last executing test programs:

41.7702534s ago: executing program 1 (id=410):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f0000005d80)="$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")
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f514, &(0x7f0000000100)={0x0, 0x0, 0x1})

38.975435767s ago: executing program 2 (id=421):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = open(0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00')
write$binfmt_script(r3, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x4, 0x0, 0x0, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file2\x00', 0x1008801, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x2, 0x1ee, &(0x7f00000001c0)="$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")
read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020)
getgid()
write$FUSE_CREATE_OPEN(r1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r4, 0x4, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x81, 0x5e}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x202}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3fc}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x68}, 0x1, 0x0, 0x0, 0x42}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)

10.142614935s ago: executing program 3 (id=494):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d)
ioctl$SIOCSIFHWADDR(r2, 0x401c5820, &(0x7f0000000080)={'macvlan1\x00', @broadcast})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
close(r1)
connect$can_bcm(r0, &(0x7f0000000080), 0x10)
r4 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000140a20000000000a00000000000000000000040000000900010073797a300000000020000000030a00000000000000000000000000000900014073797a310000000014000000110001"], 0x68}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=<r5=>0x0, @ANYBLOB="000000000000000000000100000008000100", @ANYRES32, @ANYBLOB="3c000200240001"], 0x58}, 0x1, 0xf000}, 0x0)
sendmsg$netlink(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)=ANY=[@ANYRESOCT=r5, @ANYBLOB="022636271224c5166690625d1b27ee36a07e8be8d1c85f02d50bc54fa1f5865cb3329f4319a79eb6da82c98dcc5fc8bc42761d4d3b90e66ca123703976c573829f6113be4b6d2959faa13f9dde71bfd03a59f274348e194149aa062cfeeac1d3463f7f09ca1ae9f483159170a4a948ec2f1a869660b5780beb277d7e7023b4e9cf074979ce576be79f49bde6", @ANYRES16=r1], 0x114}], 0x1, 0x0, 0x0, 0x20040000}, 0x20040004)
socket$nl_route(0x10, 0x3, 0x0)
socket$caif_seqpacket(0x25, 0x5, 0x3)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000100), 0xfecc)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000018c0)=@nat={'nat\x00', 0x670, 0x5, 0x3f0, 0xa8, 0xa8, 0xfeffffff, 0x1b8, 0x288, 0x358, 0x358, 0xffffffff, 0x358, 0x358, 0x5, 0x0, {[{{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'vlan1\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x13, @rand_addr, @empty, @port, @icmp_id}}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @loopback}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'veth1_to_bridge\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'veth0_to_bond\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "d2be"}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @multicast2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, 0x0, &(0x7f0000000340))
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002a00)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES8=r4], 0xe70}, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {}, {}, {0x6, 0x0, 0x9}]})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socket$inet_udplite(0x2, 0x2, 0x88)

9.895371805s ago: executing program 4 (id=495):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90)
sched_setscheduler(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8)
sendmmsg(r3, &(0x7f0000000180), 0x400000000000077, 0x0)

9.512319406s ago: executing program 3 (id=496):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@usebackuproot}, {@enospc_debug}, {@flushoncommit}]}, 0x2, 0x559d, &(0x7f0000005680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118)
fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r2, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60001c, 0x9)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000))

8.391533697s ago: executing program 4 (id=499):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d)
ioctl$SIOCSIFHWADDR(r2, 0x401c5820, &(0x7f0000000080)={'macvlan1\x00', @broadcast})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
close(r1)
connect$can_bcm(r0, &(0x7f0000000080), 0x10)
r4 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000140a20000000000a00000000000000000000040000000900010073797a300000000020000000030a00000000000000000000000000000900014073797a310000000014000000110001"], 0x68}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=<r5=>0x0, @ANYBLOB="000000000000000000000100000008000100", @ANYRES32, @ANYBLOB="3c000200240001"], 0x58}, 0x1, 0xf000}, 0x0)
sendmsg$netlink(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)=ANY=[@ANYRESOCT=r5, @ANYBLOB="022636271224c5166690625d1b27ee36a07e8be8d1c85f02d50bc54fa1f5865cb3329f4319a79eb6da82c98dcc5fc8bc42761d4d3b90e66ca123703976c573829f6113be4b6d2959faa13f9dde71bfd03a59f274348e194149aa062cfeeac1d3463f7f09ca1ae9f483159170a4a948ec2f1a869660b5780beb277d7e7023b4e9cf074979ce576be79f49bde6", @ANYRES16=r1], 0x114}], 0x1, 0x0, 0x0, 0x20040000}, 0x20040004)
socket$nl_route(0x10, 0x3, 0x0)
socket$caif_seqpacket(0x25, 0x5, 0x3)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, 0x0, &(0x7f0000000340))

8.027557007s ago: executing program 4 (id=500):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x3, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
syz_open_procfs(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
symlinkat(0x0, 0xffffffffffffffff, 0x0)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\"\x00\x00\x00\a'], 0xd)
io_uring_setup(0x3762, &(0x7f0000000440)={0x0, 0x0, 0x442, 0x21, 0x10000002})
r3 = syz_io_uring_setup(0x5df9, &(0x7f0000000040)={0x0, 0x4a53, 0x400}, &(0x7f00000000c0), &(0x7f0000000100))
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f00000024c0)={0x1, 0x0, 0x0, &(0x7f0000002400)=[{0x0}], 0x0}, 0x20)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000001a40)={0x0, 0x0, 0x0, &(0x7f0000001a00)=[0x0, 0x5]}, 0x20)
r4 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000340)='p', 0x1}])
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x0, 0x0, 0x14}, 0x48)

7.536163057s ago: executing program 4 (id=501):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bf0280b3"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f00000000c0)={0x3})

6.947458145s ago: executing program 3 (id=503):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000240)={0x20, 0x4})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

6.593641363s ago: executing program 0 (id=504):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x20, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @remote, {[@ssrr={0x89, 0xf, 0x1c, [@multicast1, @dev={0xac, 0x14, 0x14, 0x19}, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x2c, 0xc0, 0x3, 0x0, [{@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x659}, {@broadcast, 0x8000}, {@empty, 0x80000}, {@private=0xfffffffd, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev, 0x9}, {@multicast2, 0x2000003}, {}, {@broadcast, 0x1}]}, @noop, @lsrr={0x83, 0xb, 0x0, [@loopback, @broadcast]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

5.883214872s ago: executing program 0 (id=505):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d)
ioctl$SIOCSIFHWADDR(r2, 0x401c5820, &(0x7f0000000080)={'macvlan1\x00', @broadcast})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
close(r1)
connect$can_bcm(r0, &(0x7f0000000080), 0x10)
r4 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000140a20000000000a00000000000000000000040000000900010073797a300000000020000000030a00000000000000000000000000000900014073797a310000000014000000110001"], 0x68}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=<r5=>0x0, @ANYBLOB="000000000000000000000100000008000100", @ANYRES32, @ANYBLOB="3c000200240001"], 0x58}, 0x1, 0xf000}, 0x0)
sendmsg$netlink(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)=ANY=[@ANYRESOCT=r5, @ANYBLOB="022636271224c5166690625d1b27ee36a07e8be8d1c85f02d50bc54fa1f5865cb3329f4319a79eb6da82c98dcc5fc8bc42761d4d3b90e66ca123703976c573829f6113be4b6d2959faa13f9dde71bfd03a59f274348e194149aa062cfeeac1d3463f7f09ca1ae9f483159170a4a948ec2f1a869660b5780beb277d7e7023b4e9cf074979ce576be79f49bde6", @ANYRES16=r1], 0x114}], 0x1, 0x0, 0x0, 0x20040000}, 0x20040004)
socket$nl_route(0x10, 0x3, 0x0)
socket$caif_seqpacket(0x25, 0x5, 0x3)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000100), 0xfecc)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000018c0)=@nat={'nat\x00', 0x670, 0x5, 0x3f0, 0xa8, 0xa8, 0xfeffffff, 0x1b8, 0x288, 0x358, 0x358, 0xffffffff, 0x358, 0x358, 0x5, 0x0, {[{{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'vlan1\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x13, @rand_addr, @empty, @port, @icmp_id}}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @loopback}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'veth1_to_bridge\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'veth0_to_bond\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "d2be"}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @multicast2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, 0x0, &(0x7f0000000340))
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002a00)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES8=r4], 0xe70}, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {}, {}, {0x6, 0x0, 0x9}]})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r9)
ioctl$SIOCSIFHWADDR(r9, 0x8b1a, &(0x7f00000003c0)={'pimreg0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
socket$inet_udplite(0x2, 0x2, 0x88)

5.587487716s ago: executing program 1 (id=449):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[], 0x1, 0x36e, &(0x7f0000000880)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
socket$nl_xfrm(0x10, 0x3, 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x36)
recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108)
close(r4)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2)

5.213219886s ago: executing program 0 (id=506):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000c40)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {}, {0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xf4}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x703eb7f0c667a085}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

4.593572367s ago: executing program 4 (id=507):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90)
sched_setscheduler(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8)
sendmmsg(r3, &(0x7f0000000180), 0x400000000000077, 0x0)

4.358746936s ago: executing program 1 (id=508):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d)
ioctl$SIOCSIFHWADDR(r2, 0x401c5820, &(0x7f0000000080)={'macvlan1\x00', @broadcast})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
close(r1)
connect$can_bcm(r0, &(0x7f0000000080), 0x10)
r4 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000140a20000000000a00000000000000000000040000000900010073797a300000000020000000030a00000000000000000000000000000900014073797a310000000014000000110001"], 0x68}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=<r5=>0x0, @ANYBLOB="000000000000000000000100000008000100", @ANYRES32, @ANYBLOB="3c000200240001"], 0x58}, 0x1, 0xf000}, 0x0)
sendmsg$netlink(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)=ANY=[@ANYRESOCT=r5, @ANYBLOB="022636271224c5166690625d1b27ee36a07e8be8d1c85f02d50bc54fa1f5865cb3329f4319a79eb6da82c98dcc5fc8bc42761d4d3b90e66ca123703976c573829f6113be4b6d2959faa13f9dde71bfd03a59f274348e194149aa062cfeeac1d3463f7f09ca1ae9f483159170a4a948ec2f1a869660b5780beb277d7e7023b4e9cf074979ce576be79f49bde6", @ANYRES16=r1], 0x114}], 0x1, 0x0, 0x0, 0x20040000}, 0x20040004)
socket$nl_route(0x10, 0x3, 0x0)
socket$caif_seqpacket(0x25, 0x5, 0x3)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, 0x0, &(0x7f0000000340))

4.321988469s ago: executing program 0 (id=509):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x3, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
syz_open_procfs(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
symlinkat(0x0, 0xffffffffffffffff, 0x0)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\"\x00\x00\x00\a'], 0xd)
io_uring_setup(0x3762, &(0x7f0000000440)={0x0, 0x0, 0x442, 0x21, 0x10000002})
r3 = syz_io_uring_setup(0x5df9, &(0x7f0000000040)={0x0, 0x4a53, 0x400}, &(0x7f00000000c0), &(0x7f0000000100))
io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f00000024c0)={0x1, 0x0, 0x0, &(0x7f0000002400)=[{0x0}], 0x0}, 0x20)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000001a40)={0x0, 0x0, 0x0, &(0x7f0000001a00)=[0x0, 0x5]}, 0x20)
r4 = open(&(0x7f0000000300)='./bus\x00', 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000340)='p', 0x1}])
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x0, 0x0, 0x14}, 0x48)

4.211001578s ago: executing program 3 (id=510):
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
timer_create(0x0, &(0x7f0000004040)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x26, &(0x7f0000000000))
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$lock(r1, 0x7, &(0x7f00000006c0)={0x1})
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = dup(r2)
dup3(r3, r1, 0x0)
close(0xffffffffffffffff)
rt_sigreturn()
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
write$P9_RMKNOD(r0, 0x0, 0x0)
openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x3cf242, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5451, 0x0)

3.972229557s ago: executing program 2 (id=458):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18080000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000850000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4)
sendmsg$inet(r1, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0)

3.828382069s ago: executing program 3 (id=511):
tkill(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080))
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)=""/34, 0x107, 0x22, 0x1}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x15, 0x7fffffff, 0x0, 0x790, 0x64e, r1, 0x3, '\x00', 0x0, r3, 0x3, 0x0, 0x7}, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000000177fbac141416e000030afe079f03b180004404050300845013f2325f009402050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c)
r4 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="3a10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x10001, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xfffffe36, 0x0, 0x0, 0x0}, 0x90)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}]}, @CTA_TUPLE_ORIG={0x4}]}, 0x24}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r6, 0x1, 0x2a, &(0x7f0000000100), 0x4)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_spirange={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}}, 0x0)

3.81631552s ago: executing program 2 (id=512):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000001600010a"], 0x18}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000003b00), r0)

3.721822267s ago: executing program 1 (id=513):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x20, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @remote, {[@ssrr={0x89, 0xf, 0x1c, [@multicast1, @dev={0xac, 0x14, 0x14, 0x19}, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x2c, 0xc0, 0x3, 0x0, [{@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x659}, {@broadcast, 0x8000}, {@empty, 0x80000}, {@private=0xfffffffd, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev, 0x9}, {@multicast2, 0x2000003}, {}, {@broadcast, 0x1}]}, @noop, @lsrr={0x83, 0xb, 0x0, [@loopback, @broadcast]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

