last executing test programs:

1m5.273677142s ago: executing program 2:
creat(&(0x7f00000003c0)='./bus\x00', 0x0)
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
r1 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x10)
mlockall(0x2)
ftruncate(r1, 0x2008002)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r0, 0x0)
r2 = gettid()
process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x8, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)

1m4.931878244s ago: executing program 1:
ftruncate(0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000001c0)=0x1)

1m4.930747066s ago: executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYRES32=r3, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000009000300060000000400040008000600", @ANYRES32=r1], 0x5c}, 0x1, 0xf000}, 0x0)

1m4.646541349s ago: executing program 1:
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./bus\x00', 0x2010880, &(0x7f00000065c0)=ANY=[@ANYBLOB='discard=0x0000000000000004,quota,errors=continue,discard=0x0000000000000004,errors=continue,usrquota,nodiscard\x00nodiscard,resize=0x0000000000010000,umask=0x0000000000000002,quota,iocharset=koi8-u,resize=0x0000000000008045,resize,fsmagic=0x00000000000003ff,uid>', @ANYRESDEC, @ANYBLOB=',\b\x00\x00\x00ntext=sPsadm_u,\x00'], 0x1, 0x61bc, &(0x7f0000000400)="$eJzs3c1vHGcdB/DfvvqlNLV6qEqEkJsWaClN4qSEQIE2Bzhw6QHlihK5bhWRAkoCSitLceULB078BSAkuCHEEXHgitQDV26cOBHJRgL1xKCxnyee3exm7dreWXs+H8mZ+c0z633G3519yczsEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAfO+7319pRcSNn6UFSxGfiU5EO2KhrJcjYmF5Ka/fjYjnY6c5nouI3lxEefudf56JeD0iPj4TsbW9vlouvrTPfnznD3//zQ+eevtvv+9d+O8f73XeGLfe/fu/+M+fHhxumwEAAKBpiqIoWulj/tn0+b5dd6cAgKnIr/9Fkpef+vqX/3z7z7PUH7VarVarp1BXFaM9qBYRsVG9TfmeweF4ADhhNuKTurtAjeTfaN2IeKruTgAzrVV3BzgWW9vrq62Ub6v6erC8257PBRnIf6P16PqOcdNJhs8xmdbjazM68eyY/ixMqQ+zJOffHs7/xm57P6133PlPy7j8+7uXPjVOzr8znP+Q05N/e2T+TZXz7x4o/478AQAAAABghuX//1+q+fjv3OE3ZV+edPx3eUp9AAAAAAAAAICjdtjx/x4x/h8AAADMrPKzeulXZ/aWjfsutnL59VbE00PrAw2TLpZZrLsfAAAAAAAAAAAAANAk3d1zeK+3InoR8fTiYlEU5U/VcH1Qh739Sdf07Ycmq/tJHgAAdn18Zuha/lbEfERcT9/111tcXCyK+YXFYrFYmMvvZ/tz88VC5XNtnpbL5vr7eEPc7RflL5uv3K5q0uflSe3Dv6+8r37R2UfHjkgv/TXHNNcUNgAku69GW16RTpmieGbcmw8YYP8/hZZiqe7HFbOv7ocpAAAAcPyKoiha6eu8z6Zj/u26OwUATEV+/R8+LnCouj2mPeJofr9arVar1epPVVcVoz2oFhGxUb1N+Z7BcPwAcMJsxCd1d4Eayb/RuhHxfN2dAGZaq+4OcCy2ttdXWynfVvX1II3vns8FGch/o7Vzu3z7UdNJhs8xmdbjazM68eyY/jw3pT7Mkpx/ezj/G7vt/bTecec/LePy7+9cMtc8Of/OcP5DTk/+7ZH5N1XOv3ug/DvyBwAAAACAGZb//3/J8d+8yQAAAAAAAABw4mxtr6/m617z8f/PjVjP9Z+nU86/ddD8F9K8/E+0nH97KP+Xh9brVOYfXtvb//+9vb7623v/+mye7jf/uTzTSo+sVnpEtNI9tbppepite9xmr9Mv76nXane66Zyfovdu3IrbsRYXB9Ztp7/HXvvKQHvZ095A+6WB9u5j7ZcH2nvpeweKhdx+Plbjx3E73tlpL9vmJmz//IT2YkJ7zr/j+b+Rcv7dyk+Z/2Jqbw1NSw8/aj+231eno+7nrVuf//nF49+ciTaj82jbqsrtO1dDf3b+Jk/146d31+6cv3/z3r07K5EmA0svRZocsZx/b+dnbu/5/8Xd9vy8X91fH37UP3D+s2IzumPzf7EyX27vK1PuWx1y/v30k/N/J7WP3v8PlP/v/vrytSltzWRP2v9fraE/AAAAAAAAAAAAAAAA8CRFUexcIvpWRFxJ1//UdW0mADBd+fW/SPJytVqtVqvVp6+uKkZ7s1pExF8e3WBu1G8BAE6A/0XEP+ruBLWRf4Pl7/srpy/V3Rlgqu5+8OEPb96+vXbnbt09AQAAAAAAAAA+rTz+53Jl/OeXImJpaL2B8V+vxfJhx3/t5plHA4we8UDfY2y2+512ZbjxF2JnfO7z48b/PhePj/+dx8TtVLdjjN6E9v6E9kmXWMyPXLqX1sgLPSpy/i9Uxjsv8z87NPz6IcZ/nSlPGv91eMz7Jsj5n6s8nsv8vzS0XjX/4tczl//GflfcjPZA/hfuvf+TC3c/+PC1W+/ffG/tvbUfXV5ZuXj5ypWrV69eePfW7bWLu/8eT69nQM4/j33tPNBmyfnnzOXfLDn/L6Ra/s2S8/9iquXfLDn//H5P/s2S88+ffeTfLDn/V1It/2bJ+X851fJvlq3t9bky/1dTLf9myfv/V1It/2bJ+b+Wavk3S87/fKrl3yw5/wup3kf+vh7+FMn55yNc9v9myfmvpFr+zZLzv5Rq+TdLzv9yquXfLDn/11Mt/2bJ+X811fJvlpz/lVTLv1ly/l9L9T7zn3TaMydEzv9qqu3/zZLz/3qq5d8sOf9vpFr+zZLzfyPV8m+WnP83Uy3/Zsn5fyvV8m+WnP+3Uy3/Zsn5v5lq+TfL3vf/mzFjxkyeqfuZCQAAAAAAAAAAAAAYNo3TieveRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7PDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1Eaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwd28xct31HcDP7M1rhxADITipIZvEhJAs2bWd+ELrYkK4NEApkAToBdv1rs2Cb3jtEiiSTQMlEqZFFRXpQ1tAqI1UVbgVD7SiNA9VL0+lfaAvFVUlpEaVQQEVqa0oW82c//+/M7OzM7ve8Xr2/D8fyf7tzpyZc+bMmdn9rv3dAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANLvjDbOfrhVFUf/T+GtrUbyg/vHmia2Ny157vbcQAAAAWKv/a/z9/E3pgoMruFHTMn/3in/82sLCwkLx3uHfHf38wkK6YqIoRjcVReO66PK/v6/WvEzwZDFeG2r6fKjH6od7XD/S4/rRHteP9bh+U4/rx3tcv2QHLLG5/HlM4852ND7cWu7S4uZitHHdjg63erK2aWgo/iynoda4zcLosWKuOFHMFtMty5fL1hrLf+OO+rreUsR1DTWta3v9CPnBx4/GbaiFfbyjZV2L9xl97/XFxA9/8PGjf3Tuyq2dZs/d0HJ/5Xbec2d9Oz8ZLim3tVZsSvskbudQ03Zu7/CcDLdsZ61xu/rH7dv5/Aq3c3hxM9dV+3M+Xgw1Pv5WYz+NNP9YL+2n7eGy/76rKIqLi5vdvsySdRVDxZaWS4YWn5/x8ois30f9UHpxMbKq4/SOFRyn9Tmzo/U4bX9NxOf/jnC7kWW2oflp+t4nxpY876s9TqP6o17utdJ+DPb7tTIox2A8Lr7VeNBPdTwGd4TH//G7lz8GOx47HY7B9LibjsE7ex2DQ2PDjW1OT0KtcZvFY3Bny/LDjTXVGvO5u7sfg1PnTp6Zmv/ox14zd/LI8dnjs6d279w5vXvPnn379k0dmzsxO13+fZV7e/BtKYbSa+DOsO/ia+BVbcs2H6oLX+rf63C8y+twa9uy/X4djrQ/uNr6vCCXHtPla+PR+k4fvzRULPMaazw/9679dZged9PrcKTpddjxa0qH1+HICl6H9WXO3Luy71lGmv502oZr9bVga9Mx2P79SPsx2O/vRwblGBwPx8W/3rv814LtYXufmlzt9yPDS47B9HDDe0/9kvT9/vi+xuh0XN5Wv+KGseL8/OzZ+584cu7c2Z1FGOviJU3HSvvxuqXpMRVLjtehVR+vB+de8dRtHS7fGvbV+Gvqf40v+1zVl3ng/u7PVeOrW+f92XLpriKMPlvv/dnpq3l9f6Ys2WV/1pf55NTavxdPubTp/Xd0mfffmPt/Uq4v3dWTw6Mj5et3OO2d0Zb349anaqTx3lVrrPv5qZW9H4+GP+v9fnxzl/fjbW3L9vv9eLT9wcX341qvn3asTfvzOR6OkxPT3d+P68ts27XaY3Kk6/vxXWHWwv5/dUgKKRc1HTvLHbdpXSMjo+FxjcQ1tB6nu1uWHw3ZrL6uZ3Zd3XF6z13lfQ2nR7dovY7TibZl+32cpver5Y7TWq+fvl2d9udzPBwXN+/ufpzWl3n2gbW/d26OHza9d471OgZHh8fq2zyaDsLy/X5hczwG7y+OFqeLE8VM49qxxvFUa6xr8sGVHYNj4c96v1du63IM3tO2bL+PwfR1bLljrzay9MH3QfvzOR6Oi6cf7H4M1pd5eG9/v3e9J1ySlmn63rX952vL/czrtrbddC1/5lXfzr/Z2/1ns/VlTuxbbc7svp/uC5fc0GE/tb9+l3tNzRTrs5+2he28sm/5/VTfnvoyn9+/wuPpYFEUFz78UOPnveHfV/78/Le/1vLvLp3+TefChx/6/o3H/nY12w/AxveTcmwpv9Y1/cvUSv79HwAAANgQYu4fCjOR/wEAAKAyYu6P/ys8kf8BAACgMmLuHwkzyST/b3v4ytxPLhSpmb8QxOvTbnikXC52XKfD5xMLi+qXP/SV2R/95YWVrXuoKIofP/LrHZff9kjcrtJE2M7Lb2y9fOkNL6xo/YcfW1yuub/+xXD/8fGs9DDoVMGdLoriGzd9trGeifddasxnHzncmO+6+NST9WWe319+Hm//3EvK5X8/lH8PHjvScvvnwn74bpjTb+28P+Ltvnrp1dv3Pr64vni72p0vbDzsp99f3m/8PTmfe7JcPu7n5bb/rz7zzFfryz/xys7bf2Go8/Y/E+73K2H+z8vL5Zufg/rn8XafCtsf1xdvd/+Xv9lx+y9/ulz+zJvK5Q6HGdd/T/h8x5uuzDXvrydqR1oeV/Hmcrm4/ulv/3bj+nh/8f7bt3/80KWW/dF+fDz7z+X9TLUtHy+P64n+om399ftpPj7j+p/5zcMt+7nX+i+/67mX1++3ff33tS033Hb79t/Y9Aef+mzH9cXtOfinZ1oez8F3htdxWP/T7w/HY7j+fy9/tmW90eF3tr7/xOW/uPVCy+OJ3vLDcv2XX3e8Mf9j4ke/d8MLbnzhxdvr+64ovvXu8v56rf/4H55u2f4v3XJv4/mI18eOfvv6lxPXf/Yjk6dOz5+fm2naq43fnfO2cns2jW/eUt/em8J7a/vnh06f+8Ds2YnpiemimKjur9C7al8O8/vluLja29/7WHg+b/vCN7bc/U+fiZf/y6Pl5ZfeWn7delVY7nPh8q3l87dQW+P6n77jlsbru/Zs+XlLj70Ptu/4z30rWjA8/vbvC+LxfualH2jsh/p1ja8b8XW9xu3/zkx5P18P+3Uh/GbmO29ZXF/z8vF3I1x6d/l6X/P+C29z8Xn94/B8v/275f3H7YqP9zvh+5hvbmt9v4vHx9cvDLXff+O3eFwM7yfFxfL6uFTc35eev6Xj5sXfQ1JcvLXx+e+k+7l1VQ9zOfMfnZ86MXfq/BNT52bnz03Nf/Rjh06ePn/q3KHG7/I89MFet198f9rSeH+amd3zQDG9uSiK08X0OrxhXZvtr3+0su0/89jRmb3Td8/MHjty/ti5x87Mnj1+dH7+6OzM/N1Hjh2b/Uiv28/NHNi5a//uvbsmj8/NHNi3f//u/ZNzp07XN6PcqB72TH9o8tTZQ42bzB94YP/OBx98YHry5OmZ2QN7p6cnz/e6feNr02T91r82eXb2xJFzcydnJ+fnPjZ7YOf+PXt29fxtgCfPHJufmDp7/tTU+fnZs1PlY5k417i4/rWv1+2ppvl/K7+fbVcrfxFf8Y779qTfz1r3lU8se1flIm2/QPRK+F00//CiM/tW8nnM/aNhJpnkfwAAAMhBzP1jYSbyPwAAAFRGzP2bwkzkfwAAAKiMmPvHw0wyyf/6//r/K+v/l9fr/+fV/z/z4bJXutH7/7E/r/+fh+vc/1/z+vvQ/7+925Wr7P//1p/p/+v/r2N/fk2Grv/26//r/7PUoPX/Y+7fXBRZ5n8AAADIQcz9W8JM5H8AAACojJj7bwgzkf8BAACgMmLuf0GYSSb5X/9/Rf3/Xb0KV9Xv/zv/v/5/sTH7//HJ0f/Pxqr7948/2vJpBfr/XTn/fw/6/xu3/z8A26//r/9Pu9Flr7le/f+Y+28MM8kk/wMAAEAOYu5/YZiJ/A8AAACVEXP/TWEm8j8AAABURsz9W8NMMsn/+v/O/6//r/9f6f7/Ws//37Qx+v8bg/P/d6f/38NV9//H9f83Yv9/tL/bP9j9/56br//PNTFo5/+Puf9FYSaZ5H8AAADIQcz9Lw4zkf8BAACgMmLuf0mYifwPAAAAlRFz/81hJpnkf/1//X/9f/1//f/O6+99/v/yI/3/waL/353+fw/O/59X/7/P2z/Y/f9+n/9/9I3tt9f/p5NB6//H3P/SMJNM8j8AAADkIOb+W8JM5H8AAACojJj7XxZmIv8DAABAZcTcvy3MJJP8r/+v/6//r/+v/995/b37/yX9/8Gi/9+d/n8P+v/6//r/K+v/d/jmV/+fTgat/x9z/61hJpnkfwAAAMhBzP23hZnI/wAAAFAZMff/VJiJ/A8AAACVEXP/9jCTTPL/toevPP6Fxkf6/4X+v/5/Bv3/+8b0//X/q03/vzv9/x70//X/9f9XeP7/pVbT/9/U686ojEHr/8fc//Iwk0zyPwAAAOQg5v5XhJnI/wAAAFAZMfffHmYi/wMAAEBlxNw/EWay8fL/e4au4kbO/1+t/v+f/PXTtxf6//r/PdZf0f5/PAz0/zOn/9+d/n8P+v/6//r/69L/Jx+D1v+Puf+OMJONl/8BAACAZcTcf2eYifwPAAAAlRFz/11hJvI/AAAAVEbM/TvCTDLJ//r/1er/R/r/+v/d1l/R/n+i/583/f8Oml6kG6T/P6H/r/+/Ebe/Gv3/+N2v/j/9MWj9/5j7Xxlmkkn+BwAAgBzE3H93mIn8DwAAAJURc/+rwkzkfwAAAKiMmPvvCTPJJP/r/+v/6//r/1+v/v+Y/n/aq/r//aP/391q+/9jzv+v/6//n1n/3/n/6a9B6//H3P/qMJNM8j8AAADkIOb+e8NM5H8AAACojPj/N8v/9yr/AwAAQBXF3D8ZZpJJ/l9D/39hWP8/0f9v3f5B7f/X9P8Hqv/v/P+Le1X/v3/0/7vbIOf/1/8foP5//XL9f/1//X+u1qD1/2Puf02YSSb5HwAAAHIQc//9YSbyPwAAAFRGzP1TYSbyPwAAAFRGzP3TYSaZ5H/n/8+u/78p5/6/8//r/+v/V5/+f3f6/z3o/zv/f9X6/0Wh/891NWj9/5j7d4aZZJL/AQAAIAcx9+8KM5H/AQAAoDJi7t8dZiL/AwAAQGXE3P9AmEkm+V//P7v+f9bn/9f/1//X/68+/f/u9P970P/X/69a/9/5/7nOBq3/H3P/g2EmmeR/AAAAyEHM/XvCTOR/AAAAqIyY+/eGmYT83+n/dQMAAAAbS8z9+8JMMvn3f/3/ivT/f+PvW9at/6//3239/en/b9b/D1P/f7BUtP/f/rK4avr/Pej/6//r/+v/01eD1v+PuX9/mEkm+R8AAAByEHP/a8NM5H8AAACojJj7fzrMRP4HAACAyoi5/2fCTDLJ//r/Fen/t9H/1//vtn7n/9f/r7KK9v/7plL9/yH9f/3/wdp+/X/9f5a69v3/+NHK+v8x9x8IM8kk/wMAAEAOYu7/2TAT+R8AAAAqI+b+14WZyP8AAABQGTH3HwwzyST/6//r/+v/6/9fm/7/64p2g9j/rx8869b/H9X/Xw/6/91Vqv/v/P/6/wO2/fr/+v8sNWjn/4+5//VhJpnkfwAAAMhBzP0PhZnI/wAAAFAZMfe/IcxE/gcAAIDKiLn/4TCTTPK//r/+v/6//r/z/3dev/P/b0z6/93p//eg/6//r/+v/09fDVr/P+b+N4aZZJL/AQAAIAcx978pzET+BwAAgMqIuf/NYSbyPwAAAFRGzP1vCTPJJP/r/+v/6//r/+v/d16//v/GpP/fnf5/D/r/+v/6//r/9NWg9f9j7v+5MJNM8j8AAADkIOb+R8JM5H8AAACojJj73xpmIv8DAABAZcTc/7Ywk0zyv/6//r/+v/6//n/n9ev/b0z6/93p//eg/6//r/+v/09fDVr/P+b+t4eZZJL/AQAAIAcx9/98mIn8DwAAAJURc/87wkzkfwAAAKiMmPt/Icwkk/yv/6//P1j9/4ULzbfT/9f/L/rV/6/fSP8/C/r/3en/99Ch/79J/1//X/9f/5+rNmj9/5j73xlmkkn+BwAAgBzE3P+uMBP5HwAAACoj5v53h5nI/wAAAFAZMfc/GmaSSf7X/8+y/58e8uD1/53/X//f+f/1/9dG/787/f8enP9f/1//X/+fvhq0/n/M/Y+FmWSS/wEAACAHMfc/HmYi/wMAAEBlxNz/njAT+R8AAAAqI+b+94aZZJL/9f+z7P8P8Pn/r1//v/4Y+t//H2k5PnLq/483PZ/puNT/1/9fB/r/3en/96D/H/rzxZD+/wD2/8PRvHmZ2+v/M4gGrf8fc//7wkwyyf8AAACQg5j7fzHMRP4HAACAyoi5/5fCTOR/AAAAqIyY+385zCST/K//r/+v/+/8/87/33n9+v8bk/5/d/r/Pej/O///IPf/e9D/ZxANWv8/5v5fCTNZNvh9/79W8DABAACAARJz//vDTDL5938AAADIQcz9h8JM5H8AAACojJj7D4eZZJL/9f/b+//xjKr6//r/G67/P6L/X9L/z1v/+v8vu7Eo9P/1//X/9f/1//X/WYtB6//H3H8kzCST/A8AAAA5iLn/V8NM5H8AAACojJj7j4aZyP8AAABQGTH3z4SZZJL/9f+d/79f/f8f6/9f7/6/8/8H+v95c/7/7vT/e9D/1//X/9f/p68Grf8fc/9smEkm+R8AAAAqLP04OOb+Y2Em8j8AAABURsz9x8NM5H8AAACojJj7PxBmkkn+1//X/3f+/+vR/x9pWV7/v6T/r//fD/r/3en/96D/r/+v/6//T18NWv8/5v65MJNM8j8AAADkIOb+D4aZyP8AAABQGTH3fyjMRP4HAACAyoi5/0SYSSb5X/9f/z/3/n+tKC46/7/+f6f16/9vTPr/3en/96D/r/+v/6//T18NWv8/5v6TYSaZ5H/+n737eLLrqvY4fp+fLKmZwJ/AmBFDGJkJc6bMqGJMNjnIJmcwGZNNzjknk3POmGByjiYaqkS5tdayuu/tc1rqo77n7P35TNaTntvdbfd71A/VtzYAAAA9yN1/77jF/gcAAIBm5O6/T9xi/wMAAEAzcvffN27pZP/r//X/vff/q628/7/3r9f/n6P/1/9PYa2/P3FhH39g/3/HO115D/2//l//P0j/r//X/7Pf3Pr/3P33i1s62f8AAADQg9z9949b7H8AAABoRu7+B8Qt9j8AAAA0I3f/lXFLJ/tf/6//76P/P7HS/x+y/79e/6//Xzbv/w/T/4/Q/+v/9f/6fyY1t/4/d/8D45ZO9j8AAAD0IHf/g+IW+x8AAACakbv/wXGL/Q8AAADNyN3/kLilk/2v/9f/99H/t/D+/0nv/+/7fvT/+v9N9P/D9P8j9P/6f/2//p9Jza3/z93/0Lilk/0PAAAAPcjd/7C4xf4HAACAZuTuf3jcYv8DAABAM3L3PyJu6WT/6//1//r/pfT/x/T+v/5f/79w161u/f8J+v91+v8RI/3/aqX/H3Lofn7zt7ecr/8A+n/9P+vm1v/n7n9k3HKX1erkxX6TAAAAwKzk7n9U3NLJn/8DAABAD3L3n4lb7H8AAABoRu7+q+KWTva//l//r//X/+v/N39+/f8yHa6/P3Xgx+v/w4H9/x1ud6979tv/e/9/mPf/9f/6f/abW/+fu//quKWT/Q8AAAA9yN3/6LjF/gcAAIBm5O5/TNxi/wMAAEAzcvc/Nm7pZP/r/1vr//9/z8ed1//v1i76f/2//l//37qj9vf6/9D1+/879Uv9v/5f/6//52jm1v/n7n9c3NLJ/gcAAIAe5O5/fNxi/wMAAEAzcvc/IW6x/wEAAKAZufufGLd0sv/1/631/3s/zvv/+v9Nn1//r/9vmf5/mP5/RCvv/1/kT822+/mj2vbXr//X/7Nubv1/7v4nxS2d7H8AAADoQe7+J8ct9j8AAAA0I3f/U+IW+x8AAACakbv/qXFLJ/tf/6//X0b/n59B/6//v/T9f9L/L5P+f5j+f0Qr/f9F2nY/v/SvX/+v/2fd3Pr/3P1Pi1s62f8AAADQg9z9T49b7H8AAABoRu7+Z8Qt9j8AAAA0I3f/M+OWTva//l//v4z+3/v/+n/v/+v/D0f/P0z/P0L/r//X/+v/mdTc+v/c/dfELZ3sfwAAAOhB7v5nxS32PwAAADQjd/+z4xb7HwAAAJqRu/85cUsn+1//r//X/+v/9f+bP7/+f5n0/8P0/yP0//p//b/+n0nNqP8/76NOr54bt3Sy/wEAAKAHufufF7fY/wAAANCM3P3Pj1vsfwAAAGhG7v4XxC2d7H/9/2z6/92cr63+f2e1Wl10/39X/f+y+/+d8/591s+l/l//fwz0/8P0/yP0//p//b/+n0nNqP/f/XXu/hfGLZ3sfwAAAOhB7v5r4xb7HwAAAJqRu/9FcYv9DwAAAM3I3f/iuKWT/a//n03/v6ut/t/7//t/Pnrq/73/v07/fzz0/8P0/yP0//p//b/+n0nNrf/P3f+SuOnk5Rf9LQIAAAAzk7v/pXFLJ3/+DwAAAD3I3f+yuMX+BwAAgIW6Zu13cve/PG7pZP/r/6ft/0+e93v6f/3//p8P/b/+X/9/6en/h+n/R+j/9f/6f/0/k5pb/5+7/xVxSyf7HwAAAHqQu/+6uMX+BwAAgGbk7n9l3GL/AwAAQDNy978qbulk/+v/vf+v/9f/6/83f379/zLp/4fp/0fo//X/2+3/T936P+r/acMF9P9nz549c8n7/9z9r45bOtn/AAAA0IPc/a+JW+x/AAAAaEbu/tfGLfY/AAAANCN3/+vilk72v/7/UvT/52rFWff/+aO+rP7/qtVq7v3/Gf2//v9A+v/jof8fpv8fof/X/3v/X//PpOb2/n/u/tfHLZ3sfwAAAOhB7v43xC32PwAAADQjd/8b4xb7HwAAAJqRu/9NcUsn+1//7/3/BfX/3v/X/+/5fhbW/9+80v8fi0X0/zsHf/659/9X6//1/wO66//vduc9v9T/6/9ZN7f+P3f/m+OWTvY/AAAA9CB3/1viFvsfAAAAmpG7/61xi/0PAAAAzcjd/7a46UQn+1//r//X/+v/9f+bP/8xv/9/crVa6f8nsIj+f8Dc+3/v/+v/h3TX/++j/9f/s25u/X/u/rfHLZ3sfwAAAOhB7v53xC32PwAAADQjd/874xb7HwAAAJqRu/9dcUsn+1//r//X/+v/m+//r15E/+/9/4no/4fp/0fo//X/+n/9P8diW/1/7v53xy2d7H8AAADoQe7+98Qt9j8AAAA0I3f/e+MW+x8AAACakbv/fXFLJ/tf/6//v5D+P79O/X9b/f+p2fX/p/f8/Tp5/1//PxH9/zD9/wj9v/5f/3+N/p8pze39/9z9749bOtn/AAAA0IPc/R+IW//Vrf0PAAAAzcjd/8G4xf4HAACAZuTu/1Dc0sn+1//r/73/r/9v/v1//X9X9P/D9P8j9P/6f/2/9/+Z1Nz6/9z9H45bOtn/AAAA0IPc/R+JW+x/AAAAaEbu/o/GLfY/AAAANCN3//VxSyf7X/+v/9f/6//1/+f+Her/26D/H3Y8/f+O/l//X/38/8X/Fej/9f9jH0+b5tb/5+7/WNzSyf4HAACAHuTu/3jcYv8DAABAM3L3fyJusf8BAABgkU5s+L3c/Z+MWzrZ//p//b/+X/+v/9/8+fX/y6T/H+b9/4Pc5trzf6X/P2w/f/s9v1ra+//7//NL/6//Z3pz6/9z938qbulk/wMAAEAPcvd/Om6x/wEAAKAZufs/E7fY/wAAANCM3P2fjVs62f/6f/1/M/3/LV+E/l//r//vnv5/mP5/hPf/t/p+/tK/fv2//p91c+v/c/d/Lm7pZP8DAABAD3L3fz5usf8BAACgGbn7vxC32P8AAADQjN3dn3FZh/tf/7+1/n/376//9/6//l//r/+flv5/mP5/hP5f/6//1/8zqbn1/1/c/ajTqy/FLZ3sfwAAAOhB7v4vxy32PwAAADQjd/9X4hb7HwAAAJqRu/+rcUsn+1//7/3/ZfT/Z8+ePaP/1//v/X5u7f9v1P9T9P/D9P8j9P/6f/2//p9Jza3/z93/tbilk/0PAAAAPcjd//W4xf4HAACAZuTu/0bcYv8DAABAM3L3fzNu6WT/6/9n0P+f1v97/1//v/L+v/5/Ivr/zXbi6v9HtNj/nz78t7/tfv6otv316//1/6ybW/+fu/9bcUsn+x8AAAB6kLv/23HL2v6/4Ri/KgAAAGBKufu/E7f4838AAABoRu7+78Ytnex//f/x9f+3/LPr5f3/ndXmr1//r//X/+v/LzX9/zD9/4gW+/8LsO1+fulfv/5f/8+6ufX/ufu/F7fsHX6XX9h3CQAAAMxJ7v7vxy2d/Pk/AAAA9CB3/w1xi/0PAAAAzcjd/4O4pZP9r/+fwfv/Dfb/x/P+/2n9v/5/yv7/Mv1/G/T/w/T/I/T/+n/9/0T9f/406/97N7f+P3f/D+OWTvY/AAAA9CB3/4/iFvsfAAAAmpG7/8dxi/0PAAAAzcjdf2Pcct7+39R2t0L/r/9fbv/v/X/9v/f/9f/r9P87g//bw/b/p1ZH6/+T/l//r//vtf/3/j/nzK3/z93/k7jFn/8DAADA4lx+wO/n7v9p3GL/AwAAQDNy9/8sbrH/AQAAoBm5+38et9x02ba+pGOl/9f/6//1//r/zZ9f/79M+v9h3v8fof+fop+/Qv/fRv+/Wun/Obq59f+5+38Rt/jzfwAAAGhG7v5fxi32PwAAADQjd/+v4hb7HwAAAJqRu//XcUsn+1//r/8/Yv+/m2a23P/vrPT/+v9z9P/LoP8fpv8fof/3/r/+3/v/TGpu/X/u/t/ELZ3sfwAAAOhB7v7fxi32PwAAADQjd//v4hb7HwAAAJqRu//3cUsn+39r/X/8o9b/b7f/v8z7/7u8/6//3/T59f/LpP8fpv8fof/X/+v/9f9Mam79f+7+P8Qtnex/AAAA6EHu/j/GLfY/AAAANCN3/5/iFvsfAAAAmpG7/89xSyf73/v/fff/E7z/r//X/+v/9f+zov8fpv/frP5F6f/1//p//T+Tmlv/n7v/L3FLJ/sfAAAAepC7/69xi/0PAAAAzcjdf1PcYv8DAABAM3L3/y1u6WT/6//1//p//b/+f/Pn1/8vk/5/2Db7/7vfdvzTev9/6/1/fgn6f/2//p9JzK3/z93/97ilk/0PAAAAPcjd/4+4xf4HAACAZuTu/2fcYv8DAABAM3L3/ytu6WT/j/T/p+ov1P8P0v/v/fr1/5t/PvT/+n/9/6Wn/x/m/f8R+n/v/+v/9f9Mam79f+7+f8ctnex/AAAA6EHu/pvjFvsfAAAAmpG7/z9xi/0PAAAAzcjd/9+4pZP97/3/JfX/V+j/9f/6f/2//n+E/n+Y/n+E/l//r//X/zOpufX/ufv/FwAA///C5VM+")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2b6c1)
mknod(&(0x7f0000000140)='./file1\x00', 0x1, 0x0)
open$dir(0x0, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149282, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6800)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(&(0x7f0000000e00)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)

