last executing test programs:

9.080268569s ago: executing program 4 (id=2252):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x11, 0x5112, &(0x7f0000014540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0xc400941b, &(0x7f0000000000)={0x1})

7.768629335s ago: executing program 2 (id=2257):
r0 = socket$inet6(0xa, 0x802, 0x0)
bind$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000002900000037"], 0x18}}], 0x1, 0x0)

7.629075507s ago: executing program 2 (id=2258):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
io_setup(0x6, &(0x7f0000000100)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000240)="a8", 0x1}])

7.414109845s ago: executing program 2 (id=2260):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x4, &(0x7f00000003c0)=ANY=[], 0x2c, 0x364, &(0x7f0000000f40)="$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")
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000000000000000004000000000af0100000000000003000040"])

6.806478654s ago: executing program 4 (id=2263):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x63, 0xe8, 0x1e, 0x10, 0x1199, 0x25, 0x1e64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x99, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
recvmmsg(r1, &(0x7f0000000b00)=[{{&(0x7f0000000200)=@un=@abs, 0x80, &(0x7f0000000280)=[{&(0x7f0000003240)=""/4101, 0x1005}], 0x1, &(0x7f0000000300)=""/228, 0xe4}, 0x200}], 0x1, 0x0, 0x0)
r2 = open$dir(&(0x7f0000000180)='.\x00', 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x4, 0x4, 0x4, 0x3}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000006c0)={r3, &(0x7f0000000540), 0x0}, 0x20)
r4 = fanotify_init(0x0, 0x0)
fanotify_mark(r4, 0x1, 0x1010, r2, &(0x7f0000000080)='./file0\x00')
fanotify_mark(r4, 0x2, 0x8001013, r0, &(0x7f0000000000)='./file0\x00')
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000080)=ANY=[@ANYBLOB='overriderockperm,norock,map=normal,nocompress,check=relaxed,overriderockperm,block=0x0000040000000800,norock,mode=0x0000000000000004,unhide,utf8,check=relaxed,unhidd,\x00'], 0x2, 0x9f5, &(0x7f0000001840)="$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")
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0x40086604, 0x1000000000000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000940)=ANY=[@ANYBLOB="64010000", @ANYRES16=r8, @ANYBLOB="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"], 0x164}}, 0x0)

6.427374695s ago: executing program 1 (id=2264):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8}]}}]}, 0x3c}}, 0x0)

6.276614097s ago: executing program 2 (id=2265):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./bus\x00', 0x0, &(0x7f0000020000)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x5511, &(0x7f0000015b80)="$eJzs3E1rY9UfB/CTdjqdp//8i7hwNxcGoYVJmPRh0F3VGXzADsWHhStNkzRkJsktTZrWrly4FBe+Djei4Mql+BIEXbsTF4o7Qck9pzIdFdRmkqn9fOD2e+/JzS+/E0rLuQk3AGfWQvbzj6VwNVwMIcyGEK6EUOyX0lZYj/FUCOFaCGHmga2Uxn8fOB9CuBRCuDoqHmuW0kMf3RheX/vhlZ+++Hr+3OVPPv92erMGpu3pEEJ3J+7vd2PmrZj30nht2C6yuzpMGR/o3k/Hecz95lZRYb92dF6tyJVWPD/f2euPcrtTq4+y1d4uxnd68QX7w9ZRneIJ92q7xXGjuVVku58X2TqMfR0cxr9th/1BrNNI9d4tyofB4CjjePOgGeczf7/Iem+QxmPdvNE8GOUwZXq5UM87jaKPrZO804+3V9u9vYNs2Nztt/NetlapPlOp3ipXd/NGc9BcLde6jVur2WKrMzqtPGjWuuutPG91mpV63l3KFlv1erlazRZvN7fatV5WrVZWKjfLa0tp70b24t03s04jWxzl8+3e3qDd6Wfb+W4Wn7GULVdWnl3Krlez1zc2s83X7tzZ2Hzj7dtv3X1u4+UX0kl/aCtbXL65vFyu3iwvV5dO7/xH/+v/0fzfT02Pcf5wIqVpNwBw+lj/A5P28VcxT/P6P/yb9f+O9f/DrP/P9vzhRKz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOrO/mPn2p2FmIx5fT+P/S0BPpuBRCmAkh/PonZsP5YzVnU525vzh/7qEeviyFosLoNebTdimEsJ62X/7/qN8FAAAA+O/67L1rH8bVevyxMO2GmKR40WbmyjtjqlcKIcwtfD+GKiFdbApPnryraPT7fS4cjKlacQHrwpiKxUtu58ZV7W+ZPRYXHohSjJmJtgMAAEzE8ZXAZFchAAAATNIH026A6Sg+aU3fxU9f4J+PkT4QvHjsCAAAADiFStNuAAAAAHjkivX/43P/v2+Kfff/AwAAgPGK9/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiNnfvJSR2K4gB8Wuh7vD9GYpy7FWewDFdgHDo0LMBNsATcghtgDThzCQYMbYnWYKLhto3k+5K23Bvy45QwOfeSAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCmp2Ixfbi7uD80Z705TJq7AQAAAPZZFYtp+WJcjf/V8yf11Fk9ziIij4h9vfsgfjUyB3VO8cn7iw81PEaUCdvP+F0ffyPisj5eTtv+FgAAAOB4LWfzSdWtV6dx3wXRpWrRJv9/lSgvi4hi/JwoLd+ezhOFlb/vYdwmSisXsEaJwqolt2GqtC8ZNC6jd5esuuSdlgMAAHSi2Ql024UAAADQpZu+C6AfWey2Mnd7weU/7982BP80RgAAAMAPlPVdAAAAANC6sv/3/D8AAAA4btXz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjTqlhMl7P5pDF5/f2c9eYw6e4IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXtmfdxQIgTAIg73rO5O5/2GlQUNjkyoQPv7GYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4M3v/vJ/YmqcSeZeG0vPI8naqbF1auydG0d/GF+/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYn9eUiAEgiAK5oz/nfT9DysJegYRIqDhUUUtGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4ot/98n9iapxJ5k4bS8cjydpVY+uqsfegcfRgvP0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYud+XuOo4gCAf3dnZ2urYoySQ0QUPOjFptva2qsHJXjwTxBCuq3RrT/aHGwpQi7eJOdeRI8ighJv/R96bqGXeuthDxU89VCZ2ZnkdS24WjqzST4fePO+Mwzzvm8SQr7zZhcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDa+L29OCs2C5O4Wx27df/aetHfnuoLN7bvLBetiDtNJr0PPHgYr6b7naX2cgEAAODwyOr6PiLu5jurRd9dKOv/vD6nqPl/eH4S1/X8dN1f93XtX7Tff7v38u5AC5Nxioue3xgNT/wzld7Tm+V8e+Ffz+iVd7589pKVP5Duh1svjfPyfna+u3nz/X4ZHmkiWwDg/zhe91VQ/z9U9IM2EwPg0OglhXdd/2cL7eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0IT+Vjxbx52IWO7txYXb96+tl/3U/o3tO8t1O3P9+nZ6zeISeUSc3xgNTzQ1kX3g8pWrn62NRsNLzQevRUR7o1fBxzOcE9FmhoInDbrV7/q85LM/gpb/MAEAcODkVSvq+rv5zmpxrLMY8fDHR+v/N5M40vp/qk/r/3ufnLmVjpXW/4PGZjj/VjYvfrly+crVtzcurl0YXhh+/s7JwbuDU2dPnz67Uj4rWfHEBAAAgCfTr1pa/3cXI8ZT6//HkjhmrP+/+n7wTTpWpv5/rL1Fv7YzAQAAONxefP2vPzuPOd7p9+Prtc3NS4PJdnf/5GTbQqr/2ZGqpfV/tth2VgAAAEATxludR9b/zyVxzLj+/9xPr/ySXjOLiKPV+v/x9S9G55qbTksezHRWEx8nfupTBQAAYK4drVq6/p+X7/93d1956EbEW29M4uprAGeq/7MPvv05HSt9//9Uc1OcS92lyf0o+6WI3lLbGQEAAHCQPVO1otj/I99Z/fTXYx/1vf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0LS/AwAA//+xhkJ5")
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)

4.580773036s ago: executing program 2 (id=2268):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180))
ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)='\b\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0})

4.537437829s ago: executing program 1 (id=2269):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000000000002000000300004802c0001800b0001006e756d67656e00001c0002800800014000000000080003400000080000000240000000000900010073797a30000000000900020073797a32"], 0x84}}, 0x0)

4.494773133s ago: executing program 3 (id=2270):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000001640)={{}, 0x0, 0x0, @inherit={0x0, 0x0}, @devid})

4.299906449s ago: executing program 1 (id=2271):
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x1)
fcntl$getflags(r0, 0x401)
r1 = socket(0x200000100000011, 0x803, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r3=>0x0})
sendto$packet(r1, &(0x7f0000000080)='M', 0x300, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xa890d001}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@delqdisc={0x50, 0x25, 0x20, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x2, 0xfff2}, {0x2, 0x801c}, {0xffff, 0xffe0}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe2, 0x2, 0x8, 0x2, 0x3, 0x1000, 0x81, 0x3}}, {0xa, 0x2, [0x81, 0x8, 0x5]}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000000)
timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x11}, &(0x7f0000001400))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000040)=0x7, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x54}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0)
timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=<r6=>0x0)
listen(r2, 0x0)
timer_settime(r6, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_create(0x3, 0x0, &(0x7f0000000280)=<r7=>0x0)
timer_settime(r7, 0x0, &(0x7f00000002c0)={{}, {0x77359400}}, 0x0)
unshare(0x40000000)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x1, 0x2, @thr={&(0x7f0000000180)="4dbf735ecaea8ec662aaae8b2d726c60ba92a9a984032aab8cf30a024d7001965f600f432a19730dd6667cf69cf990bdddb9fe91eb27878904d9c7b25c748658491e90b7ba9d893e7947fad4e2b7a512bed35020c69fc112b9ca579b3d6eb00fd6589c94e0987474bec61365e6242fc197702369dd387a1cbd4a6eb377e66c0425f703844f14c71e3539f1e89619e895bfd90c45cf9e250704cfa81a7c8708785a947aa3661d1fefbfaf0f20", &(0x7f0000000300)="6534865af02f32c8f334cd48dd95277aa9acecd14fc0bbf0f31abeec3b3ed9ae019a8cf942fc47d8b9bd1ee8586fde4f239a9738fc2af374feda57794e266d9dc4ac40eb0c1e7a50026c3c4a34ec00bc24aa837d1ee820304779590a7ac26b8408f97def59898a85"}}, &(0x7f0000000240))
r8 = gettid()
rt_sigqueueinfo(r8, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff})
r9 = getpid()
sched_setscheduler(r9, 0x1, &(0x7f0000000100)=0x5)
timer_create(0x0, &(0x7f0000000540)={0x0, 0x400026, 0x0, @thr={&(0x7f00000003c0)="98bff2d146444978d4045621c900480d71653171caaef587b79cc4b3e974583ae70ed1ee24ba9e418afe9e493049bf23ac76092c20f583269049aea5818643b4a2fcdd9f61e47ce658dcef3cd3a54f267a1d2583bb6ae82d5f87f3509b2cbd0d25a698527968e4884a09d2b1cd914c34397c23e562f50eaf8f60bc19384b64c2dab4d30ebec3ea96ca9aa4f57ef54bc3af4f2b", &(0x7f0000000480)="d2db91fc1732f065418d80501575dbe76d4253b28df57e8ca3a4a1ae9faa444db8714e73b42f573cce3b"}}, &(0x7f0000000380)=<r10=>0x0)
clock_gettime(0x0, &(0x7f00000005c0)={<r11=>0x0, <r12=>0x0})
timer_settime(r10, 0x0, &(0x7f0000000080)={{0x77359400}, {r11, r12+60000000}}, &(0x7f0000000600))

3.79895532s ago: executing program 1 (id=2273):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0}, 0x90)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2}, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)

3.445857759s ago: executing program 2 (id=2276):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x247, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xa0}}}}]}}]}}, 0x0)
ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000140)={0x9, "04196a52e65b9c4165"})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2000000d200a7ea311df0"], 0x0, 0x0, 0x0, 0x0}, 0x0)

2.729435627s ago: executing program 1 (id=2282):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./bus\x00', 0x0, &(0x7f0000020000)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1548f5e0b33006bd1049ca45bd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc96eb384dbb4268c50943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235022bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856af0a0c12b3c93ba5aa906bde2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40c75", @ANYRES64], 0x1, 0x5511, &(0x7f0000015b80)="$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")
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)

2.729272818s ago: executing program 4 (id=2283):
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0xfffffffd, 0x0, 0x0, 0x0, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9acc6c25af21ca2af6d2e80e4caadd82126cfb80c92dc817d44dcdec"})

2.074196281s ago: executing program 4 (id=2284):
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160)

1.793834414s ago: executing program 0 (id=2286):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42)

1.736024388s ago: executing program 4 (id=2287):
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='bbr\x00', 0x4)
getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000380))

1.735686939s ago: executing program 3 (id=2288):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8}, {0x4}]}]}, 0x30}}, 0x0)

1.682183353s ago: executing program 0 (id=2289):
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000000)="170000000200010000ffbe8c5ee17688a2002b000301000a000002a257fc5ad90200bb6a880000d6c8db0000dba67e060a0000e28900000200df01800a000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2", 0xd2)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x7d8f2811a57e44b6)
r2 = gettid()
socket$key(0xf, 0x3, 0x2)
accept(r0, &(0x7f0000000480)=@l2tp={0x2, 0x0, @local}, &(0x7f0000000500)=0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0xd, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = timerfd_create(0x7, 0x0)
read(r3, &(0x7f0000000240)=""/123, 0x7b)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={0x0, &(0x7f0000000540)=""/208, 0x0, 0xd0, 0x20000001, 0x1f}, 0x20)

1.663483214s ago: executing program 4 (id=2290):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc532, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "a8f46877"}]}}, 0x0}, 0x0)

1.59345323s ago: executing program 3 (id=2291):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x301, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}]}]}, 0x54}}, 0x0)

1.457814081s ago: executing program 3 (id=2292):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
write$binfmt_elf64(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x328)
r2 = accept(r0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x4, 0x4, 0xa4}, 0x48)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r6, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(r6, &(0x7f00000000c0)="822a0a65", 0x20)
pipe(&(0x7f00000045c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
vmsplice(r7, 0x0, 0x0, 0x0)
setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x2, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r8 = accept$alg(r5, 0x0, 0x0)
write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000080), 0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r4, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r2}, 0x47)
recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)=""/146, 0x92}], 0x1}, 0x0)

1.125904858s ago: executing program 3 (id=2293):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x3, 0x0, 0x0}, 0x90)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r5, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @empty}, @ib={0x1b, 0x0, 0x0, {"0e000000000000000000000004000001"}}}}, 0x118)
syz_open_dev$vim2m(0x0, 0x10001, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mount(&(0x7f0000000000)=@sg0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000240))

300.475686ms ago: executing program 0 (id=2294):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newtaction={0xbc, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa8, 0x1, [@m_ctinfo={0x50, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8e}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x37, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0xf5, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xbc}}, 0x0)

220.336012ms ago: executing program 0 (id=2295):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004400)='net_prio.prioidx\x00', 0x275a, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f0000006380))
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)

87.225813ms ago: executing program 0 (id=2296):
r0 = openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$damon_attrs(r0, &(0x7f0000000040)={{}, {}, {}, {' ', 0x6}, {' ', 0x7}}, 0x69)
write$damon_attrs(r0, 0x0, 0x0)

87.022483ms ago: executing program 3 (id=2297):
syz_usb_connect(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004e835c10e80430ff2154010203010902240001000000000904"], 0x0)
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="18", @ANYRES16=0x0, @ANYBLOB="0000ef000020000004000100000000000000218a5e37ea2b0000a81ffd3077d81ad405349215ff001971bf38058443a86f88a9c90fdcb35c284169d7e6651e6fc252fefffdf19e19200cec22cb0edf7861031b0457"], 0x18}}, 0x0)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000240))
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000007c0)={{}, 'port0\x00'})
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x10000)
ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f00000007c0), &(0x7f0000000800)={0x7f, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES64, @ANYRESHEX, @ANYRES32], 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)

