRFS info (device loop3): trying to use backup root at mount time
[  117.644082][ T4644] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  117.654404][ T4644] BTRFS info (device loop3): use zstd compression, level 3
[  117.661841][ T4644] BTRFS info (device loop3): doing ref verification
[  117.668428][ T4644] BTRFS info (device loop3): allowing degraded mounts
[  117.675455][ T4644] BTRFS info (device loop3): enabling disk space caching
[  117.682728][ T4644] BTRFS error (device loop3): cannot disable free space tree
[  117.693430][ T4646] loop4: detected capacity change from 0 to 512
[  117.759742][ T4644] BTRFS error (device loop3): open_ctree failed
[  117.778722][ T4646] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  117.887789][    T7] Bluetooth: hci3: command 0x041b tx timeout
[  117.965270][ T4646] EXT4-fs (loop4): 1 orphan inode deleted
[  117.971290][ T4646] EXT4-fs (loop4): 1 truncate cleaned up
[  117.977086][ T4646] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback.
[  118.246002][ T4586] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.536470][ T4586] 8021q: adding VLAN 0 to HW filter on device team0
[  118.559524][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  118.588021][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  118.634151][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  118.650007][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  118.666520][ T4647] loop0: detected capacity change from 0 to 32768
[  118.674393][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.681520][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.713270][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  118.723321][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  118.733963][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.741085][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.764688][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  118.800607][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  118.813082][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  118.826253][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  118.872549][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  118.910617][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  118.933063][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  118.958823][ T4586] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  118.991700][ T4647] XFS (loop0): Mounting V5 Filesystem
[  119.009298][ T4586] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  119.041354][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  119.063280][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  119.082077][ T4656] loop3: detected capacity change from 0 to 40427
[  119.126489][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  119.143131][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  119.152614][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  119.194715][ T4647] XFS (loop0): Ending clean mount
[  119.209468][ T4656] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  119.241548][ T4656] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  119.272136][ T4647] XFS (loop0): Quotacheck needed: Please wait.
[  119.349814][ T4656] F2FS-fs (loop3): Found nat_bits in checkpoint
[  119.357014][ T4647] XFS (loop0): Quotacheck: Done.
[  119.446897][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  119.478304][ T4656] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  119.544466][ T4675] process 'syz.4.248' launched '/dev/fd/10' with NULL argv: empty string added
[  119.949566][ T3576] Bluetooth: hci3: command 0x040f tx timeout
[  120.310072][ T4656] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  120.344063][ T4647] xfs: Unknown parameter '��0xffffffffffffffff�	Z*��� m�.Dc�8�'�@��C9G�9���?�9�S�{�1��J���լ��5æ�Ԍ�����qq���Y�糔����'
[  120.360892][ T4656] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  120.577443][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  120.596034][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  120.623976][ T4586] 8021q: adding VLAN 0 to HW filter on device batadv0
[  120.630096][ T3568] XFS (loop0): Unmounting Filesystem
[  120.713170][ T4687] ptrace attach of "./syz-executor exec"[3896] was attempted by "./syz-executor exec"[4687]
[  121.446134][ T3714] device hsr_slave_0 left promiscuous mode
[  121.454848][ T3714] device hsr_slave_1 left promiscuous mode
[  121.470173][ T3714] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  121.477600][ T3714] batman_adv: batadv0: Removing interface: batadv_slave_0
[  121.493289][ T3714] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  121.504323][ T3714] batman_adv: batadv0: Removing interface: batadv_slave_1
[  121.516720][ T3714] device bridge_slave_1 left promiscuous mode
[  121.526679][ T3714] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.547469][ T3714] device bridge_slave_0 left promiscuous mode
[  121.556442][ T3714] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.579159][ T3714] device veth1_macvtap left promiscuous mode
[  121.589550][ T1078] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  121.592675][ T3714] device veth0_macvtap left promiscuous mode
[  121.607772][ T3714] device veth1_vlan left promiscuous mode
[  121.617171][ T3714] device veth0_vlan left promiscuous mode
[  121.873389][ T4689] Bluetooth: hci3: service_discovery: too big uuid_count value 65535
[  121.882885][ T1078] usb 3-1: too many configurations: 65, using maximum allowed: 8
[  121.959924][ T1078] usb 3-1: config 255 has too many interfaces: 248, using maximum allowed: 32
[  121.968840][ T1078] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  122.009339][ T1078] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 248
[  122.028563][ T4693] loop3: detected capacity change from 0 to 2048
[  122.030203][ T3614] Bluetooth: hci3: command 0x0419 tx timeout
[  122.054682][ T3714] team0 (unregistering): Port device team_slave_1 removed
[  122.092676][ T3714] team0 (unregistering): Port device team_slave_0 removed
[  122.109771][ T1078] usb 3-1: config 255 has too many interfaces: 248, using maximum allowed: 32
[  122.118656][ T1078] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  122.130128][ T1078] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 248
[  122.143703][ T3714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  122.160981][ T4693] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  122.172371][ T3714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  122.249420][ T1078] usb 3-1: config 255 has too many interfaces: 248, using maximum allowed: 32
[  122.258425][ T1078] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  122.289235][ T1078] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 248
[  122.339057][ T4697] loop0: detected capacity change from 0 to 256
[  122.389526][ T1078] usb 3-1: config 255 has too many interfaces: 248, using maximum allowed: 32
[  122.402003][ T1078] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  122.424322][ T1078] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 248
[  122.445478][ T4697] FAT-fs (loop0): Directory bread(block 1285) failed
[  122.467336][ T4697] FAT-fs (loop0): Directory bread(block 1285) failed
[  122.476568][ T3714] bond0 (unregistering): Released all slaves
[  122.502442][ T4697] FAT-fs (loop0): Directory bread(block 1285) failed
[  122.510325][ T1078] usb 3-1: config 255 has too many interfaces: 248, using maximum allowed: 32
[  122.519539][ T1078] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  122.536085][ T4697] FAT-fs (loop0): Directory bread(block 1285) failed
[  122.543184][ T1078] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 248
[  122.552761][ T4699] loop3: detected capacity change from 0 to 1024
[  122.570529][ T4697] FAT-fs (loop0): Directory bread(block 1285) failed
[  122.583632][ T4700] FAT-fs (loop0): Directory bread(block 1285) failed
[  122.592604][ T4700] FAT-fs (loop0): Directory bread(block 1285) failed
[  122.600395][ T4700] FAT-fs (loop0): Directory bread(block 1285) failed
[  122.614484][ T4697] FAT-fs (loop0): Directory bread(block 1285) failed
[  122.625862][ T4697] FAT-fs (loop0): FAT read failed (blocknr 1281)
[  122.750700][ T1078] usb 3-1: config 255 has too many interfaces: 248, using maximum allowed: 32
[  122.787174][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  122.795579][ T1078] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  122.817809][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  122.827230][ T1078] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 248
[  122.879096][ T4703] netlink: 24 bytes leftover after parsing attributes in process `syz.0.256'.