1m4.621750596s ago: executing program 2:
mknodat$loop(0xffffffffffffff9c, 0x0, 0x0, 0x1)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0)
fchdir(r0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r1)
close(0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
syz_mount_image$bfs(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX=0x0, @ANYRESDEC, @ANYRESHEX, @ANYBLOB="3eb7081c5ee06c11e6486ffeae4985a53dc52df49ee501ebf027320c7d9ba4343f39a03a3aa4ef1a1010e0b0003c0537d0ba26ff232af2439c80beecab8884df26aad0f468472bbd2ab3d6c1d5fcf1ae11543a983c50d455e1c071bab3abe3ab251fdef1fb51d0914a8136df0d0ac746120704c76b8b72408d8f44d1100ca8c9bf618f463850f81d2f60ad68b82a9e68bc99df4255e47c00486a7c1db121ec870cab4036", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRESDEC, @ANYRES32], 0x1, 0xb1, &(0x7f0000000400)="$eJzs1zFqwmAYBuC3oW3aJT1Ah94gd+hRSsd261Rx8ELunsIjCB7AwU1cIjExZHYwIM8DCby8/wff+P/r4/I9VdK85awZ+fuf/Xz9tv9VBs/hjhRJyiQvbai6vPvsuoe+3+zn35dvNPo40coAAMCVitRJXvubfhZF6rprtsOZj/YtcOjD02i4vOmqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJM4BQAA//8fTCFM")
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r2 = fspick(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)

1m2.69855688s ago: executing program 1:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000f138850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

1m2.467794166s ago: executing program 0:
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4080)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000007, 0x11, 0xffffffffffffffff, 0x0)
mmap$xdp(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000080))
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x128, 0x1403, 0x13, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netdevsim0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_bridge\x00'}}]}, 0x128}}, 0x0)

1m2.307751229s ago: executing program 0:
iopl(0x3)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40000000000000079109000000000006300000000000000950000000000000084f00c441606138c6a906da3c842158155ccf2018b144722f9211cbae54d996c224ac7df1a30309b"], 0x0}, 0x90)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x3938700})

1m2.179894877s ago: executing program 0:
creat(&(0x7f00000003c0)='./bus\x00', 0x0)
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
r1 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x10)
mlockall(0x2)
ftruncate(r1, 0x2008002)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r0, 0x0)
r2 = gettid()
process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x8, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)

