last executing test programs:

16.759743515s ago: executing program 4:
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b70800000000000003010902", @ANYBLOB], 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="365ac333c842fb77f95691c14389ece8595873526e7eafe8131e1544c7619d78b9b1062da72846bd0918ddcc7b4a55b608e5aa39c401a396bd45a6bf8387763687ef77276050113f2236adf8cd9df18e5e275d3c921320d6a0e1460c2b313f7ca9d1c09909cf8d0ecf800c4b0dddba587156060f6fc7fe2a63b650ba827fac475cba89a409f41fcabb8b1c1aed174ef1f62d6784fa566cf4b5fa9062a58f", 0x9e}], 0x1}}], 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001000080"])
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB=';'])

14.955478969s ago: executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008d"])

14.515192447s ago: executing program 4:
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1, 0x54f9, &(0x7f000000ab40)="$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")
ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6673636f6e0200000000000000742c00"])
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0xae71, 0x0)
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000320, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f2ff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x4, 0x4, 0xbf25}, 0x48)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000fc0), 0x0, 0x0)
ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000001000))
close(r3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
unlink(&(0x7f0000000000)='./cgroup\x00')
ftruncate(r1, 0x2007ffb)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0)
r6 = open(&(0x7f00000001c0)='./bus\x00', 0x64942, 0x0)
r7 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000200201005)

12.521085161s ago: executing program 4:
bpf$PROG_LOAD(0x5, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e)
shutdown(0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
close(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4)
setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="020d00001400000000000000000000000800120000000200000000000000000006000000000000000000000000000000ac1e0001000000000000000000000000ac14140000000000000000000000000005000500002000000a00000000000000fe8000000000000000000000000000aa000000000000000005000600001859000a00000000000000fc"], 0xa0}}, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

11.510649985s ago: executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@RTM_NEWMDB={0x18, 0x54, 0x1}, 0x18}}, 0x0)

11.423045898s ago: executing program 4:
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @dev}}}})

10.673453803s ago: executing program 1:
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
unshare(0x68040200)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801}], {0x14}}, 0xa4}}, 0x0)

9.719414318s ago: executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008d"])

9.4439426s ago: executing program 1:
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1, 0x54f9, &(0x7f000000ab40)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYogbSQBqiB3FJCBBEeB4WIRJE8thX0fZIZxoIfMwgO80YaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS3fVenFz9fu6bc5u306e2QAAAADnbKv1on4yS/2vzf3vza2fTb+IiDIizq3dR/HpJHPU5FSvvL56MYbbiDrh8BmT5voSEX+a6+FH198CAAAAXK7NcjVPq/X0MBt6QPQpFW3Kb38z5RURUc3uM6WVh7xfmcLq3/c4/mdKqwtY00xhqeQ2zpX2LvXf/Vi1mz5ritSUb78/29wBAIAejU6aflchAAAA9Onf0ANgGEU8bWUetwInqWm29z6f9AAAAIAPqBh6AAAAAEDn6vW/8/8AAADgsqXz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjStlovNsvVvG3Obt9OntkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/szzsKhEAYhMHe9Z3J3P+w0qCpqUkVCB9/YzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPndX/5PTI0zydxrY+l5JFk7NbZOjb1z4+gP4+vXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLE/LykQAkEQBXPG/076/oeVBD2DCBHQ8KiiFg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf9Ltf/k9MjTPJ3Glj6XgkWbtqbF019h40jh6Mt38DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLFzP69xVHEAwN/M7GxtVVyj7CEiCh70Yrfb2tqbeFCCB/8EIaTbGrv1R5uDLUXIxZvknIvoUURQ4i3/Q84J5BJvOewhgmdlZmeSyQ9w/dGZTfL5wJv33WGY932zEPKd9xIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNLo3YM4yQ6dcRwX5zb3Hi9k/daRPrO+sj2btSyO6kz6dHi5+iHqNpcIAAAA50dS1vchhJ10bS7r405e/6flNVnN/92z47is54/W/WVf1v5Z+/WX3Rf3B+qMx8luentxOLhyPJXWk5vldHvub69o5U8+f/eS5F9I/MHyC6M0f57RNxsb77Xz8EId2QIA/8blsi+C8vehrO83mRgA50arUniX9X/SaTYnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDqMlsPTZRyFEGZbB3Fma+/xwkn9+sr2bNlurK6uVO+Z3SINIdxeHA6u1DiXaffg4aO788Ph4H79wSshhKZGf6eY/t2PJrg4hEaej+B/CuLiy56WfE5H0OAPJQAAzqS0aFldv5OuzWXnopkQ/vz+cP3/eiUOE9b/ux/f2KyOVa3/+7XNcPr1lu593nvw8NGbi/fm7wzuDD5962r/7f61m9ev3+zl70p63pgAAADw37SLVq3/45nj6/+XKnGYsP7/4tv+V9WxEvX/iQ4W/ZrOBAAA4Hx7/tU/fo9OOB+12+HL+aWl+/3xcf/z1fGxgVT/sQtFq9b/yUzTWQEAAAB1GC1Hh9b/b1XiMOH6/zM/vPRT9Z5JCOFisf5/eeGz4a36pjPV6vhz4qbnCAAAQLMuFq26/p/m+//j/S0PcQjhjdfGcfFvACeq/5P3v/6xOlZ1//+1+qY4leLu+HnkfTeEVrfpjAAAADjLnipaVuz/lq7NffLzpQ/b9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2vAAAA//+END5e")
ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6673636f6e0200000000000000742c00"])
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0xae71, 0x0)
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000320, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f2ff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x4, 0x4, 0xbf25}, 0x48)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000fc0), 0x0, 0x0)
ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000001000))
close(r3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
unlink(&(0x7f0000000000)='./cgroup\x00')
ftruncate(r1, 0x2007ffb)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0)
r6 = open(&(0x7f00000001c0)='./bus\x00', 0x64942, 0x0)
r7 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x1000200201005)

7.434961156s ago: executing program 1:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
semop(0x0, &(0x7f0000000100)=[{0x3, 0xff0b}], 0x1)
semctl$IPC_RMID(0x0, 0x0, 0x10)

6.285958731s ago: executing program 1:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0)

6.141532184s ago: executing program 1:
unshare(0x6020400)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
epoll_create1(0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000006d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mm_vmscan_kswapd_wake\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90)
syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)

4.446109772s ago: executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000003c0)=0x70, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000b80)="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", 0x3e8, 0x1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93)

4.272867368s ago: executing program 3:
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="365ac333c842fb77f95691c14389ece8595873526e7eafe8131e1544c7619d78b9b1062da72846bd0918ddcc7b4a55b608e5aa39c401a396bd45a6bf8387763687ef77276050113f2236adf8cd9df18e5e275d3c921320d6a0e1460c2b313f7ca9d1c09909cf8d0ecf800c4b0dddba587156060f6fc7fe2a63b650ba827fac475cba89a409f41fcabb8b1c1aed174ef1f6", 0x91}], 0x1}}], 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001000080"])
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="3b0000000000efff400101c0"])

3.263249322s ago: executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2200010, &(0x7f0000000000)={[{@init_itable_val}, {@debug}]}, 0x1, 0x576, &(0x7f00000007c0)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

3.235992896s ago: executing program 0:
r0 = socket(0x10, 0x803, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000001340)=@newtfilter={0x80, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0x50, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc2}}]}, @TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x80}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.95014286s ago: executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008d"])

2.68885092s ago: executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000060018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_request_blocks\x00', r1}, 0x10)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)

2.497121899s ago: executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000408a25886a00007000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{r2}, &(0x7f00000007c0), &(0x7f0000000800)='%pi6   \x00'}, 0x20)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x5, {0x5, 0x0, "d5773a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

2.03150097s ago: executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x143a41, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0xd132})
write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x6e8a)

1.871245105s ago: executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x2, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_key={0x1}]}, 0x18}}, 0x0)

1.748933463s ago: executing program 2:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10)
writev(r0, 0x0, 0x0)

1.195416878s ago: executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x143a41, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0xd132})
write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x6e8a)

1.189989969s ago: executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000005640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffff09}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ext4\x00', 0x0, 0x0)

1.044326091s ago: executing program 3:
pipe2$9p(0x0, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
r2 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[], 0x0)
read$hidraw(r2, 0x0, 0x0)
syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000000)='B')
close_range(r0, 0xffffffffffffffff, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700))

833.707913ms ago: executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008d"])

654.79432ms ago: executing program 2:
io_uring_setup(0x4822, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x2034850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4bd, &(0x7f0000000f00)="$eJzs3d9rW9cdAPDvle3ESZzZ2faQBZaFLcMJWyQ7XhKzh8yDsT0FlmXvnmfLxli2jCUnsQnDYX/AYPQX7VOf+lLoH1Ao+RNKIdC+l1JaQpukD31oqyL5KnFdyZaJbSXW5wPH9557r/z9Hgkd6dxz0Q2gY52JiLGI6IqI8xHRn27PpCXW1kv1uEcP70xWSxKVyo0vkkjSbfX/laTLY+nDeiPiH3+L+Hfy47illdW5iUIhv5TWc+X5xVxpZfXC7PzETH4mvzA2Mnx59MropdGhXWvr1b98+sr/3vrr1fd+f+vj8c/P/aeaVl+6b2M7WrHW4nHrTe+pPRd13RGxtJNgz7GutD097U4EAICWVL/j/zQifh0Rj19vdzYAAADAXqj8qS++SSIqAAAAwIGVqV0Dm2Sy6bUAfZHJZLPr1/D+PI5mCsVS+XfTxeWFqfVrZQeiJzM9W8gPpdcKD0RPUq0P19af1i9uqo9ExImIeKn/SK2enSwWptp98gMAAAA6xLFN4/+v+tfH/wAAAMABM9DuBAAAAIA9Z/wPAAAAB1/T8X/Svb+JAAAAAHvh79euVUulfv/rqZsry3PFmxem8qW57PzyZHayuLSYnSkWZ2q/2Te/3f8rFIuLf4iF5du5cr5UzpVWVsfni8sL5fHafb3H8+4TDQAAAPvvxK/ufZRExNofj9RK1aF0Xwtj9bG9zQ7YS5mdHZ7sVR7A/utqdwJA27jAFzqX+Xhgm4H9y5vqOzxtAAAAPA8Gf/FM8//mA+EFZiAPncv8P3Qu8//Qucz/Q4c7vP0hvc12vL/LuQAAAHumr1aSTDadC+yLTCabjTheuy1ATzI9W8gPRcRPIuLD/p7D1fpwu5MGAAAAAAAAAAAAAAAAAAAAAAAAgBdMpZJEBQAAADjQIjKfJemN/Af7z/ZtPj9wKPm6v7aMiFtv3Hj19kS5vDRc3f7lk+3l19LtF9txBgMAAADYrD5Or4/jAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGA3PXp4Z7Je9jPugz9HxECj+N3RW1v2Rk9EHH2cRPeGxyUR0bUL8dfuRsTJRvGTaloxkGaxOX4mIo60Of6xXYgPnexetf8Za/T+y8SZ2rLx+687Lc/qwZlm/V/mSf/X1aT/O95ijFP338k1jX834lR34/6nHj95xv73X/9cXW22r/JmxGDDz5/kB7Fy5fnFXGll9cLs/MRMfia/MDIyfHn0yuil0aHc9Gwhn/5tGOP/v3z3u63af7RJ/IFt2n+2xfZ/e//2w59tEf/cbxq//ie3iF997n+bfg5U9w/W19fW1zc6/fYHp7dq/1ST9m/3+p9rsf3nr//3kxYPBQD2QWlldW6iUMgvWbFi5eCtXE/f6Dt+eJs7JgAAYNc9/dLf7kwAAAAAAAAAAAAAAAAAAACgc+3Hj5BtjNfbvqYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzp+wAAAP//hqfSmw==")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x40000000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x6609, 0x0)

428.507195ms ago: executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000080010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, 0x0)

350.971926ms ago: executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]})
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0)
open(&(0x7f00000002c0)='./file1\x00', 0x2, 0x0)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
unlink(&(0x7f0000000280)='./file0\x00')

