last executing test programs:

1m9.203548138s ago: executing program 3 (id=1071):
r0 = dup(0xffffffffffffffff)
write$uinput_user_dev(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x284, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000b457b84256762d9ceb86a426092b41c24466ae5bca5b2116aed03c0dd9d343066a46c923ceafe6f24e1952746e527ed3f6e1a310ed69dea4521b0be9e764be6477a2d359b4da91d7491dab23badc73a263836072d53fe2fc20f38b537f540d0571309f4b3f6c06efd050cfa5cabfb6e3326742ea42a067269cd64814a622fd413f5bd9ae2e161fa6e3347c83c546b1c95f3cbe0b17a394302f02b68624964daf94a67e4570bfff2d0972f2384dfccf52a3252f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r5)
ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0x0, 0x204}})
r7 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
r8 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f0000000040), 0x5, 0x200c00)
write$9p(r7, &(0x7f0000001400)="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", 0x200)
sendfile(r7, r8, 0x0, 0xe066)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xe)
sendfile(r7, r8, 0x0, 0xffff)

1m7.591515295s ago: executing program 3 (id=1073):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000001440)='./file0\x00', 0x8c48, &(0x7f00000011c0)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYBLOB="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"], 0x1, 0x5a1, &(0x7f0000001480)="$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")
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='sched_switch\x00'}, 0x18)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x548, &(0x7f00000011c0)="$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")
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30a8015, 0x0, 0x0, 0x0, &(0x7f0000000300))
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f0353})
semget$private(0x0, 0x2, 0x0)
syz_emit_vhci(0x0, 0x7)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRES32=0x0], 0x1, 0x691, &(0x7f00000020c0)="$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")
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000f40)={0x4, [[0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x8, 0x7]], '\x00', [{}, {}, {}, {}, {0xffff}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1}], '\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x2})
r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x8d, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f00000007c0)={{0x2, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x80000000000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4]})
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)

1m0.525883483s ago: executing program 3 (id=1083):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mkdirat(r0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000140)={0x100, r3}, 0x0)
landlock_restrict_self(r2, 0x0)
r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
renameat2(r1, &(0x7f0000000000)='./file0\x00', r4, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x2)

1m0.192502205s ago: executing program 3 (id=1086):
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001900)=ANY=[@ANYRES16=<r0=>0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES32=0x0, @ANYRES16, @ANYRES64=<r1=>0xffffffffffffffff, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES32], 0x1, 0x1d2, &(0x7f0000000bc0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x12080, 0x1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES8=0x0, @ANYBLOB="0000000000000000000000000000001f0000", @ANYRES16=r0, @ANYRES8=r1, @ANYBLOB='\x00'/27], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
nanosleep(0x0, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000001c0)="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", 0x105)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x280, 0x150, 0x150, 0x0, 0xf8010000, 0x398, 0x238, 0x238, 0x398, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "decb585218ebf5805f7356720db1714438ea1c4e4d4388cf67108f218b895e9936aa46525113c03de9cfdfa043d27bdb73687ca94feda3275eefade1197a320d"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358)
r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
ioctl$USBDEVFS_CLEAR_HALT(r7, 0xc0105502, &(0x7f0000000340)={0x1, 0x1})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000500)=[@clear_death], 0x0, 0x0, 0x0})
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./control\x00', 0x5000410)

59.659849367s ago: executing program 4 (id=1087):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10)
iopl(0x3)

58.98709118s ago: executing program 3 (id=1088):
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)=<r0=>0x0)
prlimit64(r0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
finit_module(r3, 0x0, 0x0)
mlockall(0x6)
io_setup(0x3fe, &(0x7f0000000100))
quotactl_fd$Q_GETINFO(r2, 0xffffffff80000502, 0xee00, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000140)={0x1cb4, 0x2, 0x3}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000180)={0x4000, r4}, 0x0)
landlock_restrict_self(r5, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1, 0x0)
truncate(&(0x7f0000000240)='./file0\x00', 0xff)
syz_usb_connect$cdc_ncm(0x0, 0x91, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000020000402505a1a4401db697c90109027f0002010000000904000001020d000006240600013b052400feff0d240f01000000c64f0000002f06241a00000008241b"], 0x0)

56.897702009s ago: executing program 4 (id=1090):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socket$inet6(0xa, 0x1, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r2)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000)

56.409987573s ago: executing program 3 (id=1091):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x10)
connect$bt_sco(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000000040))
socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x9, 0xffffffffffffff5d)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff)
r5 = socket$igmp6(0xa, 0x3, 0x2)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x2, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x10}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xffff}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x26}}]}, 0x34}}, 0x40000)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}}, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000880)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff40, 0x18, &(0x7f0000002400)={@fda={0x66646185, 0x0, 0x0, 0x80000000015}, @fda={0x66646185, 0xa, 0x0, 0x18}, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x38}}}], 0x0, 0xfeffff, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xff, 0x400, 0x76e, 0x1867, r3, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0xa, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x480, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

56.400436115s ago: executing program 4 (id=1092):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(0xffffffffffffffff, &(0x7f0000000080), 0xc)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f00000000c0)={0x1, 0x0, 0xd, 0x2, 0x13b, &(0x7f00000006c0)})
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000004c0)=0xe)
bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe0c)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev, 0xfffffffd, 0x0, 0x0, 0x1}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r5, 0x8b32, &(0x7f0000000040))
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYRES8=r2], 0xb)

53.669075484s ago: executing program 4 (id=1095):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

53.527648609s ago: executing program 4 (id=1096):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200002, &(0x7f0000000000)={[{@orlov}, {@journal_async_commit}, {@commit={'commit', 0x3d, 0x3}}]}, 0x1, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQg9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZ6Wy7TbL5uTVb5/OBad+bmc2bt2++b7+zs8sGUFpHI2IoIl6NiG+SiIMd2wbzfyv5Ttl+i4+uT2RLEktLn/2ZRFKsa++fFP/vLyqvRMSvX0WcqKxstzm/MF2r19PZoj7Smrky0pxfOHlppjaVTqWXx8bHT78zPvb+e+/2rK9vnv/7+0/vfXT662OL3/384NCdJM7GgWJbZz+24WZn5WgcLZ6ToTi7bMfRHjTWT5KdPgC2ZKCI88dzwMEYKKIe+P+7ERFLQEkl4h9Kqp0HtK/te3Qd/MJ4+OHjC6CV/R/M3/OI2JNfG+1bTJ65Msqud4d70H7Wxi9/3L2TLbHO+xA3etAeQNvNWxFxanBw5fyXFPPf1p3K3zxe2/I2yvb6AzvpXpb/vLVa/lN5kv/EKvnP/lVidyvWj//Kgx4001WW/32wav77ZOoaHihqL+U531By8VI9PRURL0fE8RjandXXup9zevH+UrdtnflftmTtt3PB4jgeDO5+9jGTtVZtO33u9PBWxGtP898kVsz/e/Jcd/n4Z8/H+Q22cSS9+3q3bev3v1PvM+ClnyLeWHX8n97RSta+PzmSnw8j7bNipb9uH/mtW/ub63/vZeO/b+3+Dyed92ubm2/jxz3/pN22bfX835V8npd3Feuu1Vqt2dGIXcknK9ePPX1su97eP+v/8WNrz3+rnf97I+KLDfb/9uHbXXfth/Gf3NT4b75w/+Mvf+jW/sbG/+28dLxYs5H5b6MHuJ3nDgAAAAAAAPpNJSIORFKpPilXKtXq4893HI59lXqj2TpxsTF3eTLy78oOx1Clfaf7YMfnIUaLz8O262PL6uMRcSgivh3Ym9erE4365E53HgAAAAAAAAAAAAAAAAAAAPrE/i7f/8/8PrDTRwc8d37yG8pr3fjvxS89AX3J6z+Ul/iH8hL/UF7iH8pL/EN5iX8oL/EP5SX+AQAAAAAAAAAAAAAAAAAAAAAAAAAAoKfOnzuXLUuLj65PZPXJq/Nz042rJyfT5nR1Zm6iOtGYvVKdajSm6ml1ojGz3t+rNxpXRsdi7tpIK222RprzCxdmGnOXWxcuzdSm0gvp0H/SKwAAAAAAAAAAAAAAAAAAAHixNOcXpmv1ejqr0LVwJvriMLZcSNYb5TPFybClJgZ3voMKz6GwwxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHT4NwAA///UhzPK")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
sync()
r0 = socket$netlink(0x10, 0x3, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x19, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xfff8}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8955, &(0x7f00000004c0)={{0x2, 0x0, @broadcast}, {0x0, @random="9f444415c302"}, 0xffffff7d, {0x2, 0x0, @broadcast}})
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)}], 0x1)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$eJzs3U1rG9caAOB3xnbifNxrB0K4t4tiyKIpaaTY7kcKXaTL0oYG2n0qbMUEy1Gw5BC7gSaLZtNNCYVSGijtvvsuQ/9Af0WgDYQSTLvoxmXkkaPEki078kei54Gxz5kZ+ZxXM+/xGY2EAuhbY9mPNOL/EfF1EjHSsm0w8o1jq/stP745lS1JrKx88mcSSb6uuX+S/z6SV/4XEb9+GXE6Xd9ubXFptlSplOfzejGSa8Xa4tKZK3OlmfJM+erE5OS5tyYn3n3n7Z7F+vrFv7/7+P4H5746ufztzw+P3U3ifBzNt7XG8RxutVbGYix/Tobi/DM7jvegsf0k2esOsC0DeZ4PRTYGjMRAnvVtrYzsZteAHfZFltZAn0rkP/Sp5jygeW3fo+vgF8aj91cvgNbHP7j62kgMN66NDi8nT10ZZde7oz1oP2vjlz/u3c2W6N3rEACbunU7Is4ODq4f/5J8/Nu+s13s82wbxj/YPfez+c8b7eY/6dr8J9rMf460yd3t2Dz/04c9aKajbP73Xtv579pNq9GBvPafxpxvKLl8pVLOxrb/RsSpGDqY1Te4n/NZuvxgpdPG1vlftmTtN+eCeT8eDh58+jHTpXrpuYJu8eh2xCtt57/J2vFP2hz/7Pm42GUbJ8r3Xu20bfP4d9bKjxGvtT3+T+5oZaVifa7T/cli43woNs+K9f66c+K3Tu3vdfzZ8T+8cfyjSev92trW2/hh+J9yp23bPf8PJJ82ygfydTdK9fr8eMSB5KP16yeePLZZb+6fxX/q5MbjX7vz/1CW2F3Gf+f4ndZdh7cW/87K4p/e0vHfeuHBh59/36n97o7/m43SqXxNN+Nftx18nucOAAAAAAAA9ps0Io5GkhbWymlaKKy+v+N4HE4r1Vr99OXqwtXpaHxWdjSG0uad7pGW90OM5++HbdYnnqlPRsSxiPhm4FCjXpiqVqb3OngAAAAAAAAAAAAAAAAAAADYJ45EDLf7/H/m94G97h2w4zb4ym/gJdc5//MtvfimJ2Bfas3/g3vYD2D3mf9D/+oi/9Pd6Aew+/z/h/4l/6F/yX/oX/If+tdW8v+nCzvYEQAAAAAAAAAAAAAAAAAAAAAAAAAAAHg5XLxwIVtWlh/fnMrq09cXF2ar189Ml2uzhbmFqcJUdf5aYaZanamUC1PVuc3+XqVavTY+EQs3ivVyrV6sLS5dmqsuXK1fujJXmilfKg/tSlQAAAAAAAAAAAAAAAAAAADwYqktLs2WKpXyvILCtgqD+6MbnQppfqLvl/68MIU9HpgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMW/AQAA//+LGzah")
open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0)
r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
lseek(r4, 0x7ffffb, 0x0)
write$cgroup_devices(r4, 0x0, 0xa)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
dup2(r1, r3)
setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)

51.460582734s ago: executing program 4 (id=1099):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x9, &(0x7f0000000400)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x0)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket(0x840000000002, 0x3, 0xff)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000580)=@nat={'nat\x00', 0x1b, 0x5, 0x4d0, 0xf0, 0x0, 0xffffffff, 0xf0, 0x300, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, &(0x7f0000000040), {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@rand_addr=0x64010101, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2d}, @icmp_id=0x65, @gre_key=0x4b0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9d3d}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4=@rand_addr=0x64010100, @gre_key=0xb, @icmp_id=0x66}}}, {{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@mh={{0x28}, {"28d0"}}, @common=@unspec=@connbytes={{0x38}, {[{0xffffffffffff2aa0}, {0x3}], 0x0, 0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x1f, @ipv4=@remote, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, @icmp_id=0x66, @icmp_id=0x65}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x530)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f000000e8c0)={0x0, 0x0, &(0x7f000000e840)=[{&(0x7f0000004340)=ANY=[@ANYBLOB="280000002d00050000000000000000000404008014000000000000b8d479685bb762dd"], 0x28}], 0x1}, 0x0)
connect$inet(r2, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10)
sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x18, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf09000000000000b60904000000000065000600090000001801000020646c2500000000002020207b9af8ff000000002d9a00000000000034090000f8ffffffb702000008000000b70300000000000015000000060000003d93000000000000b5030000000000008500000076000000b700000000000000950000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

26.149194761s ago: executing program 5 (id=1138):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/47, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x100001ad, &(0x7f0000008640)=[{&(0x7f0000008480)=""/89, 0x7ffff000}], 0x286, 0x0)
getpid()
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x4a1b)
fallocate(r1, 0x0, 0x0, 0x20000)
prctl$PR_GET_FPEMU(0x9, &(0x7f00000008c0))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000900)={0x7, &(0x7f0000000340)=[{0xa84}, {0x7, 0xce0}, {0x6, 0x5}, {0xffa3, 0x9}, {0x1, 0x3}, {0x5, 0xa}, {0x9, 0x4}]})
ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000940))
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000071122a000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
preadv(r3, &(0x7f0000000740)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {0x0, 0x62}, {&(0x7f00000003c0)=""/69, 0x45}, {&(0x7f0000000240)=""/24, 0x18}, {0x0}, {0x0}], 0x6, 0xfffffffc, 0xffff0001)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000140)={0xb, 0x2, 0x0, 0x0, '\x00', 0x1})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r2, 0x0, 0x0, 0x5})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000009c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x0)

23.240187369s ago: executing program 0 (id=1141):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a})

22.698855716s ago: executing program 5 (id=1144):
syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001340)=""/102378, 0x7706c522012798af)
socket$pppl2tp(0x18, 0x1, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x187)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000001e40)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001cc0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000000140)=""/110, 0x6e}, {&(0x7f0000000500)=""/113, 0x71}], 0x2, 0x20}}], 0x48}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='rpc_buf_alloc\x00', r2}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0xb, 0x3, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x7, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa0100fe}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8890}, 0x40)

20.584036134s ago: executing program 1 (id=1146):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

19.841576517s ago: executing program 0 (id=1148):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200002, &(0x7f0000000000)={[{@orlov}, {@journal_async_commit}, {@commit={'commit', 0x3d, 0x3}}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
sync()
r0 = socket$netlink(0x10, 0x3, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x19, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xfff8}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8955, &(0x7f00000004c0)={{0x2, 0x0, @broadcast}, {0x0, @random="9f444415c302"}, 0xffffff7d, {0x2, 0x0, @broadcast}})
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)}], 0x1)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$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")
open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0)
r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
lseek(r4, 0x7ffffb, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
dup2(r1, r3)
setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)