207.84µs ago: executing program 1 (id=2298):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x15)

0s ago: executing program 0 (id=2299):
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
fcntl$setstatus(r0, 0x4, 0x42c00)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x80402)
r2 = syz_io_uring_setup(0x68ec, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_setup(0x3b7d, &(0x7f00000002c0), &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000540))
syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
io_uring_enter(r2, 0xec4, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000000002000000ff"], 0x78)

kernel console output (not intermixed with test programs):

config 1 has 1 interface, different from the descriptor's value: 3
[  471.572241][T11423] loop1: detected capacity change from 0 to 256
[  471.668762][ T3616] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  471.687841][T11376] team0: Port device team_slave_0 added
[  471.736364][ T3616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  471.762936][T11423] FAT-fs (loop1): Directory bread(block 64) failed
[  471.769484][T11423] FAT-fs (loop1): Directory bread(block 65) failed
[  471.789090][T11376] team0: Port device team_slave_1 added
[  471.795880][T11399] BTRFS info (device loop2): enabling ssd optimizations
[  471.803359][ T3616] usb 4-1: SerialNumber: syz
[  471.810336][T11413] loop4: detected capacity change from 0 to 40427
[  471.849879][T11423] FAT-fs (loop1): Directory bread(block 66) failed
[  471.902092][T11423] FAT-fs (loop1): Directory bread(block 67) failed
[  471.911441][T11376] batman_adv: batadv0: Adding interface: batadv_slave_0
[  471.919137][T11413] F2FS-fs (loop4): invalid crc value
[  471.952605][T11376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  471.968912][T11423] FAT-fs (loop1): Directory bread(block 68) failed
[  472.031766][T11423] FAT-fs (loop1): Directory bread(block 69) failed
[  472.037428][T11376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  472.042349][T11413] F2FS-fs (loop4): Found nat_bits in checkpoint
[  472.082331][T11376] batman_adv: batadv0: Adding interface: batadv_slave_1
[  472.089794][T11423] FAT-fs (loop1): Directory bread(block 70) failed
[  472.120354][ T3792] Bluetooth: hci2: command 0x0409 tx timeout
[  472.130967][T11423] FAT-fs (loop1): Directory bread(block 71) failed
[  472.133494][T11376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  472.148551][T11423] FAT-fs (loop1): Directory bread(block 72) failed
[  472.198344][ T3616] usb 4-1: 0:2 : does not exist
[  472.203267][ T3616] usb 4-1: unit 5: unexpected type 0x0e
[  472.261008][ T3616] usb 4-1: USB disconnect, device number 22
[  472.282792][T11413] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  472.286090][T11423] FAT-fs (loop1): Directory bread(block 73) failed
[  472.316689][T11376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  472.664430][T11060] attempt to access beyond end of device
[  472.664430][T11060] loop4: rw=524288, want=45072, limit=40427
[  472.705137][T11060] attempt to access beyond end of device
[  472.705137][T11060] loop4: rw=0, want=45072, limit=40427
[  472.905887][T11376] device hsr_slave_0 entered promiscuous mode
[  472.942823][T11376] device hsr_slave_1 entered promiscuous mode
[  472.985510][ T8061] attempt to access beyond end of device
[  472.985510][ T8061] loop4: rw=2049, want=41088, limit=40427
[  472.986850][T11376] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  473.077022][T11376] Cannot create hsr debugfs directory
[  473.112896][ T3649] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0
[  473.132160][ T3649] Bluetooth: hci6: Injecting HCI hardware error event
[  473.150397][ T3575] Bluetooth: hci6: hardware error 0x00
[  473.370844][ T4037] attempt to access beyond end of device
[  473.370844][ T4037] loop1: rw=1, want=1832, limit=256
[  473.434377][ T4037] attempt to access beyond end of device
[  473.434377][ T4037] loop1: rw=1, want=3304, limit=256
[  473.699347][T11469] input: syz0 as /devices/virtual/input/input27
[  473.719754][T11469] input: failed to attach handler leds to device input27, error: -6
[  474.244076][T11376] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  474.255090][ T1967] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  474.265215][ T3649] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  474.289538][T11376] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  474.303624][T11376] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  474.338517][T11376] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  474.373736][   T21] Bluetooth: hci2: command 0x041b tx timeout
[  474.525399][ T1967] usb 4-1: Using ep0 maxpacket: 16
[  474.655492][ T1967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  474.687059][ T1967] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0
[  474.719854][ T1967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  474.739838][ T1967] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  474.752957][ T3649] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  474.771566][ T3649] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  474.781487][ T7112] device hsr_slave_0 left promiscuous mode
[  474.792426][ T3649] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  474.801609][ T7112] device hsr_slave_1 left promiscuous mode
[  474.813056][ T3649] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.829339][ T7112] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  474.836558][ T3649] usb 2-1: config 0 descriptor??
[  474.836973][ T7112] batman_adv: batadv0: Removing interface: batadv_slave_0
[  474.861170][ T7112] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  474.868568][ T7112] batman_adv: batadv0: Removing interface: batadv_slave_1
[  474.902120][ T7112] device bridge_slave_1 left promiscuous mode
[  474.915380][ T7112] bridge0: port 2(bridge_slave_1) entered disabled state
[  474.934952][ T7112] device bridge_slave_0 left promiscuous mode
[  474.937726][ T1967] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=b2.d3
[  474.951517][ T7112] bridge0: port 1(bridge_slave_0) entered disabled state
[  474.970201][ T1967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  474.984554][ T7112] device veth1_macvtap left promiscuous mode
[  474.990591][ T7112] device veth0_macvtap left promiscuous mode
[  474.991178][ T1967] usb 4-1: Product: syz
[  475.012854][ T7112] device veth1_vlan left promiscuous mode
[  475.022589][ T1967] usb 4-1: Manufacturer: syz
[  475.024022][ T7112] device veth0_vlan left promiscuous mode
[  475.033501][ T1967] usb 4-1: SerialNumber: syz
[  475.054443][ T1967] usb 4-1: config 0 descriptor??
[  475.111073][ T1967] pn533_usb 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  475.350942][ T3649] keytouch 0003:0926:3333.001C: fixing up Keytouch IEC report descriptor
[  475.373850][ T1967] usb 4-1: USB disconnect, device number 23
[  475.380106][ T3649] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.001C/input/input28
[  475.483373][ T3649] keytouch 0003:0926:3333.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  475.656450][ T7112] team0 (unregistering): Port device team_slave_1 removed
[  475.669940][ T1967] usb 2-1: USB disconnect, device number 25
[  475.709241][ T7112] team0 (unregistering): Port device team_slave_0 removed
[  475.753601][ T7112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  475.797078][ T7112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  477.116809][ T7112] bond0 (unregistering): Released all slaves
[  477.414586][ T3792] Bluetooth: hci2: command 0x040f tx timeout
[  477.428935][ T3792] Bluetooth: hci3: command 0x0409 tx timeout
[  477.607499][T11376] 8021q: adding VLAN 0 to HW filter on device bond0
[  477.676765][T11376] 8021q: adding VLAN 0 to HW filter on device team0
[  477.729800][T11520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2002'.
[  477.745519][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  477.753313][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  477.802390][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  477.811858][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  477.830721][ T5540] bridge0: port 1(bridge_slave_0) entered blocking state
[  477.837806][ T5540] bridge0: port 1(bridge_slave_0) entered forwarding state
[  477.861832][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  477.896940][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  477.905439][ T5540] bridge0: port 2(bridge_slave_1) entered blocking state
[  477.912489][ T5540] bridge0: port 2(bridge_slave_1) entered forwarding state
[  477.955279][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  477.981013][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  478.255531][T11538] loop1: detected capacity change from 0 to 256
[  478.527576][T11538] exfat: Deprecated parameter 'namecase'
[  478.544301][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  478.552816][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  478.628896][T11538] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  478.654753][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  478.697338][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  478.705924][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  478.791910][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  478.835867][T11551] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000005)
[  478.847729][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  478.867290][T11546] loop2: detected capacity change from 0 to 4096
[  478.882075][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  478.915697][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  478.939650][T11376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  478.957707][T10162] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000005)
[  478.972868][T11546] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512)
[  478.989336][T10162] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000005)
[  479.039508][T11546] ntfs3: loop2: mft corrupted
[  479.058112][T11546] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  479.097363][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  479.110234][T11546] ntfs3: loop2: Failed to load $UpCase.
[  479.211871][T11492] chnl_net:caif_netlink_parms(): no params data found
[  479.660726][ T3616] Bluetooth: hci3: command 0x041b tx timeout
[  479.666845][ T3616] Bluetooth: hci2: command 0x0419 tx timeout
[  479.900636][T11492] bridge0: port 1(bridge_slave_0) entered blocking state
[  479.910483][T11492] bridge0: port 1(bridge_slave_0) entered disabled state
[  479.981110][T11492] device bridge_slave_0 entered promiscuous mode
[  480.007044][T11492] bridge0: port 2(bridge_slave_1) entered blocking state
[  480.027405][T11492] bridge0: port 2(bridge_slave_1) entered disabled state
[  480.047344][T11492] device bridge_slave_1 entered promiscuous mode
[  480.095418][T11376] 8021q: adding VLAN 0 to HW filter on device batadv0
[  480.116034][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  480.123515][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  480.138222][T11492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  480.168258][T11492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  480.306228][T11492] team0: Port device team_slave_0 added
[  480.338536][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  480.365545][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  480.402070][T11492] team0: Port device team_slave_1 added
[  480.420304][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  480.434575][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  480.495997][T11376] device veth0_vlan entered promiscuous mode
[  480.504014][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  480.514282][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  480.534181][T11492] batman_adv: batadv0: Adding interface: batadv_slave_0
[  480.543810][T11492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  480.625532][T11492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  480.654086][T11376] device veth1_vlan entered promiscuous mode
[  480.661432][ T3646] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  480.678886][T11492] batman_adv: batadv0: Adding interface: batadv_slave_1
[  480.689649][T11492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  480.753351][T11492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  480.845318][T11376] device veth0_macvtap entered promiscuous mode
[  480.864998][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  480.873093][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  480.914528][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  480.934509][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  480.949998][ T3646] usb 4-1: Using ep0 maxpacket: 16
[  480.997451][T11492] device hsr_slave_0 entered promiscuous mode
[  481.015325][T11492] device hsr_slave_1 entered promiscuous mode
[  481.021941][T11492] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  481.030105][T11492] Cannot create hsr debugfs directory
[  481.041852][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  481.061187][T11376] device veth1_macvtap entered promiscuous mode
[  481.102782][ T3646] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  481.114320][ T3646] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  481.134722][ T3646] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  481.158739][ T3646] usb 4-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00
[  481.177465][ T3646] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  481.198143][ T3646] usb 4-1: config 0 descriptor??
[  481.261131][T11617] loop2: detected capacity change from 0 to 512
[  481.281612][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  481.303179][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.325602][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  481.347841][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.369689][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  481.392101][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.413935][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  481.435730][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.458576][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  481.480811][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.513273][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  481.523699][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.558937][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  481.578264][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.596442][T11617] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  481.623974][T11376] batman_adv: batadv0: Interface activated: batadv_slave_0
[  481.639343][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  481.649238][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  481.664300][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  481.698570][T11617] EXT4-fs (loop2): 1 truncate cleaned up
[  481.704221][T11617] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000000,,errors=continue. Quota mode: none.
[  481.737709][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  481.750327][ T3646] lenovo 0003:17EF:6009.001D: unknown main item tag 0x0
[  481.764320][ T3646] lenovo 0003:17EF:6009.001D: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.3-1/input0
[  481.795088][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.804913][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  481.899570][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.914431][ T3788] Bluetooth: hci3: command 0x040f tx timeout
[  481.935834][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  481.957235][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  481.978052][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  482.000013][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  482.021496][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  482.034426][ T5540] usb 4-1: USB disconnect, device number 24
[  482.042661][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  482.061554][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  482.087455][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  482.119084][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  482.129795][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  482.152880][T11376] batman_adv: batadv0: Interface activated: batadv_slave_1
[  482.170446][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  482.188107][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  482.213021][T11376] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  482.228364][T11376] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  482.248036][T11376] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  482.261790][T11376] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  482.311671][T10354] bond0: (slave syz_tun): Releasing backup interface
[  482.502266][T11492] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.586727][ T8061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  482.596161][ T8061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  482.626719][T11492] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.693895][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  482.712738][ T8061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  482.728524][ T8061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  482.805074][T11492] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.857644][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  482.961661][T11492] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.156088][T11623] chnl_net:caif_netlink_parms(): no params data found
[  483.307453][T11492] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  483.336182][T11492] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  483.376452][T11492] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  483.410665][ T7112] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.438893][T11492] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  483.463980][T11645] netlink: 'syz.3.2027': attribute type 4 has an invalid length.
[  483.488917][T11645] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2027'.
[  483.523054][T11623] bridge0: port 1(bridge_slave_0) entered blocking state
[  483.533891][T11623] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.556464][T11623] device bridge_slave_0 entered promiscuous mode
[  483.582878][T11623] bridge0: port 2(bridge_slave_1) entered blocking state
[  483.604537][T11623] bridge0: port 2(bridge_slave_1) entered disabled state
[  483.625305][T11623] device bridge_slave_1 entered promiscuous mode
[  483.664028][ T7112] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.724612][T11623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  483.739993][T11623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  483.751658][   T25] audit: type=1326 audit(1723149569.263:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11650 comm="syz.3.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed34d39f9 code=0x7ffc0000
[  483.794440][   T25] audit: type=1326 audit(1723149569.281:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11650 comm="syz.3.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed34d39f9 code=0x7ffc0000
[  483.821015][   T25] audit: type=1326 audit(1723149569.281:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11650 comm="syz.3.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4ed34d39f9 code=0x7ffc0000
[  483.867494][   T25] audit: type=1326 audit(1723149569.281:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11650 comm="syz.3.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed34d39f9 code=0x7ffc0000
[  483.891688][   T25] audit: type=1326 audit(1723149569.281:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11650 comm="syz.3.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed34d39f9 code=0x7ffc0000
