last executing test programs:

1m17.094096014s ago: executing program 1 (id=101):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000067c0)={[{@noinline_xattr}, {@four_active_logs}, {@jqfmt_vfsv0}, {@fault_injection={'fault_injection', 0x3d, 0xa0c8}}, {@atgc}, {@user_xattr}, {@noinline_xattr}, {@fastboot}, {@fsync_mode_strict}, {@discard_unit_section}]}, 0x21, 0x5533, &(0x7f00000002c0)="$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")
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x18)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file4\x00', 0x101042, 0x0)
write$cgroup_type(r1, &(0x7f0000000000), 0x9)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x800005, 0xb02, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61)
fallocate(r0, 0x11, 0x0, 0x1c8000000)

1m13.382529115s ago: executing program 1 (id=108):
mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_vhci(0x0, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000011c0)={0x80, 0xa0, 0x0, 0x0, 0xfffffe01})
syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x810801, &(0x7f0000000140)=ANY=[], 0x4, 0x208, &(0x7f0000000640)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4)
sendmmsg$inet(r5, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)}}], 0x1, 0x4000800)
ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
futex_waitv(&(0x7f0000002480)=[{0x8000000000000001, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x0)
fadvise64(r4, 0x0, 0xff39, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)

1m12.153496344s ago: executing program 1 (id=110):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpid()
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x220000, &(0x7f0000000180)=ANY=[@ANYRES64], 0x0, 0x290, &(0x7f0000000780)="$eJzs3M9r034YwPFn7bZuHVt7+PIFBfFBL3oJW/0LeuhALCjbKm4HIXOpK43taOIkIm43r/4dw6M3Qf0HdvEi3sXLEAQvO4iV5YfrtsB+0Jpufb9g5Fk+nyf5JE3Kk0A/Ow9eP6lXHaNqupIaU0mJbMquSH4vCg2Fy5Qfj0qnTbk58fPLlfnFpTvFcrk0pzpbXLhVUNWpq++fvXhz7aM7cf/t1LuMbOcf7vwofN3+f/vSzu+FaOtNV01dbjZdc9m2dKXm1A3Ve7ZlOpbWGo7VOtBetZtra56ajZXJ7FrLchw1G57WLU/dprotT83HZq2hhmHoZFYGTfrUGZWtuTmz2JPBIAnjcStbraKZjm2sbP2LQQEAgP6SVP2/WnO05mjjuPo/JWev/4ePHu5Qr8/n+UL9Pwj26v9seP8eRP0PAAAAAAAAAAAAAAAAAAAAAMB5sNtu59rtdi5aRn8ZERkTkej/pMeJ3uDzH2zzi0sZCX64NyZiv1qvrFeCZdBerEpNbLFkekTkl389hIJ49na5NK2+vHywN8L8jfVKWjJRfiQfnz8T5OvB/BHJdu6/IDn5Ly4/UyrE5o/Kjesd+Ybk5NMjaYotK/51HeanpfRyRjVzt3wof9zvBwAAAADARWDoX0ee3/12Q6NpQw61Byv33w9I7pj3A4eer4flcswEPQAAAAAAoPsc73ndtG2rRXC64AKfupH+GIaXEpEubvDzqshJO38Xkf44CV0Nvj0N7vqTdE76mwkAAABAt+0X/UmPBAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAwXXSycOi/meZe6xjd+lkjhIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoD38CAAD//8grHrI=")
sched_setscheduler(r2, 0x2, &(0x7f0000000440)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
fsopen(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYRES32=r5], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xbb, &(0x7f0000000480)=""/187, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x267e, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
lseek(r5, 0x101, 0x0)
getdents(r5, &(0x7f0000000640)=""/103, 0x67)
r6 = timerfd_create(0x0, 0x0)
close(r6)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000009000)={0x0, 0x0, &(0x7f0000008fc0)={&(0x7f0000008f80)=ANY=[@ANYBLOB="1c00010401029ab50f695e4c0594afc8956f65d9000002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4080)

1m10.928925517s ago: executing program 1 (id=113):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000740), 0x111}}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$FUSE(0xffffffffffffffff, &(0x7f0000001480)={0x2020}, 0x2020)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
read$rfkill(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x804008, &(0x7f0000000100)=ANY=[], 0x5a, 0x20d, &(0x7f0000000200)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
signalfd4(r0, &(0x7f0000000140), 0x8, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000002c0)={&(0x7f0000000000), &(0x7f0000000500)=[{}, {}, {}, {}], &(0x7f0000000040)=[0x0], 0x0, 0x4, 0x1})
r4 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0.0:\x00', 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB], 0x44}}, 0x0)

1m9.691726287s ago: executing program 1 (id=115):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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")
socket$nl_xfrm(0x10, 0x3, 0x6)
mkdir(&(0x7f0000000300)='./file0\x00', 0x17d)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/diskstats\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000000)=[{&(0x7f0000002100)=""/4112, 0x1010}], 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000300))
ioctl$FS_IOC_GETFLAGS(r4, 0x5437, 0x0)
capset(0x0, &(0x7f0000000280))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x82})
syz_pidfd_open(0x0, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
read$FUSE(r5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x2008014, &(0x7f0000000200)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2000000000000008}}, {@noblock_validity}, {@usrquota}, {@resgid}, {@nogrpid}, {@errors_remount}, {@noinit_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@resuid, 0x32}]}, 0x1b, 0x4f0, &(0x7f0000000a40)="$eJzs3V1rW+cdAPD/ObaSOHFmh+0iCywLS4Ydtkh2vCRmF1k2xnYV2JZdL/Ns2RjLlrHkJDZhc9gHGIyxDQaDXvWm0A9QKPkIpRBo70tbWkqbtBe5aKOit7w4kq0Q2Qr27wfH53nOi///R0JHes55OCeAfetURJyOiEeVSuVsRAw1lqeN6Uq1slHf7sH929PVKYlK5drnSURSX1bdZPSp/3mkvksciog//DbiL8nzcUtr6wtThUJ+pVHPlReXc6W19XPzi1Nz+bn80sTE+MXJS5MXJse60s7BiLj864///Y/Xf3P57Z/e/OD6p6N/TRrLI560o9vqTc/UXoum/ohY2YlgPdDXaE+m14kAANCR5u/8H0XE2RiKvtqvOQAAAGAvqfxiML5OIioAAADAnpXWxsAmabYxDmAw0jSbrY/h/V4cTgvFUvkns8XVpZn6WNnhyKSz84X8WGOs8HBkkmp9vFZ+Uj+/qT4REcci4l9DA7V6drpYmOn1yQ8AAADYJ45s6v9/NVTv/wMAAAB7zHCvEwAAAAB2nP4/AAAA7H36/wAAALCn/e7q1epUaT7/eubG2upC8ca5mXxpIbu4Op2dLq4sZ+eKxbnaPfsWt/t/hWJx+WextHorV86XyrnS2vr1xeLqUvn6/DOPwAYAAAB20bEf3n0/iYiNnw/UpqoDvU4K2BX9L7LxRzuXB7D7+nqdANAzL/T9D+wpmV4nAPRcEhH/32J928E77+xMPgAAQPeNfL/19f9k23MDG+kupQjsEOf/YP9y/R/2L9f/Yf/KRF903pEf2NFcgN5Itln/8tf/K5UXSggAAOi6wdqUpNmI2nmAwUjTbDbiaO2xAJlkdr6QH4uI70TEe0OZg9X6eG3PZNs+AwAAAAAAAAAAAAAAAAAAAAAAAABQV6kkUQEAAAD2tIj0k6Tx/K+RoTODm88PHEgeDtXmEXHzf9f+c2uqXF4Zry7/4vHy8n8by8/34gwGAAAAsFmzn97sxwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABANz24f3u6Oe1m3M9+GRHDreL3x6Ha/FBkIuLwl0n0P7VfEhF9XYi/cScifvWnFvGTalox3MiiVfyBbsU/3qr9W8dPI+JIF+LDfna3evy50urzl8ap2nzz5+/g4337uxC//fEvfXz862tz/DnaYYwT997MtY1/J+JEf+vjTzN+0ib+6Q7j//mP6+vt1lVeixhp+f2TPBMrV15czpXW1s/NL07N5efySxMT4xcnL01emBzLzc4X8o2/LWP88wdvPdqq/YfbxB/epv1nOmz/N/du3f9uvZhpFX/0dOv3/3ib+Gnju+/HjXJ1/UizvFEvP+3kG++e3Kr9M23av937P9ph+8/+/u8fdrgpALALSmvrC1OFQn5lXxde6tWo/izqbOO0EeZVaLJCfqX0t1cjjVey0PxMPOzJcQkAAOi+5/vAAAAAAAAAAAAAAAAAAAAAwG7rzj3DmvfE3vruek0b9dlz90IGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOilbwMAAP//lRTPYg==")

1m8.279549291s ago: executing program 1 (id=117):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = epoll_create1(0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0xfff)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000001c0))
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x8, 0xf, &(0x7f0000000140)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random})
openat$rtc(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000380)={0x0, 0x3938700}, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000300))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(0xffffffffffffffff, r5, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r6, 0x80000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040))

57.740053621s ago: executing program 4 (id=135):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000002c0)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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")
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000007000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB="0000000000400000000000000000000000000300", @ANYRES32=0x0, @ANYRES32], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
nanosleep(&(0x7f0000000080), 0x0)
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000001c0)="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", 0x118)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000340)={0x1, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001a80)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa011eee65624aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006e0400000000000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83c6e613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038d0100a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b17680100969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06de269e97fbb0776bf56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105cfdf8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f01000080000000004febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60133641a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df745986d96cc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2e9a20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc5270ee69b10e232e4084913a06d468d0928bad76d697e1015ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846899c6b23c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3a8737cb04a33694f40000000000005d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b95bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f11447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca86f750189d155bd077a79fe2c7e961352e56824f727d21d41ecc51a82000ae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc681b6c9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8504611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c01446234437b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb8808ebf5a34645680a6ce13086afb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c64cd14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e87973d574ea4f487663e60f2c7f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7430100bf3825a1996c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb150963b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b16500000000000000000000000000feca7430a2c1bb47aa8dc936a190b035728d75e4bb99a022680fb33f715284c29e0da627f1b11916964e73c8f14a1352df3bc0d2bd44640971bc464bf145e8f84b93f12c3d49cac2982d3332521bc64a88fd419f382a868642dae48b13afea55fadb0f1aefd6ef055d264a887a749456d526cd963260807bae672a80113a8f1bd55c546335b9c5a8b44e323d989c8761c43f30fd1a87385d3de4fcab5f146ca18f454e8d1e38930110c622581c0d22744993c0f71e72351465ce403a62ab52928e6b534ceacfd4697208376e6b76c62af188e7e7224254151686d2889da5a4cfded6dec613c996685489a02c5b347834263459063d5a10b4c2f826ffbd63b16300eb23a786f73577326b7e80a8b189795c7bde07f33693fbcc7c4d1407a4989dfdb33787b13500ec8827df3d169e222b01872a3d5de3a9e27079a499dc7f1abe685c8b0cd7e0d95bab5db3f981fe8913a184e29f698f0b231a6e5d21697cbee5a33a034f8be4153727393a1849d565699832dc266073ac402adef190ce3ee02c894e39137d8894e7aca608d75ae695ecd60eb64f44913cf43cab86a56efde2a48fa1eac2e63b0301d692e3f7"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)

55.295273628s ago: executing program 4 (id=137):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0)

54.117646996s ago: executing program 4 (id=138):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x20000006})
epoll_pwait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0)