19.58864612s ago: executing program 1 (id=1149):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000200), 0xa7c, r0}, 0x38)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$eJzs3X2QVWUdB/Bzd1lYZGI3BMGBFShfQEIhpVRS7kBBuDJtkjU2GQtioaAwzBI1ii04WLgam1kz5QxCiwjDUmszGmXlygyQk9PWjIPIgjLThjG9SMXEFjU2e+99Lveey+5eyVxfPh9m99zn/s7znOeeOX/c72WfcyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIoujgjtr/rB1ZV75+06hFt199cPSq0RNWVDWdHHWg+rzdl/absWjovuntdw6b0bH6SPX65tsu6IyiRKpfItN/3vSPX/+FufPmlIcBaz+Z3lZWdnfIdNfD6Ub/vCe7+uX/zI+iqCw2QGlmu7s0p52IHyBaXjhgj8pmbVsycEGyduvmp+ouX7J1XOFLp0t5X0+gr2Suq45T11Iy9bsktke2nXPpJfIu0XT/+AX3prwIAOB1mVST2mTfjmbe4mbb9fF6rJ2MtRtj7fAOoTG3cSbS4/bvbp5j4vU+mmcyHRUGdDvPWD1z/rPtmnj/WDsWNV7HPPN3zUSa8u7muSxW76t5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyVvFa3Ys34z714sOyX549bvfLk4WvLL3zoq/8uWXrzS68dqlnzl7ah+6a33zlsRsfqI9Xrm2+7oDOKKlP9EunuiWknXr1kYvWcUeuf+N7ETc+OP16aGTds++XsHO0PD66siKIFOZWOMOzRwVFUk19INaPvFhZuTT2YHQoAAAC8k5yb+l2SbafjYFleO5FKk4nUvyAdFstmbVsycEGyduvmp+ouX7J13JmPV9PNeMnTjpdtV576SeQE4xB/4+OdqoddlxeM07P4iPE8P+X5l1+oGHHtT5+pOu+mlde/NPKax9tmfnP48UX7K+8YtGrc2CsK8n9lz/k/nDn5HwAAgP+F/B8fp2e95f/PzK+75Y5HvnJszD2HVw66+8H9G4eVH7nplsn7/jj8hosvvqz2xoL8PybvkAX5P8w45P+S6MzyPwAAALyV/b/zf7JgnJ71lv/bhzff/MB7Di2sbOt4evtlK/b0X3j1RUMOPHTR3In3XjdozPkNBfl/UnH5v1/utMOTz4UJL66IoknFn1QAAAAgT/h/91MfLYS8nv7kIJ7XW+dtGd3y6swvTxj78KH6P1Vtnvj5jUMe37lh5jd2PXf3/RPbzi7I/8ni8n/Zm/NyAQAAgCI0HTpnxNBPJ38e3X/01vnf/+yuR+9b+sWrLtnbOWvC2l9UP72jviD/1xSX/wf0zcsBAAAATuPE+GsW/mPnkd9e1/yJ+5qO/v5Lq0p/NaNp9/62hqZ/bh81e/XkgvxfW1z+Pyuzzax8SHfaE/4K4VsVUVTe9WBZurA3apyWLQAAAABvkJDT75ryfMm9A6edu2Xub06Me+KFPZ/aN3vxhnPWTGp69n2tiz9y4WMF+X9Zz/f/D3c6COv/8+7/V7D+P6eQvuvfVDcGAAAA4N2ocD1/uD1++psLuvv+/WLX///w6xv+mqiqf/ID8342q/P9zT/Z2zr1wZNVf5hz/OGW5MgnL32xIP/XF5f/S3O3b+T3/wEAAMAZeLt9/9+NBeP0rLf7/7c980j1o1d+6GtXza2buuN3H77iz68Mn9qwPXpl+UfbFx342K5fF+T/xuLyf9gOyn15reH83FMRRSO6HmTuJrgtTHdxrNBSllNIn/hYj7mhR6bQMiCnkLIs1uODFVE0tutBfazw3lBojBWODc4UNsYKbaGQuR6yhR/ECq3hSvvO4Mx044Ufh0JmgUVLWEExKLskItbj79316Cqctkd79uAAAADvKiE8Z7JsWX4zikfZlkRvO5zV2w4lve1Q2tsO/WI7xHfs7vmoNr8Qnv/Rt294ecBdD2yom7Jl04KqhrPX/euxyZNuX7Z2Z93SziF/W7euIP9vLC7/h1PRP73pbv1/FNb/Z77XMLv+vzYUKmOFllCoid8xoCYcIx12G8IxKmsyPY6NyBYAAADgHS18LlDax/MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7J373FW1nXiwL8zzIUZhplRMS+RISaKwTCMKYaZID/TnwQOq6WFJgSDjgxCXEzQTUTd1VzB2+ZtE0jdtIwoNbVUeGnekspLsKl5SfHSK41lS5Js133NnPM9nPOcOc5BQBn3/f5jzvecz/f6nMuc7/M85/sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/N2z85GVfeHmfj/xg3cKBi1eP+krfI4cMn3DMNTceu/jhb0/e777f//8+aw575sydR60955XRi245de+3QmjuKFeSKl5y6F/XNQwePabvotuvGbz0kYF/qUjXm46HXu1/StN3zoutru0dwh0lIZQlA4NrUoHy9P2aWF/fmhB2CJsCmRIt1akSyYbDA1UhLAmbApmq7qoKoSYrcOwT9624uD1xRVUIe4cQKpNtPFuZaqMqGRhQkQpUJwPTy1KBv76TkgncWZoKwBaLb4bMi355c26G+s7LFXj9lW+1jn2wksPrERP1hfO9MXIbdypLRfKB5i162vKqY5vIe3us9G7rBu+2vO18iact+4tU+hvKO5tClaF0csuUiXPaZsdHSkNDQ49CNW2j5/np9WdN2px0t3kdxg7Ub5XX4aoLe49d/OhRw2+tG35Dn0ELN25pNwtt3m2tMqRfc93meYxG+DzpBm+/vG9J/XzpCiHsf9v42798wcs3L7h87K4HPbHTsDc+u/vdLT+75YTxxx++fsVXf//jvPl//bvP/+PLOd6W5uSOrb5dm5qbx0dqYmJdbWpuDgAAAN1Gd9hr+srq/5722X3HDX185OrqW2+659SL7/v8tT9r3a/t4bE77fj8vvN+lDf/71fc8f94yL8me7QrQxjRkTi3LoRdOx5PBW6O3flqXQh7dqSacwMjE4GVIezWkRiYqSpRomcs0S8ReLU2HRiRCDwYA82JwI0xcEkicF4MLE8EJsXAykTgsBgIrbnj2K82PY6iA1UxMCG1EZfHsxD+XBtbS2yrZzJVAQAAbCXp2WF57t2scx22NEOcXi6v6ipDPAO7YIbKRA3JGWxmWlWwhrKuaijtqobMuOe/+/Dzai7pqua80zBKcjNcWXXLpT8aNumNu2e8tOG0Iz7x2quP1S/96afXXfPGU9Mr79/j8ofz5v+N7z7/r+ykIyV5x/9DGNfxN+YuTUfaMvEJzTkZAAAAgC3w1sADvvydsq/NfeH3jwz75K+vfez1lQ9/dO8zb1v7/Bk/+NZ3au4fnTf/H1Hc+f9xn0iPrMxhVdwNMbUuhMbcQKrag/MDqaPevdIBAAAA6A4yx+Mzx8Jb07epU7ST8+n8/M2bmT8e+B/Raf7131p2/Y6feGT2Q7W3zXhqw+NfWTl64bEz3xh05dmP7HvoQU+N/Gze/L+5uPP/q3NvU514MPbi8roQemYFHoq9bA906BcDLxyaG0iP/8G4AS6KVaVPTMhUdVEsMSEGGhOBJYVKPJYpsWtuIP1kZRo/NzOO1nSJrAAAAAC87+LugHhcPp7/v2LBXZf9x41/umzVgUtnnzz98de+V1H5zknL7zyxzwX39li008hJefP/CZt3/n/HPDjv9P62XiEMKQuhR/KHAauqUwsDxkBNSTpxT3Wqrh7JqhZUh3Bw+8CSVb2YXv+/LLnG4JNVqapiYNf+N60f0J64oSqEIdmBNeOXHtCemJMIZBr/YlUIH28fbbLxn/RMNV6ebPyqniHskRXIVDWpZwjtjVUkq7q/Mn0dg2RVyytD2CkrkKlqWGUIcwMA3VX8Xzo5+8FZc+dNndjW1jJzGybiTvyqMKW1raVh0vS2yZUF+jQ50eecdYzOyR9TsZe++V16jaLVx0ytKyad+aFgY3Zb6R35eWcOpu/HL0PlHeNsKs+5u39yyPvuld9EyPoqVWjIpdt4yNXZlWx6EvPqj/krQq/Qc86slpkNZ0ycPXvm0NTfYrM3pf7G40ypbTU0ua2qO+tbES+PgstlJbzXbTUgu5Ihs6fNGDJr7rzBrdMmntxycstpwz7VNKxp6P5NjUPaB5X+28VIB3RWc2Kk7ywtclhbcaS7l2VV8n58aEhISHS3xE2Xj39m0UcXV3538UmXPHH++WefcvrOt1057ft9p48fdOXnlkz9et78f8a7z//jp0784E+vz1Do+H99PMyfenzTYf4JMbCk2OP/9YWO5mdODOiXCMyPgfkO8wMAAPDhEHdHxr2Zcad07SvfOP1/Tjii9NA/HP2LpqGDdrnw1qkDbnx94+kf23vekmvLKvKv/ze/uN//b6X1/zNL1x9VaJn/gbFEY6H1/5PL/GfW/59faP3/5DL/mfX/l3wA6//PyQQSm+TP1v8HAAA+DN6/9f+7XN4/eYGAvAxdLu+fvEBAXoYul/Ev9gIBm73+/89/XrbDx47YrW/ZF56YuNedB/7mpGkP7vKjUVev+3RT/TfPWPPzZXnz/0uKm/9buB8AAAC2Hyfs+6UBC14a8vVzpj/ww8Ezdn7purOfH3HPL4/75MYxfddVr+v76bz5/5Li5v/v//p/odD5//0KBZoLLQxo/T8AAAC6qULr//3t42d987p+O24Y1O/M29+6emrJ8L2fO/XXbRc9NOrwj435xyWTrs2b/y8vbv4fT7sozckde/N2bWpNu5Bc025dbeYnAwAAANA9lIaGhvIi8+YsjDryvbf5dHop0HdLZ9vtE6vWnHvvdX8fcvP5C9Ydf3rtQUf+oeyQOydf99KCU/boX/Pc2rz5/8ri5v85v8tYdWHvsYsfPWr427fWDb+hz6CFGzcd/wcAAAC2nWL3SwAAAAAAAAAAAAAAAB+8Y1b95Kz/+uWY4+4cNu/qR3d+/OT//PqsM1on/aLtiHUHPLv0hk/tk/f7/zCuo1yh3//H6/7F3xf0yckdW+16/b/0/WNHL5vbsWThqtoQ9soOTF0wdYeQvjb/PtmBFScO3KU9sSBZ4u7nDnu5PXFSMnDk4B03tCc+kwhMiIsk7pYMxKsqbuidCMTlFZ9MBuL2WJ4MVKQDF/ZOjaMkua3+UJPaViXJbfV0TQh1WYHMtrqjJtVGSXKAVyQCmQF+LRmIAxybDpQme7WsV6pXMVATiy7uleoVAADbrfgtsDxMaW1raYxf4ePt7mW5t1HOkmXn5FdbUmTzv0svTbb6mKl1xaR7JL+LbrrWeHmobB/C0Lyvq9lZSjpGuXVq6WLT9Skw5K5WeystUC5pczddReERVaVG1DBpetvk8i4Hvn/XWZrKuswyNG+yk52ltGOTFlFLEX0pYkRFbpsiuhzvl4aGhh6JXMNjsD7k6OoVUezv9bPX+Sv0KsjOs3zUQQOOW/bcgRMWPXnQtKnhI5e9M2Li5FmHXPHiU0vnjxw0oUfe/L++uPl/Zfa4NqQvBjA/Xlnv4LoQJhQ5IgAAAPjwO+W05y674P5LX32hecDL04dcuuK3c6+aV1Z783mHP3336W+OX3jSlsYHDHtj6Kl3/ebcjU2jHrqy99X3X7PTkXU//H/Vvea+tWLQmy/cvVfe/L9fcfP/uAcrfSg4tbdjZbz+/7l1IXRcWr8+Fbg5DverdSHs2ZFqjiVSF9Q/KpZoTAVujjtMBsYSE5pzq+oZA8sTgVdr04GVicCDMZDeS3FTSO/KubQ2hAM6UuNyS8yIJeoTgaNjoF8i0BADjYlA7xgYkQi83jsdaE4EHo2B0Jq7rW7tnd5WAAAAmyM9zyrPvRuS87zlZV1lKOkqQ3VXGUq7ylDZVYZCo4j3fxwzlCdOXinJylSerLUqUUtehngx/M3uV16G8FhuzmTBvKbj+QeZ8w1KcjNccWbF9Dc/33/R8UPGrB/ftPhzc38a/uHtOW9d8OYvz6977pqNJXnz/8bi5v/Vubep1h+M8/9N1/9LBR6K3bs8njreLwZeODQ3kN4x8GCc7F6Uqao5XSI9ab8olhgRA/0SgRkxMCIRmDAuHViyS24gPdPONH5upvHWdImsAAAAALzv4g6CuJsmzv+fXTv+iWnjf3vQZX1nLzx/+VFffvrXx736i3t73v3d/osebitZuzpv/j+iuPl/bK9XdmPnxd6s7R3CHSWbepMJDK5JBeJ+jJr48/i+NSHskLWDI1OipTpVoiLRcHigKvUL9YpkVXdVpdYYiPePfeK+FRe3J66oCmHvrL0vmTaerUy1UZUMDKhIBaqTgellqUDc85MJ3FmaCsAWy+wVjC+o9KkuGfWdlyvw+vuwXBM0Oby8faCd5OvsN1fbSmXygfQ+1YzNe9ryqmObyHt7rPRu647vtnrvtuwvUulvKO9sClWG0sktUybOaZsdH8n+JWuebfQ8Z/9KtZj0Vngdzn/vve1aZbIDjYmPj8bOy3X+OiyJ1a26sPfYxY8eNfzWuuE39Bm0cGPR3Sgg/lB45rCr6rM377ZWGdKvuW73edLs86Q7/hvo52kLIYy7d+xFjYfcuHDSiP7X73xH7fDLvzT4lkMbnx1XM2eXw8e89sV5efP/5uLm/2WJ2w4b48acVRfCvlkbd1Xc/KPqUp+DWYHUp+RO+YHUIfeXagt+cgIAAMDWltndkdlf0Jq+TZ0Qnpwn5+dv3sz8cX/FiE7zF9vv/lecsnL0hAN/23f8XoccvM9Zdy04er+/Tbz+tT9Wj5z0wPd+tfr6vPn/hHef//dMdNPxf8f/2UYc/+/U9r4rumfygflbtCs6rzq2Ccf/O7W9v9sc/++U4/+O/3fG8f8uOP7fqe39acv7ljTDl64Qwr9f/vm/vX3Pbv02LC393pQH5vU//rLvL1r2k52f+efH/mn69H33/FXe/H9GcfN/6/91vmhfZv2/CYXW/5tRaP2/+db/AwAAtqkCC80l53l5q/flZUiu3peXocsFArtcYtD6f5u9/t+L/3Lpgr2mjv3GiWc9dnDvR+tHrRkz6O8nvbrnmuuevHLoIyf8/dt58//5xc3/48uhV3br3WX9v37jClR1SQzMsDAgAAAA26NCOwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4YJ31xynnjVjw+J+ap39l/fLx32nd8fGHprzefMQPRy87es0pu5xyb581hz1z5s6j1p7zyuhFt5y691shtHaUK0kVLzn0r+saBo8e03fR7dcMXvrIwL9UpustT99+NCd3bPXt2hCWZD1SExPratvvbAocO3rZ3LL2xKraEPbKDkxdMHWH9sSNtSHskx1YceLAXdoTC5Il7n7usJfbEyclA0cO3nFDe+Iz6UBJsrv/1jvV3ZJkdy/uHUJdViDT3VN751aVaeOIdKA02cZ3a1JtxEBNLHpVTaqNGGiLJVp7hjCkLIQeyaoeqUxV1SNZ1U8rU1X1SFZ1dmUIB4cQypJVPV+RqqosOfLHKlJVxcCu/W9aP6A9sbQihCHZgTXjlx7QnpiZCGQaP6YihI+3v2SSjd9anmq8PNn4v5aHsEcIoSJZ4s2yVImKZIkXy0LYKSuwaSOWhTA38OEQP30mZz84a+68qRPb2lpmbsNERbqtqjClta2lYdL0tsmViT4VUpKVfuec9z72360/a1L77epjptYVky5Llyvv6HJTec7d/bf33sd+VWdXsun5yKs/5q8IvULPObNaZjacMXH27JlDU3+Lzd6U+tsjHU1tq6HdZVsNyK5kyOxpM4bMmjtvcOu0iSe3nNxy2rBPNQ1rGrp/U+OQ9kGl/26NkS59/0e6e1lWJe/H+19CQqK7JUpzPt0at/fP8bwv+ps6Wh4qOz6g86YV2VlKOka5NQY98j2O+L18TelyREPzJg55WZq6zrJ/3mRiU5aqVJaOr3V5k8Psmko7Nmm8XxoaGnoU2g71uXezN+8bW7B5n05vumLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwv+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAD//+GI8JI=")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r3, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000840)=""/134, 0x86}], 0x1}}], 0x1, 0x0, 0x0)
writev(r1, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f}}, 0x20)

17.748875168s ago: executing program 0 (id=1152):
socket(0x11, 0x3, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
fanotify_init(0x0, 0x0)
timer_create(0x4, 0x0, 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x800, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00')
write$binfmt_script(r2, 0x0, 0x0)

