last executing test programs:

41.440210018s ago: executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6)
ioctl$sock_bt_hci(r0, 0x400448c8, &(0x7f0000000000))

41.230524149s ago: executing program 0:
syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000140)='./file1\x00', 0x808b42, &(0x7f0000000300)=ANY=[], 0x4b, 0x237, &(0x7f0000000540)="$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")

40.761988268s ago: executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x1)

40.478667511s ago: executing program 0:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78}, 0x0, 0x0, 0x0, 0x0, 0x0})
utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000300)='./file0\x00', 0x622000, 0x0)
fstat(r2, 0x0)

38.853455692s ago: executing program 0:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x70)
sendmsg$rds(r0, &(0x7f00000029c0)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@rdma_dest={0x18, 0x10c}, @zcopy_cookie={0x18}], 0x30}, 0x0)

37.399921567s ago: executing program 0:
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3011, 0x17)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$UFFDIO_CONTINUE(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1})
migrate_pages(0x0, 0x9, &(0x7f0000000340)=0x9, &(0x7f0000000380)=0x102)

33.460804809s ago: executing program 1:
unshare(0x8040480)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f0000000200)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40)

33.294385792s ago: executing program 1:
mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0)
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x149800, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
creat(&(0x7f0000000040)='./file0\x00', 0x0)

33.116709947s ago: executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x1)

32.846383093s ago: executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000500)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000060000000000000e010000000000000000000000010000060400000006000000000000000000002e00005f"], &(0x7f00000001c0)=""/131, 0x44, 0x83, 0x1}, 0x20)

30.201032768s ago: executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast1}, 0x10)
io_setup(0x9, 0x0)
eventfd2(0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
r5 = socket$inet(0x2, 0x801, 0x0)
sendto$inet(r5, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
splice(r5, 0x0, r6, 0x0, 0x7ffff000, 0x0)
connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[], 0x3a7)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendmmsg$inet(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000002c40)="4c053425c292a724cee5e7b46297ca7d4dd9c5097c85f9fc9719785f26f00334e5fad57d1c8ae64a8242805a4a2370a9ec422947c030cad8170e303883653e41bbfe71ae3a83c1bc83680a503d59fb2481f399a0952a433a8bb92dff8721b37ce194fea8c022084bbf8e19e008b0013e41f4ba222329d48d0081470c92d2652e74b7b0dbae718f8b789a64619b6486f8c30f365473cf56b6f6b92d040de77ff8cb16220c6b3c3c0c0ebeddbfda2da6a92e9ba05c41f7317cfad58e2e6988fa8e3fe867f204f02392b909aed27efb5d3be750208266cbb47e69c18296b6b512ad958b551358effc67c2eeb062785f44c12182cacae686b129c239384122eb9a5842337cd3cc061ce3ba7f63fede1c9224bddec74124202d3f1d828e31fb838a6fe4064c8c3b0ceb08a8a05d1f1a232a019106204d20ccfa32f1058a5bca0f946dd1efb0a6305300f1214e0d0fc11d8631b9a0d4732c74d5a3e9f82fd7ddc809181ac711cd0a5e90e59e0d95f669c13d237891fed2842f48dd04865a846fd157a614476a6882f0661ac9bdf9d010a956df9e61254c7eaeaf409c505bc23128c2bc37a8dfa65a9af9be973fb70e4d68235f85cdcb362f52c932e7da7ff2e2df339f90f2ae62c679516c8b3a859ceb52754aa1abecdf51ee7f64b4fcc769a8ab50d45f37a73d4f3eec5057a74060cb792faad971835835b51e422d59fbaf35273c8765180666cd3d52b4b7922eb245602d217a066b708598916296d06bab7ece49abc0e743e06270e108708e25b2a8cfec9b33f6f97a8377c2f2a151a45db18887170924ce84d1991d8b92e3e3019a6b0c5a9f1cc8fbfafff99353ea8505b00cedd237eec69605d398a388d1ac916fa84557f1e0d08e52035b27ff166dbbe76df5221d4d0e1b5d6a7aca1f84e1a5a8e07a43e83d8f2a994cc97e28faf57c354eea12dd0f1060cf406a33a9a7a1991c2d4d44afd04975d19dd48477c43f3f2f01e405f384768b58389e88c100ba87a2e41e75944b15d28c9a0651edd246176f5181e90252879b50e07af7ff185d62ce2ea314e4958c1a0ca6f5e30985ac4e474b71fbc0fc7eef9472c22d010a18d5dddbd06b230675475efeba4d8a46c0983b40ef6d09e1f87060a82a4b6b45a2e9a6dc0a31fce06aa9ac17ee4bcaf225dc67bb7d8226890a52697fdf85e152b41dbcf64aa999d4eeb50a82c2dfc4ca2506ec34c44e8e1bef940216e2b412b7e863224331aab0ff2febb73312b6251602a815f9172a5d3d6d0c9a3e0b03c75d3687df116f87293e9b2fe7579d6cd0aae0abb43d4d4b3299e3bf7d993eeacc360ab79abb80a3b3b2823dd4a4e3542bd87e7e612545680cc19d53d3618372910dbba9006d245d96f256fbbba115a20f1c852a58f98a32bdfeb497c2f3b5d00fe6a357c0c6301f4b279e0549002117475ada8e8b91eadabdc43ce6b405648c23c194fab66aabf7c88c32ad425ea5aa0780fdfbb4117b615ed1683cc0b06a46870fe2aceab08b9018f6", 0x432}], 0x1}}], 0x1, 0x0)

29.738151656s ago: executing program 1:
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0xd)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'macvtap0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8}, 0x48)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0)=0xfffffc00, 0x4)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'bridge0\x00', <r2=>0x0})
socketpair(0x0, 0x80000, 0x0, 0x0)
sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e000006a001c000000000000000000000008000000", @ANYRES32=r2], 0x38}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

11.97193653s ago: executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

11.931849378s ago: executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0)
ftruncate(0xffffffffffffffff, 0x0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x10, r1, 0x0)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000232000/0x2000)=nil, 0x2000}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000410007010000000000000000017c0004060003"], 0x1c}}, 0x0)

11.883779847s ago: executing program 5:
syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x200048, &(0x7f00000000c0)=ANY=[@ANYBLOB="003b09b765870bdc53e3b6c789fabd61442d7c4293011b1739ca8bc349031d867fe7d93a932f4557cf09592948c02e", @ANYRES64], 0x1, 0x19e, &(0x7f0000000440)="$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")
r0 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15eaffffffffffff130012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x203, 0x8401)
syz_emit_ethernet(0x7a, &(0x7f0000004540)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9a83c9", 0x4, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}}, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x80045515, &(0x7f0000002080))
r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x0)
preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/4081, 0xff1}], 0x1, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$rds(0x15, 0x5, 0x0)
sendto(r7, 0x0, 0x0, 0x0, &(0x7f00000010c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="78000000000101040000000000000000020000002400018014000180080001000000000008000200ac1414bb0c0002800500010000000000240002800c000280050001000000000014000180080001"], 0x78}}, 0x0)

10.783373027s ago: executing program 5:
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
r0 = inotify_init1(0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, <r1=>0x0})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="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", 0xec1}], 0x1)
ptrace$setopts(0x4206, r1, 0x0, 0x0)

10.649096881s ago: executing program 5:
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0xd)

8.70896257s ago: executing program 5:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
memfd_create(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7d}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70)

4.349367005s ago: executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @sliced={0x0, [0x0, 0x0, 0x5]}})
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x10001, 0x2, 0x2})
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}})