[  483.892256][ T7112] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.926955][   T25] audit: type=1326 audit(1723149569.281:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11650 comm="syz.3.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4ed34d39f9 code=0x7ffc0000
[  483.968903][T11654] overlayfs: failed to clone upperpath
[  483.975803][   T25] audit: type=1326 audit(1723149569.281:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11650 comm="syz.3.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed34d39f9 code=0x7ffc0000
[  484.032239][T11623] team0: Port device team_slave_0 added
[  484.062062][   T25] audit: type=1326 audit(1723149569.281:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11650 comm="syz.3.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed34d39f9 code=0x7ffc0000
[  484.098524][T11623] team0: Port device team_slave_1 added
[  484.113582][   T25] audit: type=1326 audit(1723149569.281:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11650 comm="syz.3.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f4ed34d39f9 code=0x7ffc0000
[  484.169084][T11623] batman_adv: batadv0: Adding interface: batadv_slave_0
[  484.178558][ T3788] Bluetooth: hci3: command 0x0419 tx timeout
[  484.184703][   T25] audit: type=1326 audit(1723149569.290:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11650 comm="syz.3.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed34d39f9 code=0x7ffc0000
[  484.210887][T11623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  484.245144][T11623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  484.272860][ T7112] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.312315][T11667] netlink: 'syz.3.2036': attribute type 2 has an invalid length.
[  484.331170][T11623] batman_adv: batadv0: Adding interface: batadv_slave_1
[  484.349014][T11623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  484.412612][T11623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  484.519197][T11492] 8021q: adding VLAN 0 to HW filter on device bond0
[  484.566387][T11492] 8021q: adding VLAN 0 to HW filter on device team0
[  484.602030][T11623] device hsr_slave_0 entered promiscuous mode
[  484.622975][T11623] device hsr_slave_1 entered promiscuous mode
[  484.634123][T11623] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  484.641680][T11623] Cannot create hsr debugfs directory
[  484.658296][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  484.675196][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  484.710437][ T3646] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  484.859619][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  484.873890][T11679] loop0: detected capacity change from 0 to 256
[  484.879049][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  484.881112][T11679] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  484.901097][ T3788] bridge0: port 1(bridge_slave_0) entered blocking state
[  484.908192][ T3788] bridge0: port 1(bridge_slave_0) entered forwarding state
[  484.916683][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  484.926474][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  484.934938][ T3788] bridge0: port 2(bridge_slave_1) entered blocking state
[  484.942021][ T3788] bridge0: port 2(bridge_slave_1) entered forwarding state
[  484.950662][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  484.959693][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  484.968493][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  484.972310][ T3646] usb 4-1: Using ep0 maxpacket: 16
[  484.977614][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  484.991752][T11679] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  485.001008][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  485.023734][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  485.069679][ T3649] Bluetooth: hci0: command 0x0409 tx timeout
[  485.110855][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  485.119366][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  485.149433][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  485.176447][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  485.227456][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  485.249754][ T3646] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  485.259168][ T3646] usb 4-1: config 0 has no interface number 0
[  485.265359][ T3646] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  485.276962][ T3646] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  485.289981][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  485.337510][T11492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  485.470206][ T3646] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  485.567218][ T3646] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  485.963506][ T3646] usb 4-1: Product: syz
[  485.985353][ T3646] usb 4-1: SerialNumber: syz
[  486.005667][ T3646] usb 4-1: config 0 descriptor??
[  486.054479][ T3646] cm109 4-1:0.8: invalid payload size 0, expected 4
[  486.084812][ T3646] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input29
[  486.216505][ T7112] tipc: Left network mode
[  486.426788][T11700] loop0: detected capacity change from 0 to 4096
[  486.497831][T11700] ntfs: volume version 3.1.
[  486.531214][ T3646] usb 4-1: USB disconnect, device number 25
[  486.540369][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  486.547320][    C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  486.570748][T11492] 8021q: adding VLAN 0 to HW filter on device batadv0
[  486.577692][ T3646] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  486.656473][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  486.675901][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  487.014179][T11695] chnl_net:caif_netlink_parms(): no params data found
[  487.108268][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  487.118139][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  487.190957][ T3788] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  487.339036][ T5394] Bluetooth: hci0: command 0x041b tx timeout
[  487.344927][T11492] device veth0_vlan entered promiscuous mode
[  487.353914][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  487.362684][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  487.374225][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  487.382973][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  487.672981][T11492] device veth1_vlan entered promiscuous mode
[  487.793222][T11623] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  487.836253][T11623] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  487.878581][T11623] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  487.912122][T11695] bridge0: port 1(bridge_slave_0) entered blocking state
[  487.942422][T11695] bridge0: port 1(bridge_slave_0) entered disabled state
[  487.967523][T11695] device bridge_slave_0 entered promiscuous mode
[  487.976247][T11695] bridge0: port 2(bridge_slave_1) entered blocking state
[  487.984049][ T3788] usb 1-1: too many configurations: 9, using maximum allowed: 8
[  487.991887][T11695] bridge0: port 2(bridge_slave_1) entered disabled state
[  488.000073][T11695] device bridge_slave_1 entered promiscuous mode
[  488.011625][T11623] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  488.079197][ T3788] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  488.099393][ T3788] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  488.109866][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  488.129540][ T3788] usb 1-1: config 0 interface 0 has no altsetting 0
[  488.131991][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  488.182053][T11695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  488.230680][ T3788] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  488.239567][ T3788] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  488.266513][T11492] device veth0_macvtap entered promiscuous mode
[  488.275758][T11695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  488.289940][ T3788] usb 1-1: config 0 interface 0 has no altsetting 0
[  488.337632][T11492] device veth1_macvtap entered promiscuous mode
[  488.411684][T11695] team0: Port device team_slave_0 added
[  488.420133][ T3788] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  488.434674][ T3788] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  488.450656][ T3788] usb 1-1: config 0 interface 0 has no altsetting 0
[  488.477499][T11623] 8021q: adding VLAN 0 to HW filter on device bond0
[  488.491303][T11492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  488.502123][ T3646] Bluetooth: hci4: command 0x0409 tx timeout
[  488.508078][T11492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  488.524903][T11492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  488.536307][ T3788] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  488.545528][ T3788] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  488.557475][T11492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  488.567353][ T3788] usb 1-1: config 0 interface 0 has no altsetting 0
[  488.574259][T11492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  488.585815][T11492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  488.596192][T11492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  488.607357][T11492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  488.618493][T11492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  488.629068][T11492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  488.639732][T11492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  488.650326][T11492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  488.660415][ T3788] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  488.669400][T11492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  488.680011][ T3788] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  488.690979][T11492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  488.702031][ T3788] usb 1-1: config 0 interface 0 has no altsetting 0
[  488.709532][T11492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  488.720053][T11492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  488.731966][T11492] batman_adv: batadv0: Interface activated: batadv_slave_0
[  488.741786][T11695] team0: Port device team_slave_1 added
[  488.749417][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  488.769607][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  488.783580][T11744] loop_set_status: loop3 () has still dirty pages (nrpages=4)
[  488.796379][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  488.807836][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  488.816652][ T3788] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  488.825546][ T3788] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  488.845867][T11623] 8021q: adding VLAN 0 to HW filter on device team0
[  488.883573][ T3788] usb 1-1: config 0 interface 0 has no altsetting 0
[  488.915449][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  488.932007][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  488.944711][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  488.961396][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  488.977455][ T3649] bridge0: port 1(bridge_slave_0) entered blocking state
[  488.984546][ T3649] bridge0: port 1(bridge_slave_0) entered forwarding state
[  489.010655][ T3788] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  489.019577][ T3788] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  489.032871][T11492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  489.041750][ T3788] usb 1-1: config 0 interface 0 has no altsetting 0
[  489.053803][T11492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  489.076126][T11492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  489.095401][T11492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  489.108792][T11492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  489.129759][T11492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  489.144156][T11492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  489.162227][T11492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  489.172768][ T3788] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  489.182997][T11492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  489.193714][T11492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  489.194861][ T3788] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  489.211646][T11492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  489.234988][T11492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  489.248085][ T3788] usb 1-1: config 0 interface 0 has no altsetting 0
[  489.254307][T11492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  489.268474][T11492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  489.279317][T11492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  489.300905][T11492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  489.314628][T11492] batman_adv: batadv0: Interface activated: batadv_slave_1
[  489.322944][T11695] batman_adv: batadv0: Adding interface: batadv_slave_0
[  489.333359][T11695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  489.363220][T11695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  489.376212][T11695] batman_adv: batadv0: Adding interface: batadv_slave_1
[  489.386241][T11695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  489.430777][T11695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  489.446844][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  489.464043][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  489.479985][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  489.488424][ T3788] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  489.497469][ T3788] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  489.507472][ T3788] usb 1-1: Product: syz
[  489.512039][ T3788] usb 1-1: Manufacturer: syz
[  489.516648][ T3788] usb 1-1: SerialNumber: syz
[  489.531495][ T3788] usb 1-1: config 0 descriptor??
[  489.542468][ T5394] Bluetooth: hci0: command 0x040f tx timeout
[  489.561783][T11492] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  489.579803][ T3788] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0
[  489.581598][T11492] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  489.638915][T11492] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  489.647661][T11492] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  489.681865][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  489.705146][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  489.714220][ T3792] bridge0: port 2(bridge_slave_1) entered blocking state
[  489.721333][ T3792] bridge0: port 2(bridge_slave_1) entered forwarding state
[  489.747860][T11757] IPVS: Error connecting to the multicast addr
[  489.775639][T11695] device hsr_slave_0 entered promiscuous mode
[  489.802715][T11695] device hsr_slave_1 entered promiscuous mode
[  489.811500][ T5394] usb 1-1: USB disconnect, device number 24
[  489.838223][ T5394] yurex 1-1:0.0: USB YUREX #0 now disconnected
[  489.867191][T11695] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  489.874841][T11695] Cannot create hsr debugfs directory
[  489.894523][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  489.910780][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  490.007104][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  490.019305][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  490.075236][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  490.093479][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  490.115811][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  490.125492][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  490.145090][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  490.177781][T11623] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  490.203028][T11623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  490.231404][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  490.250545][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  490.351961][ T1253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  490.373411][ T1253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  490.406154][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  490.498644][T11695] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.584587][  T652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  490.606843][  T652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  490.624692][T11623] 8021q: adding VLAN 0 to HW filter on device batadv0
[  490.666601][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  490.721350][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  490.732103][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  490.758885][ T5540] Bluetooth: hci4: command 0x041b tx timeout
[  490.800423][T11695] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.889071][ T7112] device hsr_slave_0 left promiscuous mode
[  490.904176][ T7112] device hsr_slave_1 left promiscuous mode
[  490.952046][ T7112] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  490.959505][ T7112] batman_adv: batadv0: Removing interface: batadv_slave_0
[  490.990892][T11790] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  491.009655][ T7112] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  491.025895][ T7112] batman_adv: batadv0: Removing interface: batadv_slave_1
[  491.044253][ T7112] device bridge_slave_1 left promiscuous mode
[  491.055970][ T7112] bridge0: port 2(bridge_slave_1) entered disabled state
[  491.099904][ T7112] device bridge_slave_0 left promiscuous mode
[  491.114868][ T7112] bridge0: port 1(bridge_slave_0) entered disabled state
[  491.146898][ T7112] device hsr_slave_0 left promiscuous mode
[  491.156024][ T7112] device hsr_slave_1 left promiscuous mode
[  491.173122][ T7112] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  491.183801][ T7112] batman_adv: batadv0: Removing interface: batadv_slave_0
[  491.198518][ T7112] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  491.214054][ T7112] batman_adv: batadv0: Removing interface: batadv_slave_1
[  491.232742][ T7112] device bridge_slave_1 left promiscuous mode
[  491.238937][ T7112] bridge0: port 2(bridge_slave_1) entered disabled state
[  491.263005][ T7112] device bridge_slave_0 left promiscuous mode
[  491.280933][ T7112] bridge0: port 1(bridge_slave_0) entered disabled state
[  491.321309][ T7112] device veth1_macvtap left promiscuous mode
[  491.334232][ T7112] device veth0_macvtap left promiscuous mode
[  491.345144][ T7112] device veth1_vlan left promiscuous mode
[  491.355005][ T7112] device veth0_vlan left promiscuous mode
[  491.373614][ T7112] device veth1_macvtap left promiscuous mode
[  491.381541][ T7112] device veth0_macvtap left promiscuous mode
[  491.394816][ T7112] device veth1_vlan left promiscuous mode
[  491.400620][ T7112] device veth0_vlan left promiscuous mode
[  491.407090][ T5393] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  491.460938][T11789] loop0: detected capacity change from 0 to 32768
[  491.630122][T11789] XFS (loop0): Mounting V5 Filesystem
[  491.664982][ T5393] usb 5-1: Using ep0 maxpacket: 8
[  491.745756][T11789] XFS (loop0): Ending clean mount
[  491.795067][ T5540] Bluetooth: hci0: command 0x0419 tx timeout
[  491.926972][T11376] XFS (loop0): Unmounting Filesystem
[  491.980780][ T5393] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  491.989856][ T5393] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  492.010793][ T5393] usb 5-1: Product: syz
[  492.019267][ T5393] usb 5-1: Manufacturer: syz
[  492.033474][ T5393] usb 5-1: SerialNumber: syz
[  492.044054][ T5393] usb 5-1: config 0 descriptor??
[  492.072095][ T7112] team0 (unregistering): Port device team_slave_1 removed
[  492.109921][ T7112] team0 (unregistering): Port device team_slave_0 removed
[  492.155980][ T7112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  492.186592][ T7112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  492.231650][ T5540] usb 4-1: new low-speed USB device number 26 using dummy_hcd