0s ago: executing program 0:
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x402, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743d63703837342c71756f74612c6572726f72733d636f6e74696e75652c6572726f72733d72656d6f756e742d726f2c6e6f646973636172642c6e6f71756f74612c646973636172643d30783030303030303030303030303035616100696e746567726974792c646973636172643d3078303030303030303030303030303030392c67727071756f74612c71756f74612c67627071756f74612c726573697a653d3078666666666666666666666666666566662c646973636172642c7375626a5f747970653d6572726f72733d72656d6f756e742d726f2c61756469742c666f776e65723e839990b388a13fdf2407", @ANYRESDEC=0x0, @ANYRES32], 0xfe, 0x615a, &(0x7f00000037c0)="$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")
rmdir(&(0x7f0000000080)='./file0\x00')

kernel console output (not intermixed with test programs):

9.865251][ T3625] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a040e01c, mo2=0002]
[   49.888947][ T3625] System zones: 1-12
[   49.927151][ T3625] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz-executor.0: casefold flag without casefold feature
[   49.943388][ T3570] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   49.953885][ T3623] loop2: detected capacity change from 32768 to 0
[   49.961181][ T3625] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.0: missing EA_INODE flag
[   49.961298][ T3570] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   49.985301][ T3570] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   50.004538][ T3625] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor.0: error while reading EA inode 12 err=-117
[   50.019879][ T3625] EXT4-fs (loop0): 1 orphan inode deleted
[   50.026347][ T3625] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,abort,max_dir_size_kb=0x0000000000009c7c,debug,orlov,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue. Quota mode: none.
[   50.152789][ T1066] Bluetooth: hci1: command 0x0419 tx timeout
[   50.173419][ T3570] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   50.187198][ T3570] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   50.219921][ T3570] usb 2-1: Product: syz
[   50.228345][ T3570] usb 2-1: Manufacturer: syz
[   50.232869][   T21] Bluetooth: hci3: command 0x0419 tx timeout
[   50.235097][ T3655] loop3: detected capacity change from 0 to 4096
[   50.250139][ T3570] usb 2-1: SerialNumber: syz
[   50.308202][ T3625] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   50.314354][   T21] Bluetooth: hci2: command 0x0419 tx timeout
[   50.332936][ T3655] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[   50.357148][   T21] Bluetooth: hci0: command 0x0419 tx timeout
[   50.397786][   T21] Bluetooth: hci4: command 0x0419 tx timeout
[   50.434533][ T3655] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[   50.502571][ T3625] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   50.537738][ T3570] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   50.701936][ T3629] ntfs3: loop3: ntfs3_write_inode r=5 failed, -22.
[   50.727428][ T3526] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[   50.768338][ T3684] usb 2-1: USB disconnect, device number 2
[   50.881150][ T3684] usblp0: removed
[   51.037105][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[   51.980360][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[   52.696533][ T3731] loop4: detected capacity change from 0 to 32768
[   52.752537][ T3731] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (3731)
[   52.803286][ T3731] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[   52.851767][ T3731] BTRFS info (device loop4): allowing degraded mounts
[   52.880826][ T3731] BTRFS info (device loop4): turning on flush-on-commit
[   52.916988][ T3731] BTRFS info (device loop4): max_inline at 0
[   52.950569][ T3731] BTRFS info (device loop4): setting nodatasum
[   52.977354][ T3731] BTRFS info (device loop4): enabling auto defrag
[   52.995902][ T3731] BTRFS info (device loop4): max_inline at 0
[   53.032010][ T3731] BTRFS info (device loop4): using free space tree
[   53.054310][ T3746] loop2: detected capacity change from 0 to 32768
[   53.055818][ T3731] BTRFS info (device loop4): has skinny extents
[   53.129783][ T3746] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor.2 (3746)
[   53.255482][ T3541] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (3541)
[   53.361290][ T3795] loop2: detected capacity change from 0 to 512
[   53.477822][ T3731] BTRFS info (device loop4): enabling ssd optimizations
[   53.487721][ T3795] EXT4-fs (loop2): Ignoring removed orlov option
[   53.497319][ T3795] EXT4-fs (loop2): Test dummy encryption mode enabled
[   53.508714][ T3795] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   53.528357][ T3795] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a040e01c, mo2=0002]
[   53.545045][ T3795] System zones: 1-12
[   53.558792][ T3795] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz-executor.2: casefold flag without casefold feature
[   53.588706][ T3795] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.2: missing EA_INODE flag
[   53.656830][ T3795] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 12 err=-117
[   53.745225][ T3795] EXT4-fs (loop2): 1 orphan inode deleted
[   53.753249][ T3795] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,abort,max_dir_size_kb=0x0000000000009c7c,debug,orlov,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue. Quota mode: none.
[   54.049653][ T3823] syz-executor.4[3823] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   54.612327][ T1069] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   54.733869][ T3850] loop2: detected capacity change from 0 to 512
[   54.764855][ T3850] EXT4-fs (loop2): Ignoring removed orlov option
[   54.777966][ T3814] loop0: detected capacity change from 0 to 32768
[   54.792968][ T3850] EXT4-fs (loop2): Test dummy encryption mode enabled
[   54.821862][ T3850] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   54.861586][ T3850] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a040e01c, mo2=0002]
[   54.901525][ T3850] System zones: 1-12
[   54.923656][ T3850] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz-executor.2: casefold flag without casefold feature
[   54.938906][ T3814] XFS (loop0): Mounting V5 Filesystem
[   54.944874][ T3850] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.2: missing EA_INODE flag
[   54.959225][ T3850] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 12 err=-117
[   54.981762][ T3850] EXT4-fs (loop2): 1 orphan inode deleted
[   54.994924][ T3850] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,abort,max_dir_size_kb=0x0000000000009c7c,debug,orlov,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue. Quota mode: none.
[   55.069632][ T3814] XFS (loop0): Ending clean mount
[   55.078570][ T1069] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   55.089301][ T1069] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   55.104459][ T1069] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   55.124704][ T3814] XFS (loop0): Metadata CRC error detected at xfs_agfl_read_verify+0x1ca/0x290, xfs_agfl block 0x3 
[   55.148590][ T3814] XFS (loop0): Unmount and run xfs_repair
[   55.158367][ T3814] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[   55.166428][ T3814] 00000000: 58 41 46 4c 00 00 00 00 00 00 00 00 00 00 80 86  XAFL............
[   55.181301][ T3814] 00000010: af d4 a8 f7 47 a7 4b ab 00 00 00 00 00 00 00 00  ....G.K.........
[   55.194212][ T3814] 00000020: 5e fe 9e 73 ff ff ff ff 00 00 02 0a 00 00 02 0b  ^..s............
[   55.216588][ T3814] 00000030: 00 00 02 0c 00 00 02 0d 00 00 02 0e 00 00 02 0f  ................
[   55.229256][ T3814] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[   55.239330][ T3814] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[   55.266593][ T3814] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[   55.281544][ T3820] Bluetooth: hci0: command 0x0406 tx timeout
[   55.307003][ T3814] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[   55.321780][ T1069] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   55.339506][ T1069] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   55.351491][ T3814] XFS (loop0): metadata I/O error in "xfs_alloc_read_agfl+0x224/0x3e0" at daddr 0x3 len 1 error 74
[   55.368146][ T1069] usb 5-1: Product: syz
[   55.379445][ T1069] usb 5-1: Manufacturer: syz
[   55.393577][ T3814] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x659/0xa60 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[   55.420286][ T1069] usb 5-1: SerialNumber: syz
[   55.451881][ T3814] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[   55.516254][ T3524] XFS (loop0): Unmounting Filesystem
[   55.664835][ T3896] loop1: detected capacity change from 0 to 512
[   55.706412][ T3896] EXT4-fs (loop1): Ignoring removed orlov option
[   55.725087][ T1069] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   55.726177][ T3896] EXT4-fs (loop1): Test dummy encryption mode enabled
[   55.752517][ T3896] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   55.798303][ T3896] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a040e01c, mo2=0002]
[   55.809582][ T3896] System zones: 1-12
[   55.841856][ T3896] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz-executor.1: casefold flag without casefold feature
[   55.859869][ T3896] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.1: missing EA_INODE flag
[   55.877496][ T3896] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz-executor.1: error while reading EA inode 12 err=-117
[   55.897566][ T3896] EXT4-fs (loop1): 1 orphan inode deleted
[   55.904227][ T3896] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,abort,max_dir_size_kb=0x0000000000009c7c,debug,orlov,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue. Quota mode: none.
[   55.962408][ T1069] usb 5-1: USB disconnect, device number 2
[   55.973769][ T1069] usblp0: removed
[   56.134301][ T3906] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[   56.624386][ T3926] loop0: detected capacity change from 0 to 512
[   56.680000][ T2924] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   56.709817][ T3936] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[   56.728043][ T3940] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   56.747969][ T3926] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2925: inode #16: comm syz-executor.0: corrupted xattr block 8
[   56.780823][ T3926] EXT4-fs (loop0): Remounting filesystem read-only
[   56.793818][ T3926] EXT4-fs warning (device loop0): ext4_evict_inode:302: xattr delete (err -117)
[   56.807307][ T3926] EXT4-fs (loop0): 1 orphan inode deleted
[   56.813477][ T3926] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,noquota,nouid32,auto_da_alloc=0x0000000000000000,auto_da_alloc=0x0000000000000004,journal_dev=0x0000000000000003,barrier,delalloc,usrquota,. Quota mode: writeback.
[   56.841205][ T3926] ext4 filesystem being mounted at /root/syzkaller-testdir3740262955/syzkaller.1iXRSU/28/file1 supports timestamps until 2038 (0x7fffffff)
[   57.082464][ T2924] usb 2-1: Using ep0 maxpacket: 32
[   57.092853][ T3684] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   57.212771][ T2924] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[   57.238462][ T2924] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   57.251088][ T2924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.282301][ T3818] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   57.286942][ T2924] usb 2-1: config 0 descriptor??
[   57.322624][ T3915] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   57.352471][ T3684] usb 4-1: Using ep0 maxpacket: 32
[   57.377191][ T2924] hub 2-1:0.0: bad descriptor, ignoring hub
[   57.391428][ T2924] hub: probe of 2-1:0.0 failed with error -5
[   57.399036][ T2924] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[   57.493705][ T3684] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   57.508315][ T3684] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   57.520110][ T3684] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   57.530702][ T3684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.593670][ T3684] hub 4-1:4.0: USB hub found
[   57.672534][ T3818] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   57.703693][ T3818] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   57.732953][ T3818] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   57.802548][ T3684] hub 4-1:4.0: 2 ports detected
[   57.903803][ T3818] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   57.928032][ T3818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   57.969766][ T3818] usb 5-1: Product: syz
[   57.986133][ T3818] usb 5-1: Manufacturer: syz
[   57.995050][ T3818] usb 5-1: SerialNumber: syz
[   58.024251][ T3684] hub 4-1:4.0: hub_hub_status failed (err = -71)
[   58.034821][ T3684] hub 4-1:4.0: config failed, can't get hub status (err -71)
[   58.073312][ T3956] block nbd2: shutting down sockets
[   58.123618][ T3684] usb 4-1: USB disconnect, device number 2
[   58.284165][ T3818] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   58.361707][ T3970] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[   58.500662][ T3818] usb 5-1: USB disconnect, device number 3
[   58.504727][ T3976] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[   58.536329][ T3818] usblp0: removed
[   58.924182][ T4000] netlink: 'syz-executor.2': attribute type 7 has an invalid length.
[   59.152612][ T1069] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   59.482380][ T1069] usb 1-1: Using ep0 maxpacket: 32
[   59.657807][ T3821] usb 2-1: USB disconnect, device number 3
[   59.681863][ T3999] kvm: emulating exchange as write
[   59.688580][ T1069] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   59.707046][ T1069] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   59.722936][ T1069] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   59.744857][ T1069] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.842472][ T1069] usb 1-1: can't set config #4, error -71
[   59.862513][ T1069] usb 1-1: USB disconnect, device number 2
[   59.897264][ T4014] loop3: detected capacity change from 0 to 64
[   59.986787][ T4014] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[   60.000942][ T4014] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3
[   60.232855][ T3820] Bluetooth: hci4: command 0x0406 tx timeout
[   60.489522][ T4029] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[   60.884570][ T4048] netlink: 'syz-executor.0': attribute type 7 has an invalid length.
[   61.672133][ T4050] bond0: (slave bond_slave_0): Releasing backup interface
[   62.291341][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[   62.689262][ T4067] loop3: detected capacity change from 0 to 64
[   62.834826][ T4067] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[   62.965470][ T4067] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3
[   63.095608][ T4078] loop4: detected capacity change from 0 to 2048
[   63.520145][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[   63.700953][ T4078] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   63.790015][   T26] audit: type=1800 audit(1717723585.771:2): pid=4078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=1367 res=0 errno=0
[   64.174539][ T4065] loop0: detected capacity change from 0 to 32768
[   65.316330][ T4097] netlink: 201392 bytes leftover after parsing attributes in process `syz-executor.1'.
[   66.512628][ T4114] netlink: 'syz-executor.0': attribute type 7 has an invalid length.
[   67.531868][ T4127] loop0: detected capacity change from 0 to 2048
[   67.801531][ T4127] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   67.931999][   T26] audit: type=1800 audit(1717723589.931:3): pid=4127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1367 res=0 errno=0
[   68.435385][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[   68.640484][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[   69.496612][ T4153] netlink: 201392 bytes leftover after parsing attributes in process `syz-executor.1'.
[   69.884620][ T4166] netlink: 'syz-executor.1': attribute type 7 has an invalid length.
[   69.971684][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[   70.755272][ T4169] loop2: detected capacity change from 0 to 2048
