last executing test programs:

2m42.43647854s ago: executing program 0 (id=61):
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x9, &(0x7f0000000040)=0x440, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
sendmsg$NL80211_CMD_GET_SCAN(r4, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x48000)

2m41.073072305s ago: executing program 0 (id=65):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socket$inet6(0xa, 0x80002, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00'})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100)
getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8)

2m39.77145718s ago: executing program 0 (id=70):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000280)="240000001a005f0014f9e407000904000a00000074000000000e000008001b0001000000", 0x24)

2m38.721077027s ago: executing program 0 (id=74):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3}, 0x20)

2m36.639253809s ago: executing program 0 (id=77):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./bus\x00', 0x3810888, &(0x7f0000000300)=ANY=[@ANYBLOB="646973636172643d3078303030303030303030303030303030342c71756f74612c6572726f72733d636f6e74696e75652c646973636172643d3078303030303030303030303030303030342c756d61736b3d303030372c75737271756f74612c6572726f72733d72656d6f756e742d726f006e6f646973636172642c726573697a653d3078303030303030303030303031303030302c756d61736b3d3078301030303030303030303030303030322c71756f74612c67695b3d00"/199, @ANYRESHEX=0x0, @ANYBLOB=',resize=0x0000000000008045,resize,uid>', @ANYRESDEC, @ANYBLOB=',fsmagic=0x00000000000003ff,fscontext=sysadm_u,smackfsroot=,\x00'], 0x1, 0x624e, &(0x7f000000ef40)="$eJzs3c1vHGcdB/DfvvqlNLV6qEqEkJsWaClN4qSEQIE2Bzhw6QHlihK5bhWRAkoCSitLceULB078BSAkuCHEEXHgitQDV26cOBHJRgL1xKCxnyee3exm7dreWXs+H8mZ+c0z633G3519yczsEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAfO+7319pRcSNn6UFSxGfiU5EO2KhrJcjYmF5Ka/fjYjnY6c5nouI3lxEefudf56JeD0iPj4TsbW9vlouvrTPfnznD3//zQ+eevtvv+9d+O8f73XeGLfe/fu/+M+fHhxumwEAAKBpiqIoWulj/tn0+b5dd6cAgKnIr/9Fkpef+vqX/3z7z7PUH7VarVarp1BXFaM9qBYRsVG9TfmeweF4ADhhNuKTurtAjeTfaN2IeKruTgAzrVV3BzgWW9vrq62Ub6v6erC8257PBRnIf6P16PqOcdNJhs8xmdbjazM68eyY/ixMqQ+zJOffHs7/xm57P6133PlPy7j8+7uXPjVOzr8znP+Q05N/e2T+TZXz7x4o/478AQAAAABghuX//1+q+fjv3OE3ZV+edPx3eUp9AAAAAAAAAICjdtjx/x4x/h8AAADMrPKzeulXZ/aWjfsutnL59VbE00PrAw2TLpZZrLsfAAAAAAAAAAAAANAk3d1zeK+3InoR8fTiYlEU5U/VcH1Qh739Sdf07Ycmq/tJHgAAdn18Zuha/lbEfERcT9/111tcXCyK+YXFYrFYmMvvZ/tz88VC5XNtnpbL5vr7eEPc7RflL5uv3K5q0uflSe3Dv6+8r37R2UfHjkgv/TXHNNcUNgAku69GW16RTpmieGbcmw8YYP8/hZZiqe7HFbOv7ocpAAAAcPyKoiha6eu8z6Zj/u26OwUATEV+/R8+LnCouj2mPeJofr9arVar1epPVVcVoz2oFhGxUb1N+Z7BcPwAcMJsxCd1d4Eayb/RuhHxfN2dAGZaq+4OcCy2ttdXWynfVvX1II3vns8FGch/o7Vzu3z7UdNJhs8xmdbjazM68eyY/jw3pT7Mkpx/ezj/G7vt/bTecec/LePy7+9cMtc8Of/OcP5DTk/+7ZH5N1XOv3ug/DvyBwAAAACAGZb//3/J8d+8yQAAAAAAAABw4mxtr6/m617z8f/PjVjP9Z+nU86/ddD8F9K8/E+0nH97KP+Xh9brVOYfXtvb//+9vb7623v/+mye7jf/uTzTSo+sVnpEtNI9tbppepite9xmr9Mv76nXane66Zyfovdu3IrbsRYXB9Ztp7/HXvvKQHvZ095A+6WB9u5j7ZcH2nvpeweKhdx+Plbjx3E73tlpL9vmJmz//IT2YkJ7zr/j+b+Rcv7dyk+Z/2Jqbw1NSw8/aj+231eno+7nrVuf//nF49+ciTaj82jbqsrtO1dDf3b+Jk/146d31+6cv3/z3r07K5EmA0svRZocsZx/b+dnbu/5/8Xd9vy8X91fH37UP3D+s2IzumPzf7EyX27vK1PuWx1y/v30k/N/J7WP3v8PlP/v/vrytSltzWRP2v9fraE/AAAAAAAAAAAAAAAA8CRFUexcIvpWRFxJ1//UdW0mADBd+fW/SPJytVqtVqvVp6+uKkZ7s1pExF8e3WBu1G8BAE6A/0XEP+ruBLWRf4Pl7/srpy/V3Rlgqu5+8OEPb96+vXbnbt09AQAAAAAAAAA+rTz+53Jl/OeXImJpaL2B8V+vxfJhx3/t5plHA4we8UDfY2y2+512ZbjxF2JnfO7z48b/PhePj/+dx8TtVLdjjN6E9v6E9kmXWMyPXLqX1sgLPSpy/i9Uxjsv8z87NPz6IcZ/nSlPGv91eMz7Jsj5n6s8nsv8vzS0XjX/4tczl//GflfcjPZA/hfuvf+TC3c/+PC1W+/ffG/tvbUfXV5ZuXj5ypWrV69eePfW7bWLu/8eT69nQM4/j33tPNBmyfnnzOXfLDn/L6Ra/s2S8/9iquXfLDn//H5P/s2S88+ffeTfLDn/V1It/2bJ+X851fJvlq3t9bky/1dTLf9myfv/V1It/2bJ+b+Wavk3S87/fKrl3yw5/wup3kf+vh7+FMn55yNc9v9myfmvpFr+zZLzv5Rq+TdLzv9yquXfLDn/11Mt/2bJ+X811fJvlpz/lVTLv1ly/l9L9T7zn3TaMydEzv9qqu3/zZLz/3qq5d8sOf9vpFr+zZLzfyPV8m+WnP83Uy3/Zsn5fyvV8m+WnP+3Uy3/Zsn5v5lq+TfL3vf/mzFjxkyeqfuZCQAAAAAAAAAAAAAYNo3TieveRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7PDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1Eaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwd68xcp31/cDP7M1rhxADITj5G7J2jDHOkl1f4gv/upgQIE2gNFdIL7Fd79pZ8C1euyRpVJsGSiScFlVUpC/aAoraSFWFW/GCVinNi6qXV037gr6pqCohNapMFFCR2opmq5nzPM/OzM7O7Honu7PnfD6S/dudOWfOM2eec3Z+a3/nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9TZ9aPKLlSzLqn9qf63PsjdVv147sr522/tXeoQAAADAUv1v7e/Xrks3HFzASnXL/O27/uFbMzMzM9mn+n9n8CszM+mOkSwbXJNltfuiy//2cKV+meDpbLjSV/d9X4fN93e4f6DD/YMd7h/qcP+aDvcPd7h/zg6YY23++5jag22pfbk+36XZ9dlg7b4tLdZ6urKmry/+LqemUltnZvBYNpWdyCaz8Ybl82UrteVf3FTd1l1Z3Fbf2tltbazOkB8+dTSOoRL28ZaGbc0+ZvSDD2YjP/rhU0f/8NyVG1vVjruh4fHycW7bXB3n58Mt+Vgr2Zq0T+I4++rGubHFa9LfMM5Kbb3q183jfG2B4+yfHeayan7Nh7O+2tcv1/bTQP2v9dJ+2hhu+69bsiy7ODvs5mXmbCvry9Y13NI3+/oM5zOy+hjVqfTWbGBR83TTAuZptU5saZynzcdEfP03hfUG5hlD/cv0g88NzXndFztPo+qznu9YaZ6D3T5WemUOxnnxcu1JP9NyDm4Jz/+prfPPwZZzp8UcTM+7bg5u7jQH+4b6a2NOL0Klts7sHNzRsHx/bUuVWn1la/s5OHbu5Jmx6SeefN/UySPHJ49Pntq1Y8f4rj179u3bN3Zs6sTkeP73Ve7t3rcu60vHwOaw7+Ix8J6mZeun6szXu3ccDrc5Dtc3Ldvt43Cg+clVlueAnDun82PjgepOH77Ul81zjNVen+1LPw7T8647DgfqjsOWP1NaHIcDCzgOq8uc2d70niVr/Z5loO5PqzG8UT8L1tfNweb3I81zsNvvR3plDg6HefEv2+f/WbAxjPeZ0cW+H+mfMwfT0w3nnuot6f3+8L5aaTUvb6recc1Qdn568uxtjx85d+7sjiyUZfG2urnSPF/X1T2nbM587Vv0fD049a5nbmpx+/qwr4bfV/1reN7XqrrM7tvav1a1n26t92fDrTuzULpsufdnq5/m1f2Zesk2+7O6zOfHlv5ePPWldeffwXnOv7Hvfz3fXnqop/sHB/Ljtz/tncGG83HjSzVQO3dVatt+bWxh5+PB8Ge5z8fXtzkfb2hattvn48HmJxfPx5VOv+1YmubXczjMkxPj7c/H1WU27FzsnBxoez6+JdRK2P/vDZ1C6ovq5s588zZta2BgMDyvgbiFxnm6q2H5wdCbVbf1ws6rm6fbbskfqz89u1nLNU9Hmpbt9jxN56v55mml02/frk7z6zkc5sX1u9rP0+oyL+1e+rlzbfyy7tw51GkODvYPVcc8mCZhfr6fWRvn4G3Z0ex0diKbqN07VJtPldq2Rm9f2BwcCn+W+1y5oc0c3Na0bLfnYPo5Nt/cqwzMffJd0Px6Dod58dzt7edgdZk793b3veu2cEtapu69a/Pv1+b7nddNTbvpjfydV3Wcf723/e9mq8uc2LfYPrP9fro13HJNi/3UfPzOd0xNZMuznzaEcV7ZN/9+qo6nusxX9i9wPh3MsuzCY3fUft8b/n3lz85/91sN/+7S6t90Ljx2x6vXHvubxYwfgNXv9bysy3/W1f3L1EL+/R8AAABYFWLf3xdqov8HAACAwoh9f/xf4Yn+HwAAAAoj9v0DoSYl6f833Hll6vULWUrmzwTx/rQb7s6XixnX8fD9yMys6u13PD/547+4sLBt92VZ9pO7f7Xl8hvujuPKjYRxXv5w4+1zV7ywoO0ffnB2ufr8+tfC48fns9Bp0CqCO55l2YvXPVvbzsjDl2r1pbsP1+p9F595urrMa/vz7+P6r7wtX/73Qvj34LEjDeu/EvbD90Mdv6f1/ojrffPSezfufWh2e3G9yuY31572c4/kjxs/J+fLT+fLx/083/j/8ksvfLO6/OPvbj3+C32tx/9CeNznQ/3vd+bL178G1e/jel8I44/bi+vd9o3vtBz/5S/my5/5SL7c4VDj9reF77d85MpU/f56vHKk4XllH82Xi9sf/+5v1e6Pjxcfv3n8w4cuNeyP5vnx0j/ljzPWtHy8PW4n+vOm7Vcfp35+xu2/8BuHG/Zzp+1fvu+Vd1Yft3n7tzYt19+0fvMnNv3+F55tub04noN/cqbh+Ry8NxzHYfvPPRLmY7j/fy4/27Dd6PC9jeefuPzX1l9oeD7RXT/Kt3/5A8dr9d9Hfvy717zp2jdfvLm677Ls5fvzx+u0/eN/cLph/F+/YXvt9Yj3x4x+8/bnE7d/9rOjp05Pn5+aqNurtc/O+Vg+njXDa9dVx3tdOLc2f3/o9LlHJ8+OjI+MZ9lIcT9C76p9I9RX83JxsetvfzC8njd99cV1W//xS/H2f34gv/3SPfnPrfeE5b4cbl+fv34zlSVu/7lNN9SO78pL+fcNOfYu2LjlP/YtaMHw/JvfF8T5fubtj9b2Q/W+2s+NeFwvcfzfm8gf59thv86ET2befMPs9uqXj5+NcOn+/Hhf8v4Lp7n4uv5ReL0//v388eO44vP9Xngf850Njee7OD++faGv+fFrn+JxMZxPsov5/XGpuL8vvXZDy+HFzyHJLt5Y+/630+PcuKinOZ/pJ6bHTkydOv/42LnJ6XNj0088eejk6fOnzh2qfZbnoU93Wn/2/LSudn6amNyzOxtfm2XZ6Wx8GU5Yb8z4q18tbPxnHjw6sXd868TksSPnj5178Mzk2eNHp6ePTk5Mbz1y7NjkZzutPzVxYMfO/bv27hw9PjVxYN/+/bv2j06dOl0dRj6oDvaMf2b01NlDtVWmD+zev+P223ePj548PTF5YO/4+Oj5TuvXfjaNVtf+ldGzkyeOnJs6OTk6PfXk5IEd+/fs2dnx0wBPnjk2PTJ29vypsfPTk2fH8ucycq52c/VnX6f1Kabpf83fzzar5B/El33i1j3p81mrnv/cvA+VL9L0AaJXwmfR/P1bzuxbyPex7x8MNSlJ/w8AAABlEPv+oVAT/T8AAAAURuz714Sa6P8BAACgMGLfPxxqUpL+X/5f/n9h+f/8fvn/cuX/zzyW50pXe/4/5ufl/8thhfP/S95+F/L/N7e7c5H5/9/8U/l/+f9lzM8vSd/Kj1/+X/6fuXot/x/7/rVZVsr+HwAAAMog9v3rQk30/wAAAFAYse+/JtRE/w8AAACFEfv+N4WalKT/l/9fUP5/Z6fAVfHz/67/L/+frc78f3xx5P9LY9H5+4ceaPi2APn/tlz/vwP5/9Wb/++B8cv/y//TbHDee1Yq/x/7/mtDTUrS/wMAAEAZxL7/zaEm+n8AAAAojNj3Xxdqov8HAACAwoh9//pQk5L0//L/rv8v/y//X+j8/1Kv/183GPn/1cH1/9uT/+/gqvP/w/L/qzH/P9jd8fd2/r/j8LuZ/x/K