1m2.102786333s ago: executing program 1:
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r3=>0x0})
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], <r5=>0x0, 0xc8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x15, 0x8, 0x8, &(0x7f0000000680)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000007000000000000000004000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b703000083000000bf090000000000005509fcffffbfffff940000000000000018180000", @ANYRES32, @ANYBLOB="0000000000000000996108000100000018390000020000000000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x6, 0xe0, &(0x7f0000000580)=""/224, 0x40f00, 0x20, '\x00', r3, 0x1c, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000800)=[{0x0, 0x2, 0x10, 0x2}, {0x3, 0x1, 0xb, 0xa}, {0x2, 0x4, 0x9, 0x5}], 0x10, 0x2b04a862}, 0x90)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="47fe4bff0989899c"], 0x28}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
r7 = socket$kcm(0x10, 0x400000002, 0x0)
r8 = socket(0x28, 0x2, 0x0)
getsockopt$nfc_llcp(r8, 0x88, 0x68, 0x0, 0x20000000)
socket$inet6(0xa, 0x3, 0x3a)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d44b605f900"/158, 0x9e}, {&(0x7f00000000c0)="68c32a7de6a2395800000000000000000000894faaf39ffe271f432f", 0x1c}], 0x2}, 0x0)
sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)={0x24, 0x1402, 0x1, 0x0, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6(0xa, 0x3, 0x1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x170}, 0x20008840)

1m2.051653124s ago: executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYRES32=r3, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000009000300060000000400040008000600", @ANYRES32=r1], 0x5c}, 0x1, 0xf000}, 0x0)

1m1.859565633s ago: executing program 0:
dup(0xffffffffffffffff)
socket$alg(0x26, 0x5, 0x0)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0)

1m1.501417766s ago: executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x7fffd, 0x8, 0x0, 0x1}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x0, 0xfff, 0x9}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r0, 0x0, &(0x7f0000000200)=""/76}, 0x20)

1m1.366193888s ago: executing program 2:
r0 = socket$inet6(0xa, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@remote, 0x0, r2})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', <r5=>0x0})
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000300)={@remote, r5}, 0x14)

1m1.143859798s ago: executing program 1:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket(0x15, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$l2tp6(0xa, 0x2, 0x73)
socket$nl_xfrm(0x10, 0x3, 0x6)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000040)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0)

1m0.810765319s ago: executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1, 0x80000}}, 0x48)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {0x0, r1, 0x2}}, 0x18)

1m0.414733739s ago: executing program 4:
iopl(0x3)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40000000000000079109000000000006300000000000000950000000000000084f00c441606138c6a906da3c842158155ccf2018b144722f9211cbae54d996c224ac7df1a30309b"], 0x0}, 0x90)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x3938700})

1m0.310312725s ago: executing program 4:
iopl(0x3)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)

1m0.224075324s ago: executing program 4:
creat(&(0x7f00000003c0)='./bus\x00', 0x0)
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
r1 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0)
mlockall(0x2)
ftruncate(r1, 0x2008002)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r0, 0x0)
r2 = gettid()
process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x8, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)

59.712576511s ago: executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x80001, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x5, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r0], 0x3c}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000040), 0xc, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044041)

35.097550018s ago: executing program 3:
syz_mount_image$exfat(0x0, &(0x7f0000000740)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000000800)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2f000000000000000000003700020008000300cc645a43a4b19950521994e234a5ebfa00086513a22a993b1ddbf12cadbc11c2c5c35151992feb94b0b16a7c3440a257", @ANYRES32, @ANYBLOB="0c0099008100000004000000"], 0x28}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000023000000850000009e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
userfaultfd(0x0)
mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x0, &(0x7f000063c000/0x3000)=nil)
mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./file2\x00', &(0x7f0000000780)='9p\x00', 0x481000, &(0x7f00000007c0)='-\x00')
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000100))
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000280)={{0xd, 0x0, 0x2, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]})

35.02534749s ago: executing program 3:
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./bus\x00', 0x2010880, &(0x7f00000065c0)=ANY=[@ANYBLOB='discard=0x0000000000000004,quota,errors=continue,discard=0x0000000000000004,errors=continue,usrquota,nodiscard\x00nodiscard,resize=0x0000000000010000,umask=0x0000000000000002,quota,iocharset=koi8-u,resize=0x0000000000008045,resize,fsmagic=0x00000000000003ff,uid>', @ANYRESDEC, @ANYBLOB=',\b\x00\x00\x00ntext=sPsadm_u,\x00'], 0x1, 0x61bc, &(0x7f0000000400)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6800)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(&(0x7f0000000e00)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)

34.440608965s ago: executing program 3:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2020)
syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902"], 0x0)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r1, r0, 0x0, 0x3a)

33.048797077s ago: executing program 3:
syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x810010, &(0x7f0000000340)=ANY=[], 0x1, 0x66f, &(0x7f0000000a80)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, <r0=>0x0})
sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x0, 0x7fff, 0x2, 0x4, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x40, 0x3, 0x4}, 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x2, &(0x7f00000000c0)={0x0, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000001c40)=@raw={'raw\x00', 0xc01, 0x3, 0x1230, 0x10e8, 0x5002004a, 0x0, 0x10e8, 0x0, 0x1198, 0x3c8, 0x3c8, 0x1198, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x10e8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'wg2\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "53f99237f41c832fc8969da1f2b7a86ddedeb7587f1590839a7a3acebc0f"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x1290)
setsockopt$inet_tcp_int(r5, 0x6, 0x19, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
socket(0x0, 0x3, 0x1)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00')
r6 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
fstat(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000680)='./file1\x00', 0x1000801, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYRESOCT, @ANYRESDEC, @ANYRESHEX, @ANYRESHEX=r6, @ANYRESHEX, @ANYRES8, @ANYRES8=0x0], 0x2, 0x1eb, &(0x7f0000000a40)="$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")
chdir(&(0x7f0000000200)='./file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x200040, 0xe)

31.817943301s ago: executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @empty}, r1, 0x80000}}, 0x48)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f00000004c0), r1}}, 0x18)

31.337042626s ago: executing program 2:
iopl(0x3)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40000000000000079109000000000006300000000000000950000000000000084f00c441606138c6a906da3c842158155ccf2018b144722f9211cbae54d996c224ac7df1a30309b"], 0x0}, 0x90)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x3938700})

31.11440367s ago: executing program 1:
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="094c6b3b9fc068be82a405f112c0b1cc", 0x10)

30.019712787s ago: executing program 3:
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r2}, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="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"/281], 0x114}], 0x1}, 0x0)

29.695639551s ago: executing program 4:
r0 = memfd_create(&(0x7f0000000180)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81<z\xf2\xe8\xf4\x93\xe6h\x97\x7f\xaf\xc5\x06g\fI\xa58\xf5\x18x\xc9\xb9\x03\t\x06\x96gf5\xb0\xc8\x86\x14\xe2\x01\x1f\x80\xe7Ol\xba\x93\xaa\x15\x87I7W\x87\xc4;p\xc5\x1e\"K5r\xec6\xac\xf0;\xf8 \xad\xc9\xf0\x16\xce\x17\xa1%f\x12\x80\x03N[qz\xf0q\xbd\xb8s\xe5>N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\x80Iy4\xa9\xf88C\xe3', 0x0)
listxattr(0x0, 0x0, 0x0)
write(r0, &(0x7f0000000140)='/', 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0)
syz_mount_image$fuse(&(0x7f0000000640), &(0x7f0000000000)='./file1\x00', 0x10b0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100)='./file0\x00')

0s ago: executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000", @ANYRES32=r3, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000009000300060000000400040008000600", @ANYRES32=r1], 0x5c}, 0x1, 0xf000}, 0x0)

kernel console output (not intermixed with test programs):