[   70.766482][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[   71.523417][ T1374] ieee802154 phy0 wpan0: encryption failed: -22
[   71.530036][ T1374] ieee802154 phy1 wpan1: encryption failed: -22
[   71.586412][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!!
[   71.602790][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!!
[   71.632662][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!!
[   71.641884][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!!
[   71.669880][ T4169] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   71.703943][   T26] audit: type=1800 audit(1717723593.711:4): pid=4168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1367 res=0 errno=0
[   74.123445][ T4203] netlink: 201392 bytes leftover after parsing attributes in process `syz-executor.3'.
[   74.362072][ T4207] loop4: detected capacity change from 0 to 1024
[   75.219166][ T4216] syz-executor.3 (4216) used greatest stack depth: 19416 bytes left
[   75.339544][ T4225] loop2: detected capacity change from 0 to 64
[   75.576363][ T4225] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[   76.106311][ T4225] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop2
[   76.628323][ T4234] loop3: detected capacity change from 0 to 2048
[   77.253366][    T7] cfg80211: failed to load regulatory.db
[   77.327484][ T4234] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   77.362823][   T26] audit: type=1800 audit(1717723599.371:5): pid=4233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1367 res=0 errno=0
[   78.722758][ T4254] netlink: 201392 bytes leftover after parsing attributes in process `syz-executor.3'.
[   79.030897][ T4263] loop3: detected capacity change from 0 to 1024
[   79.523599][ T4284] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET)
[   79.746210][ T4276] loop4: detected capacity change from 0 to 64
[   79.797729][ T4276] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[   79.814685][ T4276] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop4
[   82.339853][ T4333] loop1: detected capacity change from 0 to 1024
[   84.040438][ T4405] loop2: detected capacity change from 0 to 1024
[   87.321569][ T4566] Zero length message leads to an empty skb
[   87.667313][ T4598] dccp_invalid_packet: P.Data Offset(100) too large
[   88.360138][ T4669] raw_sendmsg: syz-executor.3 forgot to set AF_INET. Fix it!
[   88.779928][ T4714] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[   88.853489][ T4714] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[   89.857898][ T4736] chnl_net:caif_netlink_parms(): no params data found
[   90.098684][ T4736] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.128626][ T4736] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.163384][ T4736] device bridge_slave_0 entered promiscuous mode
[   90.176005][ T4736] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.183405][ T4736] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.191672][ T4736] device bridge_slave_1 entered promiscuous mode
[   90.236847][ T4777] netlink: 520 bytes leftover after parsing attributes in process `syz-executor.0'.
[   90.238868][ T4736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.298114][ T4736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.411380][ T4736] team0: Port device team_slave_0 added
[   90.439941][ T4736] team0: Port device team_slave_1 added
[   90.520277][ T4736] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.550638][ T4736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.631746][ T4736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.675415][ T4736] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.708859][ T4736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.782259][ T4736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.896973][ T4736] device hsr_slave_0 entered promiscuous mode
[   90.913074][ T4736] device hsr_slave_1 entered promiscuous mode
[   90.932304][ T4736] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.939979][ T4736] Cannot create hsr debugfs directory
[   91.352719][ T3821] Bluetooth: hci3: command 0x0409 tx timeout
[   91.962448][ T3818] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   91.986289][ T4736] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.117036][ T4736] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.254499][ T4736] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.342648][ T3818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   92.355711][ T4736] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.372393][ T3818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   92.386139][ T3818] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[   92.395523][ T3818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.411905][ T3818] usb 4-1: config 0 descriptor??
[   92.580770][ T4736] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   92.606878][ T4736] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   92.629214][ T4736] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   92.683216][ T4736] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   92.845847][ T4810] loop4: detected capacity change from 0 to 2048
[   92.849880][ T4736] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.898234][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   92.917426][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   92.938080][ T4736] 8021q: adding VLAN 0 to HW filter on device team0
[   92.938316][ T4810] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   92.965653][ T3821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   92.975454][ T3821] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   92.997766][ T3821] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.004951][ T3821] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.083605][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   93.098421][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   93.136407][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   93.166982][ T3820] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.174138][ T3820] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.220130][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   93.272361][ T3821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   93.299165][ T3821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   93.326486][ T3821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   93.360699][ T3821] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   93.374309][ T3821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   93.391776][ T3821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   93.408236][ T3821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   93.425326][ T3821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   93.445123][ T4736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   93.465446][ T3821] Bluetooth: hci3: command 0x041b tx timeout
[   93.476455][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   93.493856][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   93.504728][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   94.293396][ T3818] usbhid 4-1:0.0: can't add hid device: -71
[   94.409140][ T3818] usbhid: probe of 4-1:0.0 failed with error -71
[   94.554187][ T4814] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[   94.620564][ T3818] usb 4-1: USB disconnect, device number 3
[   94.728190][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   94.742538][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   94.787479][ T4736] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.860842][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   94.887196][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   94.980038][ T4736] device veth0_vlan entered promiscuous mode
[   94.996732][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   95.056230][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   95.090902][ T4736] device veth1_vlan entered promiscuous mode
[   95.108453][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   95.118633][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   95.130143][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   95.191994][ T4736] device veth0_macvtap entered promiscuous mode
[   95.376303][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   95.396922][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   95.420199][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   95.459208][ T4736] device veth1_macvtap entered promiscuous mode
[   95.482993][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   95.503589][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   95.512577][ T3820] Bluetooth: hci3: command 0x040f tx timeout
[   95.589466][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.600332][ T3818] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   95.661605][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.697757][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.745774][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.794608][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.829187][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.839193][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.849747][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.859624][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   95.870076][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.333643][ T3818] usb 5-1: config index 0 descriptor too short (expected 45, got 36)
[   96.341765][ T3818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   96.376970][ T4736] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.399970][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   96.412560][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   96.416512][ T3818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[   96.438824][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.464677][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.486692][ T3818] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   96.491355][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.531444][ T3818] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   96.550613][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.551651][ T3818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.581351][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.581539][ T3818] usb 5-1: config 0 descriptor??
[   96.606884][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.619475][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.630178][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.652396][ T4736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.668567][ T4736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.690483][ T4736] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.719395][ T4736] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.728502][ T4860] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   96.765824][ T4736] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.774703][ T4736] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.784039][ T4736] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.798987][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   96.815270][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   96.966014][ T4782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.984514][ T4782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.015780][ T4834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.037690][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   97.047647][ T4834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.097279][ T3821] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   97.186447][ T3818] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd
[   97.219742][ T3818] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[   97.271450][ T3818] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[   97.459128][ T1069] usb 5-1: USB disconnect, device number 4
[   97.493374][    T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   97.592543][ T3818] Bluetooth: hci3: command 0x0419 tx timeout
[   97.882639][    T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.899379][    T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   97.920686][    T7] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   97.959581][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.991894][    T7] usb 2-1: config 0 descriptor??
[   98.352440][ T3818] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   98.972651][ T3818] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[   99.073223][ T4919] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   99.300707][ T3818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   99.555766][ T3818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   99.567626][ T3818] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[   99.582526][    T7] uclogic 0003:256C:006D.0002: failed retrieving Huion firmware version: -71
[   99.583540][ T3818] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[   99.596983][    T7] uclogic 0003:256C:006D.0002: failed probing parameters: -71
[   99.612325][ T3818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.653515][ T3818] usb 5-1: config 0 descriptor??
[   99.684220][    T7] uclogic: probe of 0003:256C:006D.0002 failed with error -71
[   99.697786][    T7] usb 2-1: USB disconnect, device number 4
[  100.134477][ T3818] hid-picolcd 0003:04D8:C002.0003: item fetching failed at offset 5/7
[  100.151798][ T3818] hid-picolcd 0003:04D8:C002.0003: device report parse failed
[  100.173545][ T3818] hid-picolcd: probe of 0003:04D8:C002.0003 failed with error -22
[  100.342832][ T3818] usb 5-1: USB disconnect, device number 5
[  107.987156][ T5299] process 'syz-executor.3' launched './file0' with NULL argv: empty string added
[  109.141221][ T5387] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  111.518763][ T5504] loop2: detected capacity change from 0 to 2048
[  111.785942][   T26] audit: type=1800 audit(1717723633.791:6): pid=5526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1960 res=0 errno=0
[  111.923771][ T5530] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  112.032803][ T5539] loop1: detected capacity change from 0 to 256
[  112.094169][ T5539] FAT-fs (loop1): Unrecognized mount option "ÿ0xffffffffffffffff" or missing value
[  112.217841][ T5539] loop1: detected capacity change from 0 to 512
[  112.244782][ T5552] loop0: detected capacity change from 0 to 128
[  112.292910][   T26] audit: type=1326 audit(1717723634.291:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5555 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad42c2f69 code=0x7ffc0000
[  112.316702][ T5539] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring
[  112.323305][   T26] audit: type=1326 audit(1717723634.311:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5555 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad42c2f69 code=0x7ffc0000
[  112.339018][ T5539] EXT4-fs (sda1): re-mounted. Opts: nojournal_checksum,grpjquota=grpid,noinit_itable,jqfmt=vfsv0,prjquota,norecovery,nojournal_checksum,nobarrier,resuid=0x0000000000000000,noquota,data=ordered,,errors=continue. Quota mode: none.
[  112.355535][   T26] audit: type=1326 audit(1717723634.341:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5555 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ad42c2f69 code=0x7ffc0000
[  112.409905][   T26] audit: type=1326 audit(1717723634.341:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5555 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad42c2f69 code=0x7ffc0000
[  112.448640][   T26] audit: type=1326 audit(1717723634.341:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5555 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad42c2f69 code=0x7ffc0000
[  112.499179][   T26] audit: type=1326 audit(1717723634.381:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5555 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ad42c2f69 code=0x7ffc0000
[  112.533957][   T26] audit: type=1326 audit(1717723634.381:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5555 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad42c2f69 code=0x7ffc0000
[  112.566918][   T26] audit: type=1326 audit(1717723634.381:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5555 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad42c2f69 code=0x7ffc0000
