last executing test programs:

8.502799094s ago: executing program 3:
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = open(0x0, 0x0, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x5452, &(0x7f0000000100))
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
r2 = eventfd(0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
write$FUSE_ATTR(r3, &(0x7f0000000240)={0x78, 0xfffffffffffffffe}, 0x78)
write$cgroup_devices(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="62202a3a88"], 0x8)
close(r3)
rt_sigreturn()
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r4=>0x0})
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, r4+60000000}}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)

7.893469012s ago: executing program 3:
sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$packet(0x11, 0x0, 0x300)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', 0x0})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x8, 0x7fe2, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r1, 0x0, 0x20000000}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1000407, &(0x7f0000000140)={[{@grpjquota}, {@norecovery}, {@orlov}, {@oldalloc}]}, 0x0, 0x5d9, &(0x7f0000000180)="$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")
socket$tipc(0x1e, 0x2, 0x0)

7.73181295s ago: executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e0000000109"], 0x0)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e0400470c"], 0x7)

7.315809279s ago: executing program 1:
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x2, 0x45, 0xa8, 0x10, 0x1608, 0xf, 0xc8c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x68, 0x52, 0xd0, 0x0, [], [{{0x9, 0x5, 0x8e}}, {{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0)

6.937067305s ago: executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2}, {@in6=@empty, 0x0, 0x32}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0)

6.606440176s ago: executing program 3:
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0)
ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000002040))

6.535514673s ago: executing program 2:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'macvlan0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x5400, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x81925}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0)

6.46555214s ago: executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000580), &(0x7f0000000680)}, 0x20)

6.240677565s ago: executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x207}, 0x20)
sendto$inet6(r0, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)

6.124750332s ago: executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765000e14000200080007004a9a"], 0x44}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170000014000280080004000104000005000a000100000008000a00", @ANYRES32=r4], 0x4c}}, 0x0)

5.93239484s ago: executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x2, 0x1, 0x3, 0x2104, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x48)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
keyctl$KEYCTL_WATCH_KEY(0xc, 0x0, 0xffffffffffffffff, 0xc8)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "abd657bebbdd23613cfda38214fc0e59299e701cef6329784aa62d2f521ee9cc"})
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)

5.422289779s ago: executing program 4:
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./bus\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYBLOB="5e0de6d0a46fa97f7414d5d4beddb6230d028c2985c07fd13ab9cd215be43701b0695c176f010c8522dc892d07fde1c4dd61620c6f145357d324923d98eafd69fcb6929e5d0149b55ad366cb405eb1db194e21eff7ee1ffd0fc491f7a1bd5ef94daa60e4ca4f86b607c0bfa43209a15cc602bced1e30290c9c66b61c0ce079072dc9c55937e87e811990c0a91e53fb7262746f85989515c54010fd24e6ce0415a26322ae81df827d5dcd02a05bea25986e519c3ec6192d3b14cf5fe367c9165b7e625e7c8389494b52ea3019206695e90ce8167dbf5a4157b8943bb48d9b485936f5e27d9538b9a26e5aba36d03db6093d2d3572600e08431993ce973d4cc18848c4593672ae571311d7723653de6825ebf2cb1ea583fe04db14c9ce1762a6b8f00dfd20f64f9acc3ced5097658b468f02c66bb8a7a586d00970044ace79a1202a934310f37359976a87a4b407ee8c3838f48255c0dd8dec7e6be5ef228cb602d83169cc3cdd372823665e0173e6d17bce2a6fb31d80542852c651fbb12c1f875a9f9f7654944b6054fbd6a2755f1eac851d3574df50e5bcf52b771784b7494278b1ee4954fcc101a27cd2caa6bed9d137b06ac60716f64745446165f75818f9ee4d0d02407e33f2cbe25398555191dc68ca32d57d986da35f029b57bc9ddbdb3c7286994688782975d4e91dfd0ae1aca248ac78df50ecf1a84b8a88577c1884bd97c96b3feea64f35e34b41ee47cc845f9240bfabb68c11e1dec3ae7aa4642af97341fb2358ec2c9fffb1c0bb90f375020e7a14c3c46c41766614442a0eeb6c5a55c6dc8d735ad8f724be9123a12f1416ed9404a070da645be79878b39e36eb461ec426c46a5d0201543fa3ccd8b0c305655aee8dbbae71e1f187bae5abe882e52a41dfb52a057704dbf359f993f0fde8bcab0f8ba7ec1f84e7386e8c72c81a6317bc937529063f8f5cf7b8753592629199a0e63773f9d1c63373738804b8267c989434168ecdfd0805e8936f99b5dffbab3a2c326a8bcf5881fe5f79cf58bea52d236abdfb1986331fabb9aab70f3e50acf81e2f5b4db83a73f9d0ec011f840fc5f62e5762cd4abfabebe5737d1486d65ad58f846c29bb1e94c7b20b04a34be7be0ec348f502dffb12f7e4140f8d70120ff1015664afa4c0dab33e5c04ea296ae48c0f4d7c67db9c319de481e018299990c727eb95b6746cc5bbfbdee52a77d96f2406b2f883eb3cce1deb571bc322dd113d69aac36e3816ca2256067391a1d10386503d2788eb5f3289ed462c3bea4951e2e9843cfa0ee70826c2d29ab31a902ccd9f82e43e56a6299b3f5c19ab010ee56c7d71031684ab754c1a442c386b93fa66dcc36f9c1d372434e75a5a7f8651ec4bb2b46ab61fc45a019abf8e20107e9a228ec07ecadfcb2f2373bf977cdedcdaa103bba3b70fb2ab373070f3fa88ef3ff54c1bf05df0350c3d9f8fc6d35734798bfe454da9128e2011e33e8b7602d3e45c160eb85ff49d722c1d049de00b151a938c5cb59861e19669b381f0ebcae398a93789ce8e2579aaf7b1493db08d71165d6c60396e0f2626b9f4609965d6c063fc071592e5eb58b707a942ab6a8a09192fd0bd3f0964c9ff7c978fbb46bd951f0d60c296f00d38c78bdee7f9e894b04b174a15aa68ff527376b3fc319996400f2e705cdf15f133a59a496402afc90824306d0f5c49993d3fa24ede9304f11fd30b31e7ce0517d9ea1919f2f5ef3ed1ede8f39872e17e0fbfdf1a9342dc65b192cb01dcbae1bbfab8b3fa2db08b09cd2aa9ad36ad9d4fc7039dafe688b1dff5986e172cc2e3476caa63ad6603568b2290252dc015c12323a980c6a347ec50efc9aea18c124bb21877b3807df36b71ad0e108f819988b8769cd1a6ec5d5b853939845187763ccc818d50146b912e3c76dbb7d893d787c898727be3b369c1c0526845b4ce2e842dbb120b2d7174203b3096f381743f4e0480206a13aee6f6514818dc77c5bf1e0476c1e391a71d2c58cc862063c5723bb0e7eb06e7e2d22252793c5b65c77c850530ef57f894145b332708371a06135382b7eea0782f8f7a88392c2be365934785685a2af96aa2b6e2035c3cb6f556071be1fb411f8c8497c041573e261a205d40b098ac2546cf2d25b7947c503ed6c9c9c3217a8695e1ca1b359ac92b91740344796243fac99189c0c46215df1a42478ebdb8c4a8d99e6ee985886de89c5d33f9485891da2023ce3d3c3b7b620c4231100c1911730f9d03e90ccf9cd10e4c7953e79a10913d683b3860db3c40f53f85ef77b9bdc108661a1d7b6c28d3c9f1c8bdd4d6110ba986c1f639de668a027740124ecdf54ab9e877f3208dad0139d434eb76ad3d6fb08ef20b6bdca5392d5e21ff9be075658192e70ff175beaa325397b45bdf9d5025935f9369d6a8bb9e368cab2beae3b891faeb1c9623104cacebffac39be98e324991983a268fce8226ef81184e4f2bab4b05f4c0111bcff4de5633fe26dda28197418470c59a254d18320afb3264ba857e0666e35e504d93054c8fc6e5e6bde8845abd33f6607d988da0e41831bb1228dcd83a894d094fdae1f592078d6d1b79dc8dc40d76e7b065b7ddb42b82773251dfd887fd0083d581deefd2cc8bf133f239aa7d014b67cd27eab9c40578449f61aef4831d1cef26902d886f29ada6624c45ef13caea199e8e98a14eb66559cb55296d7b1bfe87ff39c4e29598a014d723d245a2501301d2e9ac28caa8848532acc0c142b45f02e2daf692ba28decf4e0f6afcf5eeaa84e5282b91c3026d7c350bae653b2fcae8b77e9236348be3717552db2351cb289a4848cfaef7fcca4d246c91aeb619c7fdfc2a740736fd3677599d7e0092cd32274817188964b2be954bcfb3bc7928367be69d05688509f0b1edfbdb2138d766cff0bed83d67fea0ed79a6d02cee5ff6a4a6c6cd05f769cae141cc543af8705d1878953b63b3b1bb9f65e3c35891e9716959627b8bd8cda654dbaf44b2240144d587b2ee6b7c14d4246a920eeb5dd6adde20e4782f015a39b7e1287a3b00d93e7ae0dab496644aa5e833fc2334777c41b8935461c845d44f82fbdd821d413ed3b4a8c35ce5e36729b755c10400e66f49e012b7b1416744498d99093074574068230236c3559a25b4badfc4610cd4bca127b17434a76f10638e26cd77bdc8d9063398def2a36b115b381d03ea4a556aa608bde59c0e6662c0a1382d4bb26563e42b80d21c8400e4f48ccf62bbff0faa291cca6d5093cf12ac83979505bcf31682c225d9f5d02b43a83c4b0d9a9ceaab087b9acf6ec300f3e82f1fb348786704dfb536cdb65e1e35a8e68c9cd2490b198c1d0d46fb7f51ea8f5e210d3547c9577396a6619476871b3260ea49a5bb95825192688cff7e22520b821ceeeccc1f54471b76ae855c3733054be0ce00a4c44de27e45c2c0569de1b7c1621089f731fe64022e5b2225f3d85b71d4dba61a0a51b2a93687a33fa26f586da98f7b811221c717180d717546ef88e8ef37fdb381643f9eb32fbf327f37dc16f725b384d7bec64fb64a25836dd46a3ed3403ae2d9c751056d6db1983c0b36226bef498caa786c78f26a0e56b6fae8034df8fe9e76b466c6f67774c6bcdfa4429c3a5fb1edaa3f0e44f60f13a63c9ed19f360a30dcbdff3a30c8003a5c0eb51d8f1620fc58134550c46a7e66cfcb411c9bb151fe823ef2dbdfaad4ed4b54bd02740aad65163d30c43425c05032107fdb2de4b9be600fd35a33abda297087cd206cc56ade830c52524130ca577cc34f7538fd1bdb1c0608ede243a47cc6021447183509091511565b138126840859812db525691bd0b357bd6499e70ae3aa2d2711298dda1b4f274a6c24e31f548693c2ffb86ac957b00fe7fb802c72cf70977a116972fe9ccfdf206977c6137d152010132a6a3b01197769a418126b57ad67661c555d8c11ad8c09c8ba43a4ff55b28bf37ff03febf4688f30a3ab759b0088810c7e7d45eeeee778fdc9cd0efc719a84170d47246e9ed1e072799d7e2419bab5af06f3d319e2e19819237b6b5ba746d221796086570e1bf3365078d4c9806c7949e773c752665a73adfc3ee5d24fd17c653009ad1f3f5a0b3184c99f72dea417702391bcc4f2d1f924298c056d18b4083e075255799b77ed11b003cb5b54f26f28716582dffbcb3fbb9891c2b27ee8a0e3ea8e0412a13e63920ef0886e97b7b22aea7d22734459fe2f09007e16160b0770b6e5235c6cd19fd76b9305615018a0b1ec748a2daedb768680ec63b5c4cc8848221e474c7f3e24f339ce640534e682209d119c29652b95b4d63e1633b31f4c31b27f67ddd456c2816bf9f60457c36c1b6f011251a30b708cb218e25523f967c90a320eaa1e7d9aa8bcfc3c46d89881a9ca821ee324ee883aa7fcfb528e588e05e9e9cdaa7ae84ef5dabba76681d9b2b16af60b0ec3770e5d44b72fdfa193ba723875ea8bc93d50fb22b2ebb576826da6c4e1f7574e4d9ef140986fdc01b0334d8a646e7ac43d12c12463d8142236432e5f03ba68beec4c578016c396ac719e108a6ff7c1d2c7aaea8085dd176f716cbb815f944153657289625f22a8ee62e596d498ed2246ae8daa093280f5e33677ccdb95682faecf22d091c31fd8a0d541adcdb78090368ccdba3afda265ca1bd4bd412b236892ca41a629cdd6bd96529ba789a8f25f7122902f9bd121b050ea3075cf9c8ab7051ec2e7647b5e7ca81ab314863868c2519b0700b924d862fcae1ad13c08cece894ee7026ed0795166e8abac03f593285a8e82a05d0354a8b9e464e363660b7b2674a109397fbb0d191dcd32b1aad1ff7742b7a208ba423058329038ff7e54c963322b1ab821af6d500a996afdf94086293ec0089ebebc7996b76f3a315d7e515c5c56363c8fbf8f5af457bc8ee55ab884b2129cc064e0540315bb758441c25e2c4675972966581ce8dbe69cb52e6ed39b6ea6f752f1d2014cf5e30928815ddff44fc2b7260eafa9a9fb647f2f211ef3a79bd0d2d46d2e64db000db30350977c5b7638565c0db0115e7affbf3b554dc4a7066c50a6a22c6e75487d8624bc2c46a97f51a93009f747cb685af75ae2e8f79894f63e8a79ecae8548ccaf89006607adc82197ed1ceaad2f74f63cef83454e0cae3220d0c2d5ae37f90938cda02ef853e03358ee634707c806262752cb33dfd1e9061d032f8402c075293c33c3fc850ae7cf79cafb1f7629cffbaa6afe2873470ddae816f46877f5d1b463fd0cdc6564b17968058a014ac214bd49240ef7e939ab4220f1e3f641591db5c2a289f42e3f831f6743e03491e7bd97e3eb6edd8b9b7d31985a052bdeaf5682bb8eac75ad212a5fe79fb2ddd3c170336d7d96fc121d0700f71b0e12d1dfed19c372d999dddfe3e350f99803cae669208822fb126a440650c8dc39151f82cb26810edf96a13a198fceafd94b1ad15aef421f01ee62e527295adbb10fda8e3335369cc31297b6bb6597f19a429d73d6f68a6719909c846b825c858f82b4c8f432475812ebe8085e445beea7807c00d3a092e1b00fa02ae41fdf2a1013a7f1f87bf5b3ed8238fe94d07a8851ac2c1d8399af64ac964e2011f888ae935e0c24349127a339cca1b23e1039b89045df50918dc869803526f3f761c66b5a32cb3f370810af2f7a2e6deab47ba0bce10f5f1650776d84896b60f735282196208cc477e68762303830cdb687f9c9f9727bd938b170a4cf32aedbe132fea64c3c649b20ba74caebe8587e634d4d86ca8d7dc637a998b8dd921e9", @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$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")
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x28406f3, 0x0, 0xfc, 0x0, &(0x7f00000000c0))

