last executing test programs:

34.336979726s ago: executing program 3:
r0 = socket(0x15, 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
ftruncate(r1, 0xc17a)
getsockopt(r0, 0x200000000114, 0x5, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa)

34.227932646s ago: executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a80), 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[], 0x420)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[@ANYBLOB="180000000300000000000000a012544f95002b000000000093adffa82255f674412d020000000000005ab527ee3697f1ed4436dd1164b1b3f427f6ba6b34f98125f30e631d273683626e00dc254d570d4a6b78a5833488cfe410090000004aa900003d3cd62f00158e6eee8501000000520a0000151d010000000100bf000000003bbd424c6e6cafbe9309aba218812868a51d129e78f6ae170bf5a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b000024b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e460a000517ebc406e89dcbb7677e6528b0856e31eb9474c0106fc48e1f8c1a5f6945ac24cf609068f6ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bedf59ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e148bf56497e5d56d06c7551b870b2851c3f0a1aab71587a21c8f1b3369ebfcb4cb2946601b0f04edb256c604f068773f6db9d661bd7f0e2536f000000000000000055211c6f864f983d745f5865aad41d29158ae7602a2d6cd415e8351ebc283df54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121a96eb372713255012e028cb2654d493a0b4b35faae176f99b745eda2967199cc93685bb537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d0007ae4e1e347c0cff28235a6bb7aa3804b907a8f2880c5cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec64fa6c718bbd1aa591140cff0be4c6f8df084c5e9734ae30aa9afdc7125f01ab03a9b1074407136b4506000f0916aada035df2e0452a9b39e73aeeb6eaf14652dda689e2051d9b7eb85f3f2d5ae2c51944da8d7391d5b6b97419a3b76600cd1aa0afe5f8f46df4c5124ca425d374b419a6248029d33d61dd5c844024ba757371867a79b31c6617fc3327191fbf514573f1e30d1fd2d763f3ee9218b15c1d60be2168fffcd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc97def5f07f2980005a4f81a9cf8110971b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c4407eca22debc99335583b00013c3130978fa069af8223b38ced735c2d90c6d84c30a0d87d42647489b39601be5c27696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c534187a6240412c8f283cc0c1eba2866dc9580000000000000007fffffffff554b82d9c162f3556076b80552d961ca74f1ffdaccf0ea5f02e03a9ccb9087e6c3b3917bb74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb01efada800e50000000000fdaf2f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433d866665b98ca2002c836e89feef904c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc8d0834fb8d124638fec58faeb4c16abb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a68d2bb2dd163e863314e8449801b52bb93f6c9084659ce777dda8563c859656a357770289a61faa95a82bf1cfb7f2f97252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b00110635376413c29f7c6f7b7e29b9f4bddd5e328661f4615e627a6f608ad53a4168fe8e5d7d934aa289b4bd2b870000000000000000000000000000bc4b4ff50000009b777883a02ffd92dfc4cb4114b9f9cf4ad155110cd3ace2b322ae31bfa27847c799c8869a1ea5b98e525e6383ad7fd9795170e7b11e247603000000001459c7f606d721d3979676bffb3049166ab84ac1061991bd57c2566c10c296352a5105b6164e3f2491e4793e590dcc71f110da96366c40dd44a2c9882d3aa0f8a797b8fea6efcfb5276b7679f15559cdaabf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22adef9546abb7a2d9c085b189b5fd1f30e4e0c13f60870fde1f88d830b11002135e8e7262f29b6d7923bfbe0bd2a8be179e56b41ff3792cee2fc37eee739c3008ce740d8804f8e705f0dc59d000021363e8df94ff175b48dc8c12def681a11647946595445bf1cb7d2778cd27a6b3b2966b08be600000020a8a711d193bae0ab2db9ed9c6cb3c3de42ab89524414cae922141f7baf17ebb790ad60bd03870c39d1ad12c750837e63f9880fd70259e35590afb4843cd4e9989398eaa89cefb3aa13cab8d015cbaf1561d95362decd73b8f8cbf8269cac091cfaaa3c7e46d6e79145fc0f1d1b383752ccb40515a772356d746914540216adf4c0f44f1cff3760afa252720ec6dad3a98671ecdaff46cddffb1f05a0c0976070d603a442d014822369fa3eacbb69bd1b0a074357acd5d02161fed146ad3aa15d2b8101b7bd1e091ada78ecd50181f4b35cae1b29aff91494c916323b61f815c4e0701657087ad11eef97952921365bc898ba2c76a9b6e0052f43b1ad2dfdf3f958fc1d32e692bc8846c78a956ada453c67c1c2cdc4f8b1c94e9adc106e85b31e030d955c5578e107a6e8ca0d4dd05344c3e2af25d9a3b0f7805624016aeab271a75f0bacb101a103ef8948064569154a7de08f80e4df4c339b69431b0a5671097d89212b465b0b32275deae10a77e334c9fc074d181bdeb5be80a6249d472e78e6be57a5ccd354cf181e099605a644ecade221a2be926210b2690d09e4b7a3dea25403397439979c27d5613262de08bacecfff2d58437f422df4252c018795310c25e8fce18ed366ac2caade564ca869727a7d63c26271e17d7aba48971835530311545273d3caadeb5d2017dcddab8f38f2068f68a4111ddd587b5df4b5d8f1ce00231a2092eb2e797c491a1e66f73606fd95bbe0f10521862b6262f0259da51ff7517ace7361460a4669a97f7d0bf095c2787f00bdbfee19670d1e0ec5e6c3cb09972fa4d94993157b96d6695177c99d83716651129320924352cda7b8ead91c3301af620c1e8d703dd29ad77f54836779600bb0db3ecfbd36fa8164999898e4aaa56324e1c03a74daf593f92a8ecc03f8c8e3af9ae07dc03780cc0d69da9e3528c1693fb51998731992ceb27dcc0be5be4decefe41b78bc1847bf54b087e095172f06cfa6d4bf958b1d4544947ff1230655199db4f475006047fe83caca97758dffa53cee764f85932eb20d54241b2d515c0826dfe1f0f40ae920455a4548fb35e2a345c05b1c252b7877bb3d834b0b3579a36249146f832ef258df5127318c7017ac1a996c4f902f82deb60fd113ccf812d55ffd625057bd4ff3960992b85bc8d30edfca386be16b1c549aec52e31e1405f86c7760282901750b732ec06b0db735222a730000000000000000001ed58cd2c684667178576dbb57345b63c313e4a8fcfefe511e084c24b31a2e693946748bb73511695bc0eec1553b0f67d50678fb29ad13d2104fdd7a992574d475d3e51652fb3fda6a9fc0458f10b6d121bd48664858b51a9054d7c1d310af6a043e4b99472fbff86fea83924059419d54f07da0b6b7d6e6d61e680f151b0e"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
r2 = socket$kcm(0x29, 0x5, 0x0)
sendmmsg$inet(r2, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000b00)="9756628e1eb99d795be1b194687cebdb3ea9606c401cbc4767e4745dea8017930412c4f0bd207c69529325a599046ec9d93729589c406a395c4c89e16a65b9cbac020e805edb29649e4b0579ec7011d9169d2f0316e70484e4b8c6432f8538917be1fd8ff7a418f9e5b4f685ab954a07b33f40b4875b207d5085566da6c6027b49a0542b3641e902c59ace31a3d8fbc7d3a995a5eaea920e772762c93aba830aadb97a01a049162d1052b2da1ef931d943", 0xb1}], 0x1}}], 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1})
write(r2, 0x0, 0x0)

34.008364593s ago: executing program 3:
r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0)
mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000a, 0x12, r0, 0x0)

33.914692961s ago: executing program 3:
syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYRES64=0x0, @ANYBLOB="c3649be801cfa9d37b32e5a81bd8ef65d2d6ae7c55dce6f28d147bd4743ac27b", @ANYRES16, @ANYBLOB="91f895dd7ebcc2b83a83fb121e4e844e5d7a09e7d4a4979f3fdfe200b83e593144c1cf15b5624e3448b3b40065bc381005ed653b2e5aeafdfb38eeddb8c08b04fb2e46eba33d22f32db6a9608832f35ee976140648653030c5dd9306f90fc9f46534c6d9f2b37f945ba052c7197494046b00916b8f07b5b9f05f77f79225aa0700a01e414c5352def7a6078229384108c95320a4abf33afd65548efaf0b3dc54c4c10995d3e08a9017ae0c8828c59983d23cf29ff4ff4a16908f199ba7"], 0x1, 0x556c, &(0x7f000000b980)="$eJzs3MtvG0UYAPBZp2npkwhxgFNXqpASqbbqtKngFqAVD5Eq4nHgVBzbsdza3ih2nJATEhxRD/wnCCROHPkbOHDmhjiAuCGBvLMmhPIosvNqfz9p/e3Mjr+dWa1afbuRA/DEmkt/+SkJl8LZEMJMCOFCEvL9pNhyyzE8F0K4HEIo/WlLiv4/Ok6HEM6FEC6NksecSX7o7vMxy5s/f/3tmVPnP//quyNaMnAMvBBC6G7E/e1ujFkrxntFf23YzmP3xrCI8UD3ftHOYtxuruUZtmvjcbU8Xm/F8dnGVn8U1zu1+ii22ut5/0YvnrA/bI3z5F+4V9vM243mWh7b/SyPrd04r53d+G/bbn8Q8zSKfB/m6cNgMI6xv7nTjOvZuJ/Hem9Q9Me8WaO5M4rDIhanC/Ws08jnsTbJlT7e3mr3tnbSYXOz38566VKl+mKlerNc3cwazUHzRrnWbdy8kc63OqNh5UGz1l1uZVmr06zUs+5COt+q18vVajp/q7nWrvXSarVyvXKtvLRQ7F1NX7vzXtpppPOj+Eq7t3W63emn69lmGr+xkC5Wrr+0kF6ppu+srKarb9++vbL67t1b7995eeWNV4tBD00rnV+8trhYrl4rL1YXjsH6R//vPuL6B5Os/5Ni0v9j/clklwf+3d4N9uBI5wFwgjxU/4eDqv9D+Ozq8MrSj+p/YGtf6yTW/2Ga9f+opFL//3f9W5q8/p+o/j2u9f8JXj9MxAMmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAn1vezX7ye78zF9vmi/2LR9UzRTkIIpRDCb39jJpzel3OmyDP7D+Nn/zKHb5KQZxid40yxnQshLBfbr08f9FUAAACAx9eXH11+EKv1+DF31BPiMMWHNqULH0wpXxJCmJ37YUrZSqOPZ6eULL+/T4WdKWXLH2A9NaVk8ZHbqWlleyQz4/Dxxb3OfEFJDKVDnQ4AAHAoZvaFw61CAAAAOEyf7m9O7bUWx1wSxq8yx++C87+837sHzu47BgAAAJxAyVFPAAAAADhwef3v9/8AAADg8RZ//w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+J2du7lRG4gCAPxscID8KCjKPV3knBuUkRJyzDFQQJqgBNJCGkApgdy2hBWssEdoba0ldrGXXfR9kgeeMW9mgMubQQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPv0v1vM/v778br9iclKe3f483c0IAAAAaNoW63n5ZFrF79L5D+nUpxRnEZFHxEO1+yDe1HIOUp6i5fqiMYa/EWWGQx+jdLyNiG/puP3Y96cAAAAA12uzXM2qar1qppceEM+pWrTJ33/vKF8WEcX0pqNs+aH53FGy8vc9jJ/HeD96ZILaCle5gDXuaGjVktvwhG67M6g9pJmMF+WXWEZ5P/0CAACXVK8EWqoQAAAArsCPp7+1+UduXpZ/X+9HzT297Ngc9xnTrmjaEJzUIgAAAOAVyi49AAAAAKB3Zf3v/n8AAABw3ar7/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCnbbGeb5arWdvrixPz7Pbn6W5GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcMf+vKNACIRBGOxd35nM/Q8rDRoam1SB8PE3BgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG9+95f/E1PjTDL32lh6HknWTo2tU2Pv3Dj6w/j6NQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/vzkgIhEARRMGf876Tvf1hJ0DOIEAENjypq0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF/3ul/8TU+NMMnfaWDoeSdauGltXjb0HjaMH4+3fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzv3zxtHEQUA/O3e7eUPoBiDXBhQkCigIfYlJKSEAmRR8BGQLOccDA6BxAWJLJAbqJDrNAhKhJBApst3SB1LaUKXwoWRqIN2b9deJ4acEmv34vx+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFS23o9X0zLu5IeJYVy9dnt7dSHvNx/oczfX70znLY+TR030/XsHn/wYS7rxWv385FTt5Nvm8wEAAOAQ2qcY71T1fUTczTbm8j6dKOr/rLomr/l/emHvEA/W/Zvbq0fLL01X9f+ff9x7eWeiieE8+aCLS8uD2YdT6R7UMp82Jx55Rbe488XvXjrFG5J+tPbSVlbcz+SHW7c+6BXhkSayBQAex6mqL4Pq56G877eZGADPjG6t8K7q/85EuzkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANGFrLZ6r4iQipru7cW5ze3Vhv/7m+p3pqp27cWO9PmY+RBYRi0vLg6zBtYy7q9eufz6/vDy40nxwMiLam70MPhnhmoj/v6b8eEZ7q/jvIBmPNFoN0vL9GZd8doP7JyKebJzqs3fwGbb0DQkAgEMrK1te19/NNuby15LJiPs/763/36zFMWL9f+/Tc7frc9Xr/35jKxx/MyuXvpy5eu3620uX5i8OLg6+eOd0/93+mfNnz56fye/V7MxipIPZttMEAADgKdYrW73+Tycf3v8/XotjxPr/qx/739Tn6qj/97W76dd2JgAAAM+i3k704uv//J3sc0XS68XX8ysrV/rD48756eGx0XQf05Gy1ev/zmTbWQEAAABN2FpL9uz/X6jFMeL+//O/vPJbfcxORByLuBwRg1MLl5cvNLecsdbE3zkXE/XaXikAAABtOVa2+v5/Vjz/n+488pBGxFtvDOPqf12NUv93Pvzu1/pc9ef/zzS3xLGUTg3vR9FPRXSn2s4IAACAw+xo2fJi/69sY+6z349/3PP8PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDT/g0AAP//SAE1oA==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10000)
mkdirat(r1, &(0x7f0000000200)='./bus/file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
renameat2(r1, &(0x7f0000000240)='./bus/file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x0)