[  112.595803][   T26] audit: type=1326 audit(1717723634.401:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5555 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ad42c2f69 code=0x7ffc0000
[  113.161840][ T5587] loop0: detected capacity change from 0 to 512
[  113.172775][ T5586] loop2: detected capacity change from 0 to 512
[  113.255524][ T5587] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  113.270018][ T5587] ext4 filesystem being mounted at /root/syzkaller-testdir3740262955/syzkaller.1iXRSU/127/file0 supports timestamps until 2038 (0x7fffffff)
[  113.329564][ T5599] loop1: detected capacity change from 0 to 512
[  113.404997][ T5599] EXT4-fs (loop1): Ignoring removed oldalloc option
[  113.411947][ T5599] EXT4-fs (loop1): Unrecognized mount option "permit_directio" or missing value
[  113.558012][ T5606] TCP: MD5 Hash failed for (172.20.20.187, 0)->(172.20.20.170, 20002) L3 index 0
[  113.926902][ T5624] loop2: detected capacity change from 0 to 512
[  114.005056][ T5624] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:163: inode #15: comm syz-executor.2: inline data xattr refers to an external xattr inode
[  114.021146][ T5624] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[  114.041989][ T5624] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  114.069826][ T5628] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'.
[  114.079936][ T5628] device bridge_slave_1 left promiscuous mode
[  114.089290][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.115411][ T5628] device bridge_slave_0 left promiscuous mode
[  114.122434][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.318621][ T5635] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  114.509964][ T5644] loop2: detected capacity change from 0 to 256
[  114.604260][ T5644] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  114.626738][ T5644] FAT-fs (loop2): Filesystem has been set read-only
[  114.642679][ T5644] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  114.666669][ T5644] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  114.715050][ T5644] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  114.784987][ T5644] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  114.883874][ T5658] loop1: detected capacity change from 0 to 128
[  114.891391][ T5644] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  114.897077][ T5661] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[  114.954567][ T5658] FAT-fs (loop1): Unrecognized mount option "0xffffffffffffffffÿÿÿÿÿ01777777777777777777777" or missing value
[  114.973703][ T5644] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  115.046595][ T5644] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  115.138189][ T5644] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  115.204863][ T5644] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  115.359147][ T5644] syz-executor.2 (5644) used greatest stack depth: 18800 bytes left
[  119.585148][ T5873] loop3: detected capacity change from 0 to 16
[  119.682629][ T5873] erofs: (device loop3): mounted with root inode @ nid 36.
[  119.784586][ T5870] loop2: detected capacity change from 0 to 8192
[  119.860373][ T5870] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  119.918082][ T5857] loop4: detected capacity change from 0 to 32768
[  119.924881][ T5870] REISERFS (device loop2): using ordered data mode
[  119.931385][ T5870] reiserfs: using flush barriers
[  119.965537][ T5870] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  119.991024][ T5857] XFS: ikeep mount option is deprecated.
[  120.008505][ T5857] XFS: ikeep mount option is deprecated.
[  120.024765][ T5870] REISERFS (device loop2): checking transaction log (loop2)
[  120.091076][ T5870] REISERFS (device loop2): Using r5 hash to sort names
[  120.102803][ T5857] XFS (loop4): Mounting V5 Filesystem
[  120.114319][ T5870] reiserfs: enabling write barrier flush mode
[  120.175153][ T5870] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  120.274624][   T26] kauditd_printk_skb: 577 callbacks suppressed
[  120.274640][   T26] audit: type=1804 audit(1717723642.281:593): pid=5870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1210066462/syzkaller.UY9IEY/219/file0/file0" dev="loop2" ino=2 res=1 errno=0
[  120.373831][ T5871] loop1: detected capacity change from 0 to 32768
[  120.378287][ T5867] loop0: detected capacity change from 0 to 40427
[  120.382150][ T5857] XFS (loop4): Ending clean mount
[  120.411233][ T5857] XFS (loop4): Quotacheck needed: Please wait.
[  120.450910][ T5867] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  120.473942][ T5857] XFS (loop4): Quotacheck: Done.
[  120.480029][ T5867] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  120.512426][ T3817] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  120.524797][ T5871] XFS (loop1): Mounting V5 Filesystem
[  120.538880][ T5867] F2FS-fs (loop0): Found nat_bits in checkpoint
[  120.588164][ T3525] XFS (loop4): Unmounting Filesystem
[  120.600149][ T5867] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  120.698869][ T5871] XFS (loop1): Ending clean mount
[  120.711727][ T5867] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  120.734505][ T5867] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  120.888554][ T5909] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  121.482490][ T3817] usb 4-1: config 0 interface 0 has no altsetting 0
[  121.492378][ T3817] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  121.537499][ T3817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.564235][ T3817] usb 4-1: config 0 descriptor??
[  121.658586][ T4736] XFS (loop1): Unmounting Filesystem
[  122.222724][ T5913] loop2: detected capacity change from 0 to 32768
[  122.223530][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  122.272736][ T5913] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (5913)
[  122.341605][ T5913] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  122.362344][ T5913] BTRFS info (device loop2): using free space tree
[  122.369062][ T5913] BTRFS info (device loop2): has skinny extents
[  122.370853][ T5917] loop4: detected capacity change from 0 to 32768
[  122.409748][ T5913] BTRFS info (device loop2): enabling ssd optimizations
[  122.440233][ T5917] =======================================================
[  122.440233][ T5917] WARNING: The mand mount option has been deprecated and
[  122.440233][ T5917]          and is ignored by this kernel. Remove the mand
[  122.440233][ T5917]          option from the mount to silence this warning.
[  122.440233][ T5917] =======================================================
[  122.482440][ T5917] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (5917)
[  122.555282][ T5917] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  122.566665][ T5917] BTRFS info (device loop4): use zlib compression, level 3
[  122.574063][ T5917] BTRFS info (device loop4): turning on sync discard
[  122.580785][ T5917] BTRFS info (device loop4): max_inline at 0
[  122.586944][ T5917] BTRFS info (device loop4): using free space tree
[  122.593721][ T5917] BTRFS info (device loop4): has skinny extents
[  122.656876][ T5917] BTRFS info (device loop4): enabling ssd optimizations
[  122.675277][    T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  122.712527][ T3817] video4linux radio32: keene_cmd_set failed (-71)
[  122.719242][ T3817] radio-keene 4-1:0.0: V4L2 device registered as radio32
[  122.735926][ T3817] usb 4-1: USB disconnect, device number 4
[  122.962445][    T7] usb 2-1: Using ep0 maxpacket: 16
[  123.102521][    T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.118217][    T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.128364][    T7] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  123.137745][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.157815][    T7] usb 2-1: config 0 descriptor??
[  123.681175][    T7] kovaplus 0003:1E7D:2D50.0004: bogus close delimiter
[  123.714080][ T5991] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  123.767157][    T7] kovaplus 0003:1E7D:2D50.0004: item 0 4 2 10 parsing failed
[  123.809119][    T7] kovaplus 0003:1E7D:2D50.0004: parse failed
[  124.034097][    T7] kovaplus: probe of 0003:1E7D:2D50.0004 failed with error -22
[  124.295776][    T7] usb 2-1: USB disconnect, device number 5
[  124.500273][ T5984] loop2: detected capacity change from 0 to 32768
[  124.572827][ T5984] XFS (loop2): Mounting V5 Filesystem
[  124.630937][ T5984] XFS (loop2): Ending clean mount
[  124.976450][ T3537] XFS (loop2): Unmounting Filesystem
[  125.482248][ T6032] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  126.706176][ T6045] ptrace attach of "/root/syz-executor.0 exec"[3524] was attempted by "/root/syz-executor.0 exec"[6045]
[  126.762416][ T3817] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  126.843931][ T6049] loop2: detected capacity change from 0 to 256
[  126.873828][ T6051] loop0: detected capacity change from 0 to 512
[  126.946198][ T6051] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  127.002337][ T3817] usb 4-1: Using ep0 maxpacket: 16
[  127.056040][ T6051] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor.0: bg 0: block 64: padding at end of block bitmap is not set
[  127.083943][ T6051] Quota error (device loop0): write_blk: dquota write failed
[  127.091879][ T6051] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  127.109787][ T6051] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz-executor.0: Failed to acquire dquot type 0
[  127.130630][ T3817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  127.148665][ T3817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  127.160154][ T6051] EXT4-fs (loop0): 1 truncate cleaned up
[  127.174764][ T3817] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  127.189376][ T6051] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  127.201884][ T3817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.225475][ T3817] usb 4-1: config 0 descriptor??
[  127.255321][ T6051] Quota error (device loop0): write_blk: dquota write failed
[  127.267803][ T6051] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  127.279057][ T6051] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz-executor.0: Failed to acquire dquot type 0
[  127.309707][ T6053] loop1: detected capacity change from 0 to 32768
[  127.393036][ T6053] XFS (loop1): Mounting V5 Filesystem
[  127.477191][ T6053] XFS (loop1): Ending clean mount
[  127.497488][ T6068] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  127.767383][ T3817] kovaplus 0003:1E7D:2D50.0005: bogus close delimiter
[  127.774302][ T3817] kovaplus 0003:1E7D:2D50.0005: item 0 4 2 10 parsing failed
[  127.784652][ T3817] kovaplus 0003:1E7D:2D50.0005: parse failed
[  127.790951][ T3817] kovaplus: probe of 0003:1E7D:2D50.0005 failed with error -22
[  127.823456][ T4736] XFS (loop1): Unmounting Filesystem
[  127.904478][ T6078] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  128.499700][ T3686] usb 4-1: USB disconnect, device number 5
[  129.502764][ T6104] device bridge0 entered promiscuous mode
[  129.520380][ T6104] device vlan3 entered promiscuous mode
[  129.544127][ T6104] device bridge0 left promiscuous mode
[  130.645035][ T6114] loop1: detected capacity change from 0 to 32768
[  130.652407][ T3686] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  130.740891][ T6114] XFS (loop1): Mounting V5 Filesystem
[  130.824860][ T6114] XFS (loop1): Ending clean mount
[  130.862356][   T21] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  130.902399][ T3686] usb 1-1: Using ep0 maxpacket: 8
[  131.042527][ T3686] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  131.118687][   T21] usb 5-1: Using ep0 maxpacket: 16
[  131.212566][ T3686] usb 1-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28
[  131.242358][   T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  131.244677][ T3686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.262276][   T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  131.274572][   T21] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  131.279708][ T3686] usb 1-1: Product: syz
[  131.290318][   T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.298084][ T3686] usb 1-1: Manufacturer: syz
[  131.307255][ T4736] XFS (loop1): Unmounting Filesystem
[  131.319243][ T3686] usb 1-1: SerialNumber: syz
[  131.324185][   T21] usb 5-1: config 0 descriptor??
[  131.333573][ T6138] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[  131.339942][ T3686] usb 1-1: config 0 descriptor??
[  131.670456][ T6138] input: syz1 as /devices/virtual/input/input6
[  131.824684][   T21] kovaplus 0003:1E7D:2D50.0006: bogus close delimiter
[  131.831816][   T21] kovaplus 0003:1E7D:2D50.0006: item 0 4 2 10 parsing failed
[  131.840364][   T21] kovaplus 0003:1E7D:2D50.0006: parse failed
[  131.847531][   T21] kovaplus: probe of 0003:1E7D:2D50.0006 failed with error -22
[  131.982877][   T13] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  132.059845][ T6150] ptrace attach of "/root/syz-executor.3 exec"[3526] was attempted by "/root/syz-executor.3 exec"[6150]
[  132.442756][   T13] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  132.560499][   T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.659586][ T3818] usb 5-1: USB disconnect, device number 6
[  132.665576][   T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.675706][   T13] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  132.688851][   T13] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  132.698051][   T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.707918][   T13] usb 2-1: config 0 descriptor??
[  132.716343][ T1374] ieee802154 phy0 wpan0: encryption failed: -22
[  132.731544][ T1374] ieee802154 phy1 wpan1: encryption failed: -22
[  132.988861][ T3685] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  133.141987][ T6141] loop0: detected capacity change from 0 to 256
[  133.238755][ T3685] usb 3-1: Using ep0 maxpacket: 8
[  133.320936][   T13] hid-picolcd 0003:04D8:C002.0007: item fetching failed at offset 5/7
[  133.334098][   T13] hid-picolcd 0003:04D8:C002.0007: device report parse failed
[  133.349489][   T13] hid-picolcd: probe of 0003:04D8:C002.0007 failed with error -22
[  133.392572][ T3685] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.414622][ T3685] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  133.426429][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  133.455354][ T6164] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.465324][ T3685] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  133.491085][ T6164] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.498239][ T6164] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.512375][ T3686] usb 1-1: Found UVC 0.00 device syz (8086:0b03)
[  133.519340][ T3686] usb 1-1: No valid video chain found.
[  133.535440][ T3685] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  133.550932][ T3686] usb 1-1: USB disconnect, device number 3
[  133.673164][ T3685] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  133.712007][ T3685] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  133.720402][ T3685] usb 3-1: SerialNumber: syz
[  133.752986][ T6151] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[  133.794241][ T3685] cdc_ether: probe of 3-1:1.0 failed with error -22
[  133.801169][ T3685] usb-storage 3-1:1.0: USB Mass Storage device detected
[  133.887864][ T3685] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  133.932403][ T3685] scsi host1: usb-storage 3-1:1.0
[  134.018989][   T13] usb 3-1: USB disconnect, device number 2
[  135.069714][ T5973] usb 2-1: USB disconnect, device number 6
[  135.355940][   T26] audit: type=1326 audit(1717723657.361:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6213 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad42c2f69 code=0x7ffc0000
[  135.396701][   T26] audit: type=1326 audit(1717723657.361:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6213 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad42c2f69 code=0x7ffc0000
[  135.437343][   T26] audit: type=1326 audit(1717723657.381:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6213 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f0ad42c2f69 code=0x7ffc0000