4.235553411s ago: executing program 2:
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000001d00)=ANY=[@ANYBLOB='iocharset=iso8859-1,nointegrity,iocharset=iso8859-4,nodiscard,quota,nodiscard,discard=0x0000000000000000,grpquota,noquota\x00discard,gid=', @ANYRES16=0x0, @ANYRES16=0x0, @ANYRESHEX, @ANYBLOB="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"], 0xfe, 0x6187, &(0x7f000000c680)="$eJzs3c1vHGcdB/DfvvolNLV6qEqEkJuWl1KaxEkJgQJtD3Dg0gPKFSVy3SoiBZQElFYWceULB078BSAkjghxRBz4A3rgyo0TJyLZSKBeYKqxnyceT3a7ThzvrD2fj2TP/OaZsZ/xd2dfvDP7BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ3//eD1Y6EXHt52nBUsRnohfRjVgo6+WIWFheyuv3I+K52GmOZyNiMBdRbr/z7emIVyPio9MRW9vrq+Xiiwfsx3f/+Pff/fDUW3/7w+D8f/90p/fauPXu3v3Vf/5873D7DAAAAG1TFEXRSS/zz6TX992mOwUATEV+/C+SvPzE17/+51t/maX+qNVqtVo9hbqqGO1etYiIjeo25XMGb8cDwDGzER833QUaJP9W60fEqaY7Acy0TtMd4Ehsba+vdlK+nerjwfJuez4XZF/+G50H13eMm05SP8dkWrevzejFM2P6szClPsySnH+3nv+13fZhWu+o85+WcfkPdy99ap2cf6+ef83Jyb87Mv+2yvn3Hyn/nvwBAAAAAGCG5f//LzX8/u/c4XflQD7t/d/lKfUBAAAAAAAAAJ60w47/94Dx/wAAAGBmla/VS785vbds3GexlcuvdiKeqq0PtEy6WGax6X4AAAAAAAAAAAAAQJv0d8/hvdqJGETEU4uLRVGUX1X1+lEddvvjru37D23W9J08AADs+uh07Vr+TsR8RFxNn/U3WFxcLIr5hcVisViYy89nh3PzxULldW2elsvmhgd4QtwfFuUPm69sVzXp9fKk9vrPK3/XsOgdoGNPyCD9Ncc0NxQ2ACS7j0ZbHpFOmKJ4etyTD9jH8X8CLcVS07crZl/TN1MAAADg6BVFUXTSx3mfSe/5d5vuFAAwFfnxv/6+wKHq7pj2iCfz89VqtVqtVj9WXVWMdq9aRMRGdZvyOYPh+AHgmNmIj5vuAg2Sf6v1I+K5pjsBzLRO0x3gSGxtr692Ur6d6uNBGt89nwuyL/+Nzs52eftR00nq55hM6/a1Gb14Zkx/np1SH2ZJzr9bz//abvswrXfU+U/LuPyHO5fMtU/Ov1fPv+bk5N8dmX9b5fz7j5R/T/4AAAAAADDD8v//l7z/m3cZAAAAAAAAAI6dre311Xzda37//3Mj1nP958mU8+88av4LaV7+x1rOv1vL/8u19XqV+ftv7h3//95eX/39nX99Nk8Pmv9cnumkW1Yn3SI66Td1+ml6mL172OagNyx/06DT7fXTOT/F4J24ETdjLS7sW7eb/h577Sv72sueDva1X9zX3n+o/dK+9kH63IFiIbefi9X4SdyMt3fay7a5Cfs/P6G9mNCe8++5/2+lnH+/8lXmv5jaO7Vp6f6H3YeO++p01O9548bnf3nh6Hdnos3oPdi3qnL/zjbQn52/yalh/Oz22q1zd6/fuXNrJdJk39KLkSZPWM5/sPM1t3f//8Jue77frx6v9z8cPnL+s2Iz+mPzf6EyX+7vS1PuWxNy/sP0lfN/O7WPPv6Pc/7jj/+XG+gPAAAAAAAAAAAAAAAAfJqiKHYuEX0jIi6n63+aujYTAJiu/PhfJHm5Wq1Wq9Xqk1dXFaO9Xi0i4q/VbcrnDL8Y9cMAgFn2/4j4R9OdoDHyb7H8eX/l9MWmOwNM1e33P/jR9Zs3127dbronAAAAAAAAAMDjyuN/LlfGf34xIpZq6+0b//XNWD7s+J/9PPNggNEnPND3GJvdYa9bGW78+dgZn/vcuPG/z8bD43/nMXF71f0YYzChfTihfW5C+/zIpXtpjbzQoyLn/3xlvPMy/zO14dfbMP5rfcz7Nsj5n63cnsv8v1Rbr5p/8duZy3/joCtuRndf/ufvvPfT87ff/+CVG+9df3ft3bUfX1pZuXDp8uUrV66cf+fGzbULu9+PptczIOefx752Hmi75Pxz5vJvl5z/F1It/3bJ+X8x1fJvl5x/fr4n/3bJ+efXPvJvl5z/S6mWf7vk/L+Savm3y9b2+lyZ/8upruQ/nX/I0qh8/H811Y7/dsn5v5Jq+bdLzv9cquXfLjn/86k+QP4+Hv4Eyfnnd7gc/+2S819JtfzbJed/MdXyb5ec/6VUy79dcv6vplr+7ZLz/1qq5d8uOf/LqZZ/u+T8v55q+bdLzv9KquXfLjn/b6Ra/u2S8/9mquXfLjn/11It/3bJ+X8r1fJvl5z/t1Mt/3bJ+X8n1fJvl5z/66mWf7vsff7/4878ryiKQ2xuxoyZGZxp+p4JAAAAAAAAAAAAAKibxunETe8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfMIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrB3bzFy3fUdwM/sxV47hBgIwUkNrB1jjLNk15f4QutiwrUBSoGEQi/YrndtFnzDa5dAkWwaKJEwKqqomj60BYTaSFWFVfFAK0rzUPXy1LQP9KWiqoTUqApRQEVqK5qtZs7///fM7OzMrne8nj3/z0eyf7szZ+acOXNmdr9rf/cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECzrW+e+XytKIr6n8Zfm4riRfWPN4xvalz2hlu9hQAAAMBK/V/j7+fvSBccWcKNmpb5u1f94zfn5+fniw8O/+7ol+fn0xXjRTG6viga10XX/v1DteZlgseKsdpQ0+dDPVY/3OP6kR7Xj/a4fl2P69f3uH6sx/ULdsACG8qfxzTubHvjw03lLi3uLEYb123vcKvHauuHhuLPchpqjdvMj54sZovTxUwx1bJ8uWytsfy3t9bX9Y4irmuoaV1b6kfIDz99Im5DLezj7S3run6f0Q/eVIz/6IefPvHHF5+9u9PsuRta7q/czp3b6tv52XBJua21Yn3aJ3E7h5q2c0uH52S4ZTtrjdvVP27fzueXuJ3D1zdzVbU/52PFUOPjpxv7aaT5x3ppP20Jl/33vUVRXLm+2e3LLFhXMVRsbLlk6PrzM1YekfX7qB9KLy1GlnWcbl3CcVqf09tbj9P210R8/reG240ssg3NT9MPPrNuwfO+3OM0qj/qxV4r7cdgv18rg3IMxuPi6caDfrzjMbg9PP5P71j8GOx47HQ4BtPjbjoGt/U6BofWDTe2OT0JtcZtrh+Du1uWH26sqdaYz+zofgxOXjxzfnLuk596/eyZ46dmTs2c3bt799Te/fsPHjw4eXL29MxU+fcN7u3Bt7EYSq+BbWHfxdfAa9uWbT5U57/av9fhWJfX4aa2Zfv9Ohxpf3C11XlBLjymy9fGw/WdPnZ1qFjkNdZ4fnat/HWYHnfT63Ck6XXY8WtKh9fhyBJeh/Vlzu9a2vcsI01/Om3DzfpasKnpGGz/fqT9GOz39yODcgyOhePiX3ct/rVgS9jexyeW+/3I8IJjMD3c8N5TvyR9vz92sDE6HZf31K+4bV1xaW7mwv2PHr948cLuIoxV8bKmY6X9eN3Y9JiKBcfr0LKP1yOzr3r8ng6Xbwr7auz19b/GFn2u6svsu7/7c9X46tZ5f7ZcuqcIo89We392+mpe358pS3bZn/VlPju58u/FUy5tev8dXeT9N+b+F8r1pbt6bHh0pHz9Dqe9M9ryftz6VI003rtqjXU/P7m09+PR8Ge134/v7PJ+vLlt2X6/H4+2P7j4flzr9dOOlWl/PsfCcXJ6qvv7cX2ZzXuWe0yOdH0/vjfMWtj/rwtJIeWipmNnseM2rWtkZDQ8rpG4htbjdG/L8qMhm9XX9eSeGztOd95b3tdwenTXrdZxOt62bL+P0/R+tdhxWuv107cb0/58joXj4s693Y/T+jJP7Vv5e+eG+GHTe+e6Xsfg6PC6+jaPpoOwfL+f3xCPwfuLE8W54nQx3bh2XeN4qjXWNfHA0o7BdeHPar9Xbu5yDO5sW7bfx2D6OrbYsVcbWfjg+6D9+RwLx8UTD3Q/BuvLvOVAf7933RkuScs0fe/a/vO1xX7mdU/bbrqZP/Oqb+ffHOj+s9n6MqcPLjdndt9P94VLbuuwn9pfv4u9pqaL1dlPm8N2Pntw8f1U3576Ml8+tMTj6UhRFJc//mDj573h31f+/NJ3v9ny7y6d/k3n8scffO72k3+7nO0HYO17oRwby691Tf8ytZR//wcAAADWhJj7h8JM5H8AAACojJj74/8KT+R/AAAAqIyY+0fCTDLJ/5vf8uzsC5eL1MyfD+L1aTc8VC4XO65T4fPx+evqlz/49Zkf/+Xlpa17qCiKnzz0Gx2X3/xQ3K7SeNjOa29tvXzhDS8vaf3HHrm+XHN//Svh/uPjWeph0KmCO1UUxbfv+GJjPeMfutqYTz10rDHfd+Xxx+rLPH+o/Dze/pmXlcv/QSj/Hjl5vOX2z4T98P0wp97ZeX/E233j6uu2HPjA9fXF29W2vbjxsJ/4cHm/8ffkfOmxcvm4nxfb/r/6wpPfqC//6Gs6b//loc7b/2S436+H+T+vLJdvfg7qn8fbfS5sf1xfvN39X/tOx+2/9vly+fNvK5c7FmZc/87w+fa3PTvbvL8erR1veVzF28vl4vqnvvvbjevj/cX7b9/+saNXW/ZH+/Hx1D+X9zPZtny8PK4n+ou29dfvp/n4jOt/8reOteznXuu/9r5nXlm/3/b139e23HDb7dt/Y9Mffu6LHdcXt+fIn51veTxH3htex2H9T3w4HI/h+v+99sWW9UbH3tv6/hOX/8qmyy2PJ3rHj8r1X3vjqcb8j/Ef//5tL7r9xVdeXd93RfH0+8v767X+U390rmX7v3rXrsbzEa+PHf329S8mrv/CJybOnpu7NDvdtFcbvzvnXeX2rB/bsLG+vXeE99b2z4+eu/iRmQvjU+NTRTFe3V+hd8O+FuZz5biy3NvveiQ8n/f83rc37vinL8TL/+Xh8vKr7yy/br02LPelcPmm8vmbr61w/U9svavx+q49VX7e0mPvgy3b//PgkhYMj7/9+4J4vJ9/+Uca+6F+XePrRnxdr3D7vzdd3s+3wn6dD7+Zedtd19fXvHz83QhX31++3le8/8LbXHxe/yQ83+/+fnn/cbvi4/1e+D7mO5tb3+/i8fGty0Pt99/4LR5XwvtJcaW8Pi4V9/fV5+/quHnx95AUV+5ufP476X7uXtbDXMzcJ+cmT8+evfTo5MWZuYuTc5/81NEz5y6dvXi08bs8j3601+2vvz9tbLw/Tc/s31dMbSiK4lwxtQpvWDdn++sfLW37zz9yYvrA1I7pmZPHL528+Mj5mQunTszNnZiZnttx/OTJmU/0uv3s9OHdew7tPbBn4tTs9OGDhw7tPTQxe/ZcfTPKjeph/9THJs5eONq4ydzhfYd2P/DAvqmJM+emZw4fmJqauNTr9o2vTRP1W//6xIWZ08cvzp6ZmZib/dTM4d2H9u/f0/O3AZ45f3JufPLCpbOTl+ZmLkyWj2X8YuPi+te+Xrenmub+rfx+tl2t/EV8xXvu259+P2vd1z+z6F2Vi7T9AtFnw++i+YeXnD+4lM9j7h8NM8kk/wMAAEAOYu5fF2Yi/wMAAEBlxNy/PsxE/gcAAIDKiLl/LMwkk/yv/6//v7T+f3m9/n9e/f/zHy97pWu9/x/78/r/ebjF/f8Vr1//X/+/ev3/pffn1/r26//r/7PQoPX/Y+7fUBRZ5n8AAADIQcz9G8NM5H8AAACojJj7bwszkf8BAACgMmLuf1GYSSb5X/9/Sf3/Pb0KV9Xv/zv/v/5/sTb7//HJ0f/PxrL79x94uOVT/f9A/1//X/9f/1//nxUbXfSaW9X/j7n/9jCTTPI/AAAA5CDm/heHmcj/AAAAUBkx998RZiL/AwAAQGXE3L8pzCST/K//7/z/+v/6/5Xu/6/0/P9NG6P/vzY4/393+v893HD/f0z/fy32/0f7u/2D3f/vufn6/9wUg3b+/5j7XxJmkkn+BwAAgBzE3P/SMBP5HwAAACoj5v6XhZnI/wAAAFAZMfffGWaSSf7X/9f/1//X/9f/77z+3uf/Lz/S/x8s+v/d6f/34Pz/efX/+7z9g93/7/f5/0ff2n57/X86GbT+f8z9Lw8zyST/AwAAQA5i7r8rzET+BwAAgMqIuf8VYSbyPwAAAFRGzP2bw0wyyf/6//r/+v/6//r/ndffu/9f0v8fLPr/3en/96D/r/+v/7+0/n+Hb371/+lk0Pr/MfffHWaSSf4HAACAHMTcf0+YifwPAAAAlRFz/0+Fmcj/AAAAUBkx928JM8kk/+v/6//r/+fV/79vnf6//n+16f93p//fg/6//r/+/xLP/7/Qcvr/63vdGZUxaP3/mPtfGWaSSf4HAACAHMTc/6owE/kfAAAAKiPm/leHmcj/AAAAUBkx94+HmWSS//X/q9X//9O/fuLVhf6//n+P9Ve0/x8PA/3/zOn/d6f/34P+v/6//v+q9P/Jx6D1/2Pu3xpmkkn+BwAAgBzE3L8tzET+BwAAgMqIuf/eMBP5HwAAACoj5v7tYSaZ5H/9/2r1/yP9f/3/buuvaP8/0f/Pm/5/B00vUv3/HvT/9f+z7//H7371/+mPQev/x9z/mjCTTPI/AAAA5CDm/h1hJvI/AAAAVEbM/a8NM5H/AQAAoDJi7t8ZZpJJ/tf/1//X/9f/1//vvH79/7VJ/7+75fb/1+n/6//r/2fW/3f+f/pr0Pr/Mfe/Lswkk/wPAAAAOYi5f1eYifwPAAAAlRH//2b5/17lfwAAAKiimPsnwkwyyf/6//r/OfX/a/r/+v/6/5Wn/9+d8//3oP+v/6//r/9PXw1a/z/m/teHmWSS/wEAACAHMfffH2Yi/wMAAEBlxNw/GWYi/wMAAEBlxNw/FWaSSf7X/9f/z6n/n9X5/9cvvn79f/3/KtP/707/vwf9f/3/qvX/i0L/n1tq0Pr/MffvDjPJJP8DAABADmLu3xNmIv8DAABAZcTcvzfMRP4HAACAyoi5f1+YSSb5X/9f//8m9v9HC/3/luPD+f/1//X/bz79/+70/3u4+f3/DYX+/01zq7d/IPv/zv/PLTZo/f+Y+x8IM8kk/wMAAEAOYu7fH2Yi/wMAAEBlxNx/IMwk5P9O/68bAAAAWFti7j8YZpLJv//r/1ek//+bf9+y7gHp/zv/f9vxUa3+/wb9/zD1/wdLRfv/7S+LG6b/34Pz/+v/6//r/9NXg9b/j7n/UJhJJvkfAAAAchBz/xvCTOR/AAAAqIyY+386zET+BwAAgMqIuf9nwkwyyf/6/xXp/7fR/9f/77Z+5//X/6+yivb/+6ZS/f8h/X/9/8Hafv1//X8Wuvn9//jR0vr/MfcfDjPJJP8DAABADmLu/9kwE/kfAAAAKiPm/jeGmcj/AAAAUBkx9x8JM8kk/+v/6//r/+v/35z+/xuLdoPY/68fPPr/1aL/312l+v/O/6//P2Dbr/+v/89Cg3b+/5j73xRmkkn+BwAAgBzE3P9gmIn8DwAAAJURc/+bw0zkfwAAAKiMmPvfEmaSSf7X/9f/1//X/3f+/87r1/9fm/T/u9P/70H/X/9f/1//n74atP5/zP1vDTPJJP8DAABADmLuf1uYifwPAAAAlRFz/9vDTOR/AAAAqIyY+98RZpJJ/tf/1//X/9f/1//vvH79/7VJ/787/f8e9P/1//X/9f/pq0Hr/8fc/3NhJpnkfwAAAMhBzP0PhZnI/wAAAFAZMfe/M8xE/gcAAIDKiLn/XWEmmeR//X/9f/1//X/9/87r1/9fm/T/u9P/70H/X/9f/1//n74atP5/zP3vDjPJJP8DAABADmLu//kwE/kfAAAAKiPm/veEmcj/AAAAUBkx9/9CmEkm+V//X/9/sPr/85ebb6f/r/9f9Kv/X7+R/n8W9P+70//voUP/f73+v/6//r/+Pzds0Pr/Mfe/N8wkk/wPAAAAOYi5/31hJvI/AAAAVEbM/e8PM5H/AQAAoDJi7n84zCST/K//n2X/Pz3kwev/O/+//r/z/+v/r4z+f3f6/z04/7/+v/6//j99NWj9/5j7HwkzyST/AwAAQA5i7v9AmIn8DwAAAJURc/8vhpnI/wAAAFAZMfd/MMwkk/yv/59l///mn/+/1nn78+v/j7QcHzn1/8eans90XOr/6/+vAv3/7vT/e9D/1/8f5P5/OJo3LHJ7/X8G0aD1/2Pu/1CYSSb5HwAAAHIQc/8vhZnI/wAAAFAZMff/cpiJ/A8AAACVEXP/r4SZZJL/9f/1/53/3/n/nf+/8/r1/9cm/f/u9P970P/X/x/k/n8P+v8MokHr/8fc/6thJosGv+f+awkPEwAAABggMfd/OMwkk3//BwAAgBzE3H80zET+BwAAgMqIuf9YmEkm+V//v73/H8+oqv+v/6//r/+v/78W9a///4rbi0L/X/9f/1//X/9f/5+VGLT+f8z9x8NMMsn/AAAAkIOY+38tzET+BwAAgMqIuf9EmIn8DwAAAJURc/90mEkm+f8W9v9HB7P/7/z/N9r//4n+v/5/oP/fmf7/6nD+/+70/3vQ/9f/1//X/6evBq3/H3P/TJhJJvkfAAAAKiz9ODjm/pNhJvI/AAAAVEbM/afCTOR/AAAAqIyY+z8SZpJJ/nf+f/1/5/+/Ff3/kZbl9f9L+v/6//2g/9+d/n8P+v9ruv9f3zf6//r/DJZB6//H3D8bZpJJ/gcAAIAcxNz/0TAT+R8AAAAqI+b+j4WZyP8AAABQGTH3nw4zyST/6//r/+fe/68VxRXn/9f/77R+/f+1Sf+/O/3/HvT/13T//1Zvv/6//j8LDVr/P+b+M2EmmeR/AAAAyEHM/WfDTOR/APh/9u6jyc67yuP4HY+tsJp5CbOe1SyHlXkJbNlRxZoiGYpkbJMzmJyDSSbnnEzOmJyDyTmaaKgS5dY5R2r11XMl9VXf5/mfz2dzkFBzb1ttUT+arx8AgGHk7r933GL/AwAAwDBy998nbmmy//X/+v/u/f9qJ8//3//r9f+n6f/1/9twoL+/cv2vO18Uft7+///+/5p76P/1//r/Sfp//b/+n3PNrf/P3X/fuKXJ/gcAAIAOcvffL26x/wEAAGAYufvvH7fY/wAAADCM3P3XxC1N9r/+X/+v/9f/7+v/b9H/6/+XzfP/p+n/N9D/6//1//p/tmpu/X/u/gfELU32PwAAAHSQu/+BcYv9DwAAAMPI3X/6/5Bz65l/w/4HAACAYZze/SdWD4pbmux//b/+X/+/lP7/mOf/n/P56P/1/+vo/6fp/zfQ/+v/9f/6f7Zqbv1/7v4Hxy1N9j8AAAB0kLv/IXGL/Q8AAADDyN3/0LjF/gcAAIBh5O5/WNzSZP/r//X/+v+l9P9H9Px//b/+f+FuWp35M0H/f5D+f4MN/f9qpf+fcsH9/PpPbznv/zz0//p/Dppb/5+7/9q45a6r1bFL/SQBAACAWcnd//C4pcn3/wEAAKCD3P3XxS32PwAAAAwjd//1cUuT/a//1//r//X/+v/1r6//XybP/592+P7/f//7Xvfs2/97/v80z//fdv9/51eG/p9lm1v/n7v/hrilyf4HAACADnL3PyJusf8BAABgGLn7Hxm32P8AAAAwjNz9j4pbmux//f9o/f9/7vu4s/r/vdpF/6//1//r/0en/5/m+f8b7P0xd7J+qP/X/3v+v/6fw5lb/5+7/9FxS5P9DwAAAB3k7n9M3GL/AwAAwDBy9z82brH/AQAAYBi5+x8XtzTZ//r/0fr//R/n+f/6/3Wvr//X/49M/z9N/7/BKM//v8Svml3384e16/ev/9f/c9Dc+v/c/Y+PW5rsfwAAAOggd/8T4hb7HwAAAIaRu/+JcYv9DwAAAMPI3f+kuKXJ/tf/6/+X0f/nK+j/9f+Xv/9P+v9l0v9P0/9vMEr/f4l23c8v/f3r//X/HDS3/j93/5Pjlib7HwAAADrI3f+UuMX+BwAAgGHk7n9q3GL/AwAAwDBy9z8tbmmy//X/+v9l9P+e/6//9/x//f+F0f9P0/9voP/X/+v/9f9s1dz6/9z9N8YtTfY/AAAAdJC7/+lxi/0PAAAAw8jd/4y4xf4HAACAYeTuf2bc0mT/6//1//p//b/+f/3r6/+XSf8/Tf+/gf5f/6//1/+zVTPq/8/6qBOrZ8UtTfY/AAAAdJC7/9lxi/0PAAAAw8jd/5y4xf4HAACAYeTuf27c0mT/6/9n0//v5Xxj9f8nV6uV/n/VtP8/edbvZ31d6v/1/0dA/z9N/7+B/l//r//X/7NVM+r/936cu/95cUuT/Q8AAAAd5O5/ftxi/wMAAMAwcve/IG6x/wEAAGAYuftfGLc02f/6/9n0/3vG6v89///cr49O/b/n/x+k/z8a+v9p+v8N9P/6f/2//p+tmlv/n7v/RXHTsasu+VMEAAAAZiZ3/4vjlibf/wcAAIAOcve/JG6x/wEAAGChbjzwM7n7Xxq3NNn/+v/t9v/Hzvo5/b/+/9yvD/2//l//f/np/6fp/zfQ/+v/9f/6f7Zqbv1/7v6XxS1N9j8AAAB0kLv/prjF/gcAAIBh5O5/edxi/wMAAMAwcve/Im5psv/1/57/r//X/+v/17++/n+Z9P/T9P8b6P/1/7vt/4+f+Zf6f8ZwEf3/qVOnrrvs/X/u/lfGLU32PwAAAHSQu/9VcYv9DwAAAMPI3f/quMX+BwAAgGHk7r85bmmy//X/Tfv//FJfVv9//Wql/9f/6//1/9P0/9P0/xvo//X/nv+v/2er5vb8/9z9r4lbmux/AAAA6CB3/2vjFvsfAAAAhpG7/3Vxi/0PAAAAw8jd//q4pcn+1/837f89/1//r/8/6v7/jpX+/0gsov8/ef7Xn3v/f4P+X/8/oV3/f7e77Puh/l//z0Fz6/9z978hbmmy/wEAAKCD3P1vjFvsfwAAABhG7v43xS32PwAAAAwjd/+b46Yrm+x//b/+X/+v/9f/r3/9I37+/7HVaqX/34JF9P8T5t7/b+f5/+f+XX6G/l//v+T3r//X/3PQ3Pr/3P1viVua7H8AAADoIHf/W+MW+x8AAACGkbv/bXGL/Q8AAADDyN3/9rilyf7X/+v/9f/6/+H7/xsW0f97/v+W6P+nzaP/Pz/9v/5/ye9f/6//58Ltqv/P3f+OuKXJ/gcAAIAOcve/M26x/wEAAGAYufvfFbfY/wAAADCM3P3vjlua7H/9v/7/Yvr/fJ/6/7H6/+Oz6/9P7PvPa/L8f/3/luj/p+n/N9D/6//1/zfq/9mmuT3/P3f/e+KWJvsfAAAAOsjd/9649T/d2v8AAAAwjNz974tb7H8AAAAYRu7+98ctTfa//l//7/n/+v/hn/+v/29F/z9N/7+B/l//r//3/H+2am79f+7+D8QtTfY/AAAAdJC7/4Nxi/0PAAAAw8jd/6G4xf4HAACAYeTuvyVuabL/9f/6f/2//l//f/r3UP8/Bv3/tKPp/0/q//X/1c//R/xdoP/X/2/6eMY0t/4/d/+H45Ym+x8AAAA6yN3/kbjF/gcAAIBh5O7/aNxi/wMAAMAiXbnm53L3fyxuabL/9f/6f/2//l//v/719f/LtJP+P78o9P+e/x/69P//s+9HS3v+/7n//aX/1/+zfXPr/3P3fzxuabL/AQAAoIPc/Z+IW+x/AAAAGEbu/k/GLfY/AAAADCN3/6filib7X/+v/9f/6//1/+tfX/+/TJ7/P03/v4H+f6fPz1/6+9f/6/85aG79f+7+T8ctTfY/AAAAdJC7/zNxi/0PAAAAw8jd/9m4xf4HAACAYezt/ozLGu5//b/+X/+v/9f/r399/f8y6f+n6f830P/r//X/+n+2am79/+f2PurE6vNxS5P9DwAAAB3k7v9C3GL/AwAAwDBy998at9j/AAAAMIzc/V+MW5rsf/2//n8Z/f+pU6eu0//r//d/Pmf6/9v0/xT9/zT9/wb6f/2//l//z1bNrf/P3f+luKXJ/gcAAIAOcvd/OW6x/wEAAGAYufu/ErfY/wAAADCM3P1fjVua7H/9/wz6/xP6f8//1/+vPP9f/78l+v9p+v8NRuz/T1z4p7/rfv6wdv3+9f/6fw6aW/+fu/9rcUuT/Q8AAAAd5O7/etxi/wMAAMAwcvd/I26x/wEAAGAYufu/Gbc02f/6/6Pr/+/8a9fl+f8nV+vfv/5f/6//1/9fbvr/afr/DUbs/y/Crvv5pb9//b/+n4Pm1v/n7v9W3LJ/+F11cZ8lAAAAMCe5+78dtzT5/j8AAAB0kLv/O3GL/Q8AAADDyN3/3bilyf7X/8/g+f8D9v+e/7/+60P/P+v+/wr9/xj0/9P0/xvo//X/+v8t9f/51az/725u/X/u/u/FLU32PwAAAHSQu//7cYv9DwAAAMPI3f+DuMX+BwAAgGHk7r8tbjlr/69ru0eh/9f/6//1//r/9a+v/18m/f+0C+3/j68O1/8n/b/+X//ftf/3/H9Om1v/n7v/h3GL7/8DAADA4lx1np/P3f+juMX+BwAAgGHk7v9x3GL/AwAAwDBy9/8kbrn9il29pSOl/9f/6//1//r/9a+v/18m/f80z//fQP+/jX7+av3/GP3/aqX/5/Dm1v/n7v9p3OL7/wAAADCM3P0/i1vsfwAAABhG7v6fxy32PwAAAAwjd/8v4pYm+1//r/8/ZP+/l2bq/0/T/5+m/19P/3809P/T9P8b6P89/1//7/n/bNXc+v/c/b+MW5rsfwAAAOggd/+v4hb7HwAAAIaRu//Xccva/X/siN4VAAAAsE25+38TtzT5/v/O+v/4S63/X3z/7/n/+n/9v/5/VvT/0/T/G+j/9f/6f/0/WzW3/j93/2/jlib7HwAAADrI3f+7uMX+BwAAgGHk7v993GL/AwAAwDBy9/8hbmmy/z3/X/+v/9f/6//Xv77+f5n0/9P0/+vVb5T+X/+v/9f/s1Vz6/9z9/8xbmmy/wEAAKCD3P1/ilvsfwAAABhG7v7b4xb7HwAAAIaRu//PcUuT/a//1//r//X/+v/1r6//Xyb9/7Rd9v93/6/NL+v5/zvv//Mt6P/1//p/tmJu/X/u/r/ELU32PwAAAHSQu/+vcYv9DwAAAMPI3f+3uMX+BwAAgGHk7v973NJk/2/o/4/XL9T/T9L/73//+v/1Xx/6f/2//v/y0/9P8/z/DY6i/88/RI6w/z91Af/shdUM+vnD2vX71//r/zlobv1/7v5/xC1N9j8AAAB0kLv/jrjF/gcAAIBh5O7/Z9xi/wMAAMAwcvf/K25psv89/39J/f/V+n/9/3n6/2tv1v+f+fX6/970/9P0/xt4/r/+X/+v/2er5tb/5+7/dwAAAP//OS9W6A==")
r0 = syz_open_procfs(0x0, &(0x7f0000001940)='net/psched\x00')
read$FUSE(r0, &(0x7f0000003ec0)={0x2020, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
chown(&(0x7f0000001980)='./file1\x00', 0x0, r1)