[  492.325920][ T5393] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  492.345319][ T7112] bond0 (unregistering): Released all slaves
[  492.645264][ T7112] team0 (unregistering): Port device team_slave_1 removed
[  492.659756][ T7112] team0 (unregistering): Port device team_slave_0 removed
[  492.668046][ T5540] usb 4-1: config index 0 descriptor too short (expected 6427, got 27)
[  492.680085][ T5540] usb 4-1: config 0 has an invalid interface number: 21 but max is 0
[  492.692959][ T5540] usb 4-1: config 0 has no interface number 0
[  492.700044][ T5540] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[  492.710527][ T5540] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  492.720668][ T5540] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  492.730841][ T5540] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.747182][ T5540] usb 4-1: config 0 descriptor??
[  492.755333][ T7112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  492.800936][ T7112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  492.963701][ T7112] bond0 (unregistering): Released all slaves
[  493.010438][   T26] Bluetooth: hci4: command 0x040f tx timeout
[  493.045069][T11695] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.072628][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  493.087979][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  493.171853][T11695] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.218312][T11623] device veth0_vlan entered promiscuous mode
[  493.225695][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  493.239060][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  493.253556][T11623] device veth1_vlan entered promiscuous mode
[  493.267410][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  493.273524][ T5540] usb 4-1: USB disconnect, device number 26
[  493.275974][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  493.288635][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  493.330756][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  493.339975][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  493.349934][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  493.362414][T11623] device veth0_macvtap entered promiscuous mode
[  493.411361][T11623] device veth1_macvtap entered promiscuous mode
[  493.453814][T11623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  493.472547][T11623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  493.494241][T11623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  493.515934][T11623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  493.537773][T11623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  493.559059][T11623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  493.580006][T11623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  493.590802][ T5393] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32
[  493.612783][T11623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  493.634338][T11623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  493.657494][T11623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  493.668497][T11623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  493.690974][T11623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  493.700800][T11623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  493.727742][T11623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  493.747322][T11623] batman_adv: batadv0: Interface activated: batadv_slave_0
[  493.767584][T11695] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  493.803100][T11695] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  493.822944][ T3788] usb 5-1: USB disconnect, device number 19
[  493.860980][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  493.876839][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  493.884831][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  493.916519][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  493.941786][T11695] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  493.952310][T11695] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  493.975268][T11623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  493.986523][T11623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  493.997189][T11623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  494.016032][T11623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.026646][T11623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  494.048487][T11623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.058550][T11623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  494.072013][T11623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.090389][T11623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  494.107549][T11623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.128527][T11623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  494.146255][T11623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.156934][T11623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  494.167407][T11623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.179538][T11623] batman_adv: batadv0: Interface activated: batadv_slave_1
[  494.203235][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  494.223686][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  494.237454][T11623] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  494.250986][T11623] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  494.269863][T11623] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  494.278959][T11623] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  494.429345][T11833] syz.3.2081 (11833) used greatest stack depth: 18656 bytes left
[  495.820458][ T5394] Bluetooth: hci4: command 0x0419 tx timeout
[  495.852481][T11695] 8021q: adding VLAN 0 to HW filter on device bond0
[  495.896866][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  495.919452][ T8057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  495.951860][ T8057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  495.956521][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  496.001294][T11695] 8021q: adding VLAN 0 to HW filter on device team0
[  496.100014][ T8057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  496.132232][ T8057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  496.149827][T11853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2086'.
[  496.186340][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  496.205363][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  496.226322][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  496.916684][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  496.925147][ T5393] bridge0: port 1(bridge_slave_0) entered blocking state
[  496.932251][ T5393] bridge0: port 1(bridge_slave_0) entered forwarding state
[  496.939924][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  497.025461][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  497.034026][ T5393] bridge0: port 2(bridge_slave_1) entered blocking state
[  497.041131][ T5393] bridge0: port 2(bridge_slave_1) entered forwarding state
[  497.049965][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  497.092108][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  497.100490][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  497.150465][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  497.171570][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  497.192713][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  497.207525][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  497.216208][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  497.224749][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  497.263204][T11695] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  497.308182][T11695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  497.326640][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  497.338261][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  497.360219][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  497.515662][ T3781] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  497.653661][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  497.668809][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  497.714906][T11695] 8021q: adding VLAN 0 to HW filter on device batadv0
[  497.760186][T11887] loop0: detected capacity change from 0 to 1024
[  497.777134][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  497.797624][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  497.808178][ T3781] usb 5-1: Using ep0 maxpacket: 16
[  497.845302][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  497.856271][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  497.922574][T11695] device veth0_vlan entered promiscuous mode
[  497.926499][T11893] loop2: detected capacity change from 0 to 512
[  497.939021][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  497.953428][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  497.988649][T11695] device veth1_vlan entered promiscuous mode
[  497.995379][ T3575] Bluetooth: hci5: unexpected event for opcode 0x1001
[  498.102541][T11695] device veth0_macvtap entered promiscuous mode
[  498.145858][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  498.154975][ T3781] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7
[  498.164027][ T3781] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  498.177249][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  498.192106][T11899] autofs4:pid:11899:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2.1), cmd(0xc0189374)
[  498.203626][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  498.213673][ T3781] usb 5-1: Product: syz
[  498.217844][ T3781] usb 5-1: Manufacturer: syz
[  498.231255][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  498.235552][T11899] autofs4:pid:11899:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374)
[  498.240087][ T3781] usb 5-1: SerialNumber: syz
[  498.271145][T11695] device veth1_macvtap entered promiscuous mode
[  498.291302][ T3781] usb 5-1: config 0 descriptor??
[  498.309296][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  498.329110][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  498.345062][T11695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  498.358072][ T3781] hub 5-1:0.0: bad descriptor, ignoring hub
[  498.364596][ T3781] hub: probe of 5-1:0.0 failed with error -5
[  498.390941][T11695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.412574][T11695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  498.446284][T11695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.467772][T11695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  498.489351][T11695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.512246][T11695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  498.545269][T11695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.555096][T11695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  498.575646][T11903] loop0: detected capacity change from 0 to 512
[  498.625795][T11695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.639417][T11903] EXT4-fs (loop0): Unrecognized mount option "uid<00000000000000000000" or missing value
[  498.659602][T11695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  498.694245][T11695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.715086][T11695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  498.747738][T11695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.771558][T11695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  498.783289][ T5540] usb 5-1: USB disconnect, device number 20
[  498.793366][T11695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.849542][T11695] batman_adv: batadv0: Interface activated: batadv_slave_0
[  498.893547][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  498.921001][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  498.947267][T11695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  498.982455][T11695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.015584][T11695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  499.048118][T11695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.081058][T11695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  499.114286][T11695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.150427][T11695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  499.194418][T11695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.259782][T11695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  499.282154][ T3785] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  499.386763][T11695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.452392][T11695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  499.498555][T11695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.526038][T11695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  499.547179][T11695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.567978][T11695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  499.594139][T11695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.608234][ T3785] usb 4-1: Using ep0 maxpacket: 32
[  499.625936][T11695] batman_adv: batadv0: Interface activated: batadv_slave_1
[  499.644361][T11915] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2110'.
[  499.661078][T11915] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2110'.
[  499.702895][ T5536] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  499.712868][ T5536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  499.714669][T11917] loop0: detected capacity change from 0 to 1024
[  499.738864][T11695] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  499.758266][T11695] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  499.778005][T11695] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  499.803353][T11695] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  499.863789][T11917] hfsplus: failed to load root directory
[  499.985874][ T3785] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  500.010534][ T6454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  500.012407][ T3785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.034818][ T3785] usb 4-1: Product: syz
[  500.038480][ T6454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  500.074891][ T3785] usb 4-1: Manufacturer: syz
[  500.079779][ T3785] usb 4-1: SerialNumber: syz
[  500.131282][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  500.137777][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  500.148735][ T3785] usb 4-1: config 0 descriptor??
[  500.174927][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  500.202584][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  500.332502][ T3781] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  500.459752][T11937] loop0: detected capacity change from 0 to 8
[  500.478258][T11936] loop1: detected capacity change from 0 to 512
[  500.605978][T11939] loop2: detected capacity change from 0 to 512
[  500.733401][ T3781] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  500.762887][T11939] EXT4-fs error (device loop2): ext4_fill_super:4840: inode #2: comm syz.2.2119: casefold flag without casefold feature
[  500.777092][ T3781] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  500.789804][ T3781] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  500.809443][ T3781] usb 5-1: config 0 descriptor??
[  500.820669][T11939] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  500.854390][ T3781] pwc: Askey VC010 type 2 USB webcam detected.
[  500.861451][T11939] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  500.929311][ T3785] peak_usb 4-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels)
[  500.950211][ T3785] peak_usb 4-1:0.0 can0: sending command failure: -22
[  500.968138][ T3785] peak_usb 4-1:0.0 can0: sending command failure: -22
[  501.082829][ T3785] peak_usb: probe of 4-1:0.0 failed with error -22
[  501.123659][ T3781] pwc: send_video_command error -71
[  501.128883][ T3781] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  501.177207][ T3781] Philips webcam: probe of 5-1:0.0 failed with error -71
[  501.242047][ T3781] usb 5-1: USB disconnect, device number 21
[  501.402601][T11951] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2123'.
[  501.415326][ T6384] usb 4-1: USB disconnect, device number 27
[  501.464249][T11954] loop1: detected capacity change from 0 to 512
[  501.592747][T11954] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #12: comm syz.1.2125: inline data xattr refers to an external xattr inode
[  501.592969][T11954] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.2125: couldn't read orphan inode 12 (err -117)
[  501.593138][T11954] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,data_err=ignore,norecovery,resuid=0x0000000000000000,prjquota,debug_want_extra_isize=0x0000000000000008,usrjquota=,resgid=0x0000000000000000,nodiscard,,errors=continue. Quota mode: writeback.
[  501.759624][T11959] loop0: detected capacity change from 0 to 2048
[  501.784178][ T3781] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  501.887586][T11959] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  502.088447][T11952] loop2: detected capacity change from 0 to 32768
[  502.225162][ T3781] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  502.236084][T11952] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.2124 (11952)
[  502.281666][ T3781] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  502.313991][ T3781] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.377260][ T5394] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  502.377896][ T3781] usb 5-1: config 0 descriptor??
[  502.385584][ T5394] Bluetooth: hci5: Injecting HCI hardware error event
[  502.423681][T11952] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  502.447042][ T3781] pwc: Askey VC010 type 2 USB webcam detected.
[  502.459373][ T3575] Bluetooth: hci5: hardware error 0x00
[  502.486996][T11952] BTRFS info (device loop2): use zlib compression, level 3
[  502.502101][T11952] BTRFS info (device loop2): using free space tree
[  502.504485][T11972] loop1: detected capacity change from 0 to 1024
[  502.588190][T11952] BTRFS info (device loop2): has skinny extents
[  502.651930][T11972] hfsplus: failed to load root directory
[  502.698132][T11376] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh
[  502.713884][T11376] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh
[  502.840849][T11972] loop1: detected capacity change from 0 to 512
[  502.863869][T11952] BTRFS info (device loop2): enabling ssd optimizations
[  502.921871][ T3781] pwc: recv_control_msg error -32 req 02 val 2b00
[  502.977669][ T3781] pwc: recv_control_msg error -32 req 02 val 2700
[  502.998003][T11972] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  503.062077][T11972] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038 (0x7fffffff)
[  503.084459][ T3781] pwc: recv_control_msg error -32 req 02 val 2c00
[  503.150887][ T3781] pwc: recv_control_msg error -32 req 04 val 1000
[  503.350868][ T3781] pwc: recv_control_msg error -32 req 04 val 1300
[  503.398523][ T3781] pwc: recv_control_msg error -32 req 04 val 1400
[  503.442048][ T3781] pwc: recv_control_msg error -32 req 02 val 2000
[  503.528722][ T3781] pwc: recv_control_msg error -32 req 02 val 2100
[  503.808498][ T3781] pwc: recv_control_msg error -32 req 04 val 1500
[  503.875926][ T3781] pwc: recv_control_msg error -32 req 02 val 2500
[  503.940257][ T3781] pwc: recv_control_msg error -32 req 02 val 2400
[  504.002830][ T3781] pwc: recv_control_msg error -32 req 02 val 2600
[  504.081106][ T3781] pwc: recv_control_msg error -32 req 02 val 2900
[  504.145991][ T3781] pwc: recv_control_msg error -32 req 02 val 2800
[  504.296987][T12004] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes
[  504.452713][ T3781] pwc: recv_control_msg error -71 req 04 val 1200
[  504.491650][ T7112] device veth1_to_bond left promiscuous mode
[  504.497983][ T3781] pwc: Registered as video71.
[  504.514465][ T7112] bridge1: port 2(veth1_to_bond) entered disabled state