[  135.476255][   T26] audit: type=1326 audit(1717723657.381:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6213 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad42c2f69 code=0x7ffc0000
[  135.506624][   T26] audit: type=1326 audit(1717723657.381:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6213 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad42c2f69 code=0x7ffc0000
[  135.941813][ T6227] ptrace attach of "/root/syz-executor.1 exec"[4736] was attempted by "/root/syz-executor.1 exec"[6227]
[  136.727003][ T6232] loop0: detected capacity change from 0 to 512
[  136.832900][ T6232] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5
[  136.832900][ T6232] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  136.832900][ T6232] 
[  136.878642][ T6232] EXT4-fs (loop0): mounted filesystem without journal. Opts: noacl,grpquota,,errors=continue. Quota mode: writeback.
[  136.905895][ T6232] ext4 filesystem being mounted at /root/syzkaller-testdir3740262955/syzkaller.1iXRSU/168/file0 supports timestamps until 2038 (0x7fffffff)
[  137.229136][   T26] audit: type=1800 audit(1717723659.231:599): pid=6245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1965 res=0 errno=0
[  137.232463][ T3818] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  137.257643][   T21] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  137.264704][   T26] audit: type=1800 audit(1717723659.271:600): pid=6245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1965 res=0 errno=0
[  137.353136][   T13] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  137.502273][   T21] usb 2-1: Using ep0 maxpacket: 8
[  137.507572][ T3818] usb 5-1: Using ep0 maxpacket: 32
[  137.632910][   T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  137.633147][ T3818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.655587][   T13] usb 4-1: Using ep0 maxpacket: 8
[  137.717551][ T3818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.881081][ T3818] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  138.012734][ T3818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.030916][ T3818] usb 5-1: config 0 descriptor??
[  138.073950][ T3818] hub 5-1:0.0: USB hub found
[  138.115243][ T6247] loop0: detected capacity change from 0 to 40427
[  138.126417][   T13] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.137540][   T13] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  138.151257][   T13] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  138.161276][   T13] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  138.173293][   T21] usb 2-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28
[  138.186773][   T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.189058][ T6247] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  138.195107][   T21] usb 2-1: Product: syz
[  138.207286][   T21] usb 2-1: Manufacturer: syz
[  138.210094][ T6247] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  138.212128][   T21] usb 2-1: SerialNumber: syz
[  138.227954][   T21] usb 2-1: config 0 descriptor??
[  138.228267][ T6247] F2FS-fs (loop0): Found nat_bits in checkpoint
[  138.254570][   T13] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  138.267354][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  138.280571][   T13] usb 4-1: SerialNumber: syz
[  138.284663][ T6247] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  138.306381][ T6241] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  138.315859][ T6247] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  138.323115][ T6247] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  138.334342][   T13] cdc_ether: probe of 4-1:1.0 failed with error -22
[  138.341328][   T13] usb-storage 4-1:1.0: USB Mass Storage device detected
[  138.352431][   T13] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  138.387838][   T13] scsi host1: usb-storage 4-1:1.0
[  138.480007][ T6247] overlayfs: failed to resolve './file0': -2
[  138.533521][ T3818] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[  138.607069][ T5973] usb 4-1: USB disconnect, device number 6
[  138.642359][ T3818] usbhid 5-1:0.0: can't add hid device: -71
[  138.648453][ T3818] usbhid: probe of 5-1:0.0 failed with error -71
[  138.704045][ T3818] usb 5-1: USB disconnect, device number 7
[  139.062436][ T5972] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  139.443011][ T5972] usb 3-1: Using ep0 maxpacket: 8
[  139.594363][ T5972] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  140.023945][ T5972] usb 3-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28
[  140.138654][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.147685][ T5972] usb 3-1: Product: syz
[  140.151992][ T5972] usb 3-1: Manufacturer: syz
[  140.156793][ T5972] usb 3-1: SerialNumber: syz
[  140.395483][ T5972] usb 3-1: config 0 descriptor??
[  140.433917][ T5972] usb 3-1: Found UVC 0.00 device syz (8086:0b03)
[  140.440454][ T5972] usb 3-1: No valid video chain found.
[  140.482359][   T21] usb 2-1: Found UVC 0.00 device syz (8086:0b03)
[  140.488801][   T21] usb 2-1: No valid video chain found.
[  140.496569][   T21] usb 2-1: USB disconnect, device number 7
[  142.217392][ T5972] usb 3-1: USB disconnect, device number 3
[  142.404716][ T6292] loop0: detected capacity change from 0 to 40427
[  142.495371][ T6292] F2FS-fs (loop0): Found nat_bits in checkpoint
[  142.596738][ T6292] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  142.712642][   T26] audit: type=1804 audit(1717723664.711:601): pid=6313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3740262955/syzkaller.1iXRSU/173/file2/bus" dev="loop0" ino=14 res=1 errno=0
[  142.755984][ T6313] attempt to access beyond end of device
[  142.755984][ T6313] loop0: rw=2049, want=77832, limit=40427
[  142.771719][ T5972] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  142.786435][ T6313] attempt to access beyond end of device
[  142.786435][ T6313] loop0: rw=2049, want=77888, limit=40427
[  142.995238][ T3524] attempt to access beyond end of device
[  142.995238][ T3524] loop0: rw=524288, want=45072, limit=40427
[  143.012367][ T5972] usb 3-1: Using ep0 maxpacket: 8
[  143.019156][ T3524] attempt to access beyond end of device
[  143.019156][ T3524] loop0: rw=0, want=45072, limit=40427
[  143.070976][ T3524] attempt to access beyond end of device
[  143.070976][ T3524] loop0: rw=2049, want=45112, limit=40427
[  143.152564][ T5972] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  143.175606][ T5972] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  143.207607][ T5972] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  143.221585][ T5972] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  143.312520][ T5972] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  143.331329][ T5972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  143.356349][ T5972] usb 3-1: SerialNumber: syz
[  143.393938][ T6311] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  143.413203][ T5972] cdc_ether: probe of 3-1:1.0 failed with error -22
[  143.420088][ T5972] usb-storage 3-1:1.0: USB Mass Storage device detected
[  143.714368][ T5972] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  143.811577][ T5972] scsi host1: usb-storage 3-1:1.0
[  143.830669][ T5972] usb 3-1: USB disconnect, device number 4
[  144.252252][ T3818] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  144.502397][ T3818] usb 2-1: Using ep0 maxpacket: 8
[  144.622506][ T3818] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  144.676046][ T6326] chnl_net:caif_netlink_parms(): no params data found
[  144.802808][ T3818] usb 2-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28
[  144.813014][ T6303] loop3: detected capacity change from 0 to 131072
[  144.824801][ T3818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.833985][ T3818] usb 2-1: Product: syz
[  144.838376][ T3818] usb 2-1: Manufacturer: syz
[  144.843381][ T3818] usb 2-1: SerialNumber: syz
[  144.850048][ T3818] usb 2-1: config 0 descriptor??
[  144.850357][ T6326] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.862479][ T6326] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.870611][ T6326] device bridge_slave_0 entered promiscuous mode
[  144.871818][ T6303] F2FS-fs (loop3): invalid crc value
[  144.886291][ T6326] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.891175][ T6303] F2FS-fs (loop3): Found nat_bits in checkpoint
[  144.893542][ T6326] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.912934][ T6326] device bridge_slave_1 entered promiscuous mode
[  144.935723][ T6343] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  144.964580][ T6326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  144.987095][ T6326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  145.006345][ T6303] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  145.018861][ T6326] team0: Port device team_slave_0 added
[  145.033102][ T6326] team0: Port device team_slave_1 added
[  145.082070][ T6326] batman_adv: batadv0: Adding interface: batadv_slave_0
[  145.089137][ T6326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.214415][ T6326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  145.228451][ T6326] batman_adv: batadv0: Adding interface: batadv_slave_1
[  145.236731][ T6326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.266982][ T6326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  145.817035][ T6326] device hsr_slave_0 entered promiscuous mode
[  145.826136][ T6326] device hsr_slave_1 entered promiscuous mode
[  145.842361][ T6326] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  145.882347][ T6326] Cannot create hsr debugfs directory
[  146.121778][ T6326] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.230137][ T6326] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.356883][ T6326] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.460552][ T6326] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.474233][ T1066] Bluetooth: hci0: command 0x0409 tx timeout
[  146.665651][ T6326] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  146.672315][   T13] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  146.701003][ T6326] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  146.722394][ T6326] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  146.732613][ T6358] loop2: detected capacity change from 0 to 40427
[  146.748079][ T6326] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  146.757865][ T6352] loop1: detected capacity change from 0 to 256
[  146.920871][ T6358] F2FS-fs (loop2): Found nat_bits in checkpoint
[  146.939817][ T6326] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.952389][   T13] usb 5-1: Using ep0 maxpacket: 8
[  146.968339][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  146.981045][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  147.000237][ T6326] 8021q: adding VLAN 0 to HW filter on device team0
[  147.024849][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  147.043512][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  147.053046][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.060193][ T5972] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.087869][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  147.098536][ T6358] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  147.098823][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  147.106741][   T13] usb 5-1: unable to get BOS descriptor set
[  147.133112][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  147.141983][ T5973] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.149303][ T5973] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.158098][ T3818] usb 2-1: Found UVC 0.00 device syz (8086:0b03)
[  147.165117][ T3818] usb 2-1: No valid video chain found.
[  147.173754][ T3818] usb 2-1: USB disconnect, device number 8
[  147.179822][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  147.215447][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  147.226376][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  147.242586][   T13] usb 5-1: config 0 has no interfaces?
[  147.247453][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  147.274699][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  147.285147][   T26] audit: type=1804 audit(1717723669.291:602): pid=6368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1210066462/syzkaller.UY9IEY/249/file2/bus" dev="loop2" ino=14 res=1 errno=0
[  147.315569][ T6368] attempt to access beyond end of device
[  147.315569][ T6368] loop2: rw=2049, want=77832, limit=40427
[  147.328148][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  147.338001][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  147.347441][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  147.356846][ T6368] attempt to access beyond end of device
[  147.356846][ T6368] loop2: rw=2049, want=77888, limit=40427
[  147.369392][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  147.390624][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  147.405119][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  147.416556][ T3526] F2FS-fs (loop3): sanity_check_inode: inode (ino=6, mode=41471) should not have inline_data, run fsck to fix
[  147.431748][ T3526] F2FS-fs (loop3): sanity_check_inode: inode (ino=6, mode=41471) should not have inline_data, run fsck to fix
[  147.432757][ T6326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  147.451108][   T13] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  147.460722][   T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.478685][   T13] usb 5-1: Product: syz
[  147.485601][   T13] usb 5-1: Manufacturer: syz
[  147.491641][   T13] usb 5-1: SerialNumber: syz
[  147.514256][   T13] usb 5-1: config 0 descriptor??
[  147.577816][ T3537] attempt to access beyond end of device
[  147.577816][ T3537] loop2: rw=524288, want=45072, limit=40427
[  147.600869][ T3537] attempt to access beyond end of device
[  147.600869][ T3537] loop2: rw=0, want=45072, limit=40427
[  147.603483][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  147.626304][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  147.637519][ T6326] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.646519][ T3537] attempt to access beyond end of device
[  147.646519][ T3537] loop2: rw=2049, want=45112, limit=40427
[  147.695395][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  147.707783][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  147.779018][ T3686] usb 5-1: USB disconnect, device number 8
[  147.876555][  T155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.962042][ T6326] device veth0_vlan entered promiscuous mode
[  148.004686][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  148.017688][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  148.093514][  T155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.109383][ T6326] device veth1_vlan entered promiscuous mode
[  148.121910][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  148.133638][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  148.170256][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  148.179803][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  148.204237][  T155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.221046][ T6326] device veth0_macvtap entered promiscuous mode
[  148.242039][ T6326] device veth1_macvtap entered promiscuous mode
[  148.280344][  T155] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.337635][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.362990][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.386458][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.386558][ T3685] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  148.420833][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.452679][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.486028][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.504491][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.524627][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.539482][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.550197][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.552567][ T5973] Bluetooth: hci0: command 0x041b tx timeout
[  148.562459][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.577129][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.588279][ T6326] batman_adv: batadv0: Interface activated: batadv_slave_0