5.049944675s ago: executing program 2:
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@remote, @multicast1}, 0x10)

4.741013484s ago: executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x48)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x40, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "cf345a6b739c17408d55bd2f4e"}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x14)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001d40), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x34, r4, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'wlan0\x00'}}}}}, 0x34}}, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8923, &(0x7f0000000140)={'wlan0\x00', &(0x7f0000000180)=@ethtool_coalesce})
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000b40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x0, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f00000000c0), 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000095c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x2c, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev}]}]}, 0x2c}}, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r6, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x100}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000041}, 0x4004085)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x64, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x3f, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}]}, 0x64}}, 0x0)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r8, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10)
connect$inet(r8, &(0x7f00000000c0)={0x2, 0x4e22, @empty}, 0x10)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000007c0)={0x8, 0x2, 0x5, 0x3f, 0x7, 0x9, 0x50}, 0xc)
socket$alg(0x26, 0x5, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000240)='illinois\x00', 0x9)
setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6)
setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000300)={0x0, {{0x2, 0x0, @multicast1}}, 0x1, 0x6, [{{0x2, 0x4e22, @empty}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23}}, {{0x2, 0x4e22, @rand_addr=0x64010102}}, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e22, @loopback}}]}, 0x390)

4.380208125s ago: executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x5, &(0x7f0000000080)=[{0x45, 0x0, 0x1, 0xfffffffe}, {}, {}, {}, {0x6}]})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x1a, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8001}, {}, {}, [@alu={0x7, 0x1, 0x3, 0x6, 0xd, 0x100, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x1, 0x9, 0xb, 0x2, 0x1}, @map_val={0x18, 0x3d82a982b708b50, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x354c}, @generic={0x7, 0x7, 0x9, 0x4, 0x7fff}, @ringbuf_query, @jmp={0x5, 0x1, 0x0, 0x9, 0x8, 0x50, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x9, 0x7c, &(0x7f0000000380)=""/124, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x1, 0x4, 0xac8}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x3, 0x3, 0x3, 0xa}, {0x2, 0x4, 0xb, 0x6}, {0x3, 0x1, 0x3, 0x6}, {0x2, 0x1, 0xd, 0x3}, {0x1, 0x4, 0x7, 0xb}, {0x0, 0x5, 0xc, 0x7}, {0x3, 0x4, 0x9, 0x9}, {0x0, 0x1, 0x2, 0x8}], 0x10, 0x1000}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f00000001c0)='svc_unregister\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x0, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c)
sendto$inet6(r3, &(0x7f0000000000)='>', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @private0}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r4}, 0x38)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r5 = socket$inet(0x2, 0x6, 0x0)
setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)

4.264338801s ago: executing program 4:
sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$packet(0x11, 0x0, 0x300)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', 0x0})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x8, 0x7fe2, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r1, 0x0, 0x20000000}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1000407, &(0x7f0000000140)={[{@grpjquota}, {@norecovery}, {@orlov}, {@oldalloc}]}, 0x0, 0x5d9, &(0x7f0000000180)="$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")
socket$tipc(0x1e, 0x2, 0x0)

4.022940987s ago: executing program 0:
r0 = syz_open_procfs$userns(0x0, &(0x7f0000000380))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/power_supply', 0x0, 0x0)
recvmsg$inet_nvme(r2, &(0x7f00000014c0)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x0)
close(r3)
ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x5450, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5451, 0x0)

2.973850883s ago: executing program 3:
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000100000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xac}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0)

2.113142592s ago: executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r1=>0x0})
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'macvlan0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x5400, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x81925}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0)

2.016443566s ago: executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0x5}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000580), &(0x7f0000000680)}, 0x20)

1.230464894s ago: executing program 0:
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000700)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
rt_sigreturn()
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
syz_read_part_table(0x401f, &(0x7f0000000000)="$eJzs0DEOAUEUBuB/NqKgUbuERk2UjrKNTqLRuIrKMSQaB3EBJ9CMZElIVuv7mvlnMjMv741vp1WSMttu2l1eNJ28bJKSZF73Jf/nvedrsjgnGfX5pDvUtPcvNycfzveHGoZ96j4N6ro+Ti+/vAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAwAAACDM3zqP9gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEsBAAD//4IoCls=")
bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r0 = gettid()
tkill(r0, 0x21)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r2, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r1)
accept4$inet6(r3, 0x0, 0x0, 0x0)

1.17390884s ago: executing program 1:
getpeername(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, 0x0)
mlockall(0x0)

978.969624ms ago: executing program 4:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'})
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000000000000000000002cdf5e032279318d837caf2d88d757ac2fc21ea91a16273ccf2ff240940a303a6654329fb286b13b6ae51e19cba651ee81c9e0fd719f9e4fe2cfc5375021b2d8195090ef3986fe1c8c2d2f92bd293920c2baf1bbd33b2b182230c87375d908adfb8c55a164f1de779e7a", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES8=r0, @ANYBLOB="00000000010000000000000001010000a5976ac6acd41fd8"], 0x48}}, 0x0)
sendmsg$can_bcm(r0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0xfef7)
connect$inet6(r1, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, 0x10], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7ff}]}]}]}}]}, 0xac}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x24004800)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="d032b6e49f54f7585859dee7140ef91800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000000000008500000019000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={<r5=>0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffaf})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r7, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x34}, 0x1, 0x620b}, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r5, 0x0, 0x4000)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000340)={0x0, 0x2c, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0)

783.192844ms ago: executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system', 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
recvmsg(r1, &(0x7f0000000140)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
close(r2)
rt_sigreturn()
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
shutdown(r0, 0x0)

674.453958ms ago: executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
close_range(r1, r1, 0x0)

390.491942ms ago: executing program 2:
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x81, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000480)="fbbf0b5044e308cb7bd572aa2b42e9678bcf30eff9f3aed14dc94a114bd2b45956aebe2b108a87e865501a5f9e0383611afdd3f8bac3d5cfd7772a3ab48d0ba4b600731e357e38716c449fae7c28548a4f2105f44b8fd9b33041270ae01f1a405e3f650fc3b0926d481c364fca00000000000000006d3a3ede9fc738b8d86209c060161d5ddb5fcf3d09001117cdb9d055aa2d89fe3458720724853a876448d4a1fe9ef0569ad98a05ab5df763923b4e2c576e00000000000000000000000000000000002090666159e3075f7244cf4ec3d7814c0c934f44e200219e6dd7bc23397d5f2f2c76a5baddd0fd8c340362691ef226f7a0ac51b74b6be5ed6737948514cd466943d08eeb3895b80499da2b209da4f3ec5e3744ce3e863b0e04d0ec2f39edf50b6e08c4b47e448a35414763d687fbe3792ee15c5b9791310a346472723c100bf77a310b0ced8004b5ac6d48c40439f512e8ef34a53d65f55563f68136a577736ca5f6f66e01ef4ec2cdc8db34f6de50713adaa3f70189958263fddc1314f8a28ccdef6e1390c5fbaeadc3035d019f0dc75de307de6c0d010000000000000027083d1d5b4b013c503b863b560688d94de886b6dc73d5da2dfeff4bed1a49a975a6c8dbb480e4415ddca5657a5a8e3b111015499e952bb5e8d8f60de3d688df7802c6e8b27b31fac4e199038b79a3999920e634a5af162a9581b0e6647e410700246548234acacf9cb43ab332a37bbc926c39897395c974fda31536be523bf4260300730ae6136fecae5f0fa6ab2df8d98128b24589e3bbe5230e07dc5e0d65cc397e3f8204d48e59e8e294a6d7008ba8fba28cd5009fe1a7c569ce740078bf1c7389a6ba0f89257f0eac417aac0d2d89b05ee5dafa2f1d936c87264d077b2c0d5abdbc64ce943f895dd4c2e9dd7393543d89b00dc6b3a25045d4ec932366c67dfad087fa8dc104644828440bdf67dd97ebccb3bd", 0xfffffea5, 0xc000, 0x0, 0xfffffcef)
recvmmsg(r0, &(0x7f0000000080)=[{{0xffffffffffffffff, 0x0, &(0x7f0000000280)=[{&(0x7f0000000740)=""/4105, 0x1009}], 0x1}}], 0x1, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'ipvlan0\x00', 0x2})
preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
close(r2)
signalfd4(0xffffffffffffffff, &(0x7f0000000600), 0x8, 0x0)
rt_sigreturn()
futex(&(0x7f0000000700)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

277.193717ms ago: executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000002000000000000000001801000020786c250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000550000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000440)='tlb_flush\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20902"], 0x10}}, 0x0)

213.360867ms ago: executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9)
sched_setscheduler(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x298)
memfd_create(0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20242, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8001})
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\t', 0xf4c, 0x0, 0x0, 0x0)

201.0299ms ago: executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x48)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x40, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "cf345a6b739c17408d55bd2f4e"}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x14)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001d40), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x34, r4, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'wlan0\x00'}}}}}, 0x34}}, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8923, &(0x7f0000000140)={'wlan0\x00', &(0x7f0000000180)=@ethtool_coalesce})
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000b40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x0, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f00000000c0), 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000095c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x2c, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev}]}]}, 0x2c}}, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r6, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x100}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000041}, 0x4004085)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x64, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x3f, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}]}, 0x64}}, 0x0)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r8, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10)
connect$inet(r8, &(0x7f00000000c0)={0x2, 0x4e22, @empty}, 0x10)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000007c0)={0x8, 0x2, 0x5, 0x3f, 0x7, 0x9, 0x50}, 0xc)
socket$alg(0x26, 0x5, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000240)='illinois\x00', 0x9)
setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6)
setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000300)={0x0, {{0x2, 0x0, @multicast1}}, 0x1, 0x6, [{{0x2, 0x4e22, @empty}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23}}, {{0x2, 0x4e22, @rand_addr=0x64010102}}, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e22, @loopback}}]}, 0x390)

0s ago: executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
poll(0x0, 0x0, 0x401)
rt_sigreturn()
futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0)
r1 = eventfd(0x0)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="ca2718caf7ef61a8"], 0x8)
r2 = dup2(r1, r1)
write$cgroup_type(r2, &(0x7f0000000040), 0x9)
close(r1)
futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0)
rt_sigreturn()
mlockall(0x1)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x8912, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)

kernel console output (not intermixed with test programs):