5P8Jeu36/7Hvf0uoSUn6fwAAACiD2Pe/NdRE/w8AAACFEfv+t4Wa6P8BAACgMGLff32oSUn6f/l/+X/5f/l/+f/W2+98/f/8K/n/3iL/3578fweu/1+u/H+Xx9/b+f9uX/9/8MPN67v+P630Wv4/9v1vDzUpSf8PAAAAZRD7/htCTfT/AAAAUBix739HqIn+HwAAAAoj9v0bQk1K0v/L/8v/y//L/8v/t95+5/x/Tv6/t8j/tyf/34H8v/y//P/C8v8t3vzK/9NKr+X/Y99/Y6hJSfp/AAAAKIPY998UaqL/BwAAgMKIff//CzXR/wMAAEBhxL5/Y6hJSfr/DXdeeeirta/k/zP5f/n/EuT/bx2S/5f/Lzb5//bk/zuQ/5f/l/9f4PX/51pM/n9NpwejMHot/x/7/neGmpSk/wcAAIAyiH3/u0JN9P8AAABQGLHvvznURP8PAAAAhRH7/pFQk9XX/3+y7ypWcv3/YuX///ivnrs5k/+X/++w/YLm/+M0kP8vOfn/9sqQ/68/J8n/L85K5+dX+/jl/13/n7l6Lf8f+/5NoSarr/8HAAAA5hH7/s2hJvp/AAAAKIzY998SaqL/BwAAgMKIff+WUJOS9P/y/8XK/0fy//L/7bZf0Px/Iv9fbvL/LdQdpKsk/z/i+v/y/6tx/MXI/8d3v/L/dEev5f9j3//uUJOS9P8AAABQBrHv3xpqov8HAACAwoh9/3tCTfT/AAAAUBix798WalKS/l/+X/5f/l/+f6Xy/0Py/2mvyv93j/x/e4vN/w+twuv/L2X78v/y//L/rv9Pd/Va/j/2/e8NNSlJ/w8AAABlEPv+7aEm+n8AAAAojPj/N/P/96r/BwAAgCKKff9oqElJ+v8l5P9n+uX/E/n/xvH3av6/Iv/fU/l/1/+f3avy/90j/9/eKrn+v/x/D+X/q7fL/8v/y/9ztXot/x/7/veFmpSk/wcAAIAyiH3/baEm+n8AAAAojNj3j4Wa6P8BAACgMGLfPx5qUpL+3/X/S5f/X1Pm/L/r/8v/y/8Xn/x/e/L/Hcj/u/5/0fL/WSb/z4rqtfx/7Pt3hJqUpP8HAACAMoh9/85QE/0/AAAAFEbs+3eFmuj/AQAAoDBi37871KQk/b/8f+ny/6W+/r/8v/y//H/xyf+3J//fgfy//H/R8v+u/88K67X8f+z7bw81KUn/DwAAAGUQ+/49oSb6fwAAACiM2PfvDTUJ/X+r/9cNAAAArC6x798XalKSf/+X/y9I/v/X/65h2/L/8v/ttt+d/P9a+f9Q5f97S0Hz/82HxVWT/+9A/l/+X/5f/p+u6rX8f+z794ealKT/BwAAgDKIff/7Q030/wAAAFAYse///6Em+n8AAAAojNj3/1SoSUn6f/n/guT/m8j/y/+3277r/8v/F1lB8/9dU6j8f5/8v/x/b41f/l/+n7ne+Px//Gph+f/Y9x8INSlJ/w8AAABlEPv+nw410f8DAABAYcS+/wOhJvp/AAAAKIzY9x8MNSlJ/y//L/8v/y///8bk/z+QNevF/H918ixb/n9Q/n85yP+3V6j8v+v/y//32Pjl/+X/mavXrv8f+/4PhpqUpP8HAACAMoh9/x2hJvp/AAAAKIzY938o1ET/DwAAAIUR+/47Q01K0v/L/8v/y//L/7v+f+vtu/7/6iT/3578fwfy//L/8v/y/3RVr+X/Y9//4VCTkvT/AAAAUAax7/9IqIn+HwAAAAoj9v0fDTXR/wMAAEBhxL7/rlCTkvT/8v/y//L/8v/y/623L/+/Osn/tyf/34H8v/y//L/8P13Va/n/2Pf/TKhJSfp/AAAAKIPY998daqL/BwAAgMKIff89oSb6fwAAACiM2Pd/LNSkJP2//L/8v/y//L/8f+vty/+vTvL/7cn/dyD/L/8v/y//T1f1Wv4/9v0fDzUpSf8PAAAAZRD7/p8NNdH/AwAAQGHEvv8ToSb6fwAAACiM2Pf/XKhJSfp/+X/5/97K/89cqF9P/l/+P+tW/r+6kvx/Kcj/tyf/30GL/P8a+X/5f/l/+X+uWq/l/2Pff2+oSUn6fwAAACiD2PffF2qi/wcAAIDCiH3//aEm+n8AAAAojNj3PxBqUpL+X/6/lPn/9JR7L//v+v/y/67/L/+/NPL/7cn/d+D6//L/8v/y/3RVr+X/Y9//YKhJSfp/AAAAKIPY9z8UaqL/BwAAgMKIff8nQ030/wAAAFAYse//VKhJSfp/+f9S5v97+Pr/K5f/rz6H7uf/BxrmR5ny/8N1r2eal/L/8v/LQP6/Pfn/DuT/Q34+65P/78H8f5jNa+dZX/6fXtRr+f/Y9z8calKS/h8AAADKIPb9Px9qov8HAACAwoh9/y+Emuj/AQAAoDBi3/+LoSYl6f/l/+X/5f9d/9/1/1tvX/5/dZL/b0/+v4MS5v9/re7rlc7PL9VKj9/1/+X/mavX8v+x7/+lUJN5G79X/3MBTxMAAADoIbHvfyTUpCT//g8AAABlEPv+Q6Em+n8AAAAojNj3Hw41KUn/L//fnP+PV1SV/5f/X3X5/wH5/5z8f7l1L///jmuzTP5f/r/4+f96K52fX+3jl/+X/2euXsv/x77/SKhJSfp/AAAAKIPY9/9yqIn+HwAAAAoj9v1HQ030/wAAAFAYse+fCDUpSf8v/+/6/93K//9E/n+l8/+u/x/I/5eb6/+3J//fgfy//L/8v/w/XdVr+f/Y90+GmpSk/wcAAIACS78Ojn3/sVAT/T8AAAAURuz7j4ea6P8BAACgMGLf/2ioSUn6f/l/+X/X/1+J/P9Aw/Ly/7mey/8PN45D/n91kP9vb+n5//z8Jf8v/9+K/L/8v/w/zXot/x/7/qlQk5L0/wAAAFAGse//dKiJ/h8AAAAKI/b9nwk10f8DAABAYcS+/0SoSUn6f/l/+f+y5/8rWXbR9f/l/1tt3/X//4+9+3iu6zzvOH5EsQBZJPoTss4qy2SlbLLPNrvMZK1UuRdK7t2Wqyx3ufde5SL33rvlIvde5Sp7hh6Bz/OQAC7OBYlD3HPe9/PZPCYjChcSk8zPnO+8y6T/H+f9/zX0//p//b/+n0nNrf/P3X9d3NLJ/gcAAIAe5O7/r7jF/gcAAIBm5O7/77jF/gcAAIBm5O7/n7ilk/2v/9f/997/Dxt5/3/3X6//P0//r/+fwr7+/uSl/foD+/9//Kfr/0P/r//X/4/S/+v/9f/sNbf+P3f//8Ytnex/AAAA6EHu/v+LW+x/AAAAaEbu/v+PW+x/AAAAaEbu/uvjlk72v/5f/99H/39y0P8fsv+/Xf+v/1827/+P0/+vof/X/+v/9f9Mam79f+7+e8Utnex/AAAA6EHu/nvHLfY/AAAANCN3/33iFvsfAAAAmpG7/75xSyf7X/+v/++j/2/h/f/T3v/f8/3o//X/q+j/x+n/19D/6//1//p/JjW3/j93//3ilk72PwAAAPQgd//94xb7HwAAAJqRu/8BcYv9DwAAAM3I3f/AuKWT/a//1//r/5fS/x/T+//6f/3/wt06XPi/Cfr//fT/a6zp/4dB/z/m0P386m9vOZ//APp//T/7za3/z93/oLjlX4bh9OV+kwAAAMCs5O5/cNzSyZ//AwAAQA9y95+NW+x/AAAAaEbu/hvilk72v/5f/6//1//r/1d/ff3/Mh2uvz9z4K/X/4cD+/9/uOa6/+y3//f+/zjv/+v/9f/sNbf+P3f/jXFLJ/sfAAAAepC7/yFxi/0PAAAAzcjd/9C4xf4HAACAZuTuf1jc0sn+1/+31v9fvevXXdT/79Qu+n/9/1T9/81bF/596f/1/3Ny1P5e/x+6fv9/u36o/9f/6//1/xzN3Pr/3P0Pj1s62f8AAADQg9z9j4hb7H8AAABoRu7+R8Yt9j8AAAA0I3f/o+KWTvb/ovr/c1fr/73/r/+fSf8/eP9f/z9T+v9x+v81Wnn//zJ/12y6nz+qTX9+/b/+n/3m1v/n7n903NLJ/gcAAIAe5O5/TNxi/wMAAEAzcvc/Nm6x/wEAAKAZufsfF7d0sv8X1f97/7/j/j+/gv5f/3/l+/+k/18m/f84/f8arfT/l2nT/fzSP7/+X//PfnPr/3P3Pz5u6WT/AwAAQA9y9z8hbrH/AQAAoBm5+58Yt9j/AAAA0Izc/U+KWzrZ//p//f8y+n/v/+v/vf+v/z8c/f84/f8a+n/9v/5f/8+k5tb/5+6/KW7pZP8DAABAD3L3Pzlusf8BAACgGbn7nxK32P8AAADQjNz9T41bOtn/+n/9v/5f/6//X/319f/LpP8fp/9fQ/+v/9f/6/+Z1Iz6/4t+1dbwtLilk/0PAAAAPcjd//S4xf4HAACAZuTuf0bcYv8DAABAM3L33xy3dLL/9f+z6f93cr62+v/tYRguu///V/3/svv/7Yv+fdbvS/2//v8Y6P/H6f/X0P/r//X/+n8mNaP+f+fHufufGbd0sv8BAACgB7n7b4lb7H8AAABoRu7+Z8Ut9j8AAAA0I3f/s+OWTva//n82/f+Otvp/7//v/f3RU//v/f/99P/HQ/8/Tv+/hv5f/6//1/8zqbn1/7n7nxM3nT512d8iAAAAMDO5+58bt3Ty5/8AAADQg9z9z4tb7H8AAABYqJv2/Uzu/ufHLZ3sf/3/tP3/6Yt+Tv+v/9/7+2O+/f9Vuypl/f95+v9l0v+P0/+vof/X/+v/9f9Mam79f+7+F8Qtnex/AAAA6EHu/lvjFvsfAAAAFuK2v133V+Tuf2HcYv8DAABAM3L3vyhu6WT/6/+9/6//1/97/3/119f/L5P+f5z+fw39v/5/s/3/mQv/Uf9PGy6h/z937tzZK97/5+5/cdzSyf4HAACAHuTuf0ncYv8DAABAM3L3vzRusf8BAACgGbn7Xxa3dLL/9f9Xov8/XyvOuv/P3+rL6v9vGIa59/9n9f/6/wPp/4+H/n+c/n8N/b/+3/v/+n8mNbf3/3P3vzxu6WT/AwAAQA9y978ibrH/AQAAoBm5+18Zt9j/AAAA0Izc/a+KWzrZ//p/7/8vqP/3/r/+f9f3s7D+/+5B/38sFtH/bx/89efe/9+o/9f/j+iu//+3f971Q/2//p/95tb/5+5/ddzSyf4HAACAHuTuf03cYv8DAABAM3L3vzZusf8BAACgGbn7Xxc3nexk/+v/9f/6f/2//n/11z/m9/9PD8Og/5/AIvr/EXPv/73/r/8f013/v4f+X//PfnPr/3P3vz5u6WT/AwAAQA9y978hbrH/AQAAoBm5+98Yt9j/AAAA0Izc/W+KWzrZ//p//b/+X//ffP9/4yL6f+//T0T/P07/v4b+X/+v/9f/cyw21f/n7n9z3NLJ/gcAAIAe5O5/S9xi/wMAAEAzcve/NW6x/wEAAKAZufvfFrd0sv/1//r/S+n/83Pq/9vq/8/Mrv/f2vX36+T9f/3/RPT/4/T/a+j/9f/6/5v0/0xpbu//5+5/e9zSyf4HAACAHuTuf0fc+q9u7X8AAABoRu7+2+IW+x8AAACakbv/nXFLJ/tf/6//9/6//r/59//1/13R/4/T/6+h/9f/6/+9/8+k5tb/5+5/V9zSyf4HAACAHuTuf3fcYv8DAABAM3L3vydusf8BAACgGbn7b49bOtn/+n/9v/5f/6//P//vUP/fBv3/uOPp/7f1//r/6ueviv8t0P/r/9f9eto0t/4/d/9745ZO9j8AAAD0IHf/++IW+x8AAACakbv//XGL/Q8AAACLdHLFz+Xu/0Dc0sn+1//r//X/+n/9/+qvr/9fJv3/OO//H+Rvbrn4R/r/w/bzf7/rR0t7/3/v///S/+v/md7c+v/c/R+MWzrZ/wAAANCD3P0filvsfwAAAGhG7v4Pxy32PwAAADQjd/9H4pZO9r/+X//fTP9/z4fQ/+v/9f/dW1D/v7XqJxfb/58ehmHR/X/o7f3/M7t/uOn3849q059f/6//Z7+59f+5+z8at3Sy/wEAAKAHufs/FrfY/wAAANCM3P0fj1vsfwAAAGjGzu7PuKzD/a//31j/v/P31/97/1//r//X/09rQf3/Sovt/xf//n/orf/fY9P9/NI/v/5f/89+c+v/P7Hzq7aGT8Ytnex/AAAA6EHu/k/FLfY/AAAANCN3/6fjFvsfAAAAmpG7/zNxSyf7X//v/f9l9P/nzp07q//X/+/+fi70/3fq/yn6/3H6/zX0//p//b/+n0nNrf/P3f/ZuKWT/Q8AAAA9yN3/ubjF/gcAAIBm5O7/fNxi/wMAAEAzcvefiFs62f/6/xn0/1v6f+//6/8H7//r/yei/19tO67+f40W+/+tw3/7m+7nj2rTn1//r/9nv7n1/1/Y+VVbwxfjlk72PwAAAPQgd/+X4pZ9+/+OY/xUAAAAwJRy9385bvHn/wAAANCM3P1fiVs62f/6/+Pr/+/5Z9fL+//bw+rPr//X/+v/9f9Xmv5/nP5/jRb7/0uw6X5+6Z9f/6//Z7+59f+5+78at+wefqcu7bsEAAAA5iR3/9filk7+/B8AAAB6kLv/jrjF/gcAAIBm5O7/etzSyf7X/8/g/f8G+//jef9/S/+v/5+y/z+h/2+D/n+c/n8N/b/+X/8/Uf+fv5v1/72bW/+fu/8bcUsn+x8AAAB6kLv/m3GL/Q8AAADNyN3/rbjF/gcAAIBm5O6/M265aP+vartbof/X/y+3/9/Q+/+n9f+psf7f+/+NaLv/3zrE32F79H962P7/zHC0/j/p//X/+v9e+3/v/3Pe3Pr/3P3fjlv8+T8AAAAszqkDfj53/3fiFvsfAAAAmpG7/7txi/0PAAAAzcjd/7245a4Tm/pIx0r/r//X/3v/X/+/+uvr/5ep7f7/6Lz/v4b+f4p+/lr9fxv9/zDo/zm6ufX/ufu/H7f4838AAABoRu7+H8Qt9j8AAAA0I3f/D+MW+x8AAACakbv/R3FLJ/tf/6//P2L/v5NmHqr/H64ZhgX2/9uD/l//f57+fxn0/+P0/2vo/73/r//3/j+Tmlv/n7v/x3FLJ/sfAAAAepC7/ydxi/0PAAAAzcjd/9O4xf4HAACAZuTu/1nc0sn+31j/H/+o9f+b7f9PeP9/h/f/9f+rvr7+f5n0/+P0/2vo//X/+n/9P5OaW/+fu//ncUsn+x8AAAB6kLv/F3GL/Q8AAADNyN3/y7jF/gcAAIBm5O7/VdzSyf73/n+X/f+p/LYneP9f/6//1//r/2dF/z9O/79a/YvS/+v/9f/6fyY1t/4/d/+v45ZO9j8AAAD0IHf/b+IW+x8AAACakbv/rrjF/gcAAIBm5O7/bdzSyf7X/3fZ/9f7/3Pu/+/5z7cPw6D/1//r//X/l0L/P26T/f+//936L+v9/433//kR9P/6f/0/k5hb/5+7/3dxSyf7HwAAAHqQu//3cYv9DwAAAM3I3f+HuMX+BwAAgGbk7v9j3NLJ/l/T/5+pv1D/P0r/v/vzb+z9//wg+v/Rr6//1/+3TP8/zvv/a+j/vf+v/9f/M6m59f+5+/8Ut3Sy/wEAAKAHufvvjlvsfwAAAGhG7v4/xy32PwAAADQjd/9f4pZO9r/3/5fU/1+r//f+v/5f/6//X0P/P07/v4b+X/+v/9f/M6m59f+5+/8aAAD//66mQrs=")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