16.618571271s ago: executing program 1 (id=1154):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/47, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x100001ad, &(0x7f0000008640)=[{&(0x7f0000008480)=""/89, 0x7ffff000}], 0x286, 0x0)
getpid()
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x4a1b)
fallocate(r1, 0x0, 0x0, 0x20000)
prctl$PR_GET_FPEMU(0x9, &(0x7f00000008c0))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000900)={0x7, &(0x7f0000000340)=[{0xa84}, {0x7, 0xce0}, {0x6, 0x5}, {0xffa3, 0x9}, {0x1, 0x3}, {0x5, 0xa}, {0x9, 0x4}]})
ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000940))
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000071122a000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
preadv(r3, &(0x7f0000000740)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {0x0, 0x62}, {&(0x7f00000003c0)=""/69, 0x45}, {&(0x7f0000000240)=""/24, 0x18}, {0x0}, {0x0}], 0x6, 0xfffffffc, 0xffff0001)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000140)={0xb, 0x2, 0x0, 0x0, '\x00', 0x1})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r2, 0x0, 0x0, 0x5})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000009c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x0)

16.428521991s ago: executing program 2 (id=1155):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x10)
connect$bt_sco(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000000040))
socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x9, 0xffffffffffffff5d)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff)
r5 = socket$igmp6(0xa, 0x3, 0x2)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x2, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x10}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xffff}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x26}}]}, 0x34}}, 0x40000)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}}, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000880)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff40, 0x18, &(0x7f0000002400)={@fda={0x66646185, 0x0, 0x0, 0x80000000015}, @fda={0x66646185, 0xa, 0x0, 0x18}, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x38}}}], 0x0, 0xfeffff, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xff, 0x400, 0x76e, 0x1867, r3, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0xa, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x480, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

16.135735014s ago: executing program 5 (id=1156):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000140), 0x1, 0x787, &(0x7f0000001000)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x810801, &(0x7f0000000140)=ANY=[], 0x4, 0x208, &(0x7f0000000640)="$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")
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './file0', [{0x20, 'workdir'}], 0xa, "936f9afcf9f3ea8223e5b4f72cff06e0b05850c471ec"}, 0x29)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)={'#! ', './file1', [{0x20, '*#]'}]}, 0xf)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x800000000000)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8c55, &(0x7f0000000180)={[{@fat=@flush}, {@uni_xlate}, {@numtail}, {@rodir}, {@utf8}, {@numtail}, {@uni_xlate}, {@numtail}, {@uni_xlateno}, {@utf8}, {@uni_xlateno}, {@utf8}, {@uni_xlate}, {@numtail}, {@fat=@dos1xfloppy}, {@rodir}, {@uni_xlate}, {@fat=@quiet}]}, 0xf5, 0x2f0, &(0x7f0000000f80)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)

15.415796848s ago: executing program 2 (id=1157):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
r1 = dup(r0)
write$uinput_user_dev(r1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x284, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000b457b84256762d9ceb86a426092b41c24466ae5bca5b2116aed03c0dd9d343066a46c923ceafe6f24e1952746e527ed3f6e1a310ed69dea4521b0be9e764be6477a2d359b4da91d7491dab23badc73a263836072d53fe2fc20f38b537f540d0571309f4b3f6c06efd050cfa5cabfb6e3326742ea42a067269cd64814a622fd413f5bd9ae2e161fa6e3347c83c546b1c95f3cbe0b17a394302f02b68624964daf94a67e4570bfff2d0972f2384dfccf52a3252f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = dup(r6)
ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0x0, 0x204}})
r8 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
r9 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f0000000040), 0x5, 0x200c00)
write$9p(r8, &(0x7f0000001400)="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", 0x200)
sendfile(r8, r9, 0x0, 0xe066)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xe)
sendfile(r8, r9, 0x0, 0xffff)

14.095676311s ago: executing program 2 (id=1158):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a})

13.288313306s ago: executing program 5 (id=1159):
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x6, 0x4, 0x2003, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000040), &(0x7f0000001880)=""/56}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))

13.007698007s ago: executing program 1 (id=1160):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000640)=@urb_type_iso={0x0, {0x6, 0x1}, 0x5, 0x4, &(0x7f0000000540)="7ffba659c6e7b4badcb70af24a44de9bb914e83d564aef0ffc40e19f437268b7d93b8cafb657d5ee84a41c0af714ff19e408d17b1e892169d03787bcddfef4503f6067dd109df7ee14eafbc2184688e803760eabf896fee20816ecc7440b9538d5060b9567614a90669791962b6e449ef88bf6a60e9536e42963c4fbaf95e4f093f70042728bcb7d3c76064062c404fa81fc450024ff2c4ef8f1dcc2e83dc900d4cc7fd1b37b552a26ed0e8ea6f5cc3bb3d48600b0886f2c21755306858c27c97c4453b42ddd397849e77f24e49d5ac3c8", 0xd1, 0x10, 0x99ad, 0x1f, 0xa, 0x3, &(0x7f0000000440)="fd2647a4c029cf30a2e8d4da0433e7a228a031e81ad2ebf19b73226e0088fd2b6d509b54f5b6c920eb56aeceb1b683d613f6cf953d9c6fbeb5c4bd5d49682b8d919ddc01c07c27566b61c1f48a4202a4fc9377616efe7f087845cc9b61e94595fe1f3c6305627fc932be96ecc3ccf1415480", [{0x2, 0x635, 0x4}, {0x2, 0x7000000, 0xd2e}, {0x5, 0x80000000, 0x10223a65}, {0x5, 0x6, 0x14}, {0xd, 0xe4ac, 0x7}, {0x9, 0x1ff, 0x12000000}, {0x1}, {0xffffffff, 0x5, 0x8}, {0xa, 0x7ff, 0xe}, {0x10001, 0xd, 0xb5}, {0x7, 0x8, 0x7}, {0x9, 0x80007ff, 0xfffffff7}, {0x7f, 0x101, 0x9c2}, {0x7, 0xb6d, 0x8000}, {0x2, 0x7f84, 0x7f}, {0x0, 0x8, 0x9}, {0xb, 0x101, 0xdc4e}, {0x6, 0xfffffff8, 0x8}, {0x5, 0x6, 0x71e7}, {0x3, 0x4, 0x8000}, {0x1, 0x40, 0xfff}, {0x498, 0x1, 0x20f61662}, {0x7, 0xf, 0x3}, {0x419a5a81, 0xb, 0xb}, {0x56ec, 0x800, 0x9}, {0x2, 0x5, 0x10000}, {0x9, 0x7fff, 0x4}, {0x5, 0x7, 0x4}, {0x5, 0x4}, {0x81, 0x3, 0xc6fe324}, {0x7, 0x0, 0x1617}]})
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_80211_inject_frame(&(0x7f0000000200)=@device_b, &(0x7f0000000400)=ANY=[], 0x43)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)=[{0x0, 0x10}], 0x1, &(0x7f00000003c0), 0x0, 0x1}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
write$binfmt_elf32(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4600000000000000000000000002000300000000000000000038000000000000000000000000002000020000000000000000000000000000000000000000000000000000000000000000000000000000008f04000003"], 0x78)
vmsplice(r3, 0x0, 0x0, 0x8)
execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x20080000000)

12.959732426s ago: executing program 0 (id=1161):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xab4b4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0xdc)

11.859319408s ago: executing program 0 (id=1162):
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x40001, 0x0)
openat(r0, 0x0, 0x7117c3, 0x24)
creat(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x1, 0x2, &(0x7f0000000100)="89d6dda851edfb9db8f50afd2e162e4c378699eed985dc94372a733f6dce0d73c238cf89d082ade1e0a1b931547f72aaed3957c86f9892e303ee98dfacc63efc5ba11c3db1a786484830fb153b0d26edf79e4846ba219c86fac6905abee4a4fdd4f6e827da988c760cbd6c073cecd44a707d571b674b81cd02b8172ee98780bfe28ef4c29b967baa54f873c68f9ed2b28afbdfd727094efc5a38759bbf96e8"})
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r2, 0xc00c5512, &(0x7f0000000040)=@usbdevfs_connect)

11.688335324s ago: executing program 2 (id=1163):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200002, &(0x7f0000000000)={[{@orlov}, {@journal_async_commit}, {@commit={'commit', 0x3d, 0x3}}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
sync()
r0 = socket$netlink(0x10, 0x3, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x19, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xfff8}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8955, &(0x7f00000004c0)={{0x2, 0x0, @broadcast}, {0x0, @random="9f444415c302"}, 0xffffff7d, {0x2, 0x0, @broadcast}})
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)}], 0x1)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$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")
open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0)
r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0)
lseek(r4, 0x7ffffb, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
dup2(r1, r3)
setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)

11.635547392s ago: executing program 5 (id=1164):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
eventfd(0x6)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001900)=ANY=[@ANYRES16=<r0=>0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES32=0x0, @ANYRES16, @ANYRES64=<r1=>0xffffffffffffffff, @ANYBLOB="01ce6671a3b30f673148672100038bbb4413ea284b892438cdddda3da4c78d940655fbd68a286059c5766f98f85fb413503eaf8c90a24dda1e09f68cd741168d69dae50652ca7b67c5b0a27ab80ff9afa5000443de8c748e1d5beabee7c1346b215f641ae190d56ea4ab81bacd909929deb5757040e8d5b2752ea779c30f600bd516a68d881e7fc7289826d49e35134a94e27f115c8195a0f152cbd840ffdb008356c72319cceb43ccb1280556efdf0fdf582fd3cfc830dff1787f000000b7400f5aef57b6dcbfde7af6012383adb085c40e4c295c2a3be750a42400e58523d24b8eecd75caabcee22347bdb78b72b400d080a044ebde5d39ad91ff0ef75aa244381cf00cd6fe9b9a92a9968104bf02481022af426853287e521a4e3cfe480f984efcea1359ff932ebd3bc75aefea41074799f3502a7472a6686b4011a41d7f0cfb25b3dc3077b4e8ded17cfff2b1d59bc12f637c36690f5ca91ee999ec138f6ce66522e652939a37435edb78f9ae18489f9d2b73c81609399f0d123f1721171bd72c012623f04d8965d3e5785d057c15798ab36af821c9b308731422ba3858b9895ace14068ea58f8cb6060c205caf209a73628eff5b9270a4a55c2d7fc59a4fe6e023bd424d8b010e2232d1b2e6ca603b466b2c82afff4a8cc469e8664d54769fc97df122b3ff8c34354dad46f900eaf6e72e538c0595caa056984ab8974dadad47a42af7cdae5bde6a12f412fe2a876aa191e78e91fbf780e2f4a20f57d41376b29f990ce63aa6edf622d2203fee37df269abf869d13b175852b775fff70491d1e5d1311b7eef954a101ddb98c5ba2b312528485ece7aff23cc6fee599daea0fca71a5970cf0fc82b49640cc3fabbc401dead4f83aa0c4072a9e98ab5afb790be17961fc073e2f8ec00000000000000005089d6db5ad893ee9b22b9250d01980952d0a3e0076c877556fa43f90cb574fd6ad67398ac4d9f8ff4e3ef09f99220928602523adc2289b5130c5f8e48384eff563a10787b0199642385e811504e7168804114842d51f42dd6937515fa64b2fd14ef427072c6556b99171bd00165a9aada7173f001679ac791ee67188c670f583f7b1f8d", @ANYRES8=0x0, @ANYRES32], 0x1, 0x1d2, &(0x7f0000000bc0)="$eJzslU9rE0EYxn+zO2kazaFnrxbbi7bZgvgN7AfwAxjStRYT/3QDmlAweunFg/glCn4KD4LePYgIXupBQQ8VTxWJzM474ywNRMVQAvPA8j7vM++fmVlm5mZxr6gDP4/2OixRQtHkvVJoYEVZ7XjB2m9ix4JP2vot0Z+L/Si2GAzfPLF0eKvd7ea7xWAKUQqmxVTISUn/cbMJ5PXjqqL4tzqzJ/3U7uzJoacVpT4pRnI59VXMgnxvQqh8/t8tasx6FeCVH83pv+ndM/s7J8akkt6gui3zR5K/yiqQ66u4+ijha+m8PdrrGHJdbjGjbdnPHYkyxjgvg5hzGkagUsa+ji5vS1gB1vq9u2vFYHhxp9fezrfz21m2cXn91Vk5ouOHsNPN11UwjcQQjYc5p41gvAZ8+D0+IoAKpmZwBpTLdSnucl49HyQ2IAlywxq27gvfvy5aSo9rXGARuD8ywxl2t5Yx1TQ3zNI2UaTitHQwTzgmYbEcuNS5093aR6Fc2gHa12gdUvNOJo5plG9c8cvfF7ssdlPsgdhDse7tcm+SLit8EW91BAs8aPf7u+XjZZnXMq9lS75zIl3da6jcTOpERERERERERMwJfgUAAP//B6hPCg==")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x12080, 0x1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES8=0x0, @ANYBLOB="0000000000000000000000000000001f0000", @ANYRES16=r0, @ANYRES8=r1, @ANYBLOB='\x00'/27], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
nanosleep(0x0, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000001c0)="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", 0x105)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x280, 0x150, 0x150, 0x0, 0xf8010000, 0x398, 0x238, 0x238, 0x398, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "decb585218ebf5805f7356720db1714438ea1c4e4d4388cf67108f218b895e9936aa46525113c03de9cfdfa043d27bdb73687ca94feda3275eefade1197a320d"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358)
r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
ioctl$USBDEVFS_CLEAR_HALT(r7, 0xc0105502, &(0x7f0000000340)={0x1, 0x1})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000500)=[@clear_death], 0x0, 0x0, 0x0})
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./control\x00', 0x5000410)

10.03621374s ago: executing program 5 (id=1165):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
write$binfmt_script(r5, &(0x7f0000001800)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1)
mmap(&(0x7f00003db000/0x2000)=nil, 0x2000, 0x27ffffd, 0x2010, r4, 0xdf26b000)

9.798555805s ago: executing program 0 (id=1166):
syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
open(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001340)=""/102378, 0x7706c522012798af)
socket$pppl2tp(0x18, 0x1, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x187)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000001e40)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001cc0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000000140)=""/110, 0x6e}, {&(0x7f0000000500)=""/113, 0x71}], 0x2, 0x20}}], 0x48}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='rpc_buf_alloc\x00', r2}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0xb, 0x3, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x7, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa0100fe}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8890}, 0x40)

9.36097195s ago: executing program 2 (id=1167):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa0179e1d})
socket(0x10, 0x803, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x0)
ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f00000000c0))
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaa88aaaaaaaaaaaaaabb86dd"], 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00')
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$USBDEVFS_CONNECTINFO(r5, 0x8108551b, &(0x7f0000002a40))
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, "8dd7088c06ef8b55d55cd8a0b466f33bb03e22"})
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x537, &(0x7f0000000ac0)="$eJzs3V1v01gawPHHpV2irFStlhVCVYFD2ZWKVIKTQFDEldc5SQ84dmQ7qL1CFU1RRQorykrb3rDcMDPSzIfgdj7EfCM0H2FGtpO+0CYG+hJU/X8RnBP72Oc5qeVHbuNjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYrkN2y5b4hm/u6JGcxth0N5/O9j6yAK5c6gY06+IlfyTQkGuZYuu/WN/9dXkvwWZz97NSyEpCrL716t/e3Rlemq4/ZiAz8X2zu7LtX6/92bSgZyh65dHr2tp30SBaTstrUwUqHqtZt9bbkaqaTwdrUaxbis31E4chGrRvaPK9XpV6dJq0PVbDcfTw4UP71Zsu6YelzraCaPAv/e4FLnLxvOM30rbJKuTNg+TA/GJiVWsnbZSG5v9XjVvAEmj8pc0quQ1qtiVSrlcqZRrD+oPHtr29JEF9mfkSIvJH7SYrFM8ewMnMzXI/+KJEV+6siLq2JcrDQklkPaI9QPD/P+ve3psvwfz/zDLX9tfPSdp/r+RvbsxKv+PiOX8XtuyI7vyUtakL33pyZuJR3S+r5Zo8cVIJIEYaYuTLlGDJUrqUpOa2PJMlqUpkShpihFPtESyKpHEotMjypVQtDgSSyChKFkUV+6IkrLUpS5VUaKlJKsSSFd8aUlDnHQvG7KZfu5VUdaoGPcalUcOozg87npSGTNa8j9O7lTP38BJ/DHM/wAAAAAA4MKy0t++J9f/M3I9rTWNp+1JhwUAAAAAAE5R+pf/+aSYSWrXxeL6HwAAAACAi8ZK77GzRKQoN7Pahljp7VL8EgAAAAAAgAsi/fv/jaRI50C5KdbedClc/wMAAAAAcEH8mDvHftS5bP32u4ThjPW+s/JPayudm9fZupRtd+nzPcbNOWt2sJO0qGXF9LSr561C1mhvEsxPg2IjLw5rPwBnL4D/f00AV6blZ7mVtbm1npXrwzVZL8Wm8XTJDbxHZXGc2alYr8T/fbX5P0mH/5PfnrUKstnvlZ6/7q+nsbxP9vJ+azCB4pF5FMfE8jadbyG95+LYEc+kN2IM+i1asrHZ79kHxz+VbT51uMd3s2P6/CALWauFwYy3xcPjLyR9lkujRj+IonzCkX+Q21mb24u3s+KYKCp5UVQORnH8Z3HyKKp5UVRPGAUATMpGThay5Eje/Yaz3Ldld/nK7P5BFrM2i3PpiXV67pgzup13RrdPmN1+PfIMpFE5Nun3l8+y6sdkg48j+428ipV8hJfebv1Hrm7v7N7d3Fp70XvRe1WpVGv2fdt+UJGZdBiDgtwDADhG/jN2cltY93Ouqv++95WCkjyX19KXdVlK7zZIv3Fw7F6LB76GsJRz1VpM02T2hJelMVd1f0nvchjutzK27eEYqmf/gwAA4Bwt5OThL8n/SznX3Ydz+fir4+KBp7UBAICzocNPVjH+wQpD03lWrtfLTrysVRi4T1RoGi2tjB/r0F12/JZWnTCIAzfwkspT09CRirqdThDGqhmEqhNEZiWdPlANHv0e6bbjx8aNOp52Iq3cwI8dN1YNE7mq0/23Z6JlHaYbRx3tmqZxndgEvoqCbujqklKR1gcamob2Y9M0SdVXndC0nbCgngZet61VQ0duaDpxkO1w2Jfxm0HYTndbmvSHDQDAd2J7Z/flWr/fe3OGlUmPEQAAHEaWBgAAAAAAAAAAAAAAAAAAAADg+3ce9/9RueCV4VTQ30s8VE6hknvqeHfmJycAZ+rPAAAA//8ow08k")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
write$binfmt_elf32(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/1724], 0x7c7)