52.250606958s ago: executing program 4 (id=143):
syz_mount_image$bcachefs(&(0x7f0000005b00), &(0x7f0000005b40)='./file2\x00', 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="6d657461646174615f636865636b73756d3d6e6f6e652c646174615f636865636b73756d3d7878686173682c6d657461646174615f636865636b73756d3d63726336342c7374725f686173683d6372633332632c76657273696f6e5f757067726164653d6e6f6e652c7375626a5f747970653d2f282f7b2c6f626a5f757365723d002c66736d616769633d3078303030303030303030b03030303030322c00"], 0x1, 0x5b36, &(0x7f0000005b80)="$eJzs3Q2MXWXdIPBz7p3p3Om0ZYoCtXx0gNItrMCU4gINxoGNgKtFBC0qSFvptAz2AzqthSq2kIgGWbbJbpQ1kRCiCRtCcJes68eaYhYxK2ts4rLF3fXFgOaV9w3WIGhfSuybmXvOnblnznPPnXvvlBZ+v8Cce8597v95/s955sw5zz29NwIAAOAd4Zkvj/7l6oUf/Pk9w6/vuuqHm+6O+srj2ytpgf5kecdb1UKOpJ6uBePL7LjYMzTrmQ/c/5Hnv/WZ77z40vyly7596xWHbp+z8r77hn510aFf/O2uorjpeDp7Yj1+JY6iU3+59Ov3/vTZk8a2xVEUleP+3VE0Py79ZH6cCTH4RhRF62rtrH/yydeXrx9b7v5aT9324zJBjPd3tkoyzr7y4y2n/OG8K57f++vLXx+svLF190SRuDJpPEXRvDWTX98dRVFvNDE009G2IH1xsrwmiqLZk153caA96evPaLL95wbWFybLWcmyryBO+vzpmfXuJtvRlVlWmnxdq0ozHD+V7r85M1x/9uCWrWd+svxesjx7mvHLteNpVIqjrlp1G+OJMRJN2m9xFI/v+4n1Ut1YiDNjI46iOLNeyqyXuzN5jdebDLRyHNdvT8tltg8k27uS7acXjLXrAtvfk+ab/KIezOSfDdo35UEtr3Fpu37boC1HQmnSMSRve9reSrIz+pJtffHxU15zOEf63KqXHnjixZ0PLe4PtCP+bpzEj1uK/9ymS/Yv2fmbAwtC8deUkvilluKPnvfq4y9f+7OTgvH3pPHLLcV/4cIl3/jRrh0Hg/3zp7R/ulqKX15xzqFl9wyuCrb/4TR+paX4j1z+2Dfnve/px4PtH0z7p7e1/hnZ/uYNj55wIBg/SuPPbin+Za+deNaKLY9tCMZ/Ku2fvpbiPzs6svLeWxbtGAjF35fGn9tS/DN+d+MNe/cPvxBs/1DaP/0txX//4suuWXlg8/2hY2e8+0j9hQV4e3pXcm741WS91evMdk26XniwP66e881J/p/byYoyxuqZlzzumsF6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhneaR/3fDffnDam13Jek/y4LRydZlunxVFcW8URaPb1m7dNrJ5w8CtW7Zv3bx248DabQPDm7dtvXPgwvcObB2+bePaO8eeHTx3efV1x0dxdRmfOqXuw4cPHy71129L6/vcRf/+yYHT9v/fKBo84VendQXb/9G7Fv7r+Tk/M+Khwxv/3Vk3vTznf26vbuhP2tUfaFcUaNelj76y4g8/7P23UTR4YqN2/f3SK39a16DxDRNxEqWeqDT+oCeenduOWquT9qT91bV+ZOPwYHH/lgN5/P7gf/nEjtGbd1f7txLMo8n+7R06/NfN33/q5kt3XlPdcLTu96L+TrNI25f2XyXp73lJXvMCeXUF8rr3rNP/7v/8x02v7I4Gu/68aGrdRXl1JwOgO35PU/WmNcyO6/ukkpRP93j6uvO3bbrt/NE7d547smnthuENw5uXL19+8YXLL7jogn91/njq1Z8dyz+t/180mf+RGU9bLhoaSX82N56K2lXUH2PtKu6PyS0K/f69++NX/r+7/+uea6sbisZ5Wrp2PEmWs8d287Jo0nib2ld5eRX1Q3egHzZc1/efXhvY8k9Fx6HJe2byz4x46PCfR/7XB+bsPfOm6oYjcpyf3KAWj/O1Vift6Z583Fl29PZvT1RO8urLbdeZ97z6yf/9g3ig1r5Zs6I71m7btnVZ9ecRyuvd132xs3ldvOQfb9+55u75U/K6oPpzTtLSOfHJue3Kbk3zWjT+sxwl3ZIuokopP7/uqNq+7N+F9HXZXu1LnuuLj8/NKyt9btVLDzzx4s6HFod6Ov5utcbeaG51GZ8SKLkx88JyrcF59ReNjyiK1kzelvbjU9//DwN7fz5/U+H4qI6MKT+z6Q0d/tIlc34/ev2+ldUNR+a4MqlBLR5Xaq2eaM94f40fVy44evJ46/Zz3S9WPHR47ynv3bD8v29Lfu2L+rdWOq9/l0dR0XFgUWZ9po4D2XomyufHG8is90Xllo4bL1y45Bs/2rXjYPC48admjxtfrFsrt3nciAPjaf+X/vNfv7D/uQ917rjxoSXlT///RcuTDj1aft8qybiuBMZ1rdVJe+LJ4/q8m7dsXFfdfvSe/ybLguuf9O/36J07P7d248bhraPN5dXseUlaT7aXWz0vSX/7ji/IK91fE3nN3INm+qvZ37e0/euy/dXi7xvk6Yvilv6ePbfpkv1Ldv7mQH8gbrymlMQvtRR/9LxXH3/52p+dFIy/J43f1VL88opzDi27Z3BVMP7DcRK/0lL8Ry5/7Jvz3vf048H4g2n7e1s7nxjZ/uYNj54Q7v8ojd/XUvxnR0dW3nvLoh3B+PvipJ6xc7soevL15eur63HUnRyH03Z017Uryq7HmfVSZr08eb1UnYOvVVCO4/rtablk++mT2pLn+sD29OyxsqC6PJiuR9kHjbcfbUqTzgnythedXwPA20n6/n96rpG+/78o+YM46f3/6jKeVff6Bcn51IKJTePXeXcPVP+QTndeL21Hdl4vjb/0zPoYrc7rFc3LnZFZT9u1KOmVtD0NzhvmRE3My02tp/G8XCb94nmzga9mNnSNz+2F9lt3MlOR9z5zpr1zxiK0e569IL/VtfPs0LjLznek79PHTY677H0R6f7N3heRxl+YmUBr9b6IdsddOq3RYNyNZ1Y8nzp1XEQN+nViXORHy46LaYyj/uo4mtn3pY796/2ZnX83nxCIn/wdOdqv99Pt6fGhq8l5gFWB7Z2aB0gPF2m7ftugLUeCeQAAmLj+T88pxq7/x/5WD2TO84uuW7JXGWm84H0s5fz2FF3/Tr2fbXZL532XvXbiWSu2PLYheF78VLP3pdxWtza74L6Uon5cnFkv7MfArSBF8w5LMuX7orkt9eMZv7vxhr37h18I9uNQ9USquB/31K3NbbMfl2bWC/uxO79VRf2Yrado/J6dWe9L7giabr+/f/Fl16w8sPn+YL/vbrbfH65b6y/od9fpgfjH+nX6d6Ik/rF9nT7T85Fv2TxAMm89U/MA1wW2T3ceoG/Kg1pe4465eYDA3wUAOJal1/+1++WT6///kSnX7vVh8LxtqDP3swbP22rvP7V3Xh5sf+28vL3romD82nVRe9ctwf6pXbe0d90VjF+77mpvnibYP0+l/dPeeX/onwuk5/3H/nXRzM4zuC5K1qPsgyrXRQAAHA3S6//0dDW9///pZD17bjzz17kzfR0609fRMz3PMNPzJMf6de6xPs8w0/Nsb9U8wKzkefMA9Q9qeY0zDwAAQCd9MFne1GT5rvF7iKPoszffcsHqdcOfX71+6/Dw6G1rbx5ePbJ5ZFutXPf4ldfU+6RD9RXdJ51XfnaD8quD8evbc0WgfEi7+YfqK8o/r3yj/NcE49e358pA+ZB28w/VV5R/XvlG+a8Nxq9vz1WB8iHt5h+qryj/vPKN8v9sMH59ez4UKB/Sbv6h+oryzyvfKP+bg/Hr2/NvAuVD2s0/VF9R/nnlG+Wf/bzMUP4fDpQPaTf/UH1F+eeVb5T/cDB+fXs+Eigf0m7+ofqK8s8r3yj/9cH49e1ZGSgf0m7+ofqK8s8r3yj/DcH49e25OlA+pN38Q/UV5Z9XvlH+twTj17fno4HyIe3mH6qvKP+88o3yHwnGr2/PNYHyIe3mH6qvKP+88nX599Y/f2swfn17PhYoH9Ju/qH6ivLPK99o/38uGL++PdcGyoe0m3+ovqL888o3yn9jMH59e64LlA9pN/9QfUX555VvlP+mYPz69nw8UD6k3fxD9RXln1e+Uf6bg/Hr2/OJQPmQdvMP1VeUf175RvlvCcavb8+qQPmQTP5xcntE0/mH6ivKP698o/xvC8avb8/1gfIh7e7/UH1F+eeVb5T/7cH49e35ZKB8SF7+6VuezeQfqq8o/7zyjfLfGoxf355PBcqHtLv/Q/UV5Z9XvlH+o8H49e35dKB8SLv5h+oryj+vfKP8twXj17fnhkD5kHbzD9VXlH9e+Ub5bw/Gr2/PjeM/Ax8+k6Pd/G8sbF/z+TTK//PB+PXt+UygfEi7+YfqK8o/r3yj/HcE49e356ZA+ZB28w/VV5R/XvlG+d8RjF/fntWB8iG1/LdtHR5evf22dWu3Da/evGXd8OjqHVtHtm0bTk7U2r0vMXhfWXJfYnfU1TD/hZn145LPBzou8PlA2fJp2JPHH0z9fKBstV0Fn5NTtL+y9Rd9zlBe+bzxFtq/RceDZsdDVt3vR3WQjGweHd469fjd27A/Jo+JaPy2ueoERyU+sany2Y/rDFRTqPl8Kg3zyW7uSW4E7IlPaKp8FPg+uOlqPp84mE9eO6b7PXZp2Gl9j13mxxQ5n9Fal+/60fGD9MjajSM7h6e2f/ZR0P63ph9LU9pRtP/jTDvmJy2ZH/q+t0C7d3zvHx754x//24ejaPCE8ilt9V88dHjNwRM/+8tLe84fa3+pYftrJdPvVS74/sNs+TSfro1bRrf9y/Vbtm/Ofwctvd+5VFufofudkzzLTd6/HLrfY7r3L8dTHhydmr1/GQAA4J0i/ff/6fXqguTfoM7PTBE0Pw/c3r+PDs4D72tuHjg7G1E0D5wtn6bd7DxwX5vzwNn6Q/O0pQblG73v0uw88KcD5aer+XHS3ucABMdJ0lNF4yT77/CLxkm2/HTHSW+b4yRbf9E4ySvf6P3pZsfJ9YHyIc2Ph/Y+dyI4HgabGw/Z79UsGg/Z8tMdD5U2x0O2/qLxkFe+0f06zY6HjwfKN6v58dHe58IEx8eaZsbH/VO2FI2P7PerTHd8xG2Oj2z9ReMjr3yj+xmbHR8fC5RPNb//2/vcnuD+39Pc8SH7vS1F+z9bfrr7v9Tm/s/WX7T/88o3up+72f1/daB8qn7/j+348f0+vHrHlq2T74Fucv/PCu3/ou9tCWm+fTP7vTWtar79M/u5TzPf/pn9XKmZb397103B9u9r752u5ts/s98f3Koj9n5s8mFTRZ8/VfQ+7acC26f7Pu2sKQ+OTt6nBQAAgJmXvv+f/ovI9PPhv5Ysm/+Xks059r/fe2bnuY79z9+f2XlM83kNKjsKmM8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADojJ6uBePLZ748+perF37w5/cMv77rqh9uunvP0KxnPnD/R57/1me+8+JL85cu+/atVxy6fc7K++4b+tVFh37xt7sKA/dXF2cnq5Uoil+Jo+jUXy79+r0/ffaksW1xFEXluH93FM2PSz+ZH2ciDL4RRdG6Wjvrn3zy9eXrx5a7v9ZTt/24TJBsXlFfOW1PXTujOwoz4hhUScbZV3685ZQ/nHfF83t/ffnrg5U3tu6eKBJXJo2nKJq3ZvLru6Mo6k3+H5OOtgXpi5PlNVEUzZ70uosL2nVGcdN78jaemywXJstZybKvIFj6/OmZ9e7idozryiwrTb6uVaUZjp9K99+cGa4/e3DL1jM/WX4vWZ49zfjl9P84KsVRV626jfHEGIkm7bc4isf3/cR6qW4sxJmxEUdRnFkvZdbL3Zm8xutNBlo5juu3p+Uy2weS7V3J9tMLxtp1ge3vSfNNflEPZvLPBu2b8qCW17i0Xb9t0JYjoRQ4MKTb0/ZWkp3Rl2zri4+f8prDOdLnVr30wBMv7nxocX+gHfF34yR+3FL85zZdsn/Jzt8cWBCKv6aUxC+1FH/0vFcff/nan50UjL8njV9uKf4LFy75xo927TgY7J8/pf3T1VL88opzDi27Z3BVsP0Pp/ErLcV/5PLHvjnvfU8/Hmz/YNo/va31z8j2N2949IQDwfhRGn92S/Eve+3Es1ZseWxDMP5Taf/0tRT/2dGRlffesmjHQCj+vjT+3Jbin/G7G2/Yu3/4hWD7h9L+6W8p/vsXX3bNygOb7w8dO+PdR+ovLMDb07uSc6yvJuutXme2a9L1woP9cfWcb07y/9xOVpQxVs+8GYwPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDb0/CVD+66ct/qq7riKIoDZQ7nSJ8rzxoaGmih3vKKcw4tu2dw1eRtC1qIAwAAABRLr8NLtS2VaEG0I+6NTs4tn84RnJyuxfXbs3MIvRMlOxKn1KE45Q7F6epQnO4OxZnVoTg9HYpTKYhTiZqL09swTqnp9szuUJy+DsWZ06E4czsUZ15hnPoZwFCc4zrUnv6GcZofh/M7FOf4DsV5V4fivLtDcU7oUJwTOxTnpA7Fyc4pT3cczk1KLgzFGX9QLozTFZdrT+TNp6f1nJp5XWma9fQ1WU92zn669fQ2Wc+ZbdZTabKeJW3WEzdZz9lt1lMqqCcdt3dk25fWk641Of7v7FCcnR2K84UOxflih+Lc1aE4X+pQnF1txgFoVnr9P3Hd2B/1dF0azU6OONlZgPR6d1H11VOOR5XsBXoijXdKZvusonjZC/VMvEUdbt8Zme3ddfG6audNDeL1T463OPNkYb7ZCYVM+5ZON152YgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZtDwlQ/uunLf6quiOBr7L9fhHOlz5VlDQwMt1LvqpQeeeHHnQ4snb+vpaiEQAAAAUCi9Du+ubalEPf/Mrv3FyFWVAQA/d2d2ZtgWnBqoAyl0pHTFiGzpovxJDRd9mCUGJYDRgOluKUPdsN1FdpvCiqz1gfiggUQTV58MTxjCgxoUlWR50BiUhE0UmwjKi0TRAAmQUBOTMbtz7/zrzM46oi34+z3cc+853znfPbNNk+/MZMdCLsq1xRWSc4BC8pwp1tuoPLTejkTbNozPJvFjC4fvGpu/d/HD04cPjIQQZsfHx6+8fHzvFXs/OnbH9Ex1T/0a8n3WG07Wm7938c4DMzPVu+frz53vXUrmlZpdU2uXY8l7v7dPniiJb+b57930/2sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCpVa0sL1VWJydGohCiHjG1LtKxTC6OywPkvfbN7buvnnv0UGtfPjvAQgAAAEBfaR0+3OgphHw2EzLh3PWnC5uhxRCadT8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/p1pZXqqsTk5siUKIesTUukjHMrk4Lg+Q9zfz09c/8IWdR1v7SgOsAwAAAPSX1uFDjZ5CKIVdYTg6ty0uPRs4r2N+Z1y6zvmbjOs8O+gVt2uTcaObjPtgn7hPJe09AQAAAN750vo/2+gphnz2zJ71f7+6Po3b2RGXSdpBfisAAAAA/GfS+j/X6CmFfLbUqNc3W+9f2BGXzu/3vX06v9/39mncxT3ydH6fDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcvqqV5aXK6uREJgoh6hFT6yIdy+TiuDxA3hcvH/32z5eOnmjty2cHWAgAAADoK63Dm6V3IeSzI2E4bFmv+68c/fsXF6eObRsuJsO5XLjnwMLC3Xvr1zRu11df/9zvfhqVT4q7rH49JZsDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADeVtXK8lJldXLijCiEqEdMrYt0LJOL4/IAeV+cPvLPWx8557XWvtIA6wAAAAD9pXV4s/YvhFLIhVzYvv7UWuuvGeqY3+vMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHj3mL938c4DMzPVu924ceOmcXOq/2cCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOF9XK8lJldXKiEIUQ9YipdZGOZXJxXB4g78Mff/S7Z33kF4+19pUGWAcAAADoL63Dm7V/IZTCcBgO56w/dTsTWK//i//DlwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE4L1cryUmV1cuLMKISoR0yti3Qsk4vj8gB5L/zz529dOV59sbUvnx1gIQAAAKCvtA7PNXoKIZ+9LOTDjuR5pt6ktXmUSdru5wLNeXe15RnZ9Lz72uZlNj3vax07yya7qc8rpOsV621jXvnkeeUQQimZV2oOTLXNCw+1zTpz0+/5vbZ5xT7zAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJyGqpXlpcrq5EQUhRD1iKl1kY5lcnFcHiDvc4evOj66+MfXWvtKA6wDAAAA9JfW4c3avxBK4fxwVjh/ve4Pxfb4NG7fI69c/defnfGNEPZs/+0F2Z7r/+Xiyi87LyEMtQcNhfCeJF/UI9/RH//t4Vdf/cknQ9hzTmbHv5uvfcm4NnVi+23P7suPbfDBAAAAwLtIWv8PN3qKIZ+d7Vn/p5X3xvV/8zRhvQCfO/um+7Yl16Qi75gxVEzyDfXId+cV3/xR+YLjf1ir/zc6b/j0l8/7xLYwd0U8nV7rPZ0vGNdmHty9/+WtTx9Jd13Pn+nIn34uL5344WeOzh/8Sj1/IRSS/vOy3fKffO1wRlx7a/aJpw7uW7yhPX+2x/4f2P3+P/3+O4dfWcv/xs6RRv4PbLD/jfOffXPl+WOPP3Rje/7hHvkP3bTl+2+W5/7Ruf+RjoWTT77+B2/5K3SI4tob089cs3Vl1/72/CGEqdbA9PN/6olvlVd+ve1wmj/9rcjFuzryt/xTa712nDlFcW1lxyWHxp9c2NKeP+rIn+7/+P0/eOtLx5+7rnP/t3fuv2f+zv1fN5q55YWd44P8eAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4B2gWlleqqxOToRMCFGPmFoX6VgmF8flAfJ+7KJrb7j+tdmvt/blswMsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALxtqpXlpcrq5MRQFELUI6bWRTqWycVxeYC885e+/tjLN/7qfa19pQHWAQAAAPpL6/Bm7V8IpZALuTCyXvdPndh+27P78mOhWB+NkjY7Mze/8KE75o7M3n6K3hwAAADYrLT+zzZ6iiGfvSgMJ/X/yo5LDo0/ubAlrf9DCFNrl8Id0zPV8dA4J7huNHPLCzvHy41zgta4Sw/OzSTHBOm691+19aX5z65e33Xdvc24N6afuWbryq79adxw0q7HXdaMm3lw9/6Xtz59JI0bSs8p1uL2NOPemn3iqYP7Fm9IxzOt67XEnX1z5fljjz90Y2OdpB1J8gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8C924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsF9HIVYVcRyAZ+7d1at33XaLcpMiFRMNkpWKSohWIemhDSnwxQIfsjIyqSUMIdyELEzCp4qgiCgIRAqCHoqwoAySKIjQHsLQHuohNqINcaNid2d27x497XZqFeT74DDOnHt+8z9zxrP3AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcX3Pbesbaw08P/H7nots+371leNft7297an/fnMO37rvj2Cv3vnniZPeK1W88tH7k0Y7+vXv7vr5x5Is/n5w2+InxZmXqNkKIP8cQrvxyxQt7Pj2ycHQshhDqsWswhO5Y+7g7FhJ6T4cQ7puoc+rJd4evu3+0HXxu7pTxiwohxfsKzXquZ1zX1Hq5sDTSPnvmw+1X/Lhq/bFD364b7m2cfmxw8iOx0bKfQujc3Hp9ewhhXjpG5d3Wky9O7YYQwvyW626apq6lM6z/2pL+otTOSW1zmpx8fkmh3z7DOtoKbWOG11VVm+X8LD+/jlmev/hyK87Tndr3UrvyX+bX8xFDLYa2iekejpN7JLQ8txji2LOf7Nem7IVY2BsxhFjo1wr9envhvsbmTRutHuPU8fy5wvjiNN6RxpdMs9fuLhm/PN9v+o96qnD/xdDmGf+YuK8xua7v/6GWc6HW8g4623iut5EeRjONNePFZ1zz11nkcxtPPv/2iZ2vLusqqSO+E1N+rJT/zbabjy7f+d1QT1n+5lrKr1XKH1j168Gf7vpsYWn+/pxfr5R//PrlL36wa8ep0vX5Ja9PW6X8+pprRlbv7t1YWv9rOb9RKf/1dQde7rzhk4Ol9ffm9ZlXbX22Pv7HprcuHSrNDzl/fqX8tb9ddvWa7QceKM3/KK9Ps1L+kYGt/XsevGrH4rL8r3L+gkr5S3+4Z9Oho1uOl9bfl9enq1L+LcvWbugfemRf2bszDp6rv7AAF6ZL0nesZ1O/6u/M/6rl98JLXXH8O19HOhb8nxMVjM7TOYv5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/M0OHJAAAAAACPr/uh2BAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBUAAP//7sZVjA==")
syz_io_uring_setup(0x1f87, 0x0, &(0x7f0000000100), 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000480)='7', 0x1}], 0x1, 0x6e45, 0x0, 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x224805, 0x0, 0x0, 0x0, &(0x7f0000000bc0))
rmdir(0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x7fff, 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000c00)={0xfff, 0x5, 0x7, 0x6, 0x2, [{0x3, 0x8, 0x1, '\x00', 0x408}, {0x2, 0x38000000000, 0x1ff, '\x00', 0x80}]})
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r0, {0xf}}, './file2\x00'})
preadv(r2, &(0x7f0000000680), 0x0, 0x0, 0x3)

48.822509708s ago: executing program 4 (id=148):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000006000))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x4, 0x200000)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000b00)="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", 0xffe}, {&(0x7f00000001c0)="e0e9eeb295d8a63066cf52f798cc60a2112def96fb8290e6462cf2a094ac8966a6f6d9bb54341fc4804595fb9aa3427dab31ac878377981480f0730b2e7aa926f60e2c08607d30acae1c4e554439b6f63d0f5f41078149a4b1747f785b0df10f2c6b08d27c4da08ae5abee3a9e90cdce7e2f56861141ca9303c338ee3de12f40c0cdd7ad32", 0x85}, {&(0x7f0000000080)}, {&(0x7f0000000280)="815137007541dca1d48c9a00d067d9641bab4c13bd365ff9c3b6436356359aa641d2d7ce992b98b3d7635c50431d90d7aff75b2e0d755485d7102b1a02957346e92a0a77077bdad012b4bcad732fe5", 0x4f}], 0x4, 0xfffff000, 0x40)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000020240), 0x10010)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000], 0x0, 0x200394})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r7, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r3, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0xe)

45.369719988s ago: executing program 4 (id=155):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffa000/0x4000)=nil)
shmctl$SHM_LOCK(r3, 0xb)