2m34.423756011s ago: executing program 0 (id=85):
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4a181, 0x0)
r0 = socket$inet(0xa, 0x801, 0x84)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0})
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)

2m18.756571375s ago: executing program 32 (id=85):
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4a181, 0x0)
r0 = socket$inet(0xa, 0x801, 0x84)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0})
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)

2m18.721453815s ago: executing program 2 (id=119):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xfffffffffffffdf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2m18.443671484s ago: executing program 2 (id=122):
mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCDELRT(r3, 0x891e, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0xe)
ioctl$TIOCSTI(r4, 0x5412, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000840)={'team0\x00', <r6=>0x0})
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0xf010004, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x0, '\x00', @value64=0xfffffffffffffffe}})
sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200001d08000100", @ANYRES32=r6, @ANYBLOB="04000280"], 0x20}}, 0x0)

2m14.851142452s ago: executing program 2 (id=126):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r3 = socket(0x28, 0x5, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010101, 0x4e23, 0x3, 'sh\x00', 0x1, 0x7, 0x49}, 0x2c)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x2, 0x81, 0x37}, {@rand_addr=0x64010102, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44)
listen(r3, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x24008094)

2m13.495659637s ago: executing program 2 (id=129):
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0)
sendfile(r6, 0xffffffffffffffff, 0x0, 0x9c)

2m12.291277112s ago: executing program 2 (id=130):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000007a80), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
io_uring_setup(0xefe, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000000000007"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000001240)=ANY=[@ANYBLOB="01000000000000003b"])

2m11.837582381s ago: executing program 2 (id=134):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r3=>0x0})
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x0, {0x0, 0x0, 0x3}}, 0x18)
connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6}, 0x18)
bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3}, 0x18)
sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r7, {0x6, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

1m56.669015177s ago: executing program 33 (id=134):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r3=>0x0})
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x0, {0x0, 0x0, 0x3}}, 0x18)
connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6}, 0x18)
bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3}, 0x18)
sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r7, {0x6, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

1m4.141254649s ago: executing program 3 (id=237):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = socket(0x80000000000000a, 0x2, 0x0)
close(r1)
socket$inet(0x2, 0xa, 0x9)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x9, 0x6d2, &(0x7f00000004c0)="$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")

1m3.048250705s ago: executing program 3 (id=238):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./bus\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x278, &(0x7f0000000200)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='ext4_get_implied_cluster_alloc_exit\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200000000622c, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'})
rename(&(0x7f00000002c0)='./file2\x00', &(0x7f0000000340)='./bus\x00')
sendmmsg(r0, &(0x7f0000003f80)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x6, @local, 0x7, 0x3}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000200)="733aea64aad81c33715850f99efd766bbd784757588591e8de967e154cb50b5e030ba6d5c0a4a720a9096ada6bda510af6c3136e858476f911c050ffd8fb4b", 0x3f}, {0x0}, {0x0}], 0x3, &(0x7f0000000680)}}], 0x1, 0x20004084)

1m0.667418917s ago: executing program 3 (id=240):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
socket$alg(0x26, 0x5, 0x0)
request_key(&(0x7f0000000400)='dns_resolver\x00', 0x0, 0x0, 0x0)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r3, 0x5412, 0x0)

59.367774482s ago: executing program 3 (id=242):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)={0x28, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4014000}, 0x9590f6cc3ea35512)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r0)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001f00)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000100)={0x2c, r4, 0xc01, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x12}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8}, 0x0)