8.43557164s ago: executing program 1 (id=1168):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
r1 = dup(r0)
write$uinput_user_dev(r1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x284, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000b457b84256762d9ceb86a426092b41c24466ae5bca5b2116aed03c0dd9d343066a46c923ceafe6f24e1952746e527ed3f6e1a310ed69dea4521b0be9e764be6477a2d359b4da91d7491dab23badc73a263836072d53fe2fc20f38b537f540d0571309f4b3f6c06efd050cfa5cabfb6e3326742ea42a067269cd64814a622fd413f5bd9ae2e161fa6e3347c83c546b1c95f3cbe0b17a394302f02b68624964daf94a67e4570bfff2d0972f2384dfccf52a3252f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = dup(r6)
ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0x0, 0x204}})
r8 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
r9 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f0000000040), 0x5, 0x200c00)
write$9p(r8, &(0x7f0000001400)="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", 0x200)
sendfile(r8, r9, 0x0, 0xe066)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0xe)
sendfile(r8, r9, 0x0, 0xffff)

2.151913278s ago: executing program 1 (id=1169):
mkdir(&(0x7f0000002200)='./file0\x00', 0x0)
r0 = open(0x0, 0x0, 0x0)
mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mkdirat(r0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000140)={0x100, r3}, 0x0)
landlock_restrict_self(r2, 0x0)
r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
renameat2(r1, &(0x7f0000000000)='./file0\x00', r4, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x2)

0s ago: executing program 2 (id=1170):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/47, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x100001ad, &(0x7f0000008640)=[{&(0x7f0000008480)=""/89, 0x7ffff000}], 0x286, 0x0)
getpid()
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x4a1b)
fallocate(r1, 0x0, 0x0, 0x20000)
prctl$PR_GET_FPEMU(0x9, &(0x7f00000008c0))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000900)={0x7, &(0x7f0000000340)=[{0xa84}, {0x7, 0xce0}, {0x6, 0x5}, {0xffa3, 0x9}, {0x1, 0x3}, {0x5, 0xa}, {0x9, 0x4}]})
ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000940))
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000071122a000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
preadv(r3, &(0x7f0000000740)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {0x0, 0x62}, {&(0x7f00000003c0)=""/69, 0x45}, {&(0x7f0000000240)=""/24, 0x18}, {0x0}, {0x0}], 0x6, 0xfffffffc, 0xffff0001)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000140)={0xb, 0x2, 0x0, 0x0, '\x00', 0x1})
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r2, 0x0, 0x0, 0x5})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000009c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x0)

kernel console output (not intermixed with test programs):