33.732230897s ago: executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xbb}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x238a38489021d4b8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

33.55162988s ago: executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
mkdir(&(0x7f0000000540)='./file0\x00', 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="1e03800e3c5c980128876360864668f82ffdd569d2f630b5e033ff11edf1c5ffc733d2acb165fe588cd568cd1f31b87b68b00ad88864"], 0xffdd)
r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
listen(r5, 0x0)

33.518300096s ago: executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x15, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f900001ab703000008000000b704000000001500850000003300000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

31.940031304s ago: executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x7b, &(0x7f0000000500)=""/4062, &(0x7f00000004c0)=0xfde)

31.76995926s ago: executing program 0:
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x38)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000007c0)=[@in={0x2, 0x0, @private}], 0x10)

31.599181841s ago: executing program 2:
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40010)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000002340)=ANY=[@ANYBLOB="1802000001000000000000008bb800008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000000000d6be14b869d629ccdf1129d7ef8b5c84248f4eadaf78135f38550a4f6442a91416c561e37ef69e1676f0cda86c84d3154a94ca6da0178f0008000000000000abab67fd1e3fb70d6c7d201a51095598045dd93957b0a44c925ebd84c281770fce74a36b234637ffa53a31b3b54330d4121d"], &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x13, 0xe, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000"], &(0x7f0000000540)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x32, r1, 0x8, &(0x7f00000005c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0xa, 0x4, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000b80)=[r0, r1, 0xffffffffffffffff, r0], &(0x7f0000000bc0)=[{0x0, 0x1, 0x4, 0xa}, {0x0, 0x4, 0x2, 0x3}, {0x1, 0x3, 0x7, 0x8}, {0x1, 0x3, 0x8, 0x9}, {0x1, 0x1, 0x10}], 0x10, 0x3}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000020000000850000002a0000009500008000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000400)="e0b9547ed387dbe9abc89b6f5b7e", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

31.560354585s ago: executing program 0:
r0 = io_uring_setup(0x2ad, &(0x7f0000000500))
io_setup(0x1, &(0x7f00000004c0)=<r1=>0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
io_getevents(r1, 0x1, 0x1, &(0x7f0000000180)=[{}], 0x0)

31.170281076s ago: executing program 2:
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0xffffffb6, 0xffffffff})
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

31.150988134s ago: executing program 0:
socket$alg(0x26, 0x5, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0)

31.035965129s ago: executing program 2:
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r0, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10)
connect$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private}}}, 0x108)
write$binfmt_script(r1, &(0x7f0000000140), 0x4)
sendfile(r0, r1, &(0x7f0000000000), 0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

30.945728142s ago: executing program 4:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x7b, &(0x7f0000000500)=""/4062, &(0x7f00000004c0)=0xfde)

30.76209265s ago: executing program 4:
add_key$fscrypt_v1(0x0, &(0x7f0000000140)={'fscrypt:', @desc1}, 0x0, 0x0, 0xfffffffffffffffd)
r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x0, 0x11, r2, 0x0)
mprotect(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x4)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'vlan0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000280)="363c8f1fca5d66d08e583e7c88a8de0688a8", 0x12, 0x0, &(0x7f0000000000)={0x11, 0x0, r4}, 0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, <r6=>0x0}, &(0x7f0000000080)=0xc)
syz_emit_ethernet(0x7f, &(0x7f0000000300)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x16, 0x4, 0x1, 0x7, 0x71, 0x67, 0x0, 0x1, 0x5c, 0x0, @rand_addr=0x64010101, @broadcast, {[@timestamp_addr={0x44, 0x2c, 0xe8, 0x1, 0xa, [{@multicast1, 0x3}, {@loopback, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0xffff05bb}, {@multicast2, 0xffffffff}, {@broadcast, 0x12}]}, @cipso={0x86, 0xb, 0x3, [{0x7, 0x2}, {0x2, 0x3, "a5"}]}, @timestamp={0x44, 0xc, 0xb2, 0x0, 0x3, [0x10001, 0x2]}]}}, "65d5ee5ac96ac865d38e9758ecebb6eff0faaa260d443a6dd0"}}}}, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2800060, &(0x7f0000000240)={[{@uid={'uid', 0x3d, r6}}]})
chdir(&(0x7f0000000100)='./file0\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket(0xa, 0x3, 0x6)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c)

30.668917922s ago: executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private}, @TCA_CT_NAT_PORT_MIN={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)

30.619417747s ago: executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000009c0), 0x20000000, 0x12}, 0x20)

30.497018177s ago: executing program 1:
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300), 0x48)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000300)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
ioctl$AUTOFS_IOC_CATATONIC(r1, 0x800443d2, 0x20000000)

30.438196745s ago: executing program 4:
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40010)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000002340)=ANY=[@ANYBLOB="1802000001000000000000008bb800008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000000000d6be14b869d629ccdf1129d7ef8b5c84248f4eadaf78135f38550a4f6442a91416c561e37ef69e1676f0cda86c84d3154a94ca6da0178f0008000000000000abab67fd1e3fb70d6c7d201a51095598045dd93957b0a44c925ebd84c281770fce74a36b234637ffa53a31b3b54330d4121d"], &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x13, 0xe, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000"], &(0x7f0000000540)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x32, r1, 0x8, &(0x7f00000005c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0xa, 0x4, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000b80)=[r0, r1, 0xffffffffffffffff, r0], &(0x7f0000000bc0)=[{0x0, 0x1, 0x4, 0xa}, {0x0, 0x4, 0x2, 0x3}, {0x1, 0x3, 0x7, 0x8}, {0x1, 0x3, 0x8, 0x9}, {0x1, 0x1, 0x10}], 0x10, 0x3}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000020000000850000002a0000009500008000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000400)="e0b9547ed387dbe9abc89b6f5b7e", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

30.308735579s ago: executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00'}, 0x70)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x2, 0x0, @void}, 0x10)
socket$inet6_sctp(0xa, 0x801, 0x84)

30.186479284s ago: executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x1c, 0x0, @gue={{0x2, 0x0, 0x0, 0x7}, "7292faf490a783232d213d44"}}}}}}, 0x0)

30.108846396s ago: executing program 4:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20, 0x20}}, 0x1c}}, 0x0)

30.064926312s ago: executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x1c8, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x1a8, 0x1a, 0x0, 0x1, [@AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x8, 0x21}, {0x8, 0x18}, {0x8, 0x3}, {0x8, 0x9}, {0x8, 0xc}, {0x8, 0x12}, {0x8, 0x1f}]}}, @AF_INET6={0x60, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0xfffffffffffffdb3, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_BRIDGE={0x4}, @AF_MPLS, @AF_INET6={0x2c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x56, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_BRIDGE]}]}, 0x1c8}}, 0x0)

30.019346661s ago: executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
close(r2)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x2e)
ioctl$PPPIOCGL2TPSTATS(r4, 0x40047459, 0x0)
socket(0x0, 0x2, 0x6)
creat(0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x4b)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f00000003c0)=' hash=', 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000100), 0x64, 0x51d, &(0x7f0000000a80)="$eJzs3U9oJFkZAPCvOt1xMpPdZNWDLrjuuiuZQac72bi7wcO6guhpQV3vY0w6IaSTDunO7iQsmsGDR0FEBU968SJ48iTIgBePIgzoWVFRRGf0IKhTS3dXMpmkupOZ6Uln0r8fVOrVqz/f9zpUdb3qoiqAofV8RLwREXfTNL0SERNZfSEbYrcztJa7c/vdhdaQRJq+9Y8kkqxub1tJNr6UrXYhIr78hYivJUfjNrZ3VudrtepmNl1prm1UGts7V1fW5pery9X12dmZV+dem3tlbrov7RyPiNc/95fvffsnn3/9l59854/X/nb56620XsjmH2zHAyr2mtlpeqn9WRxcYfMhg51FxXYLM2N5S4wcqbnxmHMCACBf6xz//RHxsYi4EhMx0vt0FgAAAHgCpZ8Zj/8lEWm+0S71AAAAwBOk0L43NimUs3sBxqNQKJc79/B+MC4WavVG8xNL9a31xc49tJNRKiyt1KrT2b3Ck1FKWtMz7fK96ZcPTc9GxDMR8d2JsfZ0eaFeWxz0xQ8AAAAYEpcO9f//PdHp/wMAAADnzOSgEwAAAAAeO/1/AAAAOP/0/wEAAOBc++Kbb7aGdO/914tvb2+t1t++ulhtrJbXthbKC/XNjfJyvb7cfmbf2nHbq9XrG5+K9a3rlWa10aw0tneurdW31pvXVu57BTYAAABwip756M3fJxGx++mx9tAyerJVT7gYcFYV90tJNs7Zrf/wdGf851NKCjgVI4NOABiY4qATAAamNOgEgIFLjpnf9ead32TjF/qbDwAA0H9TH+7++3+h55q7vWcDZ56dGIaX3/9heLWv+5/0Tl4nC3CulJwBwNB75N//j5WmD5QQAADQd+PtISmUs8t741EolMsRT7VfC1BKllZq1emIeDoifjdRel9reqa9ZnJsnwEAAAAAAAAAAAAAAAAAAAAAAAAA6EjTJFIAAADgXIso/DX5VedZ/lMTL40fvj4wmvxnIrJXhL7zw7e+f32+2dycadX/c7+++YOs/uVBXMEAAACAoVB8kIX3+ul7/XgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Kc7t99d2BtOM+7fPxsRk3nxi3GhPb4QpYi4+K8kigfWSyJipA/xx1p/PpQXP2mltR8yL/5YH+Lv3ugZPyazTyEv/qU+xIdhdrN1/Hkjb/8rxPPtcf7+V4y4b/phdT/+xf7xb6TL/v/UCWM8e+tnla7xb0Q8W8w//uzFT7rEfzFvgz//1pGqr35lZ6db/PRHEVO53z/JfbEqzbWNSmN75+rK2vxydbm6Pjs78+rca3OvzE1XllZq1exvbozvfOQXd3u1/2KX+JPHtP+lnO2N5tT9/9b12x/oFEt58S+/mBP/1z/Oljgav5B99308K7fmT+2Vdzvlg5776W+f69X+xS7tP+7/f7nbRg+58qVv/umEiwIAp6CxvbM6X6tVN89todVLPwNpPGmF/6ZnIo3HW/hGXzeYpmna2qceYTtJnN6HkPROddBHJgAAoN/unfQPOhMAAAAAAAAAAAAAAAAAAAAYXqfxpLHDMXf3S0k/HqENAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAX7wUAAP//xRraIQ==")

1.121729627s ago: executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}]}]}, 0x28}}, 0x0)

1.002156903s ago: executing program 2:
syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYRES64=0x0, @ANYBLOB="c3649be801cfa9d37b32e5a81bd8ef65d2d6ae7c55dce6f28d147bd4743ac27b", @ANYRES16, @ANYBLOB="91f895dd7ebcc2b83a83fb121e4e844e5d7a09e7d4a4979f3fdfe200b83e593144c1cf15b5624e3448b3b40065bc381005ed653b2e5aeafdfb38eeddb8c08b04fb2e46eba33d22f32db6a9608832f35ee976140648653030c5dd9306f90fc9f46534c6d9f2b37f945ba052c7197494046b00916b8f07b5b9f05f77f79225aa0700a01e414c5352def7a6078229384108c95320a4abf33afd65548efaf0b3dc54c4c10995d3e08a9017ae0c8828c59983d23cf29ff4ff4a16908f199ba7"], 0x1, 0x556c, &(0x7f000000b980)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10000)
mkdirat(r1, &(0x7f0000000200)='./bus/file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
renameat2(r1, &(0x7f0000000240)='./bus/file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x0)

646.113394ms ago: executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='global_dirty_state\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r3, &(0x7f0000000180), 0x40010)

48.900355ms ago: executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x2c, r1, 0x31d, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}]}, 0x2c}}, 0x0)

0s ago: executing program 4:
socket(0x2, 0x80805, 0x0)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38)
read$snapshot(r1, 0x0, 0xffffffbf)
read$rfkill(r1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)

kernel console output (not intermixed with test programs):