slave_0 removed
[  197.186381][ T5116] Bluetooth: hci0: command tx timeout
[  197.328963][ T7199] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  197.400100][ T7195] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  197.414342][ T5116] Bluetooth: hci4: command tx timeout
[  197.460727][ T7195] 8021q: adding VLAN 0 to HW filter on device team0
[  197.497358][ T7195] bond0: (slave team0): Enslaving as an active interface with an up link
[  197.531352][ T7204] syz2: rxe_newlink: already configured on veth1_to_bridge
[  197.560087][ T7075] chnl_net:caif_netlink_parms(): no params data found
[  198.171636][ T7075] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.206074][ T7075] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.238978][ T7075] bridge_slave_0: entered allmulticast mode
[  198.260514][ T7075] bridge_slave_0: entered promiscuous mode
[  198.287127][ T7084] chnl_net:caif_netlink_parms(): no params data found
[  198.318343][ T7075] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.329755][ T7075] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.356964][ T7075] bridge_slave_1: entered allmulticast mode
[  198.409102][ T7075] bridge_slave_1: entered promiscuous mode
[  198.603777][ T7229] loop2: detected capacity change from 0 to 256
[  198.650699][ T7075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  198.660301][ T7211] loop4: detected capacity change from 0 to 32768
[  198.695525][ T7211] XFS: attr2 mount option is deprecated.
[  198.726873][ T7075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  198.738443][ T7211] XFS: ikeep mount option is deprecated.
[  198.781284][ T7211] XFS: noikeep mount option is deprecated.
[  198.893160][ T7211] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  199.036254][ T7211] XFS (loop4): Ending clean mount
[  199.043761][ T7211] XFS (loop4): Quotacheck needed: Please wait.
[  199.103427][ T7211] XFS (loop4): Quotacheck: Done.
[  199.133247][ T7075] team0: Port device team_slave_0 added
[  199.165641][ T5533] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  199.175561][ T7084] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.195394][ T7084] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.211931][ T7084] bridge_slave_0: entered allmulticast mode
[  199.255422][ T5116] Bluetooth: hci0: command tx timeout
[  199.264107][ T7084] bridge_slave_0: entered promiscuous mode
[  199.314468][ T7075] team0: Port device team_slave_1 added
[  199.498272][ T7218] loop0: detected capacity change from 0 to 32768
[  199.499918][ T5116] Bluetooth: hci4: command tx timeout
[  199.566748][ T7218] ERROR: (device loop0): diNewExt: no free extents
[  199.566748][ T7218] 
[  199.615003][ T7218] ialloc: diAlloc returned -5!
[  199.621303][ T1043] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.686508][ T7084] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.693673][ T7084] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.736617][ T7084] bridge_slave_1: entered allmulticast mode
[  199.768481][ T7084] bridge_slave_1: entered promiscuous mode
[  199.882660][ T1043] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.004914][ T7075] batman_adv: batadv0: Adding interface: batadv_slave_0
[  200.011889][ T7075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.086739][ T7075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  200.150202][ T1043] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.226220][ T7084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  200.277673][ T7084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  200.322992][ T7075] batman_adv: batadv0: Adding interface: batadv_slave_1
[  200.353817][ T7075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.412200][ T7075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  200.496990][ T1043] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.716587][ T7084] team0: Port device team_slave_0 added
[  200.759078][ T7084] team0: Port device team_slave_1 added
[  200.815798][ T7075] hsr_slave_0: entered promiscuous mode
[  200.837418][ T7075] hsr_slave_1: entered promiscuous mode
[  200.851135][ T7075] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  200.867053][ T7075] Cannot create hsr debugfs directory
[  201.098715][ T7084] batman_adv: batadv0: Adding interface: batadv_slave_0
[  201.125106][ T7084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.177624][ T7084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  201.207941][ T7084] batman_adv: batadv0: Adding interface: batadv_slave_1
[  201.215545][ T7084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.264082][ T7084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  201.396642][ T7260] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  201.580077][ T7271] syz2: rxe_newlink: already configured on veth1_to_bridge
[  201.661913][ T7276] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  202.009607][ T7282] loop4: detected capacity change from 0 to 32768
[  202.094842][ T7282] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  202.156195][ T7084] hsr_slave_0: entered promiscuous mode
[  202.192001][ T7084] hsr_slave_1: entered promiscuous mode
[  202.227525][ T7084] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  202.260452][ T7084] Cannot create hsr debugfs directory
[  202.300091][ T7282] XFS (loop4): Ending clean mount
[  202.365335][ T5151] XFS (loop4): Metadata CRC error detected at xfs_rmapbt_read_verify+0x41/0xd0, xfs_rmapbt block 0x14 
[  202.410942][ T5151] XFS (loop4): Unmount and run xfs_repair
[  202.431250][ T1043] bridge_slave_1: left allmulticast mode
[  202.434365][ T5151] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  202.443326][ T1043] bridge_slave_1: left promiscuous mode
[  202.456407][ T5151] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  202.469403][ T1043] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.482392][ T5151] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80  ..P.............
[  202.498793][ T5151] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  202.513221][ T1043] bridge_slave_0: left allmulticast mode
[  202.519337][ T1043] bridge_slave_0: left promiscuous mode
[  202.531467][ T5151] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  202.543294][ T1043] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.552199][ T5151] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  202.564719][ T5151] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  202.574956][ T5151] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  202.586677][ T5151] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  202.601929][ T7282] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x14 len 4 error 74
[  202.626485][ T7282] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  202.641549][ T7282] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  202.717821][ T5533] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  203.291174][ T7286] loop0: detected capacity change from 0 to 32768
[  203.299406][ T7286] XFS: attr2 mount option is deprecated.
[  203.305559][ T7286] XFS: ikeep mount option is deprecated.
[  203.311451][ T7286] XFS: noikeep mount option is deprecated.
[  203.347607][ T7286] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  203.430177][ T7286] XFS (loop0): Ending clean mount
[  203.446136][ T7286] XFS (loop0): Quotacheck needed: Please wait.
[  203.489276][ T1043] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  203.508347][ T1043] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  203.508850][ T7286] XFS (loop0): Quotacheck: Done.
[  203.547019][ T1043] bond0 (unregistering): (slave team0): Releasing backup interface
[  203.559967][ T5351] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  203.568928][ T1043] bond0 (unregistering): Released all slaves
[  204.018130][ T7319] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  204.853751][ T7335] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  205.118009][ T1043] hsr_slave_0: left promiscuous mode
[  205.136397][ T1043] hsr_slave_1: left promiscuous mode
[  205.150843][ T1043] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  205.170958][ T1043] batman_adv: batadv0: Removing interface: batadv_slave_0
[  205.197392][ T1043] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  205.212758][ T1043] batman_adv: batadv0: Removing interface: batadv_slave_1
[  205.239983][ T7323] loop0: detected capacity change from 0 to 32768
[  205.305574][ T1043] veth1_macvtap: left promiscuous mode
[  205.311081][ T1043] veth0_macvtap: left promiscuous mode
[  205.330528][ T1043] veth1_vlan: left promiscuous mode
[  205.337438][ T1043] veth0_vlan: left promiscuous mode
[  205.383429][ T7323] ERROR: (device loop0): diNewExt: no free extents
[  205.383429][ T7323] 
[  205.417873][ T7323] ialloc: diAlloc returned -5!
[  206.683285][ T1043] team0 (unregistering): Port device team_slave_1 removed
[  206.800241][ T1043] team0 (unregistering): Port device team_slave_0 removed
[  207.046418][ T7343] loop2: detected capacity change from 0 to 32768
[  207.065978][ T7343] XFS: attr2 mount option is deprecated.
[  207.074087][ T7343] XFS: ikeep mount option is deprecated.
[  207.091520][ T7343] XFS: noikeep mount option is deprecated.
[  207.147359][ T7343] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  207.260297][ T7343] XFS (loop2): Ending clean mount
[  207.288110][ T7343] XFS (loop2): Quotacheck needed: Please wait.
[  207.379609][ T7343] XFS (loop2): Quotacheck: Done.
[  207.451301][ T6242] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  208.326887][ T7363] loop4: detected capacity change from 0 to 2048
[  208.386860][ T7363]  loop4: p1 < > p3
[  208.406191][ T7363] loop4: p3 size 134217728 extends beyond EOD, truncated
[  208.433175][ T7075] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  208.442882][ T4535]  loop4: p1 < > p3
[  208.460740][ T4535] loop4: p3 size 134217728 extends beyond EOD, truncated
[  208.625620][ T7075] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  208.711137][ T7075] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  208.788379][ T7075] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  208.837240][ T7375] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  208.925742][ T6598] udevd[6598]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  208.943064][ T6475] udevd[6475]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  209.058462][ T6475] udevd[6475]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  209.073337][ T6598] udevd[6598]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  209.260384][ T7075] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.270106][ T7382] loop0: detected capacity change from 0 to 512
[  209.320058][ T7382] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  209.358393][ T7075] 8021q: adding VLAN 0 to HW filter on device team0
[  209.365181][ T7382] EXT4-fs (loop0): invalid journal inode
[  209.374806][ T7382] EXT4-fs (loop0): can't get journal size
[  209.422099][ T7382] EXT4-fs (loop0): 1 truncate cleaned up
[  209.431694][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.438888][ T5151] bridge0: port 1(bridge_slave_0) entered forwarding state
[  209.482901][ T7382] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  209.543379][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.550586][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state
[  209.738633][ T7075] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  209.790777][ T7084] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  209.825779][ T7084] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  209.856058][ T7084] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  209.917885][ T7084] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  210.018508][ T5351] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.229243][ T7084] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.298161][ T7084] 8021q: adding VLAN 0 to HW filter on device team0
[  210.315916][ T7385] loop4: detected capacity change from 0 to 32768
[  210.355041][ T7385] XFS: attr2 mount option is deprecated.
[  210.373450][ T7385] XFS: ikeep mount option is deprecated.
[  210.380653][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.387828][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.404710][ T7385] XFS: noikeep mount option is deprecated.
[  210.430959][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.438170][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.536918][ T7075] 8021q: adding VLAN 0 to HW filter on device batadv0
[  210.560368][ T7385] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  210.590755][ T7380] loop2: detected capacity change from 0 to 32768
[  210.658736][ T7380] ERROR: (device loop2): diNewExt: no free extents
[  210.658736][ T7380] 
[  210.721993][ T7075] veth0_vlan: entered promiscuous mode
[  210.738815][ T7380] ialloc: diAlloc returned -5!
[  210.744299][ T7385] XFS (loop4): Ending clean mount
[  210.774524][ T7385] XFS (loop4): Quotacheck needed: Please wait.
[  210.790325][ T7075] veth1_vlan: entered promiscuous mode
[  210.879380][ T7385] XFS (loop4): Quotacheck: Done.
[  210.994417][ T5533] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  211.070384][ T7380] ERROR: (device loop2): diAllocAG: nfreeinos = 0, but iag on freelist
[  211.070384][ T7380] 
[  211.096706][ T7075] veth0_macvtap: entered promiscuous mode
[  211.113894][ T7380] ialloc: diAlloc returned -5!
[  211.141823][ T7075] veth1_macvtap: entered promiscuous mode
[  211.273292][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.313413][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.352984][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.383879][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.420455][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.452946][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.520283][ T7075] batman_adv: batadv0: Interface activated: batadv_slave_0
[  211.570439][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.600075][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.632235][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.666979][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.699219][ T7075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.710462][ T7075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.736172][ T7075] batman_adv: batadv0: Interface activated: batadv_slave_1
[  211.772459][ T7075] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  211.801448][ T7075] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  211.822587][ T7075] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  211.843272][ T7075] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.927975][ T7084] 8021q: adding VLAN 0 to HW filter on device batadv0
[  212.241353][ T7084] veth0_vlan: entered promiscuous mode
[  212.249049][  T767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.276140][  T767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.333324][ T7084] veth1_vlan: entered promiscuous mode
[  212.414916][  T767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.449176][  T767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.489251][ T7084] veth0_macvtap: entered promiscuous mode
[  212.556296][ T7084] veth1_macvtap: entered promiscuous mode
[  212.601505][ T7084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.624223][ T7084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.666046][ T7084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.715740][ T7084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.750955][ T7084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.782587][ T7084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.793239][ T7425] loop0: detected capacity change from 0 to 32768
[  212.804315][ T7084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.826217][ T7425] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (7425)
[  212.835182][ T7084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.915707][ T7084] batman_adv: batadv0: Interface activated: batadv_slave_0
[  212.952593][ T7425] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  213.002786][ T7084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  213.003659][ T7425] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  213.032289][ T7084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.090665][ T7084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  213.102474][ T7465] loop4: detected capacity change from 0 to 512
[  213.156638][ T7084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.184300][ T7465] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  213.238918][ T7465] EXT4-fs (loop4): invalid journal inode
[  213.253044][ T7465] EXT4-fs (loop4): can't get journal size
[  213.264362][ T7084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  213.275405][ T7084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.350045][ T7465] EXT4-fs (loop4): 1 truncate cleaned up
[  213.360494][ T7084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  213.371906][ T7465] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  213.436148][ T7084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.447877][ T7084] batman_adv: batadv0: Interface activated: batadv_slave_1
[  213.493667][ T7425] BTRFS info (device loop0): rebuilding free space tree
[  213.516332][ T7493] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  213.541615][ T7084] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.576223][ T7084] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.603585][ T7084] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.633903][ T7084] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.651536][ T7425] BTRFS info (device loop0): disabling free space tree
[  213.708308][ T7425] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  213.719445][ T7425] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  213.866212][   T29] audit: type=1800 audit(1717964301.975:14): pid=7425 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0
[  213.933281][ T7498] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[  214.024804][ T5533] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.063623][ T5351] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  214.107177][ T1043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.175679][ T1043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.372578][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.428497][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.606437][ T7516] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  214.914224][   T29] audit: type=1804 audit(1717964303.055:15): pid=7521 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir720039922/syzkaller.NYBgBc/55/bus" dev="sda1" ino=1950 res=1 errno=0
[  214.998796][ T7525] Bluetooth: MGMT ver 1.22
[  215.047899][   T29] audit: type=1804 audit(1717964303.085:16): pid=7521 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir720039922/syzkaller.NYBgBc/55/bus" dev="sda1" ino=1950 res=1 errno=0
[  215.190866][   T29] audit: type=1804 audit(1717964303.085:17): pid=7521 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir720039922/syzkaller.NYBgBc/55/bus" dev="sda1" ino=1950 res=1 errno=0
[  215.337155][ T7534] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  215.686953][ T7500] loop1: detected capacity change from 0 to 32768
[  215.703091][ T7500] XFS: attr2 mount option is deprecated.
[  215.731740][ T7500] XFS: ikeep mount option is deprecated.
[  215.756545][ T7500] XFS: noikeep mount option is deprecated.
[  215.811832][ T7500] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  215.968045][ T7500] XFS (loop1): Ending clean mount
[  216.041669][ T7500] XFS (loop1): Quotacheck needed: Please wait.
[  216.140418][ T7500] XFS (loop1): Quotacheck: Done.
[  216.215307][ T7075] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  216.922079][ T7549] loop0: detected capacity change from 0 to 32768
[  216.954368][ T7549] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (7549)
[  217.061236][ T7549] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  217.077870][ T7598] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'.
[  217.123284][ T7549] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  217.191073][ T7603] overlayfs: missing 'lowerdir'
[  217.545850][ T7549] BTRFS info (device loop0): rebuilding free space tree
[  217.639374][ T7549] BTRFS info (device loop0): disabling free space tree
[  217.675297][ T7549] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  217.709350][ T7549] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  217.837627][   T29] audit: type=1800 audit(1717964305.985:18): pid=7549 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0
[  218.008053][ T7654] loop1: detected capacity change from 0 to 2048
[  218.035010][ T5351] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  218.089204][ T7654]  loop1: p1 < > p3
[  218.112876][ T7654] loop1: p3 size 134217728 extends beyond EOD, truncated
[  218.190645][   T29] audit: type=1800 audit(1717964306.335:19): pid=7654 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1944 res=0 errno=0
[  218.503668][ T6475] udevd[6475]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  218.537290][ T6598] udevd[6598]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  218.726678][ T7677] overlayfs: missing 'lowerdir'
[  218.896104][ T7682] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  219.087406][ T7691] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[  219.167823][ T7695] loop2: detected capacity change from 0 to 128
[  219.199751][ T7695] VFS: Found a Xenix FS (block size = 512) on device loop2
[  219.424232][ T7699] sysv_free_block: trying to free block not in datazone
[  219.473834][ T7697] syz-executor.2: attempt to access beyond end of device
[  219.473834][ T7697] loop2: rw=2049, sector=209285, nr_sectors = 1 limit=128
[  219.959444][ T7693] loop0: detected capacity change from 0 to 32768
[  219.988466][ T7693] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (7693)
[  220.054106][ T7707] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  220.062638][ T7693] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  220.109046][ T7693] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  220.176913][ T6242] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  220.343204][ T7693] BTRFS info (device loop0): rebuilding free space tree
[  220.448694][ T7693] BTRFS info (device loop0): disabling free space tree
[  220.489171][ T7693] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  220.533561][ T7693] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  220.576860][ T7738] overlayfs: missing 'lowerdir'
[  220.663302][   T29] audit: type=1800 audit(1717964308.805:20): pid=7693 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0