amily 0 port 6081 - 0
[ 1229.816825][ T9208] usb 3-1: can't read configurations, error -71
[ 1229.865193][T11678] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1229.906829][T11678] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm
[ 1229.958116][T11678] BTRFS info (device loop3): using free-space-tree
[ 1230.052446][T11531] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1230.307726][T10955] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1230.399058][T10909] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1230.544596][T11531] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1230.642435][ T5318] bridge_slave_1: left allmulticast mode
[ 1230.691107][ T5318] bridge_slave_1: left promiscuous mode
[ 1230.723844][ T5318] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1230.797024][ T5318] bridge_slave_0: left allmulticast mode
[ 1230.844972][ T5318] bridge_slave_0: left promiscuous mode
[ 1230.884496][ T5318] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1233.970913][T11723] netlink: 5312 bytes leftover after parsing attributes in process `syz.3.898'.
[ 1235.330817][ T5318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1235.358501][ T5318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1235.380329][ T5318] bond0 (unregistering): Released all slaves
[ 1235.401162][T11726] loop4: detected capacity change from 0 to 32768
[ 1235.412800][T11700] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1235.426950][T11726] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.899 (11726)
[ 1235.442459][T11700] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1235.502306][T11726] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1235.543277][T11726] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[ 1235.571477][T11726] BTRFS info (device loop4): using free-space-tree
[ 1235.610122][T11531] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1236.723801][   T29] audit: type=1326 audit(1728296610.751:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11753 comm="syz.1.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9aa57dff9 code=0x7ffc0000
[ 1236.765192][   T29] audit: type=1326 audit(1728296610.751:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11753 comm="syz.1.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9aa57dff9 code=0x7ffc0000
[ 1236.847009][   T29] audit: type=1326 audit(1728296610.821:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11753 comm="syz.1.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9aa57dff9 code=0x7ffc0000
[ 1236.881545][   T29] audit: type=1326 audit(1728296610.821:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11753 comm="syz.1.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9aa57dff9 code=0x7ffc0000
[ 1236.904889][   T29] audit: type=1326 audit(1728296610.821:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11753 comm="syz.1.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9aa57dff9 code=0x7ffc0000
[ 1236.927353][   T29] audit: type=1326 audit(1728296610.821:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11753 comm="syz.1.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9aa57dff9 code=0x7ffc0000
[ 1236.949966][   T29] audit: type=1326 audit(1728296610.821:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11753 comm="syz.1.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9aa57dff9 code=0x7ffc0000
[ 1236.972851][   T29] audit: type=1326 audit(1728296610.821:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11753 comm="syz.1.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9aa57dff9 code=0x7ffc0000
[ 1236.995371][   T29] audit: type=1326 audit(1728296610.821:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11753 comm="syz.1.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fd9aa57dff9 code=0x7ffc0000
[ 1237.017882][   T29] audit: type=1326 audit(1728296610.821:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11753 comm="syz.1.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9aa57dff9 code=0x7ffc0000
[ 1237.180185][T11763] loop3: detected capacity change from 0 to 256
[ 1238.061022][T11366] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1238.254451][ T1261] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.260955][ T1261] ieee802154 phy1 wpan1: encryption failed: -22
[ 1238.360724][ T5318] hsr_slave_0: left promiscuous mode
[ 1238.451389][ T5318] hsr_slave_1: left promiscuous mode
[ 1238.483130][ T5318] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1238.517813][ T5318] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1238.821338][ T5318] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1238.829120][ T5318] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1238.967358][ T5318] veth0_macvtap: left promiscuous mode
[ 1238.983526][ T5318] veth1_vlan: left promiscuous mode
[ 1239.000445][ T5318] veth0_vlan: left promiscuous mode
[ 1239.278552][T11786] loop3: detected capacity change from 0 to 128
[ 1239.545294][T11786] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[ 1239.919322][T11784] syz.3.910: attempt to access beyond end of device
[ 1239.919322][T11784] loop3: rw=3, sector=6950, nr_sectors = 2 limit=128
[ 1239.932951][T11784] syz.3.910: attempt to access beyond end of device
[ 1239.932951][T11784] loop3: rw=2051, sector=6952, nr_sectors = 942 limit=128
[ 1240.403572][T11782] loop1: detected capacity change from 0 to 32768
[ 1240.438124][T11782] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.909 (11782)
[ 1240.482924][T11782] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1240.542486][T11782] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm
[ 1240.563851][T11782] BTRFS info (device loop1): using free-space-tree
[ 1242.043516][T10854] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1243.263714][ T5318] team0 (unregistering): Port device team_slave_1 removed
[ 1243.483729][ T5318] team0 (unregistering): Port device team_slave_0 removed
[ 1244.720344][T11824] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 1244.730960][T11824] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1245.010856][T11531] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1245.109144][T11531] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1245.244272][T11843] loop2: detected capacity change from 0 to 2048
[ 1245.258573][T11838] loop3: detected capacity change from 0 to 32768
[ 1245.319686][T11531] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1245.330219][T11531] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1245.726054][T11838] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.918 (11838)
[ 1245.977604][T11843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1246.019316][T11838] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1246.085401][T11838] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[ 1246.260824][T11838] BTRFS info (device loop3): using free-space-tree
[ 1246.291232][T11854] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 1246.504500][T11865] overlay: ./file1 is not a directory
[ 1247.077149][T10909] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1247.120946][   T29] audit: type=1800 audit(1728296621.121:119): pid=11838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.918" name="file1" dev="loop3" ino=260 res=0 errno=0
[ 1247.181423][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.921'.
[ 1248.327234][T10955] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1248.400172][T11531] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1248.418976][T11531] 8021q: adding VLAN 0 to HW filter on device team0
[ 1248.463737][   T80] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1248.471380][   T80] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1248.505928][   T80] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1248.513155][   T80] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1250.013424][T11531] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1250.110833][T11531] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1251.391714][T11897] loop3: detected capacity change from 0 to 32768
[ 1251.448937][T11897] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.923 (11897)
[ 1251.515611][T11897] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1251.527225][T11897] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm
[ 1251.535900][T11897] BTRFS info (device loop3): using free-space-tree
[ 1251.633710][T11918] loop4: detected capacity change from 0 to 512
[ 1251.636761][ T5318] team0: left allmulticast mode
[ 1251.645518][ T5318] team_slave_0: left allmulticast mode
[ 1251.655261][ T5318] team_slave_1: left allmulticast mode
[ 1251.661176][ T5318] team0: left promiscuous mode
[ 1251.666835][ T5318] team_slave_0: left promiscuous mode
[ 1251.673138][ T5318] team_slave_1: left promiscuous mode
[ 1251.687487][ T5318] bridge0: port 3(team0) entered disabled state
[ 1251.758791][ T5318] bridge_slave_1: left allmulticast mode
[ 1251.764852][ T5318] bridge_slave_1: left promiscuous mode
[ 1251.781320][ T5318] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1251.793270][ T5318] bridge_slave_0: left allmulticast mode
[ 1251.799048][ T5318] bridge_slave_0: left promiscuous mode
[ 1251.805342][ T5318] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1251.877222][T11918] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #17: comm syz.4.930: iget: bogus i_mode (0)
[ 1251.902934][T11918] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.930: couldn't read orphan inode 17 (err -117)
[ 1251.933755][T11918] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1252.214965][T10955] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1252.302028][T11366] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1253.539273][T11947] loop3: detected capacity change from 0 to 512
[ 1253.559154][T11947] ext4: Unknown parameter 'smackfsdef'
[ 1256.789102][ T5318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1256.807156][ T5318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1256.819249][ T5318] bond0 (unregistering): Released all slaves
[ 1257.226609][T11531] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1257.717062][T11524] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1257.814418][T11524] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1257.846846][T11531] veth0_vlan: entered promiscuous mode
[ 1257.969338][ T5318] hsr_slave_0: left promiscuous mode
[ 1258.003747][ T5318] hsr_slave_1: left promiscuous mode
[ 1258.039716][ T5318] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1258.070803][ T5318] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1258.080560][ T5318] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1258.088042][ T5318] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1258.208357][ T5318] veth1_macvtap: left promiscuous mode
[ 1258.234958][ T5318] veth0_macvtap: left promiscuous mode
[ 1258.252729][ T5318] veth1_vlan: left promiscuous mode
[ 1258.258147][ T5318] veth0_vlan: left promiscuous mode
[ 1259.474127][T11976] loop3: detected capacity change from 0 to 32768
[ 1259.506634][T11976] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.938 (11976)
[ 1259.636399][T11976] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 1259.701115][T11976] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[ 1259.761052][T11976] BTRFS info (device loop3): using free-space-tree
[ 1260.019636][   T29] audit: type=1800 audit(1728296634.041:120): pid=11976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.938" name="bus" dev="loop3" ino=263 res=0 errno=0
[ 1262.058374][ T5318] team0 (unregistering): Port device team_slave_1 removed
[ 1262.110513][ T7427] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1262.133478][ T7427] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1262.164440][ T7427] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1262.180972][ T7427] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1262.192147][ T7427] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1262.199690][ T7427] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1262.242971][T10955] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 1262.646767][ T5318] team0 (unregistering): Port device team_slave_0 removed
[ 1264.216316][T12049] loop4: detected capacity change from 0 to 512
[ 1264.247217][T12049] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1264.257517][ T7427] Bluetooth: hci1: command tx timeout
[ 1264.948694][T12061] loop3: detected capacity change from 0 to 512
[ 1264.985350][T12061] ext4: Unknown parameter 'smackfsdef'
[ 1264.992682][T12049] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[ 1265.033432][T12049] EXT4-fs (loop4): 1 truncate cleaned up
[ 1265.040388][T12049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1266.380655][ T7427] Bluetooth: hci1: command tx timeout
[ 1266.403538][T11366] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1267.296210][T11524] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1267.318296][T11524] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1267.413683][T11531] veth1_vlan: entered promiscuous mode
[ 1267.667472][T11531] veth0_macvtap: entered promiscuous mode
[ 1267.756433][T11531] veth1_macvtap: entered promiscuous mode
[ 1267.964318][T12079] bridge0: port 3(team0) entered blocking state
[ 1267.998562][T12079] bridge0: port 3(team0) entered disabled state
[ 1268.100047][T12079] team0: entered allmulticast mode
[ 1268.131311][T12079] team_slave_0: entered allmulticast mode
[ 1268.169596][T12079] team_slave_1: entered allmulticast mode
[ 1268.201801][T12079] team0: entered promiscuous mode
[ 1268.232353][T12079] team_slave_0: entered promiscuous mode
[ 1268.261100][T12079] team_slave_1: entered promiscuous mode
[ 1268.326729][T12079] bridge0: port 3(team0) entered blocking state
[ 1268.333324][T12079] bridge0: port 3(team0) entered forwarding state
[ 1268.408771][T11524] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1268.416259][ T7427] Bluetooth: hci1: command tx timeout
[ 1268.904386][   T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1268.916205][   T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1269.000963][   T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1269.016611][   T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1269.026439][   T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 1269.035496][   T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1269.172199][T11531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1269.230609][T11531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1269.742949][T11531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1269.753617][T11531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1269.763635][T11531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1269.774210][T11531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1269.784343][T11531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1269.794849][T11531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1269.806408][T11531] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1269.816361][T11531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1269.838533][T11531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1269.848541][T11531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1269.859527][T11531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1269.869675][T11531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1269.880176][T11531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1269.890070][T11531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1269.900783][T11531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1269.912458][T11531] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1270.495260][ T7427] Bluetooth: hci1: command tx timeout
[ 1270.731126][   T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1270.774498][   T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1270.783402][   T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1270.792927][   T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1270.819761][   T54] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 1270.827356][   T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1271.256862][ T7427] Bluetooth: hci6: command tx timeout
[ 1272.004822][T12031] chnl_net:caif_netlink_parms(): no params data found
[ 1272.981390][ T7427] Bluetooth: hci7: command tx timeout
[ 1273.192788][T12122] loop3: detected capacity change from 0 to 256
[ 1273.291585][ T7427] Bluetooth: hci6: command tx timeout
[ 1274.510976][T12031] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1274.530651][T12031] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1274.562497][T12031] bridge_slave_0: entered allmulticast mode
[ 1274.681256][T12031] bridge_slave_0: entered promiscuous mode
[ 1275.052580][ T7427] Bluetooth: hci7: command tx timeout
[ 1275.092252][T12031] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1275.104992][T12031] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1275.133301][T12031] bridge_slave_1: entered allmulticast mode
[ 1275.153349][T12031] bridge_slave_1: entered promiscuous mode
[ 1275.264444][T12031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1275.310850][T12089] chnl_net:caif_netlink_parms(): no params data found
[ 1275.400542][ T7427] Bluetooth: hci6: command tx timeout
[ 1275.603683][T12099] chnl_net:caif_netlink_parms(): no params data found
[ 1275.681356][T12031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1277.130618][ T7427] Bluetooth: hci7: command tx timeout
[ 1277.451015][ T7427] Bluetooth: hci6: command tx timeout
[ 1277.766734][T12031] team0: Port device team_slave_0 added
[ 1278.398880][T12031] team0: Port device team_slave_1 added
[ 1278.642850][T12031] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1278.649850][T12031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1278.980528][T12031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1279.183159][T12089] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1279.206979][T12089] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1279.220682][ T7427] Bluetooth: hci7: command tx timeout
[ 1279.255792][T12089] bridge_slave_0: entered allmulticast mode
[ 1279.280784][T12089] bridge_slave_0: entered promiscuous mode
[ 1279.309934][T12031] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1279.320142][T12031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1279.349849][T12031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1279.380835][T12099] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1279.388216][T12099] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1279.395665][T12099] bridge_slave_0: entered allmulticast mode
[ 1279.402994][T12099] bridge_slave_0: entered promiscuous mode
[ 1279.416143][T12099] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1279.440742][T12099] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1279.461727][T12099] bridge_slave_1: entered allmulticast mode
[ 1279.501202][T12099] bridge_slave_1: entered promiscuous mode
[ 1279.538051][T12089] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1279.570839][T12089] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1279.606382][T12089] bridge_slave_1: entered allmulticast mode
[ 1279.634084][T12089] bridge_slave_1: entered promiscuous mode
[ 1280.547528][T12099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1280.605897][T12099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1280.686288][T12089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1280.754066][T12176] loop4: detected capacity change from 0 to 512
[ 1280.789221][T12031] hsr_slave_0: entered promiscuous mode
[ 1280.809597][T12031] hsr_slave_1: entered promiscuous mode
[ 1280.828960][T12031] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1280.850191][T12176] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1280.860105][T12031] Cannot create hsr debugfs directory
[ 1280.863213][T12176] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1281.023015][T12089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1281.136581][T11366] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1281.155318][T12099] team0: Port device team_slave_0 added
[ 1281.175131][T12099] team0: Port device team_slave_1 added
[ 1281.282235][T12178] loop3: detected capacity change from 0 to 32768
[ 1281.291410][T12178] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.975 (12178)
[ 1281.355591][T12178] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1281.371291][T12178] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[ 1281.493831][T12178] BTRFS info (device loop3): using free-space-tree
[ 1282.232490][ T5287] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[ 1282.425174][ T5287] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1282.486308][ T5287] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1282.545649][ T5287] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1282.622625][   T29] audit: type=1800 audit(1728296656.571:121): pid=12178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.975" name="file1" dev="loop3" ino=260 res=0 errno=0
[ 1282.711957][ T5287] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=1d.40
[ 1282.740692][ T5287] usb 5-1: New USB device strings: Mfr=182, Product=151, SerialNumber=201
[ 1282.760665][ T5287] usb 5-1: Product: syz
[ 1282.764886][ T5287] usb 5-1: Manufacturer: syz
[ 1282.769504][ T5287] usb 5-1: SerialNumber: syz
[ 1282.796082][ T5287] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[ 1282.810521][ T5287] cdc_ncm 5-1:1.0: bind() failure
[ 1282.932686][T12089] team0: Port device team_slave_0 added
[ 1282.974202][T10955] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1283.001510][ T5287] usb 5-1: USB disconnect, device number 17
[ 1283.046305][T12089] team0: Port device team_slave_1 added
[ 1283.124704][T12099] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1283.169292][T12099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1283.229566][T12099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1283.256851][T12099] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1283.283098][T12099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1283.311733][T12099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1284.897699][T12231] loop2: detected capacity change from 0 to 512
[ 1284.980299][T12231] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1285.164878][T12231] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[ 1285.166841][T12235] netlink: 5056 bytes leftover after parsing attributes in process `syz.3.983'.
[ 1285.173300][T12231] System zones: 1-12
[ 1285.206707][T12231] EXT4-fs (loop2): 1 truncate cleaned up
[ 1285.214160][T12231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1285.454038][T12231] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[ 1285.559252][T12089] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1285.573107][T12089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1285.582693][T10909] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1285.749828][T12089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1286.262228][T12099] hsr_slave_0: entered promiscuous mode
[ 1286.292386][T12099] hsr_slave_1: entered promiscuous mode
[ 1286.321683][T12243] loop2: detected capacity change from 0 to 512
[ 1286.347884][T12099] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1286.361942][T12243] EXT4-fs: Ignoring removed orlov option
[ 1286.378663][T12099] Cannot create hsr debugfs directory
[ 1286.430682][T12243] EXT4-fs: Ignoring removed oldalloc option
[ 1286.549257][T12031] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1286.599980][T12243] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.985: Parent and EA inode have the same ino 15
[ 1286.661443][T12089] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1286.668966][T12089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1286.744739][T12243] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.985: Parent and EA inode have the same ino 15
[ 1286.760657][T12089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1287.168502][T12243] EXT4-fs (loop2): 1 orphan inode deleted
[ 1287.330974][T12243] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1287.615018][T12243] netlink: 'syz.2.985': attribute type 3 has an invalid length.
[ 1287.641366][T12243] netlink: 'syz.2.985': attribute type 3 has an invalid length.
[ 1287.674232][T12256] loop3: detected capacity change from 0 to 1024
[ 1287.710219][T12031] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1287.723189][T12256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1287.759441][T12243] netlink: 16 bytes leftover after parsing attributes in process `syz.2.985'.
[ 1288.501506][T10909] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1288.570367][T12031] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1288.591887][    T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[ 1288.662842][T12273] netlink: 'syz.2.989': attribute type 1 has an invalid length.
[ 1288.690345][T12273] netlink: 9116 bytes leftover after parsing attributes in process `syz.2.989'.
[ 1288.779853][T12031] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1288.781751][    T9] usb 4-1: Using ep0 maxpacket: 16
[ 1288.819867][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1288.835983][    T9] usb 4-1: unable to read config index 0 descriptor/start: -71
[ 1288.853899][    T9] usb 4-1: can't read configurations, error -71
[ 1288.871749][T12089] hsr_slave_0: entered promiscuous mode
[ 1288.921236][T12089] hsr_slave_1: entered promiscuous mode
[ 1288.948985][T12089] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1288.958885][T12089] Cannot create hsr debugfs directory
[ 1289.159793][ T5318] bridge_slave_1: left allmulticast mode
[ 1289.177378][ T5318] bridge_slave_1: left promiscuous mode
[ 1289.196461][ T5318] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1289.221325][ T5318] bridge_slave_0: left allmulticast mode
[ 1289.242199][ T5318] bridge_slave_0: left promiscuous mode
[ 1289.256781][ T5318] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1289.269298][ T5318] bridge_slave_1: left allmulticast mode
[ 1289.275929][ T5318] bridge_slave_1: left promiscuous mode
[ 1289.283656][ T5318] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1289.304828][ T5318] bridge_slave_0: left allmulticast mode
[ 1289.312689][ T5318] bridge_slave_0: left promiscuous mode
[ 1289.319618][ T5318] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1289.404614][T10955] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1290.129968][   T29] audit: type=1326 audit(1728296664.141:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12284 comm="syz.3.991" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f892a57dff9 code=0x0
[ 1290.321642][T12291] loop2: detected capacity change from 0 to 512
[ 1290.338473][T12291] ext4: Unknown parameter 'smackfsdef'
[ 1290.810163][T12294] netlink: 5056 bytes leftover after parsing attributes in process `syz.2.993'.
[ 1291.917005][   T29] audit: type=1326 audit(1728296665.931:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.4.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bde97dff9 code=0x7ffc0000
[ 1292.019444][   T29] audit: type=1326 audit(1728296665.971:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.4.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bde97dff9 code=0x7ffc0000
[ 1292.042254][   T29] audit: type=1326 audit(1728296665.981:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.4.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bde97dff9 code=0x7ffc0000
[ 1292.065084][   T29] audit: type=1326 audit(1728296665.981:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.4.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bde97dff9 code=0x7ffc0000
[ 1292.088210][   T29] audit: type=1326 audit(1728296665.981:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.4.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bde97dff9 code=0x7ffc0000