 compat=0 ip=0x7fd7ce87cf69 code=0x7ffc0000
[  274.862818][   T29] audit: type=1326 audit(1717812478.269:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ce87cf69 code=0x7ffc0000
[  276.388534][   T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  276.401074][   T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  276.416297][   T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  276.466392][   T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  276.479430][   T50] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  276.490358][   T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  278.530358][ T5501] Zero length message leads to an empty skb
[  279.900712][   T50] Bluetooth: hci5: command tx timeout
[  280.373445][ T5489] chnl_net:caif_netlink_parms(): no params data found
[  280.589448][ T1221] ieee802154 phy0 wpan0: encryption failed: -22
[  280.596505][ T1221] ieee802154 phy1 wpan1: encryption failed: -22
[  281.961232][   T50] Bluetooth: hci5: command tx timeout
[  282.467245][ T4427] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  282.501066][ T4427] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  282.525256][ T4427] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  282.618356][ T5072] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  282.627646][ T5072] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  282.637465][ T5079] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  282.673181][ T5072] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  282.684247][ T5072] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  282.711326][ T5072] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  282.723107][ T5079] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  282.737477][ T5072] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  282.747140][ T5072] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  282.817791][ T5489] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.825559][ T5489] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.833248][ T5489] bridge_slave_0: entered allmulticast mode
[  282.841357][ T5489] bridge_slave_0: entered promiscuous mode
[  283.264827][ T5489] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.272805][ T5489] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.280611][ T5489] bridge_slave_1: entered allmulticast mode
[  283.292717][ T5489] bridge_slave_1: entered promiscuous mode
[  283.987706][ T5489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  283.997132][ T5072] Bluetooth: hci5: command tx timeout
[  284.231146][ T5489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  284.738627][ T5489] team0: Port device team_slave_0 added
[  284.792067][ T5072] Bluetooth: hci6: command tx timeout
[  284.839788][ T5489] team0: Port device team_slave_1 added
[  284.952106][ T5072] Bluetooth: hci7: command tx timeout
[  285.147420][ T5489] batman_adv: batadv0: Adding interface: batadv_slave_0
[  285.154677][ T5489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  285.180958][ T5489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  285.403510][ T5521] chnl_net:caif_netlink_parms(): no params data found
[  285.505007][ T5489] batman_adv: batadv0: Adding interface: batadv_slave_1
[  285.512281][ T5489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  285.538713][ T5489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  285.558778][ T5530] loop4: detected capacity change from 0 to 4096
[  285.769704][ T5530] NILFS (loop4): invalid segment: Checksum error in segment payload
[  285.778325][ T5530] NILFS (loop4): trying rollback from an earlier position
[  285.915412][ T5530] NILFS (loop4): recovery complete
[  285.986902][ T5534] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  286.072206][ T5072] Bluetooth: hci5: command tx timeout
[  286.191954][ T5530] overlayfs: upper fs does not support tmpfile.
[  286.244914][ T5530] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  286.252618][ T5530] overlayfs: failed to set xattr on upper
[  286.263816][ T5530] overlayfs: ...falling back to redirect_dir=nofollow.
[  286.270770][ T5530] overlayfs: ...falling back to index=off.
[  286.278284][ T5530] overlayfs: ...falling back to uuid=null.
[  286.357297][ T5489] hsr_slave_0: entered promiscuous mode
[  286.445735][ T5489] hsr_slave_1: entered promiscuous mode
[  286.520068][ T5489] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  286.528025][ T5489] Cannot create hsr debugfs directory
[  286.607340][ T5517] chnl_net:caif_netlink_parms(): no params data found
[  286.882012][ T5072] Bluetooth: hci6: command tx timeout
[  287.032378][ T5072] Bluetooth: hci7: command tx timeout
[  288.070503][ T5539] loop2: detected capacity change from 0 to 2048
[  288.348267][ T5521] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.356115][ T5521] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.364316][ T5521] bridge_slave_0: entered allmulticast mode
[  288.373632][ T5521] bridge_slave_0: entered promiscuous mode
[  288.431134][ T5539] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  288.467609][   T75] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.577590][ T5539] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  288.683357][   T75] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.815326][ T5521] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.824658][ T5521] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.833049][ T5521] bridge_slave_1: entered allmulticast mode
[  288.842567][ T5521] bridge_slave_1: entered promiscuous mode
[  289.000192][ T5072] Bluetooth: hci6: command tx timeout
[  289.044031][   T75] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.123321][ T5072] Bluetooth: hci7: command tx timeout
[  289.721497][   T75] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.890707][ T5521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  290.077236][ T5517] bridge0: port 1(bridge_slave_0) entered blocking state
[  290.086403][ T5517] bridge0: port 1(bridge_slave_0) entered disabled state
[  290.094589][ T5517] bridge_slave_0: entered allmulticast mode
[  290.105093][ T5517] bridge_slave_0: entered promiscuous mode
[  290.152796][ T5521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  290.548973][ T5547] loop4: detected capacity change from 0 to 47
[  290.755395][ T5517] bridge0: port 2(bridge_slave_1) entered blocking state
[  290.777137][ T5517] bridge0: port 2(bridge_slave_1) entered disabled state
[  290.784946][ T5517] bridge_slave_1: entered allmulticast mode
[  290.794987][ T5517] bridge_slave_1: entered promiscuous mode
[  291.033654][ T5072] Bluetooth: hci6: command tx timeout
[  291.052501][   T75] bridge_slave_1: left allmulticast mode
[  291.058590][   T75] bridge_slave_1: left promiscuous mode
[  291.065339][   T75] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.192173][ T5072] Bluetooth: hci7: command tx timeout
[  291.199708][   T75] bridge_slave_0: left allmulticast mode
[  291.205810][   T75] bridge_slave_0: left promiscuous mode
[  291.212303][   T75] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.844653][   T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  291.927920][   T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  292.020712][   T75] bond0 (unregistering): Released all slaves
[  292.183057][ T5521] team0: Port device team_slave_0 added
[  292.591217][ T5521] team0: Port device team_slave_1 added
[  292.684886][ T5517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  292.807908][   T29] audit: type=1804 audit(1717812496.199:5): pid=5554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir771393353/syzkaller.jgjL2F/28/file0" dev="sda1" ino=1940 res=1 errno=0
[  292.833917][   T29] audit: type=1804 audit(1717812496.259:6): pid=5554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir771393353/syzkaller.jgjL2F/28/file0" dev="sda1" ino=1940 res=1 errno=0
[  293.256135][ T5521] batman_adv: batadv0: Adding interface: batadv_slave_0
[  293.264412][ T5521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  293.291605][ T5521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  293.421989][ T5517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  293.880287][ T5521] batman_adv: batadv0: Adding interface: batadv_slave_1
[  293.887680][ T5521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  293.914298][ T5521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  294.092388][   T75] hsr_slave_0: left promiscuous mode
[  294.111066][   T75] hsr_slave_1: left promiscuous mode
[  294.134207][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  294.142187][   T75] batman_adv: batadv0: Removing interface: batadv_slave_0
[  294.166550][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  294.174499][   T75] batman_adv: batadv0: Removing interface: batadv_slave_1
[  294.226622][   T75] veth1_macvtap: left promiscuous mode
[  294.232515][   T75] veth0_macvtap: left promiscuous mode
[  294.238419][   T75] veth1_vlan: left promiscuous mode
[  294.244269][   T75] veth0_vlan: left promiscuous mode
[  295.298707][   T75] team0 (unregistering): Port device team_slave_1 removed
[  295.400945][   T75] team0 (unregistering): Port device team_slave_0 removed
[  296.134079][ T5517] team0: Port device team_slave_0 added
[  296.400365][ T5517] team0: Port device team_slave_1 added
[  296.722298][ T5489] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  296.784037][ T5572] loop4: detected capacity change from 0 to 47
[  296.887821][ T5517] batman_adv: batadv0: Adding interface: batadv_slave_0
[  296.895283][ T5517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  296.928343][ T5517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  297.003726][ T5489] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  297.099135][ T5521] hsr_slave_0: entered promiscuous mode
[  297.168580][ T5521] hsr_slave_1: entered promiscuous mode
[  297.242183][ T5521] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  297.250009][ T5521] Cannot create hsr debugfs directory
[  297.274986][ T5517] batman_adv: batadv0: Adding interface: batadv_slave_1
[  297.282335][ T5517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  297.308827][ T5517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  297.334590][ T5489] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  297.465519][ T5489] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  298.094688][ T5517] hsr_slave_0: entered promiscuous mode
[  298.213677][ T5517] hsr_slave_1: entered promiscuous mode
[  298.260400][ T5517] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  298.268405][ T5517] Cannot create hsr debugfs directory
[  298.486969][ T4427] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  298.497231][ T4427] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  298.508151][ T4427] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  298.587434][ T4427] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  298.653433][ T4427] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  298.693847][ T4427] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  298.773788][ T5581] ptrace attach of "/root/syz-executor.2 exec"[5080] was attempted by "/root/syz-executor.2 exec"[5581]
[  300.039631][ T5521] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.227494][ T5521] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.429816][ T5521] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.560353][ T5521] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.709578][ T5489] 8021q: adding VLAN 0 to HW filter on device bond0
[  300.793621][ T4427] Bluetooth: hci1: command tx timeout
[  300.936826][ T5517] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.066761][ T5517] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.130019][ T5578] chnl_net:caif_netlink_parms(): no params data found
[  301.202128][ T5489] 8021q: adding VLAN 0 to HW filter on device team0
[  301.278851][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state
[  301.286694][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state
[  301.341082][ T5517] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.446059][   T75] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.528405][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state
[  301.536269][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state
[  301.549287][ T5597] net_ratelimit: 44 callbacks suppressed
[  301.549358][ T5597] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  301.589624][   T75] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.653748][ T5517] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.774974][   T75] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.978494][   T75] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.312830][ T5521] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  302.357536][ T5521] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  302.413652][ T5521] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  302.444287][ T5517] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  302.570470][ T5521] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  302.652133][ T5517] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  302.872764][ T4427] Bluetooth: hci1: command tx timeout
[  302.906346][ T5517] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  302.965308][ T5578] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.973163][ T5578] bridge0: port 1(bridge_slave_0) entered disabled state
[  302.983488][ T5578] bridge_slave_0: entered allmulticast mode
[  302.993255][ T5578] bridge_slave_0: entered promiscuous mode
[  303.051094][ T5578] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.061182][ T5578] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.069281][ T5578] bridge_slave_1: entered allmulticast mode
[  303.078559][ T5578] bridge_slave_1: entered promiscuous mode
[  303.223652][   T75] bridge_slave_1: left allmulticast mode
[  303.229556][   T75] bridge_slave_1: left promiscuous mode
[  303.237426][   T75] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.273648][   T75] bridge_slave_0: left allmulticast mode
[  303.279672][   T75] bridge_slave_0: left promiscuous mode
[  303.286832][   T75] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.324459][   T75] bridge_slave_1: left allmulticast mode
[  303.330391][   T75] bridge_slave_1: left promiscuous mode
[  303.337351][   T75] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.378286][   T75] bridge_slave_0: left allmulticast mode
[  303.386647][   T75] bridge_slave_0: left promiscuous mode
[  303.396308][   T75] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.437161][   T75] bridge_slave_1: left allmulticast mode
[  303.443257][   T75] bridge_slave_1: left promiscuous mode
[  303.449795][   T75] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.488970][   T75] bridge_slave_0: left allmulticast mode
[  303.495184][   T75] bridge_slave_0: left promiscuous mode
[  303.501882][   T75] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.952087][ T4427] Bluetooth: hci1: command tx timeout
[  305.110277][   T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  305.139001][   T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  305.171304][   T75] bond0 (unregistering): Released all slaves
[  305.211978][   T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  305.253690][   T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  305.274511][   T75] bond0 (unregistering): Released all slaves
[  305.302884][   T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  305.369917][   T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  305.393690][   T75] bond0 (unregistering): Released all slaves
[  305.420458][ T5517] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  305.589465][ T5578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  305.742439][ T5578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  305.896425][ T5578] team0: Port device team_slave_0 added
[  305.988719][ T5578] team0: Port device team_slave_1 added
[  306.413651][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_0
[  306.420859][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  306.448875][ T5578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  306.666351][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_1
[  306.673736][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  306.700153][ T5578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  307.033319][ T4427] Bluetooth: hci1: command tx timeout
[  307.614171][ T5578] hsr_slave_0: entered promiscuous mode
[  307.647079][ T5578] hsr_slave_1: entered promiscuous mode
[  307.698575][ T5578] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  307.706589][ T5578] Cannot create hsr debugfs directory
[  307.882483][ T5521] 8021q: adding VLAN 0 to HW filter on device bond0
[  308.340657][ T5489] 8021q: adding VLAN 0 to HW filter on device batadv0
[  308.559196][   T75] hsr_slave_0: left promiscuous mode
[  308.593151][   T75] hsr_slave_1: left promiscuous mode
[  308.610931][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  308.619294][   T75] batman_adv: batadv0: Removing interface: batadv_slave_0
[  308.659548][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  308.667600][   T75] batman_adv: batadv0: Removing interface: batadv_slave_1
[  308.809821][   T75] hsr_slave_0: left promiscuous mode
[  308.834260][   T75] hsr_slave_1: left promiscuous mode
[  308.877005][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  308.885366][   T75] batman_adv: batadv0: Removing interface: batadv_slave_0
[  308.922952][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  308.930768][   T75] batman_adv: batadv0: Removing interface: batadv_slave_1
[  309.050270][   T75] hsr_slave_0: left promiscuous mode
[  309.077419][   T75] hsr_slave_1: left promiscuous mode
[  309.122605][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  309.130418][   T75] batman_adv: batadv0: Removing interface: batadv_slave_0
[  309.169363][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  309.177281][   T75] batman_adv: batadv0: Removing interface: batadv_slave_1
[  309.246586][   T75] veth1_macvtap: left promiscuous mode
[  309.252595][   T75] veth0_macvtap: left promiscuous mode
[  309.258530][   T75] veth1_vlan: left promiscuous mode
[  309.265319][   T75] veth0_vlan: left promiscuous mode
[  309.332241][   T75] veth1_macvtap: left promiscuous mode
[  309.338020][   T75] veth0_macvtap: left promiscuous mode
[  309.344178][   T75] veth1_vlan: left promiscuous mode
[  309.349800][   T75] veth0_vlan: left promiscuous mode
[  309.393590][   T75] veth1_macvtap: left promiscuous mode
[  309.399381][   T75] veth0_macvtap: left promiscuous mode
[  309.407647][   T75] veth1_vlan: left promiscuous mode
[  309.414599][   T75] veth0_vlan: left promiscuous mode