[  122.929505][ T1078] usb 3-1: config 255 has too many interfaces: 248, using maximum allowed: 32
[  122.938632][ T1078] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  122.954226][ T1078] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 248
[  122.966175][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  122.975029][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  123.004031][ T4586] device veth0_vlan entered promiscuous mode
[  123.026284][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  123.034961][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  123.052071][ T4713] loop4: detected capacity change from 0 to 256
[  123.054385][ T4586] device veth1_vlan entered promiscuous mode
[  123.070557][ T1078] usb 3-1: config 255 has too many interfaces: 248, using maximum allowed: 32
[  123.084947][ T1078] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  123.122004][ T1078] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 248
[  123.154954][ T1078] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  123.162382][ T3614] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  123.167157][ T4713] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d)
[  123.186126][ T1078] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.188590][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  123.211484][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  123.226503][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  123.235760][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  123.259606][ T4586] device veth0_macvtap entered promiscuous mode
[  123.323409][ T4717] loop0: detected capacity change from 0 to 128
[  123.416142][ T4586] device veth1_macvtap entered promiscuous mode
[  123.454085][ T3614] usb 4-1: Using ep0 maxpacket: 8
[  123.610668][ T3614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  123.717221][ T3614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  123.868565][ T3614] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  123.905126][ T4586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  123.974732][ T3614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  123.992732][ T1078] usb 3-1: USB disconnect, device number 5
[  124.003134][ T4586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.013100][ T4586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.024462][ T4717] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  124.035300][ T4717] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  124.049222][ T4586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.089301][ T4586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.108875][ T3614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  124.130870][ T4586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.139087][ T4721] loop2: detected capacity change from 0 to 4096
[  124.141427][ T4586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.158496][ T4586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.172241][ T4586] batman_adv: batadv0: Interface activated: batadv_slave_0
[  124.178820][   T13] Bluetooth: hci3: command 0x0411 tx timeout
[  124.182200][ T3821] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  124.195087][ T3821] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  124.203509][ T3821] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  124.212717][ T3821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  124.231129][ T4586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.248086][ T4721] ntfs: (device loop2): ntfs_read_inode_mount(): Incorrect mft record size 2048 in superblock, should be 4096.
[  124.271136][ T4586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.284016][ T4586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.289725][ T4721] ntfs: (device loop2): ntfs_read_inode_mount(): Failed. Marking inode as bad.
[  124.295092][ T4586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.314147][ T4586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.324615][ T4586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.334561][ T4586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.345116][ T4586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.355843][ T3614] usb 4-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8
[  124.357440][ T4586] batman_adv: batadv0: Interface activated: batadv_slave_1
[  124.366381][ T3614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.381903][ T3614] usb 4-1: Product: syz
[  124.386293][ T3614] usb 4-1: Manufacturer: syz
[  124.387324][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  124.397125][ T3614] usb 4-1: SerialNumber: syz
[  124.425364][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  124.437173][ T4586] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.446644][ T4586] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.455603][ T4586] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.464369][ T4586] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.474227][ T3614] usb 4-1: config 0 descriptor??
[  124.538854][ T3614] redrat3 4-1:0.0: Couldn't find all endpoints
[  124.735137][ T4725] loop0: detected capacity change from 0 to 512
[  125.532336][ T4728] loop2: detected capacity change from 0 to 2048
[  125.555381][ T4725] EXT4-fs (loop0): orphan cleanup on readonly fs
[  125.593015][ T4728] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  125.600379][ T3312] usb 4-1: USB disconnect, device number 4
[  125.626608][ T3650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.635840][ T4725] EXT4-fs error (device loop0): ext4_find_extent:929: inode #4: comm syz.0.264: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0)
[  125.663234][ T3842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.703202][ T3650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.723064][ T3842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.736788][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  125.753221][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  125.777505][ T4725] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=-117
[  125.787819][ T4725] EXT4-fs warning (device loop0): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  125.815501][ T4725] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  125.828987][ T4725] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  125.840996][ T4733] loop4: detected capacity change from 0 to 2048
[  125.917384][ T4733] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,lazytime,data_err=abort,errors=remount-ro,. Quota mode: writeback.
[  125.947729][ T4733] EXT4-fs error (device loop4): ext4_find_extent:929: inode #2: comm syz.4.266: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  126.018655][ T4733] EXT4-fs (loop4): Remounting filesystem read-only
[  126.173405][ T4743] loop0: detected capacity change from 0 to 1024
[  126.279596][ T3615] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  126.334287][ T4743] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,resgid=0x0000000000000000,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback.
[  126.569399][ T3615] usb 3-1: Using ep0 maxpacket: 8
[  126.719341][ T3615] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  126.839378][ T3615] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  126.865148][ T3615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[  126.884759][ T3615] usb 3-1: SerialNumber: syz
[  126.908452][ T3615] usb 3-1: config 0 descriptor??
[  127.048625][ T4745] loop1: detected capacity change from 0 to 32768
[  127.160561][ T3614] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  127.269386][ T3615] usb 3-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  127.288865][ T3615] usb 3-1: No valid video chain found.
[  127.339394][ T3615] usb 3-1: USB disconnect, device number 6
[  127.546020][ T4745] XFS (loop1): Mounting V5 Filesystem
[  127.559360][ T3614] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8
[  127.643041][ T3614] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895
[  127.908173][ T3614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  128.066067][ T4745] XFS (loop1): Ending clean mount
[  128.119567][ T3614] usb 4-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00
[  128.169299][ T3614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  128.202777][ T3614] usb 4-1: SerialNumber: syz
[  128.224381][ T3614] usb 4-1: config 0 descriptor??