77.845936][ T9099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  277.846261][ T9357] XFS (loop3): Quotacheck needed: Please wait.
[  277.873172][ T9099] bond0 (unregistering): Released all slaves
[  277.916972][ T9357] XFS (loop3): Quotacheck: Done.
[  277.993338][ T1035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  278.034554][ T1035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  278.074086][ T6226] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  278.768437][ T9099] hsr_slave_0: left promiscuous mode
[  278.808861][ T9099] hsr_slave_1: left promiscuous mode
[  278.831470][ T9099] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  278.848100][ T9099] batman_adv: batadv0: Removing interface: batadv_slave_0
[  278.868184][ T9099] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  278.893323][ T9099] batman_adv: batadv0: Removing interface: batadv_slave_1
[  278.975214][   T29] audit: type=1326 audit(1718037422.362:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9411 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21ddc7cf69 code=0x0
[  279.036257][ T9099] veth1_macvtap: left promiscuous mode
[  279.062462][ T9099] veth0_macvtap: left promiscuous mode
[  279.081517][ T9099] veth1_vlan: left promiscuous mode
[  279.103403][ T9099] veth0_vlan: left promiscuous mode
[  279.211785][ T9397] loop2: detected capacity change from 0 to 32768
[  279.224481][ T9397] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (9397)
[  279.254867][ T9397] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  279.288663][ T9397] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  279.299571][ T9397] BTRFS info (device loop2): using free-space-tree
[  279.429283][ T9397] BTRFS info (device loop2): rebuilding free space tree
[  279.506312][ T9397] capability: warning: `syz-executor.2' uses 32-bit capabilities (legacy support in use)
[  279.627196][ T5102] Bluetooth: hci0: command tx timeout
[  279.693653][ T9163] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  280.035985][ T9415] loop3: detected capacity change from 0 to 256
[  280.064769][ T9415] exfat: Bad value for 'gid'
[  280.791164][ T9456] loop3: detected capacity change from 0 to 1024
[  280.864471][ T9099] team0 (unregistering): Port device team_slave_1 removed
[  280.930401][ T9099] team0 (unregistering): Port device team_slave_0 removed
[  281.561793][ T9339] chnl_net:caif_netlink_parms(): no params data found
[  281.708081][ T5102] Bluetooth: hci0: command tx timeout
[  281.742919][ T1106] hfsplus: b-tree write err: -5, ino 4
[  282.000488][ T9339] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.031519][ T9339] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.043484][ T9339] bridge_slave_0: entered allmulticast mode
[  282.051467][ T9339] bridge_slave_0: entered promiscuous mode
[  282.063952][ T9339] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.075700][ T9339] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.096910][ T9339] bridge_slave_1: entered allmulticast mode
[  282.106367][ T9339] bridge_slave_1: entered promiscuous mode
[  282.156185][ T9339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  282.173102][ T9339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  282.225044][ T9339] team0: Port device team_slave_0 added
[  282.238553][ T9339] team0: Port device team_slave_1 added
[  282.283623][ T9339] batman_adv: batadv0: Adding interface: batadv_slave_0
[  282.296767][ T9339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  282.327020][ T9339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  282.340766][ T9339] batman_adv: batadv0: Adding interface: batadv_slave_1
[  282.348634][ T9339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  282.379391][ T9339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  282.439493][ T9339] hsr_slave_0: entered promiscuous mode
[  282.447734][ T9339] hsr_slave_1: entered promiscuous mode
[  282.456292][ T9339] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  282.464655][ T9339] Cannot create hsr debugfs directory
[  282.806110][ T9484] loop2: detected capacity change from 0 to 64
[  282.855370][ T9487] netlink: 'syz-executor.3': attribute type 5 has an invalid length.
[  282.952451][ T9490] loop1: detected capacity change from 0 to 64
[  283.104303][ T9482] ubi: mtd0 is already attached to ubi0
[  283.138533][ T9495] syzkaller0: entered promiscuous mode
[  283.144324][ T9495] syzkaller0: entered allmulticast mode
[  283.416946][ T9339] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  283.446005][ T9339] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  283.473804][ T9339] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  283.502186][ T9339] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  283.690496][   T29] audit: type=1800 audit(1718037427.082:983): pid=9506 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1959 res=0 errno=0
[  283.787106][ T5102] Bluetooth: hci0: command tx timeout
[  283.933380][ T9339] 8021q: adding VLAN 0 to HW filter on device bond0
[  283.985404][ T9339] 8021q: adding VLAN 0 to HW filter on device team0
[  284.040678][  T784] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.047989][  T784] bridge0: port 1(bridge_slave_0) entered forwarding state
[  284.126601][ T5240] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.134182][ T5240] bridge0: port 2(bridge_slave_1) entered forwarding state
[  284.576384][ T9339] 8021q: adding VLAN 0 to HW filter on device batadv0
[  285.064488][ T9339] veth0_vlan: entered promiscuous mode
[  285.084321][ T9339] veth1_vlan: entered promiscuous mode
[  285.161262][ T9339] veth0_macvtap: entered promiscuous mode
[  285.211711][ T9339] veth1_macvtap: entered promiscuous mode
[  285.261621][ T9339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  285.288500][ T9339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.317065][ T9339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  285.329747][ T9339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.341481][ T9339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  285.352138][ T9339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.364105][ T9339] batman_adv: batadv0: Interface activated: batadv_slave_0
[  286.372096][ T9339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  286.383138][ T9339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.394613][ T9339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  286.406316][ T9339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.417303][ T9339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  286.442067][ T9339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.452568][ T9339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  286.465303][ T9339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.484147][ T9339] batman_adv: batadv0: Interface activated: batadv_slave_1
[  286.539436][ T9339] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  286.584743][ T9339] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  286.605423][ T9339] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  286.614754][ T9339] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  286.740962][ T9569] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  287.002862][ T9577] loop1: detected capacity change from 0 to 128
[  287.067506][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  287.092566][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  287.166181][ T9099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  287.183291][ T9099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  287.229472][ T9584] loop1: detected capacity change from 0 to 64
[  287.378224][ T9588] smc: net device ip6tnl0 applied user defined pnetid SYZ2
[  287.667649][ T9600] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  287.970463][ T9607] x_tables: duplicate underflow at hook 2
[  288.323599][ T9597] loop2: detected capacity change from 0 to 32768
[  288.436243][ T9597] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (9597)
[  288.487015][ T9597] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  288.525617][ T9597] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  288.544333][ T9597] BTRFS info (device loop2): using free-space-tree
[  288.600849][ T9633] netlink: 'syz-executor.1': attribute type 11 has an invalid length.
[  288.901022][   T29] audit: type=1326 audit(1718037432.292:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9596 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff81947cf69 code=0x0
[  289.393094][ T9163] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  290.574400][ T5102] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  290.575261][ T9671] xt_addrtype: ipv6 does not support BROADCAST matching
[  290.833426][ T9681] loop0: detected capacity change from 0 to 64
[  291.246963][ T9695] syzkaller0: entered promiscuous mode
[  291.252619][ T9695] syzkaller0: entered allmulticast mode
[  291.288625][   T29] audit: type=1326 audit(1718037434.679:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9696 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81947cf69 code=0x7ffc0000
[  291.324768][   T29] audit: type=1326 audit(1718037434.709:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9696 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81947cf69 code=0x7ffc0000
[  291.351944][   T29] audit: type=1326 audit(1718037434.709:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9696 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff81947cf69 code=0x7ffc0000
[  291.432838][   T29] audit: type=1326 audit(1718037434.759:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9696 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81947cf69 code=0x7ffc0000
[  291.522041][   T29] audit: type=1326 audit(1718037434.759:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9696 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81947cf69 code=0x7ffc0000
[  291.592518][   T29] audit: type=1326 audit(1718037434.769:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9696 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff81947cf69 code=0x7ffc0000
[  291.662100][   T29] audit: type=1326 audit(1718037434.769:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9696 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81947cf69 code=0x7ffc0000
[  291.700957][ T9710] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  291.720918][   T29] audit: type=1326 audit(1718037434.769:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9696 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff81947a6e7 code=0x7ffc0000
[  291.757516][   T29] audit: type=1326 audit(1718037434.769:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9696 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff8194403d9 code=0x7ffc0000
[  292.171970][ T9707] loop0: detected capacity change from 0 to 32768
[  292.505679][ T9744] loop4: detected capacity change from 0 to 4096
[  292.520812][ T9744] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512).
[  292.576048][ T9744] ntfs3: loop4: failed to convert "c46c" to cp862
[  294.440692][ T9800] loop1: detected capacity change from 0 to 8192
[  294.470722][ T9806] loop3: detected capacity change from 0 to 256
[  296.005085][   T29] kauditd_printk_skb: 100 callbacks suppressed
[  296.005108][   T29] audit: type=1800 audit(1718037439.359:1094): pid=9816 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048794 res=0 errno=0
[  296.031877][    C0] vkms_vblank_simulate: vblank timer overrun
[  296.341171][ T9819] loop1: detected capacity change from 0 to 256
[  296.369219][ T9821] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de
[  296.758520][ T9833] loop4: detected capacity change from 0 to 4096
[  296.791966][ T9833] ntfs3: loop4: try to read out of volume at offset 0x1ffc00
[  296.807208][ T9833] ntfs3: loop4: Failed to load $MFT.
[  297.210034][ T9845] Bluetooth: MGMT ver 1.22
[  297.937020][ T9847] loop1: detected capacity change from 0 to 256
[  298.327109][ T9854] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de
[  298.544334][   T29] audit: type=1800 audit(1718037441.779:1095): pid=9855 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1963 res=0 errno=0
[  298.564364][    C0] vkms_vblank_simulate: vblank timer overrun
[  299.166211][ T9837] loop2: detected capacity change from 0 to 32768
[  299.339752][ T9837] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names
[  299.354936][ T9837] bcachefs (loop2): recovering from clean shutdown, journal seq 8
[  299.382544][ T9835] loop0: detected capacity change from 0 to 32768
[  299.391379][ T9835] bcachefs (/dev/loop0): error reading superblock: error opening /dev/loop0: EACCES
[  299.403518][ T9869] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  299.434479][ T9851] loop3: detected capacity change from 0 to 32768
[  299.462739][ T9837] bcachefs (loop2): alloc_read... done
[  299.474081][ T9837] bcachefs (loop2): stripes_read... done
[  299.507148][ T9837] bcachefs (loop2): snapshots_read... done
[  299.515491][ T9837] bcachefs (loop2): journal_replay... done
[  299.547174][ T9837] bcachefs (loop2): resume_logged_ops... done
[  299.558870][ T9837] bcachefs (loop2): going read-write
[  299.597355][ T9837] bcachefs (loop2): done starting filesystem
[  299.649151][ T9837] bcachefs (loop2): dirent points to inode that does not point back:
[  299.649151][ T9837]   u64s 7 type dirent 4096:6783475523080972787:U32_MAX len 0 ver 0: file1 -> 4101 type reg
[  299.649151][ T9837]   inum: 4101   mode=100755
[  299.649151][ T9837]   flags= (15300000)
[  299.649151][ T9837]   journal_seq=4
[  299.649151][ T9837]   bi_size=10
[  299.649151][ T9837]   bi_sectors=8
[  299.649151][ T9837]   bi_version=0
[  299.649151][ T9837]   bi_atime=2336883131
[  299.649151][ T9837]   bi_ctime=2346883235
[  299.649151][ T9837]   bi_mtime=2336883131
[  299.649151][ T9837]   bi_otime=2336883131
[  299.649151][ T9837]   bi_uid=0
[  299.649151][ T9837]   bi_gid=256
[  299.649151][ T9837]   bi_nlink=0
[  299.649151][ T9837]   bi_generation=0
[  299.649151][ T9837]   bi_dev=0
[  299.649151][ T9837]   bi_data_checksum=0
[  299.649151][ T9837]   bi_compression=0
[  299.649151][ T9837]   bi_project=0
[  299.649151][ T9837]   bi_background_compression=0
[  299.649151][ T9837]   bi_data_replicas=0
[  299.649151][ T9837]   bi_promote_target=0
[  299.649151][ T9837]   bi_foreground_target=0
[  299.649151][ T9837]   bi_background_target=0
[  299.649151][ T9837]   bi_erasure_code=0
[  299.649151][ T9837]   bi_fields_set=4096
[  299.649151][ T9837]   bi_dir=6783475523080972787
[  299.649151][ T9837]   bi_dir_offset=0
[  299.649151][ T9837]   bi_subvol=0
[  299.649151][ T9837]   bi_parent_subvol=0
[  299.649151][ T9837]   bi_nocow=0
[  299.649151][ T9837] 
[  299.782847][    C0] vkms_vblank_simulate: vblank timer overrun
[  299.888092][    T9] bcachefs (loop2): going read-only
[  299.888210][ T9876] loop4: detected capacity change from 0 to 8192
[  299.893786][    T9] bcachefs (loop2): finished waiting for writes to stop
[  299.952530][ T9837] bcachefs (loop2): inconsistency detected - emergency read only at journal seq 8
[  300.004089][    T9] bcachefs (loop2): flushing journal and stopping allocators, journal seq 8
[  300.023800][    T9] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 8
[  300.057426][    T9] bcachefs (loop2): unshutdown complete, journal seq 8
[  300.065522][    T9] bcachefs (loop2): done going read-only, filesystem not clean
[  300.100958][ T9163] bcachefs (loop2): shutting down
[  300.170142][ T9884] loop0: detected capacity change from 0 to 4096
[  300.238410][ T9163] bcachefs (loop2): shutdown complete
[  300.536415][   T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.829112][   T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.114130][   T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.263483][ T9891] loop1: detected capacity change from 0 to 32768
[  301.281715][ T9891] XFS: noikeep mount option is deprecated.
[  301.329914][ T9906] Smack: duplicate mount options
[  301.485048][   T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.530412][ T4478] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  301.542638][ T4478] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  301.553163][ T4478] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  301.571516][ T4478] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  301.581917][ T4478] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  301.597270][ T4478] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  301.863964][ T9904] loop0: detected capacity change from 0 to 32768
[  301.895608][ T9904] bcachefs (/dev/loop0): error reading superblock: error opening /dev/loop0: EACCES
[  302.045378][ T9916] loop1: detected capacity change from 0 to 512
[  302.327478][ T9927] ntfs3: nullb0: Primary boot signature is not NTFS.
[  302.339901][ T4478] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  302.347497][ T9927] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00
[  302.366681][ T4478] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  302.381464][ T4478] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  302.393012][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  302.408030][   T35] bridge_slave_1: left allmulticast mode
[  302.427093][ T4478] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  302.440331][   T35] bridge_slave_1: left promiscuous mode
[  302.446400][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.454222][ T4478] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  302.471310][   T35] bridge_slave_0: left allmulticast mode
[  302.479911][ T4478] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  302.520697][   T35] bridge_slave_0: left promiscuous mode
[  302.527099][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  302.744964][   T35] ip6gretap0 (unregistering): left promiscuous mode
[  302.782380][ T5110] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  302.835330][ T9938] ubi: mtd0 is already attached to ubi0
[  303.046649][ T5110] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  303.079216][ T5110] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  303.103984][ T5110] usb 2-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00
[  303.113499][ T5110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.146298][ T5110] usb 2-1: config 0 descriptor??
[  303.584821][ T9943] loop0: detected capacity change from 0 to 32768
[  303.598311][ T9943] XFS: noikeep mount option is deprecated.
[  303.627569][ T5102] Bluetooth: hci3: command tx timeout
[  303.829061][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  303.874591][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  303.902707][   T35] bond0 (unregistering): Released all slaves
[  303.972240][ T9907] chnl_net:caif_netlink_parms(): no params data found