3.618854156s ago: executing program 2 (id=514):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@usebackuproot}, {@enospc_debug}, {@flushoncommit}]}, 0x2, 0x559d, &(0x7f0000005680)="$eJzs3X1sVWcdB/BzeynlJaFlyjLUhfkPThCpmFiEoEVgAoPRgSbDwCgO2BAGhQRhY9OOOZ0jk4Y5xoovDKQCxq6+rJiYIbqIcU4mi8OGEXnJIuICK4yoJNOZ3nufy73n0vYO5zq3z4e05z73d57nPPfk/HG/lz7nRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABBF0cHlC/627gfLv/nQdSenbLz/zAMnap57fNP4u+fsHnX4gVVXtp1uaip99fmzNyy67+GqoSf2zD8URYlUv0Sm/7xPTZ65aNa86X3CgLU3prcVFZ0dMt31WLrRO+/Jjn75P/OjKCqNDZDMbCf1z2kn4geIVhYO2KXtVWNWDdw4cdrmssmDFibrGgtfOh369PQEekrmunrx4rVUnfpdEtsj28659BJ5l2i6f/yCe1NeBADwulTWpDbZt6OZt7jZdn28HmtXx9oNsXZ4h9CQ27gc6XF7dzbPa+L1HppndToqlHU6z1g9c/6z7Zp4/1g7FjVexzzzd81Emj6dzbMuVu+peQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8ldx9/JanSzb96H1L149MHh887BdfbdryvUnt5VO+tm9D2+9bn3tPU1Ppq8+fvWHRfQ9XDT2xZ/6hKKpI9Uukuyfm7mjd8LMVU1b/fM6jzefee8euZGbcsO2Vs3PUFh58vDyKPp9TeTEMe2pAFNXkF1LN6NHCwuLUgymhAAAAwNvJ4NTvkmw7HQdL89qJVJpMpP4F6bC4vWrMqoEbJ07bXDZ50MJkXePlj1fTyXjVlxwv2664+JPICcYh/sbHu1gPu64sGKdr8RHjeX7U0AuHj3x9+Ya1jf1P7u87MDnpV1+uHXzFnNGvXDt2zG1/fWRHQf6v6Dr/hzMn/wMAAPDfkP/j43Stu/w/7Mj9Z+469dN1tZ/ZNvf4+G/UDnhX5Zo/NX/4c+uHTZ3Y69iVWwry/zV5hyzI/2HGIf+XRJeX/wEAAOCt7H+d/6sLxulad/l/2ZoRf592YdbEJ8Zd+OGZO4f88uCRaG/9iC+03P6B/bP7DWj4SUH+rywu//fKnXZ48pkw4SXlUVRZ/EkFAAAA8oT/d7/40ULI6+lPDuJ5fc75g5NuLn3w7EdmXzt029Ehu9rP/2PJ8k0XRjfPGF716acrNhTk/+ri8n/pm/NyAQAAgCI8tfgTN+2Mpk/6UPU9h/cv2P5I/bK1K5c2liWm/ntl2/X/au5dkP9risv/ZT3zcgAAAIBLOPSlbbtfm7msdXhz2fmtf3jtz49fPXz1gabKoyt/O7B0RWvt4oL8X1tc/u+X2WZWPqQ77Q9/hfBQeRT16XhQly78Jmr4ZLYAAAAAvEFCTv/nsbaRO68r+/VT339586zvfHvQ3m/NONj43Qn9b5n44IEZB56sLcj/dV3f/z/c6SCs/8+7/1/B+v+cQvquf2PdGAAAAIB3osL1/OH2+OlvLujs+/eLXf9/4xdbXzp++/yvtL97yE3LXr7tils/Nv7UH6ffmdw57q6SqVNfOl2Q/+uLy//J3O0b+f1/AAAAcBn+377/b3bBOF3r7v7/Mx+752j7X14YN2Jm49pFJ8dv/PG8Lc88trvq6nMLbu77wWeX7i3I/w3F5f+w7Z/78vaF83NveRRd1fEgczfBXWG6S2KFltKcQvrEx3rMCj0yhZaynEJKXazHqPIoen/Hg/pYYWAoNMQK7QMyha2xwrOhkLkesoXmWGFfuNI2DchMN17YEwqZBRYtYQVF/+ySiFiPVzrr0VG4ZI8XsgcHAAB4RwnhOZNlS/ObUTzKtiS626FfdzuUdLdDsrsdesV2iO/Y2fNRbX4hPH9+zRO/q/xoyWcP3XrHhOEjF667t2HsgeTcCdc/uaPvuRWnR68uyP9bi8v/4VT0Tm86W/8fhfX/me81zK7/rw2FilihJRRq4ncMqAnHSIfd9eEYFTWZHu1XZQsAAADwthY+F0j28DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgP+zde5xU1Z0g8NNNP2homhbjK2JsdW1Fh6ZBUT/BB2omGmBNo+zMuPhohEaRVhBhIq5RULObxMEoKlFnRmEVRlZx8AVkNQE1ooloNI5mRh1DMGrcjR/FiH6yxrif7lunqLrVZRcCSjvf7x9dp+p3nrceXefeW+cCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/Max/9MYj/umiJ0eP2jBvwPJXDv/vH9YfumzRO//rT89ed9ve8763ftWSJZV/en7jSZO/c8PhjRtWTnghhJbOcmVJ8bLTF6/4waoLvvGtB0+76e5395y9tCpTbyYe+nb8Kc/cuTK2+tt+IawsC6EiHRhcmwQqM/drY30Da0PYKWwOZEu09UlKpBsOj9WEsDBsDmSr+lFNCLU5gXG/fGT1vI7E9TUh7B9CqE638e/VSRs16UBjVRLokw5Mq0gCH3ycyAZWlScB2GrxzZB90S9vyc9Q33W5Iq+/ym3Wsc9Xeni9YqK+eL63jt3OncpRlX6gZauetoLq2C4K3h5rvNt6wLutYDtf42nL/SKV+Yby8eZQdSif1DZ5wqz2mfGR8tDU1KtYTdvpeX5x4yUTtyTdY16HsQP12+R1+Pj5A+9c0Dhm15sf3jD59apnF2xtN4tt3u2tOmRecz3meYxG+jzpAW+/gm9JDb50hRBuP37T2799aez//dWDTw9+75tDzxrywitD627+7rR+f332/6m8ZerGgvl//SfP/+PLOd6W5+WOrX5Yl8zN4yO1MfF2XTI3BwAAgB6jJ+w1fWPEQW/Xrmt4eN+vr5h83qJ5r51+7p+rftp3wkEnnjL0+3fcOPW0gvl/Q2nH/+Mh/9rc0a4JYWRn4or+Ieze+XgSWBq7c1b/EPbpTLXkB45NBdaEsEdnYlC2qlSJ3rFEQyrwRl0mMDIVWBsDLanA4hi4JhW4MgaWpwITY2BNKnBcDIQp+eM4qC4zjpIDNTHQmmzE5fEshD/UxdZS2+qlbFUAAADbSGZ2WJl/N+dch63NEKeXy2u6yxDPwC6aoTpVQ3oGm51WFa2horsayrurITvuOZ88/IKay7qrueA0jLL8DO8deN/c1Q/8249vnHDYUwd92HrGy+tXPTp6U6+/e2fMjy8dN3/Y+IL5f/Mnz/+ru+hIWcHx/xDGdv6NucszkfZsvLUlLwMAAACwFSpeW3ryL+Z+VLbkZ+ds3P8vTxt3de8V++47YO3B9/2/hjcHHL9q/4L5/8jSzv+P+0R65WQO6+JuiKn9Q2jODyTVjigMJEe9+2YCAAAA0BNkj8dnj4VPydwmp2in59OF+Vu2MH888D+yy/yDx129rnn17adMGXHomjWbztj15WUbntpl/3deOPDk00+4f2rDPQXz/5bSzv/vk3+bdGJt7MV1/UPonRN4PPayI9CpIQbWH5MfyIx/bdwAV8WqMicmZKu6KpZojYHmVGBhsRLPZEvsnh/IPFnZxq/IjmNKpkROAAAAAD5zcXdAPC4fz/9/+tx+j/7jslsueXDJutD37OW/uOzo4QPnD+791rRnDnnkb989eWrB/L91y87/75wHF5ze3943hCEVIfRK/zBgXZ9kYcAYqC3LJH7cJ6mrV7qqy/uEMKJjYOmqNmTW/69IrzH4XE1SVQzsvu8dGxs7ErfXhDAkN/DC+EXDOxKzUoFs439VE8LeHaNNN76id9J4ZbrxG3uH8JWcQLaqib1D6GisKl3Vo9WZ6xikq1peHcLOOYFsVYdXhzA7ANBTxf+lk3IfvHD2xVMntLe3zdiOibgTvyZMntLe1jRxWvuk6iJ9mpTqc946RnMLx1TqpW9ezqxRdNeopv6lpLM/FGzObSuzI7/gzMHM/fhlqLJznMMq8+4ekh7ygfsVNhFyvkoVG3L5dh5yn9xKNj+JBfXH/FWhb+g968K2GU0XTZg5c8bQ5G+p2Yclf+NxpmRbDU1vqz5d9a2El0fR5bJSPu22asytZMjM86YPuXD2xYOnnDfh7Laz284/bPhhRxwx7NBDhw/pGFRz8rebkTZ2VXNqpB8vKnFY23CkX67IqeSz+NCQkJDoaYlVv9vj5aN3Wfq9FbcsnvHz9qPafv71nXces6Tqmy9suvSy/Z/+Hx8UzP+nf/L8P37qxA/+zPoMxY7/18fD/Mnjmw/zt8bAwlKP/9cXO5qfPTGgIRWYEwNzHOYHAADgiyHujox7M+NO6Ufm7/Yvd467b8z89Qc/ue65svV9Dv77D39fXnnZuP9yzAMNt333bwrm/3NK+/3/Nlr/P7t0/ahiy/wPiiWai63/n17mP7v+/5xi6/+nl/nPrv+/8HNY/39WNpDaJH+w/j8AAPBF8Nmt/9/t8v7pCwQUZOh2ef/0BQIKMnS7jH+pFwjY4vX/H2k4aORPVn/nN43LLpj2zn8bct/oAXs2/O6Rva6cNHXk6NEjBv9Lwfz/mtLm/xbuBwAAgB3HAROPfWrjpL2Pvfp/3rbTHj9p/fauh+3y/WVHts3ftH7i39z27jl/XTD/X1ja/P+zX/8vFDv/v6FYoKXYwoDW/wMAAKCHKrb+39Abv3X5q4uPu/+ey6eNam0dP/uKq/dbfUD1qeGl0fMb/mLGvR8VzP+Xlzb/j6ddlOfljr35sC5Z0y6k17R7uy77kwEAAADoGcpDU1NliXnzFkY99tO3+WJmKdBPSud68sH9nn/gqyNOnL+46urXynYb9vFT1888+Piv/fDVjXtdcse55+1XMP9fU9r8P+93GY+fP/DOBY1jdv3w5oc3TH696tkFm4//AwAAANtPqfslAAAAAAAAAAAAAACAz98JD//k6rcnLvnanIW/3PWnvcY+u3zDrDlNs2uvf/WH1/7qiDsfHlfw+/8wtrNcsd//x+v+xd8XfCkvd2y1+/X/MvfHjb57dueShevqQtgvNzD18qk7hcy1+Q/IDaw+fdBuHYnL0yUeeuW41zoSZ6YDJw4e8H5H4shUoDUukrhHOhCvqvh+v1QgLq/4XDoQt8fydKAqE/hev2QcZelt9WZtsq3K0tvqxdoQ+ucEsttqZW3SRll6gNenAtkBXpAOxAGelAmUp3t1d9+kVzFQG4ve2jfpFQAAO6z4LbAyTJ7S3tYcv8LH2y9X5N9GeUuWzS2stqzE5l/OLE1216im/qWke6W/i26+1nhlqO4YwtCCr6u5Wco6R7ltaulm032pyJC7W+2tvEi5tC3ddFXFR1STjKhp4rT2SZXdDvyQ7rMMq+g2y9CCyU5ulvLOTVpCLSX0pYQRlbhtSuhyvF8empp6pXJ9NQbrQ57uXhGl/l4/d52/Yq+C3DxPvtn+1BP//PzKfR7/89Nnf/BXk7596byzznj3yHOq/+E/lz39XwfuXDD/ry9t/l+dO673MxcDmBOvrDeifwitJY4IAAAAvvjOOf+V+d999No31rc0vjZtyLWr/3X2jRdX1C298i9ffOhvN42/+sytjb/58zv2eXjyhGe+dO4hy054fZ+DL2s88637/mLeuAev6nvLD+ff8YOC+X9DafP/uAcrcyg42duxJl7//4r+IXReWr8+CSyNwz2rfwj7dKZaYonkgvqjYonmJLA07jAZFEu0tuRX1TsGlqcCb9RlAmtSgbUxkNlLcUfI7Mq5ti6E4Z2psfklpscS9anAN2OgIRVoioHmVKBfDIxMBX7fLxNoSQWejIEwJX9b3dcvs60AAAC2RGaeVZl/N6TnecsrustQ1l2GPt1lKO8uQ3V3GYqNIt6/N2aoTJ28UpaTqTJda02qloIM8WL4W9yvggzhmfyc6YIFTcfzD7LnG5TlZ3jg5K/ec9WCyYPKf/XR2qWt790/ccWts49eec5Df/fEpH0X3XX93gXz/+bS5v998m+T1tfG+f/m6/8lgcdj966Lp443xMD6Y/IDmR0Da+Nk96psVS2ZEplJ+1WxxMgYaEgFpsfAyFSgdWwmsHC3/EBmpp1t/Ips41MyJXICAAAA8JmLOwjibpo4///jsmePeqxi0V3/+ur4u+6d89Y99/70nntuvXf07Zu+/twVF7970UcF8/+Rpc3/Y3t9cxu7Mvbmt/1CWFm2uTfZwODaJBD3Y9TGn8cPrA1hp5wdHNkSbX2SElWphsNjNckv1KvSVf2oJlljIN4f98tHVs/rSFxfE8L+OXtfsm38e3XSRk060FiVBPqkA9MqkkDc85MNrCpPArDVsnsF4wsqc6pLVn3X5Yq8/r4o1wRND69gH2gX+br6zdX2Up1+ILNPNWvLnraC6tguCt4ea7zbeuK7rd67LfeLVOYbysebQ9WhfFLb5Amz2mfGR3J/yVpgOz3Pub9SLSW9DV6Hcz59b7tXne5Ac+rjo7nrcl2/DstidY+fP/DOBY1jdr354Q2TX696dkHJ3Sgi/lD4maoB9bmbd3urDpnXXI/7PGnxedIT/w00eNpCCBsuPeG6kVXTr1g5+pAj93rttFOqZ7437+/vf+mBd/f9xxUTh31tQMH8v6W0+X9F6rbTH+PGvLB/CAfmbNx1cfMf3z/5HMwJJJ+SOxcGkkPur9YV/eQEAACAbS27uyO7v2BK5jY5ITw9Ty7M37KF+eP+ipFd5i+13z8adMpe9+9297hrTz3qpn/+zdh+G8e/uOSYFa1HNS49+mf/6cyaeQXz/9ZPnv/3TnXT8X/H/9lOHP/v0o6+K7p3+oE5W7UruqA6tgvH/7u0o7/bHP/vkuP/jv93xfH/bjj+36Ud/Wkr+JY03ZeuEMKwMWcMrr1r8BPvD1z96yeemvJvc1sn3PONq27Z8+Nv1y9eUL9r34L5//TS5v/W/+t60b7s+n+txdb/m15s/b851v8DAAC2qyILzaXneQWr9xVkSK/eV5Ch2wUCu11i0Pp/W7z+32NHHTl++ejFv16z95gDLus7d+6puzx504stM9+vue2D93f7xYGjCub/c0qb/8eXQ9/c1nvK+n8NY4tUdU0MTLcwIAAAADuiYjsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HztfsN1449prj7pN8dfWjP6+w+tO6D6mldOvXTZhFsnfeX28wfNWrFkSeWfnt940uTv3HB444aVE14IYUpnubKkeNnpi1f8YNUF3/jWg6fddPe7e85eWp2ptzJzu2de7tjqh3UhLMx5pDYm3q7ruLM5MG703bMrOhLr6kLYLzcw9fKpO3UkFteFcEBuYPXpg3brSFyeLvHQK8e91pE4Mx04cfCA9zsSR2YCZenu/kO/pLtl6e7O6xdC/5xAtrvn9suvKtvGCZlAebqNf6pN2oiB2lj0xtqkjRhojyWm9A5hSEUIvdJV/aw6qapXuqr/XZ1U1Std1WXVIYwIIVSkq/p1VVJVRXrkz1QlVcXA7vvesbGxI7GoKoQhuYEXxi8a3pGYkQpkGz+lKoS9O14y6cbvq0war0w3fkNlCF8JIVSlS2yqSEpUpUtsqAhh55zA5o1YEcLswBdD/PSZlPvghbMvnjqhvb1txnZMVGXaqgmTp7S3NU2c1j6pOtWnYspy0h/P/fRjf3njJRM7bu8a1dS/lHRFplxlZ5eHVebdPWRH733sV5/cSjY/HwX1x/xVoW/oPevCthlNF02YOXPG0ORvqdmHJX97ZaLJthraU7ZVY24lQ2aeN33IhbMvHjzlvAlnt53ddv5hww874ohhhx46fEjHoJqTv9tipIs++5F+uSKnks/i/S8hIdHTEuV5n27NO/rneMEX/c0drQzVnR/QBdOK3CxlnaPcFoM+9lOO+NN8Tel2REMLJg4FWYZ1n+WQgsnE5iw1SZbOr3UFk8Pcmso7N2m8Xx6amnoV2w71+XdzN+9bW7F5X8xsulLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/ZwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IFjAQAAAABh/tZh9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwKAAD//y85Ijg=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118)
fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r2, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60001c, 0x9)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000))