3.152529702s ago: executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$unix(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000900), 0x2, 0x0, 0xfffffffffffffdef}, 0x0)

2.610781673s ago: executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r0, &(0x7f00000000c0)="091499f0954ba35923c728256c5bd0dff501000000765a4e1a02ace2a5fb5a21254df21fc67f732b124fea393b0500361ab713fe7d8c95e30f15388e6fd9c1ef991adaac0701c1a5bab3a7d3807747f6770ca37441d9aed1634d856ef8d2b565495e944bf8a612c2ea9f9679caba5b23db53218e3ab85f637be701000000cefd25fe53b5da08dc1bb88ab809ffd6235d22e6de444bb722b56549b91923490d758ba6b6789a6de91e08dbcbe87f20200f87f02ed96ec6928e74dd737ad22441d9e39c7de4fb9446d63fd9", 0xfeb0, 0x0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0xc54, 0x4)
recvmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

2.499179527s ago: executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x16, &(0x7f0000000080), 0x1, 0x5124, &(0x7f000000a2c0)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0)
lsetxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300), &(0x7f0000000000)=@md5={0x1, "1bc1120b4367acaaba77705abf88d3f9"}, 0x11, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x1)
ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000440))
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000150000000000000000000000000000000000000000000000000000000000000000ffffffff01000000110000000000000086dd636169663000000000000000e0ff000076657468315f746f5f7465616d00400073797a6b616c6c65723100000000000076657468315f746f5f7465616d000000aaaaaaaaaabb0000000000000180c2004994f6d3000000000000e8000000e800000018010000697036000000000000000000000000000000000000000000000000000000000050000000000000e4f05cffa707a40cb664c67af36e139d00fe800000000000000000000000000000e06fb232b2421d9f8882ae3685100000000000000000ff00000000000000000000115e000000f90000001900000000004155444954000000000000000000080000000000001000"/424]}, 0x220)

2.158774977s ago: executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0xb, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50032, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200002, 0x3, &(0x7f0000a00000/0x600000)=nil)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), 0xffffffffffffffff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0)

2.055669526s ago: executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"})
r1 = syz_open_pts(r0, 0x801)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x15)
write$UHID_INPUT(r2, 0x0, 0x0)

947.347793ms ago: executing program 2:
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
r1 = gettid()
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4)
syz_emit_ethernet(0x6e, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, [], "1e520b4c951ee12e"}}}}}}}, 0x0)
recvmmsg(r2, &(0x7f0000002780)=[{{0x0, 0xfffffffffffffde1, 0x0}}], 0x1, 0x2140, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000006c0)={{0x0, 0x0, 0x3, 0x0, 'syz0\x00'}, 0x100000, 0x0, 0x40, r1, 0x0, 0x0, 'syz1\x00', 0x0})
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000202505a1a4400000000101090244000101000000090400001902020000052406000005240000000d240f0100000000000000000009058103ff030000030905820208000000000905030210"], 0x0)

940.655064ms ago: executing program 4:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10)
listen(r0, 0x0)
shutdown(r0, 0x0)

882.513586ms ago: executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0)
write$sequencer(r0, &(0x7f0000000100)=[@generic={0x2}, @v={0x93, 0x0, 0x0, 0x0, @generic}], 0x9)
ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101)
ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101)
write$sequencer(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="04"], 0x8)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0))
r1 = gettid()
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r1, 0x14)

809.749189ms ago: executing program 4:
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000010c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
read$FUSE(r0, &(0x7f0000006940)={0x2020, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000140)='./file0\x00', 0x810, &(0x7f0000004800)=ANY=[@ANYBLOB='dmask=00000000000000000000007,utf8,iocharset=iso8859-1,allow_utime=00000000000000000002001,fmask=00000000000000000000002,allow_utime=00000000000000000000005,umask=00000000000000000000001,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX, @ANYRESHEX=r1], 0x1, 0x14fe, &(0x7f0000002a40)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r3, 0xfffffffffffffffe, 0x29)

699.35143ms ago: executing program 3:
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0xd)

577.703619ms ago: executing program 4:
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040)=0x2, 0x4)
bind$rds(r0, &(0x7f0000000080)={0x2, 0x1, @local}, 0x10)

554.430628ms ago: executing program 3:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$unix(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000900), 0x2, 0x0, 0xfffffffffffffdef}, 0x0)

433.379925ms ago: executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, 0x0, 0x0)
r1 = socket(0x11, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x20, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_MAX_P={0x8}]}}]}, 0x4c}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_int(r3, 0x1, 0x20, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
sendmmsg$inet(r0, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r5 = socket(0xa, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x2a8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c)

349.873089ms ago: executing program 4:
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2208050, &(0x7f0000000140)=ANY=[], 0x1, 0x1516, &(0x7f0000001c00)="$eJzs3Am4T+X2OPC13vfdHDJ8k8x7vWvzTYaXJMmQJEOSJCGZE5IkSZLEIVMSkpDxJJlD5nTSMc9D5qSTK0mSkJDk/T+n4e823H/33l/3r9896/M8+znv2nu/a6991vmePTzPOV90HVa9UY0q9ZkZ/h365wH++CURABIAYCAAZAeAAADK5CiTI217Jo2J/9ZBxH9IgxmXuwJxOUn/0zfpf/om/U/fpP/pm/Q/fZP+p2/S//RN+i9EujYr75WypN9F3v//L6f+J5Pl+v/fB/G3q/7RvtL//zb6X9pb+p9uZPi9ldL/9OL3LwHS//RN+p+eBZe7AHGZyec/fZP+C5Gu/envlDecu9zvtGX5FxYhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEOL/g3P+EgMAP48vd11CCCGEEEIIIYT48/i3LncFQgghhBBCCCGE+M9DUKDBQAAZICMkQCbIDFdAFsgK2SA7xOBKyAFXQU64GnJBbsgDeSEf5IcCEAKBBYYICkIhiMM1UBiuhSJQFIpBcXBQAkrCdVAKrofScAOUgRuhLNwE5aA8VICKcDNUglugMtwKVeA2qArVoDrUgNuhJtwBteBOqA13QR24G+rCPVAP7oX60AAawn3QCO6HxtAEmkIzaA4toOUfzE/K/nvzn4Ee8Cz0hF6QCL2hDzwHfaEf9IcBMBCeh0HwAgyGF2EIDIVh8BIMh5dhBLwCI2EUjIZXYQyMhXEwHibAREiC12ASvA6T4Y37s8JUmAbTYQbMhFnwJsyGOTAX3oJ5MB8WQFKmRbAYlsDbsBTegWR4F5bBe5ACy2EFrIRVsBrWwFpYB+thA2yETbAZtsBW2Abvw3bYATthF+yGPbAXPoB98CHsh48gFT/+F+ef/eV86IaAgAoVGjSYATNgAiZgZsyMWTALZsNsGMMY5sAcmBNzYi7MhXkwD+bDfFgACyAhISNjQSyIcYxjYSyMRbAIFsNi6NBhSSyJpfB6LI2lsQyWwbJYFstheSyPFbEiVsJKWBkrYxWsglWxKlbH6ng73o53YC2shbWxNtbBOlgX62I9rIf1sT42xIbYCBthY2yMTbEpNsfm2BJbYitsha2xNbbFttgO22F7bI8dsAN2xI7YCTthZ+yMXbALdsWu2A2fxqfxGXwGn8VnsRdWVb2xD/bBvtgX++MAHIDP4yB8AV/AF3EIDsVh+BK+hC/jCDyDI3EUjsbRWEmNxXE4HllNxCRMwowwCSfjZJyCU3EqTscZOBNn4SycjXNwDr6F83A+zseFuBAX4xJcgkvxHUzGZFyGZzEFl+MKXImrcDWuwrW4DtfiBtyIG3AzbsatuBXfx/dxB+7AXbgL9+Ae/AA/wA/xQxyCqZiKB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5wDgPJ7HC3gBL+LFtA+/SmOUURlUBpWgElRmlVllUVlUNpVNxVRM5VA5VE6VU+VSuVQelUflU/lUAVVAkSLFKlIFVUEVV3FVWBVWRVQRVUwVU045VVKVVKVUKVValVZl1I2qrLpJlVPlVRtXUVVUlVRbV1ndqqqoKqqqqqaqqxqqhqqpaqpaqpaqrWqrOqqOqqvuUfVUb+yPDVRaZxqpodhYDcOmqplqrlqol/EB1UqNwNaqjWqrHlKjcCS2V61cB/Wo6qjGYSf1uBqPT6guaiJ2VU+pbupp1V09o3qo1q6n6qWmYG/VR03Hvqqf6q8GqNlYTaV1rLp6UQ1RQ9Uw9ZJajC+rEeoVNVKNUqPVq2qMGqvGqfFqgpqoktRrapJ6XU1Wb6gpaqqapqarGWqmmqXeVLPVHDVXvaXmqflqgVqoFqnFaol6Wy1V76hk9a5apt5TKWq5WqFWqlVqtVqj1qp1ar3aoDaqTWqz2qK2qm3qfbVd7VA71S61W+1Re9UHap/6UO1XH6lU9bE6oP6mDqpP1CH1qTqsPlNH1OfqqPpCHVNfquPqK3VCnVSn1NfqtPpGnVFn1Tn1rTqvvlMX1PfqovIKNGqltTY60Bl0Rp2gM+nM+gqdRWfV2XR2HdNX6hz6Kp1TX61z6dw6j8mr8+n8uoAONWmrWUe6oC6k4/oaXVhfq4voorqYLq6dLqFL6ut0KX29Lq1v0GX0jbqsvkmX0+V1BQ/6Zl1J36Ir61t1FX2brqqr6eq6hr5d19R36Fr6Tl1b36Xr6Lt1XX2Prqfv1fV1A91Q36cb6ft1Y91EN9XNdHPdQrfUD+hW+kHdWrfRbfVDup1+WLfXj+gO+lHdUT+mO+nHdWf9hO6in9Rd9VO6m35ad9ff64va6566l07UvXUf/Zzuq/vp/nqAHqif14P0C3qwflEP0UP1MP2SHq5f1iP0K3qkHqVH61f1GD1Wj9Pj9QQ9USfp1/Qk/bqerN/QU/RUPU1P1zP0TN3/p0xz/4n5r//O/ME/HH2r3qbf19v1Dr1T79K79R69V+/V+/Q+vV/v16k6VR/QB/RBfVAf0of0YX1YH9FH9FF9VB/Tx/RxfVyf0Cf1t/prfVp/o8/os/qs/laf1+f1hZ++B2DQKKONMYHJYDKaBJPJZDZXmCwmq8lmspuYudLkMFeZnOZqk8vkNnlMXpPP5DcFTGjIWMMmMgVNIRM315jC5lpTxBQ1xUxx40wJU9Jc9z+e/0f1tTQtTSvTyrQ2rU1b09a0M+1Me9PedDAdTEfT0XQynUxn09l0MV1MV9PVdDPdTHfT3fQwPUxP09MkmkTTxzxn+pp+pr8ZYAaa580gM8gMNoPNEDPEDDPDzHAz3IwwI8xIM9KMNqPNGDPGjDPjzAQzwST57GaSmWQmm8lmiplipg3MbmaYGWaWmWVmm9lmrplr5pl5ZoFZYBaZRWaJWWKWmqUm2SSbZWaZSTHLzXKz0qw0q81qs9asNevNerPRbDSbzWaTYraZbWa72W52mp1mt9lt9pq9Zp/ZZ/ab/SbVpJoD5oA5aA6aQ+aQOWwOmyPmiDlqjppj5pg5bo6bE+aEOWVOmdPmtDljzphz5pw5b86bC+aCuWgupt32BSpQgQlMkCHIECQECUHmIHOQJcgSZAuyBbEgFuQIcgQ5g6uDXEHuIE+QN8gX5A8KBGFAgQ04iIKCQaEgHlwTFA6uDYoERYNiQfHABSWCksF1Qang+qB0cENQJrgxKBvcFJQLygcVgorBzUGl4JagcnBrUCW4LagaVAuqBzWC24OawR1BreDOoHZwV1AnuDuoG9wT1AvuDeoHDYKGwX1Bo+D+oHHQJGgaNAuaBy2Cln9qfu/P5H7Q9Qx7hYlh77BP+FzYN+wX9g8HhAPD58NB4Qvh4PDFcEg4NBwWvhQOD18OR4SvhCPDUeHo8NVwTDg2HBeODyeEE8Ok8LVwUvh6ODl8I5wSTg2nBdPDGeHMcFb4Zjg7nBPODd8K54XzwwXhwnBRuDhE/PFuPDl8N1wWvhemhMvDFeHKcFW4OlwTrg3XhevDDeHGcFO4ucygH3cNt4c7wp3hrnB3uCfcG34Q7gs/DPeHH4Wp4cfhgfBv4cHwk/BQ+Gl4OPwsPBJ+Hh4NvwiPhV+Gx8OvwhPhyUwQfh2eDr8Jz4Rnw3Pht+H58LvwQvh9eDH0aTf3aZd3MmQoA2WgBEqgzJSZslAWykbZKEYxykE5KCflpFyUi/JQHspH+agAFaA0TEwFqSDFKU6FqTAVoSJUjIqRI0clqSSVolJUmkpTGSpDZakslSNLFagC3Uw30y10C91Kt9JtdBtVo2pUg2oQYk2qRbWoNtWmOlSH6lJdqkf1qD7Vp4bUkBpRI2pMjakpNaXm1JxaUktqRa2oNbWmttSW2lE7ak/tqQN1oI7UkTpRJ+pMnakLdaGu1JW6UTfqTt2pB/WgntSTEimR+lAf6kt9qT/1p4E0kAbRIBpMg2kIDaFhNIyG03AaQSNoJI2i0fQqjaGxNI7G0wSaSEmURJNoEk2myTSFptA0mkYzaAbNolk0m2bTXJpL82geLaAFtIgW0RJaQktpKSVTMi2jZZRCKbSCVtAqWkVraA2to3W0gTbQJtpEW2gLbaNttJ22007aSbtpN+2lvbSP9tF+2k+plEoH6AAdpIN0iA7RYTpMR+gIHaWjdIyO0XE6TifoBJ2iU3SaTtMZOkPn6Bydp+/oAn1PF8lTgs1kM9srbBab1Waz2e2v4zw2r81n89sCNrS5bO5fxGStLWKL2mK2uHW2hC1pr/tNXM6WtxVsRXuzrWRvsZVtOZsJ/j6uae+wteydtra9y9awt/8irmPvtnXt/baebWLr22a2oW1hG9n7bWPbxDa1zWxz28K2sw/b9vYR28E+ajvax34TL7Xv2HV2vd1gN9p99kN7zn5rj9ov7Hn7ne1pe9mB9nk7yL5gB9sX7RA79JcxgB1tX7Vj7Fg7zo63E+zE38TT7HQ7w860s+ybdrad85t4iX3bzrPJdoFdaBfZxT/EaTUl23ftMvueTbHL7Qq70q6yq+0au/b/1rrSbrZb7Fa7135gt9sddqfdZXfbPT/Eaeex335kU+3H9oj93B60n9hD9pg9bD/7IU47v2P2S3vcfmVP2JP2lP3anrbf2DP27A/nn3buX9vv7UXrLTCyYs2GA87AGTmBM3FmvoKzcFbOxtk5xldyDr6Kc/LVnItzcx7Oy/k4PxfgkIktM0dckAtxnK/hwnwtF+GiXIyLs+MSXJKv41J8PZfmG7gM38hl+SYux+W5Alfkm7kS38KV+VauwrdxVa7G1bkG3841+Q6uxXdybb6L6/DdXJfv4Xp8L9fnBtyQ7+NGfD835ibclJtxc27BLfkBbsUPcmtuw235IW7HD3N7foQ78KPckR/jTvw4d+YnuAs/yV35Ke7GT3N3foZ78LPck3txIvfmPvwc9+V+3J8H8EB+ngfxCzyYX+QhPJSH8Us8nF/mEfwKj+RRPJpf5TE8lsfxeJ7AEzmJX+NJ/DpP5jd4Ck/laTydZ/BMnsVv8myew3P5LZ7H83kBL+RFvJiX8Nu8lN/hZH6Xl/F7nMLLeQWv5FW8mtfwWl7H63kDb+RNvJm38Fbexu/zdt7BO3kX7+Y9vJc/4H38Ie/njziVP+YD/Dc+yJ/wIf6UD/NnfIQ/56P8BR/jL/k4f8Un+CSf4q/5NH/DZ/gsn+Nv+Tx/xxf4e77IniHCSEU6MlEQZYgyRglRpihzdEWUJcoaZYuyR7HoyihHdFWUM7o6yhXljvJEeaN8Uf6oQBRGFNmIoygqGBWK4tE1UeHo2qhIVDQqFhWPXFQiKhldF5WKro9KRzdEZaIbo7LRTVG5qHxUIaoY3RxVim6JKke3RlWi26KqUbWoelQjuj2qGd0R1YrujGpHd0Wlo7ujutE9Ub3o3qh+1CBqGN0XNYrujxpHTaKmUbOoedQiahk9ELWKHoxaR22ittFDUbvo4ah99EjUIXo06hg9dml70eDHq+mvtidGvSP90xuyO/Wi+OL4kvjb8aXxd+LJ8Xfjy+LvxVPiy+Mr4ivjq+Kr42via+Pr4uvjG+Ib45vim+Nb4lvj3tfICA7THoTBuMBlcBldgsvkMrsrXBaX1WVz2V3MXelyuKtcTne1y+Vyuzwur8vn8rsCLnTkrGMXuYKukIu7a1xhd60r4oq6Yq64c66EK+lauJaupWvlHnStXRvX1j3kHnIPu4fdI+4R96jr6B5zndzjrrN7wnVxT7on3VOum3vadXfPuB7uWdfT9XKJLtH1cX1cX9fX9Xf93UA30A1yg9xgN9gNcUPcMDfMDXfD3Qg3wo10I91oN9qNcWPcODfOTXATXJJLcpPcJDfZTXZT3BQ3zU1zM9wMN8vNcrPdbDfXzXXz3Dy3wC1wi9wit8QtcUvdUpfskt0yt8yluBS3wq1wq9wqt8atcevcOrfBbXCb3Ca3xW1x29w2t91tdzvdTrfb7XZ73V63z+1z+91+l+pS3QF3wB10B90h96k77D5zR9zn7qj7wh1zX7rj7it3wp10p9zX7rT7xp1xZ9059607775zF9z37qLzLin2WmxS7PXY5NgbsSmxqbFpsemxGbGZsVmxN2OzY3Nic2NvxebF5scWxBbGFsUWx5bE3o4tjb0TS469G1sWey+WElseWxFbGVsVWx3zPv/2yBf0hXzcX+ML+2t9EV/UF/PFvfMlfEl/nS/lr/el/Q2+jL/Rl/U3+XK+vK/gm/imvplv7lv4lv4B38o/6Fv7Nr6tf8i38w/79v4R38E/6jv6x3wn/7jv7J/wXfyTvqt/av5PP56+h3/W9/S9fKLv7fv453xf38/39wP8QP+8H+Rf8IP9i36IH+qH+Zf8cP+yH+Ff8SP9KD/av+rH+LF+nB/vJ/iJPsm/5if51/1k/4af4qf6aX66n+Fn+ln+TT/bz/Fz/Vt+np/vF/iFfpFf7Jf4t/1S/45P9u/6Zf49n+KX+xV+pV/lV/s1fq1f59f7DX6j3+Q3+y1+q9/mM8J2v8Pv9Lv8br/H7/Uf+H3+Q7/ff+RT/cf+gP+bP+g/8Yf8p/6w/8wf8Z/7o/4Lf8x/6Y/7r/wJf9Kf8l/70/4bf8af9ef8t/68/85f8N/7i/I3a0IIIYQQ/xT9B9t7/8469dNiAKAPAGTdkffwr3NuyvXjuJ/a1zEGAI/26trg56VBg8TExJ/2TdEQFFoIALFL8zPApXg5tIWHoQO0gVK/W18/VQH5V/mDv9uelj9+I0BmgEw/r0uAH+Jf5b/+H+Rv8vav8/+6/vhCgCKFLs1JO9DP8aX8pf9B/j3t/iB/pk+SAFr/3ZwscCm+lL8kPAiPQYdf7CmEEEIIIYQQQvyonzrf7Y+eb9Oez/OZS3MywqX4j57P/0DlP+MchBBCCCGEEEII8f/2xNPdH3mgQ4c2nf+bBxn/GmX8BQYIAH+BMmTw1x9c7t9MQgghhBBCiD/bpZv+y12JEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgiRfv37/yFM/dM7X+5zFEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIS63/xMAAP//gUVOqg==")
mount(&(0x7f0000000100)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='gfs2\x00', 0x2808015, 0x0)