[  304.534960][ T9907] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.560128][ T9907] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.572536][ T9907] bridge_slave_0: entered allmulticast mode
[  304.582798][ T9907] bridge_slave_0: entered promiscuous mode
[  304.590931][ T5102] Bluetooth: hci0: command tx timeout
[  304.615335][ T9907] bridge0: port 2(bridge_slave_1) entered blocking state
[  304.654400][ T9907] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.671343][ T9907] bridge_slave_1: entered allmulticast mode
[  304.678379][ T9961] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  304.691938][ T9907] bridge_slave_1: entered promiscuous mode
[  304.706120][ T9959] loop2: detected capacity change from 0 to 512
[  304.742031][ T9959] EXT4-fs (loop2): filesystem is read-only
[  304.749568][   T35] batadv_slave_0: left promiscuous mode
[  304.770273][ T9959] EXT4-fs (loop2): filesystem is read-only
[  304.776156][ T9959] EXT4-fs (loop2): orphan cleanup on readonly fs
[  304.811779][   T35] hsr_slave_0: left promiscuous mode
[  304.821530][ T9959] EXT4-fs error (device loop2): ext4_quota_enable:7030: comm syz-executor.2: Bad quota inum: 16777216, type: 0
[  304.853468][   T35] hsr_slave_1: left promiscuous mode
[  304.857663][ T9959] EXT4-fs warning (device loop2): ext4_enable_quotas:7078: Failed to enable quota tracking (type=0, err=-117, ino=16777216). Please run e2fsck to fix.
[  304.874717][ T9959] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  304.881770][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  304.882928][ T9959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  304.894477][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  305.033037][ T9163] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.043062][   T35] veth1_macvtap: left promiscuous mode
[  305.056779][   T35] veth0_macvtap: left promiscuous mode
[  305.065405][   T35] veth1_vlan: left promiscuous mode
[  305.081321][   T35] veth0_vlan: left promiscuous mode
[  305.875725][ T5102] Bluetooth: hci3: command tx timeout
[  306.112941][ T5110] usbhid 2-1:0.0: can't add hid device: -71
[  306.123823][ T5110] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  306.134572][ T5110] usb 2-1: USB disconnect, device number 5
[  306.637280][ T9971] loop2: detected capacity change from 0 to 32768
[  306.660796][ T9983] ax25_connect(): syz-executor.1 uses autobind, please contact jreuter@yaina.de
[  306.667780][ T5102] Bluetooth: hci0: command tx timeout
[  306.816141][ T9971] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=crc64,background_compression=zstd,str_hash=crc32c,nojournal_transaction_names
[  306.834103][ T9971] bcachefs (loop2): recovering from clean shutdown, journal seq 8
[  307.039401][ T9971] bcachefs (loop2): alloc_read... done
[  307.050563][ T9971] bcachefs (loop2): stripes_read... done
[  307.056499][ T9971] bcachefs (loop2): snapshots_read... done
[  307.070647][ T9971] bcachefs (loop2): journal_replay... done
[  307.322993][ T9971] bcachefs (loop2): resume_logged_ops... done
[  307.419458][ T9971] bcachefs (loop2): going read-write
[  307.511357][ T9971] bcachefs (loop2): done starting filesystem
[  307.929840][   T35] team0 (unregistering): Port device team_slave_1 removed
[  307.955551][ T5102] Bluetooth: hci3: command tx timeout
[  308.062587][ T9163] bcachefs (loop2): shutting down
[  308.072385][   T35] team0 (unregistering): Port device team_slave_0 removed
[  308.074378][ T9163] bcachefs (loop2): going read-only
[  308.109226][ T9163] bcachefs (loop2): finished waiting for writes to stop
[  308.155726][ T9163] bcachefs (loop2): flushing journal and stopping allocators, journal seq 10
[  308.257166][ T9163] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 11
[  308.276639][ T9163] bcachefs (loop2): shutdown complete, journal seq 12
[  308.284270][ T9163] bcachefs (loop2): marking filesystem clean
[  308.327419][ T9163] bcachefs (loop2): shutdown complete
[  308.748297][ T5102] Bluetooth: hci0: command tx timeout
[  309.174178][ T9973] vlan2: entered promiscuous mode
[  309.261927][ T9907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  309.303317][ T9907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  309.419212][ T9907] team0: Port device team_slave_0 added
[  309.494040][ T9907] team0: Port device team_slave_1 added
[  309.625219][ T9907] batman_adv: batadv0: Adding interface: batadv_slave_0
[  309.657616][ T9907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  309.727054][ T9907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  309.768819][ T9907] batman_adv: batadv0: Adding interface: batadv_slave_1
[  309.791712][ T9907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  309.874027][ T9907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  309.936938][ T9926] chnl_net:caif_netlink_parms(): no params data found
[  310.028807][ T5102] Bluetooth: hci3: command tx timeout
[  310.101885][ T4478] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  310.122588][ T4478] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  310.132088][ T4478] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  310.156823][ T4478] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  310.173304][ T4478] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  310.181848][ T4478] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  310.313822][ T9907] hsr_slave_0: entered promiscuous mode
[  310.356282][T10030] loop2: detected capacity change from 0 to 1024
[  310.368424][T10030] EXT4-fs (loop2): invalid inodes per group: 4278190112
[  310.368424][T10030] 
[  310.371194][ T9907] hsr_slave_1: entered promiscuous mode
[  310.404848][ T9907] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  310.416773][ T9907] Cannot create hsr debugfs directory
[  310.477955][T10030] loop2: detected capacity change from 0 to 16
[  310.521300][T10030] erofs: (device loop2): mounted with root inode @ nid 36.
[  310.552978][T10030] erofs: (device loop2): erofs_find_target_block: corrupted dir block 0 @ nid 36
[  310.707725][ T9926] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.715429][ T9926] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.722915][ T9926] bridge_slave_0: entered allmulticast mode
[  310.731004][ T9926] bridge_slave_0: entered promiscuous mode
[  310.786383][   T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.815112][ T9926] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.823200][ T9926] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.830629][ T5102] Bluetooth: hci0: command tx timeout
[  310.837041][ T9926] bridge_slave_1: entered allmulticast mode
[  310.846102][ T9926] bridge_slave_1: entered promiscuous mode
[  310.925908][   T29] audit: type=1326 audit(1718037454.309:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10039 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd78327cf69 code=0x0
[  310.927276][   T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.983715][ T9926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  311.029167][ T9926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  311.117508][   T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.174042][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  311.287996][   T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.314559][ T9926] team0: Port device team_slave_0 added
[  311.326223][ T9926] team0: Port device team_slave_1 added
[  311.428347][ T9926] batman_adv: batadv0: Adding interface: batadv_slave_0
[  311.435381][ T9926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.461386][    C1] vkms_vblank_simulate: vblank timer overrun
[  311.472292][ T9926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  311.545245][ T9926] batman_adv: batadv0: Adding interface: batadv_slave_1
[  311.555043][ T9926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.582375][ T9926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  311.683474][ T9926] hsr_slave_0: entered promiscuous mode
[  311.699513][ T9926] hsr_slave_1: entered promiscuous mode
[  311.706295][ T9926] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  311.714232][ T9926] Cannot create hsr debugfs directory
[  311.768386][   T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.898267][T10055] loop0: detected capacity change from 0 to 2048
[  311.924706][   T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.945018][T10026] chnl_net:caif_netlink_parms(): no params data found
[  312.029561][T10057] autofs: Bad value for 'fd'
[  312.037213][   T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.178355][   T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.242111][T10063] loop2: detected capacity change from 0 to 512
[  312.262965][T10063] EXT4-fs (loop2): filesystem is read-only
[  312.268196][ T5102] Bluetooth: hci4: command tx timeout
[  312.285419][T10063] EXT4-fs (loop2): filesystem is read-only
[  312.295618][ T9907] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  312.296197][T10063] EXT4-fs (loop2): orphan cleanup on readonly fs
[  312.309935][T10063] EXT4-fs error (device loop2): ext4_quota_enable:7030: comm syz-executor.2: Bad quota inum: 16777216, type: 0
[  312.315352][ T9907] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  312.331735][T10063] EXT4-fs warning (device loop2): ext4_enable_quotas:7078: Failed to enable quota tracking (type=0, err=-117, ino=16777216). Please run e2fsck to fix.
[  312.348585][T10063] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  312.356718][T10063] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  312.441183][ T9163] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.556843][ T9907] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  313.208297][T10026] bridge0: port 1(bridge_slave_0) entered blocking state
[  313.215984][T10026] bridge0: port 1(bridge_slave_0) entered disabled state
[  313.246884][T10026] bridge_slave_0: entered allmulticast mode
[  313.266755][T10026] bridge_slave_0: entered promiscuous mode
[  313.307786][ T9907] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  313.395946][T10026] bridge0: port 2(bridge_slave_1) entered blocking state
[  313.403489][T10026] bridge0: port 2(bridge_slave_1) entered disabled state
[  313.411053][T10026] bridge_slave_1: entered allmulticast mode
[  313.422017][T10026] bridge_slave_1: entered promiscuous mode
[  313.422228][T10079] loop0: detected capacity change from 0 to 2048
[  313.521237][T10083] autofs: Bad value for 'fd'
[  313.647465][   T35] bridge_slave_1: left allmulticast mode
[  313.653684][   T35] bridge_slave_1: left promiscuous mode
[  313.691584][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  313.725008][   T35] bridge_slave_0: left allmulticast mode
[  313.731107][   T35] bridge_slave_0: left promiscuous mode
[  313.738704][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  313.772356][   T35] bridge_slave_1: left allmulticast mode
[  313.790433][   T35] bridge_slave_1: left promiscuous mode
[  313.796152][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  313.811917][   T35] bridge_slave_0: left allmulticast mode
[  313.818409][   T35] bridge_slave_0: left promiscuous mode
[  313.824995][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.347109][ T5102] Bluetooth: hci4: command tx timeout
[  315.079008][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  315.090107][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  315.100879][   T35] bond0 (unregistering): Released all slaves
[  315.281901][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  315.293781][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  315.304535][   T35] bond0 (unregistering): Released all slaves
[  315.322386][T10026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  315.335883][T10026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  315.561561][T10101] loop2: detected capacity change from 0 to 1024
[  315.570498][T10101] EXT4-fs (loop2): invalid inodes per group: 4278190112
[  315.570498][T10101] 
[  315.610366][T10026] team0: Port device team_slave_0 added
[  315.621453][T10026] team0: Port device team_slave_1 added
[  315.676130][T10026] batman_adv: batadv0: Adding interface: batadv_slave_0
[  315.693978][T10026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  315.695449][T10101] loop2: detected capacity change from 0 to 16
[  315.721583][T10026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  315.762166][T10101] erofs: (device loop2): mounted with root inode @ nid 36.
[  315.819849][T10026] batman_adv: batadv0: Adding interface: batadv_slave_1
[  315.830505][T10101] erofs: (device loop2): erofs_find_target_block: corrupted dir block 0 @ nid 36
[  315.842759][T10026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  315.896178][T10026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  316.119337][T10112] autofs: Bad value for 'fd'
[  316.344851][T10026] hsr_slave_0: entered promiscuous mode
[  316.367359][T10026] hsr_slave_1: entered promiscuous mode
[  316.373902][T10026] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  316.393337][T10026] Cannot create hsr debugfs directory
[  316.427713][ T5102] Bluetooth: hci4: command tx timeout
[  316.761109][   T35] hsr_slave_0: left promiscuous mode
[  316.768475][   T35] hsr_slave_1: left promiscuous mode
[  316.787591][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  316.795080][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  316.818948][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  316.826408][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  316.861159][   T35] hsr_slave_0: left promiscuous mode
[  316.867626][   T35] hsr_slave_1: left promiscuous mode
[  316.891591][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  316.899801][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  316.901974][T10118] loop0: detected capacity change from 0 to 32768
[  316.914753][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  316.923842][T10118] bcachefs (/dev/loop0): error reading superblock: error opening /dev/loop0: EACCES
[  316.926637][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  317.006413][   T35] veth1_macvtap: left promiscuous mode
[  317.026704][   T35] veth0_macvtap: left promiscuous mode
[  317.032482][   T35] veth1_vlan: left promiscuous mode
[  317.046755][   T35] veth0_vlan: left promiscuous mode
[  317.058425][   T35] veth1_macvtap: left promiscuous mode
[  317.074278][   T35] veth0_macvtap: left promiscuous mode
[  317.086823][   T35] veth1_vlan: left promiscuous mode
[  317.098006][   T35] veth0_vlan: left promiscuous mode
[  317.339464][T10122] loop0: detected capacity change from 0 to 1024
[  317.357660][T10122] EXT4-fs: Ignoring removed nobh option
[  317.644890][ T1249] ieee802154 phy0 wpan0: encryption failed: -22
[  317.651501][ T1249] ieee802154 phy1 wpan1: encryption failed: -22
[  318.361549][T10128] loop2: detected capacity change from 0 to 1024
[  318.386701][T10128] EXT4-fs (loop2): invalid inodes per group: 4278190112
[  318.386701][T10128] 
[  318.504539][T10128] loop2: detected capacity change from 0 to 16
[  318.513043][ T5102] Bluetooth: hci4: command tx timeout
[  318.532121][T10128] erofs: (device loop2): mounted with root inode @ nid 36.
[  318.557271][T10128] erofs: (device loop2): erofs_find_target_block: corrupted dir block 0 @ nid 36
[  318.863671][   T35] team0 (unregistering): Port device team_slave_1 removed
[  318.923420][   T35] team0 (unregistering): Port device team_slave_0 removed
[  320.091517][   T35] team0 (unregistering): Port device team_slave_1 removed
[  320.156600][   T35] team0 (unregistering): Port device team_slave_0 removed
[  320.437369][T10132] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  321.075859][ T9926] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  321.111144][T10130] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  321.126263][T10142] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  321.133695][ T9926] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  321.148698][ T9926] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  321.212336][ T9926] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  321.280950][ T9907] 8021q: adding VLAN 0 to HW filter on device bond0
[  321.457959][ T9907] 8021q: adding VLAN 0 to HW filter on device team0
[  321.655383][ T5240] bridge0: port 1(bridge_slave_0) entered blocking state
[  321.662724][ T5240] bridge0: port 1(bridge_slave_0) entered forwarding state
[  321.719954][ T5240] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.727233][ T5240] bridge0: port 2(bridge_slave_1) entered forwarding state
[  322.079988][ T9926] 8021q: adding VLAN 0 to HW filter on device bond0
[  322.193129][ T9926] 8021q: adding VLAN 0 to HW filter on device team0
[  322.307798][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state
[  322.314975][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state
[  322.357980][  T929] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.365183][  T929] bridge0: port 2(bridge_slave_1) entered forwarding state
[  322.641106][ T9907] 8021q: adding VLAN 0 to HW filter on device batadv0
[  322.656221][T10026] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  322.718037][T10026] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  322.781316][T10026] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  322.810201][T10026] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  322.869421][T10173] loop2: detected capacity change from 0 to 512
[  322.943818][T10173] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz-executor.2: invalid block
[  322.963932][T10173] EXT4-fs (loop2): Remounting filesystem read-only
[  322.971684][T10173] EXT4-fs (loop2): 2 truncates cleaned up
[  322.981392][T10173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  322.982302][ T9907] veth0_vlan: entered promiscuous mode
[  323.029954][ T9163] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.094116][ T9907] veth1_vlan: entered promiscuous mode
[  323.180093][ T9926] 8021q: adding VLAN 0 to HW filter on device batadv0
[  323.293970][ T9907] veth0_macvtap: entered promiscuous mode
[  323.326799][  T929] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  323.327571][ T9907] veth1_macvtap: entered promiscuous mode
[  323.343008][T10183] loop2: detected capacity change from 0 to 1024
[  323.382935][T10026] 8021q: adding VLAN 0 to HW filter on device bond0
[  323.409965][ T9907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  323.440919][ T9907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.461259][ T9907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  323.476614][ T9907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.508861][ T9907] batman_adv: batadv0: Interface activated: batadv_slave_0
[  323.531999][T10026] 8021q: adding VLAN 0 to HW filter on device team0