[  148.597193][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  148.605981][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  148.617186][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  148.626122][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  148.638528][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.649526][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.661114][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.673433][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.684794][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.695360][ T3685] usb 2-1: Using ep0 maxpacket: 8
[  148.701502][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.749137][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.760339][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.770853][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.794468][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.811760][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.832552][ T3685] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  148.836459][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.859250][ T3685] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  148.864826][ T6326] batman_adv: batadv0: Interface activated: batadv_slave_1
[  148.891826][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  148.895715][ T3685] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  148.907515][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  148.919715][ T3685] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  148.927990][ T6326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  148.939108][ T6326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  148.950151][ T6326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  148.961906][ T6326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.002452][ T5973] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  149.012599][ T3685] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  149.026778][ T3685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  149.055368][ T3685] usb 2-1: SerialNumber: syz
[  149.102766][ T6374] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  149.123154][ T3685] cdc_ether: probe of 2-1:1.0 failed with error -22
[  149.130910][ T3685] usb-storage 2-1:1.0: USB Mass Storage device detected
[  149.157781][ T3685] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  149.169147][ T3685] scsi host1: usb-storage 2-1:1.0
[  149.191445][  T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.212913][  T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.244658][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  149.254458][ T4080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.290186][ T4080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.326249][ T3817] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  149.362953][ T6381] chnl_net:caif_netlink_parms(): no params data found
[  149.380092][ T5973] usb 5-1: config 0 has no interfaces?
[  149.467915][ T5973] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  149.477676][ T5973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  149.485921][ T5973] usb 5-1: SerialNumber: syz
[  149.494385][ T5973] usb 5-1: config 0 descriptor??
[  149.515658][ T3685] usb 2-1: USB disconnect, device number 9
[  149.608890][ T6382] chnl_net:caif_netlink_parms(): no params data found
[  149.620469][ T6381] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.627962][ T6381] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.664086][ T6381] device bridge_slave_0 entered promiscuous mode
[  149.717679][ T6381] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.730654][ T6381] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.743509][ T6381] device bridge_slave_1 entered promiscuous mode
[  149.758051][ T3818] usb 5-1: USB disconnect, device number 9
[  149.872683][ T6381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  149.898881][ T6381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  149.942106][ T6382] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.950805][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.961282][ T6382] device bridge_slave_0 entered promiscuous mode
[  149.976032][ T6381] team0: Port device team_slave_0 added
[  149.989851][ T6382] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.998947][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.007187][ T6382] device bridge_slave_1 entered promiscuous mode
[  150.017111][ T6381] team0: Port device team_slave_1 added
[  150.062025][ T6381] batman_adv: batadv0: Adding interface: batadv_slave_0
[  150.069425][ T6381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.095326][    C0] vkms_vblank_simulate: vblank timer overrun
[  150.103492][ T6381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  150.117287][ T6382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  150.138186][ T6381] batman_adv: batadv0: Adding interface: batadv_slave_1
[  150.148653][ T6381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.174564][    C0] vkms_vblank_simulate: vblank timer overrun
[  150.182611][ T6381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  150.201696][ T6382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  150.310496][ T6382] team0: Port device team_slave_0 added
[  150.338140][ T6382] team0: Port device team_slave_1 added
[  150.349165][ T6381] device hsr_slave_0 entered promiscuous mode
[  150.357589][ T6381] device hsr_slave_1 entered promiscuous mode
[  150.364378][ T6381] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  150.371958][ T6381] Cannot create hsr debugfs directory
[  150.411313][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_0
[  150.418434][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.444809][ T6382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  150.476485][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_1
[  150.484273][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.510162][    C0] vkms_vblank_simulate: vblank timer overrun
[  150.518100][ T6382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  150.632554][ T3818] Bluetooth: hci0: command 0x040f tx timeout
[  151.061966][ T3686] Bluetooth: hci4: command 0x0409 tx timeout
[  151.085218][ T3686] Bluetooth: hci2: command 0x0409 tx timeout
[  151.322373][ T6382] device hsr_slave_0 entered promiscuous mode
[  151.435737][ T5972] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  151.532848][ T6382] device hsr_slave_1 entered promiscuous mode
[  151.545963][ T6382] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  151.573983][ T6382] Cannot create hsr debugfs directory
[  151.640302][  T155] device hsr_slave_0 left promiscuous mode
[  151.656656][  T155] device hsr_slave_1 left promiscuous mode
[  151.673270][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  151.680757][  T155] batman_adv: batadv0: Removing interface: batadv_slave_0
[  151.706017][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  151.722289][  T155] batman_adv: batadv0: Removing interface: batadv_slave_1
[  151.734534][  T155] device bridge_slave_1 left promiscuous mode
[  151.742722][  T155] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.776886][  T155] device bridge_slave_0 left promiscuous mode
[  151.790229][  T155] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.831651][  T155] device veth1_macvtap left promiscuous mode
[  151.852464][ T5972] usb 2-1: config 0 has no interfaces?
[  151.854136][  T155] device veth0_macvtap left promiscuous mode
[  151.872414][  T155] device veth1_vlan left promiscuous mode
[  151.878457][  T155] device veth0_vlan left promiscuous mode
[  151.922328][ T3573] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  151.932391][ T5972] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  151.947603][ T5972] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  151.966092][ T5972] usb 2-1: Manufacturer: syz
[  151.979861][ T5972] usb 2-1: config 0 descriptor??
[  151.982126][ T6418] loop4: detected capacity change from 0 to 40427
[  152.066847][ T6418] F2FS-fs (loop4): Found nat_bits in checkpoint
[  152.120242][ T6418] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  152.182366][ T3573] usb 1-1: Using ep0 maxpacket: 8
[  152.228954][ T6407] loop1: detected capacity change from 0 to 16
[  152.237344][   T26] audit: type=1804 audit(1717723674.251:603): pid=6425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2166163326/syzkaller.Q3H8PF/143/file2/bus" dev="loop4" ino=14 res=1 errno=0
[  152.250401][ T6407] erofs: Unknown parameter ''
[  152.270974][  T155] team0 (unregistering): Port device team_slave_1 removed
[  152.273742][ T6425] attempt to access beyond end of device
[  152.273742][ T6425] loop4: rw=2049, want=77832, limit=40427
[  152.299698][  T155] team0 (unregistering): Port device team_slave_0 removed
[  152.307877][ T3573] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  152.314348][ T6425] attempt to access beyond end of device
[  152.314348][ T6425] loop4: rw=2049, want=77888, limit=40427
[  152.349723][  T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  152.387350][  T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  152.482488][ T3573] usb 1-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28
[  152.496327][ T3573] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.513636][ T3573] usb 1-1: Product: syz
[  152.524536][ T3573] usb 1-1: Manufacturer: syz
[  152.534947][ T3573] usb 1-1: SerialNumber: syz
[  152.537844][  T155] bond0 (unregistering): Released all slaves
[  152.550736][ T3573] usb 1-1: config 0 descriptor??
[  152.714337][ T5973] Bluetooth: hci0: command 0x0419 tx timeout
[  152.766470][ T3525] attempt to access beyond end of device
[  152.766470][ T3525] loop4: rw=524288, want=45072, limit=40427
[  152.821321][ T3525] attempt to access beyond end of device
[  152.821321][ T3525] loop4: rw=0, want=45072, limit=40427
[  152.904161][ T3525] attempt to access beyond end of device
[  152.904161][ T3525] loop4: rw=2049, want=45112, limit=40427
[  153.192835][ T3686] Bluetooth: hci4: command 0x041b tx timeout
[  153.284708][ T3685] Bluetooth: hci2: command 0x041b tx timeout
[  153.344187][ T6382] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.476877][ T6382] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.540227][ T6382] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.630396][ T6382] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.808443][ T6428] loop0: detected capacity change from 0 to 256
[  153.865827][ T6381] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  153.895644][ T6381] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  153.935370][ T6381] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  154.016388][ T6381] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  154.065886][ T6382] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  154.094259][ T6382] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  154.112378][ T3573] usb 1-1: Found UVC 0.00 device syz (8086:0b03)
[  154.118747][ T3573] usb 1-1: No valid video chain found.
[  154.134714][ T6382] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  154.164948][ T3573] usb 1-1: USB disconnect, device number 4
[  154.243229][ T1066] usb 2-1: USB disconnect, device number 10
[  154.255396][ T6382] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  154.504149][ T6381] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.547973][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  154.561305][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  154.579173][ T6382] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.592087][ T6381] 8021q: adding VLAN 0 to HW filter on device team0
[  154.623479][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  154.632140][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  154.665612][ T6382] 8021q: adding VLAN 0 to HW filter on device team0
[  154.715103][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  154.724336][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  154.733045][ T1066] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.740121][ T1066] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.748654][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  154.757853][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  154.767356][ T1066] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.774560][ T1066] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.782537][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  154.791483][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  154.801058][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  154.810875][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  154.819509][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  154.828482][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  154.885283][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  154.894063][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  154.901929][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  154.912072][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  154.924420][ T5973] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.931491][ T5973] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.941984][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  154.950877][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  154.959592][ T5973] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.966711][ T5973] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.975837][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  154.984653][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  154.993308][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  155.002352][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  155.018967][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  155.039572][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  155.060606][ T6381] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  155.088250][ T6381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  155.118752][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  155.129322][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  155.138045][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  155.154235][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  155.219217][ T6382] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  155.240367][ T6382] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  155.265686][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  155.276534][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  155.285472][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  155.294461][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  155.304984][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  155.314172][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  155.323013][ T5972] Bluetooth: hci4: command 0x040f tx timeout
[  155.355680][ T6431] chnl_net:caif_netlink_parms(): no params data found
[  155.362482][ T3686] Bluetooth: hci2: command 0x040f tx timeout
[  155.404652][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  155.468888][ T6452] syz-executor.0 (6452): attempted to duplicate a private mapping with mremap.  This is not supported.
[  155.523620][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  155.531165][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  155.572157][ T6381] 8021q: adding VLAN 0 to HW filter on device batadv0
[  155.621260][ T6431] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.638209][ T6431] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.671708][ T6431] device bridge_slave_0 entered promiscuous mode
[  155.688270][ T6431] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.712427][ T6431] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.732061][ T6431] device bridge_slave_1 entered promiscuous mode
[  155.825645][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  155.847952][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  155.865696][ T6431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  155.885679][ T6431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  155.963140][ T6431] team0: Port device team_slave_0 added
[  155.983786][ T6431] team0: Port device team_slave_1 added
[  156.057631][ T6382] 8021q: adding VLAN 0 to HW filter on device batadv0