3.459204599s ago: executing program 4 (id=515):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d)
ioctl$SIOCSIFHWADDR(r2, 0x401c5820, &(0x7f0000000080)={'macvlan1\x00', @broadcast})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
close(r1)
connect$can_bcm(r0, &(0x7f0000000080), 0x10)
r4 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000140a20000000000a00000000000000000000040000000900010073797a300000000020000000030a00000000000000000000000000000900014073797a310000000014000000110001"], 0x68}}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=<r5=>0x0, @ANYBLOB="000000000000000000000100000008000100", @ANYRES32, @ANYBLOB="3c000200240001"], 0x58}, 0x1, 0xf000}, 0x0)
sendmsg$netlink(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)=ANY=[@ANYRESOCT=r5, @ANYBLOB="022636271224c5166690625d1b27ee36a07e8be8d1c85f02d50bc54fa1f5865cb3329f4319a79eb6da82c98dcc5fc8bc42761d4d3b90e66ca123703976c573829f6113be4b6d2959faa13f9dde71bfd03a59f274348e194149aa062cfeeac1d3463f7f09ca1ae9f483159170a4a948ec2f1a869660b5780beb277d7e7023b4e9cf074979ce576be79f49bde6", @ANYRES16=r1], 0x114}], 0x1, 0x0, 0x0, 0x20040000}, 0x20040004)
socket$nl_route(0x10, 0x3, 0x0)
socket$caif_seqpacket(0x25, 0x5, 0x3)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000100), 0xfecc)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000018c0)=@nat={'nat\x00', 0x670, 0x5, 0x3f0, 0xa8, 0xa8, 0xfeffffff, 0x1b8, 0x288, 0x358, 0x358, 0xffffffff, 0x358, 0x358, 0x5, 0x0, {[{{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'vlan1\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x13, @rand_addr, @empty, @port, @icmp_id}}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @loopback}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'veth1_to_bridge\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'veth0_to_bond\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "d2be"}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @multicast2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, 0x0, &(0x7f0000000340))
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002a00)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES8=r4], 0xe70}, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {}, {}, {0x6, 0x0, 0x9}]})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r9)
ioctl$SIOCSIFHWADDR(r9, 0x8b1a, &(0x7f00000003c0)={'pimreg0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
socket$inet_udplite(0x2, 0x2, 0x88)

3.336512369s ago: executing program 0 (id=516):
io_uring_setup(0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
epoll_create(0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
open(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r0 = socket$inet(0xa, 0x801, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200))
r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010102}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xe)
recvmmsg(r2, &(0x7f0000004300), 0x3a4, 0x0, 0x0)

2.919446663s ago: executing program 1 (id=517):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x2042030, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee00}}, './file2\x00'})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2020)
fchown(r3, 0xffffffffffffffff, r5)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@mcast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@local}, 0x0, @in6=@private2}}, 0x0)
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000240)='./bus\x00', 0x200020, &(0x7f0000000480)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@permit_directio}, {@euid_eq={'euid', 0x3d, r6}}, {@flag='silent'}, {@subj_role={'subj_role', 0x3d, 'lazytime'}}]}}, 0x1, 0x0, &(0x7f00000005c0))
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x6e, 0x0, 0x0)

2.411437834s ago: executing program 1 (id=518):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000c40)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {}, {0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xf4}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x703eb7f0c667a085}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.33506704s ago: executing program 3 (id=519):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[], 0x1, 0x36e, &(0x7f0000000880)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
socket$nl_xfrm(0x10, 0x3, 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x36)
recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108)
close(r4)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2)

2.199660851s ago: executing program 0 (id=520):
r0 = gettid()
r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8)
readv(r1, 0x0, 0x0)
close(r1)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0)
rt_sigreturn()
poll(0x0, 0x0, 0x6c)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
rt_sigreturn()
mlockall(0x1)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
mkdirat$cgroup(0xffffffffffffff9c, 0x0, 0x1ff)

278.668808ms ago: executing program 2 (id=521):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10)
futimesat(0xffffffffffffffff, 0x0, 0x0)

0s ago: executing program 2 (id=522):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000180)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5ca, &(0x7f00000006c0)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

kernel console output (not intermixed with test programs):