[  323.553539][  T929] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  323.564875][ T9907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  323.582451][  T929] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  323.596355][ T9907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.616975][  T929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.626335][ T9907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  323.646870][ T9907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.647616][  T929] usb 1-1: config 0 descriptor??
[  323.665990][ T9907] batman_adv: batadv0: Interface activated: batadv_slave_1
[  323.667011][   T11] hfsplus: b-tree write err: -5, ino 4
[  323.726104][ T5110] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.733323][ T5110] bridge0: port 1(bridge_slave_0) entered forwarding state
[  323.773911][ T5110] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.781120][ T5110] bridge0: port 2(bridge_slave_1) entered forwarding state
[  323.872546][ T9907] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  323.882882][ T9907] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  323.892696][ T9907] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  323.901882][ T9907] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  324.009275][ T9926] veth0_vlan: entered promiscuous mode
[  324.096496][ T9926] veth1_vlan: entered promiscuous mode
[  324.118847][  T929] ath6kl: Unsupported hardware version: 0x0
[  324.139334][  T929] ath6kl: Failed to init ath6kl core: -22
[  324.158135][ T2481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.159158][  T929] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -22
[  324.165978][ T2481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.291392][ T9926] veth0_macvtap: entered promiscuous mode
[  324.320845][ T9926] veth1_macvtap: entered promiscuous mode
[  324.331221][  T929] usb 1-1: USB disconnect, device number 2
[  324.337853][ T2910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.355384][ T2910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.431690][ T9926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  324.449947][ T9926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.463713][ T9926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  324.483896][ T9926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.494591][ T9926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  324.505380][ T9926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.517227][ T9926] batman_adv: batadv0: Interface activated: batadv_slave_0
[  324.573664][ T9926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  324.604131][ T9926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.633281][ T9926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  324.656294][ T9926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.679151][ T9926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  324.700872][ T9926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.722131][ T9926] batman_adv: batadv0: Interface activated: batadv_slave_1
[  324.779577][ T9926] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  324.806979][ T9926] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  324.815732][ T9926] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  324.834282][ T9926] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  324.877909][T10026] 8021q: adding VLAN 0 to HW filter on device batadv0
[  324.920589][T10212] loop3: detected capacity change from 0 to 8192
[  325.029310][T10212] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  325.067004][T10212] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  325.101952][T10212]  loop3: p2 p3 p4
[  325.106415][T10212] loop3: partition table partially beyond EOD, truncated
[  325.125488][ T2481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  325.136928][T10212] loop3: p2 start 452985600 is beyond EOD, truncated
[  325.151912][T10222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  325.159976][ T2481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.163585][T10212] loop3: p3 size 33554432 extends beyond EOD, truncated
[  325.190514][T10212] loop3: p4 start 8388607 is beyond EOD, truncated
[  325.220006][T10026] veth0_vlan: entered promiscuous mode
[  325.244020][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  325.248635][T10026] veth1_vlan: entered promiscuous mode
[  325.274035][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.391413][T10026] veth0_macvtap: entered promiscuous mode
[  325.439327][T10026] veth1_macvtap: entered promiscuous mode
[  325.537302][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.566778][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.598669][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.631622][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.636286][T10232] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'.
[  325.662366][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.684048][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.705157][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.727195][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.758174][T10026] batman_adv: batadv0: Interface activated: batadv_slave_0
[  325.795429][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.828597][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.856873][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.876759][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.896597][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.915067][T10220] loop0: detected capacity change from 0 to 32768
[  325.923091][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.936136][T10220] XFS: noikeep mount option is deprecated.
[  325.942178][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.952872][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.965070][T10026] batman_adv: batadv0: Interface activated: batadv_slave_1
[  326.015299][T10026] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  326.030095][T10026] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  326.056804][T10026] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  326.065555][T10026] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  326.445687][ T2924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.470829][ T2924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.500616][ T2481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.518951][ T2481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.591381][T10256] loop0: detected capacity change from 0 to 128
[  326.613134][T10256] efs: Unknown parameter 'iocharset'
[  326.622890][T10259] ntfs3: nullb0: Primary boot signature is not NTFS.
[  326.637977][T10259] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00
[  326.795468][T10261] loop3: detected capacity change from 0 to 4096
[  326.849783][T10261] NILFS (loop3): invalid segment: Checksum error in segment payload
[  326.868582][T10261] NILFS (loop3): trying rollback from an earlier position
[  326.903648][T10269] loop1: detected capacity change from 0 to 1024
[  326.915495][T10261] NILFS (loop3): recovery complete
[  326.928121][T10270] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  326.957270][T10269] EXT4-fs: Ignoring removed nobh option
[  327.257086][ T5212] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  327.475131][ T5212] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  327.682132][ T5212] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  327.850935][ T5212] usb 1-1: New USB device found, idVendor=08b7, idProduct=0200, bcdDevice= 0.00
[  327.890540][ T5212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  327.898708][T10280] sctp: [Deprecated]: syz-executor.3 (pid 10280) Use of struct sctp_assoc_value in delayed_ack socket option.
[  327.898708][T10280] Use struct sctp_sack_info instead
[  327.917103][ T5212] usb 1-1: SerialNumber: syz
[  328.147765][T10267] loop0: detected capacity change from 0 to 512
[  328.473938][ T5212] usb 1-1: 0:2 : does not exist
[  328.500715][ T5212] usb 1-1: USB disconnect, device number 3
[  328.953103][T10294] pim6reg1: entered promiscuous mode
[  328.961753][T10294] pim6reg1: entered allmulticast mode
[  329.264698][T10302] netlink: 'syz-executor.2': attribute type 30 has an invalid length.
[  329.464952][T10308] loop4: detected capacity change from 0 to 4096
[  329.514629][T10308] NILFS (loop4): invalid segment: Checksum error in segment payload
[  329.540993][T10308] NILFS (loop4): trying rollback from an earlier position
[  329.602509][T10308] NILFS (loop4): recovery complete
[  329.626670][T10319] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  329.889626][T10305] loop3: detected capacity change from 0 to 32768
[  329.994841][T10305] XFS (loop3): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  330.040547][ T5212] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  330.128447][T10305] XFS (loop3): Ending clean mount
[  330.147229][T10305] XFS (loop3): Quotacheck needed: Please wait.
[  330.228685][ T5212] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  330.240326][ T5212] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  330.251720][ T5212] usb 3-1: New USB device found, idVendor=08b7, idProduct=0200, bcdDevice= 0.00
[  330.256791][T10305] XFS (loop3): Quotacheck: Done.
[  330.270403][ T5212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  330.284594][ T5212] usb 3-1: SerialNumber: syz
[  330.358217][ T9907] XFS (loop3): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  330.544317][T10322] loop2: detected capacity change from 0 to 512
[  330.683420][T10322] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6
[  330.771022][T10347] loop1: detected capacity change from 0 to 32768
[  330.780012][T10347] bcachefs (/dev/loop1): error reading superblock: error opening /dev/loop1: EACCES
[  331.114211][ T5212] usb 3-1: 0:2 : does not exist
[  331.143250][ T5212] usb 3-1: USB disconnect, device number 11
[  331.234867][T10358] loop4: detected capacity change from 0 to 1024
[  331.256684][T10358] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  331.400619][T10361] loop0: detected capacity change from 0 to 4096
[  331.536322][ T9926] hfsplus: bad catalog entry type
[  331.741885][ T9926] hfsplus: bad catalog entry type
[  332.456338][   T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.768459][   T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.863328][T10375] loop3: detected capacity change from 0 to 4096
[  333.021063][   T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.139191][ T4478] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  333.157902][ T4478] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  333.168941][ T4478] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  333.182719][T10364] loop1: detected capacity change from 0 to 32768
[  333.196215][ T4478] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  333.210190][ T4478] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  333.218607][ T4478] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  333.308751][   T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.400231][T10368] loop2: detected capacity change from 0 to 32768
[  333.493830][T10368] XFS (loop2): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  333.532786][T10364] overlayfs: overlapping lowerdir path
[  333.677967][T10368] XFS (loop2): Ending clean mount
[  333.690169][T10368] XFS (loop2): Quotacheck needed: Please wait.
[  333.805218][T10368] XFS (loop2): Quotacheck: Done.
[  333.871168][T10399] loop0: detected capacity change from 0 to 256
[  333.915836][   T35] bridge_slave_1: left allmulticast mode
[  333.932028][T10399] exfat: Deprecated parameter 'utf8'
[  333.939388][ T9163] XFS (loop2): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  333.955091][   T35] bridge_slave_1: left promiscuous mode
[  333.961645][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.986388][   T35] bridge_slave_0: left allmulticast mode
[  333.994147][   T35] bridge_slave_0: left promiscuous mode
[  334.000136][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.293953][   T29] audit: type=1326 audit(1718037477.679:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10407 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd78327cf69 code=0x0
[  334.704849][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  334.717158][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  334.727972][   T35] bond0 (unregistering): Released all slaves
[  334.745733][T10377] chnl_net:caif_netlink_parms(): no params data found
[  334.764730][T10395] pim6reg1: entered promiscuous mode
[  334.776692][T10395] pim6reg1: entered allmulticast mode
[  334.990894][T10419] batadv_slave_0: entered allmulticast mode
[  335.019296][T10419] batadv_slave_0: left allmulticast mode
[  335.168117][   T29] audit: type=1326 audit(1718037478.559:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10421 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc7d87cf69 code=0x0
[  335.206200][T10429] loop0: detected capacity change from 0 to 256
[  335.226404][T10430] loop1: detected capacity change from 0 to 512
[  335.267719][   T35] hsr_slave_0: left promiscuous mode
[  335.274056][   T35] hsr_slave_1: left promiscuous mode
[  335.306920][ T5102] Bluetooth: hci0: command tx timeout
[  335.317547][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  335.341362][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  335.364368][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  335.382826][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  335.429205][   T35] veth1_macvtap: left promiscuous mode
[  335.434878][   T35] veth0_macvtap: left promiscuous mode
[  335.440985][   T35] veth1_vlan: left promiscuous mode
[  335.446325][   T35] veth0_vlan: left promiscuous mode
[  336.116370][   T35] team0 (unregistering): Port device team_slave_1 removed
[  336.173464][   T35] team0 (unregistering): Port device team_slave_0 removed
[  336.802024][T10377] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.809740][T10377] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.818040][T10377] bridge_slave_0: entered allmulticast mode
[  336.825392][T10377] bridge_slave_0: entered promiscuous mode
[  336.835608][T10377] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.844339][T10377] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.851822][T10377] bridge_slave_1: entered allmulticast mode
[  336.860226][T10377] bridge_slave_1: entered promiscuous mode
[  336.921289][T10377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  336.957473][T10377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  337.024777][T10377] team0: Port device team_slave_0 added
[  337.041372][T10377] team0: Port device team_slave_1 added
[  337.065498][T10377] batman_adv: batadv0: Adding interface: batadv_slave_0
[  337.072650][T10377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  337.098739][T10377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  337.114927][T10377] batman_adv: batadv0: Adding interface: batadv_slave_1
[  337.123402][T10377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  337.150726][T10377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  337.200557][T10377] hsr_slave_0: entered promiscuous mode
[  337.210567][T10377] hsr_slave_1: entered promiscuous mode
[  337.217036][T10377] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  337.224583][T10377] Cannot create hsr debugfs directory
[  337.386834][ T5102] Bluetooth: hci0: command tx timeout
[  337.619575][T10377] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  337.630312][T10377] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  337.642688][T10377] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  337.652328][T10377] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  337.724368][T10377] 8021q: adding VLAN 0 to HW filter on device bond0
[  337.757956][T10377] 8021q: adding VLAN 0 to HW filter on device team0
[  337.774231][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.781472][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  337.796160][ T5212] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.803337][ T5212] bridge0: port 2(bridge_slave_1) entered forwarding state
[  337.963417][T10377] 8021q: adding VLAN 0 to HW filter on device batadv0
[  338.140171][T10377] veth0_vlan: entered promiscuous mode
[  338.153399][T10377] veth1_vlan: entered promiscuous mode
[  338.186588][T10377] veth0_macvtap: entered promiscuous mode
[  338.203857][T10377] veth1_macvtap: entered promiscuous mode
[  338.220335][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.230859][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.241121][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.251946][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.261853][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.272426][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.283540][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.297209][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.308462][T10377] batman_adv: batadv0: Interface activated: batadv_slave_0
[  338.323442][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.334253][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.345470][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.356157][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.366124][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.377921][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.388072][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.399538][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.410999][T10377] batman_adv: batadv0: Interface activated: batadv_slave_1
[  338.424189][T10377] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  338.433215][T10377] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  338.442128][T10377] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  338.451177][T10377] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  338.536175][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  338.546994][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  338.572829][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  338.580929][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  338.868639][T10447] loop4: detected capacity change from 0 to 32768
[  338.880936][T10447] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  338.918535][T10447] XFS (loop4): Ending clean mount
[  338.930701][T10447] XFS (loop4): Quotacheck needed: Please wait.
[  338.973255][T10447] XFS (loop4): Quotacheck: Done.
[  339.010204][   T29] audit: type=1326 audit(1718037482.399:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07dfa7cf69 code=0x7ffc0000
[  339.039683][   T29] audit: type=1326 audit(1718037482.399:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07dfa7cf69 code=0x7ffc0000