58.267303808s ago: executing program 3 (id=245):
syz_mount_image$jfs(&(0x7f0000005dc0), &(0x7f0000005e00)='./file1\x00', 0x208000, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"], 0x1, 0x5e62, &(0x7f0000011a80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES8=0x0, @ANYRES64], 0xb, 0x0, &(0x7f0000000000))
rename(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

54.023701183s ago: executing program 3 (id=251):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x2)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r3, &(0x7f0000000c80)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',\x00', 0x2}], 0x1}}], 0x1, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1)

38.000199086s ago: executing program 34 (id=251):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x2)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r3, &(0x7f0000000c80)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',\x00', 0x2}], 0x1}}], 0x1, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1)

29.935178457s ago: executing program 5 (id=117):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_emit_ethernet(0x62, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r0 = getpid()
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000854}, 0x0)

24.815723699s ago: executing program 5 (id=292):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000640)={[{@jqfmt_vfsv1}, {@resgid}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@orlov}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000002c0)='2', 0x1, 0x8080c61)
mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r1, &(0x7f0000000280), 0x208e24b)
fallocate(r0, 0x3, 0x5000000, 0x8000c62)

21.843932798s ago: executing program 5 (id=297):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0)
r1 = socket(0x2a, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r2}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='cifs\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x283, 0x0)
rt_sigtimedwait(&(0x7f00000002c0)={[0x400]}, 0x0, &(0x7f0000000380), 0x8)
unshare(0x22040380)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02c9300c00f9ff0400060504000300030028bc03cd95dfa220da83cdd9d5eece"], 0x11)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5)
setuid(0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl(r5, 0x8b29, &(0x7f0000000040))
syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000400)={0x980900, 0x4003, @name="b6ae8e0f0376fa7d4eac0abd15418b9c7d97029e735ede962403968545b1c117"})

21.207853906s ago: executing program 5 (id=301):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x10, 0x0, 0x0, 0x0, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x0, 0x0, @multicast1, @remote, {[@noop, @noop, @lsrr={0x83, 0x3, 0x42}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000040)="660f38802936660f388052002e0f08f26f660f5c2fe3060f3066ba200066edc7442400c1000000c74424020f000000c7442406000000000f011424660fde7ca400", 0x41}], 0x1, 0xe, 0x0, 0x0)

20.551504054s ago: executing program 35 (id=301):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x10, 0x0, 0x0, 0x0, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x0, 0x0, @multicast1, @remote, {[@noop, @noop, @lsrr={0x83, 0x3, 0x42}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000040)="660f38802936660f388052002e0f08f26f660f5c2fe3060f3066ba200066edc7442400c1000000c74424020f000000c7442406000000000f011424660fde7ca400", 0x41}], 0x1, 0xe, 0x0, 0x0)

14.103503071s ago: executing program 1 (id=313):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4)
sendto$inet(r0, &(0x7f0000000180)='R', 0x1, 0x881, 0x0, 0x0)

13.87569962s ago: executing program 1 (id=314):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x101)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
accept4(r1, 0x0, 0x0, 0x0)

13.001536567s ago: executing program 1 (id=317):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0)
mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11.766166402s ago: executing program 6 (id=318):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={0x0, r1}, 0x18)
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
dup3(r8, r7, 0x0)
socket(0x1e, 0x4, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
io_cancel(0x0, 0x0, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, &(0x7f00000000c0)="cb2637d297e07de29921471a3e6d589b452c")
close_range(r0, 0xffffffffffffffff, 0x0)

10.444948288s ago: executing program 6 (id=320):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0)
r1 = socket(0x2a, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r2}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='cifs\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x283, 0x0)
rt_sigtimedwait(&(0x7f00000002c0)={[0x400]}, 0x0, &(0x7f0000000380), 0x8)
unshare(0x22040380)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02c9300c00f9ff0400060504000300030028bc03cd95dfa220da83cdd9d5eece"], 0x11)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5)
setuid(0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl(r5, 0x8b29, &(0x7f0000000040))
syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000400)={0x980900, 0x4003, @name="b6ae8e0f0376fa7d4eac0abd15418b9c7d97029e735ede962403968545b1c117"})

9.647100415s ago: executing program 4 (id=321):
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00')
syz_emit_ethernet(0x82, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @val={@val={0x88a8, 0x3, 0x1, 0x1}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "0961d3", 0x44, 0x2f, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x1, {{0x6, 0x1, 0x8, 0x3, 0x0, 0x0, 0x3, 0x2}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x4, {{0x1, 0x2, 0x1, 0x3, 0x1, 0x3, 0x7, 0x6}, 0x2, {0x9, 0xe, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1}}}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)

9.354749284s ago: executing program 1 (id=322):
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x9, &(0x7f0000000040)=0x440, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
sendmsg$NL80211_CMD_GET_SCAN(r3, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)

8.424964041s ago: executing program 4 (id=323):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f00000000c0)=ANY=[], 0x0)

6.331510793s ago: executing program 6 (id=324):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, &(0x7f0000000540)={0x1, @sliced={0x0, [0x12a9, 0x400, 0xea, 0x8, 0xffff, 0x3, 0x6, 0x8, 0x83, 0x1, 0xe3c7, 0x5, 0x6, 0x8, 0x9, 0x200, 0xa, 0x9, 0x5, 0x3, 0x1ff, 0xad3f, 0x5, 0x4, 0x0, 0x7, 0x6, 0x8, 0x101, 0x515, 0x7, 0x2, 0x5, 0x9, 0x2, 0xfc00, 0x10, 0xfff, 0x9, 0x23, 0x38, 0x4, 0xfff4, 0x675, 0xa, 0x6, 0x800, 0x8], 0x3}})
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000040)={{@host, 0xfffffffd}, @host, 0x0, 0xf, 0x4, 0xfffffffffffffffd})
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x13, &(0x7f0000000380)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, &(0x7f0000000180)={{@host}, 0x400, 0x8f, 0x2, 0x4})
syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5c, 0x80, 0x0, 0x89}, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000002000010300000000fbdbdd2502200000000000000000000008000100000000"], 0x2c}}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10)

6.329504403s ago: executing program 1 (id=325):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0x1b34, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)

6.224269363s ago: executing program 4 (id=326):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdir(0x0, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer1\x00'})
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"})

5.116681869s ago: executing program 6 (id=327):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socket$inet6(0xa, 0x80002, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00'})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100)
getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8)

3.591239243s ago: executing program 6 (id=328):
openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000000c0)={0x1d, 0x5, 0x14, 0x18, 0x5, 0xb7, 0x1, 0xf5, 0x1})

3.226583262s ago: executing program 4 (id=329):
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000540)='./file6\x00', 0x201080b, &(0x7f0000000640)=ANY=[], 0x21, 0x1cd, &(0x7f0000000280)="$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")
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r3=>0x0})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x6c4aa10f8d5688f3, &(0x7f00000002c0)=ANY=[@ANYRES16], &(0x7f0000000100)='GPL\x00', 0x80000001, 0x0, 0x0, 0x0, 0x2, '\x00', r3, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000004c0)='sched_switch\x00', r4}, 0x18)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80, 0x81)
io_uring_setup(0x26cb, &(0x7f0000000200)={0x0, 0x0, 0x4, 0x2, 0x66})
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x3a, 0x5, 0x0, 0x0, 0x7, 0x0, 0x3, 0xfc, 0x3, 0xfc, 0x0, 0x1, 0x0, 0xff, 0x0, 0x1045}})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1900000000020000040000000700000000000000", @ANYRES32=0x1, @ANYBLOB="14000000009d000000000000000000000000000000763b1ba2f74fd883a92bcc6927c5bf54fcf735881d00bd8a0c9e0e30e080cbe0b85ce339b2cb9bf0a84de7cef71428bb1415d4a1edf2a339aeeb2e8c5aec40e038cca47056a84c21672d06fab5814949f75afd39e97732c3a2d7efe145d5b4114d6c4254b2925b3dcc5e4e0169310e3d6c40c0782883c6ffe9c6e8226a929052c9f43f15a62db7ef6c9e75479adf6115d4dc5eebc1cabe67de6985589e223b5a8130f85b5dc6a25aceb221b1986ad29eee", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r6, &(0x7f0000000300), 0x20000000}, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
epoll_create(0x6)
syz_open_procfs(0x0, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))

2.877596991s ago: executing program 6 (id=330):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0)
mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000000000000085"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.391771759s ago: executing program 4 (id=331):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./bus\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x278, &(0x7f0000000200)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='ext4_get_implied_cluster_alloc_exit\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200000000622c, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'vcan0\x00'})
rename(&(0x7f00000002c0)='./file2\x00', &(0x7f0000000340)='./bus\x00')
sendmmsg(r0, &(0x7f0000003f80)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x6, @local, 0x7, 0x3}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000200)="733aea64aad81c33715850f99efd766bbd784757588591e8de967e154cb50b5e030ba6d5c0a4a720a9096ada6bda510af6c3136e858476f911c050ffd8fb4b", 0x3f}, {0x0}, {0x0}], 0x3, &(0x7f0000000680)}}], 0x1, 0x20004084)

2.176265808s ago: executing program 7 (id=273):
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0)
r6 = openat$cgroup_ro(r4, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x9c)

277.068071ms ago: executing program 7 (id=332):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0)
r1 = socket(0x2a, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r2}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='cifs\x00', 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x283, 0x0)
rt_sigtimedwait(&(0x7f00000002c0)={[0x400]}, 0x0, &(0x7f0000000380), 0x8)
unshare(0x22040380)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02c9300c00f9ff0400060504000300030028bc03cd95dfa220da83cdd9d5eece"], 0x11)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5)
setuid(0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl(r5, 0x8b29, &(0x7f0000000040))
syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000400)={0x980900, 0x4003, @name="b6ae8e0f0376fa7d4eac0abd15418b9c7d97029e735ede962403968545b1c117"})

83.41513ms ago: executing program 1 (id=333):
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x9, &(0x7f0000000040)=0x440, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00'})
sendmsg$NL80211_CMD_GET_SCAN(r3, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)

0s ago: executing program 4 (id=334):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file6\x00', 0x4, &(0x7f0000000000)=ANY=[], 0xfe, 0x19b, &(0x7f0000000c40)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000002080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000001180)='./bus\x00')
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
ftruncate(r4, 0xc17a)
write$FUSE_GETXATTR(r4, &(0x7f0000000040)={0x18, 0xfffffffffffffffe, 0x0, {0x3}}, 0x18)
r5 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r5, &(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e)
listen(r5, 0x0)
io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