112.409636ms ago: executing program 4:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xbc, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x81}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1f}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8}]}]}]}}]}, 0xbc}}, 0x0)

0s ago: executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00000000000000004093\t'], 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
memfd_create(0x0, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x0)
dup(0xffffffffffffffff)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x75f, 0x0)
r1 = memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.\x9e\xcfrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4\xc0\n\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\xaa\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x01\x00\x00\x00\x00\x00\x00\x00\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\x03\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1!\x00\x00\x80\x19w\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\xff\xff\xff\xff\xff\xff\xff\x7fl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\b\x00\x00\x00\x12\x90\x7f\x00\x91\xcej\xa1\x8e\xd2\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d?\x9bB\xa2\xd6\x04E*\xb3)\\\x1e\x9e\xb7u\\@\x91\x9f\x16\xe5/\xc5\xf8_\xbfL\x9e\xa1<`on\xfc=\x9f\xf1i\xeb\x06.{\b\xf1\xe4\xcc`\xac\xe3\xa0\xa4\x8a\x06\x0f\x06\xc1\xe1\x9b\xdf\xf0\x8d8\xb9`\xbd\xd9J\xcd\xb9,[*\x81\xeeHR\xd2\x89\x11%\xb4\x8f\x1bJB\xc7\xa8\xea\xe6mp\xeeb9S\x04\xde\x01\xeb~\xb0', 0x0)
pwritev(r1, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0)
getpid()
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x9, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9aabe426e7acdc43f9d2e80e4caaddfb80c92dc817d44dcdec00"})
ioctl$LOOP_CLR_FD(r0, 0x4c01)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000000)={@broadcast, 0x0, 0x0, 0x30, 0x0, [{@initdev}, {@private}, {@loopback}]}})

kernel console output (not intermixed with test programs):