[  504.523972][ T3781] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input31
[  504.569455][ T3781] usb 5-1: USB disconnect, device number 22
[  504.616926][T12009] netlink: 'syz.2.2138': attribute type 4 has an invalid length.
[  504.644370][T12009] netlink: 'syz.2.2138': attribute type 1 has an invalid length.
[  504.652131][T12009] netlink: 'syz.2.2138': attribute type 7 has an invalid length.
[  504.667378][ T7112] device bridge_slave_1 left promiscuous mode
[  504.687857][ T7112] bridge1: port 1(bridge_slave_1) entered disabled state
[  504.710387][ T7112] device hsr_slave_0 left promiscuous mode
[  504.731772][ T7112] device hsr_slave_1 left promiscuous mode
[  504.784847][   T25] kauditd_printk_skb: 36 callbacks suppressed
[  504.784863][   T25] audit: type=1107 audit(1723149588.673:216): pid=12006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Š63
ú\›†m!öiN›íŠÉÍ‹ôEð~8§*ÔŽFEß@P7+¼kÜÖ'
[  504.824619][ T7112] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  504.843006][ T7112] batman_adv: batadv0: Removing interface: batadv_slave_0
[  504.877864][ T7112] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  504.885849][ T7112] batman_adv: batadv0: Removing interface: batadv_slave_1
[  504.921247][T12002] loop1: detected capacity change from 0 to 32768
[  504.930251][ T7112] device bridge_slave_0 left promiscuous mode
[  504.947825][ T7112] bridge0: port 1(bridge_slave_0) entered disabled state
[  504.955410][T12002] XFS: attr2 mount option is deprecated.
[  505.007526][ T7112] device veth1_macvtap left promiscuous mode
[  505.015526][ T7112] device veth0_macvtap left promiscuous mode
[  505.021582][ T7112] device veth1_vlan left promiscuous mode
[  505.036200][ T7112] device veth0_vlan left promiscuous mode
[  505.071663][T12002] XFS (loop1): Mounting V5 Filesystem
[  505.284778][T12002] XFS (loop1): Ending clean mount
[  505.293736][T12002] XFS (loop1): Quotacheck needed: Please wait.
[  505.384104][T12002] XFS (loop1): Quotacheck: Done.
[  505.464243][   T25] audit: type=1804 audit(1723149589.301:217): pid=12002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2135" name="/newroot/5/bus/bus" dev="loop1" ino=9290 res=1 errno=0
[  505.504414][T11695] XFS (loop1): Unmounting Filesystem
[  505.814489][ T7112] team0 (unregistering): Port device team_slave_1 removed
[  505.871537][ T7112] team0 (unregistering): Port device team_slave_0 removed
[  505.907620][ T7112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  505.949604][ T7112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  506.066817][ T7112] team0 (unregistering): Port device bridge0 removed
[  506.288069][ T7112] bond0 (unregistering): Released all slaves
[  506.717878][T12043] loop4: detected capacity change from 0 to 64
[  506.795665][T12043] MINIX-fs: mounting file system with errors, running fsck is recommended
[  506.819671][T12039] loop2: detected capacity change from 0 to 4096
[  506.940195][T12039] ntfs: volume version 3.1.
[  507.116971][   T26] Bluetooth: hci2: command 0x0409 tx timeout
[  507.570589][ T1389] ieee802154 phy1 wpan1: encryption failed: -22
[  507.924168][T12011] chnl_net:caif_netlink_parms(): no params data found
[  508.967028][T12065] loop1: detected capacity change from 0 to 256
[  509.069322][T12065] FAT-fs (loop1): Directory bread(block 64) failed
[  509.086511][T12065] FAT-fs (loop1): Directory bread(block 65) failed
[  509.093113][T12065] FAT-fs (loop1): Directory bread(block 66) failed
[  509.140114][T12065] FAT-fs (loop1): Directory bread(block 67) failed
[  509.151564][T12065] FAT-fs (loop1): Directory bread(block 68) failed
[  509.158063][T12065] FAT-fs (loop1): Directory bread(block 69) failed
[  509.204683][T12065] FAT-fs (loop1): Directory bread(block 70) failed
[  509.211314][T12065] FAT-fs (loop1): Directory bread(block 71) failed
[  509.231464][T12065] FAT-fs (loop1): Directory bread(block 72) failed
[  509.248947][ T3792] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  509.256883][T12065] FAT-fs (loop1): Directory bread(block 73) failed
[  509.360886][T12011] bridge0: port 1(bridge_slave_0) entered blocking state
[  509.380365][T12011] bridge0: port 1(bridge_slave_0) entered disabled state
[  509.490858][T12011] device bridge_slave_0 entered promiscuous mode
[  509.530728][T12011] bridge0: port 2(bridge_slave_1) entered blocking state
[  509.551943][T12011] bridge0: port 2(bridge_slave_1) entered disabled state
[  509.604222][T12011] device bridge_slave_1 entered promiscuous mode
[  509.725837][ T3792] usb 3-1: config 0 interface 0 altsetting 10 endpoint 0x6 has invalid wMaxPacketSize 0
[  509.779361][ T3792] usb 3-1: config 0 interface 0 altsetting 10 endpoint 0xB has invalid wMaxPacketSize 0
[  509.800968][T12011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  509.847514][ T3792] usb 3-1: config 0 interface 0 has no altsetting 0
[  509.856311][ T3788] Bluetooth: hci2: command 0x041b tx timeout
[  509.881737][T12011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  509.954649][T12077] loop1: detected capacity change from 0 to 64
[  510.040124][ T3792] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=4c.b3
[  510.068833][ T3792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.104334][T12011] team0: Port device team_slave_0 added
[  510.154119][ T3792] usb 3-1: Product: syz
[  510.158336][ T3792] usb 3-1: Manufacturer: syz
[  510.176026][T12011] team0: Port device team_slave_1 added
[  510.202372][ T3792] usb 3-1: SerialNumber: syz
[  510.232825][ T3792] usb 3-1: config 0 descriptor??
[  510.301433][ T3792] ir_toy 3-1:0.0: required endpoints not found
[  510.477489][T12011] batman_adv: batadv0: Adding interface: batadv_slave_0
[  510.539259][T12011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  510.586738][ T3792] usb 3-1: USB disconnect, device number 28
[  510.614018][T12011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  510.653444][T12011] batman_adv: batadv0: Adding interface: batadv_slave_1
[  510.672511][T12011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  510.797036][T12011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  511.835469][T12011] device hsr_slave_0 entered promiscuous mode
[  511.863146][T12090] tmpfs: Bad value for 'mpol'
[  511.872770][T12011] device hsr_slave_1 entered promiscuous mode
[  511.904057][T12011] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  511.949713][T12011] Cannot create hsr debugfs directory
[  511.975091][T12095] loop4: detected capacity change from 0 to 164
[  512.087593][ T6384] Bluetooth: hci2: command 0x040f tx timeout
[  512.137752][T12083] loop1: detected capacity change from 0 to 32768
[  512.199775][T12097] xt_TPROXY: Can be used only with -p tcp or -p udp
[  512.805174][T12095] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  513.036514][T12083] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2157 (12083)
[  513.192803][T12083] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  513.216670][T12083] BTRFS info (device loop1): using free space tree
[  513.230708][T12083] BTRFS info (device loop1): has skinny extents
[  513.276483][T12011] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.383331][T12107] loop4: detected capacity change from 0 to 256
[  513.446131][T12011] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.526389][T12011] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.620445][T12011] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.779714][T12011] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  513.940263][T12083] BTRFS error (device loop1): open_ctree failed
[  514.221224][T12132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2167'.
[  514.278833][T12011] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  514.779953][ T6384] Bluetooth: hci2: command 0x0419 tx timeout
[  514.799533][T12011] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  514.907938][T12134] 9pnet: Insufficient options for proto=fd
[  514.935385][T12011] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  515.318133][T12011] 8021q: adding VLAN 0 to HW filter on device bond0
[  515.370454][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  515.378740][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  515.409981][T12011] 8021q: adding VLAN 0 to HW filter on device team0
[  515.431406][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  515.446712][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  515.455094][ T6384] bridge0: port 1(bridge_slave_0) entered blocking state
[  515.462174][ T6384] bridge0: port 1(bridge_slave_0) entered forwarding state
[  515.484567][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  515.497974][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  515.507104][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  515.520872][ T3780] bridge0: port 2(bridge_slave_1) entered blocking state
[  515.527929][ T3780] bridge0: port 2(bridge_slave_1) entered forwarding state
[  515.541495][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  515.551309][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  515.618740][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  515.633148][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  515.659788][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  515.679549][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  515.690523][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  515.703131][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  515.714672][T12011] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  515.753602][T12011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  515.790897][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  515.799496][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  515.818245][ T3788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  516.137561][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  516.152079][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  516.158898][T12161] loop1: detected capacity change from 0 to 1024
[  516.174467][T12011] 8021q: adding VLAN 0 to HW filter on device batadv0
[  516.285065][T12165] loop4: detected capacity change from 0 to 1024
[  516.689071][T12165] hfsplus: bad catalog entry type
[  516.728429][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  516.762966][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  516.812424][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  516.834438][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  516.849421][T12011] device veth0_vlan entered promiscuous mode
[  516.860645][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  516.869514][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  516.889789][T12011] device veth1_vlan entered promiscuous mode
[  517.113657][T12171] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  517.124971][  T144] hfsplus: b-tree write err: -5, ino 4
[  517.140956][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  517.154626][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  517.334379][T12011] device veth0_macvtap entered promiscuous mode
[  517.351799][T12011] device veth1_macvtap entered promiscuous mode
[  517.450733][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  517.512220][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  517.529301][T12182] loop2: detected capacity change from 0 to 512
[  517.545841][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  517.620315][T12175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2180'.
[  517.627968][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  518.393158][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  518.432772][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  518.452145][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  518.505012][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  518.631317][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  518.674452][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  518.719882][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  518.737044][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  518.748986][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  518.786693][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  518.841904][ T1059] block nbd1: Attempted send on invalid socket
[  518.849849][ T1059] blk_update_request: I/O error, dev nbd1, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  518.862102][ T1059] gfs2: error 10 reading superblock
[  518.969751][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  519.063167][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.175224][T12011] batman_adv: batadv0: Interface activated: batadv_slave_0
[  519.334761][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  519.360652][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  519.423503][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  519.534097][T12182] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  519.554357][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  519.564119][T12182] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038 (0x7fffffff)
[  519.623127][T12192] loop4: detected capacity change from 0 to 32768
[  519.627749][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  519.642003][T12182] netlink: 'syz.2.2183': attribute type 3 has an invalid length.
[  519.654118][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  519.673163][ T3575] Bluetooth: hci0: ACL packet for unknown connection handle 212
[  519.677001][T12182] 9pnet: p9_errstr2errno: server reported unknown error Í
[  519.799959][T12182] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback.
[  519.864536][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  519.890698][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.918854][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  519.942246][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.966658][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  519.977861][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.989062][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  519.999756][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.010739][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  520.025536][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.036744][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  520.051925][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.067874][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  520.079654][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.097024][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  520.113370][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  520.146438][T12011] batman_adv: batadv0: Interface activated: batadv_slave_1
[  520.190155][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  520.243009][ T6384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  520.259905][T12011] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  520.282037][T12011] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  520.302065][T12011] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  520.342555][T12011] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  520.762413][ T4035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.816756][ T4035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  521.208932][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  521.465145][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  521.478818][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  521.528694][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  521.946347][T12219] device syzkaller0 entered promiscuous mode
[  522.322538][T12233] loop0: detected capacity change from 0 to 40427
[  522.352953][T12233] F2FS-fs (loop0): invalid crc value
[  522.563623][T12233] F2FS-fs (loop0): Found nat_bits in checkpoint
[  522.572340][T12238] 9pnet: p9_errstr2errno: server reported unknown error œæçævç"){h•¶aG³Ç!Š‘i¨^ ½ÉáXz�
[  522.593021][T12220] chnl_net:caif_netlink_parms(): no params data found
[  522.682718][T12233] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0
[  522.709222][T12233] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  522.762587][T12233] attempt to access beyond end of device
[  522.762587][T12233] loop0: rw=10241, want=53256, limit=40427
[  522.877466][T12011] attempt to access beyond end of device
[  522.877466][T12011] loop0: rw=2049, want=45104, limit=40427
[  522.963741][ T7112] device hsr_slave_0 left promiscuous mode
[  523.002785][ T7112] device hsr_slave_1 left promiscuous mode
[  523.038398][ T7112] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  523.082297][ T7112] batman_adv: batadv0: Removing interface: batadv_slave_0
[  523.114834][ T7112] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  523.116909][ T3649] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  523.149916][   T21] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  523.193915][ T7112] batman_adv: batadv0: Removing interface: batadv_slave_1
[  523.223460][T12258] loop1: detected capacity change from 0 to 8
[  523.286048][T12258] SQUASHFS error: xz decompression failed, data probably corrupt
[  523.304693][T12258] SQUASHFS error: Failed to read block 0x108: -5
[  523.312960][ T7112] device bridge_slave_1 left promiscuous mode
[  523.319181][ T7112] bridge0: port 2(bridge_slave_1) entered disabled state
[  523.344739][T12258] SQUASHFS error: Unable to read metadata cache entry [106]
[  523.358612][ T7112] device bridge_slave_0 left promiscuous mode
[  523.364809][ T7112] bridge0: port 1(bridge_slave_0) entered disabled state
[  523.372224][T12258] SQUASHFS error: Unable to read inode 0x0
[  523.392996][ T7112] device veth1_macvtap left promiscuous mode
[  523.409359][ T3649] usb 3-1: Using ep0 maxpacket: 32
[  523.409912][   T21] usb 5-1: Using ep0 maxpacket: 32
[  523.419761][ T7112] device veth0_macvtap left promiscuous mode
[  523.426530][ T7112] device veth1_vlan left promiscuous mode
[  523.443075][ T7112] device veth0_vlan left promiscuous mode
[  523.540080][   T21] usb 5-1: config index 0 descriptor too short (expected 82, got 18)
[  523.571966][ T3649] usb 3-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91
[  523.588216][ T3649] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  523.635095][ T3649] usb 3-1: config 0 descriptor??
[  523.703731][ T3649] gspca_main: sunplus-2.14.0 probing 0458:7006
[  523.712831][   T21] usb 5-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=d6.3f
[  523.753898][   T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.759338][T12266] netlink: 'syz.0.2209': attribute type 1 has an invalid length.
[  523.767370][   T21] usb 5-1: Product: syz
[  523.773746][   T21] usb 5-1: Manufacturer: syz
[  523.791278][T12266] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2209'.
[  523.800135][   T21] usb 5-1: SerialNumber: syz
[  523.824884][T12267] netlink: 'syz.0.2209': attribute type 29 has an invalid length.
[  523.834349][   T21] usb 5-1: config 0 descriptor??
[  523.865240][   T26] Bluetooth: hci6: command 0x0409 tx timeout
[  524.078173][ T7112] team0 (unregistering): Port device team_slave_1 removed
[  524.106481][ T7112] team0 (unregistering): Port device team_slave_0 removed
[  524.120622][ T7112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  524.147818][ T7112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  524.169293][ T3792] usb 5-1: USB disconnect, device number 23
[  524.327052][ T7112] bond0 (unregistering): Released all slaves
[  524.444772][T12267] netlink: 'syz.0.2209': attribute type 29 has an invalid length.
[  524.572244][T12220] bridge0: port 1(bridge_slave_0) entered blocking state
[  524.590989][T12220] bridge0: port 1(bridge_slave_0) entered disabled state
[  524.598738][T12220] device bridge_slave_0 entered promiscuous mode
[  525.320521][ T3649] gspca_sunplus: reg_w_riv err -71
[  525.325712][ T3649] sunplus: probe of 3-1:0.0 failed with error -71
[  525.345806][ T3649] usb 3-1: USB disconnect, device number 29
[  525.378916][T12220] bridge0: port 2(bridge_slave_1) entered blocking state
[  525.410292][T12220] bridge0: port 2(bridge_slave_1) entered disabled state