[  310.871947][   T75] team0 (unregistering): Port device team_slave_1 removed
[  310.917604][   T75] team0 (unregistering): Port device team_slave_0 removed
[  311.481092][ T5643] loop2: detected capacity change from 0 to 512
[  311.594230][ T5643] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  311.604275][ T5643] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor.2: invalid indirect mapped block 8 (level 2)
[  311.640187][ T5643] EXT4-fs (loop2): Remounting filesystem read-only
[  311.648038][ T5643] EXT4-fs (loop2): 1 truncate cleaned up
[  311.655897][ T5643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  311.704113][   T75] team0 (unregistering): Port device team_slave_1 removed
[  311.758005][   T75] team0 (unregistering): Port device team_slave_0 removed
[  311.824796][ T5080] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.553499][   T75] team0 (unregistering): Port device team_slave_1 removed
[  312.579502][   T75] team0 (unregistering): Port device team_slave_0 removed
[  313.084297][ T5521] 8021q: adding VLAN 0 to HW filter on device team0
[  313.175119][ T5517] 8021q: adding VLAN 0 to HW filter on device bond0
[  313.327875][ T5057] bridge0: port 1(bridge_slave_0) entered blocking state
[  313.335713][ T5057] bridge0: port 1(bridge_slave_0) entered forwarding state
[  313.478665][ T5057] bridge0: port 2(bridge_slave_1) entered blocking state
[  313.486478][ T5057] bridge0: port 2(bridge_slave_1) entered forwarding state
[  313.539036][ T5517] 8021q: adding VLAN 0 to HW filter on device team0
[  313.734818][ T5057] bridge0: port 1(bridge_slave_0) entered blocking state
[  313.742651][ T5057] bridge0: port 1(bridge_slave_0) entered forwarding state
[  314.003872][ T5127] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  314.126388][ T5057] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.134223][ T5057] bridge0: port 2(bridge_slave_1) entered forwarding state
[  314.225855][ T5489] veth0_vlan: entered promiscuous mode
[  314.322229][ T5127] usb 3-1: Using ep0 maxpacket: 16
[  314.590018][ T5489] veth1_vlan: entered promiscuous mode
[  314.613703][ T5127] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  314.623232][ T5127] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  314.631499][ T5127] usb 3-1: Product: syz
[  314.636166][ T5127] usb 3-1: Manufacturer: syz
[  314.802620][ T5127] r8152-cfgselector 3-1: Unknown version 0x0000
[  314.809293][ T5127] r8152-cfgselector 3-1: config 0 descriptor??
[  315.130342][ T5127] r8152-cfgselector 3-1: Unknown version 0x0000
[  315.138992][ T5127] r8152-cfgselector 3-1: bad CDC descriptors
[  315.312436][ T5127] r8152-cfgselector 3-1: USB disconnect, device number 3
[  315.328744][ T5489] veth0_macvtap: entered promiscuous mode
[  315.451653][ T5489] veth1_macvtap: entered promiscuous mode
[  315.597161][ T5578] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  315.702864][ T5578] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  315.773568][ T5489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  315.786446][ T5489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.801403][ T5489] batman_adv: batadv0: Interface activated: batadv_slave_0
[  315.825644][ T5578] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  315.943236][ T5578] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  316.045167][ T5489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  316.056176][ T5489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  316.073874][ T5489] batman_adv: batadv0: Interface activated: batadv_slave_1
[  316.269429][ T5489] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  316.278735][ T5489] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  316.288017][ T5489] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  316.297264][ T5489] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  316.764712][ T5521] 8021q: adding VLAN 0 to HW filter on device batadv0
[  317.432926][ T5521] veth0_vlan: entered promiscuous mode
[  317.489061][ T5517] 8021q: adding VLAN 0 to HW filter on device batadv0
[  317.709093][ T5521] veth1_vlan: entered promiscuous mode
[  317.940742][ T5578] 8021q: adding VLAN 0 to HW filter on device bond0
[  317.970846][ T5680] loop2: detected capacity change from 0 to 256
[  317.977754][ T5517] veth0_vlan: entered promiscuous mode
[  318.169306][ T5517] veth1_vlan: entered promiscuous mode
[  318.256027][ T5578] 8021q: adding VLAN 0 to HW filter on device team0
[  318.294900][ T5521] veth0_macvtap: entered promiscuous mode
[  318.424594][ T5129] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.432208][ T5129] bridge0: port 1(bridge_slave_0) entered forwarding state
[  318.504732][ T5521] veth1_macvtap: entered promiscuous mode
[  318.545673][ T5129] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.553522][ T5129] bridge0: port 2(bridge_slave_1) entered forwarding state
[  318.801363][ T5517] veth0_macvtap: entered promiscuous mode
[  318.893824][ T5521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  318.904626][ T5521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.914831][ T5521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  318.925598][ T5521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.940566][ T5521] batman_adv: batadv0: Interface activated: batadv_slave_0
[  318.980716][ T5517] veth1_macvtap: entered promiscuous mode
[  319.300559][ T5521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  319.311624][ T5521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  319.321979][ T5521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  319.332767][ T5521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  319.347716][ T5521] batman_adv: batadv0: Interface activated: batadv_slave_1
[  319.373117][ T5517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  319.383865][ T5517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  319.393932][ T5517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  319.404602][ T5517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  319.414610][ T5517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  319.425241][ T5517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  319.440456][ T5517] batman_adv: batadv0: Interface activated: batadv_slave_0
[  319.623297][ T5521] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  319.632555][ T5521] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  319.641565][ T5521] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  319.650743][ T5521] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  319.669550][ T5517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  319.683674][ T5517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  319.696750][ T5517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  319.707725][ T5517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  319.718047][ T5517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  319.729343][ T5517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  319.748101][ T5517] batman_adv: batadv0: Interface activated: batadv_slave_1
[  320.185692][ T5517] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  320.194764][ T5517] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  320.203814][ T5517] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  320.213631][ T5517] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  321.644919][ T5578] 8021q: adding VLAN 0 to HW filter on device batadv0
[  324.414874][ T5578] veth0_vlan: entered promiscuous mode
[  324.577788][ T5578] veth1_vlan: entered promiscuous mode
[  324.946120][ T5578] veth0_macvtap: entered promiscuous mode
[  325.073931][ T5578] veth1_macvtap: entered promiscuous mode
[  325.292711][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  325.300684][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.357522][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.368287][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.379705][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.390896][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.401594][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.412464][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.422470][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.435926][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.450208][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_0
[  325.651173][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.663279][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.673492][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.684820][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.695580][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.706430][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.716526][ T5578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.727348][ T5578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.742527][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_1
[  325.771232][  T781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  325.779864][  T781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.996294][ T5578] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  326.005372][ T5578] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  326.014431][ T5578] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  326.024065][ T5578] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  326.364193][ T5762] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  328.006393][   T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  328.014488][   T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  328.156181][ T2992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  328.165030][ T2992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  328.330785][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  328.340000][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  328.491006][ T3841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  328.500366][ T3841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  330.109376][ T5797] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  333.833150][ T5072] Bluetooth: hci3: command 0x0406 tx timeout
[  335.708393][ T2447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  335.717528][ T2447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  335.974727][ T3796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  335.983815][ T3796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  339.952527][ T5894] loop3: detected capacity change from 0 to 256
[  340.332207][ T5896] loop1: detected capacity change from 0 to 512
[  340.546836][ T5896] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  340.560161][ T5896] ext4 filesystem being mounted at /root/syzkaller-testdir2144669466/syzkaller.nlfkXP/11/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  341.025073][ T5153] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  341.041821][    C0] hrtimer: interrupt took 264161 ns
[  341.104257][  T781] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  342.956061][ T1221] ieee802154 phy0 wpan0: encryption failed: -22
[  342.963351][ T1221] ieee802154 phy1 wpan1: encryption failed: -22
[  342.979005][ T5153] usb 2-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f
[  342.992664][ T5153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.095142][  T781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  343.106865][  T781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  343.117333][  T781] usb 4-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00
[  343.126874][  T781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.165927][ T5153] usb 2-1: config 0 descriptor??
[  343.204579][  T781] usb 4-1: config 0 descriptor??
[  343.267363][ T5153] usb 2-1: can't set config #0, error -71
[  343.383114][ T5153] usb 2-1: USB disconnect, device number 2
[  343.413566][ T5521] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.779696][  T781] wacom 0003:056A:0043.0001: Unknown device_type for 'HID 056a:0043'. Assuming pen.
[  343.935893][  T781] wacom 0003:056A:0043.0001: hidraw0: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.3-1/input0
[  343.950280][  T781] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0043.0001/input/input7
[  344.189647][  T781] usb 4-1: USB disconnect, device number 2
[  345.187960][ T5918] loop0: detected capacity change from 0 to 2048
[  346.159266][ T5918] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  346.174982][ T5918] ext4 filesystem being mounted at /root/syzkaller-testdir974958372/syzkaller.gPBrK7/19/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  347.218921][ T5489] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  349.493348][ T2447] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.537035][ T5942] loop3: detected capacity change from 0 to 4096
[  349.626710][ T5942] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512).
[  349.694229][ T2447] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.938054][ T5942] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  350.016538][ T5072] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  350.040924][ T5072] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  350.063975][ T5072] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  350.116391][ T2447] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.136250][ T5072] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  350.168937][ T5072] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  350.194503][ T5072] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  350.399305][ T2447] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.146107][ T3841] ntfs3: loop3: ino=5, ntfs3_write_inode failed, -22.
[  351.154887][ T2447] bridge_slave_1: left allmulticast mode
[  351.160770][ T2447] bridge_slave_1: left promiscuous mode
[  351.167654][ T2447] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.223104][ T2447] bridge_slave_0: left allmulticast mode
[  351.229026][ T2447] bridge_slave_0: left promiscuous mode
[  351.235928][ T2447] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.564532][ T5962] loop0: detected capacity change from 0 to 4096
[  351.681199][ T5962] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  352.189327][ T2447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  352.278924][ T5972] ntfs3: loop0: ino=1d, "file1" attr_set_size
[  352.312080][ T4427] Bluetooth: hci0: command tx timeout
[  352.321306][ T2447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  352.369488][ T2447] bond0 (unregistering): Released all slaves
[  352.473069][ T5969] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  352.551483][ T5969] team0: Port device vlan1 added
[  352.877204][ T5971] loop3: detected capacity change from 0 to 4096
[  353.083311][ T5971] NILFS (loop3): invalid segment: Checksum error in segment payload
[  353.091641][ T5971] NILFS (loop3): trying rollback from an earlier position
[  353.144935][ T5954] chnl_net:caif_netlink_parms(): no params data found
[  353.179189][ T5971] NILFS (loop3): recovery complete
[  353.212657][ T5975] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  353.342927][ T5971] overlayfs: upper fs does not support tmpfile.
[  353.350117][ T5971] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  353.357606][ T5971] overlayfs: failed to set xattr on upper
[  353.363647][ T5971] overlayfs: ...falling back to redirect_dir=nofollow.
[  353.370691][ T5971] overlayfs: ...falling back to index=off.
[  353.376870][ T5971] overlayfs: ...falling back to uuid=null.
[  353.497893][ T5979] loop4: detected capacity change from 0 to 64
[  353.701480][ T2447] hsr_slave_0: left promiscuous mode
[  353.784443][ T2447] hsr_slave_1: left promiscuous mode
[  353.822566][ T2447] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  353.830338][ T2447] batman_adv: batadv0: Removing interface: batadv_slave_0
[  353.887163][ T2447] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  353.895006][ T2447] batman_adv: batadv0: Removing interface: batadv_slave_1
[  354.008064][ T2447] veth1_macvtap: left promiscuous mode
[  354.014415][ T2447] veth0_macvtap: left promiscuous mode
[  354.020326][ T2447] veth1_vlan: left promiscuous mode
[  354.026169][ T2447] veth0_vlan: left promiscuous mode
[  354.461524][ T4427] Bluetooth: hci0: command tx timeout
[  355.179581][ T2447] team0 (unregistering): Port device team_slave_1 removed
[  355.293449][ T2447] team0 (unregistering): Port device team_slave_0 removed
[  355.867289][ T5990] 9pnet_fd: Insufficient options for proto=fd
[  356.474540][ T4427] Bluetooth: hci0: command tx timeout
[  357.394176][ T6001] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET)
[  358.562474][ T4427] Bluetooth: hci0: command tx timeout
[  358.826868][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.834727][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state
[  358.842818][ T5954] bridge_slave_0: entered allmulticast mode
[  358.853409][ T5954] bridge_slave_0: entered promiscuous mode
[  359.038567][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state
[  359.046444][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state
[  359.054551][ T5954] bridge_slave_1: entered allmulticast mode
[  359.063928][ T5954] bridge_slave_1: entered promiscuous mode
[  359.395480][ T6016] loop0: detected capacity change from 0 to 4096
[  359.414160][ T6013] loop1: detected capacity change from 0 to 4096
[  359.493089][ T6013] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512).
[  359.522773][ T6016] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  359.568054][ T5954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  359.670296][ T5954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  359.706237][ T6013] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  360.155539][ T5954] team0: Port device team_slave_0 added
[  360.267366][ T5954] team0: Port device team_slave_1 added
[  360.445176][ T3796] ntfs3: loop1: ino=5, ntfs3_write_inode failed, -22.
[  360.453542][ T6027] ntfs3: loop0: ino=1d, "file1" attr_set_size
[  360.574774][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_0
[  360.582028][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  360.609647][ T5954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  360.836574][ T5954] batman_adv: batadv0: Adding interface: batadv_slave_1
[  360.844196][ T5954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  360.870675][ T5954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  361.653730][ T5954] hsr_slave_0: entered promiscuous mode
[  361.742768][ T5954] hsr_slave_1: entered promiscuous mode
[  362.023370][ T5127] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  362.195741][ T6036] loop1: detected capacity change from 0 to 4096