[ 1292.111061][   T29] audit: type=1326 audit(1728296665.981:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.4.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bde97dff9 code=0x7ffc0000
[ 1292.133543][   T29] audit: type=1326 audit(1728296665.981:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.4.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bde97dff9 code=0x7ffc0000
[ 1292.156438][   T29] audit: type=1326 audit(1728296666.011:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.4.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bde97dff9 code=0x7ffc0000
[ 1292.179044][   T29] audit: type=1326 audit(1728296666.011:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.4.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bde97dff9 code=0x7ffc0000
[ 1292.228332][T12310] netlink: 'syz.4.999': attribute type 1 has an invalid length.
[ 1292.261161][T12310] netlink: 9116 bytes leftover after parsing attributes in process `syz.4.999'.
[ 1293.019543][ T5318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1293.047883][ T5318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1293.087126][ T5318] bond0 (unregistering): Released all slaves
[ 1293.337130][T12320] loop2: detected capacity change from 0 to 512
[ 1293.371453][T12320] ext4: Unknown parameter 'smackfsdef'
[ 1293.761564][ T5318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1293.784413][ T5318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1293.824829][ T5318] bond0 (unregistering): Released all slaves
[ 1294.309607][ T5318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1294.348949][ T5318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1294.387805][ T5318] bond0 (unregistering): Released all slaves
[ 1294.499408][T12299] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1294.506932][T12299] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1294.539107][T12300] bridge_slave_1: left allmulticast mode
[ 1294.546908][T12300] bridge_slave_1: left promiscuous mode
[ 1294.557765][T12300] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1294.585755][T12300] bridge_slave_0: left allmulticast mode
[ 1294.595710][T12300] bridge_slave_0: left promiscuous mode
[ 1294.626024][T12300] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1295.847908][   T29] kauditd_printk_skb: 2 callbacks suppressed
[ 1295.847932][   T29] audit: type=1326 audit(1728296669.871:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12338 comm="syz.2.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267df7dff9 code=0x7ffc0000
[ 1295.913311][   T29] audit: type=1326 audit(1728296669.931:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12338 comm="syz.2.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267df7dff9 code=0x7ffc0000
[ 1295.982634][   T29] audit: type=1326 audit(1728296669.931:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12338 comm="syz.2.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f267df7dff9 code=0x7ffc0000
[ 1296.021001][   T29] audit: type=1326 audit(1728296669.931:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12338 comm="syz.2.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267df7dff9 code=0x7ffc0000
[ 1296.060622][   T29] audit: type=1326 audit(1728296669.931:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12338 comm="syz.2.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267df7dff9 code=0x7ffc0000
[ 1296.100599][   T29] audit: type=1326 audit(1728296669.941:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12338 comm="syz.2.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f267df7dff9 code=0x7ffc0000
[ 1296.135843][   T29] audit: type=1326 audit(1728296669.941:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12338 comm="syz.2.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267df7dff9 code=0x7ffc0000
[ 1296.180085][T12343] netlink: 'syz.4.1010': attribute type 1 has an invalid length.
[ 1296.198768][T12343] netlink: 9116 bytes leftover after parsing attributes in process `syz.4.1010'.
[ 1296.320231][T12343] netlink: 'syz.4.1010': attribute type 2 has an invalid length.
[ 1296.321091][   T29] audit: type=1326 audit(1728296669.941:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12338 comm="syz.2.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f267df7dff9 code=0x7ffc0000
[ 1296.330511][T12343] netlink: 153 bytes leftover after parsing attributes in process `syz.4.1010'.
[ 1296.470734][   T29] audit: type=1326 audit(1728296669.981:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12338 comm="syz.2.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267df7dff9 code=0x7ffc0000
[ 1296.507403][ T5318] hsr_slave_0: left promiscuous mode
[ 1296.545393][   T29] audit: type=1326 audit(1728296669.981:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12338 comm="syz.2.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f267df7dff9 code=0x7ffc0000
[ 1296.585534][ T5318] hsr_slave_1: left promiscuous mode
[ 1296.654035][ T5318] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1296.669548][ T5318] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1296.711767][ T5318] hsr_slave_0: left promiscuous mode
[ 1296.729139][ T5318] hsr_slave_1: left promiscuous mode
[ 1296.744782][ T5318] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1296.756333][ T5318] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1296.793297][ T5318] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1296.805795][ T5318] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1296.825529][ T5318] hsr_slave_0: left promiscuous mode
[ 1296.840809][ T5318] hsr_slave_1: left promiscuous mode
[ 1296.865099][ T5318] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1296.889002][ T5318] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1296.927658][ T5318] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1296.940716][ T5318] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1297.029446][ T5318] veth1_macvtap: left promiscuous mode
[ 1297.038861][ T5318] veth0_macvtap: left promiscuous mode
[ 1297.054543][ T5318] veth1_vlan: left promiscuous mode
[ 1297.073444][ T5318] veth0_vlan: left promiscuous mode
[ 1297.089186][ T5318] veth1_macvtap: left promiscuous mode
[ 1297.105827][ T5318] veth0_macvtap: left promiscuous mode
[ 1297.120210][ T5318] veth1_vlan: left promiscuous mode
[ 1297.129994][ T5318] veth0_vlan: left promiscuous mode
[ 1297.832670][T12366] loop4: detected capacity change from 0 to 512
[ 1297.839643][T12366] ext4: Unknown parameter 'smackfsdef'
[ 1298.262352][ T5318] team0 (unregistering): Port device team_slave_1 removed
[ 1298.322431][T12369] loop4: detected capacity change from 0 to 256
[ 1299.446373][ T5318] team0 (unregistering): Port device team_slave_0 removed
[ 1299.719588][ T1261] ieee802154 phy0 wpan0: encryption failed: -22
[ 1299.734967][ T1261] ieee802154 phy1 wpan1: encryption failed: -22
[ 1301.672200][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1301.688828][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1301.697030][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1301.707593][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1301.717130][   T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1301.724820][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1303.235562][T12397] loop4: detected capacity change from 0 to 164
[ 1304.012302][   T54] Bluetooth: hci3: command tx timeout
[ 1304.765535][T12399] loop4: detected capacity change from 0 to 512
[ 1304.804370][T12399] ext4: Unknown parameter 'smackfsdef'
[ 1305.266697][T12402] loop4: detected capacity change from 0 to 256
[ 1305.650073][   T29] kauditd_printk_skb: 4 callbacks suppressed
[ 1305.650130][   T29] audit: type=1804 audit(1728296679.671:148): pid=12404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1024" name="/newroot/56/file1/file0" dev="loop4" ino=1048855 res=1 errno=0
[ 1306.160550][ T7427] Bluetooth: hci3: command tx timeout
[ 1306.778072][ T5318] team0 (unregistering): Port device team_slave_1 removed
[ 1306.890674][ T7427] Bluetooth: hci0: command 0x0406 tx timeout
[ 1307.011287][ T5318] team0 (unregistering): Port device team_slave_0 removed
[ 1307.140748][ T7427] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1307.172175][ T7427] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1307.187955][ T7427] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1307.207869][ T7427] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1307.231750][ T7427] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1307.244108][ T7427] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1308.001504][ T5318] team0 (unregistering): Port device team_slave_1 removed
[ 1308.048474][ T5318] team0 (unregistering): Port device team_slave_0 removed
[ 1308.178636][   T54] Bluetooth: hci3: command tx timeout
[ 1308.736977][T12031] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1308.818290][T12031] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1308.950808][T12031] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1308.985959][T12031] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1309.380859][   T54] Bluetooth: hci5: command tx timeout
[ 1310.263896][   T54] Bluetooth: hci3: command tx timeout
[ 1310.285398][T12031] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1310.348785][T12387] chnl_net:caif_netlink_parms(): no params data found
[ 1310.604055][T12031] 8021q: adding VLAN 0 to HW filter on device team0
[ 1310.638176][T12031] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1310.648628][T12031] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1310.684174][T12099] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1310.794756][T12099] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1310.907064][ T8221] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1310.914420][ T8221] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1310.959791][ T8221] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1310.966994][ T8221] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1311.041120][T12099] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1311.160070][T12441] loop4: detected capacity change from 0 to 512
[ 1311.232620][T12441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1311.280706][T12441] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1311.396570][T11366] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1311.455001][   T54] Bluetooth: hci5: command tx timeout
[ 1311.464632][T12099] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1311.541459][T12099] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1311.558854][T12099] 8021q: adding VLAN 0 to HW filter on device team0
[ 1311.594920][T12099] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1311.605422][T12099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1311.645763][   T80] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1311.653000][   T80] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1311.662249][   T80] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1311.669376][   T80] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1312.924155][T12387] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1312.949963][T12387] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1313.065050][T12464] loop4: detected capacity change from 0 to 164
[ 1313.653590][T12387] bridge_slave_0: entered allmulticast mode
[ 1313.660924][T12387] bridge_slave_0: entered promiscuous mode
[ 1313.859926][   T54] Bluetooth: hci5: command tx timeout
[ 1313.912150][T12413] chnl_net:caif_netlink_parms(): no params data found
[ 1313.925312][T12387] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1313.940729][T12387] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1313.948422][T12387] bridge_slave_1: entered allmulticast mode
[ 1314.182903][T12387] bridge_slave_1: entered promiscuous mode
[ 1314.356859][T12467] loop4: detected capacity change from 0 to 512
[ 1314.440961][T12467] ext4: Unknown parameter 'smackfsdef'
[ 1314.788663][T12031] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1314.941926][T12387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1314.992376][T12472] loop4: detected capacity change from 0 to 2048
[ 1315.048544][T12387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1315.048568][T12472] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1315.086449][T12472] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 1315.185544][T11366] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1315.194561][T12387] team0: Port device team_slave_0 added
[ 1315.235336][T12387] team0: Port device team_slave_1 added
[ 1315.267757][T12099] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1315.429180][T12099] veth0_vlan: entered promiscuous mode
[ 1315.436660][T12089] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1315.457877][T12387] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1315.465985][T12387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1315.497448][T12387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1315.520600][T12413] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1315.533765][T12413] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1315.541281][T12413] bridge_slave_0: entered allmulticast mode
[ 1315.548885][T12413] bridge_slave_0: entered promiscuous mode
[ 1315.559927][T12413] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1315.567957][T12413] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1315.575516][T12413] bridge_slave_1: entered allmulticast mode
[ 1315.583422][T12413] bridge_slave_1: entered promiscuous mode
[ 1315.591046][T12089] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1315.613251][T12387] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1315.620356][T12387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1315.648383][T12387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1315.682924][T12089] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1315.694115][T12089] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1315.739600][T12099] veth1_vlan: entered promiscuous mode
[ 1315.764603][T12413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1315.777376][T12413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1315.841738][T12387] hsr_slave_0: entered promiscuous mode
[ 1315.848170][T12387] hsr_slave_1: entered promiscuous mode
[ 1315.860112][T12387] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1315.870587][T12387] Cannot create hsr debugfs directory
[ 1315.894463][T12031] veth0_vlan: entered promiscuous mode
[ 1315.935307][   T54] Bluetooth: hci5: command tx timeout
[ 1315.981375][ T5318] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1316.063192][T12413] team0: Port device team_slave_0 added
[ 1316.074370][T12413] team0: Port device team_slave_1 added
[ 1316.129389][ T5318] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1316.371418][T12099] veth0_macvtap: entered promiscuous mode
[ 1316.391123][T12099] veth1_macvtap: entered promiscuous mode
[ 1316.402361][T12031] veth1_vlan: entered promiscuous mode
[ 1316.489872][ T5318] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1316.509923][T12413] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1316.596276][T12413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1316.658012][T12413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1317.245067][ T5318] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1317.289500][T12413] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1317.297821][T12413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1317.327046][T12413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1317.357298][T12031] veth0_macvtap: entered promiscuous mode
[ 1317.437246][T12387] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1317.498579][T12031] veth1_macvtap: entered promiscuous mode
[ 1317.572446][T12099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1317.585627][T12099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1317.595986][T12099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1317.607169][T12099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1317.617525][T12099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1317.628728][T12099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1317.654040][T12099] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1317.706834][T12387] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1317.742471][T12413] hsr_slave_0: entered promiscuous mode
[ 1317.748864][T12413] hsr_slave_1: entered promiscuous mode
[ 1317.769168][T12413] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1317.785739][T12413] Cannot create hsr debugfs directory
[ 1317.833070][T12387] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1317.870296][T12099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1317.915589][T12099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1317.936457][T12099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1317.947394][T12099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1317.957551][T12099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1317.968255][T12099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1317.988677][T12099] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1318.048501][T12387] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1318.067786][T12031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1318.081388][T12031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1318.099584][T12031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1318.110287][T12031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1318.122816][T12031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1318.133982][T12031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1318.144267][T12031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1318.154855][T12031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1318.166810][T12031] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1318.283694][T12099] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1318.320915][T12099] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1318.329684][T12099] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1318.336545][T12490] loop4: detected capacity change from 0 to 512
[ 1318.354955][T12099] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1318.382032][T12031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1318.393733][T12031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1318.403929][T12031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1318.405448][T12490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1318.414576][T12031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1318.414604][T12031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1318.414629][T12031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1318.414663][T12031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1318.414686][T12031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1318.416353][T12031] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1318.499062][T12490] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1318.529121][T12089] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1318.667040][T12031] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1318.679045][T11366] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1318.682431][T12031] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1318.698009][T12031] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1318.707347][T12031] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1318.763052][T12089] 8021q: adding VLAN 0 to HW filter on device team0
[ 1318.770381][ T5318] team0: left allmulticast mode
[ 1318.776169][ T5318] team_slave_0: left allmulticast mode
[ 1318.801184][ T5318] team_slave_1: left allmulticast mode
[ 1318.807275][ T5318] team0: left promiscuous mode
[ 1318.819861][ T5318] team_slave_0: left promiscuous mode
[ 1318.825886][ T5318] team_slave_1: left promiscuous mode
[ 1318.914367][ T5318] bridge0: port 3(team0) entered disabled state
[ 1318.930060][ T5318] bridge_slave_1: left allmulticast mode
[ 1318.939540][ T5318] bridge_slave_1: left promiscuous mode
[ 1318.950652][ T5318] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1318.959970][ T5318] bridge_slave_0: left allmulticast mode
[ 1318.970985][ T5318] bridge_slave_0: left promiscuous mode
[ 1318.976701][ T5318] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1320.856644][T12502] loop4: detected capacity change from 0 to 164
[ 1321.976489][   T29] audit: type=1326 audit(1728296695.961:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12504 comm="syz.4.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bde97dff9 code=0x7ffc0000
[ 1322.038562][ T7427] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1322.048045][   T29] audit: type=1326 audit(1728296695.971:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12504 comm="syz.4.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f0bde97dff9 code=0x7ffc0000
[ 1322.070818][   T29] audit: type=1326 audit(1728296695.971:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12504 comm="syz.4.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bde97dff9 code=0x7ffc0000
[ 1322.093911][   T29] audit: type=1326 audit(1728296695.971:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12504 comm="syz.4.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f0bde97dff9 code=0x7ffc0000
[ 1322.116808][   T29] audit: type=1326 audit(1728296695.971:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12504 comm="syz.4.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bde97dff9 code=0x7ffc0000
[ 1322.124687][ T7427] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1322.170145][ T7427] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1322.181771][ T7427] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1322.225194][ T7427] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1322.234871][ T7427] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1322.457268][ T7427] Bluetooth: hci0: ISO packet for unknown connection handle 0
[ 1323.031358][ T5318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1323.067757][ T5318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1323.079823][ T5318] bond0 (unregistering): Released all slaves
[ 1323.373937][T12089] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1323.440863][T12089] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1323.579793][ T8210] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1323.587046][ T8210] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1323.616701][ T8210] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1323.623994][ T8210] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1324.416308][ T7427] Bluetooth: hci2: command tx timeout
[ 1324.788429][T12089] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1325.046530][ T5318] hsr_slave_0: left promiscuous mode
[ 1325.067517][ T5318] hsr_slave_1: left promiscuous mode
[ 1325.087797][ T5318] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1325.111478][ T5318] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1325.126800][ T5318] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1325.138652][ T5318] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1325.176420][ T5318] veth1_macvtap: left promiscuous mode
[ 1325.189261][ T5318] veth0_macvtap: left promiscuous mode
[ 1325.197180][ T5318] veth1_vlan: left promiscuous mode
[ 1325.209110][ T5318] veth0_vlan: left promiscuous mode
[ 1325.719056][T12531] loop4: detected capacity change from 0 to 512
[ 1325.779780][T12531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1325.802854][T12531] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1325.954418][T11366] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1326.258130][ T5318] team0 (unregistering): Port device team_slave_1 removed
[ 1326.466726][ T5318] team0 (unregistering): Port device team_slave_0 removed
[ 1326.494717][ T7427] Bluetooth: hci2: command tx timeout
[ 1327.631787][T12543] loop4: detected capacity change from 0 to 164
[ 1328.613431][ T7427] Bluetooth: hci2: command tx timeout
[ 1328.628242][T12545] loop4: detected capacity change from 0 to 764
[ 1329.373161][T12545] rock: directory entry would overflow storage
[ 1329.379832][T12545] rock: sig=0x4654, size=5, remaining=4
[ 1329.423140][T12545] netlink: 'syz.4.1048': attribute type 3 has an invalid length.
[ 1329.440507][T12545] netlink: 'syz.4.1048': attribute type 3 has an invalid length.
[ 1329.449464][T12545] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1048'.
[ 1329.592441][T12387] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1329.774042][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1329.792189][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1329.801481][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1329.809053][T12387] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1329.824097][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1329.836617][   T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1329.836746][T12387] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1329.852087][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1329.948735][ T9206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1329.972387][ T9206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1330.153978][ T7427] Bluetooth: hci0: ISO packet for unknown connection handle 0
[ 1330.236495][T12387] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1330.650646][ T7427] Bluetooth: hci2: command tx timeout
[ 1330.906909][T12506] chnl_net:caif_netlink_parms(): no params data found
[ 1331.018904][   T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1331.037199][   T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1331.047293][   T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1331.080619][   T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1331.097191][   T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 1331.107731][   T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1331.341041][T12387] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1331.360492][T12387] 8021q: adding VLAN 0 to HW filter on device team0
[ 1331.397203][T12387] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1331.407756][T12387] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1331.429172][ T9200] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1331.436478][ T9200] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1331.491077][ T9200] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1331.498421][ T9200] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1332.197256][ T7427] Bluetooth: hci1: command tx timeout
[ 1332.355175][T12413] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1332.514030][T12413] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1332.552330][T12413] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1332.616771][T12506] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1332.634685][T12506] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1332.658480][T12506] bridge_slave_0: entered allmulticast mode
[ 1332.676248][T12506] bridge_slave_0: entered promiscuous mode
[ 1332.734456][T12413] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1332.785720][T12506] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1332.924021][T12506] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1332.966797][T12506] bridge_slave_1: entered allmulticast mode
[ 1332.991181][T12506] bridge_slave_1: entered promiscuous mode
[ 1333.211316][ T7427] Bluetooth: hci6: command tx timeout
[ 1333.702951][T12599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1052'.
[ 1333.867400][ T5318] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1333.936460][T12387] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1333.989598][T12608] loop4: detected capacity change from 0 to 512