[  128.259591][ T4753] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  128.280531][ T3614] port100 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  128.350700][ T4586] XFS (loop1): Unmounting Filesystem
[  128.527199][ T3614] usb 4-1: USB disconnect, device number 5
[  128.929113][ T4781] loop1: detected capacity change from 0 to 4096
[  128.989685][ T4781] ntfs: (device loop1): is_boot_sector_ntfs(): Invalid end of sector marker.
[  129.012817][ T4781] ntfs: (device loop1): ntfs_read_inode_mount(): Device read failed.
[  129.038464][ T4781] ntfs: (device loop1): ntfs_read_inode_mount(): Failed. Marking inode as bad.
[  129.068854][ T4781] ntfs: (device loop1): ntfs_fill_super(): Failed to load essential metadata.
[  129.519310][ T4789] mmap: syz.4.279 (4789) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  130.156018][ T4806] tmpfs: Unknown parameter 'usrquota'
[  131.212383][ T4817] loop0: detected capacity change from 0 to 512
[  131.269633][ T4817] EXT4-fs (loop0): invalid inodes per group: 0
[  131.269633][ T4817] 
[  131.409925][   T26] audit: type=1800 audit(1723038916.727:8): pid=4810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.286" name="/newroot/4/file0" dev="tmpfs" ino=39 res=0 errno=0
[  131.414330][ T4811] overlayfs: workdir and upperdir must be separate subtrees
[  131.449378][ T3614] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  131.583632][ T4816] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  131.602930][ T4822] kvm: emulating exchange as write
[  131.709536][ T3614] usb 3-1: Using ep0 maxpacket: 16
[  132.379342][ T3614] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  132.390235][ T3614] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  132.404637][ T3614] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  132.422439][ T3614] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.444176][ T3614] usb 3-1: config 0 descriptor??
[  132.491075][ T3614] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  132.524414][ T4837] 9pnet: p9_errstr2errno: server reported unknown error 
[  132.589244][ T3615] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  132.671528][ T1389] ieee802154 phy0 wpan0: encryption failed: -22
[  132.677954][ T1389] ieee802154 phy1 wpan1: encryption failed: -22
[  132.753710][ T1078] usb 3-1: USB disconnect, device number 7
[  132.949339][ T3615] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8
[  132.968566][ T3615] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895
[  132.988993][ T3615] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  133.092776][ T3615] usb 2-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00
[  133.111565][ T3615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  133.139417][ T3615] usb 2-1: SerialNumber: syz
[  133.148904][ T3615] usb 2-1: config 0 descriptor??
[  133.179606][ T4831] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  133.202363][ T3615] port100 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  133.458980][ T3821] usb 2-1: USB disconnect, device number 3
[  133.679598][ T1078] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  133.937399][ T4859] loop3: detected capacity change from 0 to 64
[  133.958101][ T4840] loop0: detected capacity change from 0 to 40427
[  134.043544][ T4840] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  134.089303][ T4840] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  134.105501][ T1078] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  134.122147][ T1078] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  134.132080][ T1078] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.138219][ T4840] F2FS-fs (loop0): invalid crc value
[  134.165790][ T1078] usb 5-1: config 0 descriptor??
[  134.215394][ T4840] F2FS-fs (loop0): Found nat_bits in checkpoint
[  134.249006][ T4869] loop1: detected capacity change from 0 to 64
[  134.286706][ T4871] loop3: detected capacity change from 0 to 512
[  134.304887][ T4840] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  134.463736][ T4871] EXT4-fs (loop3): invalid inodes per group: 0
[  134.463736][ T4871] 
[  134.537080][ T4843] dccp_close: ABORT with 120 bytes unread
[  134.792673][ T4840] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  134.869272][ T4878] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  135.963552][ T4840] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  136.286881][ T4875] sched: RT throttling activated
[  136.834389][ T1078] usb 5-1: string descriptor 0 read error: -71
[  136.840673][ T1078] usb 5-1: Found UVC 0.00 device <unnamed> (046d:08c1)
[  136.847558][ T1078] usb 5-1: No valid video chain found.
[  136.865698][ T1078] usb 5-1: USB disconnect, device number 2
[  136.912342][ T4883] netlink: 28 bytes leftover after parsing attributes in process `syz.4.308'.
[  137.003147][ T4883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.308'.
[  137.234849][ T4894] loop2: detected capacity change from 0 to 512
[  137.380214][ T4894] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  137.388506][ T4894] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  137.409390][ T4894] System zones: 0-1, 15-15, 18-18, 34-34
[  137.416347][ T4894] EXT4-fs (loop2): orphan cleanup on readonly fs
[  137.498156][ T4898] loop1: detected capacity change from 0 to 256
[  138.188969][ T4894] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0
[  138.198565][ T4894] EXT4-fs warning (device loop2): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  138.249367][ T4894] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  138.309346][ T4894] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.313: bad orphan inode 16
[  138.404498][ T4885] loop3: detected capacity change from 0 to 32768
[  138.413530][ T4894] ext4_test_bit(bit=15, block=18) = 1
[  138.418943][ T4894] is_bad_inode(inode)=0
[  138.438857][ T4894] NEXT_ORPHAN(inode)=0
[  138.475529][ T4903] netlink: 'syz.1.315': attribute type 1 has an invalid length.
[  138.484082][ T4894] max_ino=32
[  138.487297][ T4894] i_nlink=2
[  138.509475][ T4894] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  138.533242][ T4905] netlink: 9 bytes leftover after parsing attributes in process `syz.1.315'.
[  138.541651][ T4903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.315'.
[  138.567299][ T4894] fscrypt (loop2, inode 16): Error -61 getting encryption context
[  138.632891][ T4905] device gretap0 entered promiscuous mode
[  138.713380][ T4910] netlink: 5 bytes leftover after parsing attributes in process `syz.1.315'.