[  525.499301][T12220] device bridge_slave_1 entered promiscuous mode
[  525.924110][T12220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  526.151411][T12220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  526.276682][   T26] Bluetooth: hci6: command 0x041b tx timeout
[  526.559446][T12220] team0: Port device team_slave_0 added
[  526.608447][T12293] tipc: Started in network mode
[  526.625144][T12293] tipc: Node identity fec0ffffffffffff0000000000000001, cluster identity 4711
[  526.639352][T12293] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  526.650466][T12220] team0: Port device team_slave_1 added
[  526.794949][T12220] batman_adv: batadv0: Adding interface: batadv_slave_0
[  526.824342][T12220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  526.918160][T12220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  526.973145][T12220] batman_adv: batadv0: Adding interface: batadv_slave_1
[  527.008194][T12220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  527.117602][T12220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  527.141165][T12299] loop4: detected capacity change from 0 to 4096
[  527.224013][T12299] ntfs: (device loop4): ntfs_read_inode_mount(): Incorrect mft record size 2048 in superblock, should be 4096.
[  527.257690][T12299] ntfs: (device loop4): ntfs_read_inode_mount(): Failed. Marking inode as bad.
[  527.311432][T12220] device hsr_slave_0 entered promiscuous mode
[  527.339718][T12220] device hsr_slave_1 entered promiscuous mode
[  527.366926][T12220] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  527.391203][T12220] Cannot create hsr debugfs directory
[  527.505731][T12288] loop2: detected capacity change from 0 to 40427
[  527.603653][T12301] netlink: 47 bytes leftover after parsing attributes in process `syz.4.2219'.
[  527.666331][T12288] F2FS-fs (loop2): invalid crc value
[  527.881248][T12288] F2FS-fs (loop2): Found nat_bits in checkpoint
[  528.313369][T12288] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0
[  528.683664][ T5393] Bluetooth: hci6: command 0x040f tx timeout
[  528.739997][T12288] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  528.821191][T12220] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.890731][T12319] xt_TPROXY: Can be used only with -p tcp or -p udp
[  529.208059][T12288] attempt to access beyond end of device
[  529.208059][T12288] loop2: rw=10241, want=53256, limit=40427
[  529.256367][T12220] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  529.311315][T12288] attempt to access beyond end of device
[  529.311315][T12288] loop2: rw=2049, want=53256, limit=40427
[  529.334331][T12288] loop0: detected capacity change from 0 to 7
[  529.371651][T12288] Dev loop0: unable to read RDB block 7
[  529.377715][T12288]  loop0: AHDI p3
[  529.387511][T12288] loop0: partition table partially beyond EOD, truncated
[  529.389404][T12220] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  530.338525][T12220] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  530.399791][T11623] attempt to access beyond end of device
[  530.399791][T11623] loop2: rw=2049, want=45104, limit=40427
[  530.581882][T12336] loop4: detected capacity change from 0 to 2048
[  530.586017][T12338] loop1: detected capacity change from 0 to 2048
[  530.689519][T12220] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  530.699373][T12342] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  530.865646][T12220] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  530.908882][T12220] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  530.929391][T12338] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  530.983739][T12220] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  531.076175][   T21] Bluetooth: hci6: command 0x0419 tx timeout
[  531.895231][T12220] 8021q: adding VLAN 0 to HW filter on device bond0
[  531.960192][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  531.980461][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  531.991288][T12220] 8021q: adding VLAN 0 to HW filter on device team0
[  532.076996][ T6389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  532.097561][ T6389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  532.113770][T12349] loop4: detected capacity change from 0 to 512
[  532.129218][ T6389] bridge0: port 1(bridge_slave_0) entered blocking state
[  532.136327][ T6389] bridge0: port 1(bridge_slave_0) entered forwarding state
[  532.207861][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  532.236198][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  532.260155][T12352] netlink: 'syz.2.2229': attribute type 1 has an invalid length.
[  532.272952][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  532.277701][T12349] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  532.292184][T12352] netlink: 'syz.2.2229': attribute type 2 has an invalid length.
[  532.306884][ T3374] bridge0: port 2(bridge_slave_1) entered blocking state
[  532.313963][ T3374] bridge0: port 2(bridge_slave_1) entered forwarding state
[  532.368975][T12349] EXT4-fs (loop4): 1 orphan inode deleted
[  532.410107][T12349] EXT4-fs (loop4): 1 truncate cleaned up
[  532.447756][T12359] loop2: detected capacity change from 0 to 512
[  532.455474][T12349] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback.
[  532.484250][T12359] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[  532.533400][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  532.594657][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  532.625171][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  532.642069][T12349] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1439: inode #12: block 7: comm syz.4.2236: path /35/bus/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0
[  532.657653][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  532.856186][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  532.878876][T12349] EXT4-fs (loop4): Remounting filesystem read-only
[  532.879002][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  532.893915][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  532.902371][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  532.910625][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  532.932675][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  532.954795][T12220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  533.021197][T12361] loop2: detected capacity change from 0 to 512
[  533.168819][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  533.208009][T12361] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[  533.215572][T12361] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  533.315701][T12361] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002]
[  533.324038][T12361] System zones: 1-12
[  533.397477][T12361] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz.2.2238: corrupted in-inode xattr
[  533.416609][T12361] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2238: couldn't read orphan inode 15 (err -117)
[  533.432330][T12361] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none.
[  533.693393][T12347] loop1: detected capacity change from 0 to 32768
[  533.762704][T12220] 8021q: adding VLAN 0 to HW filter on device batadv0
[  533.793355][T12347] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2235 (12347)
[  533.851107][ T1967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  533.867976][ T1967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  533.912197][T12347] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  533.930031][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  533.951634][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  533.982094][T12347] BTRFS info (device loop1): using free space tree
[  534.002496][T12220] device veth0_vlan entered promiscuous mode
[  534.019579][T12347] BTRFS info (device loop1): has skinny extents
[  534.043782][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  534.048701][ T5540] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  534.063994][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  534.079187][T12220] device veth1_vlan entered promiscuous mode
[  534.087430][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  534.124898][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  534.135765][ T3374] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  534.162715][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  534.172608][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  534.183675][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  534.195658][T12220] device veth0_macvtap entered promiscuous mode
[  534.208636][T12220] device veth1_macvtap entered promiscuous mode
[  534.240059][T12220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  534.266558][T12220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  534.286880][T12220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  534.363147][T12347] BTRFS info (device loop1): enabling ssd optimizations
[  534.370570][T12220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  534.392693][T12220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  534.427690][T12220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  534.458983][ T5540] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  534.459225][T12220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  534.491227][ T5540] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  534.510226][T12394] loop2: detected capacity change from 0 to 2048
[  534.519192][T12220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  534.546877][T12220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  534.590336][T12220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  534.600164][T12220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  534.662834][T12220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  534.675702][T12220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  534.686476][T12220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  534.695748][ T5540] usb 5-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d
[  534.697674][T12220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  534.720065][T12220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  534.739159][ T5540] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  534.744192][T12220] batman_adv: batadv0: Interface activated: batadv_slave_0
[  534.785883][ T5540] usb 5-1: Product: syz
[  534.829224][ T5540] usb 5-1: Manufacturer: syz
[  534.833934][ T5540] usb 5-1: SerialNumber: syz
[  534.970661][ T5540] usb 5-1: config 0 descriptor??
[  535.006806][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  535.022356][ T5540] usb 5-1: Found UVC 0.00 device syz (468c:90ea)
[  535.034123][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  535.051281][ T5540] usb 5-1: No valid video chain found.
[  535.066437][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  535.598466][   T25] audit: type=1326 audit(1723149616.668:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12346 comm="syz.1.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5423a5c9f9 code=0x7ffc0000
[  535.655571][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  535.665063][   T25] audit: type=1326 audit(1723149616.668:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12346 comm="syz.1.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5423a5c9f9 code=0x7ffc0000
[  535.709319][T12220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  535.777388][T12394] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  535.802155][   T25] audit: type=1326 audit(1723149616.668:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12346 comm="syz.1.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5423a5c9f9 code=0x7ffc0000
[  535.836440][   T25] audit: type=1326 audit(1723149616.668:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12346 comm="syz.1.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5423a5c9f9 code=0x7ffc0000
[  535.866796][T12220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  535.884582][T12220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  535.907463][   T25] audit: type=1326 audit(1723149616.668:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12346 comm="syz.1.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5423a5c9f9 code=0x7ffc0000
[  535.931032][T12220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  535.945750][T12390] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  536.054321][T12220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  536.076701][T12404] sctp: [Deprecated]: syz.4.2239 (pid 12404) Use of struct sctp_assoc_value in delayed_ack socket option.
[  536.076701][T12404] Use struct sctp_sack_info instead
[  536.091773][T12220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  536.133886][   T25] audit: type=1326 audit(1723149616.668:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12346 comm="syz.1.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5423a5c9f9 code=0x7ffc0000
[  536.190059][T12220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  536.263517][T12220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  536.277473][   T25] audit: type=1326 audit(1723149616.677:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12346 comm="syz.1.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5423a5c9f9 code=0x7ffc0000
[  536.286306][T12220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  536.362973][   T25] audit: type=1326 audit(1723149616.677:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12346 comm="syz.1.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5423a5c9f9 code=0x7ffc0000
[  536.412604][T12220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  536.438124][   T25] audit: type=1326 audit(1723149616.677:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12346 comm="syz.1.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5423a5c9f9 code=0x7ffc0000
[  536.471925][T12220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  536.499478][T12220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  536.519412][   T25] audit: type=1326 audit(1723149616.696:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12346 comm="syz.1.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5423a5c9f9 code=0x7ffc0000
[  536.520270][ T3792] Bluetooth: hci0: command 0x0409 tx timeout
[  536.541984][T12220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  536.580415][T12220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  536.602081][T12220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  536.631881][T12220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  536.718211][T12220] batman_adv: batadv0: Interface activated: batadv_slave_1
[  536.796756][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  536.823739][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  536.878266][T12220] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  536.915143][T12412] loop0: detected capacity change from 0 to 128
[  536.921522][T12220] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  536.949698][T12220] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  537.009105][T12220] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  537.140986][T12412] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  537.160945][T12412] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038 (0x7fffffff)
[  537.368232][ T5395] usb 5-1: USB disconnect, device number 24
[  537.372831][T12412] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  537.381859][T12412] IPv6: NLM_F_CREATE should be set when creating new route
[  537.428266][T12413] fscrypt (loop0, inode 12): Unsupported encryption flags (0x10)
[  537.578093][ T5297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  537.605353][ T5297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  537.629624][  T652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  537.644862][T12426] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  537.650629][  T652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  537.781534][ T3780] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  537.979845][T12438] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2253'.
[  538.044233][T12438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2253'.
[  538.424442][T12434] loop4: detected capacity change from 0 to 32768
[  538.613598][T12449] hub 9-0:1.0: USB hub found
[  538.625549][T12449] hub 9-0:1.0: 8 ports detected
[  538.779538][T12434] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.2252 (12434)
[  538.995479][T12434] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  539.053952][T12434] BTRFS info (device loop4): using free space tree
[  539.060486][T12434] BTRFS info (device loop4): has skinny extents
[  539.282999][T12433] loop1: detected capacity change from 0 to 40427
[  539.320565][T12433] F2FS-fs (loop1): invalid crc value
[  539.432518][T12472] loop2: detected capacity change from 0 to 256
[  539.450472][T12433] F2FS-fs (loop1): Found nat_bits in checkpoint
[  539.495086][T12434] BTRFS info (device loop4): enabling ssd optimizations
[  539.508584][ T7112] device hsr_slave_0 left promiscuous mode
[  539.549110][T12434] BTRFS info (device loop4): scrub: started on devid 1
[  539.562317][T12433] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0
[  539.601997][T12433] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  539.604015][T12472] FAT-fs (loop2): Directory bread(block 64) failed
[  539.633382][ T7112] device hsr_slave_1 left promiscuous mode
[  539.647812][ T7112] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  539.660803][T12472] FAT-fs (loop2): Directory bread(block 65) failed
[  539.667402][T12472] FAT-fs (loop2): Directory bread(block 66) failed
[  539.691184][ T7112] batman_adv: batadv0: Removing interface: batadv_slave_0
[  539.724449][T12472] FAT-fs (loop2): Directory bread(block 67) failed
[  539.747083][T12433] attempt to access beyond end of device
[  539.747083][T12433] loop1: rw=10241, want=53256, limit=40427
[  539.758176][T12472] FAT-fs (loop2): Directory bread(block 68) failed
[  539.765755][ T7112] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  539.779969][ T7112] batman_adv: batadv0: Removing interface: batadv_slave_1
[  539.785811][T12472] FAT-fs (loop2): Directory bread(block 69) failed
[  539.803371][T12433] attempt to access beyond end of device
[  539.803371][T12433] loop1: rw=2049, want=53256, limit=40427
[  539.824023][ T7112] device bridge_slave_1 left promiscuous mode
[  539.827262][T12472] FAT-fs (loop2): Directory bread(block 70) failed
[  539.846791][T12434] BTRFS info (device loop4): scrub: finished on devid 1 with status: 0
[  539.855226][ T7112] bridge0: port 2(bridge_slave_1) entered disabled state
[  539.860737][T12472] FAT-fs (loop2): Directory bread(block 71) failed
[  539.882966][T12472] FAT-fs (loop2): Directory bread(block 72) failed
[  539.885139][T12433] loop0: detected capacity change from 0 to 7
[  539.925345][T12433] Dev loop0: unable to read RDB block 7
[  539.940609][T12472] FAT-fs (loop2): Directory bread(block 73) failed
[  539.958835][ T7112] device bridge_slave_0 left promiscuous mode
[  539.969758][ T7112] bridge0: port 1(bridge_slave_0) entered disabled state
[  539.994330][T12433]  loop0: AHDI p3
[  540.027036][T12433] loop0: partition table partially beyond EOD, truncated
[  540.143069][T12448] loop0: detected capacity change from 0 to 32768
[  540.419990][T11695] attempt to access beyond end of device
[  540.419990][T11695] loop1: rw=2049, want=45104, limit=40427
[  540.431604][ T7112] device veth1_macvtap left promiscuous mode
[  540.437623][ T7112] device veth0_macvtap left promiscuous mode
[  540.444475][T12448] XFS (loop0): Mounting V5 Filesystem
[  540.469075][ T7112] device veth1_vlan left promiscuous mode
[  540.507065][ T7112] device veth0_vlan left promiscuous mode
[  540.640619][T12448] XFS (loop0): Ending clean mount
[  540.691197][T12448] XFS (loop0): Quotacheck needed: Please wait.
[  540.827728][T12448] XFS (loop0): Quotacheck: Done.