mber 2
[  100.614242][ T4517] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.622485][ T4517] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.636560][ T4518] device bridge_slave_1 left promiscuous mode
[  100.644231][ T4518] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.653954][  T129] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  100.938167][ T4518] device bridge_slave_0 left promiscuous mode
[  100.944798][ T4518] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.128639][ T4525] loop3: detected capacity change from 0 to 256
[  101.266071][  T129] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.350523][ T4525] FAT-fs (loop3): Directory bread(block 64) failed
[  101.358203][ T4525] FAT-fs (loop3): Directory bread(block 65) failed
[  101.365191][ T4525] FAT-fs (loop3): Directory bread(block 66) failed
[  101.372157][ T4525] FAT-fs (loop3): Directory bread(block 67) failed
[  101.379178][ T4525] FAT-fs (loop3): Directory bread(block 68) failed
[  101.385831][ T4525] FAT-fs (loop3): Directory bread(block 69) failed
[  101.392801][ T4525] FAT-fs (loop3): Directory bread(block 70) failed
[  101.399492][ T4525] FAT-fs (loop3): Directory bread(block 71) failed
[  101.406591][ T4525] FAT-fs (loop3): Directory bread(block 72) failed
[  101.413368][ T4525] FAT-fs (loop3): Directory bread(block 73) failed
[  101.653163][ T4523] Cannot find add_set index 0 as target
[  101.857770][  T129] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.870265][  T129] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  101.881423][  T129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.965968][  T129] usb 1-1: config 0 descriptor??
[  102.004644][ T4523] IPVS: Error connecting to the multicast addr
[  103.448269][ T4261] Bluetooth: hci4: command 0x0405 tx timeout
[  103.698365][  T129] usb 1-1: can't set config #0, error -71
[  103.709439][ T4359] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  103.737722][  T129] usb 1-1: USB disconnect, device number 3
[  103.824654][ T4534] loop0: detected capacity change from 0 to 1024
[  104.073811][ T4540] hfsplus: inconsistency in B*Tree (0,1,255,1,0)
[  104.546162][ T4542] syz.2.47 uses obsolete (PF_INET,SOCK_PACKET)
[  104.719780][ T4543] loop2: detected capacity change from 0 to 1024
[  104.872223][ T4539] loop3: detected capacity change from 0 to 4096
[  105.191320][ T4539] ntfs: volume version 3.1.
[  105.394200][ T4548] binder: 4546:4548 ioctl c0306201 20000680 returned -14
[  105.615306][ T4553] loop2: detected capacity change from 0 to 64
[  106.270855][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  106.279702][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  106.757744][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  106.767448][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[  106.775751][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[  106.783961][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[  106.792258][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[  106.800545][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[  106.808871][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[  106.817404][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[  107.778444][ T4563] loop2: detected capacity change from 0 to 128
[  109.081973][ T4563] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  109.134083][ T4568] loop4: detected capacity change from 0 to 4096
[  109.164289][ T4563] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  109.309611][ T4568] __ntfs_warning: 5 callbacks suppressed
[  109.309627][ T4568] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  110.809015][ T4568] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  110.866496][ T4568] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  111.036096][ T4568] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  111.168436][ T4592] Cannot find add_set index 0 as target
[  111.622524][ T4568] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  111.738591][ T4568] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  111.832729][ T4260] EXT4-fs (loop2): unmounting filesystem.
[  111.856807][ T4568] ntfs: volume version 3.1.
[  111.906088][ T4568] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  111.946148][ T4586] IPVS: Error connecting to the multicast addr
[  112.013199][ T4568] ntfs: (device loop4): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  112.095431][ T4568] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Failed to map directory index page, error 4.
[  112.124603][ T4598] loop1: detected capacity change from 0 to 1024
[  112.177562][ T4568] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  112.420157][ T4600] loop0: detected capacity change from 0 to 2048
[  112.502308][ T4600] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  113.139645][ T4613] loop4: detected capacity change from 0 to 64
[  113.385544][ T4616] loop2: detected capacity change from 0 to 1024
[  113.634606][ T4248] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  114.195142][ T4248] EXT4-fs (loop0): unmounting filesystem.
[  114.403991][ T4629] netlink: 'syz.0.70': attribute type 27 has an invalid length.
[  114.433214][ T4632] loop3: detected capacity change from 0 to 512
[  114.493600][ T4616] EXT4-fs: Ignoring removed i_version option
[  114.503380][ T4616] EXT4-fs: inline encryption not supported
[  114.525727][ T4616] EXT4-fs (loop2): Test dummy encryption mode enabled
[  114.533097][ T4632] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.73: casefold flag without casefold feature
[  114.580330][ T4616] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  114.602466][ T4632] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.73: couldn't read orphan inode 15 (err -117)
[  114.635257][ T4632] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  114.763533][ T4482] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  116.052029][ T4482] usb 5-1: Using ep0 maxpacket: 8
[  116.061753][ T4482] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  116.070157][ T4482] usb 5-1: config 179 has no interface number 0
[  116.076484][ T4482] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  116.087623][ T4482] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  116.098938][ T4482] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  116.343004][ T4257] EXT4-fs (loop3): unmounting filesystem.
[  116.384961][ T4260] EXT4-fs (loop2): unmounting filesystem.
[  116.645430][ T4482] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  116.656953][ T4482] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  116.670254][ T4482] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  116.679389][ T4482] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.692175][ T4625] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  117.058180][ T4482] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input5
[  117.298909][ T4292] usb 5-1: USB disconnect, device number 3
[  117.298980][    C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  117.299045][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  117.400307][ T4292] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  117.591104][ T4665] loop1: detected capacity change from 0 to 64
[  117.734800][ T4648] loop0: detected capacity change from 0 to 32768
[  119.295492][ T4291] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.424268][ T4291] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.319548][ T4291] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.364187][ T4682] loop1: detected capacity change from 0 to 128
[  120.398879][ T4679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.86'.
[  121.266241][ T4291] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.989403][ T4709] loop1: detected capacity change from 0 to 64
[  123.824414][ T4733] loop2: detected capacity change from 0 to 1024
[  126.769337][ T4763] netlink: 'syz.1.104': attribute type 27 has an invalid length.
[  127.582586][ T4766] loop2: detected capacity change from 0 to 128
[  127.677233][ T4370] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  128.044395][ T4775] trusted_key: encrypted_key: insufficient parameters specified
[  130.270140][ T4792] loop1: detected capacity change from 0 to 1024
[  130.752470][ T4291] device hsr_slave_0 left promiscuous mode
[  130.938405][ T4291] device hsr_slave_1 left promiscuous mode
[  130.992968][ T4291] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.317557][ T4291] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.506603][ T4291] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.561301][ T4291] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.621754][ T4291] device bridge_slave_1 left promiscuous mode
[  131.644297][ T4291] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.707864][ T4807] loop4: detected capacity change from 0 to 64
[  131.716861][ T4291] device bridge_slave_0 left promiscuous mode
[  131.735450][ T4291] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.990647][ T4291] device veth1_macvtap left promiscuous mode
[  131.997174][ T4291] device veth0_macvtap left promiscuous mode
[  132.009984][ T4291] device veth1_vlan left promiscuous mode
[  133.639210][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  133.645612][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  133.684075][ T4291] device veth0_vlan left promiscuous mode
[  134.856847][ T4837] netlink: 'syz.1.118': attribute type 27 has an invalid length.
[  138.296811][ T4845] trusted_key: encrypted_key: insufficient parameters specified
[  138.508403][ T4261] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  138.519407][ T4261] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  138.527855][ T4261] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  138.541554][ T4261] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  138.552604][ T4261] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  138.559991][ T4261] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  140.055542][ T4870] loop4: detected capacity change from 0 to 1024
[  140.582899][ T4252] Bluetooth: hci0: command 0x0409 tx timeout
[  141.405276][ T4881] loop3: detected capacity change from 0 to 2048
[  141.607875][ T4884] trusted_key: encrypted_key: insufficient parameters specified
[  141.773529][ T4887] netlink: 'syz.1.133': attribute type 27 has an invalid length.
[  143.003515][ T4888] loop4: detected capacity change from 0 to 32768
[  143.023270][ T4252] Bluetooth: hci0: command 0x041b tx timeout
[  143.084818][ T4888] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum"
[  143.094471][ T4888] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)...
[  143.108393][ T4888] gfs2: fsid=statfs_quantum.s: fatal: filesystem consistency error
[  143.108393][ T4888]   inode = 1 19
[  143.108393][ T4888]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464
[  143.127585][ T4888] gfs2: fsid=statfs_quantum.s: G:  s:SH n:2/13 f:qobnN t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1