43.818403075s ago: executing program 0 (id=157):
syz_mount_image$bcachefs(&(0x7f0000005b00), &(0x7f0000005b40)='./file2\x00', 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="6d657461646174615f636865636b73756d3d6e6f6e652c646174615f636865636b73756d3d7878686173682c6d657461646174615f636865636b73756d3d63726336342c7374725f686173683d6372633332632c76657273696f6e5f757067726164653d6e6f6e652c7375626a5f747970653d2f282f7b2c6f626a5f757365723d002c66736d616769633d3078303030303030303030b03030303030322c00"], 0x1, 0x5b36, &(0x7f0000005b80)="$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")
syz_io_uring_setup(0x1f87, 0x0, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@debug}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x570, &(0x7f0000000680)="$eJzs3V1rHFUYAOB3Nkm/tSmUoiIS6IWV2k2T+FFBsF6KFgt6X5dkGmo23ZLdlCYW2l7YG2+kCCIWxB/gvZfFP+CvKGihSAl64U1kNrPtNtnN52q2zvPAtOfMzObM2TPv2Xd2dtkACmsk+6cU8WLcjK+TiMNt2wYj3ziyst/So+uT2ZLE8vInfySR5Ota+yf5/wfzygsR8cuXESdLa9utLyzOVKrVdC6vjzZmr4zWFxZPXZqtTKfT6eXxiYkzb06Mv/P2Wz3r62vn//ru43sfnPnq+NK3Pz04cieJs3Eo39bejx242V4ZiZH8ORmKs6t2HOtBY/0k2e0DYFsG8jgfimwOOBwDedQD/383ImIZKKhE/ENBtfKA1rV9j66DnxkP31+5AFrb/8GV90ZiX/Pa6MBS8tSVUXa9O9yD9rM2fv797p1siQ3eh7jRg/YAWm7eiojTg4Nr578kn/+273TzzeP1rW6jaK8/sJvuZfnP653yn9Lj/Cc65D8HO8Tudmwc/6UHPWimqyz/e7dj/vt46hoeyGvPNXO+oeTipWp6OiKej4gTMbQ3q693P+fM0v3lbtva879sydpv5YL5cTwY3Pv0Y6YqjcpO+tzu4a2Il57kv0msmf/3NXPd1eOfPR/nN9nGsfTuK922bdz/dr3PgJd/jHi14/g/uaOVrH9/crR5Poy2zoq1/rx97Ndu7W+t/72Xjf+B9fs/nLTfr61vvY0f9v2ddtu23fN/T/Jps7wnX3et0mjMjUXsST5au378yWNb9db+Wf9PHF9//ut0/u+PiM822f/bR2933bUfxn9qS+O/9cL9D7/4vlv7mxv/N5qlE/mazcx/mz3AnTx3AAAAAAAA0G9KEXEoklL5cblUKpdXPt9xNA6UqrV64+TF2vzlqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XbnAQAAAAAAAAAAAAAAAAAAoE8c7PL9/8xvA7t9dMC/zk9+Q3FtGP+9+KUnoC95/Yfi6hL/pgUoAIEOxSX+objEPxSX+IfiEv9QXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPZsrz06PpkVp+6ujA/U7t6aiqtz5Rn5yfLk7W5K+XpWm26mpYna7Mb/b1qrXZlbDzmr4020npjtL6weGG2Nn+5ceHSbGU6vZAO/Se9AgAAAAAAAAAAAAAAAAAAgGdLfWFxplKtpnMKXQvvxW4fxucv7+ThSedRTto6uGJbTQz2yzAp9LSwyxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT5JwAA//821zOC")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42042, 0x2)
pwritev2(r1, &(0x7f0000000000)=[{&(0x7f0000000480)='7', 0x1}], 0x1, 0x6e45, 0x0, 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x224805, 0x0, 0x0, 0x0, &(0x7f0000000bc0))
rmdir(&(0x7f0000000080)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000c00)={0xfff, 0x5, 0x7, 0x6, 0x2, [{0x3, 0x8, 0x1, '\x00', 0x408}, {0x2, 0x38000000000, 0x1ff, '\x00', 0x80}]})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404})
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r4=>r0, {0xf}}, './file2\x00'})
preadv(r4, &(0x7f0000000680), 0x0, 0x0, 0x3)

38.806114197s ago: executing program 0 (id=162):
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@loopback, @in6=@private1, 0x0, 0x0, 0x400}, {0x0, 0x0, 0x101, 0x100}, {0x0, 0x6}, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x1}, {{@in6=@local}, 0x0, @in=@remote, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r3, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[], 0x1a4}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000001400)={0x83, 0xfffffffd, 0xffffffff}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000004a00010000000000000000000a"], 0x24}}, 0x0)

36.501572778s ago: executing program 0 (id=164):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2, &(0x7f0000000440)=ANY=[], 0xff, 0x1509, &(0x7f0000000640)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0)
ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040))

35.449280476s ago: executing program 0 (id=169):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000001600)={[{@lastblock}, {@umask={'umask', 0x3d, 0x5}}, {@undelete}, {@longad}, {@shortad}, {}, {@undelete}, {@shortad}, {@shortad}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@dmode={'dmode', 0x3d, 0x9}}, {@nostrict}, {@session}, {@longad}]}, 0x2, 0xc2d, &(0x7f00000001c0)="$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")
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r4, &(0x7f0000000200), 0xf000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

32.635981017s ago: executing program 0 (id=173):
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@loopback, @in6=@private1, 0x0, 0x0, 0x400}, {0x0, 0x0, 0x101, 0x100}, {0x0, 0x6}, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x1}, {{@in6=@local}, 0x0, @in=@remote, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r3, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[], 0x1a4}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000004a00010000000000000000000a"], 0x24}}, 0x0)

31.45858877s ago: executing program 0 (id=175):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = fanotify_init(0x0, 0x0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x180, 0x0)
fanotify_mark(r0, 0x641, 0x8001008, r1, 0x0)
fanotify_mark(r0, 0x20, 0x100a, r1, 0x0)
r2 = getpid()
syz_pidfd_open(r2, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
setrlimit(0xb, &(0x7f0000000300)={0x3, 0x6})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
unshare(0x12000480)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0xd, 0x0, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000640)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000200)={{0x7, 0x2}, 'port0\x00', 0x32, 0x10c14, 0x4a0, 0x3, 0xa, 0x9, 0x6, 0x0, 0x2, 0xc})

22.413788449s ago: executing program 2 (id=189):
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockname$packet(r2, 0x0, &(0x7f0000000640))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, 0x0, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x5522, 0x0)
ioctl$USBDEVFS_DISCSIGNAL(r5, 0x8010550e, 0x0)
ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x24, 0x64, {0x64, 0x3a, "e0cc9d0ee4d9dbca0d049f03b5a06f57f460e93062563fe1950b4215b5c3c07f709f12fb3a4f2dee405cf3f5151b0f1c52f54c73e3f95ad56d21d702d910ce3b6a2032d169fedfcf0f4ae53db451b4f577dd1923228abf80f212c4703c710ddaafc3"}}, &(0x7f0000000080)={0x0, 0x3, 0x48, @string={0x48, 0x3, "b3602121da276a4f71299c905211292bfb0cb8f07e46827e4d45563f87d0862ca213bf597d67269263888c57988d16824e2cd219f1f486cd7bd12d9c9b001cc62d694422bf76"}}, &(0x7f0000000100)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x5, 0xa400}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x18, 0x7, 0x2, "9bed3f13", "9043cc66"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x18, 0x8, 0x7, 0x4, 0x8, 0x40}}}, &(0x7f0000000640)={0x84, &(0x7f0000000200)={0x0, 0x14, 0x40, "cbc23ecd398611f9c0d6a44cac032d2ff4d4aa5400014d0059ff7afdcb1b86fdbae0b3925c7d5e0daf5e0367d2036b01aa60d5349b2f2a5d29e9abbc67ec3478"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xb}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x8, 0x8}}, &(0x7f0000000380)={0x40, 0x7, 0x2, 0x8}, &(0x7f00000003c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000400)={0x40, 0xb, 0x2, "deef"}, &(0x7f0000000440)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000480)={0x40, 0x13, 0x6, @remote}, &(0x7f00000004c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000500)={0x40, 0x19, 0x2, "d68a"}, &(0x7f0000000540)={0x40, 0x1a, 0x2, 0x401}, &(0x7f0000000580)={0x40, 0x1c, 0x1, 0xa4}, &(0x7f00000005c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000600)={0x40, 0x21, 0x1, 0x3}})
r7 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x84}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x30}}, 0x0)

20.6813759s ago: executing program 2 (id=192):
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_open_pts(r0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@keyring)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000700)=@secondary)
lseek(0xffffffffffffffff, 0x0, 0x1)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
r5 = fanotify_init(0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
fanotify_mark(r5, 0x165, 0x22, r6, 0x0)
fanotify_mark(r5, 0x102, 0x28, r4, 0x0)
fsopen(0x0, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)

15.953761041s ago: executing program 2 (id=196):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2, &(0x7f0000000440)=ANY=[], 0xff, 0x1509, &(0x7f0000000640)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0)
ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040))

14.618686044s ago: executing program 2 (id=198):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='nonumtail=0,iocharset=cp950,umask=00000000000000000000000,uni_xlate=1,uni_xlate=1,shortname=win95,utf8=0,shortname=win95,utf8=1,uid=', @ANYRESHEX=r0, @ANYBLOB="2c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c696f636861727365743d6d616363726f617469616e2c696f636861727365743d63703433372c757365667265652c726f6469722c7569643e74353a7bd912f41b207e4bc4478b479f5a21373fd412d72f65702b57308921a665e19ef4cc41aac5e7c09d211fd4c1fbf43833c769c6b16297c14d0d92df4f0371acd1b184d6", @ANYRES16, @ANYRESHEX=0x0], 0x6, 0x2c0, &(0x7f0000000940)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
socket$inet_udplite(0x2, 0x2, 0x88)
accept$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14)
open(&(0x7f0000000340)='./bus\x00', 0x0, 0x0)
mount$bpf(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240), 0x8882, &(0x7f0000000cc0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB="2c6d6f64653d3010303030303030303017303030b092783637af156664fe303030306f0ad6dff887633343e1f51573404ee5ea16fc6d11a2632a8c8102c1d005000000ab84f8830e01e08defee3edae79563fe78c8bba873368a2c237f59ea8f28d671a86b605efa02a4b39c2ddd2dfe4713733e585474152c66b006ca6ae6faf2b5fe11afda59c0e3506c366b55e82b7d3b6f838dd759ad60b538765a6d88b56245f4c7ce", @ANYRESHEX, @ANYBLOB=',\x00'])
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00'], 0xfd, 0x489, &(0x7f0000000580)="$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")
move_mount(r2, &(0x7f00000002c0)='./file1\x00', r1, &(0x7f0000000400)='./file0\x00', 0x4)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
sendfile(r4, r3, 0x0, 0x80000000)

14.027901152s ago: executing program 2 (id=199):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x4044880, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/36, 0x24, 0x1, &(0x7f0000000080)=""/31, 0x1f}, &(0x7f0000000280)=0x40)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000400))
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0)
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250)

11.7166394s ago: executing program 2 (id=203):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r0, 0x0, 0x0)

5.714330271s ago: executing program 3 (id=210):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYRES8=0x0], 0x1, 0x217, &(0x7f00000004c0)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getrule={0x1c}, 0x1c}}, 0x800)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0x40000022)
write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600f60f000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

4.541409026s ago: executing program 3 (id=211):
mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_vhci(0x0, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000011c0)={0x80, 0xa0, 0x0, 0x0, 0xfffffe01})
syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x810801, &(0x7f0000000140)=ANY=[], 0x4, 0x208, &(0x7f0000000640)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4)
sendmmsg$inet(r5, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800)
ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0)
fadvise64(r4, 0x0, 0xff39, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)

3.42774341s ago: executing program 3 (id=212):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2, &(0x7f0000000440)=ANY=[], 0xff, 0x1509, &(0x7f0000000640)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040))

3.018547725s ago: executing program 3 (id=213):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r2 = socket$inet(0x2, 0x2, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$unix(0x1, 0x5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00')
preadv(r7, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x38}, 0x40010)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1f, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1, 0x8000000}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x0, 0x92625986ec4e61b2})

1.967120869s ago: executing program 3 (id=214):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x4, 0xa, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000ad0000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000020c0)='devpts\x00', 0x0, 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x810020, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r5, &(0x7f00000077c0)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50)
syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_procfs(0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82)
getdents64(r7, 0x0, 0x4100)
close_range(r4, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000e7ffffffffffffff00000600000d0000000000000000000000f7ffffffffffffff00000000000000000000000000000000000000000000000000000000070000000000000000000000090000000000000000000000090000000000000000000000090200"/150], 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3}, 0x14)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3136b6ee}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044000}, 0x80)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 3 (id=215):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x20, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0xc, 0xb, 0x0, 0x0, @u64}]}, 0x20}, 0x1, 0xe0ffff}, 0x0)

kernel console output (not intermixed with test programs):

 batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.817756][ T5363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.019105][ T5234] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.221779][ T5363] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.237600][ T5363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.494883][ T5363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.739689][ T5243] Bluetooth: hci2: command tx timeout
[   93.764096][ T5425] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.773851][ T5425] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.785856][ T5425] bridge_slave_0: entered allmulticast mode
[   93.796880][ T5425] bridge_slave_0: entered promiscuous mode
[   94.002319][   T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.096513][ T5425] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.337881][ T5425] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.345180][ T5425] bridge_slave_1: entered allmulticast mode
[   94.358820][ T5425] bridge_slave_1: entered promiscuous mode
[   94.407042][ T5363] hsr_slave_0: entered promiscuous mode
[   94.445710][ T5363] hsr_slave_1: entered promiscuous mode
[   94.452710][ T5363] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   94.477591][ T5363] Cannot create hsr debugfs directory
[   94.535431][   T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.688798][   T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.699757][ T5243] Bluetooth: hci5: command tx timeout
[   94.843162][ T5425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.856263][ T5425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.011060][ T5425] team0: Port device team_slave_0 added
[   95.092701][ T5425] team0: Port device team_slave_1 added
[   95.256435][ T5425] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.277506][ T5425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.357615][ T5425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.468256][ T5425] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.475440][ T5425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.575681][ T5425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.649369][   T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.817751][ T5243] Bluetooth: hci2: command tx timeout
[   95.991598][ T5425] hsr_slave_0: entered promiscuous mode
[   96.010918][ T5425] hsr_slave_1: entered promiscuous mode
[   96.025911][ T5425] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   96.046065][ T5425] Cannot create hsr debugfs directory
[   96.192185][ T5441] chnl_net:caif_netlink_parms(): no params data found
[   96.652302][   T52] bridge_slave_1: left allmulticast mode
[   96.658693][   T52] bridge_slave_1: left promiscuous mode
[   96.665714][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.762177][   T52] bridge_slave_0: left allmulticast mode
[   96.777834][ T5243] Bluetooth: hci5: command tx timeout
[   96.801591][   T52] bridge_slave_0: left promiscuous mode
[   96.807501][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.028826][ T5513] loop2: detected capacity change from 0 to 4096
[   97.047742][ T5513] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[   97.104771][ T5501] loop4: detected capacity change from 0 to 32768
[   97.166210][ T5513] overlayfs: missing 'lowerdir'
[   97.265226][ T5501] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): filesystem UUID already open
[   97.299899][ T5501] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): shutdown complete
[   97.589299][ T5501] bcachefs: bch2_fs_get_tree() error: EINVAL
[   97.978136][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   98.017615][ T5501] loop4: detected capacity change from 0 to 1024
[   98.028791][ T5501] EXT4-fs: Ignoring removed orlov option
[   98.034512][ T5501] EXT4-fs: Ignoring removed nomblk_io_submit option
[   98.048301][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   98.094855][   T52] bond0 (unregistering): Released all slaves
[   98.116909][ T5501] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002]
[   98.132185][ T5527] loop2: detected capacity change from 0 to 512
[   98.168685][ T5501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.244535][ T5527] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   98.317051][ T5527] EXT4-fs (loop2): 1 truncate cleaned up
[   98.370787][ T5527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.448581][ T5527] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   98.469674][ T5527] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   98.491313][ T5237] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.501513][ T5441] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.517784][ T5441] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.528017][ T5441] bridge_slave_0: entered allmulticast mode
[   98.534941][ T5441] bridge_slave_0: entered promiscuous mode
[   98.543248][ T5441] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.550434][ T5441] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.557765][ T5441] bridge_slave_1: entered allmulticast mode
[   98.564911][ T5441] bridge_slave_1: entered promiscuous mode
[   98.703876][ T5234] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.857404][ T5441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.031511][ T5538] loop4: detected capacity change from 0 to 8
[   99.051230][ T5538] SQUASHFS error: zlib decompression failed, data probably corrupt
[   99.059567][ T5538] SQUASHFS error: Failed to read block 0x9b: -5
[   99.065850][ T5538] SQUASHFS error: Unable to read metadata cache entry [99]
[   99.073203][ T5538] SQUASHFS error: Unable to read inode 0x127
[   99.393634][ T5441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.042283][ T5363] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  100.177091][ T5544] loop4: detected capacity change from 0 to 1024
[  100.287836][ T5544] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.306292][   T52] hsr_slave_0: left promiscuous mode
[  100.340280][   T52] hsr_slave_1: left promiscuous mode
[  100.359562][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.367060][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.398411][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.405896][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.455398][ T5544] overlayfs: missing 'workdir'
[  100.508422][   T52] veth1_macvtap: left promiscuous mode
[  100.514024][   T52] veth0_macvtap: left promiscuous mode
[  100.547904][   T52] veth1_vlan: left promiscuous mode
[  100.554071][   T52] veth0_vlan: left promiscuous mode
[  100.579420][ T5237] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.386931][ T5551] loop2: detected capacity change from 0 to 32768
[  101.497259][ T5551] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): filesystem UUID already open
[  101.557841][ T5551] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): shutdown complete
[  101.900898][ T5551] bcachefs: bch2_fs_get_tree() error: EINVAL
[  102.621168][ T5551] loop2: detected capacity change from 0 to 1024
[  102.666693][ T5551] EXT4-fs: Ignoring removed orlov option
[  102.717857][ T5551] EXT4-fs: Ignoring removed nomblk_io_submit option
[  102.858691][ T5551] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002]
[  102.897436][ T5551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.021415][   T52] team0 (unregistering): Port device team_slave_1 removed
[  103.163737][ T5234] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.268629][   T52] team0 (unregistering): Port device team_slave_0 removed
[  105.520819][ T5581] loop4: detected capacity change from 0 to 32768
[  105.679765][ T5363] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  105.712909][ T5583] loop2: detected capacity change from 0 to 32768
[  105.725780][ T5581] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): filesystem UUID already open
[  105.750807][ T5363] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  105.784580][ T5581] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): shutdown complete
[  105.799906][ T5441] team0: Port device team_slave_0 added
[  105.806936][ T5363] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  105.973330][ T5583] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): filesystem UUID already open
[  105.997758][ T5583] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): shutdown complete
[  106.236530][ T5441] team0: Port device team_slave_1 added
[  106.252553][ T5581] bcachefs: bch2_fs_get_tree() error: EINVAL
[  106.509180][ T5583] bcachefs: bch2_fs_get_tree() error: EINVAL
[  106.600514][ T5441] batman_adv: batadv0: Adding interface: batadv_slave_0
[  106.658267][ T5441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  106.787676][ T5441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  107.139304][ T5441] batman_adv: batadv0: Adding interface: batadv_slave_1
[  107.146343][ T5441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.220552][ T5583] loop2: detected capacity change from 0 to 1024
[  107.279621][ T5583] EXT4-fs: Ignoring removed orlov option
[  107.285349][ T5583] EXT4-fs: Ignoring removed nomblk_io_submit option
[  107.336424][ T5605] loop4: detected capacity change from 0 to 512
[  107.345362][ T5441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  107.370833][ T5605] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  107.424027][ T5583] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002]
[  107.474571][ T5583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.537790][ T5605] EXT4-fs (loop4): 1 truncate cleaned up
[  107.552044][ T5605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.892163][ T5441] hsr_slave_0: entered promiscuous mode
[  107.915462][ T5234] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.949173][ T5237] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /14/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  107.981096][ T5441] hsr_slave_1: entered promiscuous mode
[  108.022286][ T5441] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  108.071996][ T5441] Cannot create hsr debugfs directory
[  108.108802][ T5237] EXT4-fs error (device loop4): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  108.268697][ T5237] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /14/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  108.366881][ T5363] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.422651][ T5620] binder: 5616:5620 ioctl c0306201 0 returned -14
[  108.443702][ T5620] loop2: detected capacity change from 0 to 128
[  108.668788][ T5237] EXT4-fs error (device loop4): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  109.108690][ T5237] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /14/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  109.172969][ T5363] 8021q: adding VLAN 0 to HW filter on device team0
[  109.479348][ T5425] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  109.503608][ T5626] loop2: detected capacity change from 0 to 256
[  109.524369][ T5425] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  109.581443][ T2898] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.588672][ T2898] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.625289][ T2898] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.632519][ T2898] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.174917][ T5321] Allocator stuck? Waited for 30 seconds
[  110.175006][ T5321] Allocator debug:
[  110.175047][ T5321]   capacity1536
[  110.175087][ T5321]   reserved             31232
[  110.175127][ T5321]   hidden               0
[  110.175165][ T5321]   btree                0
[  110.175223][ T5321]   data                 0
[  110.175264][ T5321]   cached               0
[  110.175305][ T5321]   reserved             0
[  110.175346][ T5321]   online_reserved      136
[  110.175492][ T5321]   nr_inodes            0
[  110.175533][ T5321]   
[  110.187829][ T5321]   freelist_wait        waiting
[  110.187882][ T5321]   open buckets allocated1
[  110.187924][ T5321]   open buckets total   1024
[  110.187967][ T5321]   open_buckets_wait    empty
[  110.188008][ T5321]   open_buckets_btree   0
[  110.188050][ T5321]   open_buckets_user    0
[  110.188092][ T5321]   btree reserve cache  0
[  110.188133][ T5321] 
[  110.188173][ T5321] Dev 0:
[  110.188214][ T5321]                      buckets         sectors      fragmented
[  110.188257][ T5321]   free                     0               0               0
[  110.188300][ T5321]   sb                       0               0               0
[  110.188343][ T5321]   journal                  0               0               0
[  110.188386][ T5321]   btree                    0               0               0
[  110.188430][ T5321]   user                     0               0               0
[  110.188594][ T5321]   cached                   0               0               0
[  110.188638][ T5321]   parity                   0               0               0
[  110.188682][ T5321]   stripe                   0               0               0
[  110.188725][ T5321]   need_gc_gens             0               0               0
[  110.188783][ T5321]   need_discard             0               0               0
[  110.188826][ T5321]   unstriped                0               0               0
[  110.188869][ T5321]   capacity               128
[  110.188911][ T5321]   
[  110.188951][ T5321]   reserves:
[  110.188992][ T5321]   stripe                  60
[  110.189033][ T5321]   normal                  58
[  110.189074][ T5321]   copygc                  56
[  110.189116][ T5321]   btree                   28
[  110.189158][ T5321]   btree_copygc             0
[  110.189199][ T5321]   reclaim                  0
[  110.189240][ T5321]   interior_updates         0
[  110.189281][ T5321]   
[  110.189320][ T5321]   open buckets             0
[  110.189362][ T5321]   buckets to invalidate    0
[  110.189402][ T5321] 
[  110.189442][ T5321] Copygc debug:
[  110.189482][ T5321]   running: 1
[  110.189522][ T5321]   copygc_wait:0
[  110.189662][ T5321]   copygc_wait_at:0
[  110.189703][ T5321]   Currently waiting for:0 B
[  110.189745][ T5321]   Currently waiting since:712 KiB
[  110.189793][ T5321]   Currently calculated wait:0 B
[  110.189835][ T5321] 
[  110.189875][ T5321] Journal debug:
[  110.189915][ T5321]   flags:                   replay_done,running,need_flush_write
[  110.189958][ T5321]   dirty journal entries:   0/32768
[  110.190000][ T5321]   seq:                     8
[  110.190041][ T5321]   seq_ondisk:              8
[  110.190082][ T5321]   last_seq:                9
[  110.190122][ T5321]   last_seq_ondisk:         9
[  110.190163][ T5321]   flushed_seq_ondisk:      8
[  110.190205][ T5321]   watermark:               stripe
[  110.190257][ T5321]   each entry reserved:     321
[  110.190297][ T5321]   nr flush writes:         0
[  110.190337][ T5321]   nr noflush writes:       0
[  110.190377][ T5321]   average write size:      0 B
[  110.190417][ T5321]   nr direct reclaim:       0
[  110.190456][ T5321]   nr background reclaim:   0
[  110.190495][ T5321]   reclaim kicked:          0
[  110.190535][ T5321]   reclaim runs in:         0 ms
[  110.190575][ T5321]   blocked:                 0
[  110.190632][ T5321]   current entry sectors:   0
[  110.190816][ T5321]   current entry error:     insufficient_devices
[  110.190859][ T5321]   current entry:           closed
[  110.190900][ T5321]   unwritten entries:
[  110.190942][ T5321]   last buf closed
[  110.190982][ T5321]   space:
[  110.191023][ T5321]     discarded              0:0
[  110.191063][ T5321]     clean ondisk           0:0
[  110.191104][ T5321]     clean                  0:0
[  110.191145][ T5321]     total                  0:0
[  110.191186][ T5321]   dev 0:
[  110.191226][ T5321]     nr                     8
[  110.191267][ T5321]     bucket size            256
[  110.191309][ T5321]     available              6:256
[  110.191350][ T5321]     discard_idx            0
[  110.191391][ T5321]     dirty_ondisk           0 (seq 0)
[  110.191432][ T5321]     dirty_idx              0 (seq 0)
[  110.191473][ T5321]     cur_idx                0 (seq 0)
[  110.191516][ T5321] 
[  110.469831][ T5425] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  110.490736][ T5425] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  110.648129][ T5237] EXT4-fs error (device loop4): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  111.111482][ T5237] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /14/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  111.140175][ T5237] EXT4-fs error (device loop4): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  111.145392][ T5441] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.186349][ T5237] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /14/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  111.338934][ T5363] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  111.349588][ T5363] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  111.428594][ T5237] EXT4-fs error (device loop4): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  111.523755][ T5441] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.747506][ T5441] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.024950][ T5441] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.116590][ T5363] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.194313][ T5425] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.350152][ T5425] 8021q: adding VLAN 0 to HW filter on device team0
[  112.379489][ T5237] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.547353][ T3032] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.660753][ T5638] loop2: detected capacity change from 0 to 32768
[  112.746519][  T130] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.753724][  T130] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.793654][  T130] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.800903][  T130] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.879897][ T5638] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): filesystem UUID already open
[  112.917102][ T5363] veth0_vlan: entered promiscuous mode
[  112.939435][ T5638] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): shutdown complete
[  113.055087][ T5638] bcachefs: bch2_fs_get_tree() error: EINVAL
[  113.073091][ T3032] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.290487][ T3032] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.339228][ T5363] veth1_vlan: entered promiscuous mode
[  113.356418][ T5425] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  113.417028][ T5425] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  113.493884][ T5441] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  113.595904][ T3032] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.607506][ T5638] loop2: detected capacity change from 0 to 1024
[  113.625776][ T5246] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  113.648228][ T5246] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  113.648820][ T5638] EXT4-fs: Ignoring removed orlov option
[  113.664676][ T5246] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  113.672367][ T5638] EXT4-fs: Ignoring removed nomblk_io_submit option
[  113.712875][ T5246] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  113.721028][ T5246] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  113.728492][ T5246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  113.805694][ T5638] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002]
[  113.847063][ T5638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.867714][ T5441] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  113.910995][ T5441] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  113.924135][ T5441] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  114.112683][ T5234] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.134670][ T5441] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.186946][ T5441] 8021q: adding VLAN 0 to HW filter on device team0
[  114.252528][ T5441] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  114.271758][ T5441] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  114.625174][ T5441] 8021q: adding VLAN 0 to HW filter on device batadv0
[  114.755013][ T5441] veth0_vlan: entered promiscuous mode
[  114.810822][ T5441] veth1_vlan: entered promiscuous mode
[  114.900032][ T5441] veth0_macvtap: entered promiscuous mode
[  114.920428][ T5441] veth1_macvtap: entered promiscuous mode
[  114.988887][ T5441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.017859][ T5441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.054693][ T5441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.077641][ T5441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.116103][ T5441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.145448][ T5441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.179731][ T5441] batman_adv: batadv0: Interface activated: batadv_slave_0
[  115.217100][ T5441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.255412][ T5441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.284792][ T5441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.319168][ T5441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.336916][ T5441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.347857][ T5441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.367972][ T5441] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.379412][ T5441] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.397691][ T5441] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.415544][ T5441] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.424770][ T5441] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.556300][ T2898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.586635][ T2898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.632258][ T2898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.648404][ T2898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.756985][  T130] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.764203][  T130] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.779215][  T130] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.786394][  T130] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.899109][ T5246] Bluetooth: hci3: command tx timeout
[  115.914175][ T5363] veth0_macvtap: entered promiscuous mode
[  116.254725][ T5710] loop2: detected capacity change from 0 to 512
[  116.279286][ T5710] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  116.463828][ T5363] veth1_macvtap: entered promiscuous mode
[  116.496939][ T5363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.508120][ T5363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.518536][ T5363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.535734][ T5363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.546721][ T5363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.561144][ T5363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.573845][ T5715] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  116.575013][ T5363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.597480][ T5710] EXT4-fs (loop2): 1 truncate cleaned up
[  116.604376][ T5710] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.616938][ T5363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.637010][ T5363] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.719715][ T5363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.747375][ T5363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.776348][ T5234] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /22/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  116.777577][ T5363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.812326][ T5234] EXT4-fs error (device loop2): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  116.837750][ T5363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.842999][ T5234] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /22/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  116.857581][ T5363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.884197][ T5234] EXT4-fs error (device loop2): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  116.897566][ T5363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.915883][ T5234] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /22/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  116.934338][ T5363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.959583][ T5363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.979307][ T5234] EXT4-fs error (device loop2): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  116.981658][ T5363] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.007066][ T5234] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /22/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  117.077709][ T5234] EXT4-fs error (device loop2): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  117.132183][ T3032] bridge_slave_1: left allmulticast mode