[  156.073787][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  156.598409][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  156.618999][    T7] Bluetooth: hci1: command 0x0409 tx timeout
[  156.633455][ T6431] batman_adv: batadv0: Adding interface: batadv_slave_0
[  156.640407][ T6431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.672254][ T6431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  156.703510][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  156.722534][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  156.734453][ T6431] batman_adv: batadv0: Adding interface: batadv_slave_1
[  156.741648][ T6431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.792280][ T6431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  156.814421][ T6381] device veth0_vlan entered promiscuous mode
[  156.829335][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  156.837697][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  156.853076][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  156.861655][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  156.898579][ T6381] device veth1_vlan entered promiscuous mode
[  156.931333][ T6382] device veth0_vlan entered promiscuous mode
[  156.964375][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  156.982868][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  156.991555][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  157.003253][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  157.042466][ T3573] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  157.064630][ T6431] device hsr_slave_0 entered promiscuous mode
[  157.078937][ T6431] device hsr_slave_1 entered promiscuous mode
[  157.086455][ T6467] loop1: detected capacity change from 0 to 40427
[  157.093691][ T6431] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  157.101278][ T6431] Cannot create hsr debugfs directory
[  157.111595][ T6382] device veth1_vlan entered promiscuous mode
[  157.175266][ T6467] F2FS-fs (loop1): Found nat_bits in checkpoint
[  157.242046][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  157.256165][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  157.275023][ T6467] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  157.284634][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  157.292850][ T3573] usb 1-1: Using ep0 maxpacket: 32
[  157.308430][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  157.330823][ T6382] device veth0_macvtap entered promiscuous mode
[  157.354992][ T6381] device veth0_macvtap entered promiscuous mode
[  157.362473][ T3683] Bluetooth: hci4: command 0x0419 tx timeout
[  157.374739][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  157.390061][   T26] audit: type=1804 audit(1717723679.391:604): pid=6478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir560396005/syzkaller.9iihla/115/file2/bus" dev="loop1" ino=14 res=1 errno=0
[  157.390611][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  157.429108][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  157.437439][ T6478] attempt to access beyond end of device
[  157.437439][ T6478] loop1: rw=2049, want=77832, limit=40427
[  157.442526][ T3683] Bluetooth: hci2: command 0x0419 tx timeout
[  157.448944][ T3573] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  157.465907][ T3573] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  157.468379][ T6381] device veth1_macvtap entered promiscuous mode
[  157.485384][ T3573] usb 1-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1
[  157.494881][ T6478] attempt to access beyond end of device
[  157.494881][ T6478] loop1: rw=2049, want=77888, limit=40427
[  157.522686][ T3573] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.542294][ T3573] usb 1-1: config 0 descriptor??
[  157.544540][ T6382] device veth1_macvtap entered promiscuous mode
[  157.571436][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  157.579768][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  157.590235][ T5972] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  157.598926][ T3573] usb 1-1: bad CDC descriptors
[  157.605733][ T3573] usb 1-1: bad CDC descriptors
[  157.617466][ T6381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.638377][ T6381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.648525][ T6381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.659141][ T6381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.669039][ T6381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.680834][ T6381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.690858][ T6381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.701465][ T6381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.711304][ T6381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.722473][ T6381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.733397][ T6381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.744112][ T6381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.756044][ T6381] batman_adv: batadv0: Interface activated: batadv_slave_0
[  157.774129][  T155] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.795557][ T3683] usb 1-1: USB disconnect, device number 5
[  157.814554][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  157.834401][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  157.858082][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.869586][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.879737][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.891399][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.901506][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.905783][ T4736] attempt to access beyond end of device
[  157.905783][ T4736] loop1: rw=524288, want=45072, limit=40427
[  157.912135][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.935143][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.938177][ T4736] attempt to access beyond end of device
[  157.938177][ T4736] loop1: rw=0, want=45072, limit=40427
[  157.946291][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.967029][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.977623][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.987554][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.999112][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.009765][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.020230][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.033789][ T6382] batman_adv: batadv0: Interface activated: batadv_slave_0
[  158.033903][ T4736] attempt to access beyond end of device
[  158.033903][ T4736] loop1: rw=2049, want=45112, limit=40427
[  158.053981][ T6381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.065497][ T6381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.076286][ T6381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.086992][ T6381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.109317][ T6381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.130105][ T6381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.140799][ T6381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.151441][ T6381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.162034][ T6381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.172981][ T6381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.192251][ T6381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.209889][ T6381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.231525][ T6381] batman_adv: batadv0: Interface activated: batadv_slave_1
[  158.253345][  T155] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.280952][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  158.290039][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  158.299161][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  158.308435][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  158.326535][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.340728][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.360767][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.371304][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.381420][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.392800][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.402660][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.413281][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.423225][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.433791][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.444445][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.456115][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.466435][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.477284][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.489052][ T6382] batman_adv: batadv0: Interface activated: batadv_slave_1
[  158.539020][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  158.549248][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  158.571585][  T155] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.586296][ T6382] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.595628][ T6382] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.605653][ T6382] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.614683][ T6382] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.629151][ T6381] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.638468][ T6381] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.647457][ T3686] Bluetooth: hci1: command 0x041b tx timeout
[  158.657184][ T6381] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.670657][ T6381] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.691881][  T155] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.839004][ T4783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.860481][ T4783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.896894][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  158.898892][ T4835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.914638][ T4835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.948041][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  158.980798][ T4783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.990552][ T4783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.035721][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  159.157156][ T4835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.167702][ T4835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.188148][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  159.635466][ T6502] loop2: detected capacity change from 0 to 8
[  160.036489][ T6498] chnl_net:caif_netlink_parms(): no params data found
[  160.712894][ T3818] Bluetooth: hci1: command 0x040f tx timeout
[  160.759574][ T6431] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  160.785576][ T6520] IPv6: Can't replace route, no match found
[  160.793415][ T6431] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  160.820493][ T6498] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.830687][ T6498] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.839773][ T6498] device bridge_slave_0 entered promiscuous mode
[  160.851989][ T6431] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  160.862728][ T6431] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  160.878583][ T6498] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.886998][ T6498] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.898856][ T6498] device bridge_slave_1 entered promiscuous mode
[  161.025151][ T6498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.049507][ T6498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.145569][ T6498] team0: Port device team_slave_0 added
[  161.206646][ T6498] team0: Port device team_slave_1 added
[  161.315874][ T6498] batman_adv: batadv0: Adding interface: batadv_slave_0
[  161.326409][ T6498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.355607][ T6498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  161.374057][ T6431] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.396641][ T6498] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.418806][ T6498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.447431][ T6498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  161.631255][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  161.646803][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  161.673028][ T6431] 8021q: adding VLAN 0 to HW filter on device team0
[  161.682631][ T3684] Bluetooth: hci3: command 0x0409 tx timeout
[  161.729016][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  161.745283][ T5973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  161.765400][ T5973] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.772555][ T5973] bridge0: port 1(bridge_slave_0) entered forwarding state
[  161.830496][ T6498] device hsr_slave_0 entered promiscuous mode
[  161.846668][ T6498] device hsr_slave_1 entered promiscuous mode
[  161.872530][ T6498] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  161.890607][ T6498] Cannot create hsr debugfs directory
[  161.905678][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  161.924849][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  161.951085][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  161.967054][ T1066] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.974186][ T1066] bridge0: port 2(bridge_slave_1) entered forwarding state
[  161.994201][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  162.054043][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  162.079162][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  162.090008][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  162.099030][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  162.108152][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  162.117054][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  162.126216][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  162.157717][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  162.210387][ T6537] loop3: detected capacity change from 0 to 1024
[  162.220205][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  162.237935][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  162.250364][ T6431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  162.316727][ T6537] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002]
[  162.328037][  T155] device hsr_slave_0 left promiscuous mode
[  162.328796][  T155] device hsr_slave_1 left promiscuous mode
[  162.329378][ T6537] System zones: 0-1, 3-12
[  162.331438][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  162.331526][  T155] batman_adv: batadv0: Removing interface: batadv_slave_0
[  162.334244][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  162.334268][  T155] batman_adv: batadv0: Removing interface: batadv_slave_1
[  162.344713][  T155] device bridge_slave_1 left promiscuous mode
[  162.352494][ T6537] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,debug,,errors=continue. Quota mode: none.
[  162.366958][  T155] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.471978][  T155] device bridge_slave_0 left promiscuous mode
[  162.491839][  T155] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.550439][  T155] device hsr_slave_0 left promiscuous mode
[  162.566409][  T155] device hsr_slave_1 left promiscuous mode
[  162.580561][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  162.588251][  T155] batman_adv: batadv0: Removing interface: batadv_slave_0
[  162.597309][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  162.605280][  T155] batman_adv: batadv0: Removing interface: batadv_slave_1
[  162.616370][  T155] device bridge_slave_1 left promiscuous mode
[  162.623112][  T155] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.635209][  T155] device bridge_slave_0 left promiscuous mode
[  162.641563][  T155] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.660703][  T155] device veth1_macvtap left promiscuous mode
[  162.667024][  T155] device veth0_macvtap left promiscuous mode
[  162.673567][  T155] device veth1_vlan left promiscuous mode
[  162.679438][  T155] device veth0_vlan left promiscuous mode
[  162.700921][  T155] device veth1_macvtap left promiscuous mode
[  162.707261][  T155] device veth0_macvtap left promiscuous mode
[  162.713662][  T155] device veth1_vlan left promiscuous mode