cted capacity change from 0 to 256
[  348.913009][ T4433] exfat: Deprecated parameter 'utf8'
[  349.016666][ T4433] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  349.199420][ T3719] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  349.395230][ T4448] loop3: detected capacity change from 0 to 1024
[  349.403646][ T4448] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  349.424884][ T4448] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  349.477745][ T3719] usb 1-1: Using ep0 maxpacket: 32
[  349.508981][ T3657] EXT4-fs (loop3): unmounting filesystem.
[  349.521707][   T14] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  349.628063][ T3719] usb 1-1: config 0 has no interfaces?
[  349.806194][   T14] usb 2-1: Using ep0 maxpacket: 32
[  349.812126][ T3719] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  349.836808][ T3719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.861331][ T3719] usb 1-1: Product: syz
[  349.865648][ T3719] usb 1-1: Manufacturer: syz
[  349.874358][ T3719] usb 1-1: SerialNumber: syz
[  349.883695][ T3719] usb 1-1: config 0 descriptor??
[  349.940323][   T14] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  349.957826][   T14] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  349.981602][   T14] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  349.993296][   T14] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  350.007444][   T14] usb 2-1: config 0 interface 0 has no altsetting 0
[  350.032937][ T4463] netlink: 'syz.2.161': attribute type 4 has an invalid length.
[  350.198023][   T14] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  350.213933][   T14] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  350.228211][   T14] usb 2-1: Product: syz
[  350.232582][   T14] usb 2-1: Manufacturer: syz
[  350.244881][   T14] usb 2-1: SerialNumber: syz
[  350.261890][   T14] usb 2-1: config 0 descriptor??
[  350.321606][   T14] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  350.357703][   T14] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  351.117087][  T946] usb 2-1: USB disconnect, device number 2
[  351.117994][    C0] ldusb 2-1:0.0: usb_submit_urb failed (-19)
[  351.131392][ T4433] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  351.138760][ T4480] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19
[  351.168099][  T946] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  351.174029][   T14] usb 1-1: USB disconnect, device number 2
[  351.216664][ T3667] EXT4-fs (loop0): unmounting filesystem.
[  351.380637][ T4489] loop0: detected capacity change from 0 to 1024
[  351.413672][ T4489] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  351.457475][ T4489] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  351.588817][ T4483] loop2: detected capacity change from 0 to 40427
[  351.634962][ T3667] EXT4-fs (loop0): unmounting filesystem.
[  351.688150][ T4483] F2FS-fs (loop2): Found nat_bits in checkpoint
[  351.932212][ T4483] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  352.950737][ T4519] loop1: detected capacity change from 0 to 1024
[  353.001779][ T4519] EXT4-fs: Ignoring removed oldalloc option
[  353.064514][ T4519] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  353.106513][ T4525] netlink: 'syz.4.176': attribute type 4 has an invalid length.
[  354.508810][ T4541] loop0: detected capacity change from 0 to 1024
[  354.536796][ T4541] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  354.610479][ T4541] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  354.811044][ T3667] EXT4-fs (loop0): unmounting filesystem.
[  355.345706][ T3832] syz-executor: attempt to access beyond end of device
[  355.345706][ T3832] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  355.638722][ T4562] netlink: 'syz.0.188': attribute type 4 has an invalid length.
[  356.787203][ T4575] loop0: detected capacity change from 0 to 1024
[  356.809667][ T3658] EXT4-fs (loop1): unmounting filesystem.
[  356.853913][ T4575] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  356.956998][ T4575] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  357.892754][ T3667] EXT4-fs (loop0): unmounting filesystem.
[  358.208618][ T4607] netlink: 'syz.3.201': attribute type 4 has an invalid length.
[  359.470994][ T4597] loop4: detected capacity change from 0 to 40427
[  359.518064][ T4597] F2FS-fs (loop4): Found nat_bits in checkpoint
[  359.692641][ T4597] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  359.808435][ T4639] loop0: detected capacity change from 0 to 1024
[  359.869429][ T4639] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  359.969840][ T4639] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  360.380811][ T3667] EXT4-fs (loop0): unmounting filesystem.
[  360.508641][ T3666] syz-executor: attempt to access beyond end of device
[  360.508641][ T3666] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  360.533827][ T4654] netlink: 'syz.3.214': attribute type 4 has an invalid length.
[  360.964711][ T4668] loop0: detected capacity change from 0 to 1024
[  361.601483][ T4684] loop3: detected capacity change from 0 to 1024
[  361.643303][ T4684] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  361.674508][ T4686] loop2: detected capacity change from 0 to 512
[  361.699324][ T4684] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  361.786723][ T4686] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  361.827874][ T4686] ext4 filesystem being mounted at /21/bus supports timestamps until 2038 (0x7fffffff)
[  361.872642][ T3657] EXT4-fs (loop3): unmounting filesystem.
[  361.901599][ T4682] loop1: detected capacity change from 0 to 32768
[  361.925724][ T4682] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop1 scanned by syz.1.222 (4682)
[  361.994137][ T4682] BTRFS info (device loop1): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  362.055966][ T4682] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  362.099710][ T4682] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[  362.101016][ T3832] EXT4-fs (loop2): unmounting filesystem.
[  362.136811][ T4682] BTRFS info (device loop1): use lzo compression, level 0
[  362.174168][ T4682] BTRFS info (device loop1): using free space tree
[  362.576150][ T4682] BTRFS info (device loop1): enabling ssd optimizations
[  362.929966][ T3658] BTRFS info (device loop1): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  363.077280][ T4731] netlink: 'syz.2.233': attribute type 4 has an invalid length.
[  363.236390][ T4693] loop3: detected capacity change from 0 to 40427
[  363.496918][ T4740] loop2: detected capacity change from 0 to 1024
[  363.527243][ T4740] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  363.743705][ T4693] F2FS-fs (loop3): Found nat_bits in checkpoint
[  363.766833][ T4740] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  364.309935][ T3832] EXT4-fs (loop2): unmounting filesystem.
[  364.339352][ T4693] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  365.162683][ T3657] syz-executor: attempt to access beyond end of device
[  365.162683][ T3657] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  365.402644][ T4769] loop1: detected capacity change from 0 to 32768
[  365.439224][ T4769] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop1 scanned by syz.1.241 (4769)
[  365.461723][ T4777] netlink: 'syz.2.245': attribute type 4 has an invalid length.
[  365.472458][ T4779] loop4: detected capacity change from 0 to 128
[  365.738281][ T4769] BTRFS info (device loop1): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  366.071597][ T4769] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  366.189540][ T4769] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[  366.269374][ T4769] BTRFS info (device loop1): use lzo compression, level 0
[  366.595135][ T4769] BTRFS info (device loop1): using free space tree
[  366.808138][ T4786] loop2: detected capacity change from 0 to 1024
[  366.914559][ T4786] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  367.603482][ T4786] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  367.772182][ T3832] EXT4-fs (loop2): unmounting filesystem.
[  367.871968][ T4769] BTRFS info (device loop1): enabling ssd optimizations
[  368.067959][ T3658] BTRFS info (device loop1): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  368.078590][ T4733] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  368.317950][ T4733] usb 5-1: Using ep0 maxpacket: 8
[  368.443316][ T4733] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  368.547255][ T4825] loop3: detected capacity change from 0 to 40427
[  368.643015][ T4733] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  368.667167][ T4733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.691234][ T4733] usb 5-1: Product: syz
[  368.695571][ T4733] usb 5-1: Manufacturer: syz
[  368.706328][ T4733] usb 5-1: SerialNumber: syz
[  368.775752][ T4825] F2FS-fs (loop3): Found nat_bits in checkpoint
[  368.869759][ T4825] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  368.947145][ T4853] input: syz0 as /devices/virtual/input/input6
[  369.515272][ T4860] loop2: detected capacity change from 0 to 128
[  369.740743][ T3657] syz-executor: attempt to access beyond end of device
[  369.740743][ T3657] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  370.898085][ T4733] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[  370.921507][ T4733] cdc_ncm 5-1:1.0: setting tx_max = 184
[  372.453880][ T4842] netlink: 'syz.1.257': attribute type 4 has an invalid length.
[  372.564021][ T4733] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  372.638701][ T4733] usb 5-1: USB disconnect, device number 2
[  372.665576][ T4733] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP)
[  373.861771][ T4902] Zero length message leads to an empty skb
[  374.019147][ T4907] loop0: detected capacity change from 0 to 128
[  375.756823][ T4890] loop3: detected capacity change from 0 to 40427
[  375.819402][ T4733] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  375.840542][ T4918] netlink: 'syz.1.280': attribute type 4 has an invalid length.
[  375.841900][ T4890] F2FS-fs (loop3): Found nat_bits in checkpoint
[  376.077768][ T4733] usb 3-1: Using ep0 maxpacket: 8
[  376.239064][ T4733] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  376.991766][ T4733] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  377.077778][ T4733] usb 3-1: string descriptor 0 read error: -71
[  377.084582][ T4733] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  377.129807][ T4733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.217971][ T4733] usb 3-1: can't set config #1, error -71
[  377.245352][ T4733] usb 3-1: USB disconnect, device number 2
[  378.598575][ T1261] ieee802154 phy0 wpan0: encryption failed: -22
[  378.605753][ T1261] ieee802154 phy1 wpan1: encryption failed: -22
[  379.477341][ T5013] netlink: 'syz.1.292': attribute type 4 has an invalid length.
[  379.999357][   T27] audit: type=1326 audit(1722241297.434:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5034 comm="syz.1.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe679b77299 code=0x7ffc0000
[  380.179940][   T27] audit: type=1326 audit(1722241297.454:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5034 comm="syz.1.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe679b77299 code=0x7ffc0000
[  380.207578][ T3664] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  380.213967][ T5032] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.238103][ T3664] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  380.247174][ T3664] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  380.255263][ T3664] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  380.272217][ T3664] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  380.280639][ T3664] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  380.294775][   T27] audit: type=1326 audit(1722241297.454:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5034 comm="syz.1.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fe679b77299 code=0x7ffc0000
[  380.318349][   T27] audit: type=1326 audit(1722241297.454:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5034 comm="syz.1.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe679b77299 code=0x7ffc0000
[  380.341548][   T27] audit: type=1326 audit(1722241297.454:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5034 comm="syz.1.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe679b77299 code=0x7ffc0000
[  380.511371][ T5032] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.083758][ T5032] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.364566][ T5032] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  381.643641][ T4998] loop4: detected capacity change from 0 to 40427
[  382.111735][ T4998] F2FS-fs (loop4): Found nat_bits in checkpoint
[  382.347899][ T3664] Bluetooth: hci4: command tx timeout
[  383.228704][ T5124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.303'.
[  383.348768][ T5137] netlink: 'syz.1.304': attribute type 4 has an invalid length.
[  383.357390][ T5037] chnl_net:caif_netlink_parms(): no params data found
[  383.684275][ T5151] tipc: Started in network mode
[  383.691732][ T5151] tipc: Node identity 101, cluster identity 4711
[  383.779393][ T5151] tipc: Node number set to 257
[  383.798348][ T5151] tipc: Cannot configure node identity twice
[  383.915556][ T5163] loop0: detected capacity change from 0 to 2048
[  383.992639][ T5163] EXT4-fs error (device loop0): __ext4_fill_super:5399: inode #2: comm syz.0.310: casefold flag without casefold feature
[  384.109280][ T5163] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  384.172155][ T5163] EXT4-fs (loop0): Errors on filesystem, clearing orphan list.
[  384.190220][ T5163] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  384.427805][ T3664] Bluetooth: hci4: command tx timeout
[  384.700055][ T5037] bridge0: port 1(bridge_slave_0) entered blocking state
[  384.707286][ T5037] bridge0: port 1(bridge_slave_0) entered disabled state
[  384.742809][ T5037] device bridge_slave_0 entered promiscuous mode
[  384.841404][ T3667] EXT4-fs (loop0): unmounting filesystem.
[  384.973566][ T5037] bridge0: port 2(bridge_slave_1) entered blocking state
[  384.991574][ T5037] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.047341][ T5037] device bridge_slave_1 entered promiscuous mode
[  386.507853][ T3664] Bluetooth: hci4: command tx timeout
[  386.864115][ T5249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.316'.
[  386.887548][ T5251] netlink: 'syz.4.317': attribute type 4 has an invalid length.
[  386.905625][ T5037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  387.010634][ T5037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  387.145672][ T5259] loop0: detected capacity change from 0 to 2048
[  387.170347][ T5037] team0: Port device team_slave_0 added
[  387.172678][ T5261] loop4: detected capacity change from 0 to 1024
[  387.197886][ T5261] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  387.229105][ T5037] team0: Port device team_slave_1 added
[  387.270694][ T5261] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  387.315579][ T5259] EXT4-fs error (device loop0): __ext4_fill_super:5399: inode #2: comm syz.0.318: casefold flag without casefold feature
[  387.369774][ T5259] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  387.440728][ T5037] batman_adv: batadv0: Adding interface: batadv_slave_0
[  387.469133][ T5259] EXT4-fs (loop0): Errors on filesystem, clearing orphan list.
[  387.476825][ T5259] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  387.498865][ T5037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  387.547155][ T3666] EXT4-fs (loop4): unmounting filesystem.
[  387.795063][ T5037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  387.949172][ T5037] batman_adv: batadv0: Adding interface: batadv_slave_1
[  387.956545][ T5037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  387.983425][ T5246] loop1: detected capacity change from 0 to 40427
[  388.160043][ T5246] F2FS-fs (loop1): Found nat_bits in checkpoint
[  388.189964][ T5037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  388.270337][ T5032] device hsr_slave_0 left promiscuous mode
[  388.319835][ T5032] device hsr_slave_1 left promiscuous mode
[  388.333814][ T5032] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  388.346760][ T5032] batman_adv: batadv0: Removing interface: batadv_slave_0
[  388.364355][ T5032] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  388.384486][ T5246] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  388.392371][ T5032] batman_adv: batadv0: Removing interface: batadv_slave_1
[  388.587747][ T3664] Bluetooth: hci4: command tx timeout
[  388.607898][ T5032] device bridge_slave_1 left promiscuous mode
[  388.614266][ T5032] bridge0: port 2(bridge_slave_1) entered disabled state
[  388.646956][ T5032] device bridge_slave_0 left promiscuous mode
[  388.667484][ T5032] bridge0: port 1(bridge_slave_0) entered disabled state
[  388.847981][ T5032] device veth1_macvtap left promiscuous mode
[  388.854047][ T5032] device veth0_macvtap left promiscuous mode
[  388.878957][ T5032] device veth1_vlan left promiscuous mode
[  388.884813][ T5032] device veth0_vlan left promiscuous mode
[  389.393472][ T3667] EXT4-fs (loop0): unmounting filesystem.
[  391.551280][ T3658] syz-executor: attempt to access beyond end of device
[  391.551280][ T3658] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  391.681853][ T5032] team0 (unregistering): Port device team_slave_1 removed
[  391.765165][ T5032] team0 (unregistering): Port device team_slave_0 removed
[  391.838660][ T5032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  391.917119][ T5032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  392.614269][ T5032] bond0 (unregistering): Released all slaves
[  392.804815][ T5362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.327'.
[  392.837785][ T5370] netlink: 'syz.4.328': attribute type 4 has an invalid length.
[  392.910300][ T5037] device hsr_slave_0 entered promiscuous mode
[  392.938656][ T5037] device hsr_slave_1 entered promiscuous mode
[  393.434605][ T3664] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  393.445588][ T3664] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  393.454837][ T3664] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  393.476496][ T3664] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  393.496118][ T3664] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  393.504470][ T3664] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  395.547890][ T3664] Bluetooth: hci5: command tx timeout
[  395.624342][ T5384] chnl_net:caif_netlink_parms(): no params data found
[  395.635710][ T5463] netlink: 40 bytes leftover after parsing attributes in process `syz.4.337'.
[  396.014711][ T5453] loop0: detected capacity change from 0 to 40427
[  396.079019][ T5453] F2FS-fs (loop0): Found nat_bits in checkpoint
[  396.186379][ T5472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.338'.
[  396.192830][ T5453] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  396.516846][ T5384] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.534322][ T5384] bridge0: port 1(bridge_slave_0) entered disabled state
[  396.548819][ T5384] device bridge_slave_0 entered promiscuous mode
[  396.674943][ T5487] netlink: 'syz.4.339': attribute type 4 has an invalid length.
[  396.717914][ T5384] bridge0: port 2(bridge_slave_1) entered blocking state
[  396.732245][ T5384] bridge0: port 2(bridge_slave_1) entered disabled state
[  396.779070][ T5384] device bridge_slave_1 entered promiscuous mode
[  396.894582][ T5384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  396.925010][ T5384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  397.113648][ T5384] team0: Port device team_slave_0 added
[  397.151585][ T5037] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  397.378937][ T5384] team0: Port device team_slave_1 added
[  397.403784][ T5037] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  397.448457][ T5037] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  397.557579][ T5037] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  397.585369][ T5384] batman_adv: batadv0: Adding interface: batadv_slave_0
[  397.598206][ T5384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  397.628830][ T3664] Bluetooth: hci5: command tx timeout
[  397.674608][ T5384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  397.759887][ T5384] batman_adv: batadv0: Adding interface: batadv_slave_1
[  397.774906][ T5384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  397.801085][    C0] vkms_vblank_simulate: vblank timer overrun
[  397.808536][   T27] audit: type=1800 audit(1722241315.224:42): pid=5502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.343" name="/newroot/69/file0" dev="tmpfs" ino=381 res=0 errno=0
[  397.830504][    C0] vkms_vblank_simulate: vblank timer overrun
[  397.985437][ T5384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  399.415226][ T5384] device hsr_slave_0 entered promiscuous mode
[  399.487073][ T5384] device hsr_slave_1 entered promiscuous mode
[  399.553944][ T5384] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  399.567141][ T5384] Cannot create hsr debugfs directory
[  399.586358][ T5578] netlink: 'syz.1.349': attribute type 4 has an invalid length.
[  399.648760][ T3667] syz-executor: attempt to access beyond end of device
[  399.648760][ T3667] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  399.707882][ T3664] Bluetooth: hci5: command tx timeout
[  399.715977][ T5037] 8021q: adding VLAN 0 to HW filter on device bond0
[  399.797910][ T4831] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  399.901392][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  399.931168][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  399.966674][ T5037] 8021q: adding VLAN 0 to HW filter on device team0
[  400.090472][ T5384] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.145299][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  400.173178][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  400.199756][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.206908][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  400.218131][ T4831] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  400.240967][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  400.247692][ T4831] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  400.378195][ T4831] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  400.397815][ T4831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  400.421975][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  400.426237][ T4831] usb 5-1: SerialNumber: syz