[  117.149146][ T3032] bridge_slave_1: left promiscuous mode
[  117.154944][ T3032] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.169480][ T5234] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /22/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  117.200691][ T3032] bridge_slave_0: left allmulticast mode
[  117.206410][ T3032] bridge_slave_0: left promiscuous mode
[  117.217430][ T3032] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.234255][ T5234] EXT4-fs error (device loop2): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  117.981653][ T5246] Bluetooth: hci3: command tx timeout
[  118.186807][ T3032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  118.210978][ T3032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  118.239342][ T3032] bond0 (unregistering): Released all slaves
[  118.394706][ T5363] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.441088][ T5363] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.470714][ T5363] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.491263][ T5363] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.521262][ T5425] 8021q: adding VLAN 0 to HW filter on device batadv0
[  119.452471][ T5234] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.508713][ T5676] chnl_net:caif_netlink_parms(): no params data found
[  120.079041][ T5246] Bluetooth: hci3: command tx timeout
[  120.777632][ T3032] hsr_slave_0: left promiscuous mode
[  120.818043][ T3032] hsr_slave_1: left promiscuous mode
[  120.866373][ T3032] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.883073][ T3032] batman_adv: batadv0: Removing interface: batadv_slave_0
[  120.918103][ T3032] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.925585][ T3032] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.993609][ T3032] veth1_macvtap: left promiscuous mode
[  121.007985][ T3032] veth0_macvtap: left promiscuous mode
[  121.013629][ T3032] veth1_vlan: left promiscuous mode
[  121.033505][ T3032] veth0_vlan: left promiscuous mode
[  121.286158][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  121.297951][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  121.306202][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  121.314932][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  121.323245][ T5243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  121.357957][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  122.146240][ T5246] Bluetooth: hci3: command tx timeout
[  122.298295][ T3032] team0 (unregistering): Port device team_slave_1 removed
[  122.453453][ T3032] team0 (unregistering): Port device team_slave_0 removed
[  123.426908][ T5246] Bluetooth: hci1: command tx timeout
[  123.557057][ T5425] veth0_vlan: entered promiscuous mode
[  123.648334][  T130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.685925][ T5425] veth1_vlan: entered promiscuous mode
[  123.699909][  T130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.140066][ T5676] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.147322][ T5676] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.186099][ T5676] bridge_slave_0: entered allmulticast mode
[  124.198519][ T5676] bridge_slave_0: entered promiscuous mode
[  124.334795][ T5425] veth0_macvtap: entered promiscuous mode
[  124.370551][ T5425] veth1_macvtap: entered promiscuous mode
[  124.423534][ T5676] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.448083][ T5676] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.455585][ T5676] bridge_slave_1: entered allmulticast mode
[  124.499096][ T5676] bridge_slave_1: entered promiscuous mode
[  124.594837][ T2898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.606135][ T5425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.637450][ T2898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.647586][ T5425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.657438][ T5425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.997597][ T5425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.007851][ T5425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.045996][ T5425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.066476][ T5425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.107650][ T5425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.139363][ T5425] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.203195][ T5676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  125.498280][ T5246] Bluetooth: hci1: command tx timeout
[  125.641790][ T5425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.660890][ T5425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.712279][ T5784] loop1: detected capacity change from 0 to 256
[  125.734478][ T5425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.782575][ T5425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.804265][ T5425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.815194][ T5784] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  125.848256][ T5425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.131325][ T5425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  126.597976][ T5425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.639050][ T5425] batman_adv: batadv0: Interface activated: batadv_slave_1
[  126.649042][ T5676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  126.787281][ T5425] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.825659][ T5425] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.865951][ T5425] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.906544][ T5425] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.089705][ T5676] team0: Port device team_slave_0 added
[  127.159968][ T5676] team0: Port device team_slave_1 added
[  127.263868][ T3032] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.308537][ T5325] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  127.450455][ T3032] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.465094][ T5676] batman_adv: batadv0: Adding interface: batadv_slave_0
[  127.472984][ T5676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.484945][ T5325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  127.509110][ T5676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  127.524026][ T5676] batman_adv: batadv0: Adding interface: batadv_slave_1
[  127.535819][ T5676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.542736][ T5325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  127.565248][ T5676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  127.597651][ T5246] Bluetooth: hci1: command tx timeout
[  127.617839][ T5325] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  127.631099][ T5325] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  127.641534][ T5325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.659996][ T5325] usb 1-1: config 0 descriptor??
[  127.674890][ T5788] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  127.689952][ T3032] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.815939][ T3032] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.894420][ T5676] hsr_slave_0: entered promiscuous mode
[  127.909691][ T5676] hsr_slave_1: entered promiscuous mode
[  127.928512][ T5676] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  127.936201][ T5676] Cannot create hsr debugfs directory
[  127.958116][ T5757] chnl_net:caif_netlink_parms(): no params data found
[  128.097345][ T5325] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  128.157589][ T5325] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  128.165071][ T5325] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  128.208172][ T5325] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  128.215651][ T5325] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  128.247747][ T5325] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  128.255227][ T5325] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  128.277599][ T5325] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  128.285663][ T5325] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[  128.356456][ T5325] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  128.452450][ T5325] usb 1-1: USB disconnect, device number 2
[  129.431177][ T5809] loop1: detected capacity change from 0 to 8
[  129.441693][ T5809] SQUASHFS error: zlib decompression failed, data probably corrupt
[  129.450416][ T5809] SQUASHFS error: Failed to read block 0x9b: -5
[  129.456701][ T5809] SQUASHFS error: Unable to read metadata cache entry [99]
[  129.464545][ T5809] SQUASHFS error: Unable to read inode 0x127
[  129.567750][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.667593][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.678135][ T5246] Bluetooth: hci1: command tx timeout
[  129.857099][ T3032] bridge_slave_1: left allmulticast mode
[  129.874938][ T3032] bridge_slave_1: left promiscuous mode
[  129.891514][ T3032] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.919272][ T3032] bridge_slave_0: left allmulticast mode
[  129.924989][ T3032] bridge_slave_0: left promiscuous mode
[  129.968692][ T3032] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.239052][ T5821] loop1: detected capacity change from 0 to 4096
[  130.252430][ T5821] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[  130.383438][ T5821] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  130.418574][ T5821] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  131.292971][ T5827] loop1: detected capacity change from 0 to 512
[  131.337745][ T5827] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  131.424854][ T5827] EXT4-fs (loop1): 1 truncate cleaned up
[  131.435068][ T5827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.020008][ T5363] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.753454][ T3032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  132.811639][ T3032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  132.865346][ T3032] bond0 (unregistering): Released all slaves
[  133.032007][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  133.047406][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  133.050843][ T5835] loop1: detected capacity change from 0 to 256
[  133.120835][ T5835] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  133.396382][  T130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.409634][  T130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.927983][ T5757] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.961983][ T5757] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.998609][ T5757] bridge_slave_0: entered allmulticast mode
[  134.029111][ T5757] bridge_slave_0: entered promiscuous mode
[  134.059276][ T5757] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.066427][ T5757] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.132932][ T5757] bridge_slave_1: entered allmulticast mode
[  134.162575][ T5757] bridge_slave_1: entered promiscuous mode
[  134.371453][ T5845] loop1: detected capacity change from 0 to 1024
[  134.471182][ T5845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.979968][ T5757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.092621][ T5857] usb usb8: usbfs: process 5857 (syz.1.75) did not claim interface 0 before use
[  135.691314][ T5363] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.745130][ T3032] hsr_slave_0: left promiscuous mode
[  135.754152][ T3032] hsr_slave_1: left promiscuous mode
[  135.830999][ T3032] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  135.857943][ T3032] batman_adv: batadv0: Removing interface: batadv_slave_0
[  135.916206][ T3032] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  135.949206][ T3032] batman_adv: batadv0: Removing interface: batadv_slave_1
[  136.031910][ T3032] veth1_macvtap: left promiscuous mode
[  136.037656][ T3032] veth0_macvtap: left promiscuous mode
[  136.043355][ T3032] veth1_vlan: left promiscuous mode
[  136.049237][ T3032] veth0_vlan: left promiscuous mode
[  136.154249][ T5872] loop3: detected capacity change from 0 to 1024
[  136.234387][ T5872] EXT4-fs: Ignoring removed orlov option
[  136.254579][ T5870] loop1: detected capacity change from 0 to 4096
[  136.268488][ T5872] EXT4-fs: Ignoring removed nomblk_io_submit option
[  136.309694][ T5870] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[  136.461332][ T5870] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  136.493201][ T5870] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  136.662348][ T5872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.892829][ T5879] netlink: 168 bytes leftover after parsing attributes in process `syz.3.79'.
[  137.227615][ T5325] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  137.245883][ T5883] tipc: Failed to remove unknown binding: 66,1,1/0:1137227281/1137227283
[  137.261006][ T5883] tipc: Failed to remove unknown binding: 66,1,1/0:1137227281/1137227283
[  137.419604][ T5325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  137.436029][ T5325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  137.457576][ T5325] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  137.471792][ T5325] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  137.481286][ T5325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.492039][ T5325] usb 1-1: config 0 descriptor??
[  137.499214][ T5863] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  137.918345][ T5325] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  137.927855][ T5325] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  137.938854][ T3032] team0 (unregistering): Port device team_slave_1 removed
[  137.941837][ T5325] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  137.972663][ T5325] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  137.987656][ T5325] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  138.013824][ T5325] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  138.027652][ T5325] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  138.056007][ T5325] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  138.083450][ T5325] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  138.094459][ T3032] team0 (unregistering): Port device team_slave_0 removed
[  138.105313][ T5325] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  138.188006][ T5325] usb 1-1: USB disconnect, device number 3
[  138.884230][ T5885] loop1: detected capacity change from 0 to 40427
[  138.907492][ T5885] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  138.914912][ T5885] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  138.935537][ T5885] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x1fffff
[  138.974952][ T5885] F2FS-fs (loop1): invalid crc value
[  139.000875][ T5885] F2FS-fs (loop1): Found nat_bits in checkpoint
[  139.166759][ T5757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  139.176646][ T5885] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  139.187576][ T5885] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  139.222595][ T5885] syz.1.81: attempt to access beyond end of device
[  139.222595][ T5885] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  139.236473][   T29] audit: type=1800 audit(1727430586.323:3): pid=5885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.81" name="file0" dev="loop1" ino=10 res=0 errno=0
[  139.282018][ T5885] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  139.317812][ T5885] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  139.403301][ T5757] team0: Port device team_slave_0 added
[  139.468769][ T5757] team0: Port device team_slave_1 added
[  140.449099][ T5757] batman_adv: batadv0: Adding interface: batadv_slave_0
[  140.482157][ T5757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.616996][ T5757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  140.629987][ T5757] batman_adv: batadv0: Adding interface: batadv_slave_1
[  140.637094][ T5757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.663279][ T5757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  141.708899][ T5913] loop1: detected capacity change from 0 to 256
[  141.877965][ T5913] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  141.929142][ T5913] syz.1.83: attempt to access beyond end of device
[  141.929142][ T5913] loop1: rw=0, sector=34359738490, nr_sectors = 1 limit=256
[  141.944480][ T5913] syz.1.83: attempt to access beyond end of device
[  141.944480][ T5913] loop1: rw=0, sector=34359738490, nr_sectors = 1 limit=256
[  141.958824][ T5913] syz.1.83: attempt to access beyond end of device
[  141.958824][ T5913] loop1: rw=0, sector=34359738488, nr_sectors = 1 limit=256
[  141.973144][ T5913] Buffer I/O error on dev loop1, logical block 34359738488, async page read
[  141.984249][ T5913] syz.1.83: attempt to access beyond end of device
[  141.984249][ T5913] loop1: rw=0, sector=34359738489, nr_sectors = 1 limit=256
[  141.998439][ T5913] Buffer I/O error on dev loop1, logical block 34359738489, async page read
[  142.007771][ T5913] syz.1.83: attempt to access beyond end of device
[  142.007771][ T5913] loop1: rw=0, sector=34359738490, nr_sectors = 1 limit=256
[  142.021985][ T5913] Buffer I/O error on dev loop1, logical block 34359738490, async page read
[  142.032376][ T5913] syz.1.83: attempt to access beyond end of device
[  142.032376][ T5913] loop1: rw=0, sector=34359738488, nr_sectors = 1 limit=256
[  142.046958][ T5913] Buffer I/O error on dev loop1, logical block 34359738488, async page read
[  142.056281][ T5913] syz.1.83: attempt to access beyond end of device
[  142.056281][ T5913] loop1: rw=0, sector=34359738489, nr_sectors = 1 limit=256
[  142.070193][ T5913] Buffer I/O error on dev loop1, logical block 34359738489, async page read
[  142.080635][ T5913] syz.1.83: attempt to access beyond end of device
[  142.080635][ T5913] loop1: rw=0, sector=34359738490, nr_sectors = 1 limit=256
[  142.094637][ T5913] Buffer I/O error on dev loop1, logical block 34359738490, async page read
[  142.128661][ T5913] [syz.1.83/5913] FS: loop1 File: /file0/file0 would truncate fibmap result
[  142.340162][ T5757] hsr_slave_0: entered promiscuous mode
[  142.372925][   T29] audit: type=1800 audit(1727430589.203:4): pid=5913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.83" name="file0" dev="loop1" ino=1048616 res=0 errno=0
[  142.409387][ T5757] hsr_slave_1: entered promiscuous mode
[  142.446531][ T5757] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  142.465116][ T5757] Cannot create hsr debugfs directory
[  142.626241][ T5676] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  142.637494][ T5676] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  142.649606][ T5676] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  142.659622][ T5676] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  142.979060][ T5920] loop1: detected capacity change from 0 to 1024
[  143.079399][ T5920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.486687][ T5934] usb usb8: usbfs: process 5934 (syz.1.86) did not claim interface 0 before use
[  143.730572][ T5676] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.871189][ T5676] 8021q: adding VLAN 0 to HW filter on device team0
[  144.122527][ T5363] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.152255][ T2942] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.159408][ T2942] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.649533][ T5945] tipc: Failed to remove unknown binding: 66,1,1/0:2976968899/2976968901
[  144.659220][ T5945] tipc: Failed to remove unknown binding: 66,1,1/0:2976968899/2976968901
[  145.357561][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.364901][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.439877][ T5950] loop1: detected capacity change from 0 to 256
[  145.737791][   T46] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  145.770019][ T5757] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  145.816344][ T5757] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  145.852980][ T5757] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  145.898607][ T5757] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  145.909605][   T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  145.937907][   T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  145.971451][   T46] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  146.005865][ T5676] 8021q: adding VLAN 0 to HW filter on device batadv0
[  146.027955][   T46] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  146.060237][   T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.118814][   T46] usb 2-1: config 0 descriptor??
[  146.143266][ T5950] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  146.212720][ T5757] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.320078][ T5757] 8021q: adding VLAN 0 to HW filter on device team0
[  146.469931][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.477170][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.531696][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.538926][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.564531][   T46] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  146.587694][   T46] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  146.607773][   T46] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  146.615246][   T46] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  146.666497][ T5757] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  146.677346][   T46] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  146.699544][   T46] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  146.707017][   T46] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  146.759627][   T46] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  146.769807][ T5757] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  146.790756][   T46] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  146.821464][   T46] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  146.857917][   T46] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  146.896065][   T46] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  146.936774][   T46] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  146.967845][   T46] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  146.975327][   T46] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  146.980000][ T5676] veth0_vlan: entered promiscuous mode
[  147.008500][   T46] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[  147.079056][ T5676] veth1_vlan: entered promiscuous mode
[  147.117897][   T46] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  147.122046][ T5243] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  147.140806][ T5243] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  147.146821][   T46] usb 2-1: USB disconnect, device number 2
[  147.159082][ T5243] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  147.167833][ T5243] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  147.178996][ T5243] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  147.186567][ T5243] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  147.290492][ T5676] veth0_macvtap: entered promiscuous mode
[  147.433931][ T5676] veth1_macvtap: entered promiscuous mode
[  147.461300][ T5757] 8021q: adding VLAN 0 to HW filter on device batadv0
[  148.061693][ T5676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.246266][ T5676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.450437][ T5676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.470167][ T5676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.481771][ T5676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.492520][ T5676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.512823][ T5676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.524385][ T5676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.536090][ T5676] batman_adv: batadv0: Interface activated: batadv_slave_0