[  339.072158][   T29] audit: type=1326 audit(1718037482.399:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f07dfa7cf69 code=0x7ffc0000
[  339.106364][T10377] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  339.108297][   T29] audit: type=1326 audit(1718037482.399:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07dfa7cf69 code=0x7ffc0000
[  339.143724][   T29] audit: type=1326 audit(1718037482.399:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f07dfa7cf69 code=0x7ffc0000
[  339.167242][   T29] audit: type=1326 audit(1718037482.399:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07dfa7cf69 code=0x7ffc0000
[  339.189646][   T29] audit: type=1326 audit(1718037482.399:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f07dfa7cf69 code=0x7ffc0000
[  339.215107][   T29] audit: type=1326 audit(1718037482.399:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07dfa7cf69 code=0x7ffc0000
[  339.467021][ T5102] Bluetooth: hci0: command tx timeout
[  340.582256][T10460] loop1: detected capacity change from 0 to 256
[  340.702722][T10467] loop0: detected capacity change from 0 to 1024
[  340.726493][T10467] EXT4-fs: Ignoring removed nobh option
[  340.747177][T10472] batadv_slave_0: entered allmulticast mode
[  340.789468][T10472] batadv_slave_0: left allmulticast mode
[  341.606942][ T5102] Bluetooth: hci0: command tx timeout
[  341.724450][ T5143] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  341.778842][T10470] loop4: detected capacity change from 0 to 8192
[  341.856654][   T29] kauditd_printk_skb: 34 callbacks suppressed
[  341.856675][   T29] audit: type=1804 audit(1718037485.229:1141): pid=10477 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="bus" dev="sda1" ino=1967 res=1 errno=0
[  341.934153][ T5143] usb 2-1: Using ep0 maxpacket: 16
[  341.942077][ T5143] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  341.991336][ T5143] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  342.032250][ T5143] usb 2-1: New USB device found, idVendor=051a, idProduct=a4a1, bcdDevice= 0.40
[  342.087883][ T5143] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  342.103556][ T5143] usb 2-1: SerialNumber: syz
[  342.128588][ T5143] cdc_acm 2-1:1.0: Control and data interfaces are not separated!
[  342.139899][ T5143] cdc_acm 2-1:1.0: This needs exactly 3 endpoints
[  342.146485][ T5143] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22
[  342.339713][T10469] loop3: detected capacity change from 0 to 32768
[  342.381507][ T5144] usb 2-1: USB disconnect, device number 6
[  342.394348][T10469] XFS (loop3): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  342.457999][T10487] loop4: detected capacity change from 0 to 4096
[  342.481754][T10469] XFS (loop3): Ending clean mount
[  342.507523][T10469] XFS (loop3): Quotacheck needed: Please wait.
[  342.596275][T10469] XFS (loop3): Quotacheck: Done.
[  342.665294][ T9907] XFS (loop3): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  343.140291][   T29] audit: type=1326 audit(1718037486.519:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10493 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc7d87cf69 code=0x0
[  343.174095][T10496] loop4: detected capacity change from 0 to 64
[  343.327373][T10506] rdma_op ffff88802e2a39f0 conn xmit_rdma 0000000000000000
[  343.413409][    T9] kernel write not supported for file /audio1 (pid: 9 comm: kworker/0:1)
[  343.927046][   T29] audit: type=1326 audit(1718037487.319:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10523 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78327cf69 code=0x7ffc0000
[  344.028238][   T29] audit: type=1326 audit(1718037487.369:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10523 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78327cf69 code=0x7ffc0000
[  344.085627][   T29] audit: type=1326 audit(1718037487.379:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10523 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fd78327cf69 code=0x7ffc0000
[  344.121601][T10533] loop4: detected capacity change from 0 to 64
[  344.143395][T10515] loop1: detected capacity change from 0 to 32768
[  344.159048][   T29] audit: type=1326 audit(1718037487.379:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10523 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78327cf69 code=0x7ffc0000
[  344.182056][T10515] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (10515)
[  344.201356][   T29] audit: type=1326 audit(1718037487.379:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10523 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78327cf69 code=0x7ffc0000
[  344.237704][T10515] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  344.248161][T10515] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  344.256965][T10515] BTRFS info (device loop1): using free-space-tree
[  344.346850][    T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  344.492097][T10026] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  344.567911][    T9] usb 1-1: Using ep0 maxpacket: 16
[  344.590136][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  344.611171][T10529] loop3: detected capacity change from 0 to 32768
[  344.641387][    T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  344.652053][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  344.662526][    T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  344.720628][    T9] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  344.794986][    T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  345.376909][T10529] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  345.464739][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  345.473198][    T9] usb 1-1: SerialNumber: syz
[  345.481055][T10531] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  345.492327][    T9] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12
[  345.753197][ T5144] usb 1-1: USB disconnect, device number 4
[  345.778438][T10529] XFS (loop3): Ending clean mount
[  345.858684][T10529] XFS (loop3): Quotacheck needed: Please wait.
[  345.867471][   T29] audit: type=1326 audit(1718037489.199:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10573 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07dfa7cf69 code=0x0
[  345.971077][T10529] XFS (loop3): Quotacheck: Done.
[  346.045103][ T9907] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  346.962666][T10589] can0: slcan on ttyS3.
[  347.098152][T10587] can0 (unregistered): slcan off ttyS3.
[  347.233517][T10610] loop4: detected capacity change from 0 to 512
[  347.258519][T10610] EXT4-fs (loop4): blocks per group (255) and clusters per group (8192) inconsistent
[  347.434711][T10619] Zero length message leads to an empty skb
[  347.898038][T10605] loop1: detected capacity change from 0 to 32768
[  349.239028][   T29] audit: type=1800 audit(1718037492.629:1149): pid=10637 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1953 res=0 errno=0
[  349.300419][T10635] can0: slcan on ttyS3.
[  349.311834][   T29] audit: type=1800 audit(1718037492.639:1150): pid=10637 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1953 res=0 errno=0
[  349.439238][T10634] can0 (unregistered): slcan off ttyS3.
[  349.626402][T10652] loop3: detected capacity change from 0 to 1024
[  349.695195][T10652] hfsplus: request for non-existent node 3 in B*Tree
[  349.713884][T10652] hfsplus: request for non-existent node 3 in B*Tree
[  349.727306][T10652] hfsplus: catalog searching failed
[  350.853754][T10645] loop0: detected capacity change from 0 to 32768
[  351.197631][T10664] loop1: detected capacity change from 0 to 32768
[  352.577021][T10715] loop3: detected capacity change from 0 to 32768
[  352.592399][T10715] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (10715)
[  352.639584][T10715] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  352.656817][T10715] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  352.685065][T10715] BTRFS info (device loop3): using free-space-tree
[  352.812620][T10715] BTRFS info (device loop3): checking UUID tree
[  353.090514][ T9907] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  353.459624][   T29] audit: type=1326 audit(1718037496.839:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10770 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd78327cf69 code=0x0
[  353.772861][T10750] loop4: detected capacity change from 0 to 32768
[  353.880360][   T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.945439][T10750] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  354.191067][   T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.239568][T10750] XFS (loop4): Ending clean mount
[  354.251352][T10750] XFS (loop4): Quotacheck needed: Please wait.
[  354.445750][   T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.472977][T10750] XFS (loop4): Quotacheck: Done.
[  354.565005][ T4478] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  354.596760][ T4478] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  354.609710][ T4478] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  354.629351][ T4478] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  354.646615][ T4478] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  354.656511][ T4478] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  354.696771][   T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.736384][T10778] loop3: detected capacity change from 0 to 32768
[  354.747642][T10778] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (10778)
[  354.782671][T10799] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'.
[  354.793051][T10778] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  354.803491][T10377] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  354.818912][T10799] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  354.838765][T10778] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  354.845529][T10799] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  354.857370][T10799] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'.
[  354.865209][T10778] BTRFS info (device loop3): using free-space-tree
[  355.283440][T10778] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  355.356977][   T35] bridge_slave_1: left allmulticast mode
[  355.369819][   T35] bridge_slave_1: left promiscuous mode
[  355.396800][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.421213][   T29] audit: type=1326 audit(1718037498.809:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10825 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81947cf69 code=0x7ffc0000
[  355.422102][   T35] bridge_slave_0: left allmulticast mode
[  355.483103][   T35] bridge_slave_0: left promiscuous mode
[  355.507165][   T29] audit: type=1326 audit(1718037498.809:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10825 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81947cf69 code=0x7ffc0000
[  355.514070][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.594871][   T29] audit: type=1326 audit(1718037498.809:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10825 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff81947cf69 code=0x7ffc0000
[  355.654915][   T29] audit: type=1326 audit(1718037498.809:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10825 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81947cf69 code=0x7ffc0000
[  355.663468][T10821] loop4: detected capacity change from 0 to 2048
[  355.708628][   T29] audit: type=1326 audit(1718037498.809:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10825 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81947cf69 code=0x7ffc0000
[  355.722719][T10821] EXT4-fs: Ignoring removed mblk_io_submit option
[  355.755570][   T29] audit: type=1326 audit(1718037498.839:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10825 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff81947cf69 code=0x7ffc0000
[  355.804668][   T29] audit: type=1326 audit(1718037498.839:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10825 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81947cf69 code=0x7ffc0000
[  355.852490][T10821] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  355.879071][   T29] audit: type=1326 audit(1718037498.859:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10825 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff81947a6e7 code=0x7ffc0000
[  355.902955][   T29] audit: type=1326 audit(1718037498.859:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10825 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff8194403d9 code=0x7ffc0000
[  355.926477][   T29] audit: type=1326 audit(1718037498.859:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10825 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff81947a6e7 code=0x7ffc0000
[  356.019005][T10843] loop3: detected capacity change from 0 to 8
[  356.028634][T10843] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  356.148677][T10827] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor.4: bg 0: block 234: padding at end of block bitmap is not set
[  356.185433][T10827] EXT4-fs (loop4): Remounting filesystem read-only
[  356.406306][T10377] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.746955][ T5102] Bluetooth: hci4: command tx timeout
[  356.974044][T10857] loop4: detected capacity change from 0 to 32768
[  356.983049][T10857] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (10857)
[  357.000522][T10857] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  357.010897][T10857] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  357.011385][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  357.025614][T10857] BTRFS info (device loop4): using free-space-tree
[  357.039009][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  357.054406][   T35] bond0 (unregistering): Released all slaves
[  357.147222][T10858] can0: slcan on ttyS3.
[  357.201227][T10857] BTRFS info (device loop4): checking UUID tree
[  357.258282][T10794] chnl_net:caif_netlink_parms(): no params data found
[  357.327217][T10856] can0 (unregistered): slcan off ttyS3.
[  357.460006][T10377] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  357.972488][ T4478] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  357.982521][   T35] hsr_slave_0: left promiscuous mode
[  357.991988][ T4478] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  358.003511][ T4478] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  358.003773][   T35] hsr_slave_1: left promiscuous mode
[  358.045810][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  358.061475][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  358.072004][ T4478] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  358.095832][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  358.097107][ T4478] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  358.117573][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  358.118866][ T4478] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  358.227113][   T35] veth1_macvtap: left promiscuous mode
[  358.232712][   T35] veth0_macvtap: left promiscuous mode
[  358.267477][   T35] veth1_vlan: left promiscuous mode
[  358.273010][   T35] veth0_vlan: left promiscuous mode
[  358.388210][T10891] loop3: detected capacity change from 0 to 256
[  358.873682][ T5102] Bluetooth: hci4: command tx timeout
[  359.458852][T10899] input: syz1 as /devices/virtual/input/input14
[  360.268883][ T5102] Bluetooth: hci2: command tx timeout
[  360.794860][T10907] loop3: detected capacity change from 0 to 32768
[  360.817961][T10907] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (10907)
[  360.853845][T10907] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  360.856063][   T35] team0 (unregistering): Port device team_slave_1 removed
[  360.874262][T10907] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  360.895023][T10907] BTRFS info (device loop3): using free-space-tree
[  360.906923][ T5102] Bluetooth: hci4: command tx timeout
[  360.941529][   T35] team0 (unregistering): Port device team_slave_0 removed
[  361.050804][T10907] BTRFS info (device loop3): checking UUID tree
[  361.231331][ T9907] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  362.072833][T10934] loop3: detected capacity change from 0 to 32768
[  362.085324][T10934] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (10934)
[  362.113990][T10934] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  362.125859][T10934] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  362.144293][T10934] BTRFS info (device loop3): using free-space-tree
[  362.320062][T10939] xfrm0: entered allmulticast mode
[  362.344036][T10794] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.363291][ T5102] Bluetooth: hci2: command tx timeout
[  362.370429][T10794] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.381535][T10934] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  362.388741][T10794] bridge_slave_0: entered allmulticast mode
[  362.411353][T10794] bridge_slave_0: entered promiscuous mode
[  362.457120][T10794] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.464433][T10794] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.502640][T10794] bridge_slave_1: entered allmulticast mode
[  362.517919][T10794] bridge_slave_1: entered promiscuous mode
[  362.655651][T10961] input: syz1 as /devices/virtual/input/input15
[  362.718640][T10794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  362.751607][T10794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  362.957358][T10794] team0: Port device team_slave_0 added
[  362.989481][ T5102] Bluetooth: hci4: command tx timeout
[  362.998440][T10794] team0: Port device team_slave_1 added
[  363.090850][T10968] loop4: detected capacity change from 0 to 1024
[  363.203387][T10794] batman_adv: batadv0: Adding interface: batadv_slave_0
[  363.236378][T10794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  363.266036][T10794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  363.311274][T10794] batman_adv: batadv0: Adding interface: batadv_slave_1
[  363.326602][T10794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  363.432611][T10794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  363.490890][T10968] netlink: 'syz-executor.4': attribute type 35 has an invalid length.
[  364.241396][   T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.365380][T10794] hsr_slave_0: entered promiscuous mode
[  364.373842][T10794] hsr_slave_1: entered promiscuous mode
[  364.381053][T10794] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  364.391961][T10794] Cannot create hsr debugfs directory
[  364.428256][ T4478] Bluetooth: hci2: command tx timeout
[  364.438843][   T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.564555][T10886] chnl_net:caif_netlink_parms(): no params data found