[  400.430935][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  400.441942][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  400.452197][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  400.494137][ T5384] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.555805][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  400.569481][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  400.595771][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  400.625918][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  400.674947][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  400.691238][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  400.725342][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  400.734567][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  400.762046][ T4831] usb 5-1: 0:2 : does not exist
[  400.771937][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  400.788345][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  400.804340][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  400.853459][ T5384] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  400.906402][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  401.082453][ T5384] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.631888][ T4831] usb 5-1: USB disconnect, device number 3
[  401.787844][ T3664] Bluetooth: hci5: command tx timeout
[  402.847252][ T5384] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  402.887289][ T5384] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  403.018808][ T5686] netlink: 'syz.0.359': attribute type 4 has an invalid length.
[  403.052960][ T5384] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  403.123676][ T5384] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  403.201506][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  403.218592][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  403.282439][ T5037] 8021q: adding VLAN 0 to HW filter on device batadv0
[  403.417547][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  403.439553][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  403.493361][ T5384] 8021q: adding VLAN 0 to HW filter on device bond0
[  403.517469][ T5037] device veth0_vlan entered promiscuous mode
[  403.615236][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  403.636240][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  403.664601][ T5695] loop0: detected capacity change from 0 to 512
[  403.704050][ T5037] device veth1_vlan entered promiscuous mode
[  403.751759][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  403.774032][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  403.802946][ T5695] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  403.819388][ T5695] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038 (0x7fffffff)
[  403.870666][ T5384] 8021q: adding VLAN 0 to HW filter on device team0
[  403.891656][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  403.913879][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  403.951589][ T5679] loop4: detected capacity change from 0 to 40427
[  403.974272][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  404.005101][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  404.026514][ T5679] F2FS-fs (loop4): Found nat_bits in checkpoint
[  404.060027][ T3705] bridge0: port 1(bridge_slave_0) entered blocking state
[  404.067204][ T3705] bridge0: port 1(bridge_slave_0) entered forwarding state
[  404.127400][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  404.162894][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  404.186970][ T3705] bridge0: port 2(bridge_slave_1) entered blocking state
[  404.194309][ T3705] bridge0: port 2(bridge_slave_1) entered forwarding state
[  404.202879][ T5679] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  404.226053][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  404.530915][ T5037] device veth0_macvtap entered promiscuous mode
[  404.582881][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  404.595769][ T3667] EXT4-fs (loop0): unmounting filesystem.
[  404.606257][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  404.625775][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  404.634755][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  404.647523][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  404.664345][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  404.696413][ T5037] device veth1_macvtap entered promiscuous mode
[  404.766499][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  404.778630][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  404.805733][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  404.839516][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  404.881919][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  404.921385][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  405.065136][ T5726] loop1: detected capacity change from 0 to 512
[  405.112113][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  405.121037][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  405.129815][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  405.145783][ T5384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  405.175363][ T5726] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  405.188961][ T5726] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038 (0x7fffffff)
[  405.263087][ T5037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  405.362177][ T5037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  405.405928][ T5037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  405.437024][ T5037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  405.477651][ T5037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  405.519398][ T5037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  405.553162][ T5037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  405.578944][ T5037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  405.600244][ T5037] batman_adv: batadv0: Interface activated: batadv_slave_0
[  405.633686][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  405.675388][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  405.715357][ T3658] EXT4-fs (loop1): unmounting filesystem.
[  405.722613][ T5032] device hsr_slave_0 left promiscuous mode
[  405.741045][ T5032] device hsr_slave_1 left promiscuous mode
[  405.748085][   T22] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  405.785955][ T5032] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  405.822240][ T5032] batman_adv: batadv0: Removing interface: batadv_slave_0
[  405.864200][ T5032] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  405.876823][ T5748] loop1: detected capacity change from 0 to 512
[  405.892580][ T5032] batman_adv: batadv0: Removing interface: batadv_slave_1
[  405.923597][ T5032] device bridge_slave_1 left promiscuous mode
[  405.935552][ T5748] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  405.944313][ T5032] bridge0: port 2(bridge_slave_1) entered disabled state
[  405.945757][ T5748] ext4 filesystem being mounted at /79/bus supports timestamps until 2038 (0x7fffffff)
[  405.983596][ T5032] device bridge_slave_0 left promiscuous mode
[  405.997798][   T22] usb 1-1: Using ep0 maxpacket: 8
[  406.008667][ T5032] bridge0: port 1(bridge_slave_0) entered disabled state
[  406.072349][ T5032] device veth1_macvtap left promiscuous mode
[  406.098287][ T3658] EXT4-fs (loop1): unmounting filesystem.
[  406.104351][ T5032] device veth0_macvtap left promiscuous mode
[  406.117950][   T22] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  406.130796][ T5032] device veth1_vlan left promiscuous mode
[  406.136656][ T5032] device veth0_vlan left promiscuous mode
[  406.138179][   T22] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  406.181019][   T22] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  406.225114][ T3666] syz-executor: attempt to access beyond end of device
[  406.225114][ T3666] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  407.047901][   T22] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  407.061998][   T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.106921][   T22] usb 1-1: Product: syz
[  407.111856][   T22] usb 1-1: Manufacturer: syz
[  407.116495][   T22] usb 1-1: SerialNumber: syz
[  407.799840][ T5032] team0 (unregistering): Port device team_slave_1 removed
[  407.844927][ T5032] team0 (unregistering): Port device team_slave_0 removed
[  407.892467][ T5032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  407.931594][ T5032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  408.279735][   T22] cdc_ncm 1-1:1.0: bind() failure
[  408.288688][   T22] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  408.295595][   T22] cdc_ncm 1-1:1.1: bind() failure
[  408.408023][ T5032] bond0 (unregistering): Released all slaves
[  408.480094][ T5037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  408.490741][ T5037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.502681][ T5037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  408.536588][ T5037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.546957][ T5037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  408.557836][ T5037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  408.570201][ T5037] batman_adv: batadv0: Interface activated: batadv_slave_1
[  408.579575][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  408.589532][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  408.629550][ T5037] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  408.649838][ T5037] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  408.664316][ T5037] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  408.711929][ T5037] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  408.744382][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  408.762471][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  408.843425][ T5384] 8021q: adding VLAN 0 to HW filter on device batadv0
[  409.018446][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  409.027221][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  409.078753][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  409.093062][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  409.104402][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  409.115726][ T5384] device veth0_vlan entered promiscuous mode
[  409.126281][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  409.135319][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  409.155384][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  409.163775][ T5384] device veth1_vlan entered promiscuous mode
[  409.213804][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  409.231774][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  409.240713][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  409.260341][ T5017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  409.276703][ T5017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  409.303622][ T5384] device veth0_macvtap entered promiscuous mode
[  409.334453][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  409.344953][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  409.364179][ T4837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  409.383593][ T5384] device veth1_macvtap entered promiscuous mode
[  409.412847][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  409.432303][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  409.474649][ T5384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  409.521530][ T5384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.546017][ T4837] usb 1-1: USB disconnect, device number 3
[  409.552859][ T5384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  409.615431][ T5384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.651982][ T5384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  409.706574][ T5803] loop4: detected capacity change from 0 to 2048
[  409.707651][ T5384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.742403][ T5384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  409.759266][ T5808] loop0: detected capacity change from 0 to 1024
[  409.793101][ T5384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  409.887989][ T5384] batman_adv: batadv0: Interface activated: batadv_slave_0
[  409.899384][ T5803] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  409.923032][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  409.948662][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  410.033308][ T5384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  410.245612][ T5384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  410.444833][ T5384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  410.580152][ T5384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  410.637869][ T5384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  410.697701][ T5384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  410.744209][ T5384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  410.785530][ T5384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  410.812728][ T5799] loop1: detected capacity change from 0 to 40427
[  410.821705][ T5384] batman_adv: batadv0: Interface activated: batadv_slave_1
[  410.829322][ T3666] EXT4-fs (loop4): unmounting filesystem.
[  410.832976][ T5384] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  410.845083][ T5384] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  410.854115][ T5384] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  410.864398][ T5384] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  410.902083][ T5799] F2FS-fs (loop1): Found nat_bits in checkpoint
[  410.928425][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  410.944055][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  411.023961][ T5821] loop4: detected capacity change from 0 to 256
[  411.114010][ T5799] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  411.126908][ T5821] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  411.128912][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.178674][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.237437][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  411.259805][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.312251][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.383879][ T4838] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  411.487685][   T27] audit: type=1804 audit(1722241328.874:43): pid=5821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.378" name="/newroot/94/file1/bus" dev="loop4" ino=1048601 res=1 errno=0
[  411.858701][ T5832] loop3: detected capacity change from 0 to 1024
[  411.951165][ T5832] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  412.059097][ T5832] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  412.251750][ T5841] loop4: detected capacity change from 0 to 256
[  412.278443][ T5841] exfat: Bad value for 'uid'
[  412.335137][ T5384] EXT4-fs (loop3): unmounting filesystem.
[  412.439910][ T3918] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  412.791813][ T5858] loop2: detected capacity change from 0 to 512
[  412.817975][ T4831] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  412.964132][ T5858] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  412.973538][ T5858] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038 (0x7fffffff)
[  413.160560][ T5037] EXT4-fs (loop2): unmounting filesystem.
[  413.198018][ T4831] usb 1-1: config index 0 descriptor too short (expected 64575, got 68)
[  413.217309][ T4831] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  413.267744][ T4831] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping
[  413.287890][ T4831] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[  413.402485][ T4831] usb 1-1: config index 1 descriptor too short (expected 64575, got 68)
[  413.419684][ T4831] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  413.493549][ T4831] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping
[  413.515388][ T4831] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[  413.647901][ T4831] usb 1-1: string descriptor 0 read error: -71
[  413.654209][ T4831] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  413.672602][ T5882] loop3: detected capacity change from 0 to 1024
[  413.727720][ T5882] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  413.730319][ T4831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.792375][ T5882] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  413.907724][ T4831] usb 1-1: can't set config #1, error -71
[  413.955214][ T4831] usb 1-1: USB disconnect, device number 4
[  414.008728][ T5384] EXT4-fs (loop3): unmounting filesystem.
[  414.044793][ T5890] loop4: detected capacity change from 0 to 512
[  414.086753][ T5890] EXT4-fs: Ignoring removed bh option
[  414.101327][ T3658] syz-executor: attempt to access beyond end of device
[  414.101327][ T3658] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  414.131578][ T5890] EXT4-fs error (device loop4): __ext4_iget:5044: inode #12: block 2: comm syz.4.397: invalid block
[  414.154952][ T5890] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.397: couldn't read orphan inode 12 (err -117)
[  414.174313][ T5890] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  414.307581][ T3666] EXT4-fs (loop4): unmounting filesystem.
[  414.420887][ T5903] loop3: detected capacity change from 0 to 512
[  414.523647][ T5903] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  414.534078][ T5903] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038 (0x7fffffff)
[  414.696456][ T5913] loop1: detected capacity change from 0 to 512
[  414.717884][ T3700] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  414.881759][ T5913] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  415.097756][ T3700] usb 5-1: Using ep0 maxpacket: 32
[  415.113739][ T5913] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038 (0x7fffffff)
[  415.232863][ T3700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  415.303441][ T3700] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  415.369147][ T3700] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  415.467822][ T3700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  415.544246][ T3658] EXT4-fs error (device loop1): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /86/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  415.578288][ T3700] usb 5-1: config 0 descriptor??
[  415.585532][ T5384] EXT4-fs (loop3): unmounting filesystem.
[  415.589698][ T5928] loop0: detected capacity change from 0 to 1024
[  415.622990][ T3700] hub 5-1:0.0: USB hub found
[  415.679250][ T5928] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  415.735325][ T5930] netlink: 'syz.3.411': attribute type 29 has an invalid length.
[  415.785353][ T5928] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  415.847851][ T3700] hub 5-1:0.0: 1 port detected
[  415.948046][ T3667] EXT4-fs (loop0): unmounting filesystem.
[  416.080935][ T3700] hub 5-1:0.0: hub_hub_status failed (err = -71)
[  416.100881][ T3700] hub 5-1:0.0: config failed, can't get hub status (err -71)
[  416.207899][ T3700] usbhid 5-1:0.0: can't add hid device: -71
[  416.217011][ T3700] usbhid: probe of 5-1:0.0 failed with error -71
[  416.258484][ T3700] usb 5-1: USB disconnect, device number 4
[  416.939912][ T5947] loop2: detected capacity change from 0 to 1024
[  418.556935][ T5966] loop2: detected capacity change from 0 to 16
[  418.799655][ T5966] erofs: (device loop2): mounted with root inode @ nid 36.
[  418.856531][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 247 @ nid 36
[  418.871980][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 246 @ nid 36
[  418.883159][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 245 @ nid 36
[  418.928921][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 244 @ nid 36
[  418.944197][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 243 @ nid 36
[  418.955327][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 242 @ nid 36
[  418.965577][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 241 @ nid 36
[  418.975776][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 240 @ nid 36
[  419.003237][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 239 @ nid 36
[  419.016519][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 238 @ nid 36
[  419.026943][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 237 @ nid 36
[  419.037236][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 236 @ nid 36
[  419.047587][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 235 @ nid 36
[  419.057911][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 234 @ nid 36
[  419.068189][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 233 @ nid 36
[  419.086210][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 232 @ nid 36
[  419.097062][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 231 @ nid 36
[  419.112840][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 230 @ nid 36
[  419.124992][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 229 @ nid 36
[  419.135118][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 228 @ nid 36
[  419.145709][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 227 @ nid 36
[  419.155729][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 226 @ nid 36
[  419.166017][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 225 @ nid 36
[  419.176264][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 224 @ nid 36
[  419.187369][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 223 @ nid 36
[  419.199475][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 222 @ nid 36
[  419.209596][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 221 @ nid 36
[  419.219962][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 220 @ nid 36
[  419.231101][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 219 @ nid 36
[  419.242087][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 218 @ nid 36
[  419.252174][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 217 @ nid 36
[  419.262336][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 216 @ nid 36
[  419.272999][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 215 @ nid 36
[  419.283269][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 214 @ nid 36
[  419.294337][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 213 @ nid 36
[  419.595205][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 212 @ nid 36
[  419.609138][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 211 @ nid 36
[  419.619693][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 210 @ nid 36
[  419.639645][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 209 @ nid 36