[  143.137418][ T4888] gfs2: fsid=statfs_quantum.s:  H: s:SH f:eEcH e:0 p:4888 [syz.4.131] init_journal+0x1879/0x2470
[  143.148056][ T4888] gfs2: fsid=statfs_quantum.s:  I: n:1/19 t:8 f:0x00 d:0x00000fff s:8388608 p:0
[  143.154565][ T4881] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  143.157182][ T4888] gfs2: fsid=statfs_quantum.s: about to withdraw this file system
[  143.174288][ T4888] gfs2: fsid=statfs_quantum.s: Journal recovery skipped for jid 0 until next mount.
[  143.183804][ T4888] gfs2: fsid=statfs_quantum.s: Glock dequeues delayed: 0
[  143.191258][ T4888] gfs2: fsid=statfs_quantum.s: File system withdrawn
[  143.198158][ T4888] CPU: 0 PID: 4888 Comm: syz.4.131 Not tainted 6.1.127-syzkaller #0
[  143.206173][ T4888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  143.216257][ T4888] Call Trace:
[  143.219562][ T4888]  <TASK>
[  143.222513][ T4888]  dump_stack_lvl+0x1e3/0x2cb
[  143.227238][ T4888]  ? nf_tcp_handle_invalid+0x642/0x642
[  143.232741][ T4888]  ? panic+0x764/0x764
[  143.236847][ T4888]  ? kobject_uevent_env+0x54a/0x8c0
[  143.242090][ T4888]  gfs2_withdraw+0xfcb/0x1550
[  143.246823][ T4888]  ? gfs2_lm+0x230/0x230
[  143.251118][ T4888]  ? make_kgid+0x1f2/0x6f0
[  143.255582][ T4888]  ? from_kuid_munged+0x7b0/0x7b0
[  143.260647][ T4888]  ? gfs2_consist_inode_i+0xf1/0x110
[  143.265975][ T4888]  gfs2_inode_refresh+0xbde/0x1060
[  143.271146][ T4888]  ? gfs2_inode_metasync+0xf0/0xf0
[  143.276303][ T4888]  ? gfs2_glock_nq+0xd2d/0x1590
[  143.281196][ T4888]  gfs2_instantiate+0x188/0x250
[  143.286091][ T4888]  gfs2_glock_wait+0x1db/0x2a0
[  143.290897][ T4888]  check_journal_clean+0x11f/0x350
[  143.296080][ T4888]  ? gfs2_assert_i+0x20/0x20
[  143.300716][ T4888]  ? init_journal+0x1879/0x2470
[  143.305608][ T4888]  ? gfs2_lookup_by_inum+0xe0/0xe0
[  143.310762][ T4888]  ? _raw_spin_unlock+0x24/0x40
[  143.315651][ T4888]  ? gfs2_jdesc_find+0xa7/0xc0
[  143.320444][ T4888]  init_journal+0x1879/0x2470
[  143.325168][ T4888]  ? init_inodes+0xdc/0x310
[  143.329710][ T4888]  ? _compound_head+0x130/0x130
[  143.334600][ T4888]  ? init_sb+0xc34/0x1320
[  143.338968][ T4888]  ? snprintf+0xd6/0x120
[  143.343249][ T4888]  ? init_inodes+0xdc/0x310
[  143.347790][ T4888]  ? vscnprintf+0x80/0x80
[  143.352187][ T4888]  init_inodes+0xdc/0x310
[  143.357009][ T4888]  gfs2_fill_super+0x1b87/0x2680
[  143.361999][ T4888]  ? gfs2_reconfigure+0xcf0/0xcf0
[  143.367072][ T4888]  ? init_locking+0xbd/0x210
[  143.371713][ T4888]  ? set_blocksize+0x1c6/0x350
[  143.376516][ T4888]  get_tree_bdev+0x3fe/0x620
[  143.381151][ T4888]  ? gfs2_reconfigure+0xcf0/0xcf0
[  143.386212][ T4888]  gfs2_get_tree+0x50/0x210
[  143.390746][ T4888]  ? bpf_lsm_capable+0x5/0x10
[  143.395442][ T4888]  vfs_get_tree+0x88/0x270
[  143.399890][ T4888]  do_new_mount+0x2ba/0xb40
[  143.404412][ T4888]  ? ns_capable+0x85/0xe0
[  143.408769][ T4888]  ? do_move_mount_old+0x160/0x160
[  143.413942][ T4888]  __se_sys_mount+0x2d5/0x3c0
[  143.418644][ T4888]  ? __x64_sys_mount+0xc0/0xc0
[  143.423426][ T4888]  ? syscall_enter_from_user_mode+0x2e/0x230
[  143.429415][ T4888]  ? lockdep_hardirqs_on+0x94/0x130
[  143.434622][ T4888]  ? __x64_sys_mount+0x1c/0xc0
[  143.439401][ T4888]  do_syscall_64+0x3b/0xb0
[  143.443820][ T4888]  ? clear_bhb_loop+0x45/0xa0
[  143.448508][ T4888]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  143.454415][ T4888] RIP: 0033:0x7f23c098e4ca
[  143.458837][ T4888] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  143.478465][ T4888] RSP: 002b:00007f23c1858e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  143.486893][ T4888] RAX: ffffffffffffffda RBX: 00007f23c1858ef0 RCX: 00007f23c098e4ca
[  143.494882][ T4888] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 00007f23c1858eb0
[  143.502863][ T4888] RBP: 0000000020000000 R08: 00007f23c1858ef0 R09: 0000000000008859
[  143.510842][ T4888] R10: 0000000000008859 R11: 0000000000000246 R12: 0000000020000140
[  143.518816][ T4888] R13: 00007f23c1858eb0 R14: 000000000001278c R15: 0000000020000180
[  143.526829][ T4888]  </TASK>
[  143.532336][ T4888] gfs2: fsid=statfs_quantum.s: Error -5 locking journal for spectator mount.
[  143.875082][ T4291] team0 (unregistering): Port device team_slave_1 removed
[  143.922980][ T4257] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  145.069020][ T4252] Bluetooth: hci0: command 0x040f tx timeout
[  145.462165][ T4257] EXT4-fs (loop3): unmounting filesystem.
[  145.483070][ T4291] team0 (unregistering): Port device team_slave_0 removed
[  148.092498][ T4914] loop4: detected capacity change from 0 to 40427
[  148.106152][    C1] vcan0: j1939_tp_rxtimer: 0xffff88801d2b2c00: rx timeout, send abort
[  148.116248][ T4252] Bluetooth: hci0: command 0x0419 tx timeout
[  148.157215][ T4914] F2FS-fs (loop4): invalid crc value
[  148.209318][ T4291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  148.256016][ T4914] F2FS-fs (loop4): Found nat_bits in checkpoint
[  148.311740][ T4914] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1
[  148.362065][ T4914] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  148.945580][    C1] vcan0: j1939_tp_rxtimer: 0xffff88801d2b2c00: abort rx timeout. Force session deactivation
[  149.980504][ T4291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  150.201668][ T4253] syz-executor: attempt to access beyond end of device
[  150.201668][ T4253] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  150.355104][ T4933] trusted_key: encrypted_key: insufficient parameters specified
[  151.285762][ T4934] loop1: detected capacity change from 0 to 32768
[  151.308166][ T4934] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum"
[  151.318624][ T4934] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)...
[  151.328326][ T4934] gfs2: fsid=statfs_quantum.s: fatal: filesystem consistency error
[  151.328326][ T4934]   inode = 1 19
[  151.328326][ T4934]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464
[  151.348977][ T4934] gfs2: fsid=statfs_quantum.s: G:  s:SH n:2/13 f:qobnN t:SH d:EX/0 a:0 v:0 r:4 m:20 p:1
[  151.358868][ T4934] gfs2: fsid=statfs_quantum.s:  H: s:SH f:eEcH e:0 p:4934 [syz.1.141] init_journal+0x1879/0x2470
[  151.369474][ T4934] gfs2: fsid=statfs_quantum.s:  I: n:1/19 t:8 f:0x00 d:0x00000fff s:8388608 p:0
[  151.378596][ T4934] gfs2: fsid=statfs_quantum.s: about to withdraw this file system
[  151.386468][ T4934] gfs2: fsid=statfs_quantum.s: Journal recovery skipped for jid 0 until next mount.
[  151.396032][ T4934] gfs2: fsid=statfs_quantum.s: Glock dequeues delayed: 0
[  151.403313][ T4934] gfs2: fsid=statfs_quantum.s: File system withdrawn
[  151.410016][ T4934] CPU: 1 PID: 4934 Comm: syz.1.141 Not tainted 6.1.127-syzkaller #0
[  151.418025][ T4934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  151.428113][ T4934] Call Trace:
[  151.431431][ T4934]  <TASK>
[  151.434393][ T4934]  dump_stack_lvl+0x1e3/0x2cb
[  151.439134][ T4934]  ? nf_tcp_handle_invalid+0x642/0x642
[  151.444654][ T4934]  ? panic+0x764/0x764
[  151.448766][ T4934]  ? kobject_uevent_env+0x54a/0x8c0
[  151.454103][ T4934]  gfs2_withdraw+0xfcb/0x1550
[  151.458848][ T4934]  ? gfs2_lm+0x230/0x230
[  151.463148][ T4934]  ? make_kgid+0x1f2/0x6f0
[  151.467585][ T4934]  ? from_kuid_munged+0x7b0/0x7b0
[  151.472627][ T4934]  ? gfs2_consist_inode_i+0xf1/0x110
[  151.477936][ T4934]  gfs2_inode_refresh+0xbde/0x1060
[  151.483106][ T4934]  ? gfs2_inode_metasync+0xf0/0xf0
[  151.488251][ T4934]  ? gfs2_glock_nq+0xd2d/0x1590
[  151.493122][ T4934]  gfs2_instantiate+0x188/0x250
[  151.497985][ T4934]  gfs2_glock_wait+0x1db/0x2a0
[  151.502764][ T4934]  check_journal_clean+0x11f/0x350
[  151.507887][ T4934]  ? gfs2_assert_i+0x20/0x20
[  151.512491][ T4934]  ? init_journal+0x1879/0x2470
[  151.517539][ T4934]  ? gfs2_lookup_by_inum+0xe0/0xe0
[  151.522671][ T4934]  ? _raw_spin_unlock+0x24/0x40
[  151.527537][ T4934]  ? gfs2_jdesc_find+0xa7/0xc0
[  151.532333][ T4934]  init_journal+0x1879/0x2470
[  151.537029][ T4934]  ? init_inodes+0xdc/0x310
[  151.541543][ T4934]  ? _compound_head+0x130/0x130
[  151.546407][ T4934]  ? init_sb+0xc34/0x1320
[  151.550751][ T4934]  ? snprintf+0xd6/0x120
[  151.555009][ T4934]  ? init_inodes+0xdc/0x310
[  151.559523][ T4934]  ? vscnprintf+0x80/0x80
[  151.563865][ T4934]  init_inodes+0xdc/0x310
[  151.568207][ T4934]  gfs2_fill_super+0x1b87/0x2680
[  151.573229][ T4934]  ? gfs2_reconfigure+0xcf0/0xcf0
[  151.578283][ T4934]  ? init_locking+0xbd/0x210
[  151.582879][ T4934]  ? set_blocksize+0x1c6/0x350
[  151.587654][ T4934]  get_tree_bdev+0x3fe/0x620
[  151.592346][ T4934]  ? gfs2_reconfigure+0xcf0/0xcf0
[  151.597383][ T4934]  gfs2_get_tree+0x50/0x210
[  151.601893][ T4934]  ? bpf_lsm_capable+0x5/0x10
[  151.606575][ T4934]  vfs_get_tree+0x88/0x270
[  151.611009][ T4934]  do_new_mount+0x2ba/0xb40
[  151.615523][ T4934]  ? ns_capable+0x85/0xe0
[  151.619864][ T4934]  ? do_move_mount_old+0x160/0x160
[  151.624993][ T4934]  __se_sys_mount+0x2d5/0x3c0
[  151.629684][ T4934]  ? __x64_sys_mount+0xc0/0xc0
[  151.634462][ T4934]  ? syscall_enter_from_user_mode+0x2e/0x230
[  151.640470][ T4934]  ? lockdep_hardirqs_on+0x94/0x130
[  151.645763][ T4934]  ? __x64_sys_mount+0x1c/0xc0
[  151.650557][ T4934]  do_syscall_64+0x3b/0xb0
[  151.654977][ T4934]  ? clear_bhb_loop+0x45/0xa0
[  151.659659][ T4934]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  151.665569][ T4934] RIP: 0033:0x7f36ecb8e4ca
[  151.669989][ T4934] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  151.689600][ T4934] RSP: 002b:00007f36ed94ae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  151.698026][ T4934] RAX: ffffffffffffffda RBX: 00007f36ed94aef0 RCX: 00007f36ecb8e4ca
[  151.706021][ T4934] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 00007f36ed94aeb0
[  151.714013][ T4934] RBP: 0000000020000000 R08: 00007f36ed94aef0 R09: 0000000000008859
[  151.722005][ T4934] R10: 0000000000008859 R11: 0000000000000246 R12: 0000000020000140
[  151.730005][ T4934] R13: 00007f36ed94aeb0 R14: 000000000001278c R15: 0000000020000180
[  151.738024][ T4934]  </TASK>
[  151.741724][ T4934] gfs2: fsid=statfs_quantum.s: Error -5 locking journal for spectator mount.
[  151.822159][ T4421] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  152.382364][ T4939] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  152.484019][ T4942] loop4: detected capacity change from 0 to 1024
[  153.150242][ T4949] binder: 4947:4949 ioctl c0306201 20000680 returned -14
[  153.419715][ T4956] trusted_key: encrypted_key: insufficient parameters specified
[  154.332415][ T4958] loop4: detected capacity change from 0 to 32768
[  154.355868][ T4958] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum"
[  154.365371][ T4958] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)...
[  154.377039][ T4958] gfs2: fsid=statfs_quantum.s: fatal: filesystem consistency error
[  154.377039][ T4958]   inode = 1 19
[  154.377039][ T4958]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464
[  154.396024][ T4958] gfs2: fsid=statfs_quantum.s: G:  s:SH n:2/13 f:qobnN t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1