[  220.752973][ T5351] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  220.838721][ T7744] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
[  220.851179][ T7689] loop3: detected capacity change from 0 to 32768
[  220.892247][ T7744] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.900050][ T7744] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.961184][ T7689] ERROR: (device loop3): diNewExt: no free extents
[  220.961184][ T7689] 
[  221.022894][ T7689] ialloc: diAlloc returned -5!
[  221.283550][ T7754] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[  221.433169][ T7689] ERROR: (device loop3): diAllocAG: nfreeinos = 0, but iag on freelist
[  221.433169][ T7689] 
[  221.562121][ T7689] ialloc: diAlloc returned -5!
[  221.620641][ T7763] loop1: detected capacity change from 0 to 128
[  221.698317][ T7763] VFS: Found a Xenix FS (block size = 512) on device loop1
[  221.901288][ T7769] sysv_free_block: trying to free block not in datazone
[  221.927458][ T7770] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  221.981174][ T7770] 8021q: adding VLAN 0 to HW filter on device team0
[  222.042807][ T7770] bond0: (slave team0): Enslaving as an active interface with an up link
[  223.290232][ T7075] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  223.359765][ T7783] overlayfs: missing 'workdir'
[  224.219442][ T7797] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[  224.233791][ T7797] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.242732][ T7797] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.805676][ T7808] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
[  227.050942][ T7814] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  227.169244][ T7825] loop2: detected capacity change from 0 to 256
[  227.173433][ T7814] 8021q: adding VLAN 0 to HW filter on device team0
[  227.211430][ T7814] bond0: (slave team0): Enslaving as an active interface with an up link
[  227.886996][   T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.959353][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  228.131082][   T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.283841][   T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.396633][ T7852] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[  228.483517][ T7852] 8021q: adding VLAN 0 to HW filter on device team0
[  228.521724][ T7852] bond0: (slave team0): Enslaving as an active interface with an up link
[  228.631028][   T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.702751][ T7830] loop1: detected capacity change from 0 to 32768
[  228.727638][ T7861] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
[  228.743322][ T7830] ERROR: (device loop1): diNewExt: no free extents
[  228.743322][ T7830] 
[  228.769543][ T7830] ialloc: diAlloc returned -5!
[  229.020117][ T7866] overlayfs: missing 'workdir'
[  229.033637][ T5109] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  229.043872][ T5109] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  229.052535][ T5109] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  229.069382][ T5109] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  229.078853][ T5109] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  229.087818][ T5109] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  229.177842][   T35] bridge_slave_1: left allmulticast mode
[  229.190752][   T35] bridge_slave_1: left promiscuous mode
[  229.197576][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.215899][   T35] bridge_slave_0: left allmulticast mode
[  229.254963][   T35] bridge_slave_0: left promiscuous mode
[  229.267732][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.398105][   T29] audit: type=1804 audit(1717964317.545:21): pid=7873 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2822460626/syzkaller.leqyPm/18/bus" dev="sda1" ino=1956 res=1 errno=0
[  229.521484][   T29] audit: type=1804 audit(1717964317.635:22): pid=7873 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2822460626/syzkaller.leqyPm/18/bus" dev="sda1" ino=1956 res=1 errno=0
[  229.629877][   T29] audit: type=1804 audit(1717964317.695:23): pid=7873 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2822460626/syzkaller.leqyPm/18/bus" dev="sda1" ino=1956 res=1 errno=0
[  229.719843][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  230.347788][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  230.383698][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  230.408561][   T35] bond0 (unregistering): (slave team0): Releasing backup interface
[  230.430359][   T35] bond0 (unregistering): Released all slaves
[  231.005970][ T7919] loop0: detected capacity change from 0 to 256
[  231.078328][ T7919] exfat: Deprecated parameter 'utf8'
[  231.087406][ T7919] exfat: Deprecated parameter 'namecase'
[  231.112766][ T7919] exfat: Deprecated parameter 'utf8'
[  231.164859][ T7920] loop3: detected capacity change from 0 to 128
[  231.174148][ T5109] Bluetooth: hci3: command tx timeout
[  231.197066][ T7920] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  231.199340][ T7919] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  231.255782][ T7920] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  231.657130][ T7919] exFAT-fs (loop0): error, tried to truncate zeroed cluster.
[  232.239860][ T7941] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  232.347934][   T35] hsr_slave_0: left promiscuous mode
[  232.361779][   T35] hsr_slave_1: left promiscuous mode
[  232.395650][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  232.433070][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  232.478441][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  232.494445][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  232.548531][   T35] veth1_macvtap: left promiscuous mode
[  232.567502][   T35] veth0_macvtap: left promiscuous mode
[  232.584687][   T35] veth1_vlan: left promiscuous mode
[  232.611254][   T35] veth0_vlan: left promiscuous mode
[  233.263742][ T5109] Bluetooth: hci3: command tx timeout
[  233.674078][   T29] audit: type=1800 audit(1717964321.815:24): pid=7919 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048649 res=0 errno=0
[  233.982345][ T7981] loop1: detected capacity change from 0 to 128
[  234.005530][ T7981] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  234.065544][ T7981] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  234.708096][   T35] team0 (unregistering): Port device team_slave_1 removed
[  234.806161][   T35] team0 (unregistering): Port device team_slave_0 removed
[  235.249682][ T7991] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'.
[  235.283041][ T7991] 0�X���: renamed from 
61�X���
[  235.334086][ T5109] Bluetooth: hci3: command tx timeout
[  235.342436][ T7999] loop3: detected capacity change from 0 to 512
[  235.359536][ T7991] A link change request failed with some changes committed already. Interface 
60�X��� may have been left with an inconsistent configuration, please check.
[  235.402022][ T7999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.454546][ T7999] ext4 filesystem being mounted at /root/syzkaller-testdir2822460626/syzkaller.leqyPm/23/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  235.738215][ T7867] chnl_net:caif_netlink_parms(): no params data found
[  235.999394][ T7084] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.092112][ T7867] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.114180][ T7867] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.127177][ T7867] bridge_slave_0: entered allmulticast mode
[  236.147771][ T7867] bridge_slave_0: entered promiscuous mode
[  236.169740][ T7867] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.181738][ T7867] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.227327][ T7867] bridge_slave_1: entered allmulticast mode
[  236.272418][ T7867] bridge_slave_1: entered promiscuous mode
[  236.356711][ T8036] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  236.420532][ T7867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  236.452244][ T7867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  236.655942][ T7867] team0: Port device team_slave_0 added
[  236.690078][ T7867] team0: Port device team_slave_1 added
[  236.852536][ T7867] batman_adv: batadv0: Adding interface: batadv_slave_0
[  236.878611][ T7867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.984835][ T7867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  237.078051][ T7867] batman_adv: batadv0: Adding interface: batadv_slave_1
[  237.176765][ T7867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  237.266503][ T7867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  237.405590][ T8060] loop3: detected capacity change from 0 to 128
[  237.418077][ T5109] Bluetooth: hci3: command tx timeout
[  237.463002][ T8060] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  237.528387][ T7867] hsr_slave_0: entered promiscuous mode
[  237.595410][ T7867] hsr_slave_1: entered promiscuous mode
[  237.629868][ T8060] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  237.664103][ T7867] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  237.671709][ T7867] Cannot create hsr debugfs directory
[  238.818330][ T8065] loop0: detected capacity change from 0 to 40427
[  238.836644][ T8065] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  238.853425][ T8065] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  238.909473][ T8065] F2FS-fs (loop0): Found nat_bits in checkpoint
[  238.986758][ T8100] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  239.036930][ T8065] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  239.060157][ T8065] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  239.256281][ T8107] syz-executor.0: attempt to access beyond end of device
[  239.256281][ T8107] loop0: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  239.367333][   T29] audit: type=1804 audit(1717964327.505:25): pid=8107 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2810310976/syzkaller.sPy6uc/128/bus/bus" dev="loop0" ino=10 res=1 errno=0
[  239.518107][ T8107] syz-executor.0: attempt to access beyond end of device
[  239.518107][ T8107] loop0: rw=2049, sector=45224, nr_sectors = 8 limit=40427
[  239.568651][   T29] audit: type=1804 audit(1717964327.695:26): pid=8116 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4292844655/syzkaller.7KQD4q/110/bus" dev="sda1" ino=1960 res=1 errno=0
[  239.714065][   T29] audit: type=1804 audit(1717964327.695:27): pid=8116 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir4292844655/syzkaller.7KQD4q/110/bus" dev="sda1" ino=1960 res=1 errno=0
[  239.824446][   T29] audit: type=1804 audit(1717964327.705:28): pid=8116 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4292844655/syzkaller.7KQD4q/110/bus" dev="sda1" ino=1960 res=1 errno=0
[  239.852546][ T8107] syz-executor.0: attempt to access beyond end of device
[  239.852546][ T8107] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  239.875582][ T8107] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  239.938762][ T8107] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  239.946438][ T8107] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  240.081570][ T8128] loop4: detected capacity change from 0 to 64
[  240.197782][ T8130] loop3: detected capacity change from 0 to 2048
[  240.309951][ T8130]  loop3: p1 < > p3
[  240.336943][ T8130] loop3: p3 size 134217728 extends beyond EOD, truncated
[  240.420007][   T29] audit: type=1800 audit(1717964328.565:29): pid=8130 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1939 res=0 errno=0
[  240.783877][ T7867] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  240.893740][ T8139] loop3: detected capacity change from 0 to 32768
[  240.925464][ T8139] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  240.938765][ T7867] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  240.987413][ T7867] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  241.097132][ T8139] XFS (loop3): Ending clean mount
[  241.148662][ T7867] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  241.166038][   T57] XFS (loop3): Metadata CRC error detected at xfs_rmapbt_read_verify+0x41/0xd0, xfs_rmapbt block 0x14 
[  241.205823][   T57] XFS (loop3): Unmount and run xfs_repair
[  241.211591][   T57] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  241.274065][   T57] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  241.294053][   T57] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80  ..P.............
[  241.302944][   T57] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  241.310565][ T8106] loop1: detected capacity change from 0 to 40427
[  241.348265][   T57] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  241.348623][ T8106] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  241.381511][   T57] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  241.401111][ T8106] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  241.436459][   T57] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  241.481286][ T8106] F2FS-fs (loop1): Found nat_bits in checkpoint
[  241.483517][   T57] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  241.501357][ T7867] 8021q: adding VLAN 0 to HW filter on device bond0
[  241.522183][   T57] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  241.549215][ T8139] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x14 len 4 error 74
[  241.563533][ T8139] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  241.578378][ T8139] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  241.603001][ T7867] 8021q: adding VLAN 0 to HW filter on device team0
[  241.629486][ T7084] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  241.650281][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.657551][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  241.717642][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.725085][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  241.798847][ T8106] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  241.822389][ T8106] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  242.885177][ T8184] netlink: 'syz-executor.3': attribute type 8 has an invalid length.
[  242.946266][ T8184] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'.
[  243.051749][ T7867] 8021q: adding VLAN 0 to HW filter on device batadv0
[  243.080760][   T29] audit: type=1804 audit(1717964331.225:30): pid=8187 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2810310976/syzkaller.sPy6uc/131/bus" dev="sda1" ino=1953 res=1 errno=0
[  243.128780][ T8137] loop4: detected capacity change from 0 to 40427
[  243.161457][   T29] audit: type=1804 audit(1717964331.225:31): pid=8187 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2810310976/syzkaller.sPy6uc/131/bus" dev="sda1" ino=1953 res=1 errno=0
[  243.207451][ T8137] F2FS-fs (loop4): Mismatch start address, segment0(512) cp_blkaddr(175702528)
[  243.247357][ T7867] veth0_vlan: entered promiscuous mode
[  243.251093][ T8137] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  243.281254][ T7867] veth1_vlan: entered promiscuous mode
[  243.320975][ T8137] F2FS-fs (loop4): invalid crc value
[  243.326585][   T29] audit: type=1804 audit(1717964331.225:32): pid=8187 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2810310976/syzkaller.sPy6uc/131/bus" dev="sda1" ino=1953 res=1 errno=0
[  243.440673][ T8137] F2FS-fs (loop4): Found nat_bits in checkpoint
[  243.480429][ T7867] veth0_macvtap: entered promiscuous mode
[  243.532064][ T7867] veth1_macvtap: entered promiscuous mode
[  243.625762][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  243.653640][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.693055][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  243.722456][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.762155][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  243.810527][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.844261][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  243.886266][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.920113][ T7867] batman_adv: batadv0: Interface activated: batadv_slave_0
[  243.951924][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  243.999711][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.028696][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.082695][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.118178][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.156244][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.187796][ T7867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.234045][ T7867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.255438][ T7867] batman_adv: batadv0: Interface activated: batadv_slave_1
[  244.329209][ T7867] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  244.352253][ T7867] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  244.390894][ T7867] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  244.424324][ T7867] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  244.825720][ T8212] loop3: detected capacity change from 0 to 32768
[  244.953911][ T2434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.961937][ T2434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.000508][ T8212] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  245.027229][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.082976][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.158503][ T8201] loop0: detected capacity change from 0 to 40427
[  245.259273][ T8201] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  245.299061][ T8212] XFS (loop3): Ending clean mount
[  245.334564][ T5148] XFS (loop3): Metadata CRC error detected at xfs_rmapbt_read_verify+0x41/0xd0, xfs_rmapbt block 0x14 
[  245.352325][ T8201] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  245.376397][ T5148] XFS (loop3): Unmount and run xfs_repair
[  245.406352][ T5148] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  245.428829][ T5148] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  245.464094][ T5148] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80  ..P.............
[  245.520314][ T5148] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  245.599662][ T8201] F2FS-fs (loop0): Found nat_bits in checkpoint
[  245.616713][ T5148] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  246.503228][ T8201] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  246.533226][ T8201] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  246.551069][ T5148] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  246.676166][ T5148] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  246.697286][ T5148] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  246.734382][ T5148] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  246.766428][ T8212] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x14 len 4 error 74
[  246.798584][ T8212] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  246.813294][ T8212] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  246.839830][ T7084] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  246.970276][ T8264] netlink: 'syz-executor.4': attribute type 8 has an invalid length.
[  247.025621][ T8264] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.4'.
[  247.104757][ T8208] loop1: detected capacity change from 0 to 32768
[  247.141430][ T8208] XFS: attr2 mount option is deprecated.
[  247.148723][ T8208] XFS: ikeep mount option is deprecated.
[  247.162419][ T8208] XFS: noikeep mount option is deprecated.
[  247.250215][ T8208] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/loop1": -EINTR
[  247.995257][ T8286] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'.
[  248.425413][ T8294] wg2: entered promiscuous mode
[  248.490468][ T8294] wg2: entered allmulticast mode
[  249.155019][ T8320] loop4: detected capacity change from 0 to 32768
[  249.180302][ T8323] netlink: 'syz-executor.3': attribute type 8 has an invalid length.
[  249.208447][ T8323] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'.
[  249.267949][ T8320] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  249.416955][ T8277] loop1: detected capacity change from 0 to 40427
[  249.439205][ T8277] F2FS-fs (loop1): Mismatch start address, segment0(512) cp_blkaddr(175702528)
[  249.456607][ T8277] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  249.490499][ T8320] XFS (loop4): Ending clean mount
[  249.497860][ T8277] F2FS-fs (loop1): invalid crc value
[  249.553092][ T5149] XFS (loop4): Metadata CRC error detected at xfs_rmapbt_read_verify+0x41/0xd0, xfs_rmapbt block 0x14 
[  249.589607][ T8277] F2FS-fs (loop1): Found nat_bits in checkpoint
[  249.629258][ T5149] XFS (loop4): Unmount and run xfs_repair
[  249.670957][ T5149] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  249.696307][ T5149] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  249.759568][ T5149] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80  ..P.............
[  249.783327][ T5149] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  249.807628][ T5149] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  249.825611][ T8347] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'.
[  249.852778][ T5149] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  249.914079][ T5149] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  249.961323][ T5149] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  250.007379][ T5149] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  250.427503][ T8352] loop3: detected capacity change from 0 to 164
[  250.744009][ T8352] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  251.073086][ T8339] loop0: detected capacity change from 0 to 32768
[  251.100299][ T8339] XFS: attr2 mount option is deprecated.
[  251.129588][ T8339] XFS: ikeep mount option is deprecated.
[  251.155649][ T8339] XFS: noikeep mount option is deprecated.
[  251.240354][ T8339] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  251.315315][ T8339] XFS (loop0): Ending clean mount
[  251.336361][ T8339] XFS (loop0): Quotacheck needed: Please wait.
[  251.443703][ T8339] XFS (loop0): Quotacheck: Done.
[  251.538686][ T5351] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  251.660923][ T8277] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  251.670505][ T8277] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  252.181638][ T8320] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x14 len 4 error 74
[  252.266236][ T8320] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  252.281846][ T8320] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  252.332025][ T5533] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  253.174634][ T8414] netlink: 'syz-executor.3': attribute type 8 has an invalid length.
[  253.216494][ T8414] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'.