[  541.112787][ T3611] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  541.349781][T12011] XFS (loop0): Unmounting Filesystem
[  541.415878][ T3611] usb 5-1: Using ep0 maxpacket: 16
[  541.567646][ T3611] usb 5-1: config 0 has an invalid interface number: 153 but max is 0
[  541.575928][ T3611] usb 5-1: config 0 has no interface number 0
[  541.657468][ T7112] team0 (unregistering): Port device team_slave_1 removed
[  541.728697][ T7112] team0 (unregistering): Port device team_slave_0 removed
[  541.750104][T12497] loop2: detected capacity change from 0 to 40427
[  541.764742][ T7112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  541.773644][ T3611] usb 5-1: New USB device found, idVendor=1199, idProduct=0025, bcdDevice=1e.64
[  541.784334][ T3611] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.792456][ T3611] usb 5-1: Product: syz
[  541.797518][ T3611] usb 5-1: Manufacturer: syz
[  541.802116][ T3611] usb 5-1: SerialNumber: syz
[  541.809255][ T3611] usb 5-1: config 0 descriptor??
[  541.815756][ T7112] device bond_slave_1 left promiscuous mode
[  541.833314][T12497] F2FS-fs (loop2): invalid crc value
[  541.879464][ T3611] sierra 5-1:0.153: Sierra USB modem converter detected
[  541.897036][ T7112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  541.898493][T12497] F2FS-fs (loop2): Found nat_bits in checkpoint
[  541.917539][ T7112] device bond_slave_0 left promiscuous mode
[  542.006556][T12497] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  542.084103][ T7112] bond0 (unregistering): Released all slaves
[  542.142324][T11623] attempt to access beyond end of device
[  542.142324][T11623] loop2: rw=524288, want=45072, limit=40427
[  542.164408][T12509] netlink: 'syz.0.2266': attribute type 12 has an invalid length.
[  542.174461][T12509] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2266'.
[  542.183613][T11623] attempt to access beyond end of device
[  542.183613][T11623] loop2: rw=0, want=45072, limit=40427
[  542.216338][T12514] loop4: detected capacity change from 0 to 1764
[  542.223659][T12511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2266'.
[  542.303100][T12516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2269'.
[  542.352329][ T5297] attempt to access beyond end of device
[  542.352329][ T5297] loop2: rw=2049, want=41088, limit=40427
[  542.506742][T12499] loop4: detected capacity change from 0 to 512
[  542.639158][T12499] EXT4-fs (loop4): Ignoring removed oldalloc option
[  542.826390][T12499] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.2263: Parent and EA inode have the same ino 15
[  542.900205][T12499] EXT4-fs (loop4): Remounting filesystem read-only
[  542.906777][T12499] EXT4-fs error (device loop4): ext4_evict_inode:293: comm syz.4.2263: couldn't truncate inode 15 (err -30)
[  542.965495][T12499] EXT4-fs (loop4): 1 orphan inode deleted
[  542.971245][T12499] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none.
[  543.173555][ T3611] usb 5-1: USB disconnect, device number 25
[  543.193426][ T3611] sierra 5-1:0.153: device disconnected
[  543.908095][T12530] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  544.869746][T12540] chnl_net:caif_netlink_parms(): no params data found
[  545.150299][T12540] bridge0: port 1(bridge_slave_0) entered blocking state
[  545.166317][T12540] bridge0: port 1(bridge_slave_0) entered disabled state
[  545.176767][T12540] device bridge_slave_0 entered promiscuous mode
[  545.196518][T12540] bridge0: port 2(bridge_slave_1) entered blocking state
[  545.203974][T12540] bridge0: port 2(bridge_slave_1) entered disabled state
[  545.212489][T12540] device bridge_slave_1 entered promiscuous mode
[  545.244959][T12540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  545.256536][T12540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  545.318285][T12540] team0: Port device team_slave_0 added
[  545.340511][T12540] team0: Port device team_slave_1 added
[  545.381097][ T3611] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  545.393585][T12540] batman_adv: batadv0: Adding interface: batadv_slave_0
[  545.400547][T12540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  545.458123][T12540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  545.483470][T12540] batman_adv: batadv0: Adding interface: batadv_slave_1
[  545.503805][T12540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  545.540175][T12540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  545.628673][T12540] device hsr_slave_0 entered promiscuous mode
[  545.635851][T12552] loop1: detected capacity change from 0 to 40427
[  545.646168][T12540] device hsr_slave_1 entered promiscuous mode
[  545.660679][T12540] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  545.710188][T12552] F2FS-fs (loop1): invalid crc value
[  545.782562][ T3611] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  545.877603][ T3611] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  545.953302][T12540] Cannot create hsr debugfs directory
[  546.008291][T12552] F2FS-fs (loop1): Found nat_bits in checkpoint
[  546.115355][ T3611] usb 5-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  546.314549][ T3611] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  546.318296][ T6384] Bluetooth: hci0: command 0x0409 tx timeout
[  546.365041][ T3611] usb 5-1: config 0 descriptor??
[  546.448030][T12552] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  546.455107][T12585] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2294'.
[  546.464655][T12585] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2294'.
[  546.474064][T12585] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2294'.
[  546.661274][T12540] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.725076][T11695] attempt to access beyond end of device
[  546.725076][T11695] loop1: rw=524288, want=45072, limit=40427
[  546.757205][T11695] attempt to access beyond end of device
[  546.757205][T11695] loop1: rw=0, want=45072, limit=40427
[  546.776688][T12540] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.817307][T12594] 
[  546.819639][T12594] =====================================================
[  546.826556][T12594] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected
[  546.833989][T12594] 5.15.164-syzkaller #0 Not tainted
[  546.839159][T12594] -----------------------------------------------------
[  546.846059][T12594] syz.0.2299/12594 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  546.853750][T12594] ffff888069966360 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x16a/0x490
[  546.862425][T12594] 
[  546.862425][T12594] and this task is already holding:
[  546.869759][T12594] ffff88801f6dc230 (&dev->event_lock#2){-.-.}-{2:2}, at: input_inject_event+0xc0/0x300
[  546.879393][T12594] which would create a new lock dependency:
[  546.885254][T12594]  (&dev->event_lock#2){-.-.}-{2:2} -> (&new->fa_lock){....}-{2:2}
[  546.893146][T12594] 
[  546.893146][T12594] but this new dependency connects a HARDIRQ-irq-safe lock:
[  546.902572][T12594]  (&dev->event_lock#2){-.-.}-{2:2}
[  546.902603][T12594] 
[  546.902603][T12594] ... which became HARDIRQ-irq-safe at:
[  546.915444][T12594]   lock_acquire+0x1db/0x4f0
[  546.920014][T12594]   _raw_spin_lock_irqsave+0xd1/0x120
[  546.925360][T12594]   input_event+0x8a/0xd0
[  546.929663][T12594]   psmouse_report_standard_packet+0x50/0x200
[  546.935703][T12594]   psmouse_process_byte+0x45b/0x640
[  546.940962][T12594]   psmouse_handle_byte+0x46/0x4b0
[  546.946046][T12594]   psmouse_interrupt+0x697/0x10a0
[  546.951134][T12594]   serio_interrupt+0x88/0x130
[  546.955874][T12594]   i8042_interrupt+0x355/0x750
[  546.960698][T12594]   __handle_irq_event_percpu+0x292/0xa70
[  546.966390][T12594]   handle_irq_event+0xff/0x2b0
[  546.971216][T12594]   handle_edge_irq+0x245/0xbf0
[  546.976037][T12594]   __common_interrupt+0xd7/0x1f0
[  546.981036][T12594]   common_interrupt+0x9f/0xc0
[  546.985774][T12594]   asm_common_interrupt+0x22/0x40
[  546.990862][T12594]   stack_depot_save+0x88/0x440
[  546.995686][T12594]   ____kasan_kmalloc+0xd1/0xf0
[  547.000509][T12594]   kmem_cache_alloc_trace+0x143/0x290
[  547.005939][T12594]   kobject_uevent_env+0x283/0x8d0
[  547.011022][T12594]   driver_register+0x35b/0x3a0
[  547.015848][T12594]   usb_register_driver+0x206/0x3d0
[  547.021025][T12594]   do_one_initcall+0x22b/0x7a0
[  547.025850][T12594]   do_initcall_level+0x157/0x210
[  547.030848][T12594]   do_initcalls+0x49/0x90
[  547.035236][T12594]   kernel_init_freeable+0x425/0x5c0
[  547.040492][T12594]   kernel_init+0x19/0x290
[  547.044882][T12594]   ret_from_fork+0x1f/0x30
[  547.049359][T12594] 
[  547.049359][T12594] to a HARDIRQ-irq-unsafe lock:
[  547.056345][T12594]  (tasklist_lock){.+.+}-{2:2}
[  547.056364][T12594] 
[  547.056364][T12594] ... which became HARDIRQ-irq-unsafe at:
[  547.068940][T12594] ...
[  547.068945][T12594]   lock_acquire+0x1db/0x4f0
[  547.076055][T12594]   _raw_read_lock+0x32/0x40
[  547.080620][T12594]   do_wait+0x2a7/0xaf0
[  547.084750][T12594]   kernel_wait+0xe5/0x230
[  547.089140][T12594]   call_usermodehelper_exec_work+0xb5/0x220
[  547.095096][T12594]   process_one_work+0x8a1/0x10c0
[  547.100096][T12594]   worker_thread+0xaca/0x1280
[  547.104834][T12594]   kthread+0x3f6/0x4f0
[  547.108961][T12594]   ret_from_fork+0x1f/0x30
[  547.113447][T12594] 
[  547.113447][T12594] other info that might help us debug this:
[  547.113447][T12594] 
[  547.123644][T12594] Chain exists of:
[  547.123644][T12594]   &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock
[  547.123644][T12594] 
[  547.136565][T12594]  Possible interrupt unsafe locking scenario:
[  547.136565][T12594] 
[  547.144851][T12594]        CPU0                    CPU1
[  547.150186][T12594]        ----                    ----
[  547.155523][T12594]   lock(tasklist_lock);
[  547.159740][T12594]                                local_irq_disable();
[  547.166463][T12594]                                lock(&dev->event_lock#2);
[  547.173636][T12594]                                lock(&new->fa_lock);
[  547.180369][T12594]   <Interrupt>
[  547.183797][T12594]     lock(&dev->event_lock#2);
[  547.188623][T12594] 
[  547.188623][T12594]  *** DEADLOCK ***
[  547.188623][T12594] 
[  547.196734][T12594] 6 locks held by syz.0.2299/12594:
[  547.201901][T12594]  #0: ffff888021888110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_write+0x26d/0x7c0
[  547.211010][T12594]  #1: ffff88801f6dc230 (&dev->event_lock#2){-.-.}-{2:2}, at: input_inject_event+0xc0/0x300
[  547.221070][T12594]  #2: ffffffff8c91fb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  547.230346][T12594]  #3: ffffffff8c91fb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  547.239622][T12594]  #4: ffffffff8c91fb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  547.248897][T12594]  #5: ffffffff8c91fb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  547.258171][T12594] 
[  547.258171][T12594] the dependencies between HARDIRQ-irq-safe lock and the holding lock:
[  547.268545][T12594] -> (&dev->event_lock#2){-.-.}-{2:2} {
[  547.274082][T12594]    IN-HARDIRQ-W at:
[  547.278033][T12594]                     lock_acquire+0x1db/0x4f0
[  547.284158][T12594]                     _raw_spin_lock_irqsave+0xd1/0x120
[  547.291064][T12594]                     input_event+0x8a/0xd0
[  547.296927][T12594]                     psmouse_report_standard_packet+0x50/0x200
[  547.304531][T12594]                     psmouse_process_byte+0x45b/0x640
[  547.311353][T12594]                     psmouse_handle_byte+0x46/0x4b0
[  547.318000][T12594]                     psmouse_interrupt+0x697/0x10a0
[  547.324646][T12594]                     serio_interrupt+0x88/0x130
[  547.330946][T12594]                     i8042_interrupt+0x355/0x750
[  547.337332][T12594]                     __handle_irq_event_percpu+0x292/0xa70
[  547.344592][T12594]                     handle_irq_event+0xff/0x2b0
[  547.350984][T12594]                     handle_edge_irq+0x245/0xbf0
[  547.357382][T12594]                     __common_interrupt+0xd7/0x1f0
[  547.363948][T12594]                     common_interrupt+0x9f/0xc0
[  547.370254][T12594]                     asm_common_interrupt+0x22/0x40
[  547.376905][T12594]                     stack_depot_save+0x88/0x440
[  547.383298][T12594]                     ____kasan_kmalloc+0xd1/0xf0
[  547.389688][T12594]                     kmem_cache_alloc_trace+0x143/0x290
[  547.396690][T12594]                     kobject_uevent_env+0x283/0x8d0
[  547.403343][T12594]                     driver_register+0x35b/0x3a0
[  547.409733][T12594]                     usb_register_driver+0x206/0x3d0
[  547.416468][T12594]                     do_one_initcall+0x22b/0x7a0
[  547.422858][T12594]                     do_initcall_level+0x157/0x210
[  547.429420][T12594]                     do_initcalls+0x49/0x90
[  547.435372][T12594]                     kernel_init_freeable+0x425/0x5c0
[  547.442193][T12594]                     kernel_init+0x19/0x290
[  547.448147][T12594]                     ret_from_fork+0x1f/0x30
[  547.454199][T12594]    IN-SOFTIRQ-W at:
[  547.458166][T12594]                     lock_acquire+0x1db/0x4f0
[  547.464303][T12594]                     _raw_spin_lock_irqsave+0xd1/0x120
[  547.471232][T12594]                     input_inject_event+0xc0/0x300
[  547.477802][T12594]                     kd_sound_helper+0xfd/0x200
[  547.484109][T12594]                     input_handler_for_each_handle+0xd5/0x190
[  547.491629][T12594]                     call_timer_fn+0x16d/0x560
[  547.497843][T12594]                     __run_timers+0x67c/0x890
[  547.503969][T12594]                     run_timer_softirq+0x63/0xf0
[  547.510359][T12594]                     handle_softirqs+0x3a7/0x930
[  547.516745][T12594]                     __irq_exit_rcu+0x157/0x240
[  547.523046][T12594]                     irq_exit_rcu+0x5/0x20
[  547.528911][T12594]                     sysvec_apic_timer_interrupt+0x91/0xb0
[  547.536172][T12594]                     asm_sysvec_apic_timer_interrupt+0x16/0x20
[  547.543788][T12594]                     lock_acquire+0x252/0x4f0
[  547.549941][T12594]                     __mutex_lock_common+0x1da/0x25a0
[  547.556767][T12594]                     mutex_lock_nested+0x17/0x20
[  547.563158][T12594]                     __unix_dgram_recvmsg+0x24d/0x1260
[  547.570071][T12594]                     ____sys_recvmsg+0x286/0x530
[  547.576460][T12594]                     ___sys_recvmsg+0x1ec/0x690
[  547.582759][T12594]                     do_recvmmsg+0x36f/0x8f0
[  547.588803][T12594]                     __x64_sys_recvmmsg+0x195/0x240
[  547.595457][T12594]                     do_syscall_64+0x3b/0xb0
[  547.601498][T12594]                     entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  547.609028][T12594]    INITIAL USE at:
[  547.612907][T12594]                    lock_acquire+0x1db/0x4f0
[  547.618954][T12594]                    _raw_spin_lock_irqsave+0xd1/0x120
[  547.625776][T12594]                    input_inject_event+0xc0/0x300
[  547.632257][T12594]                    led_trigger_event+0x64/0xc0
[  547.638563][T12594]                    kbd_led_trigger_activate+0xb9/0x100
[  547.645563][T12594]                    led_trigger_set+0x513/0x930
[  547.651865][T12594]                    led_trigger_set_default+0x1c2/0x200
[  547.658858][T12594]                    led_classdev_register_ext+0x6cf/0x8d0
[  547.666026][T12594]                    input_leds_connect+0x503/0x740
[  547.672587][T12594]                    input_register_device+0xdae/0x1150
[  547.679495][T12594]                    atkbd_connect+0x7a7/0xa70
[  547.685622][T12594]                    serio_driver_probe+0x74/0x90
[  547.692010][T12594]                    really_probe+0x24e/0xb60
[  547.698051][T12594]                    __driver_probe_device+0x1a2/0x3d0
[  547.704876][T12594]                    driver_probe_device+0x50/0x420
[  547.711436][T12594]                    __driver_attach+0x479/0x690
[  547.717738][T12594]                    bus_for_each_dev+0x17c/0x1f0
[  547.724123][T12594]                    serio_handle_event+0x56a/0x8f0
[  547.730685][T12594]                    process_one_work+0x8a1/0x10c0
[  547.737161][T12594]                    worker_thread+0xaca/0x1280
[  547.743373][T12594]                    kthread+0x3f6/0x4f0
[  547.748977][T12594]                    ret_from_fork+0x1f/0x30
[  547.754931][T12594]  }
[  547.757407][T12594]  ... key      at: [<ffffffff917cca20>] input_allocate_device.__key.6+0x0/0x20
[  547.766404][T12594] 
[  547.766404][T12594] the dependencies between the lock to be acquired
[  547.766410][T12594]  and HARDIRQ-irq-unsafe lock:
[  547.779874][T12594]   -> (tasklist_lock){.+.+}-{2:2} {
[  547.785148][T12594]      HARDIRQ-ON-R at:
[  547.789273][T12594]                         lock_acquire+0x1db/0x4f0
[  547.795747][T12594]                         _raw_read_lock+0x32/0x40
[  547.802222][T12594]                         do_wait+0x2a7/0xaf0
[  547.808262][T12594]                         kernel_wait+0xe5/0x230
[  547.814570][T12594]                         call_usermodehelper_exec_work+0xb5/0x220
[  547.822434][T12594]                         process_one_work+0x8a1/0x10c0
[  547.829342][T12594]                         worker_thread+0xaca/0x1280
[  547.835989][T12594]                         kthread+0x3f6/0x4f0
[  547.842026][T12594]                         ret_from_fork+0x1f/0x30
[  547.848415][T12594]      SOFTIRQ-ON-R at:
[  547.852540][T12594]                         lock_acquire+0x1db/0x4f0
[  547.859013][T12594]                         _raw_read_lock+0x32/0x40
[  547.865492][T12594]                         do_wait+0x2a7/0xaf0
[  547.871537][T12594]                         kernel_wait+0xe5/0x230
[  547.877837][T12594]                         call_usermodehelper_exec_work+0xb5/0x220
[  547.885701][T12594]                         process_one_work+0x8a1/0x10c0
[  547.892610][T12594]                         worker_thread+0xaca/0x1280
[  547.899343][T12594]                         kthread+0x3f6/0x4f0
[  547.905384][T12594]                         ret_from_fork+0x1f/0x30
[  547.911773][T12594]      INITIAL USE at:
[  547.915816][T12594]                        lock_acquire+0x1db/0x4f0
[  547.922203][T12594]                        _raw_write_lock_irq+0xcf/0x110
[  547.929110][T12594]                        copy_process+0x22be/0x3ef0
[  547.935672][T12594]                        kernel_clone+0x210/0x960
[  547.942062][T12594]                        kernel_thread+0x168/0x1e0
[  547.948537][T12594]                        rest_init+0x21/0x330
[  547.954578][T12594]                        start_kernel+0x48c/0x540
[  547.960968][T12594]                        secondary_startup_64_no_verify+0xb1/0xbb
[  547.968745][T12594]      INITIAL READ USE at:
[  547.973221][T12594]                             lock_acquire+0x1db/0x4f0
[  547.980041][T12594]                             _raw_read_lock+0x32/0x40
[  547.986859][T12594]                             do_wait+0x2a7/0xaf0
[  547.993248][T12594]                             kernel_wait+0xe5/0x230
[  547.999898][T12594]                             call_usermodehelper_exec_work+0xb5/0x220
[  548.008109][T12594]                             process_one_work+0x8a1/0x10c0
[  548.015368][T12594]                             worker_thread+0xaca/0x1280
[  548.022449][T12594]                             kthread+0x3f6/0x4f0
[  548.028833][T12594]                             ret_from_fork+0x1f/0x30
[  548.035568][T12594]    }
[  548.038214][T12594]    ... key      at: [<ffffffff8c60a058>] tasklist_lock+0x18/0x40
[  548.046081][T12594]    ... acquired at:
[  548.050028][T12594]    lock_acquire+0x1db/0x4f0
[  548.054676][T12594]    _raw_read_lock+0x32/0x40
[  548.059325][T12594]    send_sigio+0xd2/0x330
[  548.063721][T12594]    kill_fasync+0x20c/0x490
[  548.068293][T12594]    pipe_release+0x1ab/0x330
[  548.072944][T12594]    __fput+0x3fe/0x8e0
[  548.077073][T12594]    task_work_run+0x129/0x1a0
[  548.081825][T12594]    exit_to_user_mode_loop+0x106/0x130
[  548.087348][T12594]    exit_to_user_mode_prepare+0xb1/0x140
[  548.093039][T12594]    syscall_exit_to_user_mode+0x5d/0x240