[  138.722641][ T4885] XFS (loop3): Mounting V5 Filesystem
[  138.763860][ T4917] tmpfs: Unknown parameter 'usrquota'
[  138.861638][ T4910] 0�X��D: renamed from gretap0
[  138.906315][ T4910] device 
30�X��D left promiscuous mode
[  139.023882][ T4910] A link change request failed with some changes committed already. Interface 
30�X��D may have been left with an inconsistent configuration, please check.
[  139.044508][ T4885] XFS (loop3): Ending clean mount
[  139.323973][ T4922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.318'.
[  139.352535][ T4922] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  139.361449][ T4922] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  139.370196][ T4922] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  139.378895][ T4922] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  139.411671][ T4885] XFS (loop3): Quotacheck needed: Please wait.
[  139.442723][ T4922] device vxlan0 entered promiscuous mode
[  139.640916][ T4885] XFS (loop3): Quotacheck: Done.
[  139.943205][ T4937] loop0: detected capacity change from 0 to 1024
[  140.370586][ T4946] loop1: detected capacity change from 0 to 512
[  141.045750][ T4946] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002]
[  141.054027][ T4946] System zones: 0-2, 18-18, 34-35
[  141.063843][ T4937] loop0: detected capacity change from 0 to 1024
[  141.090593][ T3572] XFS (loop3): Unmounting Filesystem
[  141.114045][   T26] audit: type=1800 audit(1723038926.437:9): pid=4943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.322" name="/newroot/41/file0" dev="tmpfs" ino=245 res=0 errno=0
[  141.115421][ T4947] overlayfs: workdir and upperdir must be separate subtrees
[  141.154089][ T4946] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  141.165278][ T4946] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038 (0x7fffffff)
[  141.297787][ T4949] overlayfs: conflicting lowerdir path
[  141.888926][ T4969] loop1: detected capacity change from 0 to 512
[  141.924442][ T4972] input: syz1 as /devices/virtual/input/input8
[  141.956370][ T4969] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  142.000673][ T4969] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 2: comm syz.1.329: invalid block
[  142.058685][ T4975] netlink: 28 bytes leftover after parsing attributes in process `syz.4.332'.
[  142.068872][ T4975] netlink: 28 bytes leftover after parsing attributes in process `syz.4.332'.
[  142.082480][ T4969] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.329: invalid indirect mapped block 10 (level 1)
[  142.090459][ T4975] netlink: 'syz.4.332': attribute type 6 has an invalid length.
[  142.109029][ T4969] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.329: invalid indirect mapped block 8 (level 1)
[  142.128194][ T4969] EXT4-fs (loop1): 1 truncate cleaned up
[  142.134264][ T4969] EXT4-fs (loop1): mounted filesystem without journal. Opts: mblk_io_submit,resuid=0x000000000000ee00,,errors=continue. Quota mode: none.
[  142.169273][ T3821] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  142.198934][ T4977] loop4: detected capacity change from 0 to 512
[  142.281480][ T4969] EXT4-fs warning (device loop1): dx_probe:832: inode #2: comm syz.1.329: Unrecognised inode hash code 4
[  142.294523][ T4977] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  142.326590][ T4977] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038 (0x7fffffff)
[  142.338040][ T4969] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.329: Corrupt directory, running e2fsck is recommended
[  142.451090][ T4977] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz.4.333: path /45/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0
[  142.589885][ T3821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  142.616340][ T3821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  142.635854][ T3821] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  142.669565][ T3821] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  142.678625][ T3821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.701826][ T4985] 9pnet: Insufficient options for proto=fd
[  142.730878][ T3821] usb 3-1: config 0 descriptor??
[  143.211071][ T4484] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  143.226541][ T3821] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  143.242961][ T3821] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  143.269547][ T4484] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.301871][ T3821] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  143.410286][ T4484] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  143.427494][ T4484] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.507628][ T4484] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  143.538231][ T4484] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.632047][ T4484] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  143.660981][ T4484] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.737663][ T5007] loop3: detected capacity change from 0 to 1024
[  143.793315][ T5007] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[  143.815713][ T5011] loop1: detected capacity change from 0 to 1024
[  143.835982][ T5007] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000003,resuid=0x0000000000000000,max_batch_time=0x0000000000000efe,data=ordered,jqfmt=vfsold,barrier=0x0000000000000648,barrier=0x0000000000000007,,errors=continue. Quota mode: writeback.
[  144.130647][ T5015] loop1: detected capacity change from 0 to 1024
[  144.253529][   T26] audit: type=1326 audit(1723038929.577:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5018 comm="syz.3.349" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f017a3bf9f9 code=0x0
[  144.282581][ T5008] chnl_net:caif_netlink_parms(): no params data found
[  144.494071][ T5021] loop3: detected capacity change from 0 to 2048
[  144.522771][ T5008] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.543699][ T5008] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.573736][ T5021]  loop3: p1 < > p4
[  144.578898][ T5008] device bridge_slave_0 entered promiscuous mode
[  144.581663][ T5021] loop3: p4 size 8388608 extends beyond EOD, truncated
[  144.701653][ T5029] device syzkaller1 entered promiscuous mode
[  144.732480][ T5008] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.754418][ T5008] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.770727][ T5008] device bridge_slave_1 entered promiscuous mode
[  144.851274][ T3562] udevd[3562]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  144.861755][ T5021] loop3: detected capacity change from 0 to 2048
[  144.893675][ T5008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  144.922378][ T5008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  144.923075][ T4535]  loop3: p1 < > p4
[  145.006847][ T4535] loop3: p4 size 8388608 extends beyond EOD, truncated
[  145.072676][ T4535] udevd[4535]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  145.090383][ T5021]  loop3: p1 < > p4
[  145.115006][ T5021] loop3: p4 size 8388608 extends beyond EOD, truncated
[  145.196573][ T5008] team0: Port device team_slave_0 added
[  145.260803][ T5008] team0: Port device team_slave_1 added
[  145.326560][ T3027]  loop3: p1 < > p4
[  145.356594][ T3027] loop3: p4 size 8388608 extends beyond EOD, truncated
[  145.416174][ T5008] batman_adv: batadv0: Adding interface: batadv_slave_0
[  145.448956][ T1075] usb 3-1: USB disconnect, device number 8
[  145.468217][ T5008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.486048][ T4535] udevd[4535]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  145.517959][ T3562] udevd[3562]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  145.623244][ T3562] udevd[3562]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  145.642933][ T4535] udevd[4535]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  145.670857][ T5008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  145.706948][ T5008] batman_adv: batadv0: Adding interface: batadv_slave_1
[  145.726547][ T3562] udevd[3562]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  145.746424][ T4535] udevd[4535]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  145.765159][ T5008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.790943][ T3614] Bluetooth: hci1: command 0x0409 tx timeout
[  145.804285][ T5066] loop2: detected capacity change from 0 to 64
[  145.806193][ T5008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  146.513357][ T5008] device hsr_slave_0 entered promiscuous mode
[  146.875344][ T5008] device hsr_slave_1 entered promiscuous mode
[  146.902537][ T5008] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  146.948186][ T5008] Cannot create hsr debugfs directory
[  147.022774][ T5072] loop3: detected capacity change from 0 to 4096
[  147.116600][ T5072] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  147.129094][ T4484] device hsr_slave_0 left promiscuous mode
[  147.158580][ T5072] ntfs: (device loop3): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover.