o=0
[   87.950629][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.975191][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.077296][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.108728][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.143793][ T5253] loop3: detected capacity change from 0 to 2048
[   88.218640][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.276047][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.303394][ T5255] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   88.452206][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.480490][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.609573][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.672085][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.747921][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.832538][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.985599][ T5262] loop3: detected capacity change from 0 to 256
[   89.087128][ T3836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.117447][   T29] audit: type=1800 audit(2000000001.249:3): pid=5262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="loop3" ino=1048595 res=0 errno=0
[   89.124638][ T5262] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162)
[   89.175309][ T3836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.981998][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   89.990678][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   90.104606][ T5284] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   90.192623][ T5284] xt_TCPMSS: Only works on TCP SYN packets
[   90.263292][ T5282] loop3: detected capacity change from 0 to 4096
[   90.356009][ T5256] loop5: detected capacity change from 0 to 40427
[   90.381651][ T5287] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[   90.400871][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   90.482676][ T5256] F2FS-fs (loop5): invalid crc value
[   90.581053][ T5256] F2FS-fs (loop5): Found nat_bits in checkpoint
[   90.701917][ T5252] loop1: detected capacity change from 0 to 4096
[   90.819840][ T5252] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[   90.846390][ T5282] ntfs3: loop3: failed to convert "0080" to euc-jp
[   90.863437][ T5282] ntfs3: loop3: failed to convert name for inode 1e.
[   90.937095][ T5252] ntfs3: loop1: $AttrDef is corrupted.
[   91.092938][ T5256] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[   91.259078][ T5307] loop4: detected capacity change from 0 to 512
[   91.315802][ T5113] syz-executor.5: attempt to access beyond end of device
[   91.315802][ T5113] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   91.384073][ T5113] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[   91.491080][ T5307] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.550715][ T5307] ext4 filesystem being mounted at /root/syzkaller-testdir1199769353/syzkaller.s7BnD3/4/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   92.036736][ T5322] loop2: detected capacity change from 0 to 1024
[   92.184337][ T5328] Cannot find add_set index 0 as target
[   92.325441][ T5322] hfsplus: gid requires an argument
[   92.532013][ T5322] hfsplus: unable to parse mount options
[   92.580969][ T5329] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[   92.882419][ T5127] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.030988][ T5116] syz-executor.3 (5116) used greatest stack depth: 18736 bytes left
[   93.269672][ T5131] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   93.280215][ T5131] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   93.291172][ T5131] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   93.304212][ T5131] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   93.330507][ T5131] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   93.337996][ T5131] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   93.433995][ T5348] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[   93.879392][ T5356] xt_TCPMSS: Only works on TCP SYN packets
[   94.174173][    C0] net_ratelimit: 2 callbacks suppressed
[   94.174195][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies.
[   95.056592][ T5367] loop0: detected capacity change from 0 to 8
[   95.102632][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   95.113244][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   95.145643][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   95.193633][    T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!!
[   95.205645][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   95.214844][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   95.247582][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   95.322411][ T5368] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[   95.335225][ T5368] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[   95.335836][ T5344] loop1: detected capacity change from 0 to 4096
[   95.345246][ T5368] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[   95.362066][ T5368] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[   95.452034][ T5367] SQUASHFS error: lzo decompression failed, data probably corrupt
[   95.460026][ T5367] SQUASHFS error: Failed to read block 0x91: -5
[   95.466405][ T5367] SQUASHFS error: Unable to read metadata cache entry [8f]
[   95.473644][ T5367] SQUASHFS error: Unable to read inode 0x11f
[   95.484941][ T5344] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[   95.512685][ T5131] Bluetooth: hci1: command tx timeout
[   96.005749][ T5344] ntfs3: loop1: $AttrDef is corrupted.
[   96.554089][   T29] audit: type=1800 audit(2000000000.000:4): pid=5379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[   96.583204][ T5381] loop1: detected capacity change from 0 to 1024
[   96.650889][ T5381] hfsplus: gid requires an argument
[   96.691442][ T5381] hfsplus: unable to parse mount options
[   96.971644][ T5340] chnl_net:caif_netlink_parms(): no params data found
[   97.362756][ T5394] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[   97.556407][ T5399] xt_TPROXY: Can be used only with -p tcp or -p udp
[   97.590819][ T5131] Bluetooth: hci1: command tx timeout
[   97.961519][ T5413] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   98.121419][ T5340] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.129623][ T5340] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.190853][ T5340] bridge_slave_0: entered allmulticast mode
[   98.198555][ T5340] bridge_slave_0: entered promiscuous mode
[   98.256450][ T5340] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.298759][ T5423] loop2: detected capacity change from 0 to 256
[   98.311809][ T5340] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.332169][ T5340] bridge_slave_1: entered allmulticast mode
[   98.347708][ T5340] bridge_slave_1: entered promiscuous mode
[   98.432388][ T5423] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[   98.504344][ T5429] loop0: detected capacity change from 0 to 512
[   98.587872][ T5429] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   98.624270][ T5340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.673219][ T5429] EXT4-fs (loop0): corrupt root inode, run e2fsck
[   98.691742][ T5429] EXT4-fs (loop0): mount failed
[   98.713783][ T5340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.861839][ T5429] loop0: detected capacity change from 0 to 256
[   98.955939][ T5429] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   99.001585][ T5340] team0: Port device team_slave_0 added
[   99.087103][ T5340] team0: Port device team_slave_1 added
[   99.290833][ T5443] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[   99.406549][ T5340] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.423899][ T5340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.518184][ T5448] loop5: detected capacity change from 0 to 1024
[   99.531533][ T5340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.550391][ T5448] EXT4-fs (loop5): bad geometry: first data block 100663296 is beyond end of filesystem (512)
[   99.581848][ T5340] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.588810][ T5340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.681594][ T5131] Bluetooth: hci1: command tx timeout
[   99.720993][ T5340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.774173][ T5175] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  101.255273][   T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.292274][ T5425] loop1: detected capacity change from 0 to 40427
[  101.384606][ T5425] F2FS-fs (loop1): invalid crc value
[  101.404239][ T5425] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-4)
[  101.761386][ T5131] Bluetooth: hci1: command tx timeout
[  101.887992][   T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.982412][ T5472] ieee802154 phy0 wpan0: encryption failed: -22
[  102.061239][ T5340] hsr_slave_0: entered promiscuous mode
[  102.086432][ T5340] hsr_slave_1: entered promiscuous mode
[  102.120554][ T5340] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  102.144952][ T5340] Cannot create hsr debugfs directory
[  102.171243][ T5474] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
[  102.328007][   T29] audit: type=1800 audit(2000000000.000:5): pid=5478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  102.377729][ T5451] loop0: detected capacity change from 0 to 40427
[  102.398089][   T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.477405][ T5123] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  102.486237][ T5123] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  102.495207][ T5123] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  102.528305][ T5123] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  102.532225][ T5451] F2FS-fs (loop0): Found nat_bits in checkpoint
[  102.544565][ T5123] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  102.565336][ T5123] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  102.572658][   T29] audit: type=1326 audit(2000000000.229:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5490 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58427cea9 code=0x7ffc0000
[  102.599665][   T29] audit: type=1326 audit(2000000000.229:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5490 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58427cea9 code=0x7ffc0000
[  102.624444][   T29] audit: type=1326 audit(2000000000.259:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5490 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fe58427cea9 code=0x7ffc0000
[  102.647362][   T29] audit: type=1326 audit(2000000000.259:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5490 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58427cea9 code=0x7ffc0000
[  102.668857][ T5482] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
[  102.674206][   T29] audit: type=1326 audit(2000000000.259:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5490 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58427cea9 code=0x7ffc0000
[  102.702655][   T29] audit: type=1326 audit(2000000000.269:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5490 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe58427cea9 code=0x7ffc0000
[  102.726328][   T29] audit: type=1326 audit(2000000000.269:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5490 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58427cea9 code=0x7ffc0000
[  102.749110][   T29] audit: type=1326 audit(2000000000.269:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5490 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58427cea9 code=0x7ffc0000
[  102.780383][   T29] audit: type=1326 audit(2000000000.269:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5490 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fe58427cea9 code=0x7ffc0000
[  103.007542][   T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.315125][ T5501] loop5: detected capacity change from 0 to 1024
[  103.420803][ T5501] hfsplus: request for non-existent node 3 in B*Tree
[  103.427791][ T5501] hfsplus: request for non-existent node 3 in B*Tree
[  104.022669][ T5340] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.130617][ T5493] loop1: detected capacity change from 0 to 40427
[  104.163737][ T5493] F2FS-fs (loop1): invalid crc value
[  104.203992][   T35] bridge_slave_1: left allmulticast mode
[  104.214004][ T5493] F2FS-fs (loop1): Found nat_bits in checkpoint
[  104.229480][   T35] bridge_slave_1: left promiscuous mode
[  104.288697][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.410834][   T35] bridge_slave_0: left allmulticast mode
[  104.430644][   T35] bridge_slave_0: left promiscuous mode
[  104.453167][ T5493] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  104.461766][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.588290][ T5531] loop4: detected capacity change from 0 to 64
[  104.635815][ T5531] hfs: invalid extent max_key_len 510
[  104.643484][ T5122] syz-executor.1: attempt to access beyond end of device
[  104.643484][ T5122] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  104.646524][ T5531] hfs: unable to open extent tree
[  104.690402][ T5122] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  104.711140][ T5123] Bluetooth: hci2: command tx timeout
[  104.727851][ T5531] hfs: can't find a HFS filesystem on dev loop4
[  105.263966][ T5516] loop0: detected capacity change from 0 to 32768
[  105.317639][ T5516] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (5516)
[  105.456085][ T5516] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  105.504136][ T5516] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm
[  105.531115][ T5516] BTRFS info (device loop0): using free-space-tree
[  106.016210][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  106.062876][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  106.127761][   T35] bond0 (unregistering): Released all slaves
[  106.183002][ T5532] loop5: detected capacity change from 0 to 40427
[  106.286854][ T5532] F2FS-fs (loop5): Found nat_bits in checkpoint
[  106.288609][ T5340] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.385224][ T5572] loop1: detected capacity change from 0 to 2048
[  106.497724][ T5572] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  106.568035][ T5532] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  106.790973][ T5123] Bluetooth: hci2: command tx timeout
[  106.911919][ T5340] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.142027][ T5584] syz-executor.5: attempt to access beyond end of device
[  107.142027][ T5584] loop5: rw=0, sector=53248, nr_sectors = 8 limit=40427
[  107.174115][ T5584] syz-executor.5: attempt to access beyond end of device
[  107.174115][ T5584] loop5: rw=0, sector=53248, nr_sectors = 8 limit=40427
[  107.489248][   T29] kauditd_printk_skb: 7 callbacks suppressed
[  107.489294][   T29] audit: type=1800 audit(2000000004.739:22): pid=5584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=10 res=0 errno=0
[  107.840069][ T5516] BTRFS warning (device loop0): failed to trim 4 block group(s), last error -512
[  107.941689][ T5589] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET)
[  108.019120][ T5113] syz-executor.5: attempt to access beyond end of device
[  108.019120][ T5113] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  108.044650][ T5340] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.095080][ T5113] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  108.137842][ T5119] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  108.157737][ T5589] syzkaller1: entered promiscuous mode
[  108.176709][ T5589] syzkaller1: entered allmulticast mode
[  108.872074][ T5123] Bluetooth: hci2: command tx timeout
[  108.929518][   T35] hsr_slave_0: left promiscuous mode
[  109.039363][   T35] hsr_slave_1: left promiscuous mode
[  109.071916][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  109.079380][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  109.146305][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  109.164260][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  109.224266][   T35] veth1_macvtap: left promiscuous mode
[  109.242780][   T35] veth0_macvtap: left promiscuous mode
[  109.259000][   T35] veth1_vlan: left promiscuous mode
[  109.268901][   T35] veth0_vlan: left promiscuous mode
[  109.391485][ T5183] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  109.621226][ T5183] usb 5-1: Using ep0 maxpacket: 32
[  109.657391][ T5183] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  109.700439][ T5183] usb 5-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0
[  109.727891][ T5183] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.771719][ T5183] usb 5-1: config 0 descriptor??
[  109.808243][ T5183] rndis_host 5-1:0.0: invalid descriptor buffer length
[  109.815851][ T5183] usb 5-1: bad CDC descriptors
[  109.988718][ T5636] loop5: detected capacity change from 0 to 4096
[  110.009359][ T5636] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512).
[  110.040050][   T50] usb 5-1: USB disconnect, device number 2
[  110.084774][ T5636] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  110.145824][ T5636] ntfs3: loop5: ino=5, "/" attr_set_size
[  110.438379][   T35] team0 (unregistering): Port device team_slave_1 removed
[  110.494563][   T35] team0 (unregistering): Port device team_slave_0 removed
[  110.784689][ T5640] loop4: detected capacity change from 0 to 2048
[  110.834200][ T5638] loop5: detected capacity change from 0 to 32768
[  110.869492][ T5640] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  110.951000][ T5123] Bluetooth: hci2: command tx timeout
[  111.080957][ T5638] bcachefs (loop5): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names
[  111.100424][ T5638] bcachefs (loop5): recovering from clean shutdown, journal seq 7
[  111.159258][ T5638] bcachefs (loop5): alloc_read... done
[  111.169638][ T5638] bcachefs (loop5): stripes_read... done
[  111.177878][ T5638] bcachefs (loop5): snapshots_read... done
[  111.203087][ T5638] bcachefs (loop5): journal_replay... done
[  111.208942][ T5638] bcachefs (loop5): resume_logged_ops... done
[  111.225845][ T5638] bcachefs (loop5): going read-write
[  111.289234][ T5638] bcachefs (loop5): done starting filesystem
[  111.436753][ T5483] chnl_net:caif_netlink_parms(): no params data found
[  111.589207][ T5638] syz-executor.5 (5638) used greatest stack depth: 18512 bytes left
[  111.684211][ T5113] bcachefs (loop5): shutting down
[  111.722682][ T5113] bcachefs (loop5): going read-only
[  111.744591][ T5113] bcachefs (loop5): finished waiting for writes to stop
[  111.812335][ T5113] bcachefs (loop5): flushing journal and stopping allocators, journal seq 7
[  111.840934][ T5113] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 7
[  111.887583][ T5340] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  111.900192][ T5671] loop0: detected capacity change from 0 to 128
[  111.925390][ T5671] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[  111.954470][ T5113] bcachefs (loop5): shutdown complete, journal seq 8
[  111.991973][ T5340] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  112.011793][ T5113] bcachefs (loop5): marking filesystem clean
[  112.156399][ T5340] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  112.249205][ T5340] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  112.273092][   T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  112.283329][ T5113] bcachefs (loop5): shutdown complete
[  112.422485][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies.
[  112.483207][   T25] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  112.494961][   T25] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  112.505754][   T25] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  112.517151][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.680660][ T5678] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  112.689444][ T5678] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  112.810958][ T5678] netlink: 'syz-executor.1': attribute type 29 has an invalid length.
[  112.854762][ T5678] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  112.904420][ T5483] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.934200][ T5483] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.946469][ T5483] bridge_slave_0: entered allmulticast mode
[  112.985320][ T5483] bridge_slave_0: entered promiscuous mode
[  113.033849][ T5483] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.070344][ T5483] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.132532][ T5483] bridge_slave_1: entered allmulticast mode
[  113.152111][ T5483] bridge_slave_1: entered promiscuous mode
[  113.476869][ T5483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  113.540621][ T5483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  113.552696][ T5698] loop4: detected capacity change from 0 to 1024
[  113.593726][ T5698] EXT4-fs (loop4): bad geometry: first data block 100663296 is beyond end of filesystem (512)
[  113.987538][   T25] aiptek 1-1:17.0: Aiptek using 400 ms programming speed
[  114.006766][   T25] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input5
[  114.027173][   T25] input: failed to attach handler kbd to device input5, error: -5
[  115.487746][ T5483] team0: Port device team_slave_0 added
[  115.599761][ T5483] team0: Port device team_slave_1 added
[  115.642713][   T25] usb 1-1: USB disconnect, device number 2
[  115.720522][ T5706] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.870679][ T5483] batman_adv: batadv0: Adding interface: batadv_slave_0
[  115.877663][ T5483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.000612][ T5483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  116.109487][ T5712] loop0: detected capacity change from 0 to 1024
[  116.154439][ T5483] batman_adv: batadv0: Adding interface: batadv_slave_1
[  116.224436][ T5483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.357607][ T5483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  116.397882][ T5709] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure
[  116.652495][ T5483] hsr_slave_0: entered promiscuous mode
[  116.663900][ T5483] hsr_slave_1: entered promiscuous mode
[  116.679525][ T5483] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  116.687444][ T5483] Cannot create hsr debugfs directory
[  116.920912][ T5340] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.292343][ T5340] 8021q: adding VLAN 0 to HW filter on device team0
[  117.299633][ T5741] netlink: 'syz-executor.5': attribute type 4 has an invalid length.
[  117.399227][   T29] audit: type=1326 audit(2000000015.059:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5747 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58427cea9 code=0x7ffc0000
[  117.593707][   T29] audit: type=1326 audit(2000000015.059:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5747 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58427cea9 code=0x7ffc0000
[  117.637141][ T5181] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.644397][ T5181] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.690579][   T29] audit: type=1326 audit(2000000015.059:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5747 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe58427cea9 code=0x7ffc0000
[  117.760614][   T29] audit: type=1326 audit(2000000015.059:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5747 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58427cea9 code=0x7ffc0000
[  117.818348][   T29] audit: type=1326 audit(2000000015.059:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5747 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58427cea9 code=0x7ffc0000
[  117.913156][ T5183] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.920599][ T5183] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.928444][   T29] audit: type=1326 audit(2000000015.059:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5747 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe58427cea9 code=0x7ffc0000
[  117.999968][   T29] audit: type=1326 audit(2000000015.089:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5747 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58427cea9 code=0x7ffc0000
[  118.120932][   T29] audit: type=1326 audit(2000000015.139:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5747 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe58427a627 code=0x7ffc0000
[  118.211280][   T29] audit: type=1326 audit(2000000015.139:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5747 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe5842402e9 code=0x7ffc0000
[  118.381895][   T29] audit: type=1326 audit(2000000015.139:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5747 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe58427a627 code=0x7ffc0000
[  119.462255][ T5782] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.5'.
[  119.567253][ T5736] loop1: detected capacity change from 0 to 40427
[  119.680028][ T5736] F2FS-fs (loop1): Found nat_bits in checkpoint
[  119.945960][ T5801] loop5: detected capacity change from 0 to 256
[  119.970540][ T5736] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  120.069053][ T5803] loop0: detected capacity change from 0 to 1024
[  120.082421][ T5801] FAT-fs (loop5): Directory bread(block 64) failed
[  120.152754][ T5801] FAT-fs (loop5): Directory bread(block 65) failed
[  120.240903][ T5801] FAT-fs (loop5): Directory bread(block 66) failed
[  120.267763][ T5340] 8021q: adding VLAN 0 to HW filter on device batadv0
[  120.284205][ T5801] FAT-fs (loop5): Directory bread(block 67) failed
[  120.345307][ T5801] FAT-fs (loop5): Directory bread(block 68) failed
[  120.375029][ T5483] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  120.399264][ T5801] FAT-fs (loop5): Directory bread(block 69) failed
[  120.426941][ T5801] FAT-fs (loop5): Directory bread(block 70) failed
[  120.450035][ T5801] FAT-fs (loop5): Directory bread(block 71) failed
[  120.477330][ T5801] FAT-fs (loop5): Directory bread(block 72) failed
[  120.551787][ T5801] FAT-fs (loop5): Directory bread(block 73) failed
[  120.581481][ T5483] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  120.610857][   T62] hfsplus: b-tree write err: -5, ino 4
[  120.636712][ T5483] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  120.671200][ T5483] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  120.918336][ T5340] veth0_vlan: entered promiscuous mode
[  121.044960][ T5340] veth1_vlan: entered promiscuous mode
[  121.247911][ T5340] veth0_macvtap: entered promiscuous mode
[  121.279919][ T5483] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.307882][ T5340] veth1_macvtap: entered promiscuous mode
[  121.397584][ T5483] 8021q: adding VLAN 0 to HW filter on device team0
[  121.488142][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.522446][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.550315][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.584933][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.620458][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.657849][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.690440][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.730418][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.783610][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.833263][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.928174][ T5340] batman_adv: batadv0: Interface activated: batadv_slave_0
[  122.840945][ T5178] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.848115][ T5178] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.878500][ T5178] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.885720][ T5178] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.959424][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  123.010516][ T5174] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  123.020382][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.069415][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  123.090370][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.128285][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  123.195072][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.246500][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  123.268895][ T5174] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=cd.cc