[  148.596683][ T5676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.631128][ T5676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.690803][ T5676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.721547][ T5676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.752222][ T5676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.780646][ T5676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.838084][ T5676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.877552][ T5676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.919125][ T5676] batman_adv: batadv0: Interface activated: batadv_slave_1
[  149.429574][ T5246] Bluetooth: hci6: command tx timeout
[  149.561436][ T5757] veth0_vlan: entered promiscuous mode
[  149.620412][ T5676] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.681155][ T5676] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.717614][ T5676] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.777599][ T5676] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.120516][ T5757] veth1_vlan: entered promiscuous mode
[  150.375642][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.399765][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.423023][ T5757] veth0_macvtap: entered promiscuous mode
[  150.441242][ T5981] chnl_net:caif_netlink_parms(): no params data found
[  150.499402][ T5757] veth1_macvtap: entered promiscuous mode
[  150.907733][ T6036] tipc: Failed to remove unknown binding: 66,1,1/0:1808697213/1808697215
[  150.916356][ T6036] tipc: Failed to remove unknown binding: 66,1,1/0:1808697213/1808697215
[  150.960329][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.968971][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.037010][ T6040] loop1: detected capacity change from 0 to 16
[  151.081000][ T6040] erofs: (device loop1): mounted with root inode @ nid 36.
[  151.094788][ T6040] erofs: (device loop1): z_erofs_readahead: readahead error at folio 13 @ nid 36
[  151.104599][ T6040] erofs: (device loop1): z_erofs_readahead: readahead error at folio 8 @ nid 36
[  151.113916][ T6040] erofs: (device loop1): z_erofs_readahead: readahead error at folio 6 @ nid 36
[  151.123418][ T6040] erofs: (device loop1): z_erofs_readahead: readahead error at folio 4 @ nid 36
[  151.132884][ T6040] erofs: (device loop1): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[  151.143531][ T6040] erofs: (device loop1): z_erofs_readahead: readahead error at folio 0 @ nid 36
[  151.153827][ T6040] syz.1.99: attempt to access beyond end of device
[  151.153827][ T6040] loop1: rw=524288, sector=296, nr_sectors = 16 limit=16
[  151.172975][ T6040] syz.1.99: attempt to access beyond end of device
[  151.172975][ T6040] loop1: rw=524288, sector=1049264, nr_sectors = 16 limit=16
[  151.187179][ T6040] syz.1.99: attempt to access beyond end of device
[  151.187179][ T6040] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16
[  151.200811][ T6040] syz.1.99: attempt to access beyond end of device
[  151.200811][ T6040] loop1: rw=524288, sector=720, nr_sectors = 80 limit=16
[  151.216517][ T6041] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  151.256103][ T6041] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  151.370478][ T5981] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.382593][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.390033][ T5981] bridge_slave_0: entered allmulticast mode
[  151.398203][ T5981] bridge_slave_0: entered promiscuous mode
[  151.423281][ T5757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.467698][ T5757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.498010][ T5246] Bluetooth: hci6: command tx timeout
[  151.517656][ T5757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.563451][ T5757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.583879][ T5757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.610807][ T5757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.616632][ T6043] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  151.620967][ T5757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.648525][ T5757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.659062][ T5757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.669583][ T5757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.685363][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.760574][ T5981] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.787892][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.795185][ T5981] bridge_slave_1: entered allmulticast mode
[  151.852000][ T5981] bridge_slave_1: entered promiscuous mode
[  151.925887][ T5757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.979138][ T5757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.027700][ T5757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.061342][ T5757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.088483][ T5757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.107650][ T5757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.135817][ T5757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.158186][ T5757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.197573][ T5757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.243356][ T5757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.279118][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_1
[  152.521873][ T5981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  152.539807][ T5757] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.677993][ T5757] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.712764][ T5757] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.758895][ T5757] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.981728][ T5981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  153.720320][ T5246] Bluetooth: hci6: command tx timeout
[  153.732227][ T5981] team0: Port device team_slave_0 added
[  153.740700][ T5981] team0: Port device team_slave_1 added
[  153.780648][ T5981] batman_adv: batadv0: Adding interface: batadv_slave_0
[  153.788168][ T5981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.816600][ T5981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  153.988677][ T6045] loop4: detected capacity change from 0 to 32768
[  154.431214][ T6045] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): filesystem UUID already open
[  154.462024][ T5981] batman_adv: batadv0: Adding interface: batadv_slave_1
[  154.507564][ T5981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.535182][ T6045] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): shutdown complete
[  154.623182][ T5981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  154.810697][ T6045] bcachefs: bch2_fs_get_tree() error: EINVAL
[  154.897428][ T5981] hsr_slave_0: entered promiscuous mode
[  154.968309][ T5981] hsr_slave_1: entered promiscuous mode
[  154.987878][ T5981] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  155.017741][ T5981] Cannot create hsr debugfs directory
[  155.068096][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.075981][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.409514][ T6074] tipc: Failed to remove unknown binding: 66,1,1/0:2669529484/2669529486
[  155.420201][ T6074] tipc: Failed to remove unknown binding: 66,1,1/0:2669529484/2669529486
[  155.615297][  T130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.670698][  T130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.737786][ T5246] Bluetooth: hci6: command tx timeout
[  155.835512][ T6081] loop1: detected capacity change from 0 to 16
[  156.227272][ T6081] erofs: (device loop1): mounted with root inode @ nid 36.
[  156.258206][ T6081] erofs: (device loop1): z_erofs_readahead: readahead error at folio 13 @ nid 36
[  156.268236][ T6081] erofs: (device loop1): z_erofs_readahead: readahead error at folio 8 @ nid 36
[  156.278163][ T6081] erofs: (device loop1): z_erofs_readahead: readahead error at folio 6 @ nid 36
[  156.288752][ T6081] erofs: (device loop1): z_erofs_readahead: readahead error at folio 4 @ nid 36
[  156.298842][ T6081] erofs: (device loop1): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[  156.308507][ T6081] erofs: (device loop1): z_erofs_readahead: readahead error at folio 0 @ nid 36
[  156.343669][ T6081] syz.1.108: attempt to access beyond end of device
[  156.343669][ T6081] loop1: rw=524288, sector=296, nr_sectors = 16 limit=16
[  156.358154][ T6081] syz.1.108: attempt to access beyond end of device
[  156.358154][ T6081] loop1: rw=524288, sector=1049264, nr_sectors = 16 limit=16
[  156.373090][ T6081] syz.1.108: attempt to access beyond end of device
[  156.373090][ T6081] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16
[  156.389616][ T6081] syz.1.108: attempt to access beyond end of device
[  156.389616][ T6081] loop1: rw=524288, sector=720, nr_sectors = 80 limit=16
[  156.405805][ T6082] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  156.478572][ T6082] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  156.803500][ T6086] loop1: detected capacity change from 0 to 128
[  157.105157][ T5981] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.879845][ T5981] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.330037][ T6097] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  158.405581][ T6112] loop1: detected capacity change from 0 to 64
[  159.100684][ T5981] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.261331][ T5981] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.404717][ T6116] loop1: detected capacity change from 0 to 128
[  159.523289][ T6116] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  159.559671][ T6119] loop2: detected capacity change from 0 to 256
[  159.594276][ T6116] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  159.697758][ T5981] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  159.748328][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  159.922930][ T5981] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  160.040912][ T6122] capability: warning: `syz.1.115' uses deprecated v2 capabilities in a way that may be insecure
[  160.544722][ T5981] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  160.557658][   T46] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  160.559919][ T5363] EXT4-fs error (device loop1): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  160.598169][ T5363] EXT4-fs error (device loop1): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  160.634891][ T5363] EXT4-fs error (device loop1): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  160.650128][ T5363] EXT4-fs error (device loop1): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  160.682408][ T5981] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  160.731097][   T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  160.799358][   T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  160.849703][   T46] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  160.918913][   T46] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  160.963699][   T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.029744][   T46] usb 3-1: config 0 descriptor??
[  161.035995][ T6119] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  161.121303][ T5981] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.244095][ T5981] 8021q: adding VLAN 0 to HW filter on device team0
[  161.320210][ T2898] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.327660][ T2898] bridge0: port 1(bridge_slave_0) entered forwarding state
[  161.424389][ T2898] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.431863][ T2898] bridge0: port 2(bridge_slave_1) entered forwarding state
[  161.472326][   T46] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  161.522717][   T46] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  161.563118][   T46] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  161.617312][   T46] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  161.672716][   T46] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  161.722515][   T46] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  161.776516][   T46] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  161.822317][   T46] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  161.858778][   T46] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  161.906740][   T46] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  161.945718][   T46] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  161.991917][   T46] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  162.031314][   T46] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  162.063112][   T46] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  162.111517][   T46] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  162.155315][   T46] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving
[  162.241766][   T46] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  162.353195][   T46] usb 3-1: USB disconnect, device number 3
[  163.029975][ T6134] loop2: detected capacity change from 0 to 16
[  163.104157][ T6134] erofs: (device loop2): mounted with root inode @ nid 36.
[  163.134956][ T6134] erofs: (device loop2): z_erofs_readahead: readahead error at folio 13 @ nid 36
[  163.146422][ T6134] erofs: (device loop2): z_erofs_readahead: readahead error at folio 8 @ nid 36
[  163.156528][ T6134] erofs: (device loop2): z_erofs_readahead: readahead error at folio 6 @ nid 36
[  163.166511][ T6134] erofs: (device loop2): z_erofs_readahead: readahead error at folio 4 @ nid 36
[  163.176927][ T6134] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[  163.187003][ T6134] erofs: (device loop2): z_erofs_readahead: readahead error at folio 0 @ nid 36
[  163.197006][ T6134] syz.2.119: attempt to access beyond end of device
[  163.197006][ T6134] loop2: rw=524288, sector=296, nr_sectors = 16 limit=16
[  163.244330][ T6134] syz.2.119: attempt to access beyond end of device
[  163.244330][ T6134] loop2: rw=524288, sector=1049264, nr_sectors = 16 limit=16
[  163.259546][ T6134] syz.2.119: attempt to access beyond end of device
[  163.259546][ T6134] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16
[  163.274544][ T6134] syz.2.119: attempt to access beyond end of device
[  163.274544][ T6134] loop2: rw=524288, sector=720, nr_sectors = 80 limit=16
[  163.291590][ T6135] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  163.353310][ T6135] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  163.514126][ T5981] 8021q: adding VLAN 0 to HW filter on device batadv0
[  163.645594][ T5363] EXT4-fs error (device loop1): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  163.667805][ T5981] veth0_vlan: entered promiscuous mode
[  163.681462][ T5981] veth1_vlan: entered promiscuous mode
[  163.715830][ T5981] veth0_macvtap: entered promiscuous mode
[  163.726487][ T5981] veth1_macvtap: entered promiscuous mode
[  163.754212][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.764946][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.775190][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.785950][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.786359][ T5363] EXT4-fs error (device loop1): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  163.796324][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.857576][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.878029][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.881747][ T5363] EXT4-fs error (device loop1): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  163.902761][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.902791][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.902812][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.902829][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.902845][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.904735][ T5981] batman_adv: batadv0: Interface activated: batadv_slave_0
[  164.015062][ T5363] EXT4-fs error (device loop1): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  164.049779][ T5363] EXT4-fs error (device loop1): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  164.067199][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.090575][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.099989][ T5363] EXT4-fs error (device loop1): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  164.101484][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.138397][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.150599][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.162514][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.173018][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.237677][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.261212][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.284394][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.328258][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.357945][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.379264][ T5981] batman_adv: batadv0: Interface activated: batadv_slave_1
[  164.426255][ T5981] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  164.457987][ T5981] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  164.466929][ T5981] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  164.476611][ T5981] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  164.623579][ T6150] loop2: detected capacity change from 0 to 8
[  164.632938][ T6150] SQUASHFS error: zlib decompression failed, data probably corrupt
[  164.641037][ T6150] SQUASHFS error: Failed to read block 0x9b: -5
[  164.647332][ T6150] SQUASHFS error: Unable to read metadata cache entry [99]
[  164.656527][ T6150] SQUASHFS error: Unable to read inode 0x127
[  165.018083][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  165.259301][ T6154] loop2: detected capacity change from 0 to 1024
[  165.289670][ T6155] loop4: detected capacity change from 0 to 256
[  165.370771][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.377673][ T2898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.386476][ T2898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.406852][ T6155] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  165.407082][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.476266][ T6155] syz.4.124: attempt to access beyond end of device
[  165.476266][ T6155] loop4: rw=0, sector=34359738490, nr_sectors = 1 limit=256
[  165.490456][ T6155] syz.4.124: attempt to access beyond end of device
[  165.490456][ T6155] loop4: rw=0, sector=34359738490, nr_sectors = 1 limit=256
[  165.501852][ T6154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.504708][ T6155] syz.4.124: attempt to access beyond end of device
[  165.504708][ T6155] loop4: rw=0, sector=34359738488, nr_sectors = 1 limit=256
[  165.532030][ T6155] Buffer I/O error on dev loop4, logical block 34359738488, async page read
[  165.542460][ T6155] syz.4.124: attempt to access beyond end of device
[  165.542460][ T6155] loop4: rw=0, sector=34359738489, nr_sectors = 1 limit=256
[  165.557725][ T6155] Buffer I/O error on dev loop4, logical block 34359738489, async page read
[  165.566514][ T6155] syz.4.124: attempt to access beyond end of device
[  165.566514][ T6155] loop4: rw=0, sector=34359738490, nr_sectors = 1 limit=256
[  165.583046][ T6155] Buffer I/O error on dev loop4, logical block 34359738490, async page read
[  165.591938][ T6155] syz.4.124: attempt to access beyond end of device
[  165.591938][ T6155] loop4: rw=0, sector=34359738488, nr_sectors = 1 limit=256
[  165.605899][ T6155] Buffer I/O error on dev loop4, logical block 34359738488, async page read
[  165.615786][ T6155] Buffer I/O error on dev loop4, logical block 34359738489, async page read
[  165.624608][ T6155] Buffer I/O error on dev loop4, logical block 34359738490, async page read
[  165.634715][   T29] audit: type=1800 audit(1727430612.733:5): pid=6155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.124" name="file0" dev="loop4" ino=1048626 res=0 errno=0
[  165.659098][ T5363] EXT4-fs error: 204 callbacks suppressed
[  165.659126][ T5363] EXT4-fs error (device loop1): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  165.721518][ T5363] EXT4-fs error (device loop1): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  165.810320][ T5363] EXT4-fs error (device loop1): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  166.093688][ T6163] usb usb8: usbfs: process 6163 (syz.2.125) did not claim interface 0 before use
[  166.568705][ T5363] EXT4-fs error (device loop1): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  166.621340][ T5757] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.707737][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  166.725556][ T6167] loop4: detected capacity change from 0 to 256
[  166.742165][ T5363] EXT4-fs error (device loop1): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  166.887749][ T5363] EXT4-fs error (device loop1): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  167.071606][ T5363] EXT4-fs error (device loop1): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  167.108265][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  167.131030][ T5363] EXT4-fs error (device loop1): ext4_empty_dir:3117: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  167.144800][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  167.154001][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  167.162932][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  167.171839][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  167.187189][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  167.324814][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  167.381207][ T5363] EXT4-fs error (device loop1): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  167.908254][   T46] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  167.961952][ T6176] loop4: detected capacity change from 0 to 16
[  168.824375][ T6176] erofs: (device loop4): mounted with root inode @ nid 36.
[  168.824453][ T5363] EXT4-fs error (device loop1): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  168.851672][ T6175] erofs: (device loop4): z_erofs_readahead: readahead error at folio 13 @ nid 36
[  168.872494][ T6175] erofs: (device loop4): z_erofs_readahead: readahead error at folio 8 @ nid 36
[  168.882818][ T6175] erofs: (device loop4): z_erofs_readahead: readahead error at folio 6 @ nid 36
[  168.892133][ T6175] erofs: (device loop4): z_erofs_readahead: readahead error at folio 4 @ nid 36
[  168.901472][ T6175] erofs: (device loop4): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[  168.910995][ T6175] erofs: (device loop4): z_erofs_readahead: readahead error at folio 0 @ nid 36
[  168.911121][ T6176] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  168.920379][ T6175] bio_check_eod: 2 callbacks suppressed
[  168.920399][ T6175] syz.4.129: attempt to access beyond end of device
[  168.920399][ T6175] loop4: rw=524288, sector=296, nr_sectors = 16 limit=16
[  168.930919][ T6176] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  168.959655][ T6175] syz.4.129: attempt to access beyond end of device
[  168.959655][ T6175] loop4: rw=524288, sector=1049264, nr_sectors = 16 limit=16
[  168.973946][ T6175] syz.4.129: attempt to access beyond end of device
[  168.973946][ T6175] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16
[  168.987796][ T6175] syz.4.129: attempt to access beyond end of device
[  168.987796][ T6175] loop4: rw=524288, sector=720, nr_sectors = 80 limit=16
[  169.451980][ T6169] loop2: detected capacity change from 0 to 32768
[  169.744740][ T5363] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  169.818670][ T6180] loop4: detected capacity change from 0 to 64
[  170.331125][ T2942] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.569573][   T46] usb 4-1: device descriptor read/all, error -71
[  170.742052][ T6169] workqueue: Failed to create a rescuer kthread for wq "bcachefs": -EINTR
[  170.742189][ T6169] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): shutdown complete
[  170.780212][ T2942] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.920633][ T6169] bcachefs: bch2_fs_get_tree() error: ENOMEM_fs_other_alloc