[  419.659206][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 208 @ nid 36
[  419.676751][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 207 @ nid 36
[  419.693920][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 206 @ nid 36
[  419.713685][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 205 @ nid 36
[  419.724014][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 204 @ nid 36
[  419.737133][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 203 @ nid 36
[  419.773299][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 202 @ nid 36
[  420.219035][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 201 @ nid 36
[  420.357804][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 200 @ nid 36
[  420.373593][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 199 @ nid 36
[  420.396850][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 198 @ nid 36
[  420.421720][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 197 @ nid 36
[  420.456749][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 196 @ nid 36
[  420.488249][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 195 @ nid 36
[  420.526297][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 194 @ nid 36
[  420.549704][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 193 @ nid 36
[  420.607866][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 192 @ nid 36
[  420.632077][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 191 @ nid 36
[  420.708091][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 190 @ nid 36
[  420.757952][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 189 @ nid 36
[  420.810682][ T5988] loop3: detected capacity change from 0 to 2048
[  420.835081][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 188 @ nid 36
[  420.893526][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 187 @ nid 36
[  420.925568][ T5988] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  420.937996][ T5988] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038 (0x7fffffff)
[  420.993087][ T5988] fs-verity: sha512 using implementation "sha512-avx2"
[  421.063849][ T5994] loop4: detected capacity change from 0 to 1024
[  421.080682][ T5384] EXT4-fs (loop3): unmounting filesystem.
[  421.148901][ T5994] hfsplus: unable to parse mount options
[  421.301308][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 186 @ nid 36
[  421.320189][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 185 @ nid 36
[  421.342811][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 184 @ nid 36
[  421.396227][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 183 @ nid 36
[  421.433827][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 182 @ nid 36
[  421.475901][ T5981] loop0: detected capacity change from 0 to 32768
[  421.493679][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 181 @ nid 36
[  421.723959][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 180 @ nid 36
[  421.771177][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 179 @ nid 36
[  421.852376][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 178 @ nid 36
[  421.906058][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 177 @ nid 36
[  421.957771][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 176 @ nid 36
[  422.006273][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 175 @ nid 36
[  422.043346][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 174 @ nid 36
[  422.081853][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 173 @ nid 36
[  422.104028][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 172 @ nid 36
[  422.232784][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 171 @ nid 36
[  422.247903][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 170 @ nid 36
[  422.268562][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 169 @ nid 36
[  422.292011][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 168 @ nid 36
[  422.314498][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 167 @ nid 36
[  422.345947][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 166 @ nid 36
[  422.457516][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 165 @ nid 36
[  422.503085][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 164 @ nid 36
[  422.566344][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 163 @ nid 36
[  422.603874][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 162 @ nid 36
[  422.625820][ T6014] loop3: detected capacity change from 0 to 128
[  422.637854][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 161 @ nid 36
[  422.672606][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 160 @ nid 36
[  422.697536][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 159 @ nid 36
[  422.839482][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 158 @ nid 36
[  422.858802][ T6016] netlink: 'syz.0.438': attribute type 4 has an invalid length.
[  423.821294][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 157 @ nid 36
[  423.926061][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 156 @ nid 36
[  423.951934][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 155 @ nid 36
[  423.996366][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 154 @ nid 36
[  424.033167][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 153 @ nid 36
[  424.065107][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 152 @ nid 36
[  424.867315][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 151 @ nid 36
[  424.911420][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 150 @ nid 36
[  424.948779][ T6028] netlink: 'syz.4.442': attribute type 15 has an invalid length.
[  424.971603][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 149 @ nid 36
[  424.982251][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 148 @ nid 36
[  425.007345][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 147 @ nid 36
[  425.018114][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 146 @ nid 36
[  425.045537][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 145 @ nid 36
[  425.072027][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 144 @ nid 36
[  425.102806][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 143 @ nid 36
[  425.123120][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 142 @ nid 36
[  425.164512][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 141 @ nid 36
[  425.203361][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 140 @ nid 36
[  425.223754][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 139 @ nid 36
[  425.256514][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 138 @ nid 36
[  425.333572][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 137 @ nid 36
[  425.369816][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 136 @ nid 36
[  425.407282][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 135 @ nid 36
[  425.437419][ T6042] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  425.461148][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 134 @ nid 36
[  425.490686][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 133 @ nid 36
[  425.515871][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 132 @ nid 36
[  425.550555][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 131 @ nid 36
[  425.582965][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 130 @ nid 36
[  425.599917][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 129 @ nid 36
[  425.635129][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 128 @ nid 36
[  425.657708][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 127 @ nid 36
[  425.688535][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 126 @ nid 36
[  425.715758][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 125 @ nid 36
[  425.771469][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 124 @ nid 36
[  425.820007][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 247 @ nid 36
[  425.975757][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 246 @ nid 36
[  426.041992][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 245 @ nid 36
[  426.054172][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 244 @ nid 36
[  426.073552][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 243 @ nid 36
[  426.103877][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 242 @ nid 36
[  426.115383][ T6035] loop0: detected capacity change from 0 to 32768
[  426.124293][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 241 @ nid 36
[  426.151232][ T6035] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.444 (6035)
[  426.183541][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 240 @ nid 36
[  426.196985][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 239 @ nid 36
[  426.220372][ T6035] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  426.237506][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 238 @ nid 36
[  426.268143][ T6035] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  426.276849][ T6035] BTRFS info (device loop0): turning on flush-on-commit
[  426.284312][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 237 @ nid 36
[  426.313446][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 236 @ nid 36
[  426.337041][ T6035] BTRFS info (device loop0): turning off barriers
[  426.343984][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 235 @ nid 36
[  426.355881][ T6035] BTRFS info (device loop0): doing ref verification
[  426.375303][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 234 @ nid 36
[  426.399167][ T6035] BTRFS info (device loop0): force clearing of disk cache
[  426.417670][ T6035] BTRFS info (device loop0): enabling disk space caching
[  426.424744][ T6035] BTRFS info (device loop0): turning on sync discard
[  426.442214][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 233 @ nid 36
[  426.472536][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 232 @ nid 36
[  426.487703][ T6035] BTRFS info (device loop0): using default commit interval 30s
[  426.495394][ T6035] BTRFS info (device loop0): disk space caching is enabled
[  426.511717][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 231 @ nid 36
[  426.534176][ T6055] netlink: 'syz.4.451': attribute type 4 has an invalid length.
[  426.542648][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 230 @ nid 36
[  426.576869][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 229 @ nid 36
[  426.588629][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 228 @ nid 36
[  426.628715][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 227 @ nid 36
[  426.685957][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 226 @ nid 36
[  426.698569][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 225 @ nid 36
[  426.711202][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 224 @ nid 36
[  426.723273][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 223 @ nid 36
[  426.734542][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 222 @ nid 36
[  426.744990][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 221 @ nid 36
[  426.790458][ T3665] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  426.799906][ T3665] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  426.810643][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 220 @ nid 36
[  426.820796][ T3665] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  426.831418][ T3665] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  426.842788][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 219 @ nid 36
[  426.853345][ T3665] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  426.860894][ T3665] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  426.892720][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 218 @ nid 36
[  426.907762][ T3674] Bluetooth: hci1: command 0x0406 tx timeout
[  426.913686][ T6035] BTRFS info (device loop0): enabling ssd optimizations
[  426.987806][ T3668] Bluetooth: hci2: command 0x0406 tx timeout
[  426.996630][ T3670] Bluetooth: hci3: command 0x0406 tx timeout
[  427.043658][ T6035] BTRFS info (device loop0): rebuilding free space tree
[  427.619041][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 217 @ nid 36
[  427.647749][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 216 @ nid 36
[  427.663734][ T6035] BTRFS info (device loop0): disabling free space tree
[  427.667828][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 215 @ nid 36
[  427.686812][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 214 @ nid 36
[  427.687964][ T6035] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  427.713779][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 213 @ nid 36
[  427.824934][ T6035] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  427.836601][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 212 @ nid 36
[  427.899197][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 211 @ nid 36
[  427.920009][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 210 @ nid 36
[  427.973957][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 209 @ nid 36
[  428.013773][ T6142] netlink: 'syz.4.456': attribute type 15 has an invalid length.
[  428.134268][ T3658] EXT4-fs (loop1): unmounting filesystem.
[  428.187675][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 208 @ nid 36
[  428.246249][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 207 @ nid 36
[  428.407830][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 206 @ nid 36
[  428.422675][ T3667] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  428.457259][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 205 @ nid 36
[  428.597458][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 204 @ nid 36
[  428.667893][ T5123] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.761014][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 203 @ nid 36
[  428.796681][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 202 @ nid 36
[  428.858659][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 201 @ nid 36
[  428.908007][ T3664] Bluetooth: hci0: command tx timeout
[  428.947576][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 200 @ nid 36
[  428.966337][ T5123] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.976758][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 199 @ nid 36
[  428.996958][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 198 @ nid 36
[  429.011820][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 197 @ nid 36
[  429.037684][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 196 @ nid 36
[  429.073167][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 195 @ nid 36
[  429.123244][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 194 @ nid 36
[  429.210561][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 193 @ nid 36
[  429.225165][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 192 @ nid 36
[  429.272179][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 191 @ nid 36
[  429.436207][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 190 @ nid 36
[  429.490039][ T5123] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  429.615657][ T4839] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  430.366168][ T3664] Bluetooth: hci2: unexpected event for opcode 0x2040
[  430.393686][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 189 @ nid 36
[  430.422593][ T6139] loop3: detected capacity change from 0 to 40427
[  430.438362][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 188 @ nid 36
[  430.457823][ T6139] F2FS-fs (loop3): invalid crc value
[  430.460930][ T6063] chnl_net:caif_netlink_parms(): no params data found
[  430.490211][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 187 @ nid 36
[  430.512037][ T6139] F2FS-fs (loop3): Found nat_bits in checkpoint
[  430.579249][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 186 @ nid 36
[  430.591103][ T5123] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.628779][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 185 @ nid 36
[  430.664136][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 184 @ nid 36
[  430.680294][ T6139] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  430.728654][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 183 @ nid 36
[  430.751528][ T4839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  430.784487][ T4839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  430.819800][ T4839] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  430.881623][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 182 @ nid 36
[  430.901060][ T4839] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  430.913233][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 181 @ nid 36
[  430.921051][ T6166] Bluetooth: MGMT ver 1.22
[  430.927889][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 180 @ nid 36
[  430.974473][ T4839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  430.987795][ T3668] Bluetooth: hci0: command tx timeout
[  431.032779][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 179 @ nid 36
[  431.065327][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 178 @ nid 36
[  431.077502][ T3668] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  431.081005][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 177 @ nid 36
[  431.095007][ T3668] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  431.104490][ T3668] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  431.112873][ T3668] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  431.122483][ T4839] usb 5-1: config 0 descriptor??
[  431.128206][ T3668] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  431.135884][ T3668] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  431.170301][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 176 @ nid 36
[  431.256031][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 175 @ nid 36
[  431.272000][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 174 @ nid 36
[  431.283431][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 173 @ nid 36
[  431.293643][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 172 @ nid 36
[  431.303951][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 171 @ nid 36
[  431.308580][ T6063] bridge0: port 1(bridge_slave_0) entered blocking state
[  431.321157][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 170 @ nid 36
[  431.331849][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 169 @ nid 36
[  431.347826][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 168 @ nid 36
[  431.365310][ T6063] bridge0: port 1(bridge_slave_0) entered disabled state
[  431.380781][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 167 @ nid 36
[  431.393787][ T6063] device bridge_slave_0 entered promiscuous mode
[  431.438109][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 166 @ nid 36
[  431.467213][ T6063] bridge0: port 2(bridge_slave_1) entered blocking state
[  431.475509][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 165 @ nid 36
[  431.479381][ T6063] bridge0: port 2(bridge_slave_1) entered disabled state
[  431.508888][ T6063] device bridge_slave_1 entered promiscuous mode
[  431.515922][ T5384] syz-executor: attempt to access beyond end of device
[  431.515922][ T5384] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  431.534115][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 164 @ nid 36
[  431.579184][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 163 @ nid 36
[  431.594291][ T4839] plantronics 0003:047F:FFFF.0001: unbalanced delimiter at end of report description
[  431.604969][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 162 @ nid 36
[  431.616436][ T4839] plantronics 0003:047F:FFFF.0001: parse failed
[  431.623067][ T4839] plantronics: probe of 0003:047F:FFFF.0001 failed with error -22
[  431.637801][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 161 @ nid 36
[  431.660443][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 160 @ nid 36
[  431.671951][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 159 @ nid 36
[  431.683539][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 158 @ nid 36
[  431.706982][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 157 @ nid 36
[  431.723568][ T6063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  431.728175][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 156 @ nid 36
[  431.766142][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 155 @ nid 36
[  431.793796][ T4839] usb 5-1: USB disconnect, device number 5
[  431.817846][ T3378] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  431.835591][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 154 @ nid 36
[  431.851256][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 153 @ nid 36
[  431.882481][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 152 @ nid 36
[  431.905144][ T6063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  431.915733][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 151 @ nid 36
[  431.942976][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 150 @ nid 36
[  431.975627][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 149 @ nid 36
[  431.995026][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 148 @ nid 36
[  432.032843][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 147 @ nid 36
[  432.076737][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 146 @ nid 36
[  432.088576][ T3378] usb 1-1: Using ep0 maxpacket: 32
[  432.105755][ T6063] team0: Port device team_slave_0 added
[  432.115554][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 145 @ nid 36
[  432.133714][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 144 @ nid 36
[  432.154176][ T6063] team0: Port device team_slave_1 added
[  432.156743][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 143 @ nid 36
[  432.192838][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 142 @ nid 36
[  432.234015][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 141 @ nid 36
[  432.238014][ T3378] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  432.274754][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 140 @ nid 36
[  432.284947][ T3378] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  432.287454][ T6063] batman_adv: batadv0: Adding interface: batadv_slave_0
[  432.302150][ T6063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  432.307700][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 139 @ nid 36
[  432.334397][ T6063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  432.352313][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 138 @ nid 36
[  432.376124][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 137 @ nid 36
[  432.392233][ T3378] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  432.415936][ T3378] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.431858][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 136 @ nid 36