[  362.433276][ T5127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  362.450235][ T5127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  362.462300][ T5127] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  362.471652][ T5127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.498392][ T6036] NILFS (loop1): invalid segment: Checksum error in segment payload
[  362.506859][ T6036] NILFS (loop1): trying rollback from an earlier position
[  362.540079][ T5127] usb 4-1: config 0 descriptor??
[  362.727648][ T6036] NILFS (loop1): recovery complete
[  362.789957][ T6045] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  363.019000][ T6036] overlayfs: upper fs does not support tmpfile.
[  363.070194][ T6036] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  363.078250][ T6036] overlayfs: failed to set xattr on upper
[  363.084497][ T6036] overlayfs: ...falling back to redirect_dir=nofollow.
[  363.091534][ T6036] overlayfs: ...falling back to index=off.
[  363.097698][ T6036] overlayfs: ...falling back to uuid=null.
[  363.190920][ T5127] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0
[  363.198690][ T5127] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0
[  363.206386][ T5127] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0
[  363.214070][ T5127] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0
[  363.221581][ T5127] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0
[  363.312672][ T5127] cm6533_jd 0003:0D8C:0022.0002: No inputs registered, leaving
[  363.503819][ T5127] cm6533_jd 0003:0D8C:0022.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0
[  363.627040][ T5127] usb 4-1: USB disconnect, device number 3
[  364.072303][ T6058] loop0: detected capacity change from 0 to 64
[  364.756465][ T5954] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  364.857985][ T6062] capability: warning: `syz-executor.3' uses deprecated v2 capabilities in a way that may be insecure
[  364.911652][ T5954] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  365.048898][ T5954] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  365.094717][ T6068] loop0: detected capacity change from 0 to 8
[  365.169281][ T6068] Page size > filesystem block size (256).  This is currently not supported!
[  365.359312][ T5954] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  365.522224][ T6069] loop3: detected capacity change from 0 to 2048
[  365.653012][ T6069] NILFS (loop3): unrecognized mount option "& "
[  366.008657][ T6074] pim6reg: entered allmulticast mode
[  366.109072][ T6078] pim6reg: left allmulticast mode
[  366.133379][ T6062] loop3: detected capacity change from 0 to 16
[  366.243334][ T6062] erofs: (device loop3): mounted with root inode @ nid 36.
[  368.683743][ T5954] 8021q: adding VLAN 0 to HW filter on device bond0
[  368.916439][ T5954] 8021q: adding VLAN 0 to HW filter on device team0
[  368.946344][ T6079] loop4: detected capacity change from 0 to 4096
[  369.068463][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.076286][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state
[  369.241248][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.249092][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state
[  370.973545][   T29] audit: type=1326 audit(1717812574.339:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6104 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f748f67cf69 code=0x0
[  371.602099][  T781] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  372.124130][  T781] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  372.135626][  T781] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  372.145902][  T781] usb 5-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00
[  372.155944][  T781] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.225768][  T781] usb 5-1: config 0 descriptor??
[  372.702418][ T5954] 8021q: adding VLAN 0 to HW filter on device batadv0
[  372.870048][  T781] wacom 0003:056A:0043.0003: Unknown device_type for 'HID 056a:0043'. Assuming pen.
[  372.925304][  T781] wacom 0003:056A:0043.0003: hidraw0: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.4-1/input0
[  372.941392][  T781] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0043.0003/input/input10
[  373.250684][  T781] usb 5-1: USB disconnect, device number 2
[  373.572316][ T5954] veth0_vlan: entered promiscuous mode
[  373.791015][ T5954] veth1_vlan: entered promiscuous mode
[  374.382167][ T5954] veth0_macvtap: entered promiscuous mode
[  374.511273][ T5954] veth1_macvtap: entered promiscuous mode
[  374.857372][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  374.868227][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.878616][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  374.889444][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.899580][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  374.910554][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.920722][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  374.931558][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  374.957679][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_0
[  375.085399][ T6145] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  375.375294][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  375.386379][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.396614][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  375.407480][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.417787][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  375.428562][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.438829][ T5954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  375.456585][ T5954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.473979][ T5954] batman_adv: batadv0: Interface activated: batadv_slave_1
[  375.792160][ T5954] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  375.801249][ T5954] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  375.810524][ T5954] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  375.819706][ T5954] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  376.022350][   T29] audit: type=1326 audit(1717812579.359:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f748f67cf69 code=0x0
[  376.943606][ T6151] loop1: detected capacity change from 0 to 4096
[  377.070990][ T6151] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  377.478710][ T6151] ntfs3: loop1: Failed to load root (-22).
[  378.606592][ T6180] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  378.759312][ T6180] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  381.188568][ T6217] pim6reg1: entered promiscuous mode
[  381.196170][ T6217] pim6reg1: entered allmulticast mode
[  382.148394][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  382.253220][ T6231] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  384.992820][ T6279] loop4: detected capacity change from 0 to 256
[  386.274152][ T6291] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  386.397921][ T6294] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  387.381471][   T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.389699][   T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.896902][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.905231][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  389.543333][ T6327] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  389.601050][ T6327] netlink: 'syz-executor.2': attribute type 27 has an invalid length.
[  389.858935][ T6329] af_packet: tpacket_rcv: packet too big, clamped from 4192 to 3952. macoff=96
[  389.973664][ T6340] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[  390.542929][ T6327] bridge0: port 2(bridge_slave_1) entered disabled state
[  390.562539][ T6327] bridge0: port 1(bridge_slave_0) entered disabled state
[  391.646622][ T6327] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  391.761202][ T6327] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  392.650417][ T6327] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  392.670107][ T6327] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  392.682324][ T6327] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  392.691544][ T6327] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  393.733697][ T6372] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  393.807164][ T6372] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  395.120219][   T29] audit: type=1326 audit(1717812598.489:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa89307cf69 code=0xffff0000
[  400.392260][ T5079] Bluetooth: hci5: command 0x0406 tx timeout
[  403.455902][ T1221] ieee802154 phy0 wpan0: encryption failed: -22
[  403.462744][ T1221] ieee802154 phy1 wpan1: encryption failed: -22
[  404.770631][ T6544] loop2: detected capacity change from 0 to 16
[  404.857773][ T6544] erofs: (device loop2): mounted with root inode @ nid 36.
[  405.517523][ T5072] Bluetooth: hci6: command 0x0406 tx timeout
[  405.526209][ T5079] Bluetooth: hci7: command 0x0406 tx timeout
[  405.812351][ T6353] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  411.029050][ T6567] loop2: detected capacity change from 0 to 512
[  411.309203][ T6567] EXT4-fs (loop2): blocks per group (71) and clusters per group (32768) inconsistent
[  411.500864][   T29] audit: type=1800 audit(1717812614.889:10): pid=6567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1937 res=0 errno=0
[  411.530627][ T6567] veth0_to_team: entered promiscuous mode
[  411.570021][ T6566] veth0_to_team: left promiscuous mode
[  412.095523][ T6582] loop1: detected capacity change from 0 to 512
[  412.126520][ T6582] EXT4-fs: Ignoring removed nomblk_io_submit option
[  412.222134][ T6341] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  412.223173][ T6582] EXT4-fs (loop1): orphan cleanup on readonly fs
[  412.299961][ T6582] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor.1: bg 0: block 248: padding at end of block bitmap is not set
[  412.416729][ T6582] Quota error (device loop1): write_blk: dquota write failed
[  412.426309][ T6582] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  412.437260][ T6582] EXT4-fs error (device loop1): ext4_acquire_dquot:6882: comm syz-executor.1: Failed to acquire dquot type 1
[  412.508671][ T6582] EXT4-fs (loop1): 1 truncate cleaned up
[  412.542157][ T6341] usb 5-1: Using ep0 maxpacket: 16
[  412.548668][ T6582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  412.672361][ T6341] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  412.684651][ T6341] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  412.695403][ T6341] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  412.708662][ T6341] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  412.718173][ T6341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.803582][ T6341] usb 5-1: config 0 descriptor??
[  413.322069][ T6341] microsoft 0003:045E:07DA.0004: global environment stack underflow
[  413.330529][ T6341] microsoft 0003:045E:07DA.0004: item 0 2 1 11 parsing failed
[  414.740216][ T6341] microsoft 0003:045E:07DA.0004: parse failed
[  414.747227][ T6341] microsoft 0003:045E:07DA.0004: probe with driver microsoft failed with error -22
[  414.865356][ T6582] syz-executor.1 (6582) used greatest stack depth: 4216 bytes left
[  415.484755][ T6341] usb 5-1: USB disconnect, device number 3
[  416.089226][ T5521] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  417.073217][ T6341] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  419.534755][ T6341] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  419.546160][ T6341] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  419.556321][ T6341] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  419.569559][ T6341] usb 3-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00
[  419.579008][ T6341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.674385][ T6341] usb 3-1: config 0 descriptor??
[  419.827257][ T6341] usb 3-1: can't set config #0, error -71
[  419.870820][ T6341] usb 3-1: USB disconnect, device number 4
[  420.872414][ T5079] Bluetooth: hci1: command 0x0406 tx timeout
[  421.055382][   T29] audit: type=1326 audit(1717812624.459:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f748f67cf69 code=0x0
[  422.375290][ T6667] loop3: detected capacity change from 0 to 256
[  423.498143][ T6667] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ'
[  423.528797][ T6667] 9pnet_fd: p9_fd_create_tcp (6667): problem connecting socket to 127.0.0.1
[  424.895413][ T6347] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  425.194130][ T6347] usb 2-1: too many configurations: 33, using maximum allowed: 8
[  425.974877][ T6347] usb 2-1: New USB device found, idVendor=0403, idProduct=8698, bcdDevice=bd.70
[  425.984393][ T6347] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  426.030007][ T6347] usb 2-1: config 0 descriptor??
[  426.124747][ T6347] ftdi_sio 2-1:0.0: Ignoring interface reserved for JTAG
[  426.302750][   T29] audit: type=1326 audit(1717812629.689:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f748f67cf69 code=0x0
[  426.307312][ T6341] usb 2-1: USB disconnect, device number 4
[  426.801984][ T6706] loop2: detected capacity change from 0 to 512
[  427.040765][ T6706] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz-executor.2: casefold flag without casefold feature
[  427.204416][ T6706] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  427.364155][ T6706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  430.120777][ T5954] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  430.277870][ T6732] ptrace attach of "/root/syz-executor.1 exec"[5521] was attempted by "/root/syz-executor.1 exec"[6732]
[  436.846797][   T29] audit: type=1800 audit(1717812640.049:13): pid=6778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file2" dev="sda1" ino=1965 res=0 errno=0
[  436.935376][   T29] audit: type=1326 audit(1717812640.399:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea7c7cf69 code=0x7ffc0000
[  436.960340][   T29] audit: type=1326 audit(1717812640.399:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faea7c7cf69 code=0x7ffc0000
[  436.984122][   T29] audit: type=1326 audit(1717812640.399:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea7c7cf69 code=0x7ffc0000
[  437.011171][   T29] audit: type=1326 audit(1717812640.439:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7faea7c7cf69 code=0x7ffc0000
[  437.036363][   T29] audit: type=1326 audit(1717812640.449:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea7c7cf69 code=0x7ffc0000
[  437.059488][   T29] audit: type=1326 audit(1717812640.499:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faea7c7cf69 code=0x7ffc0000
[  437.082734][   T29] audit: type=1326 audit(1717812640.499:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea7c7cf69 code=0x7ffc0000
[  437.280149][   T29] audit: type=1326 audit(1717812640.619:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faea7c7cf69 code=0x7ffc0000
[  437.305042][   T29] audit: type=1326 audit(1717812640.619:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faea7c7cf69 code=0x7ffc0000
[  439.988345][ T6813] loop4: detected capacity change from 0 to 1024
[  440.180312][ T6813] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  440.579173][ T6826] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1216: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  440.754575][ T6826] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  440.767452][ T6826] EXT4-fs (loop4): This should not happen!! Data will be lost
[  440.767452][ T6826] 
[  440.777508][ T6826] EXT4-fs (loop4): Total free blocks count 0
[  440.791391][ T6826] EXT4-fs (loop4): Free/Dirty block details
[  440.799659][ T6826] EXT4-fs (loop4): free_blocks=68451041280
[  440.805843][ T6826] EXT4-fs (loop4): dirty_blocks=32
[  440.811169][ T6826] EXT4-fs (loop4): Block reservation details
[  440.817606][ T6826] EXT4-fs (loop4): i_reserved_data_blocks=2
[  440.867872][ T6826] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28
[  445.009067][ T6863] ptrace attach of "/root/syz-executor.1 exec"[5521] was attempted by "/root/syz-executor.1 exec"[6863]
[  445.599540][   T29] kauditd_printk_skb: 2 callbacks suppressed
[  445.599612][   T29] audit: type=1800 audit(1717812649.029:25): pid=6872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file2" dev="sda1" ino=1962 res=0 errno=0
[  451.755193][ T6901] ptrace attach of "/root/syz-executor.2 exec"[5954] was attempted by "/root/syz-executor.2 exec"[6901]
[  453.287547][ T6918] capability: warning: `syz-executor.3' uses 32-bit capabilities (legacy support in use)
[  453.359762][   T29] audit: type=1800 audit(1717812656.809:26): pid=6919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="sda1" ino=1964 res=0 errno=0
[  455.971282][   T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  456.193574][ T6341] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  456.456151][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  456.467450][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  456.477580][   T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00
[  456.486856][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.648448][   T10] usb 2-1: config 0 descriptor??
[  456.733342][   T29] audit: type=1800 audit(1717812659.969:27): pid=6933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file2" dev="sda1" ino=1966 res=0 errno=0
[  456.763136][ T6341] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  456.772502][ T6341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.791312][ T6341] usb 4-1: config 0 descriptor??
[  460.904000][ T6341] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  460.912980][ T6341] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  460.923996][   T10] usbhid 2-1:0.0: can't add hid device: -71
[  460.930886][   T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  460.950861][ T6341] [drm:udl_init] *ERROR* Selecting channel failed
[  461.098140][   T10] usb 2-1: USB disconnect, device number 5
[  461.143411][ T6341] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2
[  461.151068][ T6341] [drm] Initialized udl on minor 2
[  461.253098][ T6341] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  461.264025][ T6341] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  461.341967][ T6347] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  461.377847][ T6341] usb 4-1: USB disconnect, device number 4
[  461.391108][ T6347] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  461.400486][ T6347] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  464.956700][ T1221] ieee802154 phy0 wpan0: encryption failed: -22
[  464.963845][ T1221] ieee802154 phy1 wpan1: encryption failed: -22
[  467.082120][ T6347] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  467.392003][ T6347] usb 4-1: Using ep0 maxpacket: 16