[  171.226004][ T6186] loop4: detected capacity change from 0 to 1024
[  172.126201][ T2942] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.418624][ T6186] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  172.759419][ T2942] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.835438][ T6199] loop2: detected capacity change from 0 to 2048
[  172.947139][ T6203] usb usb8: usbfs: process 6203 (syz.4.135) did not claim interface 0 before use
[  173.266714][ T6199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  173.431220][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  173.441054][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  173.449971][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  173.458687][ T5243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  173.479038][ T5243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  173.486507][ T5243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  173.529382][ T5676] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.986382][ T6204] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  174.816231][  T130] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  174.931690][  T130] EXT4-fs (loop2): This should not happen!! Data will be lost
[  174.931690][  T130] 
[  174.948234][ T2942] bridge_slave_1: left allmulticast mode
[  174.965511][ T2942] bridge_slave_1: left promiscuous mode
[  175.007588][  T130] EXT4-fs (loop2): Total free blocks count 0
[  175.026529][ T2942] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.113642][ T5243] Bluetooth: hci4: command tx timeout
[  176.312351][ T6213] coredump: 37(syz.4.137): written to core: VMAs: 37, size 97546240; core: 71775386 bytes, pos 97554432
[  176.347682][  T130] EXT4-fs (loop2): Free/Dirty block details
[  176.407047][  T130] EXT4-fs (loop2): free_blocks=2415919104
[  176.428341][ T2942] bridge_slave_0: left allmulticast mode
[  176.442107][ T2942] bridge_slave_0: left promiscuous mode
[  176.511854][  T130] EXT4-fs (loop2): dirty_blocks=32
[  176.517042][  T130] EXT4-fs (loop2): Block reservation details
[  176.547731][ T2942] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.628745][  T130] EXT4-fs (loop2): i_reserved_data_blocks=2
[  176.697962][  T130] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28
[  177.048517][ T6236] loop2: detected capacity change from 0 to 256
[  177.091512][ T6236] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  178.157735][ T5246] Bluetooth: hci4: command tx timeout
[  178.848363][ T6246] loop2: detected capacity change from 0 to 64
[  180.217834][ T5246] Bluetooth: hci4: command tx timeout
[  180.379074][ T2942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  180.433391][ T2942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  180.486555][ T2942] bond0 (unregistering): Released all slaves
[  181.153969][ T6274] loop2: detected capacity change from 0 to 16
[  182.083803][ T6274] erofs: (device loop2): mounted with root inode @ nid 36.
[  182.095715][ T6274] erofs: (device loop2): z_erofs_readahead: readahead error at folio 13 @ nid 36
[  182.106451][ T6274] erofs: (device loop2): z_erofs_readahead: readahead error at folio 8 @ nid 36
[  182.116145][ T6274] erofs: (device loop2): z_erofs_readahead: readahead error at folio 6 @ nid 36
[  182.125511][ T6274] erofs: (device loop2): z_erofs_readahead: readahead error at folio 4 @ nid 36
[  182.135013][ T6274] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[  182.144556][ T6274] erofs: (device loop2): z_erofs_readahead: readahead error at folio 0 @ nid 36
[  182.153831][ T6271] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  182.153877][ T6274] syz.2.150: attempt to access beyond end of device
[  182.153877][ T6274] loop2: rw=524288, sector=296, nr_sectors = 16 limit=16
[  182.164589][ T6271] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  182.179165][ T6274] syz.2.150: attempt to access beyond end of device
[  182.179165][ T6274] loop2: rw=524288, sector=1049264, nr_sectors = 16 limit=16
[  182.179288][ T6274] syz.2.150: attempt to access beyond end of device
[  182.179288][ T6274] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16
[  182.179485][ T6274] syz.2.150: attempt to access beyond end of device
[  182.179485][ T6274] loop2: rw=524288, sector=720, nr_sectors = 80 limit=16
[  182.368529][ T5243] Bluetooth: hci4: command tx timeout
[  182.947828][ T2942] hsr_slave_0: left promiscuous mode
[  182.959491][ T2942] hsr_slave_1: left promiscuous mode
[  182.996668][ T2942] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  183.031628][ T2942] batman_adv: batadv0: Removing interface: batadv_slave_0
[  183.063277][ T2942] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  183.084799][ T2942] batman_adv: batadv0: Removing interface: batadv_slave_1
[  183.423466][ T2942] veth1_macvtap: left promiscuous mode
[  183.430305][ T2942] veth0_macvtap: left promiscuous mode
[  183.436003][ T2942] veth1_vlan: left promiscuous mode
[  183.456650][ T6282] loop2: detected capacity change from 0 to 1024
[  183.799593][ T6293] netlink: 104 bytes leftover after parsing attributes in process `syz.0.154'.
[  184.437875][ T2942] veth0_vlan: left promiscuous mode
[  184.763898][ T6282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  186.360542][ T6313] usb usb8: usbfs: process 6313 (syz.2.151) did not claim interface 0 before use
[  186.982279][ T5757] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.568817][ T6319] loop2: detected capacity change from 0 to 32768
[  189.877272][ T6319] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): filesystem UUID already open
[  189.936366][ T6319] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): shutdown complete
[  190.979675][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.162'.
[  192.222871][ T2942] team0 (unregistering): Port device team_slave_1 removed
[  192.708881][ T6319] bcachefs: bch2_fs_get_tree() error: EINVAL
[  192.908571][ T2942] team0 (unregistering): Port device team_slave_0 removed
[  193.508472][ T6358] loop2: detected capacity change from 0 to 2048
[  193.604894][ T6358] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  193.637437][ T6358] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  193.645454][ T6358] UDF-fs: Scanning with blocksize 512 failed
[  193.699415][ T6358] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  194.468006][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  194.474387][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  195.130670][   T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  195.141327][   T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  195.149481][   T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  195.158652][   T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  195.166468][   T54] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  195.175705][   T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  195.221272][ T6354] overlayfs: missing 'lowerdir'
[  195.522687][ T5287] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  195.717765][ T5287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  195.737559][ T5287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  195.830218][ T6205] chnl_net:caif_netlink_parms(): no params data found
[  195.930492][ T5287] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  195.957666][ T5287] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  195.966778][ T5287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.992948][ T5287] usb 3-1: config 0 descriptor??
[  196.024437][ T6367] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  196.500672][ T5287] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd
[  196.547580][   T54] Bluetooth: hci0: command 0x0406 tx timeout
[  196.593877][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.173'.
[  197.098461][ T6205] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.153066][ T6205] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.210387][ T6205] bridge_slave_0: entered allmulticast mode
[  197.257794][ T5243] Bluetooth: hci7: command tx timeout
[  197.266293][ T6205] bridge_slave_0: entered promiscuous mode
[  197.288573][ T5287] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[  197.318030][ T6205] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.342437][ T5287] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  197.371118][ T5287] usb 3-1: USB disconnect, device number 4
[  197.378819][ T6205] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.386199][ T6205] bridge_slave_1: entered allmulticast mode
[  197.396229][ T6205] bridge_slave_1: entered promiscuous mode
[  197.409119][ T5325] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  198.544029][ T6205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  198.590483][ T5325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  198.603787][ T6205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  198.614058][ T5325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  198.659513][ T6401] loop2: detected capacity change from 0 to 256
[  198.677682][ T5325] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  198.739157][ T6401] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  198.756406][ T5325] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  198.785371][ T5325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.816060][ T5325] usb 4-1: config 0 descriptor??
[  198.817006][ T6205] team0: Port device team_slave_0 added
[  199.042450][ T2942] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.099808][ T6205] team0: Port device team_slave_1 added
[  199.466783][ T5243] Bluetooth: hci7: command tx timeout
[  199.494207][ T6407] loop2: detected capacity change from 0 to 256
[  199.510660][ T6407] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  199.529320][ T6407] syz.2.178: attempt to access beyond end of device
[  199.529320][ T6407] loop2: rw=0, sector=34359738490, nr_sectors = 1 limit=256
[  199.544818][ T6407] syz.2.178: attempt to access beyond end of device
[  199.544818][ T6407] loop2: rw=0, sector=34359738490, nr_sectors = 1 limit=256
[  199.558845][ T6407] syz.2.178: attempt to access beyond end of device
[  199.558845][ T6407] loop2: rw=0, sector=34359738488, nr_sectors = 1 limit=256
[  199.572687][ T6407] Buffer I/O error on dev loop2, logical block 34359738488, async page read
[  199.585983][ T6407] syz.2.178: attempt to access beyond end of device
[  199.585983][ T6407] loop2: rw=0, sector=34359738489, nr_sectors = 1 limit=256
[  199.599871][ T6407] Buffer I/O error on dev loop2, logical block 34359738489, async page read
[  199.608730][ T6407] syz.2.178: attempt to access beyond end of device
[  199.608730][ T6407] loop2: rw=0, sector=34359738490, nr_sectors = 1 limit=256
[  199.622604][ T6407] Buffer I/O error on dev loop2, logical block 34359738490, async page read
[  199.631484][ T6407] syz.2.178: attempt to access beyond end of device
[  199.631484][ T6407] loop2: rw=0, sector=34359738488, nr_sectors = 1 limit=256
[  199.645329][ T6407] Buffer I/O error on dev loop2, logical block 34359738488, async page read
[  199.654182][ T6407] syz.2.178: attempt to access beyond end of device
[  199.654182][ T6407] loop2: rw=0, sector=34359738489, nr_sectors = 1 limit=256
[  199.668165][ T6407] Buffer I/O error on dev loop2, logical block 34359738489, async page read
[  199.677994][ T6407] syz.2.178: attempt to access beyond end of device
[  199.677994][ T6407] loop2: rw=0, sector=34359738490, nr_sectors = 1 limit=256
[  199.691882][ T6407] Buffer I/O error on dev loop2, logical block 34359738490, async page read
[  199.701010][   T29] audit: type=1800 audit(1727430646.803:6): pid=6407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.178" name="file0" dev="loop2" ino=1048633 res=0 errno=0
[  199.821462][ T2942] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.916525][ T6205] batman_adv: batadv0: Adding interface: batadv_slave_0
[  199.933292][ T6205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.973531][ T6205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  199.997104][ T6368] chnl_net:caif_netlink_parms(): no params data found
[  200.078369][ T6205] batman_adv: batadv0: Adding interface: batadv_slave_1
[  200.086249][ T6205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.115534][ T5325] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  200.124287][ T5325] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving
[  200.157359][ T5325] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  200.207005][ T6412] loop2: detected capacity change from 0 to 512
[  200.209008][ T6205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  200.218631][ T6412] EXT4-fs (loop2): blocks per group (255) and clusters per group (8192) inconsistent
[  200.447237][ T2942] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.311514][ T2942] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.383801][ T6419] pimreg: entered allmulticast mode
[  201.473693][ T5287] usb 4-1: USB disconnect, device number 4
[  201.498559][ T6205] hsr_slave_0: entered promiscuous mode
[  201.510103][   T54] Bluetooth: hci7: command tx timeout
[  201.585349][ T6205] hsr_slave_1: entered promiscuous mode
[  201.598386][ T6205] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  201.617120][ T6205] Cannot create hsr debugfs directory
[  201.624539][ T6419] pimreg: left allmulticast mode
[  201.678063][ T6368] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.685980][ T6368] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.696147][ T6368] bridge_slave_0: entered allmulticast mode
[  201.717750][ T6368] bridge_slave_0: entered promiscuous mode
[  201.742093][ T6368] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.758010][ T6368] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.770801][ T6368] bridge_slave_1: entered allmulticast mode
[  201.780431][ T6368] bridge_slave_1: entered promiscuous mode
[  202.029753][ T6368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  202.057320][ T6368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  202.294342][ T6368] team0: Port device team_slave_0 added
[  202.354862][ T6368] team0: Port device team_slave_1 added
[  202.545555][ T6368] batman_adv: batadv0: Adding interface: batadv_slave_0
[  202.577740][ T6368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  202.679080][ T6368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  202.700071][ T6434] loop2: detected capacity change from 0 to 256
[  203.682263][   T54] Bluetooth: hci7: command tx timeout
[  204.482128][ T6368] batman_adv: batadv0: Adding interface: batadv_slave_1
[  204.525370][ T6368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.679368][ T6368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  205.174962][ T2942] bridge_slave_1: left allmulticast mode
[  205.187101][ T2942] bridge_slave_1: left promiscuous mode
[  205.248289][ T6458] loop2: detected capacity change from 0 to 256
[  205.649147][ T2942] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.660988][ T2942] bridge_slave_0: left allmulticast mode
[  205.666686][ T2942] bridge_slave_0: left promiscuous mode
[  205.697432][ T2942] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.730238][ T6458] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  205.766529][ T6457] syz.2.187: attempt to access beyond end of device
[  205.766529][ T6457] loop2: rw=0, sector=34359738490, nr_sectors = 1 limit=256
[  205.782784][ T6457] syz.2.187: attempt to access beyond end of device
[  205.782784][ T6457] loop2: rw=0, sector=34359738490, nr_sectors = 1 limit=256
[  205.796829][ T6457] syz.2.187: attempt to access beyond end of device
[  205.796829][ T6457] loop2: rw=0, sector=34359738488, nr_sectors = 1 limit=256
[  205.810742][ T6457] Buffer I/O error on dev loop2, logical block 34359738488, async page read
[  205.821533][ T6457] syz.2.187: attempt to access beyond end of device
[  205.821533][ T6457] loop2: rw=0, sector=34359738489, nr_sectors = 1 limit=256
[  205.835391][ T6457] Buffer I/O error on dev loop2, logical block 34359738489, async page read
[  205.844280][ T6457] syz.2.187: attempt to access beyond end of device
[  205.844280][ T6457] loop2: rw=0, sector=34359738490, nr_sectors = 1 limit=256
[  205.858352][ T6457] Buffer I/O error on dev loop2, logical block 34359738490, async page read
[  205.867188][ T6457] syz.2.187: attempt to access beyond end of device
[  205.867188][ T6457] loop2: rw=0, sector=34359738488, nr_sectors = 1 limit=256
[  205.881119][ T6457] Buffer I/O error on dev loop2, logical block 34359738488, async page read
[  205.890043][ T6457] syz.2.187: attempt to access beyond end of device
[  205.890043][ T6457] loop2: rw=0, sector=34359738489, nr_sectors = 1 limit=256
[  205.903939][ T6457] Buffer I/O error on dev loop2, logical block 34359738489, async page read
[  205.912831][ T6457] syz.2.187: attempt to access beyond end of device
[  205.912831][ T6457] loop2: rw=0, sector=34359738490, nr_sectors = 1 limit=256
[  205.927739][ T6457] Buffer I/O error on dev loop2, logical block 34359738490, async page read
[  205.936688][   T29] audit: type=1800 audit(1727430653.033:7): pid=6457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.187" name="file0" dev="loop2" ino=1048636 res=0 errno=0
[  207.577334][ T2942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  207.631597][ T2942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  207.687299][ T2942] bond0 (unregistering): Released all slaves
[  207.835761][ T6368] hsr_slave_0: entered promiscuous mode
[  207.861326][ T6368] hsr_slave_1: entered promiscuous mode
[  207.893836][ T6368] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  207.922200][ T6368] Cannot create hsr debugfs directory
[  208.690118][ T5243] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  208.699778][ T5243] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  208.707808][ T5243] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  208.715887][ T5243] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  208.724714][ T5243] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  208.744180][ T5243] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  209.801394][ T2942] hsr_slave_0: left promiscuous mode
[  209.846857][ T2942] hsr_slave_1: left promiscuous mode
[  209.876602][ T2942] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  209.894437][ T2942] batman_adv: batadv0: Removing interface: batadv_slave_0
[  209.941410][ T2942] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  209.957718][ T2942] batman_adv: batadv0: Removing interface: batadv_slave_1
[  210.060348][ T2942] veth1_macvtap: left promiscuous mode
[  210.086516][ T2942] veth0_macvtap: left promiscuous mode
[  210.107243][ T2942] veth1_vlan: left promiscuous mode
[  210.117127][ T2942] veth0_vlan: left promiscuous mode
[  210.784745][ T5239] Bluetooth: hci3: command tx timeout
[  211.924268][ T5246] Bluetooth: hci5: command 0x0406 tx timeout
[  211.931115][ T5239] Bluetooth: hci2: command 0x0406 tx timeout
[  212.861348][ T5243] Bluetooth: hci3: command tx timeout
[  213.738298][ T6496] loop2: detected capacity change from 0 to 256
[  213.828616][ T6496] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  213.860677][ T6495] syz.2.196: attempt to access beyond end of device
[  213.860677][ T6495] loop2: rw=0, sector=34359738490, nr_sectors = 1 limit=256
[  213.874852][ T6495] syz.2.196: attempt to access beyond end of device
[  213.874852][ T6495] loop2: rw=0, sector=34359738490, nr_sectors = 1 limit=256
[  213.888872][ T6495] syz.2.196: attempt to access beyond end of device
[  213.888872][ T6495] loop2: rw=0, sector=34359738488, nr_sectors = 1 limit=256
[  213.903276][ T6495] Buffer I/O error on dev loop2, logical block 34359738488, async page read
[  213.913095][ T6495] syz.2.196: attempt to access beyond end of device
[  213.913095][ T6495] loop2: rw=0, sector=34359738489, nr_sectors = 1 limit=256
[  213.926973][ T6495] Buffer I/O error on dev loop2, logical block 34359738489, async page read
[  213.935946][ T6495] syz.2.196: attempt to access beyond end of device
[  213.935946][ T6495] loop2: rw=0, sector=34359738490, nr_sectors = 1 limit=256
[  213.949865][ T6495] Buffer I/O error on dev loop2, logical block 34359738490, async page read
[  213.959313][ T6495] syz.2.196: attempt to access beyond end of device
[  213.959313][ T6495] loop2: rw=0, sector=34359738488, nr_sectors = 1 limit=256
[  213.973465][ T6495] Buffer I/O error on dev loop2, logical block 34359738488, async page read
[  213.982734][ T6495] syz.2.196: attempt to access beyond end of device
[  213.982734][ T6495] loop2: rw=0, sector=34359738489, nr_sectors = 1 limit=256
[  213.996630][ T6495] Buffer I/O error on dev loop2, logical block 34359738489, async page read
[  214.005538][ T6495] syz.2.196: attempt to access beyond end of device
[  214.005538][ T6495] loop2: rw=0, sector=34359738490, nr_sectors = 1 limit=256
[  214.020489][ T6495] Buffer I/O error on dev loop2, logical block 34359738490, async page read
[  214.081238][   T29] audit: type=1800 audit(1727430661.133:8): pid=6495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.196" name="file0" dev="loop2" ino=1048638 res=0 errno=0
[  214.346225][ T6500] loop2: detected capacity change from 0 to 256
[  214.422682][ T6500] =======================================================
[  214.422682][ T6500] WARNING: The mand mount option has been deprecated and
[  214.422682][ T6500]          and is ignored by this kernel. Remove the mand
[  214.422682][ T6500]          option from the mount to silence this warning.
[  214.422682][ T6500] =======================================================
[  214.475201][ T2942] team0 (unregistering): Port device team_slave_1 removed
[  214.520513][ T6502] bpf: Bad value for 'mode'
[  214.546592][ T6500] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  214.585629][ T6500] FAT-fs (loop2): Filesystem has been set read-only
[  214.603394][ T6500] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  214.619253][ T2942] team0 (unregistering): Port device team_slave_0 removed
[  214.638605][ T6500] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  214.669493][ T6500] syz.2.198 (6500) used greatest stack depth: 18168 bytes left
[  214.677342][   T29] audit: type=1800 audit(1727430661.763:9): pid=6500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.198" name="file1" dev="loop2" ino=1048640 res=0 errno=0
[  214.754491][ T5757] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  214.801165][ T5757] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  214.938920][ T5243] Bluetooth: hci3: command tx timeout
[  217.027668][   T54] Bluetooth: hci3: command tx timeout
[  217.202662][ T6205] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  217.380944][ T6205] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  217.408750][ T6205] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  217.452388][ T6205] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  218.099378][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  218.189576][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  218.201739][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  218.213516][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  218.227691][ T5243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  218.235283][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  218.298686][ T6205] 8021q: adding VLAN 0 to HW filter on device bond0
[  218.442322][ T6475] chnl_net:caif_netlink_parms(): no params data found
[  218.724601][ T2942] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.838424][ T6205] 8021q: adding VLAN 0 to HW filter on device team0
[  219.436218][ T2942] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.795304][ T2942] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.844308][  T959] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.851632][  T959] bridge0: port 1(bridge_slave_0) entered forwarding state
[  219.877018][ T6136] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.884199][ T6136] bridge0: port 2(bridge_slave_1) entered forwarding state
[  219.906990][ T6475] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.917674][ T6475] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.936892][ T6475] bridge_slave_0: entered allmulticast mode
[  219.946961][ T6475] bridge_slave_0: entered promiscuous mode