[  365.022628][   T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.136348][T10985] loop4: detected capacity change from 0 to 128
[  365.172780][T10985] ADFS-fs (loop4): error: can't find an ADFS filesystem on dev loop4.
[  365.422370][   T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.517645][T10994] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  365.542095][T10993] loop4: detected capacity change from 0 to 256
[  365.709321][T10886] bridge0: port 1(bridge_slave_0) entered blocking state
[  365.716485][T10886] bridge0: port 1(bridge_slave_0) entered disabled state
[  365.733967][T10886] bridge_slave_0: entered allmulticast mode
[  365.743663][T10886] bridge_slave_0: entered promiscuous mode
[  365.752923][T10886] bridge0: port 2(bridge_slave_1) entered blocking state
[  365.760364][T10886] bridge0: port 2(bridge_slave_1) entered disabled state
[  365.767755][T10886] bridge_slave_1: entered allmulticast mode
[  365.775339][T10886] bridge_slave_1: entered promiscuous mode
[  365.819313][T11004] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  365.839720][T11006] trusted_key: syz-executor.2 sent an empty control message without MSG_MORE.
[  365.986124][T10886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  366.003971][T10886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  366.079058][T11014] fscrypt (sda1, inode 1954): Direct key flag not allowed with different contents and filenames modes
[  366.506731][ T4478] Bluetooth: hci2: command tx timeout
[  367.510118][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  367.530480][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  367.542507][   T35] bond0 (unregistering): Released all slaves
[  367.576100][T10886] team0: Port device team_slave_0 added
[  367.637373][T10886] team0: Port device team_slave_1 added
[  367.712314][T11042] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  367.751470][T11044] netlink: 'syz-executor.3': attribute type 5 has an invalid length.
[  367.980402][T10886] batman_adv: batadv0: Adding interface: batadv_slave_0
[  367.989706][T10886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  368.047807][T10886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  368.060029][T10886] batman_adv: batadv0: Adding interface: batadv_slave_1
[  368.076570][T10886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  368.116600][T10886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  368.607369][   T35] hsr_slave_0: left promiscuous mode
[  368.759042][T11058] loop3: detected capacity change from 0 to 32768
[  368.766092][   T35] hsr_slave_1: left promiscuous mode
[  368.779785][T11058] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (11058)
[  368.786751][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  368.811985][T11058] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  368.814237][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  368.831387][T11058] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  368.847794][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  368.851238][T11058] BTRFS info (device loop3): using free-space-tree
[  368.855222][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  368.920314][   T35] veth1_macvtap: left promiscuous mode
[  368.925977][   T35] veth0_macvtap: left promiscuous mode
[  368.931967][   T35] veth1_vlan: left promiscuous mode
[  368.937401][   T35] veth0_vlan: left promiscuous mode
[  369.131737][ T9907] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  369.967244][T11086] loop4: detected capacity change from 0 to 40427
[  370.016303][T11086] F2FS-fs (loop4): Found nat_bits in checkpoint
[  370.140490][T11086] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  370.212381][   T35] team0 (unregistering): Port device team_slave_1 removed
[  370.293885][T11086] syz-executor.4: attempt to access beyond end of device
[  370.293885][T11086] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  370.314818][T11086] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  370.317302][   T35] team0 (unregistering): Port device team_slave_0 removed
[  370.325343][T11086] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  370.878284][T11103] loop4: detected capacity change from 0 to 512
[  370.889748][T11103] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  370.900313][T11103] UDF-fs: Scanning with blocksize 512 failed
[  370.919520][T11103] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  370.927636][T11103] UDF-fs: Scanning with blocksize 1024 failed
[  370.945391][T11103] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  370.953014][T11103] UDF-fs: Scanning with blocksize 2048 failed
[  370.962485][T11103] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  370.975206][T11103] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  371.339065][T10886] hsr_slave_0: entered promiscuous mode
[  371.345383][T10886] hsr_slave_1: entered promiscuous mode
[  371.361811][T11094] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  371.557684][T10794] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  371.584010][T10794] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  371.639166][T10794] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  371.704319][T11117] devpts: called with bogus options
[  371.706457][T10794] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  372.183167][T10794] 8021q: adding VLAN 0 to HW filter on device bond0
[  372.218138][T11126] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  372.223919][T10794] 8021q: adding VLAN 0 to HW filter on device team0
[  372.251881][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state
[  372.259148][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state
[  372.285190][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state
[  372.292512][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state
[  372.301052][T11126] loop3: detected capacity change from 0 to 256
[  372.360181][T11126] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  372.441112][T11126] exFAT-fs (loop3): invalid start cluster (22)
[  372.455465][T11128] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  372.545667][T10794] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  372.563204][T10794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  372.612113][T10886] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  372.644751][T10886] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  372.673184][T10886] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  372.696477][T10886] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  372.970553][T11143] tc_dump_action: action bad kind
[  373.000385][T10886] 8021q: adding VLAN 0 to HW filter on device bond0
[  373.089542][T10886] 8021q: adding VLAN 0 to HW filter on device team0
[  373.102993][T10794] 8021q: adding VLAN 0 to HW filter on device batadv0
[  373.118452][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  373.125794][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  373.165065][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  373.172286][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  373.252660][   T29] kauditd_printk_skb: 61 callbacks suppressed
[  373.252677][   T29] audit: type=1326 audit(1718037516.639:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11152 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff81947cf69 code=0x0
[  373.304338][T10794] veth0_vlan: entered promiscuous mode
[  373.333185][T10794] veth1_vlan: entered promiscuous mode
[  373.439170][T10794] veth0_macvtap: entered promiscuous mode
[  373.461897][T10794] veth1_macvtap: entered promiscuous mode
[  373.496488][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  373.519998][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.532309][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  373.543249][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.554388][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  373.565261][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.576473][T10794] batman_adv: batadv0: Interface activated: batadv_slave_0
[  373.595464][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  373.607235][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.618168][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  373.634305][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.644301][T10794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  373.654974][T10794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.666964][T10794] batman_adv: batadv0: Interface activated: batadv_slave_1
[  373.680590][T10794] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  373.690498][T10794] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  373.699567][T10794] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  373.709906][T10794] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  373.783729][T10886] 8021q: adding VLAN 0 to HW filter on device batadv0
[  373.888614][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.912450][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.966968][T10886] veth0_vlan: entered promiscuous mode
[  373.984824][ T2910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.992572][T10886] veth1_vlan: entered promiscuous mode
[  374.010483][ T2910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.104945][T10886] veth0_macvtap: entered promiscuous mode
[  374.141978][T10886] veth1_macvtap: entered promiscuous mode
[  374.212101][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  374.232329][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.245758][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  374.264332][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.268028][T11170] loop3: detected capacity change from 0 to 256
[  374.278307][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  374.292958][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.308380][T11170] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe9e488b, utbl_chksum : 0xe619d30d)
[  374.316587][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  374.341588][T11170] exFAT-fs (loop3): error, invalid access to FAT bad cluster (entry 0x00000005)
[  374.343707][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.380737][T10886] batman_adv: batadv0: Interface activated: batadv_slave_0
[  374.391143][T11170] exFAT-fs (loop3): Filesystem has been set read-only
[  374.397024][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  374.422713][T11170] exFAT-fs (loop3): failed to initialize root inode
[  374.428749][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.451060][   T29] audit: type=1326 audit(1718037517.829:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11174 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6667cf69 code=0x7ffc0000
[  374.475408][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies.
[  374.497471][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  374.511640][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.521783][   T29] audit: type=1326 audit(1718037517.829:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11174 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6667cf69 code=0x7ffc0000
[  374.522893][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  374.572376][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.573969][   T29] audit: type=1326 audit(1718037517.829:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11174 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb6667cf69 code=0x7ffc0000
[  374.596619][T10886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  374.646616][   T29] audit: type=1326 audit(1718037517.829:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11174 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6667cf69 code=0x7ffc0000
[  374.646963][T10886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.691238][T10886] batman_adv: batadv0: Interface activated: batadv_slave_1
[  374.713232][T10886] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  374.731496][   T29] audit: type=1326 audit(1718037517.829:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11174 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6667cf69 code=0x7ffc0000
[  374.755285][T10886] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  374.755318][T10886] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  374.755338][T10886] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  374.874749][   T29] audit: type=1326 audit(1718037517.829:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11174 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb6667cf69 code=0x7ffc0000
[  374.945479][   T29] audit: type=1326 audit(1718037517.829:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11174 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6667cf69 code=0x7ffc0000
[  374.995405][   T29] audit: type=1326 audit(1718037517.839:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11174 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbb6667a6e7 code=0x7ffc0000
[  375.049556][ T9664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  375.081068][   T29] audit: type=1326 audit(1718037517.839:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11174 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb666403d9 code=0x7ffc0000
[  375.085603][ T9664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  375.119978][T11188] loop1: detected capacity change from 0 to 512
[  375.211342][ T2910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  375.224350][ T2910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  375.351071][T11196] loop0: detected capacity change from 0 to 128
[  375.517242][ T5146] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  375.557345][T11202] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  375.592908][T11202] loop4: detected capacity change from 0 to 256
[  375.654035][T11202] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  375.691662][T11202] exFAT-fs (loop4): invalid start cluster (22)
[  375.724396][T11202] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  375.734077][ T5143] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  375.755817][ T5146] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=eb.74
[  375.766728][ T5146] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.775187][ T5146] usb 4-1: Product: syz
[  375.780541][ T5146] usb 4-1: Manufacturer: syz
[  375.785173][ T5146] usb 4-1: SerialNumber: syz
[  375.794477][ T5146] usb 4-1: config 0 descriptor??
[  375.815645][ T5146] cyberjack 4-1:0.0: required endpoints missing
[  375.936667][ T5143] usb 2-1: Using ep0 maxpacket: 8
[  375.983361][ T5143] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  376.016814][ T5143] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.047646][ T5110] usb 4-1: USB disconnect, device number 10
[  376.078222][ T5143] usb 2-1: config 0 descriptor??
[  376.144529][T11212] loop0: detected capacity change from 0 to 512
[  376.157696][T11218] loop4: detected capacity change from 0 to 512
[  376.181605][T11218] EXT4-fs (loop4): blocks per group (7872) and clusters per group (32768) inconsistent
[  376.199778][T11212] EXT4-fs (loop0): write access unavailable, skipping orphan cleanup
[  376.218417][T11212] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  376.409139][T11207] EXT4-fs error (device loop0): ext4_lookup:1858: inode #2: comm syz-executor.0: deleted inode referenced: 12
[  376.413581][T11225] loop4: detected capacity change from 0 to 256
[  376.460849][T11207] EXT4-fs error (device loop0): ext4_lookup:1854: comm syz-executor.0: inode #15: comm syz-executor.0: iget: illegal inode #
[  376.461312][T11225] FAT-fs (loop4): Unrecognized mount option "ootsLÿ{ˆg7Ì" or missing value
[  376.504449][T11207] EXT4-fs error (device loop0): ext4_lookup:1854: comm syz-executor.0: inode #15: comm syz-executor.0: iget: illegal inode #
[  376.535764][T11207] EXT4-fs error (device loop0): ext4_lookup:1858: inode #2: comm syz-executor.0: deleted inode referenced: 12
[  376.815614][T10886] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.885950][T11238] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  376.959184][T11238] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  377.400609][T11268] loop3: detected capacity change from 0 to 512
[  377.434910][T11268] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945729 > max in inode 13
[  377.467573][T11268] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279945730 > max in inode 13
[  377.483387][T11268] EXT4-fs (loop3): 1 truncate cleaned up
[  377.490415][T11268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  377.543896][ T9907] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  377.639477][T11281] cgroup: noprefix used incorrectly
[  377.651550][T11283] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  377.696920][T11283] loop3: detected capacity change from 0 to 256
[  377.732573][T11283] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  377.773818][T11283] exFAT-fs (loop3): invalid start cluster (22)
[  377.793114][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  378.070094][T11299] loop3: detected capacity change from 0 to 1024
[  378.096059][T11299] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  378.136051][T11299] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  378.208070][T11285] loop4: detected capacity change from 0 to 32768
[  378.219842][T11285] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (11285)
[  378.235793][ T9907] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.269663][ T5144] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  378.339983][T11285] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  378.351311][T11285] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  378.360665][T11285] BTRFS info (device loop4): using free-space-tree
[  378.374343][ T5143] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  378.386969][   T29] kauditd_printk_skb: 9 callbacks suppressed
[  378.386986][   T29] audit: type=1800 audit(1718037521.779:1242): pid=11306 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1952 res=0 errno=0
[  378.387584][T11306] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2 (only 8 groups)
[  378.429207][ T5143] asix 2-1:0.0: probe with driver asix failed with error -71
[  378.445061][ T5143] usb 2-1: USB disconnect, device number 7
[  378.466670][ T5144] usb 1-1: Using ep0 maxpacket: 8
[  378.474138][ T5144] usb 1-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config
[  378.486121][ T5144] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  378.496454][ T5144] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.523944][ T5144] hub 1-1:32.0: bad descriptor, ignoring hub
[  378.541224][ T5144] hub 1-1:32.0: probe with driver hub failed with error -5