[  147.180230][ T4484] device hsr_slave_1 left promiscuous mode
[  147.187687][ T5072] ntfs: (device loop3): ntfs_fill_super(): Not an NTFS volume.
[  147.196272][ T4484] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.205564][ T4484] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.214473][ T5082] loop2: detected capacity change from 0 to 512
[  147.264040][ T4484] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.276017][ T4484] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.314582][ T5082] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  147.314923][ T4484] device bridge_slave_1 left promiscuous mode
[  147.334039][ T5082] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  147.403158][ T5082] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  147.419482][ T5082] System zones: 0-2, 18-18, 34-34
[  147.440615][ T5082] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  147.479458][ T4484] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.521767][ T5082] EXT4-fs (loop2): 1 truncate cleaned up
[  147.535058][ T4484] device bridge_slave_0 left promiscuous mode
[  147.557570][ T4484] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.566171][ T5082] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  147.590104][ T4484] device macvtap0 left promiscuous mode
[  147.602276][ T4484] device veth1_macvtap left promiscuous mode
[  147.618878][ T4484] device veth0_macvtap left promiscuous mode
[  147.631021][ T4484] device veth1_vlan left promiscuous mode
[  147.636831][ T4484] device veth0_vlan left promiscuous mode
[  147.879564][   T13] Bluetooth: hci1: command 0x041b tx timeout
[  147.916021][ T4484] team0 (unregistering): Port device team_slave_1 removed
[  147.929983][ T4484] team0 (unregistering): Port device team_slave_0 removed
[  147.945188][ T4484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  147.971610][ T4484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  148.048691][ T4484] bond0 (unregistering): Released all slaves
[  148.120884][ T5095] netlink: 24 bytes leftover after parsing attributes in process `syz.4.365'.
[  148.628350][ T5111] loop3: detected capacity change from 0 to 512
[  148.812272][ T5120] loop4: detected capacity change from 0 to 512
[  149.430917][ T5120] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002]
[  149.439062][ T5120] System zones: 0-2, 18-18, 34-35
[  149.458569][ T5111] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  149.545466][ T5120] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  149.556796][ T5120] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038 (0x7fffffff)
[  149.607492][ T5111] EXT4-fs (loop3): 1 orphan inode deleted
[  149.622971][ T5111] EXT4-fs (loop3): 1 truncate cleaned up
[  149.629735][ T5111] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback.
[  149.949978][   T13] Bluetooth: hci1: command 0x040f tx timeout
[  150.126069][ T5138] loop4: detected capacity change from 0 to 64
[  150.426060][ T5008] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  150.769709][ T5008] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  151.386352][ T5008] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  151.399306][   T13] Bluetooth: hci3: command 0x0409 tx timeout
[  151.474857][ T5008] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  151.530406][ T5153] netlink: 'syz.4.374': attribute type 4 has an invalid length.
[  151.587218][ T5156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.376'.
[  151.611171][ T5116] chnl_net:caif_netlink_parms(): no params data found
[  151.623180][ T5153] x_tables: duplicate underflow at hook 2
[  151.782283][ T5161] ieee802154 phy0 wpan0: encryption failed: -22
[  152.029299][ T1078] Bluetooth: hci1: command 0x0419 tx timeout
[  152.038643][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.086034][ T5116] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.110651][ T5116] device bridge_slave_0 entered promiscuous mode
[  152.139908][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.147000][ T5116] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.218953][ T5116] device bridge_slave_1 entered promiscuous mode
[  152.253435][ T5008] 8021q: adding VLAN 0 to HW filter on device bond0
[  152.423024][ T5116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  152.760113][ T5116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  152.956578][ T3312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  153.044580][ T3312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  153.320984][ T5196] loop3: detected capacity change from 0 to 1024
[  153.341169][ T5008] 8021q: adding VLAN 0 to HW filter on device team0
[  153.415540][ T5199] loop4: detected capacity change from 0 to 1024
[  153.446279][ T5116] team0: Port device team_slave_0 added
[  153.469625][ T3825] Bluetooth: hci3: command 0x041b tx timeout
[  153.490896][ T5199] 
[  153.493351][ T5199] ======================================================
[  153.500388][ T5199] WARNING: possible circular locking dependency detected
[  153.507411][ T5199] 5.15.164-syzkaller #0 Not tainted
[  153.512610][ T5199] ------------------------------------------------------
[  153.519626][ T5199] syz.4.388/5199 is trying to acquire lock:
[  153.525520][ T5199] ffff88807ea8a988 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_get_block+0x37f/0x14e0
[  153.536421][ T5199] 
[  153.536421][ T5199] but task is already holding lock:
[  153.543781][ T5199] ffff88807867c0b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x146/0x1c0
[  153.553294][ T5199] 
[  153.553294][ T5199] which lock already depends on the new lock.
[  153.553294][ T5199] 
[  153.562701][ T5116] team0: Port device team_slave_1 added
[  153.563695][ T5199] 
[  153.563695][ T5199] the existing dependency chain (in reverse order) is:
[  153.563704][ T5199] 
[  153.563704][ T5199] -> #1 (&tree->tree_lock){+.+.}-{3:3}:
[  153.583828][ T5196] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback.