[  123.293065][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.303151][ T5340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  123.314923][ T5340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.316320][ T5174] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.327073][ T5340] batman_adv: batadv0: Interface activated: batadv_slave_1
[  123.361515][ T5131] Bluetooth: hci5: command 0x0406 tx timeout
[  123.402717][ T5843] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'.
[  123.608967][ T5807] loop0: detected capacity change from 0 to 32768
[  124.134184][ T5174] usb 6-1: Product: syz
[  124.138400][ T5174] usb 6-1: Manufacturer: syz
[  124.143255][ T5174] usb 6-1: SerialNumber: syz
[  124.150488][ T5174] usb 6-1: config 0 descriptor??
[  124.160095][ T5174] cyberjack 6-1:0.0: required endpoints missing
[  124.174752][ T5340] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.250377][ T5340] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.259129][ T5340] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.308918][ T5851] loop1: detected capacity change from 0 to 512
[  124.315309][ T5340] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.374167][ T5178] usb 6-1: USB disconnect, device number 2
[  124.471008][ T5851] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  124.552468][ T5851] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it
[  124.563360][ T5851] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended
[  124.599607][ T5851] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  124.628758][ T5851] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino
[  124.694399][ T5851] EXT4-fs (loop1): Remounting filesystem read-only
[  124.717780][ T5851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.821181][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.840847][ T5851] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  124.860223][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.000142][ T5122] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.021349][ T5870] mmap: syz-executor.0 (5870) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  125.983383][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.002901][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.025518][   T29] kauditd_printk_skb: 46 callbacks suppressed
[  126.025534][   T29] audit: type=1800 audit(2000000023.689:79): pid=5873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1949 res=0 errno=0
[  126.027769][ T5483] 8021q: adding VLAN 0 to HW filter on device batadv0
[  126.271417][ T5887] loop5: detected capacity change from 0 to 256
[  126.370535][ T5483] veth0_vlan: entered promiscuous mode
[  126.433720][ T5483] veth1_vlan: entered promiscuous mode
[  126.666859][ T5895] loop3: detected capacity change from 0 to 256
[  127.184737][ T5483] veth0_macvtap: entered promiscuous mode
[  127.308788][ T5483] veth1_macvtap: entered promiscuous mode
[  127.372299][   T29] audit: type=1800 audit(2000000025.039:80): pid=5895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="loop3" ino=1048611 res=0 errno=0
[  127.408104][ T5895] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097162)
[  127.727207][ T5907] loop1: detected capacity change from 0 to 128
[  128.103619][ T5907] syz-executor.1: attempt to access beyond end of device
[  128.103619][ T5907] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128
[  128.412235][ T5483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  128.520331][ T5483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.581720][ T5483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  128.593748][ T5483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.604705][ T5483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  128.615198][ T5483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.622567][ T5914] loop0: detected capacity change from 0 to 512
[  128.625148][ T5483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  128.650427][ T5483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.670443][ T5483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  128.694359][ T5483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.723448][ T5914] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  128.740366][ T5483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  128.760751][ T5483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  128.781911][ T5914] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it
[  128.796940][ T5483] batman_adv: batadv0: Interface activated: batadv_slave_0
[  128.830368][ T5914] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended
[  128.904557][ T5914] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[  128.930967][ T5483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  128.944591][ T5914] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino
[  128.987077][ T5483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.018764][ T5914] EXT4-fs (loop0): Remounting filesystem read-only
[  129.025485][ T5483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.039360][ T5914] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.068935][ T5483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.127649][ T5483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.160034][ T5483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.185291][ T5483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.232809][ T5483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.264056][ T5483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.294455][ T5483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.305413][ T5483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.316692][ T5483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.329138][ T5483] batman_adv: batadv0: Interface activated: batadv_slave_1
[  129.427511][ T5935] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'.
[  129.572568][ T5914] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  129.767841][ T5483] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.110632][ T5483] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.186711][ T5483] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  130.250358][ T5483] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  130.295731][ T5119] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.425489][ T5943] loop3: detected capacity change from 0 to 1024
[  130.692554][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.754145][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.831453][   T12] hfsplus: b-tree write err: -5, ino 4
[  130.868812][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.923750][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.048846][ T5959] loop4: detected capacity change from 0 to 1024
[  131.131103][ T5959] hfsplus: bad catalog entry type
[  131.250676][   T12] hfsplus: b-tree write err: -5, ino 4
[  131.317249][ T5970] TCP: MD5 Hash not found for 172.20.20.187.0->172.20.20.170.20002 [FSR] L3 index 0
[  131.425130][ T5972] loop1: detected capacity change from 0 to 256
[  131.435383][ T5925] loop5: detected capacity change from 0 to 40427
[  131.481854][ T5925] F2FS-fs (loop5): invalid crc value
[  131.499920][ T5925] F2FS-fs (loop5): Found nat_bits in checkpoint
[  131.518962][ T5972] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  131.617347][ T5980] loop0: detected capacity change from 0 to 512
[  131.644918][ T5976] loop2: detected capacity change from 0 to 64
[  132.116819][   T29] audit: type=1326 audit(2000000029.609:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58427cea9 code=0x7ffc0000
[  132.721528][ T1231] ieee802154 phy0 wpan0: encryption failed: -22
[  132.728848][ T1231] ieee802154 phy1 wpan1: encryption failed: -22
[  133.019194][ T5976] hfs: request for non-existent node 67108864 in B*Tree
[  133.090692][   T29] audit: type=1326 audit(2000000029.609:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58427cea9 code=0x7ffc0000
[  133.126686][ T5976] hfs: request for non-existent node 67108864 in B*Tree
[  133.136963][ T5980] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  133.210413][ T5980] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it
[  133.262117][   T29] audit: type=1326 audit(2000000029.609:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe58427cea9 code=0x7ffc0000
[  133.289205][ T5980] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended
[  133.328097][   T29] audit: type=1326 audit(2000000029.609:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58427cea9 code=0x7ffc0000
[  133.365810][   T29] audit: type=1326 audit(2000000029.609:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58427cea9 code=0x7ffc0000
[  133.370382][ T5980] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[  133.493029][ T5980] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino
[  133.514037][   T29] audit: type=1326 audit(2000000029.609:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fe58427cea9 code=0x7ffc0000
[  133.579001][ T5980] EXT4-fs (loop0): Remounting filesystem read-only
[  133.580352][   T29] audit: type=1326 audit(2000000029.609:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58427cea9 code=0x7ffc0000
[  133.622034][ T5980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.710487][   T29] audit: type=1326 audit(2000000029.609:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58427cea9 code=0x7ffc0000
[  133.754078][ T5999] loop2: detected capacity change from 0 to 4096
[  133.782215][ T5999] ntfs3: Bad value for 'umask'
[  133.788254][ T5980] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  133.816974][   T29] audit: type=1326 audit(2000000029.609:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe58427cea9 code=0x7ffc0000
[  133.899210][ T5119] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.914220][   T29] audit: type=1326 audit(2000000029.609:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58427cea9 code=0x7ffc0000
[  134.331885][ T6023] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  134.351610][ T6022] loop0: detected capacity change from 0 to 1024
[  134.382458][ T6023] netlink: 'syz-executor.4': attribute type 6 has an invalid length.
[  134.413794][ T6022] hfsplus: bad catalog entry type
[  134.495390][ T6020] loop2: detected capacity change from 0 to 8192
[  134.496191][ T6023] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  134.510993][ T6023] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  134.519702][ T6023] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  134.529081][ T6023] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  134.540657][ T3836] hfsplus: b-tree write err: -5, ino 4
[  134.557114][ T6023] vxlan0: entered promiscuous mode
[  134.765390][ T6035] loop5: detected capacity change from 0 to 512
[  134.808261][ T6035] EXT4-fs warning (device loop5): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  134.821211][ T6035] EXT4-fs warning (device loop5): dx_probe:880: Enable large directory feature to access it
[  134.831463][ T6035] EXT4-fs warning (device loop5): dx_probe:965: inode #2: comm syz-executor.5: Corrupt directory, running e2fsck is recommended
[  134.846445][ T6035] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  134.854913][ T6035] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.5: corrupted in-inode xattr: invalid ea_ino
[  134.869132][ T6035] EXT4-fs (loop5): Remounting filesystem read-only
[  134.879226][ T6035] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.915882][ T6035] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  134.980868][ T5113] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.019927][ T6037] loop3: detected capacity change from 0 to 4096
[  135.128744][ T6037] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  135.157931][ T6037] ntfs3: loop3: Failed to load $AttrDef (-22)
[  135.428759][ T6057] TCP: MD5 Hash not found for 172.20.20.187.0->172.20.20.170.20002 [FSR] L3 index 0
[  135.626019][ T6067] syz-executor.3 (pid 6067) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  135.674321][ T6067] loop3: detected capacity change from 0 to 2048
[  135.692140][ T6067] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  135.704407][ T6067] NILFS (loop3): mounting unchecked fs
[  135.757832][ T6067] NILFS (loop3): recovery cancelled because norecovery option was specified for a read/write mount
[  135.840838][ T6069] loop2: detected capacity change from 0 to 8192
[  135.994389][ T6082] loop3: detected capacity change from 0 to 64
[  136.447617][ T6100] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  136.543410][ T6102] loop1: detected capacity change from 0 to 8
[  136.591294][ T6100] loop4: detected capacity change from 0 to 1764
[  136.741409][ T6100] iso9660: Corrupted directory entry in block 2 of inode 1920
[  136.748213][ T6112] syz-executor.1 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  136.920499][ T5178] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  137.071174][ T6128] netlink: 'syz-executor.0': attribute type 15 has an invalid length.
[  137.130666][ T5178] usb 6-1: Using ep0 maxpacket: 16
[  137.146995][ T5178] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  137.172790][ T5178] usb 6-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice= 2.86
[  137.189206][ T5178] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.220584][ T5178] usb 6-1: Product: syz
[  137.234969][ T5178] usb 6-1: Manufacturer: syz
[  137.239585][ T5178] usb 6-1: SerialNumber: syz
[  137.272173][ T5178] usb 6-1: config 0 descriptor??
[  137.292314][ T5178] empeg 6-1:0.0: empeg converter detected
[  137.298181][ T5178] usb 6-1: active config #0 != 1 ??
[  137.436533][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  137.498149][ T5178] usb 6-1: USB disconnect, device number 3
[  137.645029][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  137.807540][ T6151] loop0: detected capacity change from 0 to 1764
[  138.698805][ T6151] iso9660: Corrupted directory entry in block 2 of inode 1920
[  138.996560][ T6179] loop5: detected capacity change from 0 to 256
[  139.241816][ T6189] loop4: detected capacity change from 0 to 256
[  139.329572][ T6189] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  139.507753][ T6203] Bluetooth: MGMT ver 1.22
[  139.749129][ T6200] loop5: detected capacity change from 0 to 40427
[  139.774902][ T6200] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  139.782755][ T6200] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  139.792023][ T5179] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  139.987572][ T6200] F2FS-fs (loop5): Found nat_bits in checkpoint
[  140.037093][ T5178] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  140.258700][ T5179] usb 2-1: Using ep0 maxpacket: 16
[  140.351162][ T5179] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  140.488717][ T5179] usb 2-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice= 2.86
[  140.529725][ T5179] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.567619][ T5179] usb 2-1: Product: syz
[  140.585584][ T5179] usb 2-1: Manufacturer: syz
[  140.590207][ T5179] usb 2-1: SerialNumber: syz
[  140.622426][ T5178] usb 3-1: Using ep0 maxpacket: 32
[  140.632424][ T5178] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  140.659878][ T5178] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  140.686838][ T5179] usb 2-1: config 0 descriptor??
[  140.687631][ T6200] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  140.699726][ T6200] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  140.748209][ T5178] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  140.770962][ T5179] empeg 2-1:0.0: empeg converter detected
[  140.811621][ T5179] usb 2-1: active config #0 != 1 ??
[  140.819182][ T5178] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.090897][ T5179] usb 2-1: USB disconnect, device number 2
[  141.113343][ T5178] usb 3-1: config 0 descriptor??
[  141.120919][ T5178] hub 3-1:0.0: bad descriptor, ignoring hub
[  141.145851][ T5178] hub 3-1:0.0: probe with driver hub failed with error -5
[  141.162281][ T5178] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  141.458445][ T6194] loop0: detected capacity change from 0 to 32768
[  141.479797][ T6194] XFS: noikeep mount option is deprecated.
[  141.500690][ T5178] usb 3-1: USB disconnect, device number 2
[  141.538465][ T6229] loop3: detected capacity change from 0 to 256
[  141.580004][ T6194] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  141.928641][ T6240] loop4: detected capacity change from 0 to 2048
[  142.496636][ T6194] XFS (loop0): Ending clean mount
[  143.097250][ T6249] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  143.170560][ T6194] XFS (loop0): Quotacheck needed: Please wait.
[  143.478114][ T6194] XFS (loop0): Quotacheck: Done.
[  143.616431][ T5119] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  144.026773][ T6269] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'.
[  145.174190][ T6280] loop1: detected capacity change from 0 to 256
[  145.335403][ T6285] loop4: detected capacity change from 0 to 1764
[  147.165733][ T6312] loop3: detected capacity change from 0 to 256
[  147.307565][ T6312] FAT-fs (loop3): Directory bread(block 64) failed
[  147.354361][ T6312] FAT-fs (loop3): Directory bread(block 65) failed
[  147.379322][ T6312] FAT-fs (loop3): Directory bread(block 66) failed
[  147.409662][ T6312] FAT-fs (loop3): Directory bread(block 67) failed
[  147.436622][ T6312] FAT-fs (loop3): Directory bread(block 68) failed
[  147.475559][ T6312] FAT-fs (loop3): Directory bread(block 69) failed
[  147.510109][ T6312] FAT-fs (loop3): Directory bread(block 70) failed
[  147.539211][ T6312] FAT-fs (loop3): Directory bread(block 71) failed
[  147.545547][ T1029] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  147.583496][ T6312] FAT-fs (loop3): Directory bread(block 72) failed
[  147.589554][ T1029] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.608271][ T6312] FAT-fs (loop3): Directory bread(block 73) failed
[  147.841402][ T1029] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  147.884290][ T1029] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.122150][ T6333] tty tty26: ldisc open failed (-12), clearing slot 25
[  149.296119][ T1029] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  149.362442][ T1029] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.629835][ T1029] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  149.639434][ T6345] loop1: detected capacity change from 0 to 512
[  149.647108][   T29] kauditd_printk_skb: 7 callbacks suppressed
[  149.647125][   T29] audit: type=1326 audit(2000000047.299:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6342 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68b7e7cea9 code=0x0
[  149.692325][ T1029] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.739170][ T6345] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.763159][ T6339] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[  149.791674][ T6345] ext4 filesystem being mounted at /root/syzkaller-testdir473233156/syzkaller.PI8xss/65/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  149.935997][ T6345] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz-executor.1: corrupted inode contents
[  149.996669][ T6345] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #2: comm syz-executor.1: mark_inode_dirty error
[  150.034794][ T6345] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz-executor.1: corrupted inode contents
[  150.075782][ T1029] bridge_slave_1: left allmulticast mode
[  150.087285][ T1029] bridge_slave_1: left promiscuous mode
[  150.095244][ T6345] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz-executor.1: mark_inode_dirty error
[  150.114041][ T1029] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.136882][ T6327] loop0: detected capacity change from 0 to 32768
[  150.147997][ T1029] bridge_slave_0: left allmulticast mode
[  150.154846][ T1029] bridge_slave_0: left promiscuous mode
[  150.164022][ T1029] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.178325][ T6327] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6327)
[  150.219374][ T6327] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  150.240795][ T6327] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  150.256762][ T5122] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.266354][ T6327] BTRFS info (device loop0): using free-space-tree
[  150.329200][ T5131] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  150.341346][ T5131] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  150.381763][ T5131] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  150.401329][ T5131] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  150.409165][ T5131] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  150.417076][ T5131] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  150.765513][ T5119] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  151.571915][ T6389] loop1: detected capacity change from 0 to 64
[  151.676426][ T6389] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  151.712542][ T6389] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  151.740141][ T6389] CIFS: Unable to determine destination address
[  152.065958][ T6400] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[  152.216002][ T1029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  152.250373][ T1029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  152.275133][ T1029] bond0 (unregistering): Released all slaves
[  152.478399][ T5123] Bluetooth: hci5: command tx timeout
[  152.696044][ T6411] loop2: detected capacity change from 0 to 736
[  153.224134][ T6425] loop1: detected capacity change from 0 to 2048
[  153.310615][ T6429] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  154.425262][ T1029] hsr_slave_0: left promiscuous mode
[  154.457344][ T1029] hsr_slave_1: left promiscuous mode
[  154.479975][ T1029] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  154.498652][ T1029] batman_adv: batadv0: Removing interface: batadv_slave_0
[  154.527744][ T1029] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  154.550443][ T5123] Bluetooth: hci5: command tx timeout
[  154.558703][ T6447] loop0: detected capacity change from 0 to 512
[  154.559019][ T1029] batman_adv: batadv0: Removing interface: batadv_slave_1
[  154.601507][ T6447] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent
[  154.661417][ T6429] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  154.680218][ T1029] veth1_macvtap: left promiscuous mode
[  154.704312][ T1029] veth0_macvtap: left promiscuous mode
[  154.709976][ T1029] veth1_vlan: left promiscuous mode
[  154.717544][ T6429] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[  154.743285][ T1029] veth0_vlan: left promiscuous mode
[  154.780373][ T6429] Remounting filesystem read-only
[  154.897820][ T5122] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  154.961588][ T6421] loop2: detected capacity change from 0 to 32768
[  154.969533][ T5122] NILFS (loop1): discard dirty page: offset=20480, ino=18
[  154.991199][ T5122] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  154.999260][ T6421] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (6421)
[  155.021748][ T5122] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  155.029111][ T5122] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  155.045971][ T5122] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  155.057171][ T5122] NILFS (loop1): discard dirty page: offset=24576, ino=18
[  155.069355][ T5122] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  155.081941][ T6421] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  155.105842][ T6421] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  155.116264][ T5122] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  155.136566][ T5122] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  155.145782][ T6421] BTRFS info (device loop2): using free-space-tree
[  155.159657][ T6454] loop5: detected capacity change from 0 to 2048
[  155.167165][ T5122] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  155.209737][ T5122] NILFS (loop1): discard dirty page: offset=0, ino=6
[  155.224035][ T5122] NILFS (loop1): discard dirty block: blocknr=35, size=1024
[  155.233877][ T5122] NILFS (loop1): discard dirty block: blocknr=36, size=1024
[  155.246817][ T5122] NILFS (loop1): discard dirty block: blocknr=37, size=1024
[  155.277516][ T6461] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  155.330685][ T5122] NILFS (loop1): discard dirty block: blocknr=38, size=1024
[  155.338028][ T5122] NILFS (loop1): discard dirty page: offset=4096, ino=6
[  155.350786][ T5122] NILFS (loop1): discard dirty block: blocknr=39, size=1024
[  155.368693][ T5122] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  155.403890][ T5122] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  155.447453][ T5122] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  155.466984][ T5122] NILFS (loop1): discard dirty page: offset=0, ino=5
[  155.474649][ T5122] NILFS (loop1): discard dirty block: blocknr=41, size=1024
[  155.482417][ T5122] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  155.493389][ T5122] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  155.502550][ T5122] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  155.512914][ T5122] NILFS (loop1): discard dirty page: offset=0, ino=4
[  155.520077][ T5122] NILFS (loop1): discard dirty block: blocknr=40, size=1024
[  155.527623][ T5122] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  155.538378][ T5122] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  155.547499][ T5122] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  155.559422][ T5122] NILFS (loop1): discard dirty page: offset=0, ino=3
[  155.581578][ T5122] NILFS (loop1): discard dirty block: blocknr=42, size=1024
[  155.589004][ T5122] NILFS (loop1): discard dirty block: blocknr=43, size=1024
[  155.597017][ T5122] NILFS (loop1): discard dirty block: blocknr=44, size=1024
[  155.609105][ T5122] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  155.625019][ T5122] NILFS (loop1): discard dirty page: offset=65536, ino=3
[  155.641067][ T5122] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  155.655869][ T5483] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  155.663992][ T5122] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  155.723170][ T5122] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  155.738313][ T5122] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  155.750803][ T5122] NILFS (loop1): discard dirty page: offset=196608, ino=3
[  155.758328][ T5122] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  155.768731][ T5122] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  155.779853][ T5122] NILFS (loop1): discard dirty block: blocknr=49, size=1024
[  155.794925][ T5122] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  156.172622][ T6484] loop1: detected capacity change from 0 to 512
[  156.221576][ T6484] EXT4-fs error (device loop1): ext4_orphan_get:1420: comm syz-executor.1: bad orphan inode 15
[  156.234553][ T6490] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  156.241349][ T6484] ext4_test_bit(bit=14, block=18) = 1
[  156.256080][ T6484] is_bad_inode(inode)=0
[  156.263010][ T6484] NEXT_ORPHAN(inode)=1023
[  156.267448][ T6484] max_ino=32
[  156.271148][ T6484] i_nlink=0
[  156.307465][ T6484] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2972: inode #15: comm syz-executor.1: corrupted xattr block 19: e_value size too large
[  156.330061][ T6484] EXT4-fs warning (device loop1): ext4_evict_inode:271: xattr delete (err -117)
[  156.351280][ T6484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  156.370519][ T6484] ext4 filesystem being mounted at /root/syzkaller-testdir473233156/syzkaller.PI8xss/71/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  156.478383][ T5122] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.544794][ T1029] team0 (unregistering): Port device team_slave_1 removed
[  156.630476][ T5123] Bluetooth: hci5: command tx timeout
[  156.649362][   T29] audit: type=1326 audit(2000000054.309:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f933aa7cea9 code=0x0
[  156.676765][ T1029] team0 (unregistering): Port device team_slave_0 removed
[  157.594265][ T6359] chnl_net:caif_netlink_parms(): no params data found
[  157.964053][ T6524] loop1: detected capacity change from 0 to 8192
[  158.021045][ T6529] Context (ID=0x4d8) not attached to queue pair (handle=0x0:0x0)
[  158.029667][ T6359] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.040937][ T6524]  loop1: p1 < > p2 < >