[  253.459241][ T8424] netlink: 4100 bytes leftover after parsing attributes in process `syz-executor.0'.
[  253.505494][ T8431] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'.
[  253.872854][ T8446] loop0: detected capacity change from 0 to 512
[  253.907699][ T8446] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  253.970672][ T8446] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  254.014235][ T8446] System zones: 1-12
[  254.037365][ T8446] EXT4-fs (loop0): 1 truncate cleaned up
[  254.056308][ T8446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  254.193790][ T5351] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor.0: path /root/syzkaller-testdir2810310976/syzkaller.sPy6uc/140/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  254.237318][ T5351] EXT4-fs error (device loop0): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  254.264187][ T5351] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor.0: path /root/syzkaller-testdir2810310976/syzkaller.sPy6uc/140/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  254.296598][ T5351] EXT4-fs error (device loop0): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  254.323235][ T5351] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor.0: path /root/syzkaller-testdir2810310976/syzkaller.sPy6uc/140/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  254.363031][ T5351] EXT4-fs error (device loop0): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  254.389645][ T5351] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor.0: path /root/syzkaller-testdir2810310976/syzkaller.sPy6uc/140/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  254.422372][ T5351] EXT4-fs error (device loop0): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  254.437223][ T8452] loop2: detected capacity change from 0 to 164
[  254.490716][ T5351] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor.0: path /root/syzkaller-testdir2810310976/syzkaller.sPy6uc/140/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  254.523835][ T5351] EXT4-fs error (device loop0): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  254.724071][ T8452] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  255.010088][ T5351] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.091587][   T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.192298][   T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.280627][   T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.389844][   T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.652340][   T35] bridge_slave_1: left allmulticast mode
[  255.682842][   T35] bridge_slave_1: left promiscuous mode
[  255.714395][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.737324][   T35] bridge_slave_0: left allmulticast mode
[  255.743002][   T35] bridge_slave_0: left promiscuous mode
[  255.798701][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.046117][ T1244] ieee802154 phy0 wpan0: encryption failed: -22
[  256.052445][ T1244] ieee802154 phy1 wpan1: encryption failed: -22
[  256.468005][ T8444] loop4: detected capacity change from 0 to 32768
[  256.624592][ T8444] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  256.890838][ T8482] netlink: 'syz-executor.2': attribute type 8 has an invalid length.
[  256.973803][ T8482] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.2'.
[  257.018924][ T8444] XFS (loop4): Ending clean mount
[  257.082267][ T5533] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  257.547490][ T5116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  257.558495][ T5116] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  257.567001][ T5116] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  257.583720][ T5116] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  257.592058][ T5116] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  257.599461][ T5116] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  258.021961][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  258.036881][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  258.052497][   T35] bond0 (unregistering): (slave team0): Releasing backup interface
[  258.093555][   T35] bond0 (unregistering): Released all slaves
[  258.158825][ T8485] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'.
[  259.539383][   T35] hsr_slave_0: left promiscuous mode
[  259.561406][   T35] hsr_slave_1: left promiscuous mode
[  259.581656][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  259.604466][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  259.634243][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  259.642032][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  259.697416][ T8529] loop4: detected capacity change from 0 to 164
[  259.734235][ T5116] Bluetooth: hci2: command tx timeout
[  260.034042][ T8529] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  260.693847][   T35] veth1_macvtap: left promiscuous mode
[  260.714146][   T35] veth0_macvtap: left promiscuous mode
[  260.719807][   T35] veth1_vlan: left promiscuous mode
[  260.731644][   T35] veth0_vlan: left promiscuous mode
[  261.578740][ T8540] loop1: detected capacity change from 0 to 32768
[  261.619735][ T8540] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  261.810339][ T8540] XFS (loop1): Ending clean mount
[  261.814424][ T5116] Bluetooth: hci2: command tx timeout
[  261.938617][ T8560] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  261.956896][ T7075] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  262.391432][   T35] team0 (unregistering): Port device team_slave_1 removed
[  262.440698][   T35] team0 (unregistering): Port device team_slave_0 removed
[  263.786540][ T8584] loop3: detected capacity change from 0 to 164
[  263.894380][ T5116] Bluetooth: hci2: command tx timeout
[  264.054053][ T8584] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  265.034970][ T8585] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  265.131845][ T8497] chnl_net:caif_netlink_parms(): no params data found
[  265.457796][ T8594] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[  265.485248][ T8598] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[  265.574249][ T8598] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[  265.655568][ T8497] bridge0: port 1(bridge_slave_0) entered blocking state
[  265.668276][ T8497] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.705242][ T8497] bridge_slave_0: entered allmulticast mode
[  265.746110][ T8497] bridge_slave_0: entered promiscuous mode
[  265.770709][ T8497] bridge0: port 2(bridge_slave_1) entered blocking state
[  265.780752][ T8608] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  265.796233][ T8497] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.807637][ T8497] bridge_slave_1: entered allmulticast mode
[  265.835363][ T8497] bridge_slave_1: entered promiscuous mode
[  265.974182][ T5116] Bluetooth: hci2: command tx timeout
[  266.124347][ T8609] loop4: detected capacity change from 0 to 32768
[  266.213791][ T8609] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  266.265909][ T8497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  266.308858][ T8497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  266.480999][ T8497] team0: Port device team_slave_0 added
[  266.485332][ T8609] XFS (loop4): Ending clean mount
[  266.505816][ T8497] team0: Port device team_slave_1 added
[  266.590540][ T5533] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  266.655098][ T8497] batman_adv: batadv0: Adding interface: batadv_slave_0
[  266.662041][ T8497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  266.730320][ T8497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  266.760736][ T8497] batman_adv: batadv0: Adding interface: batadv_slave_1
[  266.769782][ T8497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  266.805794][ T8497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  267.067677][ T8497] hsr_slave_0: entered promiscuous mode
[  267.111870][ T8497] hsr_slave_1: entered promiscuous mode
[  267.634729][ T8656] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  268.718787][ T8677] loop3: detected capacity change from 0 to 164
[  269.003993][ T8677] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  270.283402][ T8685] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  270.384428][ T8685] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  270.408011][ T8690] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  270.979254][ T8712] netlink: 4100 bytes leftover after parsing attributes in process `syz-executor.4'.
[  271.618071][ T8497] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  271.690846][ T8497] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  271.722553][ T8497] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  271.774011][ T8726] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  271.774533][ T8497] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  272.128247][ T8497] 8021q: adding VLAN 0 to HW filter on device bond0
[  272.192410][ T8497] 8021q: adding VLAN 0 to HW filter on device team0
[  272.229311][   T29] audit: type=1326 audit(1717964360.375:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8733 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0fc7cf69 code=0x7ffc0000
[  272.231817][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.258415][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  272.320142][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.327344][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  272.435421][   T29] audit: type=1326 audit(1717964360.395:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8733 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0fc7cf69 code=0x7ffc0000
[  272.515640][   T29] audit: type=1326 audit(1717964360.395:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8733 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9d0fc7cf69 code=0x7ffc0000
[  272.632642][   T29] audit: type=1326 audit(1717964360.395:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8733 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0fc7cf69 code=0x7ffc0000
[  272.687432][ T8739] loop3: detected capacity change from 0 to 164
[  272.736286][   T29] audit: type=1326 audit(1717964360.395:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8733 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0fc7cf69 code=0x7ffc0000
[  272.845522][   T29] audit: type=1326 audit(1717964360.395:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8733 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f9d0fc7cf69 code=0x7ffc0000
[  272.935139][   T29] audit: type=1326 audit(1717964360.405:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8733 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0fc7cf69 code=0x7ffc0000
[  273.004012][ T8739] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  273.043110][ T8497] 8021q: adding VLAN 0 to HW filter on device batadv0
[  273.208170][ T8497] veth0_vlan: entered promiscuous mode
[  273.260658][ T8497] veth1_vlan: entered promiscuous mode
[  273.362997][ T8497] veth0_macvtap: entered promiscuous mode
[  273.406379][ T8497] veth1_macvtap: entered promiscuous mode
[  273.474502][ T8497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  273.496070][ T8497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.530325][ T8497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  273.541276][ T8497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.554352][ T8497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  273.570862][ T8497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.594064][ T8497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  273.610249][ T8497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.630497][ T8497] batman_adv: batadv0: Interface activated: batadv_slave_0
[  273.728788][ T8497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  273.779752][ T8497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.800676][ T8497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  273.830296][ T8497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.854367][ T8497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  273.880621][ T8497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.919647][ T8497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  273.945792][ T8497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.974996][ T8497] batman_adv: batadv0: Interface activated: batadv_slave_1
[  274.031001][ T8497] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  274.056661][ T8497] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  274.089568][ T8497] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  274.114316][ T8497] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  274.729527][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.758907][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.872675][ T2478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.886561][ T2478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.336889][ T8800] netlink: 4100 bytes leftover after parsing attributes in process `syz-executor.2'.
[  276.310875][ T8834] loop0: detected capacity change from 0 to 512
[  276.371335][ T8834] EXT4-fs: Ignoring removed nomblk_io_submit option
[  276.390659][ T8834] EXT4-fs: Ignoring removed oldalloc option
[  276.420814][ T8834] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 11 (level 0)
[  276.505858][ T8834] EXT4-fs (loop0): Remounting filesystem read-only
[  276.535459][ T8834] EXT4-fs (loop0): 1 truncate cleaned up
[  276.564366][ T8834] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  276.704070][ T8497] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.967454][ T8840] loop3: detected capacity change from 0 to 164
[  277.274021][ T8840] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  279.280614][ T8902] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[  279.318527][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  279.368273][ T8902] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[  279.400446][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  279.627100][ T8912] netlink: 4100 bytes leftover after parsing attributes in process `syz-executor.4'.
[  280.738971][ T8933] loop4: detected capacity change from 0 to 164
[  281.033991][ T8933] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  282.873257][ T8962] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  282.909569][ T8952] netlink: 4100 bytes leftover after parsing attributes in process `syz-executor.1'.
[  282.923761][ T8962] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  282.958637][ T8962] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  282.999553][ T8962] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  283.470093][ T1670] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  283.725969][ T8976] netlink: 'syz-executor.1': attribute type 7 has an invalid length.
[  283.841312][ T8985] loop0: detected capacity change from 0 to 164
[  283.889977][ T8985] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  284.560194][ T1670] usb 4-1: Using ep0 maxpacket: 32
[  284.579627][ T8976] netlink: 'syz-executor.1': attribute type 39 has an invalid length.
[  284.618778][ T1670] usb 4-1: config 226 has an invalid interface number: 167 but max is 1
[  284.686257][ T1670] usb 4-1: config 226 has an invalid interface number: 140 but max is 1
[  284.751839][ T1670] usb 4-1: config 226 has no interface number 0
[  284.808602][ T1670] usb 4-1: config 226 has no interface number 1
[  284.862777][ T1670] usb 4-1: config 226 interface 167 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  284.912885][ T8995] xt_limit: Overflow, try lower: 2147483649/128
[  284.943363][ T1670] usb 4-1: config 226 interface 167 altsetting 9 endpoint 0xC has invalid maxpacket 80, setting to 64
[  285.004117][ T1670] usb 4-1: config 226 interface 167 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  285.031237][ T8999] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  285.068262][ T1670] usb 4-1: config 226 interface 167 altsetting 9 has a duplicate endpoint with address 0x3, skipping
[  285.080135][ T8999] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  285.151923][ T1670] usb 4-1: config 226 interface 140 altsetting 8 endpoint 0xF has invalid maxpacket 1023, setting to 64
[  285.190032][ T9002] hsr_slave_1 (unregistering): left promiscuous mode
[  285.244709][ T1670] usb 4-1: config 226 interface 140 altsetting 8 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  285.307504][ T1670] usb 4-1: config 226 interface 140 altsetting 8 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  285.375911][ T1670] usb 4-1: config 226 interface 140 altsetting 8 has a duplicate endpoint with address 0x9, skipping
[  285.470912][ T1670] usb 4-1: config 226 interface 140 altsetting 8 has a duplicate endpoint with address 0x3, skipping
[  285.535903][ T1670] usb 4-1: config 226 interface 140 altsetting 8 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  285.570997][ T9004] netlink: 4100 bytes leftover after parsing attributes in process `syz-executor.0'.
[  285.601497][ T1670] usb 4-1: config 226 interface 140 altsetting 8 has a duplicate endpoint with address 0x5, skipping
[  285.682953][ T9010] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[  285.699775][ T1670] usb 4-1: config 226 interface 140 altsetting 8 endpoint 0xD has invalid maxpacket 1023, setting to 64
[  285.740539][ T9010] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  285.762852][ T1670] usb 4-1: config 226 interface 140 altsetting 8 has a duplicate endpoint with address 0x5, skipping
[  285.804308][ T9010] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[  285.834008][ T1670] usb 4-1: config 226 interface 140 altsetting 8 has a duplicate endpoint with address 0xB, skipping
[  285.862665][ T9010] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  285.898586][ T1670] usb 4-1: config 226 interface 140 altsetting 8 has a duplicate endpoint with address 0xD, skipping
[  285.996502][ T1670] usb 4-1: config 226 interface 140 altsetting 8 has a duplicate endpoint with address 0xB, skipping
[  286.095787][ T1670] usb 4-1: config 226 interface 140 altsetting 8 endpoint 0xA has invalid maxpacket 1024, setting to 64
[  286.152365][ T1670] usb 4-1: config 226 interface 140 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  286.210531][ T1670] usb 4-1: config 226 interface 167 has no altsetting 0
[  286.251894][ T1670] usb 4-1: config 226 interface 140 has no altsetting 0
[  286.292442][ T1670] usb 4-1: string descriptor 0 read error: -71
[  286.327466][ T1670] usb 4-1: New USB device found, idVendor=19d2, idProduct=1271, bcdDevice=30.e8
[  286.370485][ T1670] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.431505][ T1670] usb 4-1: rejected 1 configuration due to insufficient available bus power
[  286.512203][ T1670] usb 4-1: no configuration chosen from 1 choice
[  286.549539][ T1670] usb 4-1: USB disconnect, device number 4
[  286.858115][ T8994] loop4: detected capacity change from 0 to 40427
[  286.907509][ T8994] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[  286.944577][ T8994] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  287.016313][ T8994] F2FS-fs (loop4): Found nat_bits in checkpoint
[  287.224220][ T8994] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  287.228346][ T9036] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'.
[  287.231307][ T8994] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  287.382651][   T29] audit: type=1804 audit(1717964375.525:40): pid=8994 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4292844655/syzkaller.7KQD4q/149/file2/file0" dev="loop4" ino=10 res=1 errno=0
[  287.383815][ T8994] syz-executor.4: attempt to access beyond end of device
[  287.383815][ T8994] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  287.573813][ T9044] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  287.590663][ T9051] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[  287.626678][ T9051] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  287.645357][ T5533] syz-executor.4: attempt to access beyond end of device
[  287.645357][ T5533] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  287.677140][ T9051] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[  287.702150][ T9051] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  287.719479][ T5533] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  288.717483][ T9072] loop2: detected capacity change from 0 to 164
[  288.994029][ T9072] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  289.930843][ T9079] loop0: detected capacity change from 0 to 32768
[  289.970651][ T9079] ERROR: (device loop0): diNewExt: no free extents
[  289.970651][ T9079] 
[  290.019993][ T9079] ialloc: diAlloc returned -5!
[  290.644187][ T1670] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  290.839107][ T9091] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'.
[  290.860927][ T9089] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  290.934018][ T1670] usb 4-1: Using ep0 maxpacket: 32
[  290.961731][ T1670] usb 4-1: config 226 has an invalid interface number: 167 but max is 1
[  291.014024][ T1670] usb 4-1: config 226 has an invalid interface number: 140 but max is 1
[  291.038542][ T1670] usb 4-1: config 226 has no interface number 0
[  291.056574][ T9089] 8021q: adding VLAN 0 to HW filter on device batadv1
[  291.084013][ T1670] usb 4-1: config 226 has no interface number 1
[  291.090929][ T1670] usb 4-1: config 226 interface 167 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  291.130164][ T9089] bond1: (slave batadv1): Enslaving as a backup interface with an up link
[  291.173445][ T1670] usb 4-1: config 226 interface 167 altsetting 9 endpoint 0xC has invalid maxpacket 80, setting to 64
[  291.223707][ T9095] bond1 (unregistering): (slave batadv1): Releasing backup interface
[  291.238067][ T1670] usb 4-1: config 226 interface 167 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  291.256703][ T9098] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[  291.298701][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  291.308105][ T1670] usb 4-1: config 226 interface 167 altsetting 9 has a duplicate endpoint with address 0x3, skipping
[  291.322216][ T9089] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  291.348825][ T1670] usb 4-1: config 226 interface 140 altsetting 8 endpoint 0xF has invalid maxpacket 1023, setting to 64
[  291.389974][ T1670] usb 4-1: config 226 interface 140 altsetting 8 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  291.411919][ T9095] bond1 (unregistering): Released all slaves
[  291.444206][ T1670] usb 4-1: config 226 interface 140 altsetting 8 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  291.489342][ T1670] usb 4-1: config 226 interface 140 altsetting 8 has a duplicate endpoint with address 0x9, skipping