[  153.586174][ T5199]        lock_acquire+0x1db/0x4f0
[  153.616105][ T5199]        __mutex_lock_common+0x1da/0x25a0
[  153.621864][ T5199]        mutex_lock_nested+0x17/0x20
[  153.627168][ T5199]        hfsplus_file_truncate+0x864/0xb80
[  153.633061][ T5199]        hfsplus_delete_inode+0x170/0x220
[  153.638802][ T5199]        hfsplus_unlink+0x50d/0x7f0
[  153.644009][ T5199]        vfs_unlink+0x359/0x5f0
[  153.648879][ T5199]        do_unlinkat+0x4a3/0x950
[  153.653833][ T5199]        __x64_sys_unlink+0x45/0x50
[  153.659084][ T5199]        do_syscall_64+0x3b/0xb0
[  153.664033][ T5199]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  153.670461][ T5199] 
[  153.670461][ T5199] -> #0 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}:
[  153.679529][ T5199]        validate_chain+0x1649/0x5930
[  153.684912][ T5199]        __lock_acquire+0x1295/0x1ff0
[  153.690301][ T5199]        lock_acquire+0x1db/0x4f0
[  153.695352][ T5199]        __mutex_lock_common+0x1da/0x25a0
[  153.701085][ T5199]        mutex_lock_nested+0x17/0x20
[  153.706378][ T5199]        hfsplus_get_block+0x37f/0x14e0
[  153.711935][ T5199]        block_read_full_page+0x2f9/0xde0
[  153.717669][ T5199]        do_read_cache_page+0x752/0x1040
[  153.723319][ T5199]        __hfs_bnode_create+0x4f2/0xbb0
[  153.728872][ T5199]        hfsplus_bnode_create+0x120/0x460
[  153.734603][ T5199]        hfsplus_bmap_alloc+0x63c/0x720
[  153.740162][ T5199]        hfs_btree_inc_height+0x11a/0xdb0
[  153.745908][ T5199]        hfsplus_brec_insert+0x776/0xdd0
[  153.751556][ T5199]        hfsplus_create_cat+0x498/0x1ba0
[  153.757198][ T5199]        hfsplus_fill_super+0x13e6/0x1c90
[  153.762931][ T5199]        mount_bdev+0x2c9/0x3f0
[  153.767787][ T5199]        legacy_get_tree+0xeb/0x180
[  153.772990][ T5199]        vfs_get_tree+0x88/0x270
[  153.777937][ T5199]        do_new_mount+0x2ba/0xb40
[  153.782966][ T5199]        __se_sys_mount+0x2d5/0x3c0
[  153.788165][ T5199]        do_syscall_64+0x3b/0xb0
[  153.793106][ T5199]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  153.799547][ T5199] 
[  153.799547][ T5199] other info that might help us debug this:
[  153.799547][ T5199] 
[  153.809773][ T5199]  Possible unsafe locking scenario:
[  153.809773][ T5199] 
[  153.817228][ T5199]        CPU0                    CPU1
[  153.822602][ T5199]        ----                    ----
[  153.827976][ T5199]   lock(&tree->tree_lock);
[  153.832480][ T5199]                                lock(&HFSPLUS_I(inode)->extents_lock);
[  153.840930][ T5199]                                lock(&tree->tree_lock);
[  153.847973][ T5199]   lock(&HFSPLUS_I(inode)->extents_lock);
[  153.853790][ T5199] 
[  153.853790][ T5199]  *** DEADLOCK ***
[  153.853790][ T5199] 
[  153.861927][ T5199] 3 locks held by syz.4.388/5199:
[  153.866946][ T5199]  #0: ffff888078d700e0 (&type->s_umount_key#64/1){+.+.}-{3:3}, at: alloc_super+0x210/0x940
[  153.877067][ T5199]  #1: ffff888060d50998 (&sbi->vh_mutex){+.+.}-{3:3}, at: hfsplus_fill_super+0x1378/0x1c90
[  153.887097][ T5199]  #2: ffff88807867c0b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x146/0x1c0
[  153.897050][ T5199] 
[  153.897050][ T5199] stack backtrace:
[  153.903025][ T5199] CPU: 0 PID: 5199 Comm: syz.4.388 Not tainted 5.15.164-syzkaller #0
[  153.911100][ T5199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  153.921169][ T5199] Call Trace:
[  153.924451][ T5199]  <TASK>
[  153.927384][ T5199]  dump_stack_lvl+0x1e3/0x2d0
[  153.932070][ T5199]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  153.937714][ T5199]  ? print_circular_bug+0x12b/0x1a0
[  153.942920][ T5199]  check_noncircular+0x2f8/0x3b0
[  153.947871][ T5199]  ? add_chain_block+0x850/0x850
[  153.952814][ T5199]  ? lockdep_lock+0x11f/0x2a0
[  153.957500][ T5199]  ? __lock_acquire+0x1295/0x1ff0
[  153.962532][ T5199]  validate_chain+0x1649/0x5930
[  153.967405][ T5199]  ? reacquire_held_locks+0x660/0x660
[  153.972787][ T5199]  ? __lock_acquire+0x1ff0/0x1ff0
[  153.977824][ T5199]  ? unwind_next_frame+0x1437/0x1fa0
[  153.983118][ T5199]  ? deref_stack_reg+0xbe/0x110
[  153.987976][ T5199]  ? look_up_lock_class+0x77/0x120
[  153.993093][ T5199]  ? register_lock_class+0x100/0x9a0
[  153.998387][ T5199]  ? is_dynamic_key+0x1f0/0x1f0
[  154.003240][ T5199]  ? validate_chain+0x112/0x5930
[  154.008196][ T5199]  ? mark_lock+0x98/0x340
[  154.012541][ T5199]  __lock_acquire+0x1295/0x1ff0
[  154.017409][ T5199]  lock_acquire+0x1db/0x4f0
[  154.021920][ T5199]  ? hfsplus_get_block+0x37f/0x14e0
[  154.027130][ T5199]  ? read_lock_is_recursive+0x10/0x10
[  154.032504][ T5199]  ? __might_sleep+0xc0/0xc0
[  154.037117][ T5199]  ? mark_lock+0x98/0x340
[  154.041453][ T5199]  __mutex_lock_common+0x1da/0x25a0
[  154.046648][ T5199]  ? hfsplus_get_block+0x37f/0x14e0
[  154.051844][ T5199]  ? hfsplus_get_block+0x37f/0x14e0
[  154.057041][ T5199]  ? mutex_lock_io_nested+0x60/0x60
[  154.062223][ T5199]  ? lockdep_softirqs_off+0x420/0x420
[  154.067600][ T5199]  mutex_lock_nested+0x17/0x20
[  154.072356][ T5199]  hfsplus_get_block+0x37f/0x14e0
[  154.077392][ T5199]  ? hfsplus_ext_write_extent+0x1f0/0x1f0
[  154.083099][ T5199]  ? do_raw_spin_unlock+0x137/0x8b0
[  154.088281][ T5199]  ? create_empty_buffers+0x5c0/0x6d0
[  154.093643][ T5199]  ? create_page_buffers+0x24b/0x330
[  154.098916][ T5199]  block_read_full_page+0x2f9/0xde0
[  154.104107][ T5199]  ? hfsplus_ext_write_extent+0x1f0/0x1f0
[  154.109823][ T5199]  ? block_is_partially_uptodate+0x2c0/0x2c0
[  154.115815][ T5199]  ? hfsplus_writepage+0x30/0x30
[  154.120775][ T5199]  do_read_cache_page+0x752/0x1040
[  154.125876][ T5199]  __hfs_bnode_create+0x4f2/0xbb0
[  154.130894][ T5199]  ? hfsplus_bnode_create+0x115/0x460
[  154.136269][ T5199]  ? hfsplus_bnode_get+0x40/0x40