[  162.719938][  T155] device veth0_vlan left promiscuous mode
[  162.793039][ T3684] Bluetooth: hci1: command 0x0419 tx timeout
[  163.100660][  T155] team0 (unregistering): Port device team_slave_1 removed
[  163.122457][ T3817] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  163.143142][  T155] team0 (unregistering): Port device team_slave_0 removed
[  163.168643][  T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  163.203379][ T6554] futex_wake_op: syz-executor.2 tries to shift op by -1; fix this program
[  163.217686][  T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  163.332437][  T155] bond0 (unregistering): Released all slaves
[  163.381251][ T6558] syz-executor.3[6558] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  163.381342][ T6558] syz-executor.3[6558] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  163.492481][ T3817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  163.542586][ T3817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  163.562854][  T155] team0 (unregistering): Port device team_slave_1 removed
[  163.587460][  T155] team0 (unregistering): Port device team_slave_0 removed
[  163.614254][  T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  163.632496][ T3817] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00
[  163.649857][ T3817] usb 1-1: New USB device strings: Mfr=112, Product=0, SerialNumber=0
[  163.659278][  T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  163.662259][ T3817] usb 1-1: Manufacturer: syz
[  163.691056][ T3817] usb 1-1: config 0 descriptor??
[  163.752446][ T3683] Bluetooth: hci3: command 0x041b tx timeout
[  163.769121][  T155] bond0 (unregistering): Released all slaves
[  163.949319][ T6498] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.087110][ T6498] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.134907][ T6570] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  164.148496][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  164.149028][ T6570] EXT4-fs (loop3): unable to read superblock
[  164.163325][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  164.190725][ T6431] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.193163][ T3817] hid (null): unknown global tag 0xd
[  164.213460][ T3817] itetech 0003:258A:6A88.0008: unknown global tag 0xd
[  164.229516][ T3817] itetech 0003:258A:6A88.0008: item 0 1 1 13 parsing failed
[  164.247145][ T3817] itetech: probe of 0003:258A:6A88.0008 failed with error -22
[  164.306606][ T6498] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.368654][ T6498] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.398927][ T3573] usb 1-1: USB disconnect, device number 6
[  164.506648][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  164.523860][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  164.592978][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  164.601898][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  164.619324][ T6431] device veth0_vlan entered promiscuous mode
[  164.625630][ T3683] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  164.635205][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  164.643830][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  164.666230][ T6431] device veth1_vlan entered promiscuous mode
[  164.687040][ T6498] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  164.704257][ T6585] loop2: detected capacity change from 0 to 512
[  164.718938][ T6498] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  164.735574][ T6498] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  164.751571][ T6498] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  164.826690][ T6431] device veth0_macvtap entered promiscuous mode
[  164.840968][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  164.849943][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  164.865613][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  164.874978][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  164.887449][ T6431] device veth1_macvtap entered promiscuous mode
[  164.902389][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  164.914656][ T3683] usb 4-1: Using ep0 maxpacket: 16
[  164.922057][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  164.974698][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.988574][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.000434][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.017979][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.029033][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.053074][ T3683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  165.064180][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.081424][ T3683] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  165.112620][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.124607][ T3683] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  165.133898][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.137851][ T6589] overlayfs: failed to resolve './file0': -2
[  165.144630][ T3683] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.157981][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.171809][ T3683] usb 4-1: config 0 descriptor??
[  165.176929][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.187147][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.197973][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.211308][ T6431] batman_adv: batadv0: Interface activated: batadv_slave_0
[  165.232503][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  165.249112][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  165.277005][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.297632][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.309412][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.320152][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.331055][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.342081][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.352267][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.365110][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.375480][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.387635][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.400567][ T6431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.413855][ T6431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.426176][ T6431] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.434285][ T6326] 
[  165.436608][ T6326] ======================================================
[  165.443611][ T6326] WARNING: possible circular locking dependency detected
[  165.450610][ T6326] 5.15.160-syzkaller #0 Not tainted
[  165.455791][ T6326] ------------------------------------------------------
[  165.462898][ T6326] syz-executor.0/6326 is trying to acquire lock:
[  165.469212][ T6326] ffff88814b5443f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: __jbd2_log_wait_for_space+0x213/0x760
[  165.480507][ T6326] 
[  165.480507][ T6326] but task is already holding lock:
[  165.487862][ T6326] ffff888056ead3b0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: vfs_unlink+0xe0/0x5f0
[  165.497527][ T6326] 
[  165.497527][ T6326] which lock already depends on the new lock.
[  165.497527][ T6326] 
[  165.507920][ T6326] 
[  165.507920][ T6326] the existing dependency chain (in reverse order) is:
[  165.516924][ T6326] 
[  165.516924][ T6326] -> #1 (&sb->s_type->i_mutex_key#9){++++}-{3:3}:
[  165.525526][ T6326]        lock_acquire+0x1db/0x4f0
[  165.530548][ T6326]        down_read+0x45/0x2e0
[  165.535219][ T6326]        ext4_bmap+0x4b/0x410
[  165.539896][ T6326]        bmap+0xa1/0xd0
[  165.544051][ T6326]        jbd2_journal_flush+0x7a2/0xc90
[  165.549590][ T6326]        ext4_ioctl+0x3249/0x5b80
[  165.554603][ T6326]        __se_sys_ioctl+0xf1/0x160
[  165.559703][ T6326]        do_syscall_64+0x3b/0xb0
[  165.564627][ T6326]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  165.571117][ T6326] 
[  165.571117][ T6326] -> #0 (&journal->j_checkpoint_mutex){+.+.}-{3:3}:
[  165.579889][ T6326]        validate_chain+0x1649/0x5930
[  165.585260][ T6326]        __lock_acquire+0x1295/0x1ff0
[  165.590621][ T6326]        lock_acquire+0x1db/0x4f0
[  165.595644][ T6326]        __mutex_lock_common+0x1da/0x25a0
[  165.601366][ T6326]        mutex_lock_io_nested+0x45/0x60
[  165.606904][ T6326]        __jbd2_log_wait_for_space+0x213/0x760
[  165.613057][ T6326]        add_transaction_credits+0x950/0xc00
[  165.619035][ T6326]        start_this_handle+0x747/0x1570
[  165.624580][ T6326]        jbd2__journal_start+0x2d1/0x5c0
[  165.630211][ T6326]        __ext4_journal_start_sb+0x175/0x370
[  165.633036][ T6498] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.636187][ T6326]        __ext4_unlink+0x3a7/0xae0
[  165.636211][ T6326]        ext4_unlink+0x1a9/0x530
[  165.652761][ T6326]        vfs_unlink+0x359/0x5f0
[  165.657603][ T6326]        do_unlinkat+0x4a3/0x950
[  165.662535][ T6326]        __x64_sys_unlink+0x45/0x50
[  165.667736][ T6326]        do_syscall_64+0x3b/0xb0
[  165.672667][ T6326]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  165.675401][ T6498] 8021q: adding VLAN 0 to HW filter on device team0
[  165.679075][ T6326] 
[  165.679075][ T6326] other info that might help us debug this:
[  165.679075][ T6326] 
[  165.679082][ T6326]  Possible unsafe locking scenario:
[  165.679082][ T6326] 
[  165.679087][ T6326]        CPU0                    CPU1
[  165.679091][ T6326]        ----                    ----
[  165.679096][ T6326]   lock(&sb->s_type->i_mutex_key#9);
[  165.719437][ T6326]                                lock(&journal->j_checkpoint_mutex);
[  165.727497][ T6326]                                lock(&sb->s_type->i_mutex_key#9);
[  165.735394][ T6326]   lock(&journal->j_checkpoint_mutex);
[  165.740939][ T6326] 
[  165.740939][ T6326]  *** DEADLOCK ***
[  165.740939][ T6326] 
[  165.748976][ T6498] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  165.749070][ T6326] 3 locks held by syz-executor.0/6326:
[  165.749082][ T6326]  #0: ffff88814b540460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80
[  165.765032][ T6498] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  165.773930][ T6326]  #1: ffff888056ea8de8 (&type->i_mutex_dir_key#4/1){+.+.}-{3:3}, at: do_unlinkat+0x266/0x950
[  165.773979][ T6326]  #2: ffff888056ead3b0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: vfs_unlink+0xe0/0x5f0
[  165.774019][ T6326] 
[  165.774019][ T6326] stack backtrace:
[  165.774025][ T6326] CPU: 0 PID: 6326 Comm: syz-executor.0 Not tainted 5.15.160-syzkaller #0
[  165.818869][ T6326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  165.828918][ T6326] Call Trace:
[  165.832182][ T6326]  <TASK>
[  165.835107][ T6326]  dump_stack_lvl+0x1e3/0x2d0
[  165.839773][ T6326]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  165.845389][ T6326]  ? print_circular_bug+0x12b/0x1a0
[  165.850588][ T6326]  check_noncircular+0x2f8/0x3b0
[  165.855602][ T6326]  ? reacquire_held_locks+0x660/0x660
[  165.861038][ T6326]  ? add_chain_block+0x850/0x850
[  165.865951][ T6326]  ? lockdep_lock+0x11f/0x2a0
[  165.870605][ T6326]  ? _find_first_zero_bit+0xcf/0xf0
[  165.875782][ T6326]  validate_chain+0x1649/0x5930
[  165.880613][ T6326]  ? validate_chain+0x112/0x5930
[  165.885705][ T6326]  ? reacquire_held_locks+0x660/0x660
[  165.891053][ T6326]  ? reacquire_held_locks+0x660/0x660
[  165.896401][ T6326]  ? reacquire_held_locks+0x660/0x660
[  165.901750][ T6326]  ? reacquire_held_locks+0x660/0x660
[  165.907102][ T6326]  ? reacquire_held_locks+0x660/0x660
[  165.912454][ T6326]  ? validate_chain+0x112/0x5930
[  165.917372][ T6326]  ? mark_lock+0x98/0x340
[  165.921682][ T6326]  ? validate_chain+0x112/0x5930
[  165.927035][ T6326]  ? validate_chain+0x112/0x5930
[  165.931956][ T6326]  ? mark_lock+0x98/0x340
[  165.936272][ T6326]  __lock_acquire+0x1295/0x1ff0
[  165.941108][ T6326]  lock_acquire+0x1db/0x4f0
[  165.945592][ T6326]  ? __jbd2_log_wait_for_space+0x213/0x760
[  165.951385][ T6326]  ? read_lock_is_recursive+0x10/0x10
[  165.956741][ T6326]  ? __might_sleep+0xc0/0xc0
[  165.961315][ T6326]  ? validate_chain+0x112/0x5930
[  165.966246][ T6326]  __mutex_lock_common+0x1da/0x25a0
[  165.971430][ T6326]  ? __jbd2_log_wait_for_space+0x213/0x760
[  165.977221][ T6326]  ? __jbd2_log_wait_for_space+0x213/0x760
[  165.983011][ T6326]  ? mutex_lock_io_nested+0x60/0x60
[  165.988197][ T6326]  mutex_lock_io_nested+0x45/0x60
[  165.993202][ T6326]  __jbd2_log_wait_for_space+0x213/0x760
[  165.998820][ T6326]  ? do_raw_write_lock+0x143/0x4e0
[  166.003914][ T6326]  ? jbd2_commit_block_csum_verify+0x4f0/0x4f0
[  166.010134][ T6326]  ? do_raw_read_unlock+0x70/0x70
[  166.015140][ T6326]  add_transaction_credits+0x950/0xc00
[  166.020594][ T6326]  ? jbd2_journal_begin_ordered_truncate+0x150/0x150
[  166.027339][ T6326]  ? __lock_acquire+0x1ff0/0x1ff0
[  166.032344][ T6326]  ? do_raw_read_unlock+0x70/0x70
[  166.037352][ T6326]  ? start_this_handle+0x31c/0x1570
[  166.042541][ T6326]  start_this_handle+0x747/0x1570
[  166.047555][ T6326]  ? jbd2__journal_start+0x5c0/0x5c0
[  166.052821][ T6326]  ? slab_post_alloc_hook+0x73/0x380
[  166.058086][ T6326]  ? jbd2__journal_start+0x144/0x5c0
[  166.063352][ T6326]  ? rcu_is_watching+0x11/0xa0
[  166.068094][ T6326]  ? jbd2__journal_start+0x144/0x5c0
[  166.073358][ T6326]  ? kmem_cache_alloc+0x128/0x280
[  166.078361][ T6326]  jbd2__journal_start+0x2d1/0x5c0
[  166.083482][ T6326]  __ext4_journal_start_sb+0x175/0x370
[  166.088921][ T6326]  __ext4_unlink+0x3a7/0xae0
[  166.093496][ T6326]  ? __ext4_read_dirblock+0x880/0x880
[  166.098850][ T6326]  ? clear_nonspinnable+0x60/0x60
[  166.103900][ T6326]  ext4_unlink+0x1a9/0x530
[  166.108307][ T6326]  vfs_unlink+0x359/0x5f0
[  166.112621][ T6326]  do_unlinkat+0x4a3/0x950
[  166.117022][ T6326]  ? fsnotify_link_count+0xf0/0xf0
[  166.122122][ T6326]  ? strncpy_from_user+0x209/0x370
[  166.127224][ T6326]  __x64_sys_unlink+0x45/0x50
[  166.131879][ T6326]  do_syscall_64+0x3b/0xb0
[  166.136278][ T6326]  ? clear_bhb_loop+0x15/0x70
[  166.141390][ T6326]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  166.147263][ T6326] RIP: 0033:0x7fa0924c5717
[  166.151655][ T6326] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  166.171236][ T6326] RSP: 002b:00007ffdb5766588 EFLAGS: 00000206 ORIG_RAX: 0000000000000057
[  166.179641][ T6326] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa0924c5717
[  166.187616][ T6326] RDX: 00007ffdb57665b0 RSI: 00007ffdb5766640 RDI: 00007ffdb5766640
[  166.195740][ T6326] RBP: 00007ffdb5766640 R08: 0000000000000000 R09: 0000000000000000
[  166.203690][ T6326] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffdb57676f0
[  166.211640][ T6326] R13: 00007fa092522636 R14: 0000000000028467 R15: 000000000000000c
[  166.219594][ T6326]  </TASK>
2024/06/07 01:28:08 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  166.226598][ T3686] Bluetooth: hci3: command 0x040f tx timeout
[  166.228706][ T6593] udc-core: couldn't find an available UDC or it's busy
[  166.267039][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  166.275152][ T6593] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  166.285674][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  166.297019][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  166.305523][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  166.313441][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  166.322044][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  166.330956][ T3684] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.338121][ T3684] bridge0: port 1(bridge_slave_0) entered forwarding state
[  166.345786][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  166.354467][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  166.362870][ T3684] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.369923][ T3684] bridge0: port 2(bridge_slave_1) entered forwarding state
[  166.377661][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  166.386439][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  166.395155][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  166.403817][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  166.412312][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  166.420940][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  166.429449][ T3684] IPv6: ADD