[  158.056785][ T6359] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.090796][ T6359] bridge_slave_0: entered allmulticast mode
[  158.107157][ T6359] bridge_slave_0: entered promiscuous mode
[  158.119207][ T6359] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.141797][ T6531] loop2: detected capacity change from 0 to 256
[  158.160580][ T6359] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.167825][ T6359] bridge_slave_1: entered allmulticast mode
[  158.195541][ T6359] bridge_slave_1: entered promiscuous mode
[  158.408853][   T29] audit: type=1326 audit(2000000056.069:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6538 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae2aa7cea9 code=0x0
[  158.473698][ T6359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  158.535395][ T6359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  158.713520][ T6359] team0: Port device team_slave_0 added
[  158.723267][ T5123] Bluetooth: hci5: command tx timeout
[  158.759331][ T6359] team0: Port device team_slave_1 added
[  158.915352][ T6359] batman_adv: batadv0: Adding interface: batadv_slave_0
[  158.932733][ T6359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.958646][    C1] vkms_vblank_simulate: vblank timer overrun
[  158.980024][ T6359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  159.018892][ T6359] batman_adv: batadv0: Adding interface: batadv_slave_1
[  159.027253][ T6359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.032727][ T6562] loop3: detected capacity change from 0 to 8192
[  159.053186][    C1] vkms_vblank_simulate: vblank timer overrun
[  159.068697][ T6359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  159.172005][ T6562]  loop3: p1 < > p2 < >
[  159.201740][ T6359] hsr_slave_0: entered promiscuous mode
[  159.234215][ T6359] hsr_slave_1: entered promiscuous mode
[  159.253632][ T6359] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  159.269864][ T6359] Cannot create hsr debugfs directory
[  159.389439][ T6552] loop2: detected capacity change from 0 to 32768
[  159.416173][ T6552] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (6552)
[  159.509102][ T6552] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  159.550187][ T6552] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  159.583233][ T6552] BTRFS info (device loop2): using free-space-tree
[  159.757281][ T6600] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  159.967007][   T29] audit: type=1326 audit(2000000057.629:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae2aa7cea9 code=0x0
[  160.044812][ T6618] SET target dimension over the limit!
[  160.075052][ T6617] loop1: detected capacity change from 0 to 256
[  160.168702][ T6617] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[  160.215983][   T29] audit: type=1804 audit(2000000057.869:102): pid=6623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir473233156/syzkaller.PI8xss/80/file0/file1" dev="loop1" ino=1048634 res=1 errno=0
[  160.269582][ T5483] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  160.286576][ T6624] loop3: detected capacity change from 0 to 512
[  160.437520][   T29] audit: type=1800 audit(2000000057.989:103): pid=6617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="loop1" ino=1048635 res=0 errno=0
[  160.490338][ T6624] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02d, mo2=0002]
[  160.499420][ T6624] System zones: 1-12
[  160.535692][ T6619] loop0: detected capacity change from 0 to 4096
[  160.557083][   T29] audit: type=1800 audit(2000000058.209:104): pid=6630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=1965 res=0 errno=0
[  160.557954][ T6624] EXT4-fs error (device loop3): __ext4_iget:4906: inode #11: block 393240: comm syz-executor.3: invalid block
[  160.603218][ T6619] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  160.631772][ T6619] ntfs3: loop0: Failed to load $Volume (-22).
[  160.665949][ T6624] EXT4-fs (loop3): Remounting filesystem read-only
[  160.674259][ T6624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.889505][ T6359] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  160.986207][ T6359] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  161.011523][ T5340] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.037496][ T6359] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  161.049621][ T6359] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  161.540758][ T6662] loop3: detected capacity change from 0 to 1024
[  161.802462][ T6662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.478840][ T5340] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.512654][ T6359] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.591416][ T6359] 8021q: adding VLAN 0 to HW filter on device team0
[  162.622857][ T6658] loop0: detected capacity change from 0 to 4096
[  162.637776][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.645068][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.702874][ T5174] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.710039][ T5174] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.018541][ T6359] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  163.088526][ T6684] loop3: detected capacity change from 0 to 256
[  163.226897][ T6654] loop2: detected capacity change from 0 to 32768
[  163.258568][ T6654] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (6654)
[  163.297571][ T6654] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  163.322798][ T6654] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  163.351183][ T6654] BTRFS info (device loop2): using free-space-tree
[  163.462527][ T6701] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[  163.810229][ T6359] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.220173][ T5483] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  164.758806][ T6359] veth0_vlan: entered promiscuous mode
[  165.280431][ T5123] Bluetooth: hci5: command tx timeout
[  165.745921][ T6359] veth1_vlan: entered promiscuous mode
[  165.951286][ T6359] veth0_macvtap: entered promiscuous mode
[  165.986117][ T6359] veth1_macvtap: entered promiscuous mode
[  166.091556][ T6359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.114074][ T6359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.137284][ T6359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.160215][ T6359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.196569][ T6359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.233743][ T6359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.259342][ T6359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.285206][ T6359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.322862][ T6359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.349722][ T6359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.372168][ T6359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.402979][ T6359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.438459][ T6359] batman_adv: batadv0: Interface activated: batadv_slave_0
[  166.468427][ T6359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.479882][ T6359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.493271][ T6359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.504341][ T6359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.515732][ T6359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.548066][ T6359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.554127][ T6770] loop1: detected capacity change from 0 to 256
[  166.558765][ T6359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.582261][ T6731] loop5: detected capacity change from 0 to 32768
[  166.584088][ T6359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.608017][ T6359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.633494][ T6359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.645245][ T6359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.657357][ T6731] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  166.662073][ T6359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.666297][ T5179] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  166.687867][ T6359] batman_adv: batadv0: Interface activated: batadv_slave_1
[  166.705401][ T6359] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.719901][ T6359] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.738539][ T6359] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.748458][ T6359] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.777988][ T6731] XFS (loop5): Ending clean mount
[  166.810597][ T6731] XFS (loop5): Quotacheck needed: Please wait.
[  166.885641][ T5179] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  166.896606][ T5179] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.910537][ T6731] XFS (loop5): Quotacheck: Done.
[  166.916707][ T5179] usb 3-1: Product: syz
[  166.940754][ T5179] usb 3-1: Manufacturer: syz
[  166.949883][ T5179] usb 3-1: SerialNumber: syz
[  166.995257][   T29] audit: type=1800 audit(2000000064.659:105): pid=6731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=9292 res=0 errno=0
[  167.010936][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.034255][ T5179] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  167.046999][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.098618][   T50] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  167.167626][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.185789][ T5113] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  167.187715][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.214248][ T6785] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[  167.384583][ T6789] loop0: detected capacity change from 0 to 8
[  167.443670][ T6789] Major/Minor mismatch, trying to mount newer 4.7 filesystem
[  167.485132][ T6789] Please update your kernel
[  167.598533][ T5182] usb 3-1: USB disconnect, device number 3
[  167.912504][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  167.926807][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  167.934341][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  167.950717][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  168.048321][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  168.093800][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  168.131316][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  168.215823][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  168.228815][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  168.239089][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  168.285094][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  168.304095][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  168.358273][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  168.391786][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  168.415216][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  168.441791][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  168.467707][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  168.476113][   T50] usb 3-1: Service connection timeout for: 256
[  168.487968][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  168.496000][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  168.504132][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  168.511944][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  168.519577][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  168.528409][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  168.689032][   T50] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
[  168.706851][   T50] ath9k_htc: Failed to initialize the device
[  168.715711][ T5182] usb 3-1: ath9k_htc: USB layer deinitialized
[  168.728608][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  168.756670][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  168.770856][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  168.790870][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  168.802856][ T6821] fuse: Bad value for 'fd'
[  168.840302][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  169.647657][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  169.656038][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  169.669395][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  169.677699][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  169.686649][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  169.695212][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  169.704471][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  169.712372][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  169.719803][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  169.727415][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  169.734903][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  169.745004][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  169.757954][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  169.766117][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  169.773569][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  169.781053][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  169.788453][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  169.796863][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  169.804470][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  169.812870][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  169.825089][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  169.847973][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  169.892743][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  169.906989][ T6825] loop2: detected capacity change from 0 to 128
[  169.914876][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  169.935882][ T6825] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value
[  169.955016][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  169.995782][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  170.020940][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  170.034065][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  170.052327][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  170.057351][ T1029] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.151477][ T5131] Bluetooth: hci5: command 0x0405 tx timeout
[  170.313971][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  170.322497][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  170.330825][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  170.338231][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  170.345694][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  170.353338][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  170.360900][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  170.369170][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  170.377209][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  170.465521][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  170.606615][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  171.046338][ T1029] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.056873][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  171.126367][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  171.169235][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  171.242615][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  171.293091][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  171.333754][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  171.362951][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  171.377866][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  171.572189][ T1029] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.630366][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  171.638652][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  171.647105][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  171.658757][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  171.671093][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  171.678511][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  171.707814][ T5174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  172.388764][ T5131] Bluetooth: hci5: command 0x0405 tx timeout
[  172.408554][ T5174] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  172.688027][ T1029] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.819441][   T29] audit: type=1326 audit(2000000070.479:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6856 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1c67cea9 code=0x7ffc0000
[  172.848792][ T6859] loop5: detected capacity change from 0 to 256
[  172.912549][   T29] audit: type=1326 audit(2000000070.479:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6856 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1c67cea9 code=0x7ffc0000
[  173.024709][   T29] audit: type=1326 audit(2000000070.509:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6856 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f6a1c67cea9 code=0x7ffc0000
[  173.132648][   T29] audit: type=1326 audit(2000000070.509:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6856 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1c67cea9 code=0x7ffc0000
[  173.145074][ T6859] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  173.317247][ T6869] fuse: Bad value for 'fd'
[  173.909467][ T6868] loop1: detected capacity change from 0 to 512
[  174.084078][ T6868] EXT4-fs (loop1): 1 truncate cleaned up
[  174.149634][ T6868] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.163434][ T1029] bridge_slave_1: left allmulticast mode
[  174.169114][ T1029] bridge_slave_1: left promiscuous mode
[  174.205947][ T1029] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.206574][ T5131] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  174.251008][ T5131] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  174.272678][ T5131] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  174.285104][ T5131] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  174.294271][ T5131] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  174.304652][ T5131] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  174.315304][ T1029] bridge_slave_0: left allmulticast mode
[  174.326239][ T1029] bridge_slave_0: left promiscuous mode
[  174.342404][ T1029] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.518398][ T5122] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.670353][   T29] audit: type=1326 audit(2000000072.329:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6886 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68b7e7cea9 code=0x0
[  174.849369][ T6865] loop4: detected capacity change from 0 to 32768
[  174.933717][ T6898] loop2: detected capacity change from 0 to 64
[  175.005305][ T6865] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  175.022215][ T6892] loop3: detected capacity change from 0 to 4096
[  175.046487][ T6892] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  175.066901][ T6892] ntfs3: loop3: Failed to load $Volume (-22).
[  175.156227][ T6865] XFS (loop4): Ending clean mount
[  175.172390][ T6865] XFS (loop4): Quotacheck needed: Please wait.
[  175.339136][ T6865] XFS (loop4): Quotacheck: Done.
[  177.126042][ T5123] Bluetooth: hci3: command tx timeout
[  177.213423][ T6359] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  177.988717][ T1029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  178.045674][ T1029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  178.075300][ T1029] bond0 (unregistering): Released all slaves
[  178.775576][ T6945] loop4: detected capacity change from 0 to 32768
[  178.825648][ T1029] hsr_slave_0: left promiscuous mode
[  178.845254][ T1029] hsr_slave_1: left promiscuous mode
[  178.858144][ T1029] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  178.907680][ T1029] batman_adv: batadv0: Removing interface: batadv_slave_0
[  178.970984][ T1029] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  178.978433][ T1029] batman_adv: batadv0: Removing interface: batadv_slave_1
[  179.092457][ T1029] veth1_macvtap: left promiscuous mode
[  179.099446][ T6945] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names
[  179.112480][ T1029] veth0_macvtap: left promiscuous mode
[  179.123916][ T1029] veth1_vlan: left promiscuous mode
[  179.133564][ T6945] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  179.136529][ T1029] veth0_vlan: left promiscuous mode
[  179.190787][ T5123] Bluetooth: hci3: command tx timeout
[  179.226104][ T6945] bcachefs (loop4): alloc_read... done
[  179.233747][ T6945] bcachefs (loop4): stripes_read... done
[  179.239519][ T6945] bcachefs (loop4): snapshots_read... done
[  179.248908][ T6945] bcachefs (loop4): journal_replay... done
[  179.254865][ T6945] bcachefs (loop4): resume_logged_ops... done
[  179.262427][ T6945] bcachefs (loop4): going read-write
[  179.274897][ T6945] bcachefs (loop4): done starting filesystem
[  179.469199][ T6986] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  179.645845][ T5131] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  179.655590][ T5131] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  179.663873][ T5131] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  179.673165][ T5131] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  179.685864][ T5131] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  179.692750][ T6945] syz-executor.4 (6945) used greatest stack depth: 15544 bytes left
[  179.702522][ T5131] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  179.745405][ T6359] bcachefs (loop4): shutting down
[  179.776479][ T6359] bcachefs (loop4): going read-only
[  179.781933][ T6359] bcachefs (loop4): finished waiting for writes to stop
[  179.802085][ T6359] bcachefs (loop4): flushing journal and stopping allocators, journal seq 13
[  179.849929][ T6359] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 15
[  179.876274][ T6359] bcachefs (loop4): shutdown complete, journal seq 16
[  179.894758][ T6359] bcachefs (loop4): marking filesystem clean
[  179.947046][ T6359] bcachefs (loop4): shutdown complete
[  180.583390][ T1029] team0 (unregistering): Port device team_slave_1 removed
[  180.667784][ T1029] team0 (unregistering): Port device team_slave_0 removed
[  180.833646][   T29] audit: type=1326 audit(2000000078.499:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7003 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1c67cea9 code=0x7ffc0000
[  180.900344][   T29] audit: type=1326 audit(2000000078.519:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7003 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f6a1c67cea9 code=0x7ffc0000
[  180.948457][   T29] audit: type=1326 audit(2000000078.519:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7003 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1c67cea9 code=0x7ffc0000
[  180.977800][ T7006] Invalid ELF header magic: != ELF
[  180.994373][   T29] audit: type=1326 audit(2000000078.519:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7003 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1c67cea9 code=0x7ffc0000
[  181.044895][   T29] audit: type=1804 audit(2000000078.609:115): pid=7006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3838321671/syzkaller.b2Gfz5/13/bus" dev="sda1" ino=1952 res=1 errno=0
[  181.281115][ T5131] Bluetooth: hci3: command tx timeout
[  181.379726][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  181.750669][ T5131] Bluetooth: hci4: command tx timeout
[  181.916662][ T7026] loop5: detected capacity change from 0 to 32768
[  181.934826][ T7026] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz-executor.5 (7026)
[  181.970221][ T7026] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  181.981770][ T7026] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  181.990561][ T7026] BTRFS info (device loop5): using free-space-tree
[  183.207318][ T6874] chnl_net:caif_netlink_parms(): no params data found
[  183.218762][   T29] audit: type=1326 audit(2000000080.879:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7054 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2667cea9 code=0x7ffc0000
[  183.250043][   T29] audit: type=1326 audit(2000000080.879:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7054 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a2667cea9 code=0x7ffc0000
[  183.350929][ T5131] Bluetooth: hci3: command tx timeout
[  183.362151][ T5113] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  183.805694][ T7073] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  183.845448][ T5131] Bluetooth: hci4: command tx timeout
[  183.877661][ T7077] loop4: detected capacity change from 0 to 8
[  183.995807][ T7077] SQUASHFS error: xz decompression failed, data probably corrupt
[  184.018660][ T7077] SQUASHFS error: Failed to read block 0x108: -5
[  184.042948][ T7077] SQUASHFS error: Unable to read metadata cache entry [106]
[  184.064509][ T7077] SQUASHFS error: Unable to read inode 0x0
[  184.143476][ T1029] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.216624][   T29] audit: type=1326 audit(2000000081.879:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7076 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a1c67cea9 code=0x0
[  184.297950][ T7080] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  184.322337][ T6874] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.337257][ T6874] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.363063][ T6874] bridge_slave_0: entered allmulticast mode
[  184.381474][ T6874] bridge_slave_0: entered promiscuous mode
[  184.412459][ T6874] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.419628][ T6874] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.445373][ T6874] bridge_slave_1: entered allmulticast mode
[  184.464403][ T6874] bridge_slave_1: entered promiscuous mode
[  184.495075][ T1029] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.592660][   T29] audit: type=1804 audit(2000000082.259:119): pid=7095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1058331581/syzkaller.liPwss/112/bus" dev="sda1" ino=1959 res=1 errno=0
[  184.628179][ T7095] Invalid ELF header magic: != ELF
[  184.707568][ T1029] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.734526][ T6874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  184.782982][ T6874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  184.809366][ T5182] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  184.889335][ T7103] fscrypt (sda1, inode 1954): Unsupported log2_data_unit_size in encryption policy: 133
[  189.129147][ T5131] Bluetooth: hci4: command tx timeout
[  189.150552][   T29] audit: type=1326 audit(2000000084.679:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06eb87cea9 code=0x7ffc0000
[  189.188604][ T1029] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.330790][ T5182] usb 3-1: device descriptor read/all, error -71
[  189.370572][   T29] audit: type=1326 audit(2000000084.679:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06eb87cea9 code=0x7ffc0000
[  189.510951][   T29] audit: type=1326 audit(2000000084.679:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06eb87cea9 code=0x7ffc0000
[  189.534714][   T29] audit: type=1326 audit(2000000084.679:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06eb87cea9 code=0x7ffc0000
[  189.558890][   T29] audit: type=1326 audit(2000000084.679:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06eb87cea9 code=0x7ffc0000
[  189.584326][   T29] audit: type=1326 audit(2000000084.689:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f06eb87cea9 code=0x7ffc0000
[  189.609856][   T29] audit: type=1326 audit(2000000084.689:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06eb87cea9 code=0x7ffc0000
[  189.640332][   T29] audit: type=1326 audit(2000000084.689:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06eb87cea9 code=0x7ffc0000
[  189.668734][   T29] audit: type=1326 audit(2000000084.689:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f06eb87cea9 code=0x7ffc0000
[  189.693263][   T29] audit: type=1326 audit(2000000084.689:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06eb87cea9 code=0x7ffc0000
[  189.736206][ T6989] chnl_net:caif_netlink_parms(): no params data found
[  189.863344][ T7124] netlink: 732 bytes leftover after parsing attributes in process `syz-executor.5'.
[  189.897886][ T6874] team0: Port device team_slave_0 added
[  189.928825][ T6874] team0: Port device team_slave_1 added