[  154.141193][ T5199]  ? do_raw_spin_unlock+0x137/0x8b0
[  154.146381][ T5199]  hfsplus_bnode_create+0x120/0x460
[  154.151570][ T5199]  hfsplus_bmap_alloc+0x63c/0x720
[  154.156597][ T5199]  ? hfsplus_bmap_reserve+0x4e0/0x4e0
[  154.161956][ T5199]  hfs_btree_inc_height+0x11a/0xdb0
[  154.167136][ T5199]  ? hfsplus_brec_insert+0x72c/0xdd0
[  154.172487][ T5199]  ? hfsplus_bnode_read+0x186/0x1c0
[  154.177666][ T5199]  ? __lock_acquire+0x1ff0/0x1ff0
[  154.182672][ T5199]  ? hfsplus_brec_insert+0xdd0/0xdd0
[  154.187939][ T5199]  ? do_raw_spin_unlock+0x137/0x8b0
[  154.193118][ T5199]  ? hfsplus_bnode_put+0x1c0/0x510
[  154.198216][ T5199]  hfsplus_brec_insert+0x776/0xdd0
[  154.203319][ T5199]  ? hfsplus_brec_keylen+0x310/0x310
[  154.208587][ T5199]  ? mutex_lock_nested+0x17/0x20
[  154.213513][ T5199]  hfsplus_create_cat+0x498/0x1ba0
[  154.218614][ T5199]  ? look_up_lock_class+0x77/0x120
[  154.223719][ T5199]  ? hfsplus_find_cat+0x5c0/0x5c0
[  154.228724][ T5199]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  154.234605][ T5199]  ? enqueue_timer+0x233/0x540
[  154.239380][ T5199]  ? do_raw_spin_unlock+0x137/0x8b0
[  154.244566][ T5199]  ? _raw_spin_unlock+0x24/0x40
[  154.249407][ T5199]  ? hfsplus_new_inode+0x5c9/0x740
[  154.254531][ T5199]  hfsplus_fill_super+0x13e6/0x1c90
[  154.259726][ T5199]  ? hfsplus_mount+0x40/0x40
[  154.264321][ T5199]  ? snprintf+0xd6/0x120
[  154.268984][ T5199]  ? vscnprintf+0x80/0x80
[  154.273304][ T5199]  ? set_blocksize+0x1ec/0x370
[  154.278080][ T5199]  mount_bdev+0x2c9/0x3f0
[  154.282406][ T5199]  ? hfsplus_mount+0x40/0x40
[  154.287002][ T5199]  legacy_get_tree+0xeb/0x180
[  154.291668][ T5199]  ? hfsplus_mark_mdb_dirty+0x1b0/0x1b0
[  154.297223][ T5199]  vfs_get_tree+0x88/0x270
[  154.301655][ T5199]  do_new_mount+0x2ba/0xb40
[  154.306144][ T5199]  ? do_move_mount_old+0x160/0x160
[  154.311250][ T5199]  ? user_path_at_empty+0x12b/0x180
[  154.316476][ T5199]  __se_sys_mount+0x2d5/0x3c0
[  154.321144][ T5199]  ? __x64_sys_mount+0xc0/0xc0
[  154.325896][ T5199]  ? syscall_enter_from_user_mode+0x2e/0x240
[  154.331983][ T5199]  ? lockdep_hardirqs_on+0x94/0x130
[  154.337190][ T5199]  ? __x64_sys_mount+0x1c/0xc0
[  154.341944][ T5199]  do_syscall_64+0x3b/0xb0
[  154.346352][ T5199]  ? clear_bhb_loop+0x15/0x70
[  154.351025][ T5199]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  154.356942][ T5199] RIP: 0033:0x7f3a860570fa
[  154.361350][ T5199] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 7e 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  154.380942][ T5199] RSP: 002b:00007f3a844d3e68 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5
[  154.389355][ T5199] RAX: ffffffffffffffda RBX: 00007f3a844d3ef0 RCX: 00007f3a860570fa
[  154.397328][ T5199] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007f3a844d3eb0
[  154.405284][ T5199] RBP: 0000000020000000 R08: 00007f3a844d3ef0 R09: 0000000002000010
[  154.413241][ T5199] R10: 0000000002000010 R11: 0000000000000202 R12: 0000000020000080
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  154.421198][ T5199] R13: 00007f3a844d3eb0 R14: 00000000000006a2 R15: 00000000200013c0
[  154.429270][ T5199]  </TASK>
[  154.484723][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  154.520791][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  154.539724][ T3615] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.546814][ T3615] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.577912][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  155.022456][ T4484] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  155.037819][ T4484] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.137404][ T4484] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  155.162333][ T4484] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.247271][ T4484] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  155.257623][ T4484] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.355738][ T4484] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  155.366410][ T4484] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.464484][ T4484] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.505760][ T4484] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.593942][ T4484] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.633882][ T4484] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.436114][ T4484] device hsr_slave_0 left promiscuous mode
[  156.445441][ T4484] device hsr_slave_1 left promiscuous mode
[  156.452125][ T4484] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  156.462319][ T4484] batman_adv: batadv0: Removing interface: batadv_slave_0
[  156.470724][ T4484] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  156.478148][ T4484] batman_adv: batadv0: Removing interface: batadv_slave_1
[  156.489120][ T4484] device bridge_slave_1 left promiscuous mode
[  156.495597][ T4484] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.506660][ T4484] device bridge_slave_0 left promiscuous mode
[  156.518210][ T4484] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.532782][ T4484] device hsr_slave_0 left promiscuous mode
[  156.538903][ T4484] device hsr_slave_1 left promiscuous mode
[  156.545530][ T4484] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  156.553086][ T4484] batman_adv: batadv0: Removing interface: batadv_slave_0
[  156.560736][ T4484] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  156.568174][ T4484] batman_adv: batadv0: Removing interface: batadv_slave_1
[  156.575845][ T4484] device bridge_slave_1 left promiscuous mode
[  156.582423][ T4484] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.590597][ T4484] device bridge_slave_0 left promiscuous mode
[  156.596737][ T4484] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.607737][ T4484] device veth1_macvtap left promiscuous mode