[ 1334.062202][T12506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1334.075045][T12608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1334.131300][T12608] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1334.181311][ T5318] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1334.250917][ T7427] Bluetooth: hci1: command tx timeout
[ 1334.271833][T12506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1334.338923][T11366] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1334.579581][ T5318] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1334.694079][T12506] team0: Port device team_slave_0 added
[ 1334.725671][T12554] chnl_net:caif_netlink_parms(): no params data found
[ 1334.802983][T12506] team0: Port device team_slave_1 added
[ 1335.276020][ T5318] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1335.350845][ T7427] Bluetooth: hci6: command tx timeout
[ 1335.953223][T12636] loop4: detected capacity change from 0 to 164
[ 1336.850521][ T7427] Bluetooth: hci1: command tx timeout
[ 1336.903325][T12506] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1336.910337][T12506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1337.129387][T12506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1337.198822][T12387] veth0_vlan: entered promiscuous mode
[ 1337.255511][T12574] chnl_net:caif_netlink_parms(): no params data found
[ 1337.270358][T12506] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1337.311283][T12506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1337.431099][T12506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1337.451482][ T7427] Bluetooth: hci6: command tx timeout
[ 1337.507552][T12387] veth1_vlan: entered promiscuous mode
[ 1338.025807][T12506] hsr_slave_0: entered promiscuous mode
[ 1338.061479][T12506] hsr_slave_1: entered promiscuous mode
[ 1338.147570][T12640] loop4: detected capacity change from 0 to 32768
[ 1338.219610][T12640] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1056 (12640)
[ 1338.263856][T12640] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 1338.310646][T12640] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[ 1338.319915][T12640] BTRFS info (device loop4): using free-space-tree
[ 1338.369878][T12574] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1338.377696][T12574] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1338.385988][T12574] bridge_slave_0: entered allmulticast mode
[ 1338.394021][T12574] bridge_slave_0: entered promiscuous mode
[ 1338.428841][T12554] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1338.444028][T12554] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1338.454906][T12554] bridge_slave_0: entered allmulticast mode
[ 1338.464569][T12554] bridge_slave_0: entered promiscuous mode
[ 1338.561368][T12574] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1338.571694][T12574] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1338.579006][T12574] bridge_slave_1: entered allmulticast mode
[ 1338.585809][   T29] audit: type=1800 audit(1728296712.621:154): pid=12640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1056" name="bus" dev="loop4" ino=263 res=0 errno=0
[ 1338.610383][T12574] bridge_slave_1: entered promiscuous mode
[ 1338.776881][T12554] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1338.811973][T12554] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1338.838805][T12554] bridge_slave_1: entered allmulticast mode
[ 1338.866017][T12554] bridge_slave_1: entered promiscuous mode
[ 1338.891687][   T54] Bluetooth: hci1: command tx timeout
[ 1339.053274][T11366] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 1339.267641][T12554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1339.470786][T12413] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1339.486748][T12574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1339.518130][T12574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1339.531630][   T54] Bluetooth: hci6: command tx timeout
[ 1339.668366][T12704] loop4: detected capacity change from 0 to 736
[ 1339.810002][T12554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1339.822192][T12387] veth0_macvtap: entered promiscuous mode
[ 1339.943695][T12387] veth1_macvtap: entered promiscuous mode
[ 1340.010849][T12574] team0: Port device team_slave_0 added
[ 1340.025426][T12554] team0: Port device team_slave_0 added
[ 1340.045658][T12554] team0: Port device team_slave_1 added
[ 1340.102128][T12574] team0: Port device team_slave_1 added
[ 1340.283394][T12506] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1340.314293][T12554] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1340.332976][T12554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1340.362261][T12554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1340.389856][T12554] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1340.397312][T12554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1340.425535][T12554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1340.439966][T12413] 8021q: adding VLAN 0 to HW filter on device team0
[ 1340.451602][T12574] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1340.458582][T12574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1340.514191][T12574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1340.544409][T12574] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1340.559699][T12574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1340.587986][T12574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1340.710699][T12506] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1340.765429][ T5681] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1340.772597][ T5681] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1341.003042][T12506] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1341.085784][T12574] hsr_slave_0: entered promiscuous mode
[ 1341.113738][T12574] hsr_slave_1: entered promiscuous mode
[ 1341.140867][T12574] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1341.148488][T12574] Cannot create hsr debugfs directory
[ 1341.193354][T12387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1341.210938][T12387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1341.220982][T12387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1341.232232][T12387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1341.243980][T12387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1341.254778][T12387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1341.264952][T12387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1341.275910][T12387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1341.287860][T12387] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1341.352406][T12506] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1341.401709][T12413] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1341.412407][T12413] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1341.455599][T12554] hsr_slave_0: entered promiscuous mode
[ 1341.470260][T12554] hsr_slave_1: entered promiscuous mode
[ 1341.490935][T12554] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1341.498550][T12554] Cannot create hsr debugfs directory
[ 1341.554975][ T8210] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1341.562177][ T8210] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1341.629053][T12387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1341.651044][T12387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1341.662538][T12387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1341.674084][T12387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1341.687756][T12387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1341.699245][T12387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1341.709863][T12387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1341.730798][T12387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1341.743750][T12387] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1341.772667][T12726] loop4: detected capacity change from 0 to 256
[ 1342.052523][T12387] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1342.065429][T12387] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1342.083259][T12387] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1342.094292][T12387] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1342.176298][   T29] audit: type=1804 audit(1728296716.191:155): pid=12730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1058" name="/newroot/89/file1/file0" dev="loop4" ino=1048856 res=1 errno=0
[ 1342.652893][ T5318] bridge_slave_1: left allmulticast mode
[ 1342.659216][ T5318] bridge_slave_1: left promiscuous mode
[ 1342.670666][ T5318] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1342.698059][ T5318] bridge_slave_0: left allmulticast mode
[ 1342.710564][ T5318] bridge_slave_0: left promiscuous mode
[ 1342.722325][ T5318] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1342.744602][ T5318] bridge_slave_1: left allmulticast mode
[ 1342.761126][ T5318] bridge_slave_1: left promiscuous mode
[ 1342.766967][ T5318] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1342.787144][ T5318] bridge_slave_0: left allmulticast mode
[ 1342.800544][ T5318] bridge_slave_0: left promiscuous mode
[ 1342.810862][ T5318] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1342.832042][ T5318] bridge_slave_1: left allmulticast mode
[ 1342.837750][ T5318] bridge_slave_1: left promiscuous mode
[ 1342.854924][ T5318] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1342.911413][ T5318] bridge_slave_0: left allmulticast mode
[ 1342.917188][ T5318] bridge_slave_0: left promiscuous mode
[ 1342.931018][ T5318] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1345.932807][ T5318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1345.968485][ T5318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1345.994613][ T5318] bond0 (unregistering): Released all slaves
[ 1346.700683][ T5318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1346.729682][ T5318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1346.754897][ T5318] bond0 (unregistering): Released all slaves
[ 1346.957861][T12742] loop4: detected capacity change from 0 to 512
[ 1347.035618][T12742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1347.048475][T12742] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1347.081132][ T5318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1347.096157][ T5318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1347.108594][ T5318] bond0 (unregistering): Released all slaves
[ 1347.216564][T11366] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1348.495168][ T5318] hsr_slave_0: left promiscuous mode
[ 1348.512785][ T5318] hsr_slave_1: left promiscuous mode
[ 1348.570853][ T5318] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1348.578487][ T5318] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1348.625674][ T5318] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1348.672717][ T5318] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1348.718338][ T5318] hsr_slave_0: left promiscuous mode
[ 1348.735112][ T5318] hsr_slave_1: left promiscuous mode
[ 1348.791065][ T5318] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1348.826779][ T5318] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1348.864013][ T5318] hsr_slave_0: left promiscuous mode
[ 1348.900802][ T5318] hsr_slave_1: left promiscuous mode
[ 1348.972093][ T5318] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1348.979652][ T5318] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1349.056309][ T5318] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1349.097115][ T5318] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1349.355224][ T5318] veth1_macvtap: left promiscuous mode
[ 1349.372248][T12752] loop4: detected capacity change from 0 to 1024
[ 1349.410609][ T5318] veth0_macvtap: left promiscuous mode
[ 1349.431769][T12752] ext4: Unknown parameter 'func'
[ 1349.450616][ T5318] veth1_vlan: left promiscuous mode
[ 1349.455997][ T5318] veth0_vlan: left promiscuous mode
[ 1349.543136][ T5318] veth1_macvtap: left promiscuous mode
[ 1349.548740][ T5318] veth0_macvtap: left promiscuous mode
[ 1349.841635][ T5318] veth1_vlan: left promiscuous mode
[ 1349.847358][ T5318] veth0_vlan: left promiscuous mode
[ 1351.139557][T12770] loop4: detected capacity change from 0 to 32768
[ 1351.147756][T12770] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1064 (12770)
[ 1351.205831][T12770] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 1351.217117][T12770] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[ 1351.242199][T12770] BTRFS info (device loop4): using free-space-tree
[ 1351.405373][   T29] audit: type=1800 audit(1728296725.431:156): pid=12770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1064" name="bus" dev="loop4" ino=263 res=0 errno=0
[ 1351.821961][T11366] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 1352.120312][T12792] loop4: detected capacity change from 0 to 736
[ 1352.248091][ T5318] team0 (unregistering): Port device team_slave_1 removed
[ 1352.370188][ T5318] team0 (unregistering): Port device team_slave_0 removed
[ 1353.429558][ T5318] team0 (unregistering): Port device team_slave_1 removed
[ 1353.508540][ T5318] team0 (unregistering): Port device team_slave_0 removed
[ 1353.900226][   T29] audit: type=1326 audit(1728296727.921:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12795 comm="syz.4.1066" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0bde97dff9 code=0x0
[ 1356.648595][ T5318] team0 (unregistering): Port device team_slave_1 removed
[ 1356.697112][ T5318] team0 (unregistering): Port device team_slave_0 removed
[ 1357.438452][T12413] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1357.584270][ T8221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1357.622843][ T8221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1357.654451][T12506] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1357.666636][T12506] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1357.718253][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1357.734300][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1357.782945][T12506] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1357.887291][T12506] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1358.031687][T12413] veth0_vlan: entered promiscuous mode
[ 1358.128598][T12413] veth1_vlan: entered promiscuous mode
[ 1358.166204][T12413] veth0_macvtap: entered promiscuous mode
[ 1358.946213][T12413] veth1_macvtap: entered promiscuous mode
[ 1359.022910][T12413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1359.040602][T12413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1359.060574][T12413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1359.071158][T12413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1359.081346][T12413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1359.091925][T12413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1359.093620][T12817] loop4: detected capacity change from 0 to 512
[ 1359.103489][T12413] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1359.166041][T12413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1359.190095][T12413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1359.210107][T12413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1359.238799][T12413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1359.250250][T12413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1359.263808][T12413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1359.275590][T12413] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1359.286840][T12413] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1359.296392][T12413] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1359.305956][T12413] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1359.329070][T12413] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1359.364587][T12817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1359.405687][T12817] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1361.352240][ T1261] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.362649][ T1261] ieee802154 phy1 wpan1: encryption failed: -22
[ 1361.446475][T12506] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1361.511332][T11366] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1361.596571][T12837] loop3: detected capacity change from 0 to 256
[ 1362.232169][T12554] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1362.283844][T12554] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1362.385104][T12506] 8021q: adding VLAN 0 to HW filter on device team0
[ 1362.686336][T12554] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1362.689927][T12850] loop3: detected capacity change from 0 to 736
[ 1362.714433][T12554] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1362.907808][   T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1362.930959][   T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1362.971880][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1362.979067][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1363.016538][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1363.023894][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1363.343428][ T8210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1363.385246][ T8210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1363.418466][T12506] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1363.776504][T12554] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1363.828056][T12861] loop2: detected capacity change from 0 to 512
[ 1363.856506][T12554] 8021q: adding VLAN 0 to HW filter on device team0
[ 1363.912907][T12574] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1363.949580][ T8210] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1363.956814][ T8210] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1363.974174][T12574] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1364.003034][T12861] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1026: bg 0: block 393: padding at end of block bitmap is not set
[ 1364.081706][T12574] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1364.090711][T12861] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem
[ 1364.132976][T12861] EXT4-fs (loop2): 2 truncates cleaned up
[ 1364.140082][T12861] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1364.210585][T12574] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1364.253723][ T5318] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1364.260946][ T5318] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1364.393473][T12413] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1364.563778][   T29] audit: type=1326 audit(1728296738.581:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.4.1074" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0bde97dff9 code=0x0
[ 1365.088965][T12506] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1365.304894][T12884] loop4: detected capacity change from 0 to 16
[ 1365.626541][T12884] erofs: (device loop4): mounted with root inode @ nid 36.
[ 1365.944658][T12574] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1366.042277][T12574] 8021q: adding VLAN 0 to HW filter on device team0
[ 1366.392244][ T9206] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1366.399389][ T9206] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1367.154617][ T9206] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1367.161839][ T9206] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1367.372066][T12506] veth0_vlan: entered promiscuous mode
[ 1367.397507][T12506] veth1_vlan: entered promiscuous mode
[ 1367.630290][   T29] audit: type=1326 audit(1728296741.651:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bde97dff9 code=0x7ffc0000
[ 1368.045898][   T29] audit: type=1326 audit(1728296741.651:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bde97dff9 code=0x7ffc0000
[ 1368.125266][T12574] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1368.180884][T12574] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1368.193193][   T29] audit: type=1326 audit(1728296741.711:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bde97dff9 code=0x7ffc0000
[ 1368.253462][T12506] veth0_macvtap: entered promiscuous mode
[ 1368.284136][T12506] veth1_macvtap: entered promiscuous mode
[ 1368.329570][   T29] audit: type=1326 audit(1728296741.711:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bde97dff9 code=0x7ffc0000
[ 1368.398102][T12554] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1368.479680][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1368.496323][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1368.525264][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1368.560619][   T29] audit: type=1326 audit(1728296741.711:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bde97dff9 code=0x7ffc0000
[ 1368.611015][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1368.735283][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1368.746200][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1368.760827][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1368.772452][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1368.776000][   T29] audit: type=1326 audit(1728296741.711:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bde97dff9 code=0x7ffc0000
[ 1368.784297][T12506] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1368.874929][T12916] loop4: detected capacity change from 0 to 128
[ 1368.920713][   T29] audit: type=1326 audit(1728296741.711:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bde97dff9 code=0x7ffc0000
[ 1369.043023][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1369.097198][T12916] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1369.150648][   T29] audit: type=1326 audit(1728296741.711:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bde97dff9 code=0x7ffc0000
[ 1369.175489][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1369.231395][T12916] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1369.242060][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1369.291979][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1369.303889][   T29] audit: type=1326 audit(1728296741.971:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.4.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bde97dff9 code=0x7ffc0000
[ 1369.360662][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1369.453542][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1369.508312][T12506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1369.541487][T12506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1369.564986][T12506] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1369.698049][T11366] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1369.768126][T12506] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1369.818037][T12506] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1369.850676][T12506] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1369.859450][T12506] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1369.967816][   T29] kauditd_printk_skb: 11 callbacks suppressed
[ 1369.967849][   T29] audit: type=1326 audit(1728296743.991:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12937 comm="syz.2.1085" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f49d197dff9 code=0x0
[ 1370.056733][T12943] loop3: detected capacity change from 0 to 8
[ 1370.141706][T12574] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1370.489799][T12951] usb usb8: usbfs: process 12951 (syz.3.1086) did not claim interface 0 before use
[ 1371.247698][ T8210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1371.304928][ T8210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1372.775770][T12961] hub 6-0:1.0: USB hub found
[ 1372.979263][ T9206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1372.987516][ T9206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1373.059332][T12554] veth0_vlan: entered promiscuous mode
[ 1373.119934][T12554] veth1_vlan: entered promiscuous mode
[ 1373.183726][T12554] veth0_macvtap: entered promiscuous mode
[ 1373.197248][T12554] veth1_macvtap: entered promiscuous mode
[ 1373.426983][T12574] veth0_vlan: entered promiscuous mode
[ 1373.510129][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1373.521334][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1373.531398][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1373.542074][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1373.552194][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1373.565251][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1373.664314][T12961] hub 6-0:1.0: 1 port detected
[ 1373.670525][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1373.800517][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1373.840664][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1373.860522][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1373.882322][T12554] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1374.050586][T12574] veth1_vlan: entered promiscuous mode
[ 1374.183392][T12974] loop2: detected capacity change from 0 to 512
[ 1375.131290][T12974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1375.144278][T12974] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1376.008869][   T54] Bluetooth: hci0: ISO packet for unknown connection handle 0
[ 1376.122441][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1376.133060][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1376.145842][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1376.156343][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1376.166251][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1376.176854][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1376.186763][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1376.210316][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1376.230199][T12554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1376.260579][T12554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1376.328211][T12554] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1376.362443][T12413] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1376.517492][T12554] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1376.559423][T12985] loop2: detected capacity change from 0 to 128
[ 1376.580567][T12554] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1376.589347][T12554] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1376.614563][T12554] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1376.651594][T12987] loop4: detected capacity change from 0 to 1024
[ 1376.654021][T12985] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1376.690855][T12987] EXT4-fs: Ignoring removed orlov option
[ 1376.716374][T12985] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1376.743272][T12574] veth0_macvtap: entered promiscuous mode
[ 1376.753225][T12987] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 5)!
[ 1376.781212][T12987] EXT4-fs (loop4): group descriptors corrupted!
[ 1376.877589][T12574] veth1_macvtap: entered promiscuous mode
[ 1377.532395][T12990] loop4: detected capacity change from 0 to 1024
[ 1377.581401][T12574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1377.594273][T12413] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1377.635148][T12990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1377.703363][T12574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1377.714508][T12574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1377.736664][T12574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1377.749536][T12574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1377.773115][T12574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1377.788639][T12574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1377.820856][T12574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1377.841469][T12574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1377.859211][T12574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1377.869733][T12574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1377.932913][   T29] audit: type=1800 audit(1728296751.951:180): pid=12990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1096" name="bus" dev="loop4" ino=18 res=0 errno=0