[  378.649514][   T29] audit: type=1804 audit(1718037522.039:1243): pid=11329 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir909285229/syzkaller.x5sNNe/83/bus" dev="sda1" ino=1961 res=1 errno=0
[  378.677630][   T29] audit: type=1800 audit(1718037522.039:1244): pid=11329 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1961 res=0 errno=0
[  378.686873][T10377] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  378.853053][ T5145] usb 1-1: USB disconnect, device number 5
[  379.094547][ T1249] ieee802154 phy0 wpan0: encryption failed: -22
[  379.103310][ T1249] ieee802154 phy1 wpan1: encryption failed: -22
[  379.556074][T11357] loop1: detected capacity change from 0 to 2048
[  380.131360][T11367] loop3: detected capacity change from 0 to 2048
[  380.191222][T11373] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  380.207512][T11367] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  380.605222][T11392] loop1: detected capacity change from 0 to 1024
[  380.780382][T11367] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none.
[  381.160146][T11395] loop0: detected capacity change from 0 to 2048
[  381.273740][ T9907] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.409757][ T4478] Bluetooth: hci0: command 0x0401 tx timeout
[  381.584012][T11408] tc_dump_action: action bad kind
[  381.605634][T11413] loop3: detected capacity change from 0 to 128
[  381.677825][T11413] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  381.709749][T11413] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  381.829002][T11423] fuse: Bad value for 'fd'
[  381.838286][T11413] overlayfs: failed to create directory ./file0/work (errno: 28); mounting read-only
[  381.842019][T11423] UBIFS error (pid: 11423): cannot open "./file0", error -22
[  381.849789][T11425] loop1: detected capacity change from 0 to 256
[  381.867948][T11413] overlayfs: failed to get uuid (/file2, err=-95); falling back to uuid=null.
[  382.209860][T11445] loop0: detected capacity change from 0 to 1024
[  382.290372][T11451] fuse: Bad value for 'fd'
[  382.305193][T11451] UBIFS error (pid: 11451): cannot open "./file0", error -22
[  382.854760][T11479] loop3: detected capacity change from 0 to 1024
[  382.872439][T11481] loop1: detected capacity change from 0 to 1024
[  382.890592][T11472] loop0: detected capacity change from 0 to 4096
[  382.924531][T11479] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  382.956944][T11479] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  383.185529][T11472] loop0: detected capacity change from 0 to 512
[  383.230446][T11472] EXT4-fs (loop0): write access unavailable, skipping orphan cleanup
[  383.279311][ T9907] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.289337][T11472] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  383.334726][T11473] loop4: detected capacity change from 0 to 32768
[  383.390684][T11467] EXT4-fs error (device loop0): ext4_lookup:1858: inode #2: comm syz-executor.0: deleted inode referenced: 12
[  383.454937][T11499] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  383.463289][T11499] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  383.467338][T11472] EXT4-fs error (device loop0): ext4_lookup:1854: comm syz-executor.0: inode #15: comm syz-executor.0: iget: illegal inode #
[  383.492809][T11473] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  383.496684][ T4478] Bluetooth: hci0: command 0x0401 tx timeout
[  383.559372][T11508] EXT4-fs error (device loop0): ext4_lookup:1854: comm syz-executor.0: inode #15: comm syz-executor.0: iget: illegal inode #
[  383.581169][T11473] XFS (loop4): Ending clean mount
[  383.598128][T11473] XFS (loop4): Quotacheck needed: Please wait.
[  383.617528][T11467] EXT4-fs error (device loop0): ext4_lookup:1858: inode #2: comm syz-executor.0: deleted inode referenced: 12
[  383.750297][T11473] XFS (loop4): Quotacheck: Done.
[  383.837228][   T29] audit: type=1800 audit(1718037527.209:1245): pid=11473 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="loop4" ino=6150 res=0 errno=0
[  383.902321][T10886] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  384.218900][T10377] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  385.026477][T11547] fuse: Bad value for 'fd'
[  386.049667][   T29] audit: type=1326 audit(1718037528.959:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11538 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb6667cf69 code=0x0
[  386.740053][T11573] IPVS: Error joining to the multicast group
[  386.871224][T11527] loop3: detected capacity change from 0 to 40427
[  386.915827][T11527] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  386.942136][T11527] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  386.999590][T11527] F2FS-fs (loop3): Found nat_bits in checkpoint
[  388.085351][T11619] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  388.236232][T11619] loop4: detected capacity change from 0 to 512
[  388.257559][T11619] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c018, mo2=0002]
[  388.273059][T11619] System zones: 0-2, 18-18, 34-34
[  388.279069][T11619] EXT4-fs (loop4): orphan cleanup on readonly fs
[  388.296835][T11619] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0
[  388.310295][T11619] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  388.319909][T11619] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz-executor.4: Failed to acquire dquot type 1
[  388.334969][T11619] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0
[  388.345658][T11619] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  388.360306][T11619] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz-executor.4: Failed to acquire dquot type 1
[  388.398151][T11619] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor.4: bg 0: block 248: padding at end of block bitmap is not set
[  388.421452][T11619] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem
[  388.439195][T11619] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0
[  388.451986][T11619] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  388.461546][T11619] EXT4-fs error (device loop4): ext4_acquire_dquot:6860: comm syz-executor.4: Failed to acquire dquot type 1
[  388.483908][T11619] EXT4-fs (loop4): 1 orphan inode deleted
[  388.507824][T11619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  391.397797][ T5102] Bluetooth: hci1: command 0x0406 tx timeout
[  417.618237][ T5102] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  417.631287][ T5102] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  417.641176][ T5102] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  417.666792][ T5102] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  417.675342][T11629] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  417.675635][ T5102] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  417.682936][T11629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  417.703328][ T5102] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  417.729332][ T4478] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  417.742260][ T4478] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  417.752558][ T4478] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  417.759988][ T4478] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  417.861961][ T5099] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  417.874941][ T5099] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  417.885126][ T5099] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  417.895035][ T5099] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  417.904726][ T5099] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  417.912196][ T5099] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  418.374111][ T5099] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  418.388770][ T5099] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  418.401251][ T5099] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  418.414346][T11629] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  418.429404][T11629] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  418.437108][T11629] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  418.446548][T11629] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  418.458922][T11629] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  418.470724][T11629] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  418.502144][T11629] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  418.524054][T11629] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  418.531536][T11629] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  419.787916][ T5099] Bluetooth: hci6: command tx timeout
[  419.787955][T11629] Bluetooth: hci5: command tx timeout
[  420.036936][T11629] Bluetooth: hci7: command tx timeout
[  420.516807][T11629] Bluetooth: hci8: command tx timeout
[  420.604944][T11629] Bluetooth: hci9: command tx timeout
[  421.866692][ T5099] Bluetooth: hci6: command tx timeout
[  421.873040][T11629] Bluetooth: hci5: command tx timeout
[  422.106720][T11629] Bluetooth: hci7: command tx timeout
[  422.596750][T11629] Bluetooth: hci8: command tx timeout
[  422.667035][T11629] Bluetooth: hci9: command tx timeout
[  423.946968][T11629] Bluetooth: hci5: command tx timeout
[  423.952449][T11629] Bluetooth: hci6: command tx timeout
[  424.186894][T11629] Bluetooth: hci7: command tx timeout
[  424.666644][T11629] Bluetooth: hci8: command tx timeout
[  424.756666][T11629] Bluetooth: hci9: command tx timeout
[  426.026656][ T5102] Bluetooth: hci5: command tx timeout
[  426.032918][T11629] Bluetooth: hci6: command tx timeout
[  426.266847][T11629] Bluetooth: hci7: command tx timeout
[  426.751374][T11629] Bluetooth: hci8: command tx timeout
[  426.826849][T11629] Bluetooth: hci9: command tx timeout
[  427.226767][T11629] Bluetooth: hci3: command 0x0406 tx timeout
[  440.511979][ T1249] ieee802154 phy0 wpan0: encryption failed: -22
[  440.518413][ T1249] ieee802154 phy1 wpan1: encryption failed: -22
[  457.957293][T11629] Bluetooth: hci0: command 0x0401 tx timeout
[  478.426885][ T5099] Bluetooth: hci4: command 0x0406 tx timeout
[  483.095916][ T4478] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  483.107929][ T4478] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  483.124804][ T4478] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  483.134594][ T4478] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  483.144956][ T4478] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  483.146879][T11631] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  483.164262][ T4478] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  483.172441][T11631] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  483.173042][ T4478] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  483.187096][ T4478] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  483.226597][ T5102] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  483.236976][ T5102] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  483.358378][ T5102] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  483.371685][ T5102] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  483.384959][ T5102] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  483.400871][ T5102] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  483.408891][ T5102] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  483.416301][ T5102] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  483.546604][ T5099] Bluetooth: hci2: command 0x0406 tx timeout
[  483.659141][ T5099] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  483.673094][ T5099] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  483.684768][ T5099] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  483.696349][ T5099] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  483.704258][ T5099] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  483.726618][ T5099] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  483.782084][T11629] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  483.803407][T11629] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  483.817003][T11629] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  483.842842][T11629] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  483.851710][T11629] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  483.859341][T11629] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  485.226726][ T5099] Bluetooth: hci11: command tx timeout
[  485.306928][ T5099] Bluetooth: hci10: command tx timeout
[  485.466770][ T5099] Bluetooth: hci12: command tx timeout
[  485.787207][ T5099] Bluetooth: hci13: command tx timeout
[  485.946702][ T5099] Bluetooth: hci14: command tx timeout
[  487.306706][ T5099] Bluetooth: hci11: command tx timeout
[  487.386732][ T5099] Bluetooth: hci10: command tx timeout
[  487.546897][ T5099] Bluetooth: hci12: command tx timeout
[  487.866807][ T5099] Bluetooth: hci13: command tx timeout
[  488.030093][ T5099] Bluetooth: hci14: command tx timeout
[  489.386620][ T5099] Bluetooth: hci11: command tx timeout
[  489.467758][ T5099] Bluetooth: hci10: command tx timeout
[  489.626744][ T5099] Bluetooth: hci12: command tx timeout
[  489.946788][ T5099] Bluetooth: hci13: command tx timeout
[  490.106747][ T5099] Bluetooth: hci14: command tx timeout
[  491.472260][ T5099] Bluetooth: hci11: command tx timeout
[  491.556759][ T5099] Bluetooth: hci10: command tx timeout
[  491.708546][ T5099] Bluetooth: hci12: command tx timeout
[  492.026750][ T5099] Bluetooth: hci13: command tx timeout
[  492.186732][ T5099] Bluetooth: hci14: command tx timeout
[  501.965105][ T1249] ieee802154 phy0 wpan0: encryption failed: -22
[  501.972116][ T1249] ieee802154 phy1 wpan1: encryption failed: -22
[  539.866783][T11629] Bluetooth: hci6: command 0x0406 tx timeout
[  539.872984][ T5099] Bluetooth: hci5: command 0x0406 tx timeout
[  544.996312][ T4478] Bluetooth: hci9: command 0x0406 tx timeout
[  545.002571][T11631] Bluetooth: hci8: command 0x0406 tx timeout
[  545.010346][ T4478] Bluetooth: hci7: command 0x0406 tx timeout
[  547.386993][   T30] INFO: task syz-executor.2:11588 blocked for more than 143 seconds.
[  547.395112][   T30]       Not tainted 6.10.0-rc3-syzkaller #0
[  547.410603][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  547.423923][   T30] task:syz-executor.2  state:D stack:25680 pid:11588 tgid:11587 ppid:9163   flags:0x00000006
2024/06/10 16:41:30 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  547.435368][   T30] Call Trace:
[  547.456623][   T30]  <TASK>
[  547.459617][   T30]  __schedule+0x1796/0x49d0
[  547.464168][   T30]  ? __pfx___schedule+0x10/0x10
[  547.490289][   T30]  ? __pfx_lock_release+0x10/0x10
[  547.495371][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  547.509604][   T30]  ? schedule+0x90/0x320
[  547.513897][   T30]  schedule+0x14b/0x320
[  547.524015][   T30]  schedule_preempt_disabled+0x13/0x30
[  547.530102][   T30]  __mutex_lock+0x6a4/0xd70
[  547.534628][   T30]  ? __mutex_lock+0x527/0xd70
[  547.544886][   T30]  ? do_ip_setsockopt+0x127d/0x3cd0
[  547.552929][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  547.566657][   T30]  ? __lock_acquire+0x1346/0x1fd0
[  547.571725][   T30]  ? mark_lock+0x9a/0x350
[  547.576069][   T30]  do_ip_setsockopt+0x127d/0x3cd0
[  547.588629][   T30]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  547.594230][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  547.602940][   T30]  ip_setsockopt+0x63/0x100
[  547.607619][   T30]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  547.613532][   T30]  do_sock_setsockopt+0x3af/0x720
[  547.624317][   T30]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  547.634465][   T30]  ? __fget_files+0x29/0x470
[  547.647345][   T30]  ? __fget_files+0x3f6/0x470
[  547.652087][   T30]  __sys_setsockopt+0x1ae/0x250
[  547.661474][   T30]  __x64_sys_setsockopt+0xb5/0xd0
[  547.666672][   T30]  do_syscall_64+0xf3/0x230
[  547.671188][   T30]  ? clear_bhb_loop+0x35/0x90
[  547.675877][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  547.689761][   T30] RIP: 0033:0x7ff81947cf69
[  547.694220][   T30] RSP: 002b:00007ff81a18d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  547.704962][   T30] RAX: ffffffffffffffda RBX: 00007ff8195b3f80 RCX: 00007ff81947cf69
[  547.716520][   T30] RDX: 000000000000002e RSI: 0000000000000000 RDI: 0000000000000005
[  547.724523][   T30] RBP: 00007ff8194da6fe R08: 0000000000000108 R09: 0000000000000000
[  547.741874][   T30] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000
[  547.753415][   T30] R13: 000000000000000b R14: 00007ff8195b3f80 R15: 00007ffca6e7f6a8
[  547.763793][   T30]  </TASK>
[  547.770423][   T30] INFO: task syz-executor.3:11610 blocked for more than 143 seconds.
[  547.782329][   T30]       Not tainted 6.10.0-rc3-syzkaller #0
[  547.794039][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  547.805170][   T30] task:syz-executor.3  state:D stack:26800 pid:11610 tgid:11609 ppid:9907   flags:0x00000006
[  547.826550][   T30] Call Trace:
[  547.829874][   T30]  <TASK>
[  547.832814][   T30]  __schedule+0x1796/0x49d0
[  547.866723][   T30]  ? __pfx___schedule+0x10/0x10
[  547.871638][   T30]  ? __pfx_lock_release+0x10/0x10
[  547.886543][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  547.892952][   T30]  ? schedule+0x90/0x320
[  547.906561][   T30]  schedule+0x14b/0x320
[  547.910795][   T30]  schedule_preempt_disabled+0x13/0x30
[  547.916356][   T30]  __mutex_lock+0x6a4/0xd70
[  547.936530][   T30]  ? __mutex_lock+0x527/0xd70
[  547.941310][   T30]  ? rtnetlink_rcv_msg+0x842/0x1180
[  547.956762][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  547.961885][   T30]  rtnetlink_rcv_msg+0x842/0x1180
[  547.986534][   T30]  ? rtnetlink_rcv_msg+0x208/0x1180
[  547.992759][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  548.006523][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  548.012552][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  548.018999][   T30]  ? __local_bh_enable_ip+0x168/0x200
[  548.024395][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  548.030732][   T30]  ? __local_bh_enable_ip+0x168/0x200
[  548.036124][   T30]  ? dev_hard_start_xmit+0x773/0x7e0
[  548.041504][   T30]  ? __dev_queue_xmit+0x2d2/0x3d30
[  548.046791][   T30]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  548.052546][   T30]  ? __dev_queue_xmit+0x2d2/0x3d30
[  548.066540][   T30]  ? __dev_queue_xmit+0x16c9/0x3d30
[  548.071953][   T30]  ? __dev_queue_xmit+0x2d2/0x3d30
[  548.090492][   T30]  ? ref_tracker_free+0x643/0x7e0
[  548.106613][   T30]  netlink_rcv_skb+0x1e3/0x430
[  548.111472][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  548.126548][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  548.131922][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  548.137259][   T30]  netlink_unicast+0x