[  156.614018][ T4484] device veth0_macvtap left promiscuous mode
[  156.620422][ T4484] device veth1_vlan left promiscuous mode
[  156.626258][ T4484] device veth0_vlan left promiscuous mode
[  156.633082][ T4484] device veth1_macvtap left promiscuous mode
[  156.639096][ T4484] device veth0_macvtap left promiscuous mode
[  156.645166][ T4484] device veth1_vlan left promiscuous mode
[  156.651071][ T4484] device veth0_vlan left promiscuous mode
[  156.804948][ T4484] team0 (unregistering): Port device team_slave_1 removed
[  156.815335][ T4484] team0 (unregistering): Port device team_slave_0 removed
[  156.825393][ T4484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  156.837839][ T4484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  156.883722][ T4484] bond0 (unregistering): Released all slaves
[  157.012467][ T4484] team0 (unregistering): Port device team_slave_1 removed
[  157.022602][ T4484] team0 (unregistering): Port device team_slave_0 removed
[  157.036398][ T4484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  157.048044][ T4484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  157.095309][ T4484] bond0 (unregistering): Released all slaves
[  158.439104][ T4484] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.476021][ T4484] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.524396][ T4484] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.573601][ T4484] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.657556][ T4484] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.715275][ T4484] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.763250][ T4484] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.803702][ T4484] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.775137][ T4484] device hsr_slave_0 left promiscuous mode
[  159.784608][ T4484] device hsr_slave_1 left promiscuous mode
[  159.792046][ T4484] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.802075][ T4484] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.810128][ T4484] device bridge_slave_1 left promiscuous mode
[  159.816427][ T4484] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.825233][ T4484] device bridge_slave_0 left promiscuous mode
[  159.831564][ T4484] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.843202][ T4484] device hsr_slave_0 left promiscuous mode
[  159.850249][ T4484] device hsr_slave_1 left promiscuous mode
[  159.856610][ T4484] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.864526][ T4484] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.874889][ T4484] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.882485][ T4484] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.891931][ T4484] device bridge_slave_1 left promiscuous mode
[  159.898182][ T4484] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.906649][ T4484] device bridge_slave_0 left promiscuous mode
[  159.912979][ T4484] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.923455][ T4484] device hsr_slave_0 left promiscuous mode
[  159.930290][ T4484] device hsr_slave_1 left promiscuous mode
[  159.936412][ T4484] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.944195][ T4484] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.952371][ T4484] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.959959][ T4484] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.967408][ T4484] device bridge_slave_0 left promiscuous mode
[  159.973674][ T4484] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.982022][ T4484] device bridge_slave_1 left promiscuous mode
[  159.988161][ T4484] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.996051][ T4484] device bridge_slave_0 left promiscuous mode
[  160.002285][ T4484] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.013389][ T4484] device veth1_macvtap left promiscuous mode
[  160.019768][ T4484] device veth0_macvtap left promiscuous mode
[  160.025833][ T4484] device veth1_vlan left promiscuous mode
[  160.031617][ T4484] device veth0_vlan left promiscuous mode
[  160.037825][ T4484] device veth1_macvtap left promiscuous mode
[  160.044111][ T4484] device veth0_macvtap left promiscuous mode
[  160.050230][ T4484] device veth1_vlan left promiscuous mode
[  160.055995][ T4484] device veth0_vlan left promiscuous mode
[  160.206769][ T4484] team0 (unregistering): Port device team_slave_1 removed
[  160.217276][ T4484] team0 (unregistering): Port device team_slave_0 removed
[  160.227010][ T4484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  160.238837][ T4484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  160.286836][ T4484] bond0 (unregistering): Released all slaves
[  160.372105][ T4484] team0 (unregistering): Port device team_slave_1 removed
[  160.382203][ T4484] team0 (unregistering): Port device team_slave_0 removed
[  160.395364][ T4484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  160.406961][ T4484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  160.449855][ T4484] bond0 (unregistering): Released all slaves
[  160.533656][ T4484] team0 (unregistering): Port device team_slave_1 removed
[  160.546411][ T4484] team0 (unregistering): Port device team_slave_0 removed
[  160.556955][ T4484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  160.568503][ T4484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  160.614617][ T4484] bond0 (unregistering): Released all slaves
[  160.667736][ T4484] team0 (unregistering): Port device team_slave_1 removed
[  160.678619][ T4484] team0 (unregistering): Port device team_slave_0 removed
[  160.689016][ T4484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  160.702025][ T4484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  160.744003][ T4484] bond0 (unregistering): Released all slaves