[  291.530260][ T1670] usb 4-1: config 226 interface 140 altsetting 8 has a duplicate endpoint with address 0x3, skipping
[  291.555954][ T9098] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[  291.565975][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  291.596745][ T1670] usb 4-1: config 226 interface 140 altsetting 8 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  291.651790][ T1670] usb 4-1: config 226 interface 140 altsetting 8 has a duplicate endpoint with address 0x5, skipping
[  291.699598][ T1670] usb 4-1: config 226 interface 140 altsetting 8 endpoint 0xD has invalid maxpacket 1023, setting to 64
[  291.751541][ T1670] usb 4-1: config 226 interface 140 altsetting 8 has a duplicate endpoint with address 0x5, skipping
[  291.798370][ T1670] usb 4-1: config 226 interface 140 altsetting 8 has a duplicate endpoint with address 0xB, skipping
[  292.043327][ T1670] usb 4-1: config 226 interface 140 altsetting 8 has a duplicate endpoint with address 0xD, skipping
[  292.081014][ T1670] usb 4-1: config 226 interface 140 altsetting 8 has a duplicate endpoint with address 0xB, skipping
[  292.440300][ T9115] loop0: detected capacity change from 0 to 32768
[  292.490700][ T9115] ERROR: (device loop0): diNewExt: no free extents
[  292.490700][ T9115] 
[  292.518985][ T9115] ialloc: diAlloc returned -5!
[  292.537510][ T9118] loop2: detected capacity change from 0 to 164
[  292.844054][ T9118] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  293.874131][ T1670] usb 4-1: config 226 interface 140 altsetting 8 endpoint 0xA has invalid maxpacket 1024, setting to 64
[  294.046841][ T1670] usb 4-1: config 226 interface 140 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  294.122905][ T1670] usb 4-1: config 226 interface 167 has no altsetting 0
[  294.152590][ T1670] usb 4-1: config 226 interface 140 has no altsetting 0
[  294.209964][ T1670] usb 4-1: string descriptor 0 read error: -71
[  294.243066][ T1670] usb 4-1: New USB device found, idVendor=19d2, idProduct=1271, bcdDevice=30.e8
[  294.295296][ T1670] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.359189][ T1670] usb 4-1: rejected 1 configuration due to insufficient available bus power
[  294.407724][ T9132] loop4: detected capacity change from 0 to 128
[  294.444017][ T1670] usb 4-1: no configuration chosen from 1 choice
[  294.501759][ T1670] usb 4-1: USB disconnect, device number 5
[  295.074195][ T9143] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  295.100518][ T9144] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  295.218580][ T9143] netlink: 'syz-executor.4': attribute type 3 has an invalid length.
[  295.237304][ T9145] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'.
[  295.313149][ T9145] 8021q: adding VLAN 0 to HW filter on device team1
[  295.700796][ T9140] infiniband syz2: set active
[  295.726315][ T9140] infiniband syz2: added veth1_to_bridge
[  295.744606][ T9140] syz2: rxe_create_cq: returned err = -12
[  296.167686][ T9161] loop1: detected capacity change from 0 to 164
[  296.474032][ T9161] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  296.980857][ T9140] infiniband syz2: Couldn't create ib_mad CQ
[  297.000783][ T9140] infiniband syz2: Couldn't open port 1
[  298.116656][ T9140] RDS/IB: syz2: added
[  298.136754][ T9140] smc: adding ib device syz2 with port count 1
[  298.165226][ T9140] smc:    ib device syz2 port 1 has pnetid 
[  298.178480][ T9180] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
[  298.211043][ T9180] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
[  298.406036][ T9186] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  298.538612][ T9187] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'.
[  299.646129][ T9210] loop1: detected capacity change from 0 to 164
[  300.572412][ T9210] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  300.933083][ T9218] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
[  300.966330][ T9218] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
[  301.201900][ T9226] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  301.287431][ T9229] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'.
[  301.434658][ T9231] overlayfs: failed to resolve './file1': -2
[  302.208255][ T9241] loop3: detected capacity change from 0 to 256
[  302.610164][ T9243] loop0: detected capacity change from 0 to 164
[  304.978306][ T9243] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  305.358771][ T6598] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  305.379537][ T9245] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  305.424395][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  305.515316][ T9251] input: syz0 as /devices/virtual/input/input5
[  305.739440][ T9258] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  305.755932][ T5148] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  305.774647][ T9256] loop1: detected capacity change from 0 to 2048
[  305.778062][ T9258] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'.
[  305.880750][ T9256] Alternate GPT is invalid, using primary GPT.
[  305.888531][ T9260] overlayfs: failed to resolve './file1': -2
[  305.928413][ T9256]  loop1: p1 p2 p3
[  305.964070][ T5148] usb 4-1: Using ep0 maxpacket: 8
[  305.986740][ T5148] usb 4-1: config 0 has no interfaces?
[  306.019061][ T5148] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  306.052110][ T5148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.080850][ T5148] usb 4-1: Product: syz
[  306.101545][ T5148] usb 4-1: Manufacturer: syz
[  306.116658][ T5148] usb 4-1: SerialNumber: syz
[  306.153097][ T5148] usb 4-1: config 0 descriptor??
[  306.389417][ T5148] usb 4-1: USB disconnect, device number 6
[  306.788334][ T9255] loop4: detected capacity change from 0 to 40427
[  306.821124][ T9255] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  306.847310][ T9255] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  306.950175][ T9255] F2FS-fs (loop4): Found nat_bits in checkpoint
[  307.075113][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  307.748228][ T9280] loop3: detected capacity change from 0 to 164
[  308.064087][ T9280] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  308.374244][ T5149] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  308.574022][ T5149] usb 1-1: Using ep0 maxpacket: 32
[  308.582277][ T5149] usb 1-1: config 226 has an invalid interface number: 167 but max is 1
[  308.604618][ T5149] usb 1-1: config 226 has an invalid interface number: 140 but max is 1
[  308.630338][ T5149] usb 1-1: config 226 has no interface number 0
[  308.641063][ T5149] usb 1-1: config 226 has no interface number 1
[  308.657350][ T5149] usb 1-1: config 226 interface 167 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  308.693981][ T5149] usb 1-1: config 226 interface 167 altsetting 9 endpoint 0xC has invalid maxpacket 80, setting to 64
[  308.721852][ T5149] usb 1-1: config 226 interface 167 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  308.740631][ T5149] usb 1-1: config 226 interface 167 altsetting 9 has a duplicate endpoint with address 0x3, skipping
[  308.755879][ T5149] usb 1-1: config 226 interface 140 altsetting 8 endpoint 0xF has invalid maxpacket 1023, setting to 64
[  308.775562][ T5149] usb 1-1: config 226 interface 140 altsetting 8 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  308.794132][ T5149] usb 1-1: config 226 interface 140 altsetting 8 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  308.817214][ T5149] usb 1-1: config 226 interface 140 altsetting 8 has a duplicate endpoint with address 0x9, skipping
[  308.833162][ T5149] usb 1-1: config 226 interface 140 altsetting 8 has a duplicate endpoint with address 0x3, skipping
[  308.852658][ T5149] usb 1-1: config 226 interface 140 altsetting 8 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  308.872900][ T5149] usb 1-1: config 226 interface 140 altsetting 8 has a duplicate endpoint with address 0x5, skipping
[  308.891638][ T5149] usb 1-1: config 226 interface 140 altsetting 8 endpoint 0xD has invalid maxpacket 1023, setting to 64
[  308.914296][ T5149] usb 1-1: config 226 interface 140 altsetting 8 has a duplicate endpoint with address 0x5, skipping
[  308.934948][ T5149] usb 1-1: config 226 interface 140 altsetting 8 has a duplicate endpoint with address 0xB, skipping
[  308.952794][ T5149] usb 1-1: config 226 interface 140 altsetting 8 has a duplicate endpoint with address 0xD, skipping
[  308.971610][ T5149] usb 1-1: config 226 interface 140 altsetting 8 has a duplicate endpoint with address 0xB, skipping
[  308.983575][ T5149] usb 1-1: config 226 interface 140 altsetting 8 endpoint 0xA has invalid maxpacket 1024, setting to 64
[  309.002600][ T5149] usb 1-1: config 226 interface 140 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  309.024976][ T5149] usb 1-1: config 226 interface 167 has no altsetting 0
[  309.032456][ T5149] usb 1-1: config 226 interface 140 has no altsetting 0
[  309.074105][ T5149] usb 1-1: New USB device found, idVendor=19d2, idProduct=1271, bcdDevice=30.e8
[  309.083261][ T5149] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.097823][ T5149] usb 1-1: Manufacturer: ꣍ꨅꮰ熵यᵮ㵡﫶塚ᩖ쏺捒㜶싯完圾䍂⛬Ś鞗칯녮ꭖǻᖶȩ艜嫥噩䁳똟ꪇᒅ쮟㠳⅌翚犗⸙跏ꐭ仚츙႖Ꮴ쁔魌ቄ蕁溽鈰嗃爟璈⿬슻毾뼋⻓ﾵ஠썼ꮵ崾䳗ℱ
[  309.133291][ T5149] usb 1-1: SerialNumber: 《
[  309.215834][ T5149] usb 1-1: rejected 1 configuration due to insufficient available bus power
[  309.253253][ T5149] usb 1-1: no configuration chosen from 1 choice
[  309.863046][ T9288] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  309.929827][ T9288] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  310.469354][ T9293] syz2: rxe_newlink: already configured on veth1_to_bridge
[  310.515000][ T9296] IPVS: set_ctl: invalid protocol: 33 100.1.1.2:20004
[  310.732778][ T9300] input: syz0 as /devices/virtual/input/input6
[  311.064540][ T5149] usb 1-1: USB disconnect, device number 4
[  311.084237][ T1670] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  311.295279][ T1670] usb 2-1: Using ep0 maxpacket: 8
[  311.315064][ T1670] usb 2-1: config 0 has no interfaces?
[  311.334249][ T1670] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  311.363010][ T9319] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  311.371562][ T1670] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.384136][ T1670] usb 2-1: Product: syz
[  311.388603][ T9319] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  311.398213][ T1670] usb 2-1: Manufacturer: syz
[  311.403055][ T1670] usb 2-1: SerialNumber: syz
[  311.419140][ T1670] usb 2-1: config 0 descriptor??
[  311.651653][   T25] usb 2-1: USB disconnect, device number 3
[  311.840429][ T9315] loop0: detected capacity change from 0 to 40427
[  311.845337][ T9328] syz2: rxe_newlink: already configured on veth1_to_bridge
[  311.858859][ T9315] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  311.889581][ T9315] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  311.960079][ T9315] F2FS-fs (loop0): Found nat_bits in checkpoint
[  312.007910][ T9333] IPVS: set_ctl: invalid protocol: 33 100.1.1.2:20004
[  312.062638][ T9315] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  312.076414][ T9315] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  312.194935][   T29] audit: type=1804 audit(1717964400.345:41): pid=9340 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2945187346/syzkaller.wyEaLI/45/bus" dev="sda1" ino=1959 res=1 errno=0
[  312.222416][   T29] audit: type=1804 audit(1717964400.365:42): pid=9340 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2945187346/syzkaller.wyEaLI/45/bus" dev="sda1" ino=1959 res=1 errno=0
[  312.502086][ T9347] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[  312.816303][   T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  312.953466][ T9358] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge
[  313.050211][   T25] usb 2-1: Using ep0 maxpacket: 32
[  313.098449][   T25] usb 2-1: config 226 has an invalid interface number: 167 but max is 1
[  313.136893][   T25] usb 2-1: config 226 has an invalid interface number: 140 but max is 1
[  313.166357][ T9365] IPVS: set_ctl: invalid protocol: 33 100.1.1.2:20004
[  313.188573][   T25] usb 2-1: config 226 has no interface number 0
[  313.216179][ T9323] loop3: detected capacity change from 0 to 32768
[  313.228179][   T25] usb 2-1: config 226 has no interface number 1
[  313.270673][   T25] usb 2-1: config 226 interface 167 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  313.347276][ T9323] ERROR: (device loop3): diNewExt: no free extents
[  313.347276][ T9323] 
[  313.374146][   T25] usb 2-1: config 226 interface 167 altsetting 9 endpoint 0xC has invalid maxpacket 80, setting to 64
[  313.419601][ T9323] ialloc: diAlloc returned -5!
[  313.441914][   T25] usb 2-1: config 226 interface 167 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  313.504081][   T25] usb 2-1: config 226 interface 167 altsetting 9 has a duplicate endpoint with address 0x3, skipping
[  313.566120][   T25] usb 2-1: config 226 interface 140 altsetting 8 endpoint 0xF has invalid maxpacket 1023, setting to 64
[  313.584306][ T5189] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  313.647339][   T25] usb 2-1: config 226 interface 140 altsetting 8 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  313.713495][   T25] usb 2-1: config 226 interface 140 altsetting 8 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  313.766674][   T25] usb 2-1: config 226 interface 140 altsetting 8 has a duplicate endpoint with address 0x9, skipping
[  313.786011][ T5189] usb 1-1: Using ep0 maxpacket: 8
[  313.798504][ T5189] usb 1-1: config 0 has no interfaces?
[  313.834028][   T25] usb 2-1: config 226 interface 140 altsetting 8 has a duplicate endpoint with address 0x3, skipping
[  313.854742][ T5189] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  313.871637][ T5189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.890714][ T5189] usb 1-1: Product: syz
[  313.896638][ T5189] usb 1-1: Manufacturer: syz
[  313.901306][ T5189] usb 1-1: SerialNumber: syz
[  313.923867][ T5189] usb 1-1: config 0 descriptor??
[  313.932386][   T25] usb 2-1: config 226 interface 140 altsetting 8 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  313.989890][   T25] usb 2-1: config 226 interface 140 altsetting 8 has a duplicate endpoint with address 0x5, skipping
[  314.056457][   T25] usb 2-1: config 226 interface 140 altsetting 8 endpoint 0xD has invalid maxpacket 1023, setting to 64
[  314.120639][   T25] usb 2-1: config 226 interface 140 altsetting 8 has a duplicate endpoint with address 0x5, skipping
[  314.141754][ T5189] usb 1-1: USB disconnect, device number 5
[  314.209604][   T25] usb 2-1: config 226 interface 140 altsetting 8 has a duplicate endpoint with address 0xB, skipping
[  314.276408][   T25] usb 2-1: config 226 interface 140 altsetting 8 has a duplicate endpoint with address 0xD, skipping
[  314.341066][   T29] audit: type=1804 audit(1717964402.485:43): pid=9374 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2822460626/syzkaller.leqyPm/92/bus" dev="sda1" ino=1952 res=1 errno=0
[  314.357000][   T25] usb 2-1: config 226 interface 140 altsetting 8 has a duplicate endpoint with address 0xB, skipping
[  314.382279][   T29] audit: type=1804 audit(1717964402.525:44): pid=9374 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2822460626/syzkaller.leqyPm/92/bus" dev="sda1" ino=1952 res=1 errno=0
[  314.423232][ T5112] Bluetooth: hci0: command 0x0406 tx timeout
[  314.423279][ T5106] Bluetooth: hci4: command 0x0406 tx timeout
[  314.542036][   T25] usb 2-1: config 226 interface 140 altsetting 8 endpoint 0xA has invalid maxpacket 1024, setting to 64
[  314.609032][   T25] usb 2-1: config 226 interface 140 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  314.623902][ T9376] netlink: 'syz-executor.3': attribute type 3 has an invalid length.
[  314.687450][   T25] usb 2-1: config 226 interface 167 has no altsetting 0
[  314.753800][   T25] usb 2-1: config 226 interface 140 has no altsetting 0
[  314.846612][   T25] usb 2-1: New USB device found, idVendor=19d2, idProduct=1271, bcdDevice=30.e8
[  314.910200][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.956281][   T25] usb 2-1: Manufacturer: ꣍ꨅꮰ熵यᵮ㵡﫶塚ᩖ쏺捒㜶싯完圾䍂⛬Ś鞗칯녮ꭖǻᖶȩ艜嫥噩䁳똟ꪇᒅ쮟㠳⅌翚犗⸙跏ꐭ仚츙႖Ꮴ쁔魌ቄ蕁溽鈰嗃爟璈⿬슻毾뼋⻓ﾵ஠썼ꮵ崾䳗ℱ
[  315.115121][ T9372] loop2: detected capacity change from 0 to 32768
[  315.122773][   T25] usb 2-1: SerialNumber: 《
[  315.168206][   T25] usb 2-1: rejected 1 configuration due to insufficient available bus power
[  315.183462][ T9386] block nbd0: shutting down sockets
[  315.244690][ T9387] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge
[  315.281911][   T25] usb 2-1: no configuration chosen from 1 choice
[  315.296189][ T9367] loop4: detected capacity change from 0 to 40427
[  315.352730][   T25] usb 2-1: USB disconnect, device number 4
[  315.378710][ T9367] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  315.446895][ T9367] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  315.487834][ T9391] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  315.500660][ T9367] F2FS-fs (loop4): Found nat_bits in checkpoint
[  315.699496][ T9367] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  315.744071][ T9367] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  315.811628][   T29] audit: type=1804 audit(1717964403.945:45): pid=9401 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir451846710/syzkaller.2CR3Q4/77/bus" dev="sda1" ino=1952 res=1 errno=0
[  315.836066][   T29] audit: type=1804 audit(1717964403.945:46): pid=9401 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir451846710/syzkaller.2CR3Q4/77/bus" dev="sda1" ino=1952 res=1 errno=0
[  315.968157][ T9405] loop2: detected capacity change from 0 to 512
[  315.995967][ T9407] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
[  316.024380][ T9405] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  316.033622][ T9405] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  316.057185][ T9405] System zones: 0-1, 15-15, 18-18, 34-34
[  316.076578][ T9405] EXT4-fs (loop2): orphan cleanup on readonly fs
[  316.089797][ T9405] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0
[  316.127218][ T9405] EXT4-fs warning (device loop2): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  316.175173][   T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  316.199296][ T9405] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  316.237221][ T9405] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor.2: bg 0: block 40: padding at end of block bitmap is not set
[  316.277456][ T9405] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem
[  316.447724][ T9398] loop0: detected capacity change from 0 to 32768
[  316.488082][ T9398] ERROR: (device loop0): diNewExt: no free extents
[  316.488082][ T9398] 
[  316.506334][ T9398] ialloc: diAlloc returned -5!
[  317.419890][ T1244] ieee802154 phy0 wpan0: encryption failed: -22
[  317.426314][ T1244] ieee802154 phy1 wpan1: encryption failed: -22
[  320.515028][ T9405] EXT4-fs (loop2): 1 truncate cleaned up
[  320.523431][ T9405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  320.656475][ T7867] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.714723][   T25] usb 4-1: device not accepting address 7, error -71
[  320.900368][ T9423] syz2: rxe_newlink: already configured on veth1_to_bridge
[  321.121655][ T9435] netlink: zone id is out of range
[  321.130631][ T9434] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  321.149839][ T9435] netlink: zone id is out of range
[  321.155199][   T29] audit: type=1804 audit(1717964409.295:47): pid=9438 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2945187346/syzkaller.wyEaLI/52/bus" dev="sda1" ino=1960 res=1 errno=0
[  321.174471][ T9435] netlink: zone id is out of range
[  321.291772][   T29] audit: type=1804 audit(1717964409.305:48): pid=9438 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2945187346/syzkaller.wyEaLI/52/bus" dev="sda1" ino=1960 res=1 errno=0
[  321.356890][ T9435] netlink: set zone limit has 4 unknown bytes
[  321.361853][   T29] audit: type=1804 audit(1717964409.305:49): pid=9438 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2945187346/syzkaller.wyEaLI/52/bus" dev="sda1" ino=1960 res=1 errno=0
[  321.760176][ T9453] loop2: detected capacity change from 0 to 64
[  321.834293][   T57] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  321.861661][ T9426] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  322.012085][ T9457] loop3: detected capacity change from 0 to 64
[  322.024181][   T57] usb 1-1: Using ep0 maxpacket: 8
[  322.035748][   T57] usb 1-1: config 0 has no interfaces?
[  322.051392][   T57] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  322.067914][   T57] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.100945][   T57] usb 1-1: Product: syz
[  322.121062][   T57] usb 1-1: Manufacturer: syz
[  322.129821][   T57] usb 1-1: SerialNumber: syz
[  322.142819][   T57] usb 1-1: config 0 descriptor??
[  322.373135][   T57] usb 1-1: USB disconnect, device number 6
[  322.438985][ T7084] hfs: node 4:3 still has 1 user(s)!
[  322.785516][ T9462] loop4: detected capacity change from 0 to 64
[  322.848657][ T9464] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge
[  322.998175][ T9466] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  323.050561][ T9454] loop1: detected capacity change from 0 to 32768
[  323.077408][   T29] audit: type=1804 audit(1717964411.225:50): pid=9468 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2822460626/syzkaller.leqyPm/104/bus" dev="sda1" ino=1955 res=1 errno=0
[  323.166680][ T9454] ERROR: (device loop1): diNewExt: no free extents
[  323.166680][ T9454] 
[  323.182088][   T29] audit: type=1804 audit(1717964411.225:51): pid=9468 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2822460626/syzkaller.leqyPm/104/bus" dev="sda1" ino=1955 res=1 errno=0
[  323.204377][ T9454] ialloc: diAlloc returned -5!
[  323.291974][   T29] audit: type=1804 audit(1717964411.225:52): pid=9468 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2822460626/syzkaller.leqyPm/104/bus" dev="sda1" ino=1955 res=1 errno=0
[  323.512920][ T9481] netlink: zone id is out of range
[  323.579934][ T9481] netlink: zone id is out of range
[  323.601210][ T9481] netlink: zone id is out of range
[  323.686877][ T9481] netlink: set zone limit has 4 unknown bytes
[  323.902371][ T9491] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge
[  324.124054][ T5153] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  324.132672][   T29] audit: type=1804 audit(1717964412.275:53): pid=9499 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir197012022/syzkaller.2DSg9T/83/bus" dev="sda1" ino=1960 res=1 errno=0