[  219.979942][ T2942] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.030598][ T6475] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.047608][ T6475] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.067087][ T6475] bridge_slave_1: entered allmulticast mode
[  220.076579][ T6475] bridge_slave_1: entered promiscuous mode
[  220.296091][ T6368] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  220.377708][ T5243] Bluetooth: hci1: command tx timeout
[  220.430455][ T6368] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  220.444614][ T6368] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  220.506982][ T6475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  220.521284][ T6475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  220.538783][ T6368] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  220.653100][ T6475] team0: Port device team_slave_0 added
[  220.673385][ T6475] team0: Port device team_slave_1 added
[  220.875836][ T6475] batman_adv: batadv0: Adding interface: batadv_slave_0
[  220.891016][ T6475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  220.926481][ T6475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  221.017074][ T6205] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  221.072220][ T6475] batman_adv: batadv0: Adding interface: batadv_slave_1
[  221.087858][ T6475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.146577][ T6475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  221.250153][ T2942] bridge_slave_1: left allmulticast mode
[  221.255884][ T2942] bridge_slave_1: left promiscuous mode
[  221.272714][ T2942] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.291942][ T2942] bridge_slave_0: left allmulticast mode
[  221.298797][ T2942] bridge_slave_0: left promiscuous mode
[  221.305289][ T2942] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.952711][ T2942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  221.970711][ T2942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  221.991152][ T2942] bond0 (unregistering): Released all slaves
[  222.097762][ T6475] hsr_slave_0: entered promiscuous mode
[  222.139532][ T6475] hsr_slave_1: entered promiscuous mode
[  222.172312][ T6475] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  222.197704][ T6475] Cannot create hsr debugfs directory
[  222.461112][ T5243] Bluetooth: hci1: command tx timeout
[  222.509667][ T6520] chnl_net:caif_netlink_parms(): no params data found
[  222.798246][ T2942] hsr_slave_0: left promiscuous mode
[  222.819177][ T2942] hsr_slave_1: left promiscuous mode
[  222.827126][ T2942] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  222.843566][ T2942] batman_adv: batadv0: Removing interface: batadv_slave_0
[  222.861716][ T2942] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.878239][ T2942] batman_adv: batadv0: Removing interface: batadv_slave_1
[  222.932688][ T2942] veth1_macvtap: left promiscuous mode
[  222.945194][ T2942] veth0_macvtap: left promiscuous mode
[  222.958411][ T2942] veth1_vlan: left promiscuous mode
[  222.970260][ T2942] veth0_vlan: left promiscuous mode
[  224.554315][ T5243] Bluetooth: hci1: command tx timeout
[  225.552126][ T2942] team0 (unregistering): Port device team_slave_1 removed
[  225.755034][ T6562] Zero length message leads to an empty skb
[  226.010944][ T2942] team0 (unregistering): Port device team_slave_0 removed
[  226.635609][ T5243] Bluetooth: hci1: command tx timeout
[  227.536582][ T6475] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.598798][ T6520] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.619617][ T6520] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.656250][ T6520] bridge_slave_0: entered allmulticast mode
[  227.678927][ T6520] bridge_slave_0: entered promiscuous mode
[  227.760229][ T6475] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.806971][ T6520] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.816462][ T6520] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.825693][ T6520] bridge_slave_1: entered allmulticast mode
[  227.835673][ T6520] bridge_slave_1: entered promiscuous mode
[  227.971311][ T6475] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.043454][ T6520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  228.151483][ T6475] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.186881][ T6520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  228.229599][ T6205] 8021q: adding VLAN 0 to HW filter on device batadv0
[  228.391317][ T6368] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.411743][ T6520] team0: Port device team_slave_0 added
[  228.480852][ T6520] team0: Port device team_slave_1 added
[  228.594983][ T6368] 8021q: adding VLAN 0 to HW filter on device team0
[  228.638823][ T6520] batman_adv: batadv0: Adding interface: batadv_slave_0
[  228.656099][ T6520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.693020][ T6520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  228.726166][ T6520] batman_adv: batadv0: Adding interface: batadv_slave_1
[  228.735102][ T6520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.787860][ T6520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  228.827279][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.834500][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state
[  228.862526][ T6475] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  228.900584][ T6475] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  229.000999][ T6520] hsr_slave_0: entered promiscuous mode
[  229.017954][ T6520] hsr_slave_1: entered promiscuous mode
[  229.035162][ T6520] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  229.057631][ T6520] Cannot create hsr debugfs directory
[  229.066127][ T6205] veth0_vlan: entered promiscuous mode
[  229.089949][ T6475] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  229.116556][  T130] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.123779][  T130] bridge0: port 2(bridge_slave_1) entered forwarding state
[  229.213137][ T6205] veth1_vlan: entered promiscuous mode
[  229.240401][ T6475] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  229.471776][ T6205] veth0_macvtap: entered promiscuous mode
[  229.581616][ T6205] veth1_macvtap: entered promiscuous mode
[  229.821867][ T6205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  229.847554][ T6205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.867625][ T6205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  229.907759][ T6205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.946606][ T6205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  229.977071][ T6205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.017929][ T6205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  230.056944][ T6205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.079664][ T6205] batman_adv: batadv0: Interface activated: batadv_slave_0
[  230.176517][ T6205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  230.218981][ T6205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.247690][ T6205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  230.277890][ T6205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.298982][   T30] INFO: task syz.0.1:5359 blocked for more than 143 seconds.
[  230.307138][   T30]       Not tainted 6.11.0-next-20240926-syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  230.325755][ T6205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  230.337511][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  230.346420][   T30] task:syz.0.1         state:D stack:23904 pid:5359  tgid:5320  ppid:5233   flags:0x00000004
[  230.378866][ T6205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.434353][   T30] Call Trace:
[  230.438497][ T6205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  230.449457][   T30]  <TASK>
[  230.452440][   T30]  __schedule+0x1895/0x4b30
[  230.457027][   T30]  ? __pfx___schedule+0x10/0x10
[  230.484147][ T6205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.502234][   T30]  ? __pfx_lock_release+0x10/0x10
[  230.507341][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  230.529110][ T6205] batman_adv: batadv0: Interface activated: batadv_slave_1
[  230.577629][   T30]  ? schedule+0x90/0x320
[  230.581963][   T30]  schedule+0x14b/0x320
[  230.586163][   T30]  io_schedule+0x8d/0x110
[  230.661478][   T30]  folio_wait_bit_common+0x882/0x12b0
[  230.667050][   T30]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  230.696358][   T30]  ? __pfx_wake_page_function+0x10/0x10
[  230.709203][   T30]  ? __pfx___might_resched+0x10/0x10
[  230.714575][   T30]  ? __pfx_find_get_entries+0x10/0x10
[  230.746531][   T30]  ? rcu_is_watching+0x15/0xb0
[  230.757675][   T30]  folio_wait_writeback+0xe7/0x1e0
[  230.762875][   T30]  truncate_inode_pages_range+0xafd/0xfc0
[  230.797577][   T30]  ? __pfx_truncate_inode_pages_range+0x10/0x10
[  230.804032][   T30]  ? __up_read+0x2c2/0x6b0
[  230.836047][   T30]  ? inode_set_ctime_current+0x4aa/0x10d0
[  230.847747][   T30]  ? __pfx_set_normalized_timespec64+0x10/0x10
[  230.853999][   T30]  ? truncate_pagecache_range+0x87/0xb0
[  230.887676][   T30]  bchfs_fallocate+0x2d1/0x730
[  230.892557][   T30]  ? __pfx_bchfs_fallocate+0x10/0x10
[  230.927690][   T30]  ? __mark_inode_dirty+0x3db/0xe90
[  230.933104][   T30]  ? mnt_put_write_access_file+0xbf/0x100
[  230.949629][   T30]  bch2_fallocate_dispatch+0x3ac/0x540
[  230.955210][   T30]  ? __pfx_bch2_fallocate_dispatch+0x10/0x10
[  230.977592][   T30]  ? __pfx_bch2_fallocate_dispatch+0x10/0x10
[  230.983661][   T30]  vfs_fallocate+0x623/0x7a0
[  230.997750][   T30]  ? __pfx_vfs_fallocate+0x10/0x10
[  231.002955][   T30]  ? __might_fault+0xc6/0x120
[  231.019830][   T30]  do_vfs_ioctl+0x2583/0x2e40
[  231.024610][   T30]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  231.047607][   T30]  ? mark_lock+0x9a/0x360
[  231.052053][   T30]  ? tomoyo_path_number_perm+0x208/0x880
[  231.067629][   T30]  ? __pfx_lock_release+0x10/0x10
[  231.072729][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  231.087909][   T30]  ? kfree+0x1a0/0x440
[  231.092060][   T30]  ? tomoyo_path_number_perm+0x68d/0x880
[  231.108130][   T30]  ? tomoyo_path_number_perm+0x71a/0x880
[  231.115032][   T30]  ? tomoyo_path_number_perm+0x208/0x880
[  231.133919][   T30]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  231.140660][   T30]  ? __fget_files+0x29/0x470
[  231.157937][   T30]  ? __fget_files+0x3f3/0x470
[  231.162764][   T30]  __se_sys_ioctl+0x81/0x170
[  231.167413][   T30]  do_syscall_64+0xf3/0x230
[  231.188243][   T30]  ? clear_bhb_loop+0x35/0x90
[  231.193183][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.205203][   T30] RIP: 0033:0x7fdb46d7df39
[  231.210037][   T30] RSP: 002b:00007fdb47ab0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  231.220226][   T30] RAX: ffffffffffffffda RBX: 00007fdb46f36058 RCX: 00007fdb46d7df39
[  231.228577][   T30] RDX: 0000000020000180 RSI: 0000000040305839 RDI: 0000000000000007
[  231.236724][   T30] RBP: 00007fdb46df0216 R08: 0000000000000000 R09: 0000000000000000
[  231.258755][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  231.287032][   T30] R13: 0000000000000000 R14: 00007fdb46f36058 R15: 00007ffd4e3318f8
[  231.297701][   T30]  </TASK>
[  231.347618][   T30] 
[  231.347618][   T30] Showing all locks held in the system:
[  231.355410][   T30] 1 lock held by khungtaskd/30:
[  231.389800][   T30]  #0: ffffffff8e937f20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  231.447613][   T30] 3 locks held by kworker/u8:5/130:
[  231.452974][   T30]  #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  231.493821][   T30]  #1: ffffc90002d2fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  231.528252][   T30]  #2: ffffffff8fcd5188 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[  231.537346][   T30] 3 locks held by kworker/0:2/938:
[  231.582739][   T30]  #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  231.647713][   T30]  #1: ffffc9000404fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  231.707630][   T30]  #2: ffffffff8fcd5188 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0
[  231.717333][   T30] 3 locks held by kworker/u8:7/1122:
[  231.784567][   T30]  #0: ffff88814bdd4948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  231.817043][   T30]  #1: ffffc90004777d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  231.848089][   T30]  #2: ffffffff8fcd5188 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0
[  231.867647][   T30] 2 locks held by getty/4994:
[  231.872406][   T30]  #0: ffff88802e5c10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  231.898030][   T30]  #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00
[  231.917532][   T30] 2 locks held by kworker/0:5/5289:
[  231.922812][   T30]  #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  231.957433][   T30]  #1: ffffc90003acfd00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  231.978326][   T30] 1 lock held by syz.0.1/5321:
[  231.983145][   T30]  #0: ffff888012582420 (sb_writers#15){.+.+}-{0:0}, at: vfs_write+0x224/0xc90
[  232.007620][   T30] 2 locks held by syz.0.1/5359:
[  232.012625][   T30]  #0: ffff888012582420 (sb_writers#15){.+.+}-{0:0}, at: vfs_fallocate+0x59d/0x7a0
[  232.038039][   T30]  #1: ffff88805d6408c0 (&sb->s_type->i_mutex_key#23){+.+.}-{3:3}, at: bch2_fallocate_dispatch+0x1e2/0x540
[  232.075165][   T30] 2 locks held by bch-copygc/loop/5353:
[  232.086552][   T30] 2 locks held by syz.3.79/5872:
[  232.097586][   T30]  #0: ffff8880125820e0 (&type->s_umount_key#67){++++}-{3:3}, at: super_lock+0x27c/0x400
[  232.117561][   T30]  #1: ffff888012582938 (&s->s_sync_lock){+.+.}-{3:3}, at: sync_inodes_sb+0x32e/0xb50
[  232.127279][   T30] 7 locks held by kworker/u8:11/6136:
[  232.147605][   T30] 3 locks held by syz-executor/6205:
[  232.152964][   T30]  #0: ffff88802d95cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510
[  232.180671][   T30]  #1: ffff88802d95c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0
[  232.197599][   T30]  #2: ffffffff8fe419e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240
[  232.217762][   T30] 1 lock held by syz-executor/6368:
[  232.223032][   T30]  #0: ffffffff8fcd5188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  232.257565][   T30] 1 lock held by syz.0.175/6390:
[  232.262576][   T30]  #0: ffff8880125820e0 (&type->s_umount_key#67){++++}-{3:3}, at: super_lock+0x196/0x400
[  232.293179][   T30] 3 locks held by syz-executor/6475:
[  232.303438][   T30]  #0: ffff8880604c0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510
[  232.324998][   T30]  #1: ffff8880604c0078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0
[  232.337617][   T30]  #2: ffffffff8fe419e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240
[  232.357874][   T30] 8 locks held by syz-executor/6520:
[  232.363336][   T30]  #0: ffff88807cdaa420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90
[  232.384424][   T30]  #1: ffff88805dcaf888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500
[  232.406983][   T30]  #2: ffff888144b0b5a8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500
[  232.426979][   T30]  #3: ffffffff8f573228 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480
[  232.444538][   T30]  #4: ffff8880538300e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0
[  232.464960][   T30]  #5: ffff88805feaa250 (&devlink->lock_key#10){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160
[  232.477749][   T30]  #6: ffffffff8fcd5188 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0
[  232.486760][   T30]  #7: ffffffff8e93d4b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830
[  232.510163][   T30] 4 locks held by syz.3.215/6590:
[  232.515263][   T30]  #0: ffff88805de6cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510
[  232.535988][   T30]  #1: ffff88805de6c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0
[  232.556351][   T30]  #2: ffffffff8fe419e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240
[  232.567307][   T30]  #3: ffffffff8e93d4b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830
[  232.587562][   T30] 6 locks held by dhcpcd-run-hook/6649:
[  232.593381][   T30] 
[  232.607661][   T30] =============================================
[  232.607661][   T30] 
[  232.646905][   T30] NMI backtrace for cpu 0
[  232.651334][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-next-20240926-syzkaller #0
[  232.661027][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  232.671130][   T30] Call Trace:
[  232.674451][   T30]  <TASK>
[  232.677419][   T30]  dump_stack_lvl+0x241/0x360
[  232.682155][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  232.687402][   T30]  ? __pfx__printk+0x10/0x10
[  232.692059][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  232.697068][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  232.702586][   T30]  ? _printk+0xd5/0x120
[  232.706807][   T30]  ? __pfx__printk+0x10/0x10
[  232.711466][   T30]  ? __wake_up_klogd+0xcc/0x110
[  232.716369][   T30]  ? __pfx__printk+0x10/0x10
[  232.721005][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  232.726093][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  232.732128][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  232.738252][   T30]  watchdog+0xff4/0x1040
[  232.742621][   T30]  ? watchdog+0x1ea/0x1040
[  232.747059][   T30]  ? __pfx_watchdog+0x10/0x10
[  232.751842][   T30]  kthread+0x2f0/0x390
[  232.755927][   T30]  ? __pfx_watchdog+0x10/0x10
[  232.760621][   T30]  ? __pfx_kthread+0x10/0x10
[  232.765223][   T30]  ret_from_fork+0x4b/0x80
[  232.769711][   T30]  ? __pfx_kthread+0x10/0x10
[  232.774322][   T30]  ret_from_fork_asm+0x1a/0x30
[  232.779203][   T30]  </TASK>
[  232.783334][   T30] Sending NMI from CPU 0 to CPUs 1:
[  232.788951][    C1] NMI backtrace for cpu 1
[  232.788966][    C1] CPU: 1 UID: 0 PID: 25 Comm: kworker/1:0 Not tainted 6.11.0-next-20240926-syzkaller #0
[  232.788988][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  232.789000][    C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker
[  232.789033][    C1] RIP: 0010:mark_lock+0x0/0x360
[  232.789055][    C1] Code: 8d 00 e9 04 ff ff ff e8 3e f0 56 0a 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <55> 41 57 41 56 41 55 41 54 53 48 83 ec 10 49 89 f7 48 89 3c 24 49
[  232.789077][    C1] RSP: 0018:ffffc90000a18888 EFLAGS: 00000006
[  232.789092][    C1] RAX: 00000000000c26d6 RBX: 1ffff110039dc52f RCX: ffffffff8170b69a
[  232.789107][    C1] RDX: 0000000000000008 RSI: ffff88801cee2958 RDI: ffff88801cee1e00
[  232.789120][    C1] RBP: ffff88801cee2958 R08: ffffffff942cd8df R09: 1ffffffff2859b1b
[  232.789134][    C1] R10: dffffc0000000000 R11: fffffbfff2859b1c R12: ffff88801cee1e00
[  232.789148][    C1] R13: ffff88801cee28d8 R14: 0000000000000003 R15: ffff88801cee2978
[  232.789161][    C1] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  232.789177][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  232.789190][    C1] CR2: 0000557585038131 CR3: 000000000e734000 CR4: 00000000003526f0
[  232.789206][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  232.789217][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  232.789229][    C1] Call Trace:
[  232.789235][    C1]  <NMI>
[  232.789243][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  232.789269][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  232.789297][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  232.789329][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  232.789353][    C1]  ? nmi_handle+0x14f/0x5a0
[  232.789372][    C1]  ? nmi_handle+0x2a/0x5a0
[  232.789391][    C1]  ? __pfx_mark_lock+0x10/0x10
[  232.789409][    C1]  ? default_do_nmi+0x63/0x160
[  232.789434][    C1]  ? exc_nmi+0x123/0x1f0
[  232.789458][    C1]  ? end_repeat_nmi+0xf/0x53
[  232.789482][    C1]  ? mark_lock+0x9a/0x360
[  232.789519][    C1]  ? __pfx_mark_lock+0x10/0x10
[  232.789538][    C1]  ? __pfx_mark_lock+0x10/0x10
[  232.789557][    C1]  ? __pfx_mark_lock+0x10/0x10
[  232.789575][    C1]  </NMI>
[  232.789581][    C1]  <IRQ>
[  232.789587][    C1]  __lock_acquire+0xc35/0x2050
[  232.789611][    C1]  lock_acquire+0x1ed/0x550
[  232.789637][    C1]  ? process_backlog+0x33b/0x15b0
[  232.789674][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  232.789703][    C1]  ? _raw_spin_lock_irq+0xdf/0x120
[  232.789722][    C1]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  232.789741][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  232.789760][    C1]  process_backlog+0xd08/0x15b0
[  232.789786][    C1]  ? process_backlog+0x33b/0x15b0
[  232.789814][    C1]  ? process_backlog+0x33b/0x15b0
[  232.789844][    C1]  ? __pfx_process_backlog+0x10/0x10
[  232.789870][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  232.789899][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  232.789929][    C1]  __napi_poll+0xcb/0x490
[  232.789955][    C1]  net_rx_action+0x89b/0x1240
[  232.789991][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  232.790020][    C1]  ? sched_clock+0x4a/0x70
[  232.790049][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  232.790081][    C1]  handle_softirqs+0x2c5/0x980
[  232.790109][    C1]  ? do_softirq+0x11b/0x1e0
[  232.790133][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  232.790161][    C1]  do_softirq+0x11b/0x1e0
[  232.790184][    C1]  </IRQ>
[  232.790190][    C1]  <TASK>
[  232.790197][    C1]  ? __pfx_do_softirq+0x10/0x10
[  232.790221][    C1]  ? __pfx_lockdep_softirqs_on+0x10/0x10
[  232.790250][    C1]  ? rcu_is_watching+0x15/0xb0
[  232.790271][    C1]  __local_bh_enable_ip+0x1bb/0x200
[  232.790296][    C1]  ? wg_socket_send_skb_to_peer+0x176/0x1d0
[  232.790324][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  232.790349][    C1]  ? mod_peer_timer+0x21/0x260
[  232.790375][    C1]  wg_socket_send_skb_to_peer+0x176/0x1d0
[  232.790405][    C1]  wg_packet_tx_worker+0x1bf/0x810
[  232.790434][    C1]  ? process_scheduled_works+0x976/0x1850
[  232.790460][    C1]  process_scheduled_works+0xa63/0x1850
[  232.790497][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  232.790526][    C1]  ? assign_work+0x364/0x3d0
[  232.790552][    C1]  worker_thread+0x870/0xd30
[  232.790583][    C1]  ? __kthread_parkme+0x169/0x1d0
[  232.790611][    C1]  ? __pfx_worker_thread+0x10/0x10
[  232.790637][    C1]  kthread+0x2f0/0x390
[  232.790654][    C1]  ? __pfx_worker_thread+0x10/0x10
[  232.790684][    C1]  ? __pfx_kthread+0x10/0x10
[  232.790702][    C1]  ret_from_fork+0x4b/0x80
[  232.790728][    C1]  ? __pfx_kthread+0x10/0x10
[  232.790745][    C1]  ret_from_fork_asm+0x1a/0x30
[  232.790777][    C1]  </TASK>
[  232.886438][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  232.886462][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-next-20240926-syzkaller #0
[  232.886492][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  232.886508][   T30] Call Trace:
[  232.886518][   T30]  <TASK>
[  232.886529][   T30]  dump_stack_lvl+0x241/0x360
[  232.886566][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  232.886596][   T30]  ? __pfx__printk+0x10/0x10
[  232.886618][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  232.886663][   T30]  ? vscnprintf+0x5d/0x90
[  232.886697][   T30]  panic+0x349/0x880
[  232.886724][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  232.886759][   T30]  ? __pfx_panic+0x10/0x10
[  232.886783][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  232.886812][   T30]  ? __irq_work_queue_local+0x137/0x410
[  232.886847][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  232.886873][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  232.886913][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  232.886949][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  232.886985][   T30]  watchdog+0x1033/0x1040
[  232.887019][   T30]  ? watchdog+0x1ea/0x1040
[  232.887058][   T30]  ? __pfx_watchdog+0x10/0x10
[  232.887091][   T30]  kthread+0x2f0/0x390
[  232.887115][   T30]  ? __pfx_watchdog+0x10/0x10
[  232.887147][   T30]  ? __pfx_kthread+0x10/0x10
[  232.887172][   T30]  ret_from_fork+0x4b/0x80
[  232.887207][   T30]  ? __pfx_kthread+0x10/0x10
[  232.887231][   T30]  ret_from_fork_asm+0x1a/0x30
[  232.887278][   T30]  </TASK>
[  233.400393][   T30] Kernel Offset: disabled
[  233.404750][   T30] Rebooting in 86400 seconds..