[  548.098732][T12594]    do_syscall_64+0x47/0xb0
[  548.103299][T12594]    entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  548.109338][T12594] 
[  548.111635][T12594]  -> (&f->f_owner.lock){...-}-{2:2} {
[  548.117080][T12594]     IN-SOFTIRQ-R at:
[  548.121118][T12594]                       lock_acquire+0x1db/0x4f0
[  548.127416][T12594]                       _raw_read_lock_irqsave+0xd9/0x120
[  548.134499][T12594]                       send_sigurg+0x25/0x380
[  548.140626][T12594]                       sk_send_sigurg+0x6a/0xb0
[  548.146924][T12594]                       tcp_urg+0x2b8/0xb40
[  548.152792][T12594]                       tcp_rcv_established+0xe33/0x1e20
[  548.159788][T12594]                       tcp_v6_do_rcv+0x4f2/0x10f0
[  548.166262][T12594]                       tcp_v6_rcv+0x2220/0x27b0
[  548.172563][T12594]                       ip6_protocol_deliver_rcu+0x93d/0x12d0
[  548.180009][T12594]                       ip6_input_finish+0xa2/0x130
[  548.186571][T12594]                       NF_HOOK+0x364/0x410
[  548.192436][T12594]                       NF_HOOK+0x364/0x410
[  548.198300][T12594]                       __netif_receive_skb+0x1c6/0x530
[  548.205208][T12594]                       process_backlog+0x363/0x7f0
[  548.211766][T12594]                       __napi_poll+0xc7/0x440
[  548.217892][T12594]                       net_rx_action+0x617/0xda0
[  548.224277][T12594]                       handle_softirqs+0x3a7/0x930
[  548.230837][T12594]                       run_ksoftirqd+0xc6/0x120
[  548.237135][T12594]                       smpboot_thread_fn+0x51b/0x9d0
[  548.243867][T12594]                       kthread+0x3f6/0x4f0
[  548.249730][T12594]                       ret_from_fork+0x1f/0x30
[  548.255945][T12594]     INITIAL USE at:
[  548.259897][T12594]                      lock_acquire+0x1db/0x4f0
[  548.266106][T12594]                      _raw_write_lock_irq+0xcf/0x110
[  548.272843][T12594]                      f_modown+0x38/0x340
[  548.278625][T12594]                      f_setown+0x127/0x1d0
[  548.284492][T12594]                      do_fcntl+0x1b7/0x1600
[  548.290444][T12594]                      __se_sys_fcntl+0xd8/0x1b0
[  548.296751][T12594]                      do_syscall_64+0x3b/0xb0
[  548.304657][T12594]                      entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  548.312276][T12594]     INITIAL READ USE at:
[  548.316664][T12594]                           lock_acquire+0x1db/0x4f0
[  548.323310][T12594]                           _raw_read_lock_irqsave+0xd9/0x120
[  548.330744][T12594]                           send_sigurg+0x25/0x380
[  548.337219][T12594]                           sk_send_sigurg+0x6a/0xb0
[  548.343872][T12594]                           tcp_urg+0x2b8/0xb40
[  548.350087][T12594]                           tcp_rcv_established+0xe33/0x1e20
[  548.357431][T12594]                           tcp_v6_do_rcv+0x4f2/0x10f0
[  548.364254][T12594]                           __release_sock+0x198/0x4b0
[  548.371078][T12594]                           release_sock+0x5d/0x1c0
[  548.377645][T12594]                           tcp_sendmsg+0x36/0x40
[  548.384034][T12594]                           __sys_sendto+0x564/0x720
[  548.390680][T12594]                           __x64_sys_sendto+0xda/0xf0
[  548.397504][T12594]                           do_syscall_64+0x3b/0xb0
[  548.404066][T12594]                           entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  548.412104][T12594]   }
[  548.414662][T12594]   ... key      at: [<ffffffff914cecc0>] __alloc_file.__key+0x0/0x10
[  548.422788][T12594]   ... acquired at:
[  548.426649][T12594]    lock_acquire+0x1db/0x4f0
[  548.431301][T12594]    _raw_read_lock_irqsave+0xd9/0x120
[  548.436738][T12594]    send_sigio+0x2f/0x330
[  548.441127][T12594]    kill_fasync+0x20c/0x490
[  548.445688][T12594]    fsnotify_insert_event+0x35e/0x410
[  548.451118][T12594]    inotify_handle_inode_event+0x3b2/0x530
[  548.456986][T12594]    inotify_ignored_and_remove_idr+0x25/0x70
[  548.463024][T12594]    fsnotify_destroy_marks+0x1be/0x3f0
[  548.468543][T12594]    dentry_unlink_inode+0x2b0/0x400
[  548.473801][T12594]    vfs_rmdir+0x1f2/0x460
[  548.478190][T12594]    do_rmdir+0x368/0x670
[  548.482489][T12594]    __x64_sys_rmdir+0x45/0x50
[  548.487222][T12594]    do_syscall_64+0x3b/0xb0
[  548.491784][T12594]    entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  548.497825][T12594] 
[  548.500122][T12594] -> (&new->fa_lock){....}-{2:2} {
[  548.505218][T12594]    INITIAL USE at:
[  548.509084][T12594]                    lock_acquire+0x1db/0x4f0
[  548.515123][T12594]                    _raw_write_lock_irq+0xcf/0x110
[  548.521682][T12594]                    fasync_remove_entry+0xfb/0x1d0
[  548.528242][T12594]                    __fput+0x766/0x8e0
[  548.533762][T12594]                    task_work_run+0x129/0x1a0
[  548.539889][T12594]                    exit_to_user_mode_loop+0x106/0x130
[  548.546798][T12594]                    exit_to_user_mode_prepare+0xb1/0x140
[  548.553878][T12594]                    syscall_exit_to_user_mode+0x5d/0x240
[  548.560961][T12594]                    do_syscall_64+0x47/0xb0
[  548.566911][T12594]                    entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  548.574342][T12594]    INITIAL READ USE at:
[  548.578642][T12594]                         lock_acquire+0x1db/0x4f0
[  548.585113][T12594]                         _raw_read_lock_irqsave+0xd9/0x120
[  548.592366][T12594]                         kill_fasync+0x16a/0x490
[  548.598754][T12594]                         fsnotify_insert_event+0x35e/0x410
[  548.606012][T12594]                         inotify_handle_inode_event+0x3b2/0x530
[  548.613700][T12594]                         inotify_ignored_and_remove_idr+0x25/0x70
[  548.621566][T12594]                         fsnotify_destroy_marks+0x1be/0x3f0
[  548.628907][T12594]                         dentry_unlink_inode+0x2b0/0x400
[  548.635985][T12594]                         vfs_rmdir+0x1f2/0x460
[  548.642195][T12594]                         do_rmdir+0x368/0x670
[  548.648319][T12594]                         __x64_sys_rmdir+0x45/0x50
[  548.654875][T12594]                         do_syscall_64+0x3b/0xb0
[  548.661260][T12594]                         entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  548.669122][T12594]  }
[  548.671593][T12594]  ... key      at: [<ffffffff914cf940>] fasync_insert_entry.__key+0x0/0x20
[  548.680239][T12594]  ... acquired at:
[  548.684013][T12594]    lock_acquire+0x1db/0x4f0
[  548.688660][T12594]    _raw_read_lock_irqsave+0xd9/0x120
[  548.694090][T12594]    kill_fasync+0x16a/0x490
[  548.698654][T12594]    mousedev_notify_readers+0x72d/0xbe0
[  548.704262][T12594]    mousedev_event+0x554/0x1260
[  548.709171][T12594]    input_pass_values+0x981/0x1200
[  548.714339][T12594]    input_handle_event+0xc9b/0x1600
[  548.719594][T12594]    input_inject_event+0x1fc/0x300
[  548.724763][T12594]    evdev_write+0x668/0x7c0
[  548.729326][T12594]    vfs_write+0x30c/0xe50
[  548.733716][T12594]    ksys_write+0x1a2/0x2c0
[  548.738190][T12594]    do_syscall_64+0x3b/0xb0
[  548.742752][T12594]    entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  548.748792][T12594] 
[  548.751089][T12594] 
[  548.751089][T12594] stack backtrace:
[  548.756954][T12594] CPU: 1 PID: 12594 Comm: syz.0.2299 Not tainted 5.15.164-syzkaller #0
[  548.765166][T12594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  548.775193][T12594] Call Trace:
[  548.778449][T12594]  <TASK>
[  548.781356][T12594]  dump_stack_lvl+0x1e3/0x2d0
[  548.786010][T12594]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  548.791614][T12594]  ? panic+0x860/0x860
[  548.795658][T12594]  ? print_shortest_lock_dependencies+0xee/0x150
[  548.801961][T12594]  validate_chain+0x4d01/0x5930
[  548.806797][T12594]  ? reacquire_held_locks+0x660/0x660
[  548.812147][T12594]  ? register_lock_class+0x100/0x9a0
[  548.817405][T12594]  ? is_dynamic_key+0x1f0/0x1f0
[  548.822231][T12594]  ? mark_lock+0x98/0x340
[  548.826536][T12594]  __lock_acquire+0x1295/0x1ff0
[  548.831366][T12594]  lock_acquire+0x1db/0x4f0
[  548.835843][T12594]  ? kill_fasync+0x16a/0x490
[  548.840410][T12594]  ? read_lock_is_recursive+0x10/0x10
[  548.845758][T12594]  ? read_lock_is_recursive+0x10/0x10
[  548.851103][T12594]  _raw_read_lock_irqsave+0xd9/0x120
[  548.856362][T12594]  ? kill_fasync+0x16a/0x490
[  548.860924][T12594]  ? _raw_read_lock+0x40/0x40
[  548.865579][T12594]  kill_fasync+0x16a/0x490
[  548.869970][T12594]  mousedev_notify_readers+0x72d/0xbe0
[  548.875413][T12594]  mousedev_event+0x554/0x1260
[  548.880159][T12594]  ? mousedev_packet+0x9f0/0x9f0
[  548.885070][T12594]  input_pass_values+0x981/0x1200
[  548.890079][T12594]  input_handle_event+0xc9b/0x1600
[  548.895167][T12594]  input_inject_event+0x1fc/0x300
[  548.900168][T12594]  evdev_write+0x668/0x7c0
[  548.904561][T12594]  ? evdev_read+0xe00/0xe00
[  548.909037][T12594]  ? end_current_label_crit_section+0x147/0x170
[  548.915251][T12594]  ? common_file_perm+0x17d/0x1d0
[  548.920250][T12594]  ? fsnotify_perm+0x64/0x590
[  548.924904][T12594]  ? security_file_permission+0x75/0xa0
[  548.930422][T12594]  ? evdev_read+0xe00/0xe00
[  548.934901][T12594]  vfs_write+0x30c/0xe50
[  548.939122][T12594]  ? file_end_write+0x250/0x250
[  548.943951][T12594]  ? __fget_files+0x413/0x480
[  548.948606][T12594]  ? __fdget_pos+0x1e9/0x380
[  548.953168][T12594]  ? ksys_write+0x77/0x2c0
[  548.957557][T12594]  ksys_write+0x1a2/0x2c0
[  548.961861][T12594]  ? print_irqtrace_events+0x210/0x210
[  548.967294][T12594]  ? __ia32_sys_read+0x80/0x80
[  548.972033][T12594]  ? syscall_enter_from_user_mode+0x2e/0x240
[  548.977988][T12594]  ? lockdep_hardirqs_on+0x94/0x130
[  548.983159][T12594]  ? syscall_enter_from_user_mode+0x2e/0x240
[  548.989118][T12594]  do_syscall_64+0x3b/0xb0
[  548.993511][T12594]  ? clear_bhb_loop+0x15/0x70
[  548.998164][T12594]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  549.004040][T12594] RIP: 0033:0x7fac7af8f9f9
[  549.008433][T12594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  549.028010][T12594] RSP: 002b:00007fac7940e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  549.036404][T12594] RAX: ffffffffffffffda RBX: 00007fac7b11df80 RCX: 00007fac7af8f9f9
[  549.044350][T12594] RDX: 0000000000000078 RSI: 00000000200003c0 RDI: 0000000000000004
[  549.052301][T12594] RBP: 00007fac7affd8ee R08: 0000000000000000 R09: 0000000000000000
[  549.060246][T12594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  549.068192][T12594] R13: 0000000000000000 R14: 00007fac7b11df80 R15: 00007fff521d78d8
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  549.076144][T12594]  </TASK>
[  549.091046][ T3715] Bluetooth: hci0: command 0x041b tx timeout
[  549.204389][ T8061] attempt to access beyond end of device
[  549.204389][ T8061] loop1: rw=2049, want=41088, limit=40427
[  549.238729][ T3611] usbhid 5-1:0.0: can't add hid device: -71
[  549.244692][ T3611] usbhid: probe of 5-1:0.0 failed with error -71
[  549.285886][ T3611] usb 5-1: USB disconnect, device number 26
[  549.292311][ T5538] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  549.312045][T12540] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.505421][T12540] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.413527][ T7112] device hsr_slave_0 left promiscuous mode
[  550.422556][ T7112] device hsr_slave_1 left promiscuous mode
[  550.428753][ T7112] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  550.438037][ T7112] batman_adv: batadv0: Removing interface: batadv_slave_0
[  550.447425][ T7112] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  550.456551][ T7112] batman_adv: batadv0: Removing interface: batadv_slave_1
[  550.465666][ T7112] device bridge_slave_1 left promiscuous mode
[  550.471804][ T7112] bridge0: port 2(bridge_slave_1) entered disabled state
[  550.481293][ T7112] device bridge_slave_0 left promiscuous mode
[  550.489264][ T7112] bridge0: port 1(bridge_slave_0) entered disabled state
[  550.500061][ T7112] device veth1_macvtap left promiscuous mode
[  550.506396][ T7112] device veth0_macvtap left promiscuous mode
[  550.512414][ T7112] device veth1_vlan left promiscuous mode
[  550.518315][ T7112] device veth0_vlan left promiscuous mode
[  550.628403][ T7112] team0 (unregistering): Port device team_slave_1 removed
[  550.642495][ T7112] team0 (unregistering): Port device team_slave_0 removed
[  550.653087][ T7112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  550.667167][ T7112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  550.725016][ T7112] bond0 (unregistering): Released all slaves
[  551.565574][ T7112] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  551.625163][ T7112] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  551.689841][ T7112] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  551.765826][ T7112] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  551.874396][ T7112] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  551.962629][ T7112] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.004750][ T7112] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.080857][ T7112] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.186628][ T7112] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.242491][ T7112] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.300492][ T7112] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.373960][ T7112] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.466442][ T7112] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.547807][ T7112] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.610828][ T7112] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.701304][ T7112] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.860076][ T7112] tipc: Left network mode
[  554.196094][ T7112] device hsr_slave_0 left promiscuous mode
[  554.207059][ T7112] device hsr_slave_1 left promiscuous mode
[  554.214488][ T7112] batman_adv: batadv0: Removing interface: batadv_slave_0
[  554.234284][ T7112] batman_adv: batadv0: Removing interface: batadv_slave_1
[  554.244420][ T7112] device bridge_slave_1 left promiscuous mode
[  554.254554][ T7112] bridge0: port 2(bridge_slave_1) entered disabled state
[  554.262687][ T7112] device bridge_slave_0 left promiscuous mode
[  554.275575][ T7112] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.297930][ T7112] device hsr_slave_0 left promiscuous mode
[  554.304162][ T7112] device hsr_slave_1 left promiscuous mode
[  554.310843][ T7112] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  554.318235][ T7112] batman_adv: batadv0: Removing interface: batadv_slave_0
[  554.328704][ T7112] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  554.336648][ T7112] batman_adv: batadv0: Removing interface: batadv_slave_1
[  554.346849][ T7112] device bridge_slave_1 left promiscuous mode
[  554.353202][ T7112] bridge0: port 2(bridge_slave_1) entered disabled state
[  554.361216][ T7112] device bridge_slave_0 left promiscuous mode
[  554.370611][ T7112] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.381855][ T7112] device hsr_slave_0 left promiscuous mode
[  554.390616][ T7112] device hsr_slave_1 left promiscuous mode
[  554.397133][ T7112] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  554.404522][ T7112] batman_adv: batadv0: Removing interface: batadv_slave_0
[  554.414867][ T7112] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  554.422615][ T7112] batman_adv: batadv0: Removing interface: batadv_slave_1
[  554.433163][ T7112] device bridge_slave_1 left promiscuous mode
[  554.439634][ T7112] bridge0: port 2(bridge_slave_1) entered disabled state
[  554.448019][ T7112] device bridge_slave_0 left promiscuous mode
[  554.457042][ T7112] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.467465][ T7112] device hsr_slave_0 left promiscuous mode
[  554.476234][ T7112] device hsr_slave_1 left promiscuous mode
[  554.483148][ T7112] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  554.491227][ T7112] batman_adv: batadv0: Removing interface: batadv_slave_0
[  554.501651][ T7112] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  554.509362][ T7112] batman_adv: batadv0: Removing interface: batadv_slave_1
[  554.519939][ T7112] device bridge_slave_1 left promiscuous mode
[  554.526240][ T7112] bridge0: port 2(bridge_slave_1) entered disabled state
[  554.534212][ T7112] device bridge_slave_0 left promiscuous mode
[  554.543224][ T7112] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.556444][ T7112] device hsr_slave_0 left promiscuous mode
[  554.565196][ T7112] device hsr_slave_1 left promiscuous mode
[  554.571634][ T7112] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  554.579040][ T7112] batman_adv: batadv0: Removing interface: batadv_slave_0
[  554.589567][ T7112] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  554.598391][ T7112] batman_adv: batadv0: Removing interface: batadv_slave_1
[  554.609341][ T7112] device bridge_slave_1 left promiscuous mode
[  554.615853][ T7112] bridge0: port 2(bridge_slave_1) entered disabled state
[  554.626506][ T7112] device bridge_slave_0 left promiscuous mode
[  554.632648][ T7112] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.651342][ T7112] device veth1_macvtap left promiscuous mode
[  554.657447][ T7112] device veth0_macvtap left promiscuous mode
[  554.663454][ T7112] device veth1_vlan left promiscuous mode
[  554.672406][ T7112] device veth0_vlan left promiscuous mode
[  554.678826][ T7112] device veth1_macvtap left promiscuous mode
[  554.684815][ T7112] device veth0_macvtap left promiscuous mode
[  554.693639][ T7112] device veth1_vlan left promiscuous mode
[  554.699600][ T7112] device veth0_vlan left promiscuous mode
[  554.706747][ T7112] device veth1_macvtap left promiscuous mode
[  554.715687][ T7112] device veth0_macvtap left promiscuous mode
[  554.727075][ T7112] device veth1_vlan left promiscuous mode
[  554.736314][ T7112] device veth0_vlan left promiscuous mode
[  554.742862][ T7112] device veth1_macvtap left promiscuous mode
[  554.748854][ T7112] device veth0_macvtap left promiscuous mode
[  554.757693][ T7112] device veth1_vlan left promiscuous mode
[  554.763637][ T7112] device veth0_vlan left promiscuous mode
[  555.039998][ T7112] team0 (unregistering): Port device team_slave_1 removed
[  555.052987][ T7112] team0 (unregistering): Port device team_slave_0 removed
[  555.065055][ T7112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  555.080055][ T7112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  555.138398][ T7112] bond0 (unregistering): Released all slaves
[  555.238877][ T7112] team0 (unregistering): Port device team_slave_1 removed
[  555.253341][ T7112] team0 (unregistering): Port device team_slave_0 removed
[  555.264409][ T7112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  555.279770][ T7112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  555.335890][ T7112] bond0 (unregistering): Released all slaves
[  555.448721][ T7112] team0 (unregistering): Port device team_slave_1 removed
[  555.460744][ T7112] team0 (unregistering): Port device team_slave_0 removed
[  555.476171][ T7112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  555.488929][ T7112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  555.552853][ T7112] bond0 (unregistering): Released all slaves
[  555.649292][ T7112] team0 (unregistering): Port device team_slave_1 removed
[  555.665067][ T7112] team0 (unregistering): Port device team_slave_0 removed
[  555.678213][ T7112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  555.691289][ T7112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  555.755090][ T7112] bond0 (unregistering): Released all slaves
[  555.908648][ T7112] team0 (unregistering): Port device team_slave_1 removed
[  555.922055][ T7112] team0 (unregistering): Port device team_slave_0 removed
[  555.939608][ T7112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  555.953309][ T7112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  556.016436][ T7112] bond0 (unregistering): Released all slaves