[  432.443672][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 135 @ nid 36
[  432.455097][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 134 @ nid 36
[  432.479510][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 133 @ nid 36
[  432.486010][ T3378] usb 1-1: config 0 descriptor??
[  432.499663][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 132 @ nid 36
[  432.623963][ T3378] hub 1-1:0.0: USB hub found
[  433.289315][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 131 @ nid 36
[  433.301259][ T3668] Bluetooth: hci0: command tx timeout
[  433.307216][ T3668] Bluetooth: hci1: command tx timeout
[  433.324888][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 130 @ nid 36
[  433.377730][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 129 @ nid 36
[  433.603317][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 128 @ nid 36
[  433.687753][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 127 @ nid 36
[  433.797662][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 126 @ nid 36
[  433.868757][ T6063] batman_adv: batadv0: Adding interface: batadv_slave_1
[  433.875761][ T6063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  433.987675][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 125 @ nid 36
[  434.142009][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 124 @ nid 36
[  434.182677][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 123 @ nid 36
[  434.224096][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 122 @ nid 36
[  434.234941][ T6063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  434.265446][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 121 @ nid 36
[  434.293823][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 120 @ nid 36
[  434.337961][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 119 @ nid 36
[  434.375090][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 118 @ nid 36
[  434.435231][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 117 @ nid 36
[  434.488324][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 116 @ nid 36
[  434.515415][ T6063] device hsr_slave_0 entered promiscuous mode
[  434.534724][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 115 @ nid 36
[  434.559563][ T6063] device hsr_slave_1 entered promiscuous mode
[  434.569562][ T6258] loop4: detected capacity change from 0 to 4096
[  434.607419][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 114 @ nid 36
[  434.629019][ T6063] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  434.636638][ T6063] Cannot create hsr debugfs directory
[  434.650988][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 113 @ nid 36
[  434.668850][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 112 @ nid 36
[  434.679347][ T3378] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[  434.712276][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 111 @ nid 36
[  434.732488][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 110 @ nid 36
[  434.778353][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 109 @ nid 36
[  434.797821][ T3378] usbhid 1-1:0.0: can't add hid device: -71
[  434.804688][ T3378] usbhid: probe of 1-1:0.0 failed with error -71
[  434.813833][ T6262] loop3: detected capacity change from 0 to 4096
[  434.824806][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 108 @ nid 36
[  434.826730][ T6171] chnl_net:caif_netlink_parms(): no params data found
[  434.854140][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 107 @ nid 36
[  434.865333][ T3378] usb 1-1: USB disconnect, device number 5
[  434.876171][   T27] audit: type=1800 audit(1722241352.304:44): pid=6258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.467" name="bus" dev="loop4" ino=33 res=0 errno=0
[  434.942012][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 106 @ nid 36
[  435.032300][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 105 @ nid 36
[  435.086701][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 104 @ nid 36
[  435.160974][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 103 @ nid 36
[  435.208125][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 102 @ nid 36
[  435.225967][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 101 @ nid 36
[  435.355710][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 100 @ nid 36
[  435.385246][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 99 @ nid 36
[  435.395133][ T3668] Bluetooth: hci0: command tx timeout
[  435.397792][ T3668] Bluetooth: hci1: command tx timeout
[  435.417379][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 98 @ nid 36
[  435.492552][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 97 @ nid 36
[  435.530646][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 96 @ nid 36
[  435.549798][ T6171] bridge0: port 1(bridge_slave_0) entered blocking state
[  435.577768][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 95 @ nid 36
[  435.602664][ T6171] bridge0: port 1(bridge_slave_0) entered disabled state
[  435.611209][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 94 @ nid 36
[  435.644242][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 93 @ nid 36
[  435.687391][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 92 @ nid 36
[  435.698608][ T6171] device bridge_slave_0 entered promiscuous mode
[  435.707231][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 91 @ nid 36
[  435.726112][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 90 @ nid 36
[  435.754968][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 89 @ nid 36
[  435.794700][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 88 @ nid 36
[  435.819812][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 87 @ nid 36
[  435.857857][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 86 @ nid 36
[  435.878072][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 85 @ nid 36
[  435.906198][ T6171] bridge0: port 2(bridge_slave_1) entered blocking state
[  435.915247][ T6171] bridge0: port 2(bridge_slave_1) entered disabled state
[  435.968281][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 84 @ nid 36
[  435.984502][ T6171] device bridge_slave_1 entered promiscuous mode
[  436.004255][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 83 @ nid 36
[  436.058044][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 82 @ nid 36
[  436.097469][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 81 @ nid 36
[  436.142372][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 80 @ nid 36
[  436.177569][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 79 @ nid 36
[  436.226616][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 78 @ nid 36
[  436.427516][ T6171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  437.804369][ T3664] Bluetooth: hci2: unexpected event for opcode 0x2040
[  437.848594][ T3664] Bluetooth: hci1: command tx timeout
[  437.860075][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 77 @ nid 36
[  437.920693][ T6171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  437.974518][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 76 @ nid 36
[  437.985686][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 75 @ nid 36
[  437.996561][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 74 @ nid 36
[  438.047905][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 73 @ nid 36
[  438.216420][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 72 @ nid 36
[  438.366188][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 71 @ nid 36
[  438.525916][ T6291] netlink: 'syz.3.473': attribute type 15 has an invalid length.
[  438.559220][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 70 @ nid 36
[  438.734059][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 69 @ nid 36
[  438.843106][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 68 @ nid 36
[  438.919541][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 67 @ nid 36
[  438.934965][ T6171] team0: Port device team_slave_0 added
[  438.963216][ T5123] device hsr_slave_0 left promiscuous mode
[  438.986403][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 66 @ nid 36
[  439.002654][ T5123] device hsr_slave_1 left promiscuous mode
[  439.014183][ T5123] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  439.016107][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 65 @ nid 36
[  439.031906][ T5123] batman_adv: batadv0: Removing interface: batadv_slave_0
[  439.040204][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 64 @ nid 36
[  439.051139][ T5123] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  439.059817][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 63 @ nid 36
[  439.076171][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 62 @ nid 36
[  439.077763][ T5123] batman_adv: batadv0: Removing interface: batadv_slave_1
[  439.096443][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 61 @ nid 36
[  439.118493][ T5123] device bridge_slave_1 left promiscuous mode
[  439.124681][ T5123] bridge0: port 2(bridge_slave_1) entered disabled state
[  439.132661][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 60 @ nid 36
[  439.143876][ T5123] device bridge_slave_0 left promiscuous mode
[  439.152490][ T5123] bridge0: port 1(bridge_slave_0) entered disabled state
[  439.163081][   T26] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  439.171049][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 59 @ nid 36
[  439.186266][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 58 @ nid 36
[  439.196205][ T4839] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  439.210139][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 57 @ nid 36
[  439.221202][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 56 @ nid 36
[  439.231431][ T5123] device veth1_macvtap left promiscuous mode
[  439.241602][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 55 @ nid 36
[  439.255865][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 54 @ nid 36
[  439.260547][ T5123] device veth0_macvtap left promiscuous mode
[  439.266404][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 53 @ nid 36
[  439.287906][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 52 @ nid 36
[  439.302861][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 51 @ nid 36
[  439.307894][ T5123] device veth1_vlan left promiscuous mode
[  439.323865][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 50 @ nid 36
[  439.334537][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 49 @ nid 36
[  439.344648][ T5123] device veth0_vlan left promiscuous mode
[  439.351442][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 48 @ nid 36
[  439.371231][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 47 @ nid 36
[  439.401292][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 46 @ nid 36
[  439.418021][   T26] usb 4-1: Using ep0 maxpacket: 16
[  439.425313][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 45 @ nid 36
[  439.445640][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 44 @ nid 36
[  439.455558][ T4839] usb 1-1: Using ep0 maxpacket: 32
[  439.472615][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 43 @ nid 36
[  439.494046][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 42 @ nid 36
[  439.511803][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 41 @ nid 36
[  439.538103][   T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  439.553471][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 40 @ nid 36
[  439.563704][   T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  439.563736][   T26] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  439.563775][   T26] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  439.563799][   T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  439.605269][ T4839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  439.606884][   T26] usb 4-1: config 0 descriptor??
[  439.637752][ T4839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  439.647554][ T4839] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  439.666581][ T4839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  439.681995][ T4839] usb 1-1: config 0 descriptor??
[  439.690409][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 39 @ nid 36
[  439.714267][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 38 @ nid 36
[  439.725350][ T4839] hub 1-1:0.0: USB hub found
[  439.743037][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 37 @ nid 36
[  439.772320][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 36 @ nid 36
[  439.811240][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 35 @ nid 36
[  439.829515][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 34 @ nid 36
[  439.842790][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 33 @ nid 36
[  439.855501][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 32 @ nid 36
[  439.867936][ T3664] Bluetooth: hci1: command tx timeout
[  439.875677][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 31 @ nid 36
[  439.894162][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 30 @ nid 36
[  439.904264][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 29 @ nid 36
[  439.918323][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 28 @ nid 36
[  439.936433][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 27 @ nid 36
[  439.952553][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 26 @ nid 36
[  439.975353][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 25 @ nid 36
[  439.985454][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 24 @ nid 36
[  440.003308][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 23 @ nid 36
[  440.020205][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 22 @ nid 36
[  440.036415][ T1261] ieee802154 phy0 wpan0: encryption failed: -22
[  440.042774][ T1261] ieee802154 phy1 wpan1: encryption failed: -22
[  440.046605][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 21 @ nid 36
[  440.073864][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 20 @ nid 36
[  440.104506][   T26] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  440.117851][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 19 @ nid 36
[  440.127799][   T26] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  440.135052][   T26] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  440.143619][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 18 @ nid 36
[  440.153645][   T26] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  440.163207][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 17 @ nid 36
[  440.172998][   T26] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  440.181145][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 16 @ nid 36
[  440.191127][   T26] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  440.198670][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 15 @ nid 36
[  440.208478][   T26] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  440.215725][   T26] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  440.231580][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 14 @ nid 36
[  440.241628][   T26] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  440.247789][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 13 @ nid 36
[  440.248946][   T26] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  440.282317][   T26] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0002/input/input7
[  440.294461][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 12 @ nid 36
[  440.321583][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 11 @ nid 36
[  440.346497][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 10 @ nid 36
[  440.355695][   T26] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  440.380992][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 9 @ nid 36
[  440.417806][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36
[  440.427656][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 7 @ nid 36
[  440.440628][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 6 @ nid 36
[  440.468382][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 5 @ nid 36
[  440.478536][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 4 @ nid 36
[  440.488765][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 3 @ nid 36
[  440.498737][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 2 @ nid 36
[  440.518063][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 1 @ nid 36
[  440.557517][ T5966] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 36
[  440.575052][ T5966] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117]
[  440.754770][ T3703] usb 4-1: USB disconnect, device number 3
[  441.011717][ T5123] team0 (unregistering): Port device team_slave_1 removed
[  441.076924][ T5123] team0 (unregistering): Port device team_slave_0 removed
[  441.123325][ T5123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  441.164956][ T5123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  441.966875][ T5123] bond0 (unregistering): Released all slaves
[  442.786219][ T6171] team0: Port device team_slave_1 added
[  443.024129][ T4839] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[  443.106585][ T6171] batman_adv: batadv0: Adding interface: batadv_slave_0
[  443.115022][ T6171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  443.177942][ T4839] usbhid 1-1:0.0: can't add hid device: -71
[  443.186185][ T4839] usbhid: probe of 1-1:0.0 failed with error -71
[  443.198823][ T6171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  443.233402][ T6171] batman_adv: batadv0: Adding interface: batadv_slave_1
[  443.257702][ T6171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  443.258395][ T4839] usb 1-1: USB disconnect, device number 6
[  443.306576][ T6171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  443.476296][ T6171] device hsr_slave_0 entered promiscuous mode
[  443.508270][ T6171] device hsr_slave_1 entered promiscuous mode
[  443.529656][ T6171] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  443.558208][ T6171] Cannot create hsr debugfs directory
[  443.620146][ T6400] xt_hashlimit: invalid interval
[  443.794944][ T6063] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  443.824185][ T6063] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  443.877226][ T6063] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  443.915378][ T6063] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  444.071891][ T6171] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.558389][ T6430] netlink: 'syz.0.486': attribute type 15 has an invalid length.
[  445.080517][ T6171] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.280389][ T6171] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.384903][ T6063] 8021q: adding VLAN 0 to HW filter on device bond0
[  445.427899][ T3738] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  445.489780][ T6171] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.581322][ T6063] 8021q: adding VLAN 0 to HW filter on device team0
[  445.628054][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  445.636020][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  445.746013][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  445.781542][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  446.554667][ T3738] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  446.566216][ T3703] bridge0: port 1(bridge_slave_0) entered blocking state
[  446.573545][ T3703] bridge0: port 1(bridge_slave_0) entered forwarding state
[  446.581627][ T3738] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  446.591823][ T3738] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  446.605427][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  446.613653][ T3738] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  446.624531][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  446.642435][ T3738] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.652985][ T3703] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.660211][ T3703] bridge0: port 2(bridge_slave_1) entered forwarding state
[  446.669807][ T3738] usb 1-1: config 0 descriptor??
[  446.675426][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  446.684959][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  446.694417][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  446.703983][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  446.748739][ T6063] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  446.824580][ T6063] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  446.934277][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  446.955435][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  446.978022][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  447.001402][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  447.017056][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  447.026202][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  447.046888][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  447.056211][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  447.139593][ T3738] plantronics 0003:047F:FFFF.0003: unbalanced delimiter at end of report description
[  447.171631][ T3738] plantronics 0003:047F:FFFF.0003: parse failed
[  447.184090][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  447.211035][ T3738] plantronics: probe of 0003:047F:FFFF.0003 failed with error -22
[  447.262522][ T6171] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  447.313009][ T6171] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  447.379575][ T4394] usb 1-1: USB disconnect, device number 7
[  447.415910][ T6171] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  447.458924][ T6171] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  447.751815][ T6171] 8021q: adding VLAN 0 to HW filter on device bond0
[  447.830658][ T6063] 8021q: adding VLAN 0 to HW filter on device batadv0
[  447.876550][ T6171] 8021q: adding VLAN 0 to HW filter on device team0
[  447.912383][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  447.921278][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  447.932177][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  447.948602][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  448.016200][ T3378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  448.026373][ T3378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  448.055654][ T3378] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.063101][ T3378] bridge0: port 1(bridge_slave_0) entered forwarding state
[  448.088039][ T3378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  448.107164][ T3378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  448.125303][ T3378] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.132511][ T3378] bridge0: port 2(bridge_slave_1) entered forwarding state