[  467.512012][ T6353] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  467.512218][ T6347] usb 4-1: config 0 has no interfaces?
[  467.732447][ T6347] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  467.742214][ T6347] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  467.750351][ T6347] usb 4-1: Product: syz
[  467.754797][ T6347] usb 4-1: Manufacturer: syz
[  467.902396][ T6347] r8152-cfgselector 4-1: Unknown version 0x0000
[  467.908830][ T6347] r8152-cfgselector 4-1: config 0 descriptor??
[  468.053408][ T6353] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  468.064821][ T6353] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  468.075310][ T6353] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  468.084815][ T6353] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  468.128599][ T6353] usb 3-1: config 0 descriptor??
[  468.691852][ T6353] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0
[  468.699571][ T6353] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0
[  468.758759][ T6353] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0005/input/input14
[  468.793285][ T6353] cm6533_jd 0003:0D8C:0022.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0
[  469.012543][ T6353] usb 3-1: USB disconnect, device number 5
[  470.023727][ T6353] r8152-cfgselector 4-1: USB disconnect, device number 5
[  471.203182][ T6978] loop4: detected capacity change from 0 to 4096
[  471.341293][ T6978] NILFS (loop4): invalid segment: Checksum error in segment payload
[  471.349833][ T6978] NILFS (loop4): trying rollback from an earlier position
[  471.534290][ T6978] NILFS (loop4): recovery complete
[  471.553460][ T6981] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  473.222392][ T5079] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  473.235099][ T5079] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  473.252340][ T5079] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  473.269599][ T5079] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  473.292208][ T5079] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  473.305656][ T5079] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  475.202449][   T29] audit: type=1800 audit(1717812678.379:28): pid=6994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file2" dev="sda1" ino=1956 res=0 errno=0
[  475.432389][ T5072] Bluetooth: hci2: command tx timeout
[  475.562233][ T6987] chnl_net:caif_netlink_parms(): no params data found
[  476.992751][ T6347] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  477.282843][ T5079] Bluetooth: hci0: command 0x0406 tx timeout
[  477.415694][ T6347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  477.426991][ T6347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  477.437141][ T6347] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  477.447000][ T6347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  477.516575][ T5079] Bluetooth: hci2: command tx timeout
[  477.547648][ T6347] usb 4-1: config 0 descriptor??
[  477.726848][ T6987] bridge0: port 1(bridge_slave_0) entered blocking state
[  477.735488][ T6987] bridge0: port 1(bridge_slave_0) entered disabled state
[  477.743379][ T6987] bridge_slave_0: entered allmulticast mode
[  477.753829][ T6987] bridge_slave_0: entered promiscuous mode
[  477.777779][ T6987] bridge0: port 2(bridge_slave_1) entered blocking state
[  477.785731][ T6987] bridge0: port 2(bridge_slave_1) entered disabled state
[  477.795003][ T6987] bridge_slave_1: entered allmulticast mode
[  477.804157][ T6987] bridge_slave_1: entered promiscuous mode
[  478.060878][ T6347] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0
[  478.068743][ T6347] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0
[  478.166527][ T6987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  478.203745][ T6347] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0006/input/input15
[  478.367871][ T6987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  478.415572][ T6347] cm6533_jd 0003:0D8C:0022.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0
[  478.486973][ T6347] usb 4-1: USB disconnect, device number 6
[  478.800503][ T6987] team0: Port device team_slave_0 added
[  478.863128][ T6987] team0: Port device team_slave_1 added
[  479.164422][ T6987] batman_adv: batadv0: Adding interface: batadv_slave_0
[  479.171598][ T6987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  479.199896][ T6987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  479.373468][ T6987] batman_adv: batadv0: Adding interface: batadv_slave_1
[  479.380661][ T6987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  479.408258][ T6987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  479.593711][ T5079] Bluetooth: hci2: command tx timeout
[  479.977208][ T6987] hsr_slave_0: entered promiscuous mode
[  480.046270][ T6987] hsr_slave_1: entered promiscuous mode
[  480.105812][ T6987] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  480.113690][ T6987] Cannot create hsr debugfs directory
[  481.222291][ T7016] loop4: detected capacity change from 0 to 1024
[  481.240148][   T58] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.397676][   T58] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.486259][ T7016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  481.606231][   T58] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.671893][ T5079] Bluetooth: hci2: command tx timeout
[  481.908991][   T58] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.394452][   T58] bridge_slave_1: left allmulticast mode
[  482.400469][   T58] bridge_slave_1: left promiscuous mode
[  482.407353][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[  482.465728][ T5578] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.4: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  482.536167][   T58] bridge_slave_0: left allmulticast mode
[  482.539196][ T5578] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.4: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  482.542265][   T58] bridge_slave_0: left promiscuous mode
[  482.573385][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.229595][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  483.353747][ T7022] loop1: detected capacity change from 0 to 4096
[  483.360357][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  483.390639][   T58] bond0 (unregistering): Released all slaves
[  483.670382][ T7022] NILFS (loop1): invalid segment: Checksum error in segment payload
[  483.679053][ T7022] NILFS (loop1): trying rollback from an earlier position
[  483.832213][ T5578] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  483.891584][ T7022] NILFS (loop1): recovery complete
[  483.918059][ T7023] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  484.863674][   T58] hsr_slave_0: left promiscuous mode
[  484.906829][   T58] hsr_slave_1: left promiscuous mode
[  484.958219][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  484.966223][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[  485.029608][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  485.037621][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[  485.122465][   T58] veth1_macvtap: left promiscuous mode
[  485.128260][   T58] veth0_macvtap: left promiscuous mode
[  485.134398][   T58] veth1_vlan: left promiscuous mode
[  485.139987][   T58] veth0_vlan: left promiscuous mode
[  486.436127][   T58] team0 (unregistering): Port device team_slave_1 removed
[  486.524944][   T58] team0 (unregistering): Port device team_slave_0 removed
[  487.412617][ T6987] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  487.512345][ T6987] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  487.680720][ T6987] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  487.783660][ T6341] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  487.823366][ T6987] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  488.205972][ T6341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  488.217351][ T6341] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  488.227604][ T6341] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  488.237167][ T6341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  488.310586][ T6341] usb 2-1: config 0 descriptor??
[  488.436650][ T5072] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  488.505680][ T5072] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  488.515836][ T5072] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  488.534016][ T5072] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  488.545073][ T5072] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  488.560443][ T5072] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  488.590291][ T7046] loop3: detected capacity change from 0 to 1024
[  488.960465][ T6341] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0
[  488.968625][ T6341] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0
[  489.089778][ T7046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  489.132125][ T6987] 8021q: adding VLAN 0 to HW filter on device bond0
[  489.152562][ T6341] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0007/input/input16
[  489.490153][ T6341] cm6533_jd 0003:0D8C:0022.0007: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0
[  489.648114][ T6341] usb 2-1: USB disconnect, device number 6
[  489.789653][ T6987] 8021q: adding VLAN 0 to HW filter on device team0
[  490.106230][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[  490.114222][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[  490.285122][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[  490.292775][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[  490.490502][ T5517] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.3: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  490.547876][ T5517] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.3: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  490.633734][ T5079] Bluetooth: hci1: command tx timeout
[  492.712746][ T5079] Bluetooth: hci1: command tx timeout
[  492.726502][ T7045] chnl_net:caif_netlink_parms(): no params data found
[  493.155585][   T29] audit: type=1800 audit(1717812696.499:29): pid=7065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file2" dev="sda1" ino=1945 res=0 errno=0
[  493.204320][ T5517] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  494.792056][ T5079] Bluetooth: hci1: command tx timeout
[  495.115013][ T6987] 8021q: adding VLAN 0 to HW filter on device batadv0
[  495.312280][ T7045] bridge0: port 1(bridge_slave_0) entered blocking state
[  495.320033][ T7045] bridge0: port 1(bridge_slave_0) entered disabled state
[  495.328264][ T7045] bridge_slave_0: entered allmulticast mode
[  495.336546][ T7045] bridge_slave_0: entered promiscuous mode
[  495.488088][ T7045] bridge0: port 2(bridge_slave_1) entered blocking state
[  495.495744][ T7045] bridge0: port 2(bridge_slave_1) entered disabled state
[  495.503584][ T7045] bridge_slave_1: entered allmulticast mode
[  495.511921][ T7045] bridge_slave_1: entered promiscuous mode
[  495.762183][ T7045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  495.861310][ T7045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  496.089842][   T58] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.203916][   T58] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.417372][   T58] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.445013][ T7045] team0: Port device team_slave_0 added
[  496.483251][ T6987] veth0_vlan: entered promiscuous mode
[  496.607823][   T58] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.743986][ T6987] veth1_vlan: entered promiscuous mode
[  496.873990][ T5079] Bluetooth: hci1: command tx timeout
[  496.959043][ T7045] team0: Port device team_slave_1 added
[  497.138558][ T7045] batman_adv: batadv0: Adding interface: batadv_slave_0
[  497.145915][ T7045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  497.174504][ T7045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  497.241355][ T7045] batman_adv: batadv0: Adding interface: batadv_slave_1
[  497.248704][ T7045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  497.275399][ T7045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  497.478920][ T6987] veth0_macvtap: entered promiscuous mode
[  497.541339][   T58] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.791067][ T5072] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  497.800626][ T5072] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  497.832276][ T5072] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  497.854626][ T5072] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  497.867014][ T5072] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  497.879357][ T5072] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  497.939721][   T58] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.066343][ T6987] veth1_macvtap: entered promiscuous mode
[  498.094278][ T7045] hsr_slave_0: entered promiscuous mode
[  498.126628][ T7045] hsr_slave_1: entered promiscuous mode
[  498.144557][ T7045] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  498.154620][ T7045] Cannot create hsr debugfs directory
[  498.208426][   T58] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.353723][   T58] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.838858][ T6987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  498.849664][ T6987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.859803][ T6987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  498.870484][ T6987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.880522][ T6987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  498.891159][ T6987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.904572][ T6987] batman_adv: batadv0: Interface activated: batadv_slave_0
[  499.103562][   T58] bridge_slave_1: left allmulticast mode
[  499.109486][   T58] bridge_slave_1: left promiscuous mode
[  499.117772][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[  499.169269][   T58] bridge_slave_0: left allmulticast mode
[  499.175788][   T58] bridge_slave_0: left promiscuous mode
[  499.182579][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[  499.203852][   T58] bridge_slave_1: left allmulticast mode
[  499.209768][   T58] bridge_slave_1: left promiscuous mode
[  499.219057][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[  499.263625][   T58] bridge_slave_0: left allmulticast mode
[  499.269541][   T58] bridge_slave_0: left promiscuous mode
[  499.276350][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[  500.025329][ T5072] Bluetooth: hci3: command tx timeout
[  500.401444][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  500.420974][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  500.447652][   T58] bond0 (unregistering): Released all slaves
[  500.490189][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  500.533184][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  500.556885][   T58] bond0 (unregistering): Released all slaves
[  500.621146][ T6987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.633484][ T6987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.645627][ T6987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.657883][ T6987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.670764][ T6987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.682069][ T6987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.697178][ T6987] batman_adv: batadv0: Interface activated: batadv_slave_1
[  500.942361][ T6987] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  500.951435][ T6987] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  500.963951][ T6987] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  500.973267][ T6987] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  501.283937][ T7097] sctp: failed to load transform for md5: -2
[  502.094778][ T5072] Bluetooth: hci3: command tx timeout
[  503.036375][ T7081] chnl_net:caif_netlink_parms(): no params data found
[  503.252687][   T58] hsr_slave_0: left promiscuous mode
[  503.323080][   T58] hsr_slave_1: left promiscuous mode
[  503.362919][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  503.371132][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[  503.408791][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  503.416945][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[  503.562796][   T58] hsr_slave_0: left promiscuous mode
[  503.595058][   T58] hsr_slave_1: left promiscuous mode
[  503.624486][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  503.632739][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[  503.683621][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  503.691405][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[  503.738853][   T58] veth1_macvtap: left promiscuous mode
[  503.744944][   T58] veth0_macvtap: left promiscuous mode
[  503.750830][   T58] veth1_vlan: left promiscuous mode
[  503.757856][   T58] veth0_vlan: left promiscuous mode
[  503.777997][   T58] veth1_macvtap: left promiscuous mode
[  503.784102][   T58] veth0_macvtap: left promiscuous mode
[  503.789859][   T58] veth1_vlan: left promiscuous mode
[  503.795475][   T58] veth0_vlan: left promiscuous mode
[  504.203984][ T5072] Bluetooth: hci3: command tx timeout
[  504.758924][   T58] team0 (unregistering): Port device team_slave_1 removed
[  504.928146][   T58] team0 (unregistering): Port device team_slave_0 removed
[  505.431017][   T58] team0 (unregistering): Port device vlan1 removed
[  505.735679][   T58] team0 (unregistering): Port device team_slave_1 removed
[  505.814696][   T58] team0 (unregistering): Port device team_slave_0 removed
[  506.254077][ T5072] Bluetooth: hci3: command tx timeout
[  506.452409][   T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  506.873682][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  506.885156][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  506.896661][   T10] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  506.900068][ T7045] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  506.906244][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  506.995375][   T10] usb 2-1: config 0 descriptor??
[  507.021876][ T7045] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  507.126240][ T7045] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  507.219926][ T7045] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  507.509280][   T10] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0
[  507.519576][   T10] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0
[  507.634655][   T10] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0008/input/input17
[  507.825218][   T10] cm6533_jd 0003:0D8C:0022.0008: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0