[  189.939501][ T7126] loop3: detected capacity change from 0 to 1024
[  189.995257][ T7126] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  190.062611][ T7126] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  190.080192][ T7126] EXT4-fs (loop3): orphan cleanup on readonly fs
[  190.102932][ T6874] batman_adv: batadv0: Adding interface: batadv_slave_0
[  190.109893][ T6874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.143478][ T6874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  190.174406][ T7126] EXT4-fs error (device loop3): __ext4_get_inode_loc:4357: comm syz-executor.3: Invalid inode table block 0 in block_group 0
[  190.204596][ T7137] overlayfs: missing 'lowerdir'
[  190.240490][ T7126] EXT4-fs (loop3): Remounting filesystem read-only
[  190.264122][ T7126] EXT4-fs (loop3): 1 truncate cleaned up
[  190.277224][ T6874] batman_adv: batadv0: Adding interface: batadv_slave_1
[  190.292405][ T7126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  190.320424][ T6874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.349018][ T6874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.464909][ T7147] binder: 7146:7147 ioctl c0306201 20000080 returned -14
[  190.485291][ T5340] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.629408][ T7155] loop3: detected capacity change from 0 to 8
[  190.646525][ T7155] squashfs image failed sanity check
[  190.726423][ T6989] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.736358][ T6989] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.745632][ T6989] bridge_slave_0: entered allmulticast mode
[  190.757740][ T7158] loop5: detected capacity change from 0 to 512
[  190.777393][ T7158] EXT4-fs (loop5): blocks per group (71) and clusters per group (32768) inconsistent
[  190.828086][ T6989] bridge_slave_0: entered promiscuous mode
[  190.840628][ T7163] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[  190.865460][ T1029] bridge_slave_1: left allmulticast mode
[  190.892477][ T1029] bridge_slave_1: left promiscuous mode
[  190.898390][ T1029] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.924678][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  190.968063][ T1029] bridge_slave_0: left allmulticast mode
[  190.997679][ T1029] bridge_slave_0: left promiscuous mode
[  191.004388][ T1029] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.315105][ T5131] Bluetooth: hci4: command tx timeout
[  192.374508][ T1029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  192.388713][ T1029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  192.404749][ T1029] bond0 (unregistering): Released all slaves
[  192.421221][ T7155] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'.
[  192.449427][ T7155] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  192.463366][ T7155] macsec1: entered allmulticast mode
[  192.468749][ T7155] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  192.483658][ T7155] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  192.492819][ T7155] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  192.571142][ T1029] IPVS: stopping backup sync thread 5240 ...
[  192.599859][ T6874] hsr_slave_0: entered promiscuous mode
[  192.607318][ T6874] hsr_slave_1: entered promiscuous mode
[  192.614613][ T6874] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  192.622744][ T6874] Cannot create hsr debugfs directory
[  192.635057][ T6989] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.646143][ T6989] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.663593][ T6989] bridge_slave_1: entered allmulticast mode
[  192.677359][ T6989] bridge_slave_1: entered promiscuous mode
[  193.117283][ T6989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  193.165572][ T7197] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes.
[  193.458512][ T6989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  193.470984][ T7195] loop3: detected capacity change from 0 to 32768
[  193.480698][ T7195] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (7195)
[  193.512062][ T7195] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  193.522458][ T7195] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  193.525263][ T7202] loop4: detected capacity change from 0 to 256
[  193.531191][ T7195] BTRFS info (device loop3): using free-space-tree
[  193.778086][ T7225] netlink: 'syz-executor.4': attribute type 28 has an invalid length.
[  193.835786][ T1231] ieee802154 phy0 wpan0: encryption failed: -22
[  193.842466][ T1231] ieee802154 phy1 wpan1: encryption failed: -22
[  193.931651][ T7225] netlink: 'syz-executor.4': attribute type 28 has an invalid length.
[  194.430659][ T1029] hsr_slave_0: left promiscuous mode
[  194.451744][ T1029] hsr_slave_1: left promiscuous mode
[  194.515094][ T1029] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  194.534937][ T1029] batman_adv: batadv0: Removing interface: batadv_slave_0
[  194.582503][ T1029] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  194.607806][ T1029] batman_adv: batadv0: Removing interface: batadv_slave_1
[  194.701276][ T1029] veth1_macvtap: left promiscuous mode
[  194.728595][ T1029] veth0_macvtap: left promiscuous mode
[  194.761574][ T1029] veth1_vlan: left promiscuous mode
[  194.790749][ T1029] veth0_vlan: left promiscuous mode
[  194.856376][ T5340] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  196.666046][ T7261] loop5: detected capacity change from 0 to 8
[  196.679064][ T7261] squashfs image failed sanity check
[  196.767981][ T1029] team0 (unregistering): Port device team_slave_1 removed
[  196.794003][ T7262] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'.
[  196.823050][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[  196.859322][ T1029] team0 (unregistering): Port device team_slave_0 removed
[  197.299098][ T6989] team0: Port device team_slave_0 added
[  197.310139][ T6989] team0: Port device team_slave_1 added
[  197.370141][ T7261] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'.
[  197.422192][ T7261] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  197.444281][ T7261] macsec1: entered allmulticast mode
[  197.467685][ T7261] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  197.523059][ T7261] netdevsim netdevsim5 netdevsim0: left allmulticast mode
[  197.537528][ T7261] netdevsim netdevsim5 netdevsim0: left promiscuous mode
[  197.553325][ T7271] loop2: detected capacity change from 0 to 128
[  197.739601][ T6989] batman_adv: batadv0: Adding interface: batadv_slave_0
[  197.758193][ T6989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.820967][ T7279] ptrace attach of "/root/syz-executor.5 exec"[5113] was attempted by "\x0b"[7279]
[  197.837756][ T6989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  197.842994][ T7278] loop3: detected capacity change from 0 to 512
[  197.887051][ T7278] EXT4-fs (loop3): blocks per group (71) and clusters per group (32768) inconsistent
[  197.921648][ T5174] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  197.937932][ T6989] batman_adv: batadv0: Adding interface: batadv_slave_1
[  197.945333][ T6989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.007188][ T6989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  198.143992][ T5174] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  198.172658][ T5174] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  198.374590][ T6989] hsr_slave_0: entered promiscuous mode
[  198.443971][ T6989] hsr_slave_1: entered promiscuous mode
[  198.488220][ T5174] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 25
[  198.503007][ T5174] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  198.512176][ T5174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  198.520413][ T5174] usb 5-1: SerialNumber: syz
[  198.564647][ T7273] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  198.584038][ T6989] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  198.610634][ T5174] cdc_acm 5-1:1.0: Control and data interfaces are not separated!
[  198.620835][ T6989] Cannot create hsr debugfs directory
[  198.820783][ T5182] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  198.838307][ T5174] cdc_acm 5-1:1.0: ttyACM0: USB ACM device
[  198.917615][ T5174] usb 5-1: USB disconnect, device number 3
[  199.044507][ T5182] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  199.076290][ T5182] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  199.119046][ T5182] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  199.149715][ T5182] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.167553][ T5182] usb 4-1: Product: syz
[  199.180607][ T5182] usb 4-1: Manufacturer: syz
[  199.185864][ T5182] usb 4-1: SerialNumber: syz
[  199.659939][ T6874] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  199.685935][ T6874] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  199.753957][ T6874] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  199.890373][ T6874] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  200.028874][ T5125] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  200.040423][ T5125] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  200.048545][ T5125] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  200.078278][ T5125] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  200.096929][ T5125] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  200.108546][ T5125] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  200.200730][ T6874] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.241499][ T5182] cdc_ncm 4-1:1.0: bind() failure
[  200.252284][ T5182] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71
[  200.270539][ T5182] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71
[  200.282335][ T5182] usbtest 4-1:1.1: probe with driver usbtest failed with error -71
[  200.305143][ T5182] usb 4-1: USB disconnect, device number 2
[  200.360109][ T6874] 8021q: adding VLAN 0 to HW filter on device team0
[  200.396709][ T7315] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false
[  200.447611][ T5181] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.454855][ T5181] bridge0: port 1(bridge_slave_0) entered forwarding state
[  200.567089][ T6989] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  200.639896][ T5179] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.647143][ T5179] bridge0: port 2(bridge_slave_1) entered forwarding state
[  200.685801][ T6989] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  200.735873][ T6989] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  200.779903][ T6989] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  201.080910][ T7327] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  201.089091][ T7327] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.4'.
[  201.277429][ T5125] Bluetooth: hci0: command 0x0406 tx timeout
[  201.593845][ T7330] loop2: detected capacity change from 0 to 128
[  201.810111][   T29] kauditd_printk_skb: 47 callbacks suppressed
[  201.810133][   T29] audit: type=1326 audit(2000000099.469:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1c67cea9 code=0x7ffc0000
[  201.961490][   T29] audit: type=1326 audit(2000000099.469:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1c67cea9 code=0x7ffc0000
[  202.012968][   T29] audit: type=1326 audit(2000000099.509:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a1c67cea9 code=0x7ffc0000
[  202.055448][ T7336] overlayfs: missing 'lowerdir'
[  202.096029][   T29] audit: type=1326 audit(2000000099.509:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1c67cea9 code=0x7ffc0000
[  202.155300][ T5123] Bluetooth: hci6: command tx timeout
[  202.190958][   T29] audit: type=1326 audit(2000000099.519:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a1c67cea9 code=0x7ffc0000
[  202.215061][   T29] audit: type=1326 audit(2000000099.519:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a1c67cea9 code=0x7ffc0000
[  202.260342][   T29] audit: type=1326 audit(2000000099.519:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a1c67a627 code=0x7ffc0000
[  202.310736][   T29] audit: type=1326 audit(2000000099.519:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a1c6402e9 code=0x7ffc0000
[  202.335362][   T29] audit: type=1326 audit(2000000099.519:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6a1c67a627 code=0x7ffc0000
[  202.384557][   T29] audit: type=1326 audit(2000000099.519:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7332 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6a1c6402e9 code=0x7ffc0000
[  202.478042][   T62] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.656355][   T62] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.853403][ T6874] 8021q: adding VLAN 0 to HW filter on device batadv0
[  202.889901][ T7338] loop4: detected capacity change from 0 to 32768
[  202.930983][   T62] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.966071][ T7308] chnl_net:caif_netlink_parms(): no params data found
[  203.451605][ T6989] 8021q: adding VLAN 0 to HW filter on device bond0
[  203.503158][ T7363] binder: 7362:7363 ioctl c0306201 20000080 returned -14
[  203.547828][ T7308] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.565732][ T7308] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.575706][ T7308] bridge_slave_0: entered allmulticast mode
[  203.595917][ T7308] bridge_slave_0: entered promiscuous mode
[  203.643635][ T7308] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.654454][ T7308] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.664206][ T7308] bridge_slave_1: entered allmulticast mode
[  203.676319][ T7308] bridge_slave_1: entered promiscuous mode
[  203.718240][ T6989] 8021q: adding VLAN 0 to HW filter on device team0
[  203.739870][ T7372] loop3: detected capacity change from 0 to 128
[  203.884751][ T7308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  203.904655][ T7308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  204.006243][ T5182] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.013511][ T5182] bridge0: port 1(bridge_slave_0) entered forwarding state
[  204.134431][ T5182] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.141656][ T5182] bridge0: port 2(bridge_slave_1) entered forwarding state
[  204.231289][ T5123] Bluetooth: hci6: command tx timeout
[  204.319176][ T7308] team0: Port device team_slave_0 added
[  204.357996][   T62] bridge_slave_1: left allmulticast mode
[  204.374964][   T62] bridge_slave_1: left promiscuous mode
[  204.393999][   T62] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.441936][   T62] bridge_slave_0: left allmulticast mode
[  204.459820][   T62] bridge_slave_0: left promiscuous mode
[  204.476809][   T62] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.911224][ T7384] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false
[  205.194498][ T7387] loop4: detected capacity change from 0 to 64
[  205.238271][ T7382] loop2: detected capacity change from 0 to 32768
[  205.655471][ T7393] loop4: detected capacity change from 0 to 256
[  205.687049][ T7393] exfat: Deprecated parameter 'utf8'
[  205.714315][ T7393] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d)
[  205.845990][   T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  205.890177][   T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  205.916568][   T62] bond0 (unregistering): Released all slaves
[  206.046026][ T7308] team0: Port device team_slave_1 added
[  206.057783][ T6874] veth0_vlan: entered promiscuous mode
[  206.296556][ T7413] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false
[  206.312024][ T5123] Bluetooth: hci6: command tx timeout
[  206.387192][ T7411] loop2: detected capacity change from 0 to 32768
[  206.400060][ T7411] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (7411)
[  206.423870][ T7411] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  206.434167][ T7411] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  206.442976][ T7411] BTRFS info (device loop2): using free-space-tree
[  206.457976][ T6874] veth1_vlan: entered promiscuous mode
[  206.474868][ T7308] batman_adv: batadv0: Adding interface: batadv_slave_0
[  206.493241][ T7308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.519656][ T7308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  206.540008][ T7308] batman_adv: batadv0: Adding interface: batadv_slave_1
[  206.551255][ T7308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.580193][ T7308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  207.659255][ T5483] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  207.764792][ T7443] loop4: detected capacity change from 0 to 256
[  207.775295][ T7443] exfat: Deprecated parameter 'utf8'
[  207.836036][ T7443] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d)
[  207.916274][ T7308] hsr_slave_0: entered promiscuous mode
[  207.965885][ T7308] hsr_slave_1: entered promiscuous mode
[  207.990024][ T7308] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  208.015675][ T7308] Cannot create hsr debugfs directory
[  208.099888][   T62] hsr_slave_0: left promiscuous mode
[  208.127825][   T62] hsr_slave_1: left promiscuous mode
[  208.142200][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  208.149642][   T62] batman_adv: batadv0: Removing interface: batadv_slave_0
[  208.172516][   T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  208.186100][   T62] batman_adv: batadv0: Removing interface: batadv_slave_1
[  208.238731][   T62] veth1_macvtap: left promiscuous mode
[  208.245000][   T62] veth0_macvtap: left promiscuous mode
[  208.248952][ T7457] loop4: detected capacity change from 0 to 256
[  208.268213][   T62] veth1_vlan: left promiscuous mode
[  208.280774][   T62] veth0_vlan: left promiscuous mode
[  208.305385][ T7457] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  208.326168][ T7457] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  208.390647][ T5123] Bluetooth: hci6: command tx timeout
[  208.500721][ T5178] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  208.554196][    T8] ==================================================================
[  208.562287][    T8] BUG: KASAN: slab-use-after-free in sco_sock_timeout+0x8b/0x270
[  208.570026][    T8] Write of size 4 at addr ffff88807fa2e080 by task kworker/0:0/8
[  208.576958][ T7463] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false
[  208.577732][    T8] 
[  208.577743][    T8] CPU: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.10.0-rc3-syzkaller-00021-g2ef5971ff345 #0
[  208.604403][    T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  208.614460][    T8] Workqueue: events sco_sock_timeout
[  208.619757][    T8] Call Trace:
[  208.623046][    T8]  <TASK>
[  208.625969][    T8]  dump_stack_lvl+0x241/0x360
[  208.630659][    T8]  ? __pfx_dump_stack_lvl+0x10/0x10
[  208.635873][    T8]  ? __pfx__printk+0x10/0x10
[  208.640468][    T8]  ? _printk+0xd5/0x120
[  208.644626][    T8]  ? __virt_addr_valid+0x183/0x520
[  208.649740][    T8]  ? srso_alias_return_thunk+0x5/0xfbef5
[  208.655382][    T8]  print_report+0x169/0x550
[  208.659891][    T8]  ? __virt_addr_valid+0x183/0x520
[  208.665007][    T8]  ? srso_alias_return_thunk+0x5/0xfbef5
[  208.670645][    T8]  ? __virt_addr_valid+0x44e/0x520
[  208.676067][    T8]  ? srso_alias_return_thunk+0x5/0xfbef5
[  208.681707][    T8]  ? __phys_addr+0xba/0x170
[  208.686228][    T8]  ? sco_sock_timeout+0x8b/0x270
[  208.691435][    T8]  kasan_report+0x143/0x180
[  208.695945][    T8]  ? __pfx_lock_acquire+0x10/0x10
[  208.700976][    T8]  ? sco_sock_timeout+0x8b/0x270
[  208.705930][    T8]  kasan_check_range+0x282/0x290
[  208.710878][    T8]  sco_sock_timeout+0x8b/0x270
[  208.715644][    T8]  ? process_scheduled_works+0x945/0x1830
[  208.721364][    T8]  process_scheduled_works+0xa2e/0x1830
[  208.726925][    T8]  ? __pfx_process_scheduled_works+0x10/0x10
[  208.732910][    T8]  ? assign_work+0x364/0x3d0
[  208.737497][    T8]  worker_thread+0x86d/0xd70
[  208.742103][    T8]  ? __kthread_parkme+0x169/0x1d0
[  208.747136][    T8]  ? __pfx_worker_thread+0x10/0x10
[  208.752245][    T8]  kthread+0x2f2/0x390
[  208.756318][    T8]  ? __pfx_worker_thread+0x10/0x10
[  208.761432][    T8]  ? __pfx_kthread+0x10/0x10
[  208.766025][    T8]  ret_from_fork+0x4d/0x80
[  208.770462][    T8]  ? __pfx_kthread+0x10/0x10
[  208.775056][    T8]  ret_from_fork_asm+0x1a/0x30
[  208.779838][    T8]  </TASK>
[  208.782850][    T8] 
[  208.785160][    T8] Allocated by task 7239:
[  208.789474][    T8]  kasan_save_track+0x3f/0x80
[  208.794155][    T8]  __kasan_kmalloc+0x98/0xb0
[  208.798745][    T8]  __kmalloc_noprof+0x1f9/0x400
[  208.803589][    T8]  sk_prot_alloc+0xe0/0x210
[  208.808096][    T8]  sk_alloc+0x38/0x370
[  208.812249][    T8]  __netlink_create+0x6c/0x280
[  208.817015][    T8]  netlink_create+0x3d5/0x590
[  208.821693][    T8]  __sock_create+0x492/0x920
[  208.826296][    T8]  __sys_socket+0x150/0x3c0
[  208.830806][    T8]  __x64_sys_socket+0x7a/0x90
[  208.835495][    T8]  do_syscall_64+0xf3/0x230
[  208.839997][    T8]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.845890][    T8] 
[  208.848201][    T8] Freed by task 24:
[  208.851995][    T8]  kasan_save_track+0x3f/0x80
[  208.856670][    T8]  kasan_save_free_info+0x40/0x50
[  208.861693][    T8]  poison_slab_object+0xe0/0x150
[  208.866632][    T8]  __kasan_slab_free+0x37/0x60
[  208.871394][    T8]  kfree+0x149/0x360
[  208.875294][    T8]  __sk_destruct+0x476/0x5f0
[  208.879878][    T8]  rcu_core+0xaff/0x1830
[  208.884121][    T8]  handle_softirqs+0x2c6/0x970
[  208.888881][    T8]  run_ksoftirqd+0xca/0x130
[  208.893381][    T8]  smpboot_thread_fn+0x546/0xa30
[  208.898315][    T8]  kthread+0x2f2/0x390
[  208.902385][    T8]  ret_from_fork+0x4d/0x80
[  208.906804][    T8]  ret_from_fork_asm+0x1a/0x30
[  208.911575][    T8] 
[  208.913889][    T8] Last potentially related work creation:
[  208.919588][    T8]  kasan_save_stack+0x3f/0x60
[  208.924267][    T8]  __kasan_record_aux_stack+0xac/0xc0
[  208.929647][    T8]  call_rcu+0x167/0xa70
[  208.933805][    T8]  netlink_release+0x1638/0x1b10
[  208.938744][    T8]  sock_close+0xbe/0x240
[  208.942988][    T8]  __fput+0x408/0x8b0
[  208.946964][    T8]  task_work_run+0x251/0x310
[  208.951559][    T8]  syscall_exit_to_user_mode+0x168/0x370
[  208.957192][    T8]  do_syscall_64+0x100/0x230
[  208.961779][    T8]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.967675][    T8] 
[  208.969988][    T8] The buggy address belongs to the object at ffff88807fa2e000
[  208.969988][    T8]  which belongs to the cache kmalloc-2k of size 2048
[  208.984036][    T8] The buggy address is located 128 bytes inside of
[  208.984036][    T8]  freed 2048-byte region [ffff88807fa2e000, ffff88807fa2e800)
[  208.997916][    T8] 
[  209.000235][    T8] The buggy address belongs to the physical page:
[  209.006645][    T8] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fa28
[  209.015397][    T8] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  209.023890][    T8] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  209.031431][    T8] page_type: 0xffffefff(slab)
[  209.036105][    T8] raw: 00fff00000000040 ffff888015042000 ffffea000070fa00 dead000000000002
[  209.044682][    T8] raw: 0000000000000000 0000000000080008 00000001ffffefff 0000000000000000
[  209.053264][    T8] head: 00fff00000000040 ffff888015042000 ffffea000070fa00 dead000000000002
[  209.061931][    T8] head: 0000000000000000 0000000000080008 00000001ffffefff 0000000000000000
[  209.070596][    T8] head: 00fff00000000003 ffffea0001fe8a01 ffffffffffffffff 0000000000000000
[  209.079259][    T8] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[  209.087915][    T8] page dumped because: kasan: bad access detected
[  209.094316][    T8] page_owner tracks the page as allocated
[  209.100016][    T8] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 25, tgid 25 (kworker/1:0), ts 167660482868, free_ts 167626596044
[  209.122509][    T8]  post_alloc_hook+0x1f3/0x230
[  209.127281][    T8]  get_page_from_freelist+0x2e43/0x2f00
[  209.132837][    T8]  __alloc_pages_noprof+0x256/0x6c0
[  209.138045][    T8]  alloc_slab_page+0x5f/0x120
[  209.142724][    T8]  allocate_slab+0x5a/0x2f0
[  209.147229][    T8]  ___slab_alloc+0xcd1/0x14b0
[  209.151900][    T8]  __slab_alloc+0x58/0xa0
[  209.156227][    T8]  kmalloc_node_track_caller_noprof+0x281/0x440
[  209.162463][    T8]  kmalloc_reserve+0x111/0x2a0
[  209.167234][    T8]  __alloc_skb+0x1f3/0x440
[  209.171653][    T8]  alloc_skb_with_frags+0xc3/0x770
[  209.176757][    T8]  sock_alloc_send_pskb+0x91a/0xa60
[  209.181953][    T8]  mld_newpack+0x1c3/0xa90
[  209.186374][    T8]  add_grec+0x1492/0x19a0
[  209.190717][    T8]  mld_send_initial_cr+0x228/0x4b0
[  209.195850][    T8]  mld_dad_work+0x44/0x500
[  209.200278][    T8] page last free pid 6787 tgid 6783 stack trace:
[  209.206602][    T8]  free_unref_page+0xd22/0xea0
[  209.211373][    T8]  __folio_put+0x3b9/0x620
[  209.215789][    T8]  free_large_kmalloc+0x105/0x1c0
[  209.220810][    T8]  kfree+0x1c4/0x360
[  209.224710][    T8]  snd_pcm_oss_change_params_locked+0x2b21/0x3d60
[  209.231125][    T8]  snd_pcm_oss_write+0x2d5/0x11f0
[  209.236147][    T8]  vfs_write+0x2a4/0xc90
[  209.240394][    T8]  ksys_write+0x1a0/0x2c0
[  209.244739][    T8]  do_syscall_64+0xf3/0x230
[  209.249242][    T8]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.255134][    T8] 
[  209.257446][    T8] Memory state around the buggy address:
[  209.263068][    T8]  ffff88807fa2df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  209.271123][    T8]  ffff88807fa2e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  209.279177][    T8] >ffff88807fa2e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  209.287230][    T8]                    ^
[  209.291285][    T8]  ffff88807fa2e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  209.299337][    T8]  ffff88807fa2e180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  209.307384][    T8] ==================================================================
[  209.315503][    C0] vkms_vblank_simulate: vblank timer overrun
[  209.324492][    T8] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  209.331694][    T8] CPU: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.10.0-rc3-syzkaller-00021-g2ef5971ff345 #0
[  209.341591][    T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  209.351658][    T8] Workqueue: events sco_sock_timeout
[  209.356966][    T8] Call Trace:
[  209.360253][    T8]  <TASK>
[  209.363188][    T8]  dump_stack_lvl+0x241/0x360
[  209.367886][    T8]  ? __pfx_dump_stack_lvl+0x10/0x10
[  209.373095][    T8]  ? __pfx__printk+0x10/0x10
[  209.377686][    T8]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  209.383676][    T8]  ? srso_alias_return_thunk+0x5/0xfbef5
[  209.389313][    T8]  ? vscnprintf+0x5d/0x90
[  209.393653][    T8]  panic+0x349/0x860
[  209.397550][    T8]  ? check_panic_on_warn+0x21/0xb0
[  209.402670][    T8]  ? __pfx_panic+0x10/0x10
[  209.407092][    T8]  ? _raw_spin_unlock_irqrestore+0xd8/0x140
[  209.412992][    T8]  ? srso_alias_return_thunk+0x5/0xfbef5
[  209.418631][    T8]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  209.424533][    T8]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  209.430875][    T8]  check_panic_on_warn+0x86/0xb0
[  209.435823][    T8]  ? sco_sock_timeout+0x8b/0x270
[  209.440773][    T8]  end_report+0x77/0x160
[  209.445034][    T8]  kasan_report+0x154/0x180
[  209.449541][    T8]  ? __pfx_lock_acquire+0x10/0x10
[  209.454568][    T8]  ? sco_sock_timeout+0x8b/0x270
[  209.459510][    T8]  kasan_check_range+0x282/0x290
[  209.464456][    T8]  sco_sock_timeout+0x8b/0x270
[  209.469220][    T8]  ? process_scheduled_works+0x945/0x1830
[  209.474940][    T8]  process_scheduled_works+0xa2e/0x1830
[  209.480504][    T8]  ? __pfx_process_scheduled_works+0x10/0x10
[  209.486486][    T8]  ? assign_work+0x364/0x3d0
[  209.491081][    T8]  worker_thread+0x86d/0xd70
[  209.495684][    T8]  ? __kthread_parkme+0x169/0x1d0
[  209.500712][    T8]  ? __pfx_worker_thread+0x10/0x10
[  209.505824][    T8]  kthread+0x2f2/0x390
[  209.509898][    T8]  ? __pfx_worker_thread+0x10/0x10
[  209.515013][    T8]  ? __pfx_kthread+0x10/0x10
[  209.519604][    T8]  ret_from_fork+0x4d/0x80
[  209.524029][    T8]  ? __pfx_kthread+0x10/0x10
[  209.528622][    T8]  ret_from_fork_asm+0x1a/0x30
[  209.533410][    T8]  </TASK>
[  209.536634][    T8] Kernel Offset: disabled
[  209.541032][    T8] Rebooting in 86400 seconds..