[  154.405803][ T4958] gfs2: fsid=statfs_quantum.s:  H: s:SH f:eEcH e:0 p:4958 [syz.4.147] init_journal+0x1879/0x2470
[  154.416403][ T4958] gfs2: fsid=statfs_quantum.s:  I: n:1/19 t:8 f:0x00 d:0x00000fff s:8388608 p:0
[  154.425544][ T4958] gfs2: fsid=statfs_quantum.s: about to withdraw this file system
[  154.433407][ T4958] gfs2: fsid=statfs_quantum.s: Journal recovery skipped for jid 0 until next mount.
[  154.442825][ T4958] gfs2: fsid=statfs_quantum.s: Glock dequeues delayed: 0
[  154.450974][ T4958] gfs2: fsid=statfs_quantum.s: File system withdrawn
[  154.457696][ T4958] CPU: 1 PID: 4958 Comm: syz.4.147 Not tainted 6.1.127-syzkaller #0
[  154.465705][ T4958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  154.475779][ T4958] Call Trace:
[  154.479066][ T4958]  <TASK>
[  154.482005][ T4958]  dump_stack_lvl+0x1e3/0x2cb
[  154.486709][ T4958]  ? nf_tcp_handle_invalid+0x642/0x642
[  154.492187][ T4958]  ? panic+0x764/0x764
[  154.496268][ T4958]  ? kobject_uevent_env+0x54a/0x8c0
[  154.501482][ T4958]  gfs2_withdraw+0xfcb/0x1550
[  154.506181][ T4958]  ? gfs2_lm+0x230/0x230
[  154.510430][ T4958]  ? make_kgid+0x1f2/0x6f0
[  154.514860][ T4958]  ? from_kuid_munged+0x7b0/0x7b0
[  154.519896][ T4958]  ? gfs2_consist_inode_i+0xf1/0x110
[  154.525211][ T4958]  gfs2_inode_refresh+0xbde/0x1060
[  154.530346][ T4958]  ? gfs2_inode_metasync+0xf0/0xf0
[  154.535472][ T4958]  ? gfs2_glock_nq+0xd2d/0x1590
[  154.540338][ T4958]  gfs2_instantiate+0x188/0x250
[  154.545199][ T4958]  gfs2_glock_wait+0x1db/0x2a0
[  154.549976][ T4958]  check_journal_clean+0x11f/0x350
[  154.555105][ T4958]  ? gfs2_assert_i+0x20/0x20
[  154.559716][ T4958]  ? init_journal+0x1879/0x2470
[  154.564577][ T4958]  ? gfs2_lookup_by_inum+0xe0/0xe0
[  154.569786][ T4958]  ? _raw_spin_unlock+0x24/0x40
[  154.574647][ T4958]  ? gfs2_jdesc_find+0xa7/0xc0
[  154.579445][ T4958]  init_journal+0x1879/0x2470
[  154.584141][ T4958]  ? init_inodes+0xdc/0x310
[  154.588682][ T4958]  ? _compound_head+0x130/0x130
[  154.593550][ T4958]  ? init_sb+0xc34/0x1320
[  154.597892][ T4958]  ? snprintf+0xd6/0x120
[  154.602148][ T4958]  ? init_inodes+0xdc/0x310
[  154.606662][ T4958]  ? vscnprintf+0x80/0x80
[  154.611005][ T4958]  init_inodes+0xdc/0x310
[  154.615348][ T4958]  gfs2_fill_super+0x1b87/0x2680
[  154.620313][ T4958]  ? gfs2_reconfigure+0xcf0/0xcf0
[  154.625371][ T4958]  ? init_locking+0xbd/0x210
[  154.629968][ T4958]  ? set_blocksize+0x1c6/0x350
[  154.634740][ T4958]  get_tree_bdev+0x3fe/0x620
[  154.639344][ T4958]  ? gfs2_reconfigure+0xcf0/0xcf0
[  154.644377][ T4958]  gfs2_get_tree+0x50/0x210
[  154.648885][ T4958]  ? bpf_lsm_capable+0x5/0x10
[  154.653577][ T4958]  vfs_get_tree+0x88/0x270
[  154.658008][ T4958]  do_new_mount+0x2ba/0xb40
[  154.662522][ T4958]  ? ns_capable+0x85/0xe0
[  154.666864][ T4958]  ? do_move_mount_old+0x160/0x160
[  154.671996][ T4958]  __se_sys_mount+0x2d5/0x3c0
[  154.676688][ T4958]  ? __x64_sys_mount+0xc0/0xc0
[  154.681462][ T4958]  ? syscall_enter_from_user_mode+0x2e/0x230
[  154.687450][ T4958]  ? lockdep_hardirqs_on+0x94/0x130
[  154.692654][ T4958]  ? __x64_sys_mount+0x1c/0xc0
[  154.697430][ T4958]  do_syscall_64+0x3b/0xb0
[  154.701858][ T4958]  ? clear_bhb_loop+0x45/0xa0
[  154.706539][ T4958]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  154.712450][ T4958] RIP: 0033:0x7f23c098e4ca
[  154.716935][ T4958] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  154.736566][ T4958] RSP: 002b:00007f23c1858e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  154.744993][ T4958] RAX: ffffffffffffffda RBX: 00007f23c1858ef0 RCX: 00007f23c098e4ca
[  154.752976][ T4958] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 00007f23c1858eb0
[  154.760952][ T4958] RBP: 0000000020000000 R08: 00007f23c1858ef0 R09: 0000000000008859
[  154.768926][ T4958] R10: 0000000000008859 R11: 0000000000000246 R12: 0000000020000140
[  154.776899][ T4958] R13: 00007f23c1858eb0 R14: 000000000001278c R15: 0000000020000180
[  154.784891][ T4958]  </TASK>
[  154.788812][ T4958] gfs2: fsid=statfs_quantum.s: Error -5 locking journal for spectator mount.
[  154.835107][ T4957] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  154.861468][ T4957] CIFS mount error: No usable UNC path provided in device string!
[  154.861468][ T4957] 
[  154.868955][ T4291] bond0 (unregistering): Released all slaves
[  154.872841][ T4957] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  154.933675][ T4370] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  155.247399][ T4892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'.
[  156.493793][ T4977] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  157.746519][ T4997] loop3: detected capacity change from 0 to 1024
[  158.243105][ T4855] chnl_net:caif_netlink_parms(): no params data found
[  158.342365][ T4989] syz.1.155 (4989) used greatest stack depth: 17760 bytes left
[  158.860815][ T5014] trusted_key: encrypted_key: insufficient parameters specified
[  159.186121][ T5017] trusted_key: encrypted_key: insufficient parameters specified
[  160.002274][ T5017] loop1: detected capacity change from 0 to 32768
[  160.661846][ T5017] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum"
[  160.671351][ T5017] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)...
[  160.697602][ T5017] gfs2: fsid=statfs_quantum.s: fatal: filesystem consistency error
[  160.697602][ T5017]   inode = 1 19
[  160.697602][ T5017]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464
[  160.717390][ T5017] gfs2: fsid=statfs_quantum.s: G:  s:SH n:2/13 f:qobnN t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1
[  160.727337][ T5017] gfs2: fsid=statfs_quantum.s:  H: s:SH f:eEcH e:0 p:5017 [syz.1.158] init_journal+0x1879/0x2470
[  160.737991][ T5017] gfs2: fsid=statfs_quantum.s:  I: n:1/19 t:8 f:0x00 d:0x00000fff s:8388608 p:0
[  160.741814][ T5018] loop4: detected capacity change from 0 to 32768
[  160.747087][ T5017] gfs2: fsid=statfs_quantum.s: about to withdraw this file system
[  160.761476][ T5017] gfs2: fsid=statfs_quantum.s: Journal recovery skipped for jid 0 until next mount.
[  160.770890][ T5017] gfs2: fsid=statfs_quantum.s: Glock dequeues delayed: 0
[  160.778354][ T5017] gfs2: fsid=statfs_quantum.s: File system withdrawn
[  160.785157][ T5017] CPU: 0 PID: 5017 Comm: syz.1.158 Not tainted 6.1.127-syzkaller #0
[  160.785537][ T4256] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  160.793153][ T5017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  160.793170][ T5017] Call Trace:
[  160.793178][ T5017]  <TASK>
[  160.793187][ T5017]  dump_stack_lvl+0x1e3/0x2cb
[  160.793231][ T5017]  ? nf_tcp_handle_invalid+0x642/0x642
[  160.807300][ T5018] sysfs: cannot create duplicate filename '/fs/gfs2/statfs_quantum'
[  160.810429][ T5017]  ? panic+0x764/0x764
[  160.838815][ T5017]  ? kobject_uevent_env+0x54a/0x8c0
[  160.844050][ T5017]  gfs2_withdraw+0xfcb/0x1550
[  160.848761][ T5017]  ? gfs2_lm+0x230/0x230
[  160.853019][ T5017]  ? make_kgid+0x1f2/0x6f0
[  160.857483][ T5017]  ? from_kuid_munged+0x7b0/0x7b0
[  160.862541][ T5017]  ? gfs2_consist_inode_i+0xf1/0x110
[  160.868465][ T5017]  gfs2_inode_refresh+0xbde/0x1060
[  160.873617][ T5017]  ? gfs2_inode_metasync+0xf0/0xf0
[  160.878757][ T5017]  ? gfs2_glock_nq+0xd2d/0x1590
[  160.883634][ T5017]  gfs2_instantiate+0x188/0x250
[  160.888513][ T5017]  gfs2_glock_wait+0x1db/0x2a0
[  160.893301][ T5017]  check_journal_clean+0x11f/0x350
[  160.898438][ T5017]  ? gfs2_assert_i+0x20/0x20
[  160.903081][ T5017]  ? init_journal+0x1879/0x2470
[  160.907954][ T5017]  ? gfs2_lookup_by_inum+0xe0/0xe0
[  160.913090][ T5017]  ? _raw_spin_unlock+0x24/0x40
[  160.917958][ T5017]  ? gfs2_jdesc_find+0xa7/0xc0
[  160.922734][ T5017]  init_journal+0x1879/0x2470
[  160.927457][ T5017]  ? init_inodes+0xdc/0x310
[  160.931983][ T5017]  ? _compound_head+0x130/0x130
[  160.936858][ T5017]  ? init_sb+0xc34/0x1320
[  160.941206][ T5017]  ? snprintf+0xd6/0x120
[  160.945464][ T5017]  ? init_inodes+0xdc/0x310
[  160.949981][ T5017]  ? vscnprintf+0x80/0x80
[  160.954332][ T5017]  init_inodes+0xdc/0x310
[  160.958682][ T5017]  gfs2_fill_super+0x1b87/0x2680
[  160.963652][ T5017]  ? gfs2_reconfigure+0xcf0/0xcf0
[  160.968703][ T5017]  ? init_locking+0xbd/0x210
[  160.973304][ T5017]  ? set_blocksize+0x1c6/0x350
[  160.978087][ T5017]  get_tree_bdev+0x3fe/0x620
[  160.982693][ T5017]  ? gfs2_reconfigure+0xcf0/0xcf0
[  160.987733][ T5017]  gfs2_get_tree+0x50/0x210
[  160.992249][ T5017]  ? bpf_lsm_capable+0x5/0x10
[  160.996935][ T5017]  vfs_get_tree+0x88/0x270
[  161.001369][ T5017]  do_new_mount+0x2ba/0xb40
[  161.005888][ T5017]  ? ns_capable+0x85/0xe0
[  161.010234][ T5017]  ? do_move_mount_old+0x160/0x160
[  161.015368][ T5017]  __se_sys_mount+0x2d5/0x3c0
[  161.020073][ T5017]  ? __x64_sys_mount+0xc0/0xc0
[  161.024852][ T5017]  ? syscall_enter_from_user_mode+0x2e/0x230
[  161.030845][ T5017]  ? lockdep_hardirqs_on+0x94/0x130
[  161.036055][ T5017]  ? __x64_sys_mount+0x1c/0xc0
[  161.040837][ T5017]  do_syscall_64+0x3b/0xb0
[  161.045267][ T5017]  ? clear_bhb_loop+0x45/0xa0
[  161.049953][ T5017]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  161.055861][ T5017] RIP: 0033:0x7f36ecb8e4ca
[  161.060298][ T5017] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  161.079909][ T5017] RSP: 002b:00007f36ed96be68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  161.088332][ T5017] RAX: ffffffffffffffda RBX: 00007f36ed96bef0 RCX: 00007f36ecb8e4ca
[  161.096318][ T5017] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 00007f36ed96beb0
[  161.104297][ T5017] RBP: 0000000020000000 R08: 00007f36ed96bef0 R09: 0000000000008859
[  161.112286][ T5017] R10: 0000000000008859 R11: 0000000000000246 R12: 0000000020000140
[  161.120267][ T5017] R13: 00007f36ed96beb0 R14: 000000000001278c R15: 0000000020000180
[  161.128256][ T5017]  </TASK>
[  161.131284][ T5018] CPU: 1 PID: 5018 Comm: syz.4.154 Not tainted 6.1.127-syzkaller #0
[  161.132153][ T5017] gfs2: fsid=statfs_quantum.s: Error -5 locking journal for spectator mount.
[  161.139279][ T5018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  161.158131][ T5018] Call Trace:
[  161.161433][ T5018]  <TASK>
[  161.164386][ T5018]  dump_stack_lvl+0x1e3/0x2cb
[  161.169111][ T5018]  ? nf_tcp_handle_invalid+0x642/0x642
[  161.174614][ T5018]  ? panic+0x764/0x764
[  161.178729][ T5018]  sysfs_create_dir_ns+0x2c6/0x390
[  161.183878][ T5018]  ? sysfs_warn_dup+0xa0/0xa0
[  161.188627][ T5018]  kobject_add_internal+0x6df/0xd10
[  161.193868][ T5018]  kobject_init_and_add+0x120/0x190
[  161.199098][ T5018]  ? lockdep_softirqs_off+0x420/0x420
[  161.204494][ T5018]  ? widen_string+0x3a/0x310
[  161.209105][ T5018]  ? kobject_add+0x210/0x210
[  161.213722][ T5018]  ? __init_swait_queue_head+0xaa/0x140
[  161.219286][ T5018]  gfs2_sys_fs_add+0x237/0x4a0
[  161.224082][ T5018]  ? gfs2_recover_set+0x240/0x240
[  161.229113][ T5018]  ? snprintf+0xd6/0x120
[  161.233371][ T5018]  ? vscnprintf+0x80/0x80
[  161.237713][ T5018]  ? read_word_at_a_time+0xe/0x20