[  324.243069][   T29] audit: type=1804 audit(1717964412.305:54): pid=9499 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir197012022/syzkaller.2DSg9T/83/bus" dev="sda1" ino=1960 res=1 errno=0
[  324.301718][   T29] audit: type=1804 audit(1717964412.305:55): pid=9499 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir197012022/syzkaller.2DSg9T/83/bus" dev="sda1" ino=1960 res=1 errno=0
[  324.354251][ T5153] usb 4-1: Using ep0 maxpacket: 8
[  324.392145][ T5153] usb 4-1: config 0 has no interfaces?
[  324.410436][ T5153] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  324.446162][ T5153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.480681][ T5153] usb 4-1: Product: syz
[  324.495473][ T5153] usb 4-1: Manufacturer: syz
[  324.525737][ T5153] usb 4-1: SerialNumber: syz
[  324.552178][ T5153] usb 4-1: config 0 descriptor??
[  324.801198][ T5153] usb 4-1: USB disconnect, device number 9
[  325.289938][ T9510] loop4: detected capacity change from 0 to 32768
[  325.341675][ T9510] ERROR: (device loop4): diNewExt: no free extents
[  325.341675][ T9510] 
[  325.365901][ T9510] ialloc: diAlloc returned -5!
[  326.097853][   T29] audit: type=1804 audit(1717964414.245:56): pid=9528 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4292844655/syzkaller.7KQD4q/176/bus" dev="sda1" ino=1964 res=1 errno=0
[  326.164344][   T29] audit: type=1804 audit(1717964414.245:57): pid=9528 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir4292844655/syzkaller.7KQD4q/176/bus" dev="sda1" ino=1964 res=1 errno=0
[  326.231181][   T29] audit: type=1804 audit(1717964414.245:58): pid=9528 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4292844655/syzkaller.7KQD4q/176/bus" dev="sda1" ino=1964 res=1 errno=0
[  326.246726][ T9520] loop3: detected capacity change from 0 to 32768
[  326.273252][ T9520] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (9520)
[  326.356326][ T9520] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  326.391914][ T9520] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  326.418349][ T9520] BTRFS info (device loop3): using free-space-tree
[  326.587946][ T9520] BTRFS info (device loop3): checking UUID tree
[  326.863915][ T7084] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  329.985612][ T5109] Bluetooth: hci4: unexpected event for opcode 0x0c20
[  329.987722][ T9562] loop3: detected capacity change from 0 to 164
[  331.314117][   T25] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  331.504398][   T25] usb 4-1: Using ep0 maxpacket: 8
[  331.511931][   T25] usb 4-1: config 0 has no interfaces?
[  331.526361][   T25] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  331.542262][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.550470][   T25] usb 4-1: Product: syz
[  331.557802][   T25] usb 4-1: Manufacturer: syz
[  331.567980][   T25] usb 4-1: SerialNumber: syz
[  331.590297][   T25] usb 4-1: config 0 descriptor??
[  331.802854][ T1670] usb 4-1: USB disconnect, device number 10
[  332.798701][ T9570] loop3: detected capacity change from 0 to 32768
[  332.822055][ T9570] ERROR: (device loop3): diNewExt: no free extents
[  332.822055][ T9570] 
[  332.836109][ T9570] ialloc: diAlloc returned -5!
[  333.178687][   T29] audit: type=1804 audit(1717964421.325:59): pid=9578 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2822460626/syzkaller.leqyPm/118/bus" dev="sda1" ino=1964 res=1 errno=0
[  333.244804][   T29] audit: type=1804 audit(1717964421.325:60): pid=9578 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2822460626/syzkaller.leqyPm/118/bus" dev="sda1" ino=1964 res=1 errno=0
[  333.294097][   T29] audit: type=1804 audit(1717964421.325:61): pid=9578 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2822460626/syzkaller.leqyPm/118/bus" dev="sda1" ino=1964 res=1 errno=0
[  333.874157][   T25] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  334.055446][ T5109] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  334.064692][ T5109] Bluetooth: hci4: Injecting HCI hardware error event
[  334.074470][ T5116] Bluetooth: hci4: hardware error 0x00
[  334.100884][   T25] usb 4-1: config 0 has an invalid interface number: 122 but max is 0
[  334.132127][   T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  334.175580][   T25] usb 4-1: config 0 has no interface number 0
[  334.181883][   T25] usb 4-1: too many endpoints for config 0 interface 122 altsetting 209: 131, using maximum allowed: 30
[  334.240784][   T25] usb 4-1: config 0 interface 122 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 131
[  334.292638][   T25] usb 4-1: config 0 interface 122 has no altsetting 0
[  334.318259][   T25] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  334.347706][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.381028][   T25] usb 4-1: config 0 descriptor??
[  336.560136][   T25] usb 4-1: string descriptor 0 read error: -71
[  336.603023][   T25] usb 4-1: USB disconnect, device number 11
[  338.614085][ T5116] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  339.463390][ T9589] loop3: detected capacity change from 0 to 164
[  340.796897][   T25] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  340.984195][   T25] usb 4-1: Using ep0 maxpacket: 8
[  340.997871][   T25] usb 4-1: config 0 has no interfaces?
[  341.008413][   T25] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  341.027730][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.044139][   T25] usb 4-1: Product: syz
[  341.050191][   T25] usb 4-1: Manufacturer: syz
[  341.061498][   T25] usb 4-1: SerialNumber: syz
[  341.075708][   T25] usb 4-1: config 0 descriptor??
[  341.300983][   T25] usb 4-1: USB disconnect, device number 12
[  341.907897][   T29] audit: type=1800 audit(1717964430.055:62): pid=9597 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="overlay" ino=1969 res=0 errno=0
[  341.911499][ T9597] evm: overlay not supported
[  342.439220][ T9606] loop3: detected capacity change from 0 to 64
[  342.483189][ T9606] syz-executor.3: attempt to access beyond end of device
[  342.483189][ T9606] loop3: rw=34817, sector=39, nr_sectors = 30 limit=64
[  342.504857][ T9606] syz-executor.3: attempt to access beyond end of device
[  342.504857][ T9606] loop3: rw=34817, sector=72, nr_sectors = 2 limit=64
[  342.521939][ T9606] syz-executor.3: attempt to access beyond end of device
[  342.521939][ T9606] loop3: rw=34817, sector=76, nr_sectors = 506 limit=64
[  343.345413][ T9608] loop3: detected capacity change from 0 to 40427
[  343.362518][ T9608] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[  343.370616][ T9608] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  343.392472][ T9608] F2FS-fs (loop3): invalid crc value
[  343.398948][ T9608] F2FS-fs (loop3): invalid crc value
[  343.405513][ T9608] F2FS-fs (loop3): Failed to get valid F2FS checkpoint
[  346.064334][ T1670] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  346.264072][ T1670] usb 4-1: Using ep0 maxpacket: 8
[  346.272641][ T1670] usb 4-1: config 0 has no interfaces?
[  346.286478][ T1670] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  346.302740][ T1670] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.322124][ T1670] usb 4-1: Product: syz
[  346.327934][ T1670] usb 4-1: Manufacturer: syz
[  346.332624][ T1670] usb 4-1: SerialNumber: syz
[  346.347618][ T1670] usb 4-1: config 0 descriptor??
[  346.564764][ T5153] usb 4-1: USB disconnect, device number 13
[  347.178656][   T29] audit: type=1800 audit(1717964435.325:63): pid=9625 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="overlay" ino=1969 res=0 errno=0
[  348.165356][ T9638] kvm: emulating exchange as write
[  348.375015][ T9645] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[  348.672130][ T9653] loop3: detected capacity change from 0 to 256
[  348.697776][ T9653] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  348.745502][ T9653] syz-executor.3: attempt to access beyond end of device
[  348.745502][ T9653] loop3: rw=524288, sector=280, nr_sectors = 128 limit=256
[  348.773654][ T9653] syz-executor.3: attempt to access beyond end of device
[  348.773654][ T9653] loop3: rw=524288, sector=408, nr_sectors = 256 limit=256
[  348.802080][ T9653] syz-executor.3: attempt to access beyond end of device
[  348.802080][ T9653] loop3: rw=0, sector=280, nr_sectors = 8 limit=256
[  348.817392][   T29] audit: type=1800 audit(1717964436.965:64): pid=9653 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="file1" dev="loop3" ino=1048681 res=0 errno=0
[  349.214083][ T5153] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  349.394085][ T5153] usb 4-1: Using ep0 maxpacket: 8
[  349.401557][ T5153] usb 4-1: config 0 has no interfaces?
[  349.417097][ T5153] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  349.437048][ T5153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.455533][ T5153] usb 4-1: Product: syz
[  349.459816][ T5153] usb 4-1: Manufacturer: syz
[  349.464680][ T5153] usb 4-1: SerialNumber: syz
[  349.472841][ T5153] usb 4-1: config 0 descriptor??
[  349.684083][ T1670] usb 4-1: USB disconnect, device number 14
[  350.321253][   T29] audit: type=1800 audit(1717964438.465:65): pid=9658 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="overlay" ino=1969 res=0 errno=0
[  351.083033][ T9672] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[  351.728035][ T9678] loop3: detected capacity change from 0 to 32768
[  351.757894][ T9678] ERROR: (device loop3): diNewExt: no free extents
[  351.757894][ T9678] 
[  351.774979][ T9678] ialloc: diAlloc returned -5!
[  352.168671][ T5153] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  352.354156][ T5153] usb 4-1: Using ep0 maxpacket: 8
[  352.369314][ T5153] usb 4-1: config 0 has no interfaces?
[  352.385344][ T5153] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  352.397052][ T5153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.409943][ T5153] usb 4-1: Product: syz
[  352.415529][ T5153] usb 4-1: Manufacturer: syz
[  352.420212][ T5153] usb 4-1: SerialNumber: syz
[  352.435824][ T5153] usb 4-1: config 0 descriptor??
[  352.664826][   T25] usb 4-1: USB disconnect, device number 15
[  353.295986][ T9683] loop3: detected capacity change from 0 to 1024
[  354.994148][ T9685] xt_cgroup: xt_cgroup: no path or classid specified
[  355.285092][ T5109] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  355.297600][ T5109] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  355.306377][ T5109] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  355.316614][ T5109] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  355.326268][ T5109] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  355.333654][ T5109] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  355.932896][ T9694] hfsplus: xattr searching failed
[  355.938939][ T9694] hfsplus: xattr searching failed
[  355.944311][ T9694] hfsplus: xattr searching failed
[  355.949494][ T9694] hfsplus: xattr searching failed
[  356.054700][ T5116] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  356.063324][ T5116] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  356.074597][ T5116] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  356.082604][ T5116] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  356.090780][ T5116] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  356.213736][ T5112] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  356.224965][ T5112] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  356.242059][ T5112] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  356.255836][ T5109] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  356.293668][ T5109] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  356.303074][ T5109] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  356.312431][ T5109] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  356.432170][ T9702] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'.
[  356.874678][ T5116] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  356.891894][ T5116] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  356.906659][ T5116] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  356.915531][ T5116] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  356.923427][ T5116] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  356.931520][ T5116] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  357.414602][ T5109] Bluetooth: hci5: command tx timeout
[  358.294190][ T5109] Bluetooth: hci6: command tx timeout
[  358.376025][ T5109] Bluetooth: hci7: command tx timeout
[  359.024260][ T5109] Bluetooth: hci8: command tx timeout
[  359.494559][ T5116] Bluetooth: hci5: command tx timeout
[  360.374157][ T5116] Bluetooth: hci6: command tx timeout
[  360.454161][ T5116] Bluetooth: hci7: command tx timeout
[  361.101001][ T5116] Bluetooth: hci8: command tx timeout
[  361.574483][ T5116] Bluetooth: hci5: command tx timeout
[  362.454190][ T5116] Bluetooth: hci6: command tx timeout
[  362.534175][ T5116] Bluetooth: hci7: command tx timeout
[  363.174106][ T5116] Bluetooth: hci8: command tx timeout
[  363.654481][ T5109] Bluetooth: hci5: command tx timeout
[  364.544040][ T5109] Bluetooth: hci6: command tx timeout
[  364.614217][ T5109] Bluetooth: hci7: command tx timeout
[  365.254168][ T5109] Bluetooth: hci8: command tx timeout
[  365.574174][ T5109] Bluetooth: hci3: command 0x0406 tx timeout
[  378.862348][ T1244] ieee802154 phy0 wpan0: encryption failed: -22
[  378.868837][ T1244] ieee802154 phy1 wpan1: encryption failed: -22
[  380.934309][ T5109] Bluetooth: hci2: command 0x0406 tx timeout
[  386.537115][ T5109] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  386.561125][ T5109] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  386.569729][ T5109] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  386.579729][ T5109] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  386.594564][ T5109] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  386.603432][ T5109] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  388.694266][ T5109] Bluetooth: hci9: command tx timeout
[  390.784156][ T5109] Bluetooth: hci9: command tx timeout
[  392.854110][ T5109] Bluetooth: hci9: command tx timeout
[  394.948919][ T5109] Bluetooth: hci9: command tx timeout
[  419.866681][ T5116] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  419.878680][ T5116] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  419.889738][ T5116] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  419.907465][ T5116] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  419.916717][ T5116] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  419.924587][ T5116] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  420.337066][ T5116] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  420.354255][ T5116] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  420.364157][ T5116] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  420.384235][ T5116] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  420.395360][ T5116] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  420.405245][ T5116] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  420.625330][ T5116] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  420.636566][ T5116] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  420.653246][ T5116] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  420.661884][ T5116] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  420.672127][ T5116] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  420.679911][ T5116] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  421.877393][ T5109] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  421.888679][ T5109] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  421.904094][ T5109] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  421.923338][ T5109] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  421.931377][ T5109] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  421.939041][ T5109] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  421.974620][ T5116] Bluetooth: hci10: command tx timeout
[  422.454183][ T5116] Bluetooth: hci11: command tx timeout
[  422.784212][ T5116] Bluetooth: hci12: command tx timeout
[  423.974878][ T5116] Bluetooth: hci13: command tx timeout
[  424.054111][ T5116] Bluetooth: hci10: command tx timeout
[  424.534106][ T5116] Bluetooth: hci11: command tx timeout
[  424.856545][ T5116] Bluetooth: hci12: command tx timeout
[  426.061638][ T5116] Bluetooth: hci13: command tx timeout
[  426.134409][ T5116] Bluetooth: hci10: command tx timeout
[  426.614429][ T5116] Bluetooth: hci11: command tx timeout
[  426.934068][ T5116] Bluetooth: hci12: command tx timeout
[  428.139122][ T5116] Bluetooth: hci13: command tx timeout
[  428.214265][ T5116] Bluetooth: hci10: command tx timeout
[  428.694115][ T5116] Bluetooth: hci11: command tx timeout
[  429.014230][ T5116] Bluetooth: hci12: command tx timeout
[  430.224267][ T5116] Bluetooth: hci13: command tx timeout
[  440.324448][ T1244] ieee802154 phy0 wpan0: encryption failed: -22
[  440.330775][ T1244] ieee802154 phy1 wpan1: encryption failed: -22
[  451.864347][ T5109] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  451.880127][ T5109] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  451.893051][ T5109] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  451.901581][ T5109] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  451.910791][ T5109] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  451.921241][ T5109] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  453.974152][ T5116] Bluetooth: hci14: command tx timeout
[  456.054053][ T5116] Bluetooth: hci14: command tx timeout
[  458.134207][ T5116] Bluetooth: hci14: command tx timeout
[  460.214055][ T5116] Bluetooth: hci14: command tx timeout
[  478.214368][ T5116] Bluetooth: hci5: command 0x0406 tx timeout
[  483.338914][ T9736] Bluetooth: hci8: command 0x0406 tx timeout
[  483.346240][ T9736] Bluetooth: hci6: command 0x0406 tx timeout
[  483.352274][ T9736] Bluetooth: hci7: command 0x0406 tx timeout
[  484.925914][ T5109] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  484.937340][ T5109] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  484.947137][ T5109] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  484.955590][ T5109] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  484.965884][ T5109] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[  484.973337][ T5109] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  485.104345][   T30] INFO: task kworker/0:1:9 blocked for more than 143 seconds.
[  485.111843][   T30]       Not tainted 6.10.0-rc2-syzkaller-00366-g771ed66105de #0
[  485.144007][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
2024/06/09 20:22:53 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  485.153092][   T30] task:kworker/0:1     state:D stack:23768 pid:9     tgid:9     ppid:2      flags:0x00004000
[  485.182414][   T30] Workqueue: events_power_efficient reg_check_chans_work
[  485.189607][   T30] Call Trace:
[  485.192923][   T30]  <TASK>
[  485.195900][   T30]  __schedule+0x1796/0x49d0
[  485.200442][   T30]  ? __pfx___schedule+0x10/0x10
[  485.205400][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  485.211395][   T30]  ? __pfx_lock_release+0x10/0x10
[  485.216493][   T30]  ? kick_pool+0x45c/0x620
[  485.220925][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  485.230568][   T30]  ? schedule+0x90/0x320
[  485.235143][   T30]  schedule+0x14b/0x320
[  485.239849][   T30]  schedule_preempt_disabled+0x13/0x30
[  485.247659][   T30]  __mutex_lock+0x6a4/0xd70
[  485.252200][   T30]  ? __mutex_lock+0x527/0xd70
[  485.257338][   T30]  ? reg_check_chans_work+0x91/0xea0
[  485.262649][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  485.268173][   T30]  reg_check_chans_work+0x91/0xea0
[  485.273315][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  485.278795][   T30]  ? __pfx_reg_check_chans_work+0x10/0x10
[  485.284827][   T30]  ? process_scheduled_works+0x945/0x1830
[  485.290567][   T30]  process_scheduled_works+0xa2c/0x1830
[  485.296555][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  485.302561][   T30]  ? assign_work+0x364/0x3d0
[  485.324064][   T30]  worker_thread+0x86d/0xd70
[  485.328701][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  485.347358][   T30]  ? __kthread_parkme+0x169/0x1d0
[  485.352436][   T30]  ? __pfx_worker_thread+0x10/0x10
[  485.374013][   T30]  kthread+0x2f0/0x390
[  485.378226][   T30]  ? __pfx_worker_thread+0x10/0x10
[  485.383361][   T30]  ? __pfx_kthread+0x10/0x10
[  485.404013][   T30]  ret_from_fork+0x4b/0x80
[  485.408482][   T30]  ? __pfx_kthread+0x10/0x10
[  485.413090][   T30]  ret_from_fork_asm+0x1a/0x30
[  485.424731][   T30]  </TASK>
[  485.427910][   T30] INFO: task syz-executor.2:9515 blocked for more than 143 seconds.
[  485.454117][   T30]       Not tainted 6.10.0-rc2-syzkaller-00366-g771ed66105de #0
[  485.461785][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  485.494284][   T30] task:syz-executor.2  state:D stack:27872 pid:9515  tgid:9514  ppid:7867   flags:0x00004006
[  485.513982][   T30] Call Trace:
[  485.517288][   T30]  <TASK>
[  485.520230][   T30]  __schedule+0x1796/0x49d0
[  485.534034][   T30]  ? __pfx___schedule+0x10/0x10
[  485.538939][   T30]  ? __pfx_lock_release+0x10/0x10
[  485.554029][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  485.559527][   T30]  ? kasan_check_range+0xb/0x290
[  485.577007][   T30]  ? schedule+0x90/0x320
[  485.581285][   T30]  schedule+0x14b/0x320
[  485.593989][   T30]  schedule_preempt_disabled+0x13/0x30
[  485.599481][   T30]  __mutex_lock+0x6a4/0xd70
[  485.613988][   T30]  ? __mutex_lock+0x527/0xd70
[  485.618702][   T30]  ? addrconf_add_ifaddr+0x1fc/0x340
[  485.633990][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  485.639056][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  485.664021][   T30]  ? __might_fault+0xc6/0x120
[  485.668746][   T30]  addrconf_add_ifaddr+0x1fc/0x340
[  485.684234][   T30]  ? __pfx_addrconf_add_ifaddr+0x10/0x10
[  485.689914][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  485.704037][   T30]  ? tomoyo_path_number_perm+0x208/0x880
[  485.709707][   T30]  ? __pfx_lock_release+0x10/0x10
[  485.734003][   T30]  inet6_ioctl+0x146/0x280
[  485.738464][   T30]  ? __pfx_inet6_ioctl+0x10/0x10
[  485.743434][   T30]  ? tomoyo_path_number_perm+0x71a/0x880
[  485.764028][   T30]  sock_do_ioctl+0x158/0x460
[  485.768682][   T30]  ? __pfx_sock_do_ioctl+0x10/0x10
[  485.773822][   T30]  ? __asan_memset+0x23/0x50
[  485.794006][   T30]  ? smack_file_ioctl+0x2a1/0x3a0
[  485.799098][   T30]  sock_ioctl+0x629/0x8e0
[  485.803462][   T30]  ? __pfx_sock_ioctl+0x10/0x10
[  485.824004][   T30]  ? __fget_files+0x3f6/0x470
[  485.828820][   T30]  ? __fget_files+0x29/0x470
[  485.833428][   T30]  ? bpf_lsm_file_ioctl+0x9/0x10
[  485.838448][   T30]  ? security_file_ioctl+0x87/0xb0
[  485.843