[ 1377.977334][T12574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1378.028353][T12996] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[ 1378.131997][T12574] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1378.327280][T12574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1378.474513][T12574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1378.571162][T12574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1378.620242][T12574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1378.661073][T12574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1378.725985][T12574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1378.748590][T12574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1378.766319][T12574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1378.767701][T13002] loop2: detected capacity change from 0 to 8
[ 1378.783539][T12574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1378.801049][T12574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1378.820551][T12574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1378.821055][T12981] loop1: detected capacity change from 0 to 32768
[ 1378.840238][T12574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1378.872452][T12981] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.941 (12981)
[ 1378.929133][T12574] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1378.944596][T12574] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1378.969537][T12574] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1379.002345][T11366] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1379.022467][T12574] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1379.048559][T12574] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1379.263783][T13004] usb usb8: usbfs: process 13004 (syz.2.1098) did not claim interface 0 before use
[ 1379.616784][T12981] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1379.710882][T12981] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm
[ 1379.770176][T12981] BTRFS info (device loop1): using free-space-tree
[ 1379.890053][T12981] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[ 1379.891311][T12981] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[ 1379.997737][   T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1380.015801][T12981] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[ 1380.016117][T12981] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[ 1380.068191][   T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1380.094245][T12981] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[ 1380.094466][T12981] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[ 1380.104828][T12981] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[ 1380.126224][T12981] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[ 1380.173897][T12981] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[ 1380.242700][T13009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1099'.
[ 1380.472130][T12981] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[ 1380.491323][T12981] BTRFS error (device loop1): open_ctree failed
[ 1380.534758][ T9206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1380.621726][ T9206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1382.388222][ T9206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1382.526373][ T9206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1383.058335][   T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1383.078210][   T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1384.104652][T13038] loop0: detected capacity change from 0 to 1024
[ 1384.135437][T13038] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1384.212747][T13038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1384.412521][T12574] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1384.987447][ T7427] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1385.749412][ T7427] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1385.787452][ T7427] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1385.852349][T13064] loop2: detected capacity change from 0 to 512
[ 1385.881625][ T7427] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1385.897175][ T7427] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 1385.906081][ T7427] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1385.925312][T13064] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1385.938019][T13064] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1386.143520][T13067] ptrace attach of "./syz-executor exec"[13068] was attempted by "./syz-executor exec"[13067]
[ 1386.308786][T13069] loop1: detected capacity change from 0 to 128
[ 1386.580567][T13069] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[ 1386.849699][T13073] loop5: detected capacity change from 0 to 2048
[ 1387.168737][T13071] loop0: detected capacity change from 0 to 32768
[ 1387.195430][T13071] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1110 (13071)
[ 1387.260440][T13063] syz.1.1109: attempt to access beyond end of device
[ 1387.260440][T13063] loop1: rw=3, sector=6950, nr_sectors = 2 limit=128
[ 1387.285673][T13063] syz.1.1109: attempt to access beyond end of device
[ 1387.285673][T13063] loop1: rw=2051, sector=6952, nr_sectors = 942 limit=128
[ 1387.340678][T13063] FAT-fs (loop1): FAT read failed (blocknr 128)
[ 1387.374528][T12413] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1387.451831][T13073] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1387.460725][T13071] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 1387.490815][T13071] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[ 1387.500546][T13071] BTRFS info (device loop0): using free-space-tree
[ 1387.866870][T13079] overlay: ./file1 is not a directory
[ 1388.300678][ T7427] Bluetooth: hci7: command tx timeout
[ 1389.125020][T12554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1389.253033][ T7427] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1389.263511][ T7427] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1389.273311][ T7427] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1389.296131][ T7427] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1389.305155][ T7427] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1389.318787][ T7427] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1389.518689][ T9200] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1389.672162][   T29] audit: type=1800 audit(1728296763.671:181): pid=13071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1110" name="bus" dev="loop0" ino=263 res=0 errno=0
[ 1389.708036][T13088] loop2: detected capacity change from 0 to 32768
[ 1389.716497][T13088] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1112 (13088)
[ 1389.734777][T13088] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1389.746029][T13088] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm
[ 1389.775803][T13088] BTRFS info (device loop2): using free-space-tree
[ 1389.968095][ T9200] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1390.393802][ T7427] Bluetooth: hci7: command tx timeout
[ 1391.402599][ T7427] Bluetooth: hci3: command tx timeout
[ 1391.761393][T12413] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1392.423774][ T9200] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1392.443630][T12574] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 1392.463136][ T7427] Bluetooth: hci7: command tx timeout
[ 1392.497001][T13050] chnl_net:caif_netlink_parms(): no params data found
[ 1392.627295][T13143] loop1: detected capacity change from 0 to 512
[ 1392.722665][T13143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1392.880710][T13143] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1393.504455][ T7427] Bluetooth: hci3: command tx timeout
[ 1394.623024][ T7427] Bluetooth: hci7: command tx timeout
[ 1394.893837][T13164] loop5: detected capacity change from 0 to 164
[ 1395.060296][T13165] loop0: detected capacity change from 0 to 512
[ 1395.603509][ T7427] Bluetooth: hci3: command tx timeout
[ 1395.946569][ T9200] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1396.987712][T13165] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1397.000313][T13165] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1397.119513][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1124'.
[ 1397.319769][T12574] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1397.700958][ T7427] Bluetooth: hci3: command tx timeout
[ 1398.471578][T12506] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1399.232905][T13050] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1399.237155][T13190] loop0: detected capacity change from 0 to 2048
[ 1399.240160][T13050] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1399.270844][T13050] bridge_slave_0: entered allmulticast mode
[ 1399.278339][T13050] bridge_slave_0: entered promiscuous mode
[ 1399.309819][T13050] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1399.344064][T13050] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1399.351917][T13050] bridge_slave_1: entered allmulticast mode
[ 1399.383037][T13050] bridge_slave_1: entered promiscuous mode
[ 1399.389845][T13190] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1399.417394][T13098] chnl_net:caif_netlink_parms(): no params data found
[ 1399.813608][   T29] audit: type=1400 audit(1728296773.831:182): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=13188 comm="syz.0.1130"
[ 1400.209450][T12574] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1400.253404][T13187] loop1: detected capacity change from 0 to 32768
[ 1400.272848][T13187] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1128 (13187)
[ 1400.293920][T13050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1400.321299][T13187] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 1400.339215][T13050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1400.374542][T13187] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[ 1400.407065][T13187] BTRFS info (device loop1): using free-space-tree
[ 1401.138889][T13050] team0: Port device team_slave_0 added
[ 1401.254367][T13050] team0: Port device team_slave_1 added
[ 1402.818425][T13235] loop5: detected capacity change from 0 to 164
[ 1403.725086][T12506] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 1403.763073][ T9200] bridge_slave_1: left allmulticast mode
[ 1403.768869][ T9200] bridge_slave_1: left promiscuous mode
[ 1403.977383][ T9200] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1404.160371][ T9200] bridge_slave_0: left allmulticast mode
[ 1404.166243][ T9200] bridge_slave_0: left promiscuous mode
[ 1404.292518][ T9200] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1404.443928][T13238] loop0: detected capacity change from 0 to 736
[ 1404.561725][T13242] loop5: detected capacity change from 0 to 512
[ 1405.754319][T13252] loop1: detected capacity change from 0 to 8
[ 1405.846292][T13242] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1405.861594][T13242] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1405.876351][T13254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1139'.
[ 1406.282087][T13266] usb usb8: usbfs: process 13266 (syz.1.1136) did not claim interface 0 before use
[ 1406.939667][T13268] loop0: detected capacity change from 0 to 128
[ 1407.369867][T13272] loop1: detected capacity change from 0 to 2048
[ 1407.494098][T13279] loop2: detected capacity change from 0 to 256
[ 1407.508102][T13268] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1407.564856][T12554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1407.650555][T13268] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1407.712906][T13272] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1408.904361][T13286] overlay: ./file1 is not a directory
[ 1409.569198][T12506] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1410.322153][T12574] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1410.842647][T13302] loop0: detected capacity change from 0 to 1024
[ 1410.899850][T13302] EXT4-fs: Ignoring removed orlov option
[ 1410.939031][T13302] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 5)!
[ 1410.975465][T13302] EXT4-fs (loop0): group descriptors corrupted!
[ 1411.367536][T13304] loop0: detected capacity change from 0 to 1024
[ 1411.584729][T13304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1411.642988][   T29] audit: type=1800 audit(1728296785.651:183): pid=13302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1148" name="bus" dev="loop0" ino=18 res=0 errno=0
[ 1411.692330][ T9200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1411.764779][T13304] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[ 1412.055015][T13312] loop2: detected capacity change from 0 to 8
[ 1412.139830][ T9200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1412.490862][T13301] loop1: detected capacity change from 0 to 32768
[ 1412.511349][T13301] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1149 (13301)
[ 1412.537351][ T9200] bond0 (unregistering): Released all slaves
[ 1412.553222][T12574] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1412.619283][T13301] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1412.629924][T13301] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[ 1412.717167][T13315] usb usb8: usbfs: process 13315 (syz.2.1151) did not claim interface 0 before use
[ 1412.915866][T13301] BTRFS info (device loop1): using free-space-tree
[ 1413.281719][T13050] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1413.288741][T13050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1413.390526][   T29] audit: type=1800 audit(1728296787.381:184): pid=13301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1149" name="file1" dev="loop1" ino=260 res=0 errno=0
[ 1413.436392][T13050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1413.521892][T13334] netlink: 'syz.2.1153': attribute type 1 has an invalid length.
[ 1413.529930][T13334] netlink: 9348 bytes leftover after parsing attributes in process `syz.2.1153'.
[ 1413.541491][T12506] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1414.533160][T13342] loop5: detected capacity change from 0 to 2048
[ 1414.836460][T13050] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1414.857541][T13050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1414.944392][T13348] loop2: detected capacity change from 0 to 256
[ 1415.045187][T13050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1415.076403][T13347] loop1: detected capacity change from 0 to 512
[ 1415.194235][T13098] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1415.213520][T13098] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1415.391839][T13098] bridge_slave_0: entered allmulticast mode
[ 1415.426655][T13098] bridge_slave_0: entered promiscuous mode
[ 1415.518028][T13342] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1415.685812][T13347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1415.816692][T13098] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1415.974969][T13347] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1415.986439][T13098] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1416.234395][T13098] bridge_slave_1: entered allmulticast mode
[ 1416.372557][T13356] overlay: ./file1 is not a directory
[ 1416.467806][T13098] bridge_slave_1: entered promiscuous mode
[ 1416.925126][T13361] loop2: detected capacity change from 0 to 128
[ 1416.975177][T12554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1416.991434][T13361] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1417.044802][T13361] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1417.696365][T12506] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1418.213745][T13050] hsr_slave_0: entered promiscuous mode
[ 1418.247245][T13050] hsr_slave_1: entered promiscuous mode
[ 1418.414318][T13050] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1418.430456][T13050] Cannot create hsr debugfs directory
[ 1418.470194][T12413] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1418.554348][T13374] loop5: detected capacity change from 0 to 8
[ 1418.653169][T13375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1419.111565][T13379] hub 6-0:1.0: USB hub found
[ 1419.114635][T13378] loop2: detected capacity change from 0 to 1024
[ 1419.127695][T13379] hub 6-0:1.0: 1 port detected
[ 1419.258468][T13378] EXT4-fs: Ignoring removed orlov option
[ 1419.785642][T13381] usb usb8: usbfs: process 13381 (syz.5.1164) did not claim interface 0 before use
[ 1419.806188][T13378] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 5)!
[ 1420.057544][T13378] EXT4-fs (loop2): group descriptors corrupted!
[ 1420.194762][T13098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1420.252800][T13387] loop2: detected capacity change from 0 to 1024
[ 1420.271115][T13098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1420.350924][T13387] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1420.374803][T13389] loop5: detected capacity change from 0 to 2048
[ 1420.405008][   T29] audit: type=1800 audit(1728296794.431:185): pid=13387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1163" name="bus" dev="loop2" ino=18 res=0 errno=0
[ 1420.505387][T13378] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[ 1420.564094][T13389] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1421.508547][T12413] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1421.892014][ T9200] hsr_slave_0: left promiscuous mode
[ 1422.069443][ T9200] hsr_slave_1: left promiscuous mode
[ 1422.201618][ T9200] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1422.350221][ T9200] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1422.441698][ T9200] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1422.575755][ T1261] ieee802154 phy0 wpan0: encryption failed: -22
[ 1422.612353][ T1261] ieee802154 phy1 wpan1: encryption failed: -22
[ 1422.865982][ T9200] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1423.525030][T13406] loop1: detected capacity change from 0 to 256
[ 1423.925187][ T9200] veth1_macvtap: left promiscuous mode
[ 1428.025364][ T9200] veth0_macvtap: left promiscuous mode
[ 1428.135346][ T9200] veth1_vlan: left promiscuous mode
[ 1428.220809][ T9200] veth0_vlan: left promiscuous mode
[ 1429.770826][   T54] Bluetooth: hci5: command 0x0406 tx timeout
[ 1432.722862][T13419] loop2: detected capacity change from 0 to 512
[ 1443.198401][T12554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1445.140208][ T7427] Bluetooth: hci2: command 0x0406 tx timeout
[ 1452.987666][ T7427] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1453.018230][ T7427] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1453.055963][ T7427] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1453.075246][ T7427] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1453.089526][ T7427] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1453.105164][ T7427] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1455.466925][T13432] Bluetooth: hci6: command 0x0406 tx timeout
[ 1455.763785][ T5246] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1456.091106][T13432] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1456.119327][T13432] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1456.206361][T13432] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1456.303986][ T5239] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1456.316643][ T5239] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1456.346754][ T5239] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1456.448117][ T5239] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[ 1456.459091][ T5239] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1456.501556][ T5239] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1456.575988][ T5246] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[ 1456.771399][ T5246] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1456.903701][   T30] INFO: task syz.3.994:12296 blocked for more than 144 seconds.
[ 1457.431789][   T30]       Not tainted 6.12.0-rc2-syzkaller #0
[ 1457.437848][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1457.574454][   T30] task:syz.3.994       state:D stack:23512 pid:12296 tgid:12295 ppid:10955  flags:0x00004004
[ 1457.596077][T13432] Bluetooth: hci0: command tx timeout
[ 1457.640811][   T30] Call Trace:
[ 1457.662091][   T30]  <TASK>
[ 1457.679656][   T30]  __schedule+0x1895/0x4b30
[ 1457.750832][   T30]  ? __pfx___schedule+0x10/0x10
[ 1457.842187][   T30]  ? __pfx_lock_release+0x10/0x10
[ 1457.847437][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[ 1458.069555][   T30]  ? schedule+0x90/0x320
[ 1458.461282][   T30]  schedule+0x14b/0x320
[ 1458.483600][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1458.489282][   T30]  __mutex_lock+0x6a7/0xd70
[ 1458.516791][   T30]  ? __mutex_lock+0x52a/0xd70
[ 1458.521809][   T30]  ? br_ioctl_call+0x57/0xb0
[ 1458.526604][   T30]  ? __pfx___mutex_lock+0x10/0x10
[ 1458.534622][   T30]  ? __pfx_netdev_run_todo+0x10/0x10
[ 1458.540195][   T30]  br_ioctl_call+0x57/0xb0
[ 1459.623944][   T54] Bluetooth: hci0: command tx timeout
[ 1459.693571][   T54] Bluetooth: hci9: command tx timeout
[ 1459.890611][   T30]  dev_ifsioc+0xc20/0xe70
[ 1459.895171][   T30]  ? __pfx_dev_ifsioc+0x10/0x10
[ 1459.900230][   T30]  ? dev_load+0x21/0x1f0
[ 1459.904708][   T30]  dev_ioctl+0x719/0x1340
[ 1459.909764][   T30]  sock_do_ioctl+0x240/0x460
[ 1459.936463][   T30]  ? __pfx_sock_do_ioctl+0x10/0x10
[ 1459.963255][   T30]  sock_ioctl+0x626/0x8e0
[ 1459.964122][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1459.970837][   T30]  ? __pfx_sock_ioctl+0x10/0x10
[ 1460.028621][ T5239] Bluetooth: hci8: command tx timeout
[ 1460.049333][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
SYZFAIL: failed to recv rpc
[ 1460.093663][   T30]  ? __fget_files+0x29/0x470
[ 1460.099368][   T30]  ? __fget_files+0x3f3/0x470
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1460.190455][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1460.442490][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1460.485899][   T30]  ? __pfx_sock_ioctl+0x10/0x10
[ 1460.540865][   T30]  __se_sys_ioctl+0xfb/0x170
[ 1460.601255][   T30]  do_syscall_64+0xf3/0x230
[ 1460.605958][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1460.688746][   T30] RIP: 0033:0x7f892a57dff9
[ 1460.837865][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1460.851157][   T30] RSP: 002b:00007f892b32c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1460.924213][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1460.943022][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1461.178868][   T30] RAX: ffffffffffffffda RBX: 00007f892a735f80 RCX: 00007f892a57dff9
[ 1461.700782][ T5239] Bluetooth: hci0: command tx timeout
[ 1461.770647][ T5239] Bluetooth: hci9: command tx timeout
[ 1461.813230][   T30] RDX: 0000000020000000 RSI: 00000000000089a2 RDI: 0000000000000005
[ 1462.092253][ T5239] Bluetooth: hci8: command tx timeout
[ 1462.164080][   T30] RBP: 00007f892a5f0296 R08: 0000000000000000 R09: 0000000000000000
[ 1462.545376][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1462.602494][   T30] R13: 0000000000000000 R14: 00007f892a735f80 R15: 00007ffec295a9f8
[ 1462.689544][   T30]  </TASK>
[ 1462.834022][   T30] 
[ 1462.834022][   T30] Showing all locks held in the system:
[ 1463.011675][   T30] 2 locks held by kworker/u8:1/12:
[ 1463.017470][   T30] 1 lock held by khungtaskd/30:
[ 1463.060033][   T30]  #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[ 1463.173639][   T30] 3 locks held by kworker/u8:3/36:
[ 1463.179046][   T30]  #0: ffff88801ac81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[ 1463.232535][ T7427] Bluetooth: hci1: command tx timeout
[ 1463.374821][   T30]  #1: ffffc90000ac7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[ 1463.430530][   T30]  #2: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[ 1463.444554][   T30] 1 lock held by dhcpcd/4892:
[ 1463.449453][   T30]  #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1aa0
[ 1463.466469][   T30] 2 locks held by getty/4976:
[ 1463.471830][   T30]  #0: ffff8880328f20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1463.507505][   T30]  #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00
[ 1463.566202][   T30] 3 locks held by kworker/1:3/5287:
[ 1463.614470][   T30]  #0: ffff88801ac79948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[ 1463.687956][   T30]  #1: ffffc9000399fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[ 1463.749493][   T30]  #2: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0
[ 1463.760243][   T30] 3 locks held by kworker/u8:8/5318:
[ 1463.780586][ T7427] Bluetooth: hci0: command tx timeout
[ 1463.816742][   T30] 5 locks held by kworker/u8:17/9200:
[ 1463.860518][ T7427] Bluetooth: hci9: command tx timeout
[ 1463.907830][   T30]  #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[ 1464.033596][   T30]  #1: ffffc9000318fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[ 1464.170671][ T7427] Bluetooth: hci8: command tx timeout
[ 1464.271015][   T30]  #2: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0
[ 1464.655426][   T30]  #3: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xaa0
[ 1464.755159][   T30]  #4: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830
[ 1464.847066][   T30] 3 locks held by kworker/u8:20/9204:
[ 1465.071404][   T30]  #0: ffff88802e1ea948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[ 1465.192382][   T30]  #1: ffffc900042f7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[ 1465.290562][ T7427] Bluetooth: hci1: command tx timeout
[ 1465.349721][   T30]  #2: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30
[ 1465.528981][   T30] 1 lock held by syz.3.994/12296:
[ 1465.856648][   T30]  #0: ffffffff8fcb6708 (br_ioctl_mutex){+.+.}-{3:3}, at: br_ioctl_call+0x57/0xb0
[ 1465.899122][   T30] 2 locks held by syz.3.994/12300:
[ 1465.922497][   T30]  #0: ffffffff8fcb6708 (br_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x5c3/0x8e0
[ 1466.000714][ T7427] Bluetooth: hci9: command tx timeout
[ 1466.006269][   T30]  #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0x89e/0x1000
[ 1466.232406][   T30] 3 locks held by syz-executor/12413:
[ 1466.250751][ T7427] Bluetooth: hci8: command tx timeout
[ 1466.331550][   T30]  #0: ffff88804aa4cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510
[ 1466.344168][   T30]  #1: ffff88804aa4c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0
[ 1466.439009][   T30]  #2: ffffffff8fe3e568 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240
[ 1466.557408][   T30] 4 locks held by syz-executor/12506:
[ 1466.613363][   T30]  #0: ffff88806a584d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510
[ 1466.648190][   T30]  #1: ffff88806a584078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0
[ 1466.681531][   T30]  #2: ffffffff8fe3e568 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240
[ 1466.696099][   T30]  #3: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830
[ 1466.710506][   T30] 1 lock held by syz-executor/12554:
[ 1466.741144][   T30]  #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0
[ 1466.743061][ T5239] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 1466.750500][   T30] 1 lock held by syz-executor/13050:
[ 1466.775496][ T5239] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 1466.792445][ T5239] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 1466.841389][   T30]  #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[ 1466.850654][ T5239] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 1466.906119][ T5239] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[ 1466.910466][   T30] 1 lock held by syz-executor/13098:
[ 1466.921806][ T5239] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2