[  448.158692][ T3378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  448.224400][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  448.232614][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  448.268604][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  448.329898][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  448.408765][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  448.527401][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  448.592631][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  448.685474][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  448.813370][ T6063] device veth0_vlan entered promiscuous mode
[  448.888521][ T3378] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  448.896711][ T3378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  448.915886][ T3378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  448.936131][ T3378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  448.956011][ T3378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  448.975113][ T3378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  448.994052][ T3378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  449.015442][ T6171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  449.046684][ T6063] device veth1_vlan entered promiscuous mode
[  449.065656][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  449.079781][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  449.091952][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  449.168319][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  449.189864][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  449.218995][ T6539] loop3: detected capacity change from 0 to 32768
[  449.221157][ T6063] device veth0_macvtap entered promiscuous mode
[  449.259627][ T3918] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by udevd (3918)
[  449.286285][ T6063] device veth1_macvtap entered promiscuous mode
[  449.340686][ T6539] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  449.448043][ T6539] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  449.488817][ T6539] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  449.545331][ T6539] BTRFS info (device loop3): trying to use backup root at mount time
[  449.555853][ T6539] BTRFS info (device loop3): turning on flush-on-commit
[  449.561623][ T6063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  449.588307][ T6539] BTRFS info (device loop3): using free space tree
[  449.615358][ T6063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.635690][ T6063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  449.670854][ T6063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.681699][ T6583] xt_hashlimit: invalid interval
[  449.697746][ T6063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  449.734002][ T6063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.773663][ T6063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  449.797110][ T6063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.833837][ T6063] batman_adv: batadv0: Interface activated: batadv_slave_0
[  449.873496][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  449.885577][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  449.904229][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  449.936243][ T6539] BTRFS info (device loop3): enabling ssd optimizations
[  449.955018][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  450.029109][ T6063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  450.073918][ T6063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  450.117978][ T6063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  450.157675][ T6063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  450.167981][ T3705] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  450.188232][ T6063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  450.222732][ T6063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  450.247886][ T6063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  450.264254][ T6063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  450.296007][ T6063] batman_adv: batadv0: Interface activated: batadv_slave_1
[  450.341277][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  450.358637][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  450.391673][ T6063] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  450.415807][ T6063] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  450.418483][ T5384] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  450.425921][ T6063] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  450.444489][ T6063] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  450.460101][  T946] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  450.468603][  T946] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  450.529289][ T3705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  450.540658][ T3705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  450.550713][ T3705] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  450.563796][ T3705] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  450.573067][ T3705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  450.583249][ T3705] usb 5-1: config 0 descriptor??
[  450.625421][ T6171] 8021q: adding VLAN 0 to HW filter on device batadv0
[  450.768209][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  450.778386][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  450.795508][ T6171] device veth0_vlan entered promiscuous mode
[  450.876341][ T3378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  450.888459][ T3378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  450.913192][ T6171] device veth1_vlan entered promiscuous mode
[  450.988300][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  450.996174][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  451.005381][ T6641] kvm [6640]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0
[  451.014612][ T6641] kvm [6640]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0
[  451.014783][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  451.033228][ T6641] kvm [6640]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0
[  451.043760][ T6641] kvm [6640]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0
[  451.071681][ T3705] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  451.079888][ T3705] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  451.091464][ T6641] kvm [6640]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0
[  451.101974][ T6641] kvm [6640]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0
[  451.110062][ T3705] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  451.114745][ T6641] kvm [6640]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0
[  451.135876][ T6641] kvm [6640]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0
[  451.148580][ T6641] kvm [6640]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0
[  451.176098][ T6171] device veth0_macvtap entered promiscuous mode
[  451.184731][ T6641] kvm [6640]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0
[  451.218028][ T5003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  451.225491][ T3378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  451.226088][ T5003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  451.234919][ T3378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  451.259517][ T3378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  451.337897][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  451.348980][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  451.359432][ T6171] device veth1_macvtap entered promiscuous mode
[  451.378413][ T5003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  451.407665][ T5003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  451.455360][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  451.496664][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  451.509456][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  451.529890][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  451.549673][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  451.564183][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  451.577096][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  451.592125][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  451.604905][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  451.622605][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  451.636563][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  451.671143][ T6171] batman_adv: batadv0: Interface activated: batadv_slave_0
[  451.733563][ T6652] loop1: detected capacity change from 0 to 128
[  451.746053][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  451.756972][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  451.769331][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  451.784123][ T3705] usb 5-1: USB disconnect, device number 6
[  451.788720][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  451.804859][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  451.816138][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  451.827331][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  451.840140][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  451.859986][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  451.877173][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  451.887374][ T6171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  451.898221][ T6171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  451.909682][ T6171] batman_adv: batadv0: Interface activated: batadv_slave_1
[  451.923416][ T6171] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  451.932378][ T6171] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  451.950572][ T6171] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  451.967965][ T6171] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  452.039440][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  452.098765][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  452.737679][ T4395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  452.762297][ T4395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  452.889679][ T4395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  452.903674][ T4395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  452.906302][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  452.988285][ T6636] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  453.626865][ T5123] device hsr_slave_0 left promiscuous mode
[  453.643587][ T5123] device hsr_slave_1 left promiscuous mode
[  453.759431][ T5123] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  453.852507][ T5123] batman_adv: batadv0: Removing interface: batadv_slave_0
[  454.069099][ T5123] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  454.076647][ T5123] batman_adv: batadv0: Removing interface: batadv_slave_1
[  454.203511][ T5123] device bridge_slave_1 left promiscuous mode
[  454.228592][ T5123] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.272372][ T5123] device bridge_slave_0 left promiscuous mode
[  454.308095][ T5123] bridge0: port 1(bridge_slave_0) entered disabled state
[  454.395978][ T5123] device veth1_macvtap left promiscuous mode
[  454.405750][ T5123] device veth0_macvtap left promiscuous mode
[  454.426869][ T5123] device veth1_vlan left promiscuous mode
[  454.447820][ T5123] device veth0_vlan left promiscuous mode
[  454.499826][ T6730] loop1: detected capacity change from 0 to 1024
[  454.579634][ T6730] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  454.579833][ T6734] xt_hashlimit: invalid interval
[  454.638190][ T6730] EXT4-fs error (device loop1): __ext4_remount:6425: comm syz.1.517: Abort forced by user
[  454.700008][ T6730] EXT4-fs (loop1): Remounting filesystem read-only
[  454.919239][ T6063] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[  455.015973][ T6063] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[  455.045800][ T6063] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[  455.049688][ T6736] loop3: detected capacity change from 0 to 128
[  455.089999][ T6063] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[  455.112621][ T6063] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[  455.124254][ T6063] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[  455.137756][ T6063] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[  455.258242][ T6063] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[  455.276059][ T6718] loop2: detected capacity change from 0 to 32768
[  455.280149][ T6063] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[  455.297972][ T6718] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.514 (6718)
[  456.624867][ T6718] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  456.667831][ T6718] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  456.684066][ T6718] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  456.707739][ T6718] BTRFS info (device loop2): trying to use backup root at mount time
[  456.744326][ T6718] BTRFS info (device loop2): turning on flush-on-commit
[  456.767011][ T6718] BTRFS info (device loop2): using free space tree
[  456.884689][ T6718] BTRFS error (device loop2): open_ctree failed
[  457.346318][ T5123] team0 (unregistering): Port device team_slave_1 removed
[  457.409526][ T5123] team0 (unregistering): Port device team_slave_0 removed
[  457.455361][ T5123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  457.455373][ T6765] loop2: detected capacity change from 0 to 1024
[  457.532752][ T6765] 
[  457.535135][ T6765] ======================================================
[  457.542155][ T6765] WARNING: possible circular locking dependency detected
[  457.549175][ T6765] 6.1.102-syzkaller #0 Not tainted
[  457.554461][ T6765] ------------------------------------------------------
[  457.561480][ T6765] syz.2.522/6765 is trying to acquire lock:
[  457.567385][ T6765] ffff888020f700b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x80d/0xb40
[  457.577279][ T6765] 
[  457.577279][ T6765] but task is already holding lock:
[  457.584633][ T6765] ffff888059e05f88 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x2d6/0xb40
[  457.596298][ T6765] 
[  457.596298][ T6765] which lock already depends on the new lock.
[  457.596298][ T6765] 
[  457.606866][ T6765] 
[  457.606866][ T6765] the existing dependency chain (in reverse order) is:
[  457.615871][ T6765] 
[  457.615871][ T6765] -> #1 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}:
[  457.624993][ T6765]        lock_acquire+0x1f8/0x5a0
[  457.630038][ T6765]        __mutex_lock+0x132/0xd80
[  457.635108][ T6765]        hfsplus_file_extend+0x1d2/0x1b10
[  457.641285][ T6765]        hfsplus_bmap_reserve+0x101/0x4e0
[  457.647036][ T6765]        hfsplus_create_cat+0x1a9/0x1ba0
[  457.652675][ T6765]        hfsplus_fill_super+0x13e6/0x1c90
[  457.658422][ T6765]        mount_bdev+0x2c9/0x3f0
[  457.663545][ T6765]        legacy_get_tree+0xeb/0x180
[  457.668825][ T6765]        vfs_get_tree+0x88/0x270
[  457.673769][ T6765]        do_new_mount+0x2ba/0xb40
[  457.678788][ T6765]        __se_sys_mount+0x2d5/0x3c0
[  457.683999][ T6765]        do_syscall_64+0x3b/0xb0
[  457.689033][ T6765]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  457.695453][ T6765] 
[  457.695453][ T6765] -> #0 (&tree->tree_lock){+.+.}-{3:3}:
[  457.703270][ T6765]        validate_chain+0x1661/0x5950
[  457.708818][ T6765]        __lock_acquire+0x125b/0x1f80
[  457.714192][ T6765]        lock_acquire+0x1f8/0x5a0
[  457.719223][ T6765]        __mutex_lock+0x132/0xd80
[  457.724335][ T6765]        hfsplus_file_truncate+0x80d/0xb40
[  457.730141][ T6765]        hfsplus_delete_inode+0x170/0x220
[  457.735845][ T6765]        hfsplus_unlink+0x50d/0x7f0
[  457.741121][ T6765]        vfs_unlink+0x359/0x5f0
[  457.745964][ T6765]        do_unlinkat+0x4a5/0x820
[  457.750977][ T6765]        __x64_sys_unlinkat+0xca/0xf0
[  457.756346][ T6765]        do_syscall_64+0x3b/0xb0
[  457.761281][ T6765]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  457.767860][ T6765] 
[  457.767860][ T6765] other info that might help us debug this:
[  457.767860][ T6765] 
[  457.778072][ T6765]  Possible unsafe locking scenario:
[  457.778072][ T6765] 
[  457.785506][ T6765]        CPU0                    CPU1
[  457.790944][ T6765]        ----                    ----
[  457.796391][ T6765]   lock(&HFSPLUS_I(inode)->extents_lock);
[  457.802193][ T6765]                                lock(&tree->tree_lock);
[  457.809202][ T6765]                                lock(&HFSPLUS_I(inode)->extents_lock);
[  457.817545][ T6765]   lock(&tree->tree_lock);
[  457.822037][ T6765] 
[  457.822037][ T6765]  *** DEADLOCK ***
[  457.822037][ T6765] 
[  457.830166][ T6765] 5 locks held by syz.2.522/6765:
[  457.835175][ T6765]  #0: ffff888029352460 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80
[  457.844405][ T6765]  #1: ffff888059e02b80 (&type->i_mutex_dir_key#10/1){+.+.}-{3:3}, at: do_unlinkat+0x266/0x820
[  457.854765][ T6765]  #2: ffff888059e06180 (&sb->s_type->i_mutex_key#23){+.+.}-{3:3}, at: vfs_unlink+0xe0/0x5f0
[  457.865284][ T6765]  #3: ffff8880682ef198 (&sbi->vh_mutex){+.+.}-{3:3}, at: hfsplus_unlink+0x15d/0x7f0
[  457.874815][ T6765]  #4: ffff888059e05f88 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x2d6/0xb40
[  457.886418][ T6765] 
[  457.886418][ T6765] stack backtrace:
[  457.892307][ T6765] CPU: 0 PID: 6765 Comm: syz.2.522 Not tainted 6.1.102-syzkaller #0
[  457.900278][ T6765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  457.910411][ T6765] Call Trace:
[  457.913688][ T6765]  <TASK>
[  457.916620][ T6765]  dump_stack_lvl+0x1e3/0x2cb
[  457.921306][ T6765]  ? nf_tcp_handle_invalid+0x642/0x642
[  457.926763][ T6765]  ? print_circular_bug+0x12b/0x1a0
[  457.931955][ T6765]  check_noncircular+0x2fa/0x3b0
[  457.936908][ T6765]  ? add_chain_block+0x850/0x850
[  457.941856][ T6765]  ? lockdep_lock+0x11f/0x2a0
[  457.946528][ T6765]  ? mark_lock+0x9a/0x340
[  457.950913][ T6765]  ? _find_first_zero_bit+0xd0/0x100
[  457.956206][ T6765]  validate_chain+0x1661/0x5950
[  457.961160][ T6765]  ? reacquire_held_locks+0x660/0x660
[  457.966547][ T6765]  ? look_up_lock_class+0x77/0x140
[  457.971680][ T6765]  ? register_lock_class+0x100/0x990
[  457.977074][ T6765]  ? is_dynamic_key+0x260/0x260
[  457.981954][ T6765]  ? do_raw_spin_unlock+0x137/0x8a0
[  457.987148][ T6765]  ? mark_lock+0x9a/0x340
[  457.991476][ T6765]  __lock_acquire+0x125b/0x1f80
[  457.996329][ T6765]  lock_acquire+0x1f8/0x5a0
[  458.000922][ T6765]  ? hfsplus_file_truncate+0x80d/0xb40
[  458.006382][ T6765]  ? read_lock_is_recursive+0x10/0x10
[  458.011841][ T6765]  ? __might_sleep+0xb0/0xb0
[  458.016526][ T6765]  ? __mutex_unlock_slowpath+0x218/0x750
[  458.022156][ T6765]  ? hfsplus_block_free+0x3d6/0x4d0
[  458.027352][ T6765]  __mutex_lock+0x132/0xd80
[  458.031891][ T6765]  ? hfsplus_file_truncate+0x80d/0xb40
[  458.037439][ T6765]  ? hfsplus_file_truncate+0x80d/0xb40
[  458.043068][ T6765]  ? mutex_lock_nested+0x10/0x10
[  458.048110][ T6765]  ? hfsplus_free_extents+0x47e/0xae0
[  458.053932][ T6765]  hfsplus_file_truncate+0x80d/0xb40
[  458.059482][ T6765]  ? hfsplus_add_extent+0x880/0x880
[  458.064857][ T6765]  ? hfsplus_unlink+0x15d/0x7f0
[  458.069708][ T6765]  hfsplus_delete_inode+0x170/0x220
[  458.075173][ T6765]  hfsplus_unlink+0x50d/0x7f0
[  458.080027][ T6765]  ? read_lock_is_recursive+0x10/0x10
[  458.085508][ T6765]  ? hfsplus_link+0x840/0x840
[  458.090593][ T6765]  ? clear_nonspinnable+0x60/0x60
[  458.095741][ T6765]  ? bpf_lsm_inode_unlink+0x5/0x10
[  458.100955][ T6765]  ? security_inode_unlink+0xca/0x110
[  458.106326][ T6765]  vfs_unlink+0x359/0x5f0
[  458.110662][ T6765]  do_unlinkat+0x4a5/0x820
[  458.115273][ T6765]  ? fsnotify_link_count+0xf0/0xf0
[  458.120558][ T6765]  ? syscall_enter_from_user_mode+0x2e/0x230
[  458.126711][ T6765]  __x64_sys_unlinkat+0xca/0xf0
[  458.131655][ T6765]  do_syscall_64+0x3b/0xb0
[  458.136188][ T6765]  ? clear_bhb_loop+0x45/0xa0
[  458.140859][ T6765]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  458.146755][ T6765] RIP: 0033:0x7f9eec177299
[  458.151189][ T6765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  458.171183][ T6765] RSP: 002b:00007f9eecf5b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000107
[  458.179861][ T6765] RAX: ffffffffffffffda RBX: 00007f9eec305f80 RCX: 00007f9eec177299
[  458.187824][ T6765] RDX: 0000000000000000 RSI: 0000000020000380 RDI: ffffffffffffff9c
[  458.195878][ T6765] RBP: 00007f9eec1e48e6 R08: 0000000000000000 R09: 0000000000000000
[  458.204211][ T6765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  458.212510][ T6765] R13: 000000000000000b R14: 00007f9eec305f80 R15: 00007ffffa5e5728
[  458.220663][ T6765]  </TASK>
[  458.257064][ T5123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  458.646117][ T5123] bond0 (unregistering): Released all slaves
[  458.716872][ T6720] caif:caif_disconnect_client(): nothing to disconnect
[  459.022031][ T6063] EXT4-fs (loop1): unmounting filesystem.
[  459.412153][ T5123] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.462559][ T5123] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.535386][ T5123] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.594538][ T5123] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.344329][ T5123] device hsr_slave_0 left promiscuous mode
[  460.354741][ T5123] device hsr_slave_1 left promiscuous mode
[  460.361581][ T5123] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  460.370119][ T5123] batman_adv: batadv0: Removing interface: batadv_slave_0
[  460.388010][ T5123] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  460.396059][ T5123] batman_adv: batadv0: Removing interface: batadv_slave_1
[  460.418469][ T5123] device bridge_slave_1 left promiscuous mode
[  460.424903][ T5123] bridge0: port 2(bridge_slave_1) entered disabled state
[  460.451025][ T5123] device bridge_slave_0 left promiscuous mode
[  460.457501][ T5123] bridge0: port 1(bridge_slave_0) entered disabled state
[  460.479644][ T5123] device veth1_macvtap left promiscuous mode
[  460.485700][ T5123] device veth0_macvtap left promiscuous mode
[  460.494763][ T5123] device veth1_vlan left promiscuous mode
[  460.501379][ T5123] device veth0_vlan left promiscuous mode
[  460.700504][ T5123] team0 (unregistering): Port device team_slave_1 removed
[  460.728517][ T5123] team0 (unregistering): Port device team_slave_0 removed
[  460.754886][ T5123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  460.782758][ T5123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  460.851368][ T5123] bond0 (unregistering): Released all slaves