[  507.988752][   T10] usb 2-1: USB disconnect, device number 7
[  508.223979][ T7081] bridge0: port 1(bridge_slave_0) entered blocking state
[  508.234587][ T7081] bridge0: port 1(bridge_slave_0) entered disabled state
[  508.242621][ T7081] bridge_slave_0: entered allmulticast mode
[  508.250634][ T7081] bridge_slave_0: entered promiscuous mode
[  508.402249][ T7081] bridge0: port 2(bridge_slave_1) entered blocking state
[  508.409979][ T7081] bridge0: port 2(bridge_slave_1) entered disabled state
[  508.417991][ T7081] bridge_slave_1: entered allmulticast mode
[  508.426187][ T7081] bridge_slave_1: entered promiscuous mode
[  508.840158][ T7081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  508.981419][ T7081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  509.256262][ T7081] team0: Port device team_slave_0 added
[  509.309540][ T7045] 8021q: adding VLAN 0 to HW filter on device bond0
[  509.346485][ T7081] team0: Port device team_slave_1 added
[  509.579395][ T7081] batman_adv: batadv0: Adding interface: batadv_slave_0
[  509.587587][ T7081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  509.614260][ T7081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  509.698526][ T7147] loop1: detected capacity change from 0 to 4096
[  509.702666][ T7081] batman_adv: batadv0: Adding interface: batadv_slave_1
[  509.712261][ T7081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  509.738514][ T7081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  509.783696][ T7045] 8021q: adding VLAN 0 to HW filter on device team0
[  509.861608][ T7147] NILFS (loop1): invalid segment: Checksum error in segment payload
[  509.870205][ T7147] NILFS (loop1): trying rollback from an earlier position
[  509.947992][  T782] bridge0: port 1(bridge_slave_0) entered blocking state
[  509.955847][  T782] bridge0: port 1(bridge_slave_0) entered forwarding state
[  510.046868][  T782] bridge0: port 2(bridge_slave_1) entered blocking state
[  510.054715][  T782] bridge0: port 2(bridge_slave_1) entered forwarding state
[  510.203489][ T7147] NILFS (loop1): recovery complete
[  510.272908][ T7155] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  510.520784][ T7081] hsr_slave_0: entered promiscuous mode
[  510.572827][ T7081] hsr_slave_1: entered promiscuous mode
[  510.609406][ T7081] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  510.619465][ T7081] Cannot create hsr debugfs directory
[  512.177337][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  512.242165][ T7169] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  513.482436][ T7045] 8021q: adding VLAN 0 to HW filter on device batadv0
[  513.678208][ T7081] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  513.764486][ T2447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  513.772682][ T2447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  513.969261][ T7081] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  514.086579][ T7081] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  514.166830][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  514.167595][ T7081] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  514.175060][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  514.782870][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[  515.735364][ T7081] 8021q: adding VLAN 0 to HW filter on device bond0
[  515.779309][ T7191] loop0: detected capacity change from 0 to 4096
[  515.858086][ T7191] ntfs3: Unknown parameter 'iocharset^maccyrillic'
[  515.996363][ T7081] 8021q: adding VLAN 0 to HW filter on device team0
[  516.105009][ T6345] bridge0: port 1(bridge_slave_0) entered blocking state
[  516.112907][ T6345] bridge0: port 1(bridge_slave_0) entered forwarding state
[  516.282671][ T6345] bridge0: port 2(bridge_slave_1) entered blocking state
[  516.290414][ T6345] bridge0: port 2(bridge_slave_1) entered forwarding state
[  517.182470][ T7045] veth0_vlan: entered promiscuous mode
[  517.578589][ T7045] veth1_vlan: entered promiscuous mode
[  518.056148][ T7045] veth0_macvtap: entered promiscuous mode
[  518.161062][ T7045] veth1_macvtap: entered promiscuous mode
[  518.513196][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  518.524094][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  518.534396][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  518.546453][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  518.561566][ T7045] batman_adv: batadv0: Interface activated: batadv_slave_0
[  518.664939][   T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  518.824684][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  518.835804][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  518.846111][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  518.856939][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  518.872126][ T7045] batman_adv: batadv0: Interface activated: batadv_slave_1
[  519.049837][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  519.061327][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  519.071825][   T10] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  519.081264][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.106296][ T7045] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  519.117766][ T7045] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  519.127541][ T7045] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  519.133945][   T10] usb 3-1: config 0 descriptor??
[  519.136734][ T7045] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  519.655080][ T7081] 8021q: adding VLAN 0 to HW filter on device batadv0
[  519.685690][   T10] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0
[  519.694670][   T10] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0
[  519.806441][   T10] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0009/input/input18
[  520.025875][   T10] cm6533_jd 0003:0D8C:0022.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0
[  520.190791][   T10] usb 3-1: USB disconnect, device number 6
[  520.428703][ T7081] veth0_vlan: entered promiscuous mode
[  520.598442][ T7081] veth1_vlan: entered promiscuous mode
[  521.228523][ T7081] veth0_macvtap: entered promiscuous mode
[  521.263311][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  521.326505][ T7081] veth1_macvtap: entered promiscuous mode
[  521.383010][ T7241] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  521.540500][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  521.551504][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.563507][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  521.576311][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.587046][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  521.597821][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  521.613235][ T7081] batman_adv: batadv0: Interface activated: batadv_slave_0
[  522.051359][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  522.062214][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  522.072519][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  522.083303][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  522.095776][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  522.107454][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  522.123495][ T7081] batman_adv: batadv0: Interface activated: batadv_slave_1
[  522.351021][ T7081] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  522.362259][ T7081] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  522.371290][ T7081] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  522.380846][ T7081] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  526.976799][ T1221] ieee802154 phy0 wpan0: encryption failed: -22
[  526.983590][ T1221] ieee802154 phy1 wpan1: encryption failed: -22
[  527.501899][   T29] audit: type=1800 audit(1717812730.849:30): pid=7286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file2" dev="sda1" ino=1953 res=0 errno=0
[  530.230406][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  530.239465][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  530.588995][   T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  530.597299][   T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  532.092395][ T6355] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  532.257332][ T3967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  532.265662][ T3967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  532.442897][ T6355] usb 5-1: Using ep0 maxpacket: 16
[  532.473439][ T7329] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  532.499368][ T3967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  532.508181][ T3967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  532.544185][ T7332] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  532.582627][ T6355] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  532.585186][  T781] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  532.594304][ T6355] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  532.594457][ T6355] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  532.626024][ T6355] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  532.637603][ T6355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  532.914900][ T6355] usb 5-1: config 0 descriptor??
[  533.242395][  T781] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  533.257293][  T781] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  533.269763][  T781] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  533.279198][  T781] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  533.395951][  T781] usb 2-1: config 0 descriptor??
[  533.568816][ T6355] HID 045e:07da: Invalid code 65791 type 1
[  533.599517][ T7337] macsec1: entered promiscuous mode
[  533.605291][ T7337] macvlan0: entered promiscuous mode
[  533.609469][ T6355] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000A/input/input19
[  533.721038][ T7337] macvlan0: left promiscuous mode
[  533.727440][ T6355] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  533.876820][ T6355] usb 5-1: USB disconnect, device number 4
[  533.968545][  T781] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0
[  533.976380][  T781] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0
[  534.139470][  T781] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.000B/input/input20
[  534.394605][  T781] cm6533_jd 0003:0D8C:0022.000B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0
[  534.569394][  T781] usb 2-1: USB disconnect, device number 8
[  538.041265][   T29] audit: type=1800 audit(1717812741.269:31): pid=7362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file2" dev="sda1" ino=1952 res=0 errno=0
[  539.032083][ T7364] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  539.039857][ T7364] batman_adv: batadv0: Removing interface: batadv_slave_0
[  539.111572][ T7364] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  539.120101][ T7364] batman_adv: batadv0: Removing interface: batadv_slave_1
[  539.894670][ T7374] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  540.012825][ T7374] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  540.894803][   T29] audit: type=1326 audit(1717812744.289:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aafc7cf69 code=0x7ffc0000
[  540.918113][   T29] audit: type=1326 audit(1717812744.309:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f1aafc7cf69 code=0x7ffc0000
[  540.943254][   T29] audit: type=1326 audit(1717812744.309:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aafc7cf69 code=0x7ffc0000
[  540.966731][   T29] audit: type=1326 audit(1717812744.329:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aafc7cf69 code=0x7ffc0000
[  541.495696][ T7379] macsec1: entered promiscuous mode
[  541.501272][ T7379] macvlan0: entered promiscuous mode
[  541.578827][ T7379] macvlan0: left promiscuous mode
[  541.844932][ T7385] Illegal XDP return value 677455651 on prog  (id 75) dev syz_tun, expect packet loss!
[  541.859970][  T781] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  542.270423][  T781] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  542.282478][  T781] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  542.292675][  T781] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  542.302044][  T781] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  542.396852][  T781] usb 5-1: config 0 descriptor??
[  544.965892][  T781] usbhid 5-1:0.0: can't add hid device: -71
[  544.972728][  T781] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  544.999760][ T6345] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  545.079143][  T781] usb 5-1: USB disconnect, device number 5
[  545.263714][ T6345] usb 2-1: device descriptor read/64, error -71
[  545.471884][   T29] audit: type=1326 audit(1717812748.889:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aafc7cf69 code=0x7ffc0000
[  545.495703][   T29] audit: type=1326 audit(1717812748.919:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f1aafc7cf69 code=0x7ffc0000
[  545.523082][   T29] audit: type=1326 audit(1717812748.919:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aafc7cf69 code=0x7ffc0000
[  545.602215][ T6345] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  545.792173][ T6345] usb 2-1: device descriptor read/64, error -71
[  545.932151][ T6345] usb usb2-port1: attempt power cycle
[  546.344025][ T7405] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  546.423329][ T7405] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  546.446846][ T6345] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  548.722704][ T6345] usb 2-1: device descriptor read/8, error -71
[  549.489805][ T7421] macsec1: entered promiscuous mode
[  549.495962][ T7421] macvlan0: entered promiscuous mode
[  549.643164][ T7421] macvlan0: left promiscuous mode
[  550.774149][ T6345] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  551.182394][ T6345] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  551.193738][ T6345] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  551.204159][ T6345] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  551.213564][ T6345] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  551.300250][ T6345] usb 3-1: config 0 descriptor??
[  551.802367][ T6345] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0
[  551.809930][ T6345] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0
[  551.943620][ T6345] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.000C/input/input21
[  552.110255][ T6345] cm6533_jd 0003:0D8C:0022.000C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0
[  552.262808][ T6345] usb 3-1: USB disconnect, device number 7
[  553.257153][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  553.315516][ T7450] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  554.108736][ T7455] macsec1: entered promiscuous mode
[  554.114325][ T7455] macvlan0: entered promiscuous mode
[  554.188184][ T7455] macvlan0: left promiscuous mode
[  555.943864][ T7474] loop1: detected capacity change from 0 to 512
[  556.138465][ T7474] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2250: inode #12: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino
[  556.203607][ T7474] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 12 (err -117)
[  556.204370][ T7480] loop0: detected capacity change from 0 to 512
[  556.239532][ T7474] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  556.353675][ T7480] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  556.358083][   T29] audit: type=1800 audit(1717812759.769:39): pid=7474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=18 res=0 errno=0
[  556.367100][ T7480] ext4 filesystem being mounted at /root/syzkaller-testdir3669089707/syzkaller.03wHRm/10/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  556.424439][ T6345] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  556.767002][ T5521] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  556.897178][ T6345] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  556.914220][ T6345] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  556.926017][ T6345] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  556.935570][ T6345] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  556.982558][ T6345] usb 3-1: config 0 descriptor??
[  557.021319][ T6987] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  557.317773][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  557.369919][ T7491] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  557.669436][ T7493] bridge0: port 1(bridge_slave_0) entered disabled state
[  557.949406][ T6345] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0
[  557.957341][ T6345] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0
[  558.014204][ T6345] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.000D/input/input22
[  558.172847][ T6345] cm6533_jd 0003:0D8C:0022.000D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0
[  558.513400][ T6345] usb 3-1: USB disconnect, device number 8
[  558.719411][   T29] audit: type=1326 audit(1717812762.129:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faacee7cf69 code=0x7ffc0000
[  558.743077][   T29] audit: type=1326 audit(1717812762.129:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faacee7cf69 code=0x7ffc0000
[  558.771217][   T29] audit: type=1326 audit(1717812762.129:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faacee7cf69 code=0x7ffc0000
[  558.796080][   T29] audit: type=1326 audit(1717812762.159:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faacee7cf69 code=0x7ffc0000
[  558.821236][   T29] audit: type=1326 audit(1717812762.159:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faacee7cf69 code=0x7ffc0000
[  558.845697][   T29] audit: type=1326 audit(1717812762.159:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faacee7cf69 code=0x7ffc0000
[  558.874464][   T29] audit: type=1326 audit(1717812762.169:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faacee7a6e7 code=0x7ffc0000
[  558.994420][   T29] audit: type=1326 audit(1717812762.359:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faacee403b9 code=0x7ffc0000
[  559.017776][   T29] audit: type=1326 audit(1717812762.369:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faacee7a6e7 code=0x7ffc0000
[  559.695153][ T7514] loop3: detected capacity change from 0 to 1024
[  559.800807][ T7514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  560.046813][ T7526] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  560.218464][ T7526] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  560.782969][ T7530] sctp: [Deprecated]: syz-executor.4 (pid 7530) Use of int in max_burst socket option deprecated.
[  560.782969][ T7530] Use struct sctp_assoc_value instead
[  560.980648][ T7081] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  562.996636][ T7549] loop2: detected capacity change from 0 to 512
[  563.008637][ T7549] EXT4-fs: Ignoring removed i_version option
[  563.015497][ T7549] EXT4-fs: Ignoring removed mblk_io_submit option
[  563.055413][ T7549] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  563.186871][ T7549] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor.2: bg 0: block 131: padding at end of block bitmap is not set
[  563.268618][ T7549] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6537: Corrupt filesystem
[  563.286080][ T7549] EXT4-fs (loop2): 1 truncate cleaned up
[  563.292374][ T7549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  563.343877][ T7555] loop1: detected capacity change from 0 to 1024
[  563.407093][ T7556] bridge0: entered promiscuous mode
[  563.424639][ T7555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  563.462508][ T7556] bond0: entered promiscuous mode
[  563.467822][ T7556] bond_slave_0: entered promiscuous mode
[  563.478543][ T7556] bond_slave_1: entered promiscuous mode
[  563.719346][ T5954] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  563.836244][ T7562] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  563.890575][ T5521] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  563.907372][ T7562] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  564.974376][ T7581] loop4: detected capacity change from 0 to 512
[  565.117489][ T7581] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  565.148411][ T7579] loop0: detected capacity change from 0 to 1024
[  565.224253][ T7579] EXT4-fs: Ignoring removed orlov option
[  565.230185][ T7579] EXT4-fs: Ignoring removed oldalloc option
[  565.253150][ T7581] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[  565.294889][ T7581] System zones: 0-2, 18-18, 34-34
[  565.329310][ T7579] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  565.394614][ T7579] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  565.411885][ T7579] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869)
[  565.432157][ T7581] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1153: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  565.467224][ T7579] EXT4-fs (loop0): invalid journal inode
[  565.473527][ T7579] EXT4-fs (loop0): can't get journal size
[  565.480533][ T7581] EXT4-fs (loop4): 1 truncate cleaned up
[  565.486656][ T7581] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  565.526373][ T7584] loop1: detected capacity change from 0 to 512
[  565.548839][ T7584] EXT4-fs: Ignoring removed nobh option
[  565.607733][ T7579] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  565.804522][ T7584] fscrypt (loop1, inode 2): Error -61 getting encryption context
[  565.889960][ T7584] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61
[  565.952286][ T7584] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #13: comm syz-executor.1: casefold flag without casefold feature
[  566.049145][ T6987] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  566.077689][ T7584] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 13 (err -117)
[  566.146917][ T7045] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  566.157831][ T7584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  566.280179][ T7584] fscrypt (loop1, inode 2): Error -61 getting encryption context
[  566.674581][ T5521] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  567.403577][ T7596] loop2: detected capacity change from 0 to 1024
[  567.795131][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  567.811533][ T7604] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  567.839676][ T7596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  567.879670][ T7605] tipc: Started in network mode
[  567.885117][ T7605] tipc: Node identity 080211, cluster identity 4711
[  567.894075][ T7605] tipc: Enabled bearer <eth:wlan0>, priority 0
[  568.146572][ T7608] mac80211_hwsim hwsim24 €
: renamed from wlan0 (while UP)
[  568.213796][ T7608] tipc: Disabling bearer <eth:wlan0>
[  568.277541][ T7610] lo speed is unknown, defaulting to 1000
[  568.283852][ T7610] lo speed is unknown, defaulting to 1000
[  568.290704][ T7610] lo speed is unknown, defaulting to 1000
[  568.313184][ T7610] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  568.353033][ T7610] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  568.444323][ T7610] lo speed is unknown, defaulting to 1000
[  568.453074][ T7610] lo speed is unknown, defaulting to 1000
[  568.461517][ T7610] lo speed is unknown, defaulting to 1000
[  568.470089][ T7610] lo speed is unknown, defaulting to 1000
[  568.489220][ T7610] lo speed is unknown, defaulting to 1000
[  568.936880][ T5954] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  569.609010][ T7626] loop4: detected capacity change from 0 to 1024
[  569.668768][ T7626] EXT4-fs: Ignoring removed orlov option
[  569.674957][ T7626] EXT4-fs: Ignoring removed oldalloc option
[  569.700406][ T7626] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  569.730686][ T7626] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  569.742700][ T7626] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869)
[  569.816685][ T7626] EXT4-fs (loop4): invalid journal inode
[  569.822854][ T7626] EXT4-fs (loop4): can't get journal size
[  569.861425][ T7626] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  570.151236][ T7045] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  571.197609][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  571.210927][ T7647] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  573.613314][ T7655] loop0: detected capacity change from 0 to 1024
[  573.650185][ T7657] tipc: Enabling of bearer <eth:wlan0> rejected, failed to enable media
[  573.716099][ T7655] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  574.211975][ T6987] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  574.568331][ T7679] loop3: detected capacity change from 0 to 1024
[  574.651062][ T7679] EXT4-fs: Ignoring removed orlov option
[  574.657884][ T7679] EXT4-fs: Ignoring removed oldalloc option
[  574.744196][ T7679] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  574.784347][ T7679] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  574.796617][ T7679] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869)
[  574.865669][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  574.883198][ T7679] EXT4-fs (loop3): invalid journal inode
[  574.889251][ T7679] EXT4-fs (loop3): can't get journal size
[  574.894941][ T7688] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  574.969798][ T7679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  575.172133][  T782] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  575.312132][ T7081] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  575.363033][ T6345] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  575.466469][  T782] usb 2-1: Using ep0 maxpacket: 16
[  575.606350][ T6345] usb 1-1: Using ep0 maxpacket: 32
[  575.623317][  T782] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  575.633491][  T782] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping
[  575.773199][ T6345] usb 1-1: unable to read config index 0 descriptor/start: -61
[  575.781323][ T6345] usb 1-1: can't read configurations, error -61
[  575.853117][  T782] usb 2-1: New USB device found, idVendor=1608, idProduct=000f, bcdDevice=c8.c5
[  575.862721][  T782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  575.871013][  T782] usb 2-1: Product: syz
[  575.875529][  T782] usb 2-1: Manufacturer: syz
[  575.880389][  T782] usb 2-1: SerialNumber: syz
[  575.923601][  T782] usb 2-1: config 0 descriptor??
[  575.966738][ T6345] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  575.968604][  T782] io_edgeport 2-1:0.0: required endpoints missing
[  576.018354][ T7703] netlink: 'syz-executor.4': attribute type 7 has an invalid length.
[  576.027212][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  576.108259][ T7703] bridge1: port 1(gretap1) entered blocking state
[  576.115626][ T7703] bridge1: port 1(gretap1) entered disabled state
[  576.123065][ T7703] gretap1: entered allmulticast mode
[  576.132105][ T7703] gretap1: entered promiscuous mode
[  576.282351][ T6345] usb 1-1: Using ep0 maxpacket: 32
[  576.288754][ T6341] usb 2-1: USB disconnect, device number 13
[  576.471142][ T6345] usb 1-1: unable to read config index 0 descriptor/start: -61
[  576.479490][ T6345] usb 1-1: can't read configurations, error -61
[  576.585627][ T6345] usb usb1-port1: attempt power cycle
[  577.056541][ T7709] loop4: detected capacity change from 0 to 128
[  577.232182][ T7711] dvmrp0: entered allmulticast mode
[  577.748094][ T7714] tipc: Started in network mode
[  577.753477][ T7714] tipc: Node identity 080211, cluster identity 4711
[  577.762361][ T7714] tipc: Enabled bearer <eth:wlan0>, priority 0
[  577.923974][ T7716] mac80211_hwsim hwsim15 €
: renamed from wlan0 (while UP)
[  578.093758][ T7716] tipc: Disabling bearer <eth:wlan0>
[  578.255017][   T29] kauditd_printk_skb: 8 callbacks suppressed
[  578.255099][   T29] audit: type=1326 audit(1717812781.659:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faea7c7cf69 code=0x0
[  579.299267][ T7730] loop4: detected capacity change from 0 to 1024
[  579.386262][ T7730] EXT4-fs: Ignoring removed orlov option
[  579.392885][ T7730] EXT4-fs: Ignoring removed oldalloc option
[  579.664377][ T7730] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  579.740497][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  579.753779][ T7730] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  579.765192][ T7730] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869)
[  579.852190][ T7737] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  580.322441][ T7730] EXT4-fs (loop4): invalid journal inode
[  580.328491][ T7730] EXT4-fs (loop4): can't get journal size
[  580.517158][ T7743] macsec1: entered promiscuous mode
[  580.522782][ T7743] macvlan0: entered promiscuous mode
[  580.605465][ T7730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  580.959860][ T7045] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  581.676653][ T7753] siw: device registration error -23
[  581.950157][ T7762] =====================================================
[  581.957442][ T7762] BUG: KMSAN: uninit-value in strnchr+0x90/0xd0
[  581.963891][ T7762]  strnchr+0x90/0xd0
[  581.967978][ T7762]  bpf_bprintf_prepare+0x1c2/0x23c0
[  581.973394][ T7762]  bpf_trace_printk+0xec/0x3e0
[  581.978358][ T7762]  ___bpf_prog_run+0x13fe/0xe0f0
[  581.983475][ T7762]  __bpf_prog_run32+0xb2/0xe0
[  581.988326][ T7762]  bpf_trace_run2+0x116/0x300
[  581.993179][ T7762]  __bpf_trace_tlb_flush+0x2c/0x40
[  581.998480][ T7762]  switch_mm_irqs_off+0x9d2/0x1010
[  582.003770][ T7762]  __text_poke+0xb4e/0xfb0
[  582.008390][ T7762]  text_poke_bp_batch+0x17f/0x960
[  582.013637][ T7762]  text_poke_finish+0x7d/0xd0
[  582.018519][ T7762]  arch_jump_label_transform_apply+0x23/0x40
[  582.024681][ T7762]  __jump_label_update+0x6af/0x6d0
[  582.030013][ T7762]  jump_label_update+0x6a0/0x7a0
[  582.035141][ T7762]  static_key_enable_cpuslocked+0x229/0x260
[  582.041248][ T7762]  static_key_enable+0x23/0x30
[  582.046198][ T7762]  tracepoint_add_func+0x1084/0x1280
[  582.051697][ T7762]  tracepoint_probe_register_prio_may_exist+0xa8/0xf0
[  582.058693][ T7762]  bpf_probe_register+0x201/0x250
[  582.063899][ T7762]  bpf_raw_tp_link_attach+0x627/0x8a0
[  582.069471][ T7762]  bpf_raw_tracepoint_open+0x485/0x8a0
[  582.075124][ T7762]  __sys_bpf+0x5a6/0xd90
[  582.079551][ T7762]  __x64_sys_bpf+0xa0/0xe0
[  582.084145][ T7762]  x64_sys_call+0x96b/0x3b50
[  582.088939][ T7762]  do_syscall_64+0xcf/0x1e0
[  582.093648][ T7762]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  582.099754][ T7762] 
[  582.102161][ T7762] Local variable stack created at:
[  582.107372][ T7762]  __bpf_prog_run32+0x43/0xe0
[  582.112231][ T7762]  bpf_trace_run2+0x116/0x300
[  582.117068][ T7762] 
[  582.119492][ T7762] CPU: 1 PID: 7762 Comm: syz-executor.1 Not tainted 6.9.0-syzkaller-02707-g614da38e2f7a #0
[  582.129641][ T7762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  582.139835][ T7762] =====================================================
[  582.146862][ T7762] Disabling lock debugging due to kernel taint
[  582.153130][ T7762] Kernel panic - not syncing: kmsan.panic set ...
[  582.159652][ T7762] CPU: 1 PID: 7762 Comm: syz-executor.1 Tainted: G    B              6.9.0-syzkaller-02707-g614da38e2f7a #0
[  582.171382][ T7762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  582.181593][ T7762] Call Trace:
[  582.184980][ T7762]  <TASK>
[  582.188017][ T7762]  dump_stack_lvl+0x216/0x2d0
[  582.192910][ T7762]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  582.198935][ T7762]  dump_stack+0x1e/0x30
[  582.203303][ T7762]  panic+0x4e2/0xcd0
[  582.207416][ T7762]  ? kmsan_get_metadata+0xf1/0x1d0
[  582.212739][ T7762]  kmsan_report+0x2d5/0x2e0
[  582.217437][ T7762]  ? kernel_text_address+0x129/0x1b0
[  582.222968][ T7762]  ? __msan_warning+0x95/0x120
[  582.227904][ T7762]  ? strnchr+0x90/0xd0
[  582.232177][ T7762]  ? bpf_bprintf_prepare+0x1c2/0x23c0
[  582.237801][ T7762]  ? bpf_trace_printk+0xec/0x3e0
[  582.242956][ T7762]  ? ___bpf_prog_run+0x13fe/0xe0f0
[  582.248260][ T7762]  ? __bpf_prog_run32+0xb2/0xe0
[  582.253308][ T7762]  ? bpf_trace_run2+0x116/0x300
[  582.258354][ T7762]  ? __bpf_trace_tlb_flush+0x2c/0x40
[  582.263844][ T7762]  ? switch_mm_irqs_off+0x9d2/0x1010
[  582.269324][ T7762]  ? __text_poke+0xb4e/0xfb0
[  582.274116][ T7762]  ? text_poke_bp_batch+0x17f/0x960
[  582.279539][ T7762]  ? text_poke_finish+0x7d/0xd0
[  582.284602][ T7762]  ? arch_jump_label_transform_apply+0x23/0x40
[  582.290954][ T7762]  ? __jump_label_update+0x6af/0x6d0
[  582.296467][ T7762]  ? jump_label_update+0x6a0/0x7a0
[  582.301791][ T7762]  ? static_key_enable_cpuslocked+0x229/0x260
[  582.308082][ T7762]  ? static_key_enable+0x23/0x30
[  582.313238][ T7762]  ? tracepoint_add_func+0x1084/0x1280
[  582.318936][ T7762]  ? tracepoint_probe_register_prio_may_exist+0xa8/0xf0
[  582.326131][ T7762]  ? bpf_probe_register+0x201/0x250
[  582.331526][ T7762]  ? bpf_raw_tp_link_attach+0x627/0x8a0
[  582.337284][ T7762]  ? bpf_raw_tracepoint_open+0x485/0x8a0
[  582.343137][ T7762]  ? __sys_bpf+0x5a6/0xd90
[  582.347742][ T7762]  ? __x64_sys_bpf+0xa0/0xe0
[  582.352510][ T7762]  ? x64_sys_call+0x96b/0x3b50
[  582.357479][ T7762]  ? do_syscall_64+0xcf/0x1e0
[  582.362372][ T7762]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  582.368671][ T7762]  ? kmsan_get_metadata+0x146/0x1d0
[  582.374065][ T7762]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  582.380068][ T7762]  ? bpf_bprintf_prepare+0x193/0x23c0
[  582.385678][ T7762]  ? filter_irq_stacks+0x60/0x1a0
[  582.390935][ T7762]  ? kmsan_get_metadata+0x146/0x1d0
[  582.396341][ T7762]  ? kmsan_get_metadata+0x146/0x1d0
[  582.401726][ T7762]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  582.407727][ T7762]  __msan_warning+0x95/0x120
[  582.412484][ T7762]  strnchr+0x90/0xd0
[  582.416588][ T7762]  bpf_bprintf_prepare+0x1c2/0x23c0
[  582.422024][ T7762]  ? kmsan_get_metadata+0x146/0x1d0
[  582.427411][ T7762]  ? kmsan_internal_memmove_metadata+0x91/0x230
[  582.433899][ T7762]  ? __msan_memcpy+0x108/0x1c0
[  582.438888][ T7762]  bpf_trace_printk+0xec/0x3e0
[  582.443949][ T7762]  ? __bpf_prog_run32+0x5c/0xe0
[  582.448998][ T7762]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  582.455004][ T7762]  ___bpf_prog_run+0x13fe/0xe0f0
[  582.460140][ T7762]  ? kmsan_get_metadata+0x146/0x1d0
[  582.465555][ T7762]  __bpf_prog_run32+0xb2/0xe0
[  582.470426][ T7762]  ? kmsan_get_metadata+0x110/0x1d0
[  582.475827][ T7762]  ? __pfx___bpf_prog_run32+0x10/0x10
[  582.481403][ T7762]  bpf_trace_run2+0x116/0x300
[  582.486264][ T7762]  ? kmsan_get_metadata+0x146/0x1d0
[  582.491655][ T7762]  __bpf_trace_tlb_flush+0x2c/0x40
[  582.496966][ T7762]  switch_mm_irqs_off+0x9d2/0x1010
[  582.502290][ T7762]  __text_poke+0xb4e/0xfb0
[  582.506912][ T7762]  ? __pfx_text_poke_memcpy+0x10/0x10
[  582.512514][ T7762]  ? switch_mm_irqs_off+0x920/0x1010
[  582.518011][ T7762]  ? switch_mm_irqs_off+0x920/0x1010
[  582.523512][ T7762]  text_poke_bp_batch+0x17f/0x960
[  582.528771][ T7762]  ? kmsan_get_metadata+0x146/0x1d0
[  582.534162][ T7762]  ? kmsan_get_metadata+0x146/0x1d0
[  582.539553][ T7762]  ? kmsan_get_shadow_origin_ptr+0x16/0xb0
[  582.545564][ T7762]  text_poke_finish+0x7d/0xd0
[  582.550464][ T7762]  arch_jump_label_transform_apply+0x23/0x40
[  582.556654][ T7762]  __jump_label_update+0x6af/0x6d0
[  582.562010][ T7762]  jump_label_update+0x6a0/0x7a0
[  582.567163][ T7762]  ? kmsan_report+0x2a0/0x2e0
[  582.572027][ T7762]  static_key_enable_cpuslocked+0x229/0x260
[  582.578152][ T7762]  ? __pfx___bpf_trace_tlb_flush+0x10/0x10
[  582.584155][ T7762]  static_key_enable+0x23/0x30
[  582.589070][ T7762]  ? __SCT__tp_func_exit_mmap+0x8/0x8
[  582.594559][ T7762]  tracepoint_add_func+0x1084/0x1280
[  582.600012][ T7762]  ? kmsan_internal_set_shadow_origin+0x66/0xe0
[  582.606432][ T7762]  ? __pfx___bpf_trace_tlb_flush+0x10/0x10
[  582.612379][ T7762]  tracepoint_probe_register_prio_may_exist+0xa8/0xf0
[  582.619314][ T7762]  ? __pfx___bpf_trace_tlb_flush+0x10/0x10
[  582.625268][ T7762]  ? __pfx___bpf_trace_tlb_flush+0x10/0x10
[  582.631218][ T7762]  bpf_probe_register+0x201/0x250
[  582.636387][ T7762]  bpf_raw_tp_link_attach+0x627/0x8a0
[  582.641924][ T7762]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  582.648150][ T7762]  ? kmsan_get_metadata+0x146/0x1d0
[  582.653478][ T7762]  bpf_raw_tracepoint_open+0x485/0x8a0
[  582.659095][ T7762]  __sys_bpf+0x5a6/0xd90
[  582.663488][ T7762]  __x64_sys_bpf+0xa0/0xe0
[  582.668027][ T7762]  x64_sys_call+0x96b/0x3b50
[  582.672760][ T7762]  do_syscall_64+0xcf/0x1e0
[  582.677411][ T7762]  ? clear_bhb_loop+0x25/0x80
[  582.682253][ T7762]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  582.688315][ T7762] RIP: 0033:0x7faacee7cf69
[  582.692824][ T7762] Code: Unable to access opcode bytes at 0x7faacee7cf3f.
[  582.699940][ T7762] RSP: 002b:00007faacfb2e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  582.708508][ T7762] RAX: ffffffffffffffda RBX: 00007faacefb3f80 RCX: 00007faacee7cf69
[  582.716685][ T7762] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000011
[  582.724755][ T7762] RBP: 00007faaceeda6fe R08: 0000000000000000 R09: 0000000000000000
[  582.732819][ T7762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  582.740879][ T7762] R13: 000000000000000b R14: 00007faacefb3f80 R15: 00007ffed6013748
[  582.748975][ T7762]  </TASK>
[  584.118253][ T7762] Shutting down cpus with NMI
[  584.123306][ T7762] Kernel Offset: disabled
[  584.127692][ T7762] Rebooting in 86400 seconds..