[  161.242743][ T5018]  ? strscpy+0x89/0x220
[  161.246906][ T5018]  gfs2_fill_super+0x1200/0x2680
[  161.251869][ T5018]  ? gfs2_reconfigure+0xcf0/0xcf0
[  161.256907][ T5018]  ? snprintf+0xd6/0x120
[  161.261164][ T5018]  ? set_blocksize+0x1c6/0x350
[  161.265953][ T5018]  get_tree_bdev+0x3fe/0x620
[  161.270559][ T5018]  ? gfs2_reconfigure+0xcf0/0xcf0
[  161.275595][ T5018]  gfs2_get_tree+0x50/0x210
[  161.280103][ T5018]  ? bpf_lsm_capable+0x5/0x10
[  161.284787][ T5018]  vfs_get_tree+0x88/0x270
[  161.289215][ T5018]  do_new_mount+0x2ba/0xb40
[  161.293731][ T5018]  ? ns_capable+0x85/0xe0
[  161.298157][ T5018]  ? do_move_mount_old+0x160/0x160
[  161.303290][ T5018]  __se_sys_mount+0x2d5/0x3c0
[  161.307984][ T5018]  ? __x64_sys_mount+0xc0/0xc0
[  161.312759][ T5018]  ? syscall_enter_from_user_mode+0x2e/0x230
[  161.318744][ T5018]  ? lockdep_hardirqs_on+0x94/0x130
[  161.323949][ T5018]  ? __x64_sys_mount+0x1c/0xc0
[  161.328721][ T5018]  do_syscall_64+0x3b/0xb0
[  161.333149][ T5018]  ? clear_bhb_loop+0x45/0xa0
[  161.337830][ T5018]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  161.343739][ T5018] RIP: 0033:0x7f23c098e4ca
[  161.348160][ T5018] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  161.367769][ T5018] RSP: 002b:00007f23c1837e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  161.376206][ T5018] RAX: ffffffffffffffda RBX: 00007f23c1837ef0 RCX: 00007f23c098e4ca
[  161.384182][ T5018] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 00007f23c1837eb0
[  161.392155][ T5018] RBP: 0000000020000000 R08: 00007f23c1837ef0 R09: 0000000000008859
[  161.400146][ T5018] R10: 0000000000008859 R11: 0000000000000246 R12: 0000000020000140
[  161.408120][ T5018] R13: 00007f23c1837eb0 R14: 000000000001278c R15: 0000000020000180
[  161.416109][ T5018]  </TASK>
[  161.419962][ T5018] kobject_add_internal failed for statfs_quantum with -EEXIST, don't try to register things with the same name in the same directory.
[  161.432476][ T4256] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  161.442460][ T5018] gfs2: fsid=statfs_quantum: error -17 adding sysfs files
[  161.471293][ T4256] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  161.480081][ T4256] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  161.487767][ T4256] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  161.495360][ T4256] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  161.760515][ T4855] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.803178][ T4855] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.883653][ T4855] device bridge_slave_0 entered promiscuous mode
[  161.958098][ T5028] loop4: detected capacity change from 0 to 512
[  162.115508][ T5031] trusted_key: encrypted_key: insufficient parameters specified
[  163.046518][ T5028] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  163.077250][ T5028] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  163.088059][ T5035] loop1: detected capacity change from 0 to 32768
[  163.113993][ T5035] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum"
[  163.123471][ T5035] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)...
[  163.158790][ T5035] gfs2: fsid=statfs_quantum.s: fatal: filesystem consistency error
[  163.158790][ T5035]   inode = 1 19
[  163.158790][ T5035]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464
[  163.177922][ T5035] gfs2: fsid=statfs_quantum.s: G:  s:SH n:2/13 f:qobnN t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1
[  163.187797][ T5035] gfs2: fsid=statfs_quantum.s:  H: s:SH f:eEcH e:0 p:5035 [syz.1.159] init_journal+0x1879/0x2470
[  163.198472][ T5035] gfs2: fsid=statfs_quantum.s:  I: n:1/19 t:8 f:0x00 d:0x00000fff s:8388608 p:0
[  163.207609][ T5035] gfs2: fsid=statfs_quantum.s: about to withdraw this file system
[  163.215458][ T5035] gfs2: fsid=statfs_quantum.s: Journal recovery skipped for jid 0 until next mount.
[  163.224913][ T5035] gfs2: fsid=statfs_quantum.s: Glock dequeues delayed: 0
[  163.233973][ T5035] gfs2: fsid=statfs_quantum.s: File system withdrawn
[  163.240909][ T5035] CPU: 1 PID: 5035 Comm: syz.1.159 Not tainted 6.1.127-syzkaller #0
[  163.248934][ T5035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  163.259017][ T5035] Call Trace:
[  163.262363][ T5035]  <TASK>
[  163.265399][ T5041] CIFS mount error: No usable UNC path provided in device string!
[  163.265399][ T5041] 
[  163.265822][ T5035]  dump_stack_lvl+0x1e3/0x2cb
[  163.280505][ T5035]  ? nf_tcp_handle_invalid+0x642/0x642
[  163.286010][ T5035]  ? panic+0x764/0x764
[  163.288027][ T5028] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.160: bg 0: block 248: padding at end of block bitmap is not set
[  163.290096][ T5035]  ? kobject_uevent_env+0x54a/0x8c0
[  163.290140][ T5035]  gfs2_withdraw+0xfcb/0x1550
[  163.311490][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  163.311508][   T27] audit: type=1804 audit(1737698152.255:3): pid=5028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.160" name="/newroot/33/file1/file1" dev="loop4" ino=15 res=1 errno=0
[  163.314327][ T5035]  ? gfs2_lm+0x230/0x230
[  163.345398][ T5035]  ? make_kgid+0x1f2/0x6f0
[  163.349843][ T5035]  ? from_kuid_munged+0x7b0/0x7b0
[  163.354878][ T5035]  ? gfs2_consist_inode_i+0xf1/0x110
[  163.360178][ T5035]  gfs2_inode_refresh+0xbde/0x1060
[  163.365745][ T5035]  ? gfs2_inode_metasync+0xf0/0xf0
[  163.370876][ T5035]  ? gfs2_glock_nq+0xd2d/0x1590
[  163.375745][ T5035]  gfs2_instantiate+0x188/0x250
[  163.380609][ T5035]  gfs2_glock_wait+0x1db/0x2a0
[  163.385389][ T5035]  check_journal_clean+0x11f/0x350
[  163.390510][ T5035]  ? gfs2_assert_i+0x20/0x20
[  163.395112][ T5035]  ? init_journal+0x1879/0x2470
[  163.400066][ T5035]  ? gfs2_lookup_by_inum+0xe0/0xe0
[  163.405189][ T5035]  ? _raw_spin_unlock+0x24/0x40
[  163.410050][ T5035]  ? gfs2_jdesc_find+0xa7/0xc0
[  163.414828][ T5035]  init_journal+0x1879/0x2470
[  163.419524][ T5035]  ? init_inodes+0xdc/0x310
[  163.424040][ T5035]  ? _compound_head+0x130/0x130
[  163.428906][ T5035]  ? init_sb+0xc34/0x1320
[  163.433246][ T5035]  ? snprintf+0xd6/0x120
[  163.437506][ T5035]  ? init_inodes+0xdc/0x310
[  163.442045][ T5035]  ? vscnprintf+0x80/0x80
[  163.446389][ T5035]  init_inodes+0xdc/0x310
[  163.450728][ T5035]  gfs2_fill_super+0x1b87/0x2680
[  163.455693][ T5035]  ? gfs2_reconfigure+0xcf0/0xcf0
[  163.460754][ T5035]  ? init_locking+0xbd/0x210
[  163.465350][ T5035]  ? set_blocksize+0x1c6/0x350
[  163.470124][ T5035]  get_tree_bdev+0x3fe/0x620
[  163.474725][ T5035]  ? gfs2_reconfigure+0xcf0/0xcf0
[  163.479759][ T5035]  gfs2_get_tree+0x50/0x210
[  163.484269][ T5035]  ? bpf_lsm_capable+0x5/0x10
[  163.488977][ T5035]  vfs_get_tree+0x88/0x270
[  163.493426][ T5035]  do_new_mount+0x2ba/0xb40
[  163.497964][ T5035]  ? ns_capable+0x85/0xe0
[  163.502305][ T5035]  ? do_move_mount_old+0x160/0x160
[  163.507437][ T5035]  __se_sys_mount+0x2d5/0x3c0
[  163.512132][ T5035]  ? __x64_sys_mount+0xc0/0xc0
[  163.516910][ T5035]  ? syscall_enter_from_user_mode+0x2e/0x230
[  163.522899][ T5035]  ? lockdep_hardirqs_on+0x94/0x130
[  163.528132][ T5035]  ? __x64_sys_mount+0x1c/0xc0
[  163.532995][ T5035]  do_syscall_64+0x3b/0xb0
[  163.537416][ T5035]  ? clear_bhb_loop+0x45/0xa0
[  163.542118][ T5035]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  163.548028][ T5035] RIP: 0033:0x7f36ecb8e4ca
[  163.552451][ T5035] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  163.572059][ T5035] RSP: 002b:00007f36ed94ae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  163.580484][ T5035] RAX: ffffffffffffffda RBX: 00007f36ed94aef0 RCX: 00007f36ecb8e4ca
[  163.588462][ T5035] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 00007f36ed94aeb0
[  163.596436][ T5035] RBP: 0000000020000000 R08: 00007f36ed94aef0 R09: 0000000000008859
[  163.604429][ T5035] R10: 0000000000008859 R11: 0000000000000246 R12: 0000000020000140
[  163.612411][ T5035] R13: 00007f36ed94aeb0 R14: 000000000001278c R15: 0000000020000180
[  163.620673][ T5035]  </TASK>
[  163.624620][ T4256] Bluetooth: hci4: command 0x0409 tx timeout
[  163.624706][ T5035] gfs2: fsid=statfs_quantum.s: Error -5 locking journal for spectator mount.
[  163.640708][ T4291] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.657578][ T5041] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  163.673414][ T4256] Bluetooth: Unexpected start frame (len 12)
[  163.699469][ T4855] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.713666][ T4855] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.753685][ T4253] EXT4-fs (loop4): unmounting filesystem.
[  163.784518][ T4855] device bridge_slave_1 entered promiscuous mode
[  163.973457][ T4291] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.075050][ T5046] loop4: detected capacity change from 0 to 64
[  164.290456][ T4291] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.383368][ T4855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  164.629476][ T4855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  164.887244][ T4291] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.339534][ T5063] loop4: detected capacity change from 0 to 1024
[  165.406009][ T4855] team0: Port device team_slave_0 added
[  165.523586][ T4855] team0: Port device team_slave_1 added
[  165.672078][ T4256] Bluetooth: hci4: command 0x041b tx timeout
[  165.719213][ T4855] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.744703][ T5064] loop1: detected capacity change from 0 to 32768
[  165.754483][ T4855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.807031][ T4855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  166.389126][ T5048] loop3: detected capacity change from 0 to 32768
[  166.423078][ T5048] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.163 (5048)
[  166.465939][ T4855] batman_adv: batadv0: Adding interface: batadv_slave_1
[  166.480636][ T4855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.511990][ T5048] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  166.541263][ T5048] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  166.549966][ T5048] BTRFS info (device loop3): using free space tree
[  166.581951][ T4855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  166.675373][ T5010] chnl_net:caif_netlink_parms(): no params data found
[  166.759111][ T4855] device hsr_slave_0 entered promiscuous mode
[  166.804147][ T4855] device hsr_slave_1 entered promiscuous mode
[  166.850961][ T5048] BTRFS info (device loop3): enabling ssd optimizations
[  167.748414][ T4256] Bluetooth: hci4: command 0x040f tx timeout
[  167.812121][ T4257] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  167.860578][ T5010] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.867747][ T5010] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.903300][ T5010] device bridge_slave_0 entered promiscuous mode
[  168.302192][ T5010] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.323684][ T5010] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.397787][ T5114] trusted_key: encrypted_key: insufficient parameters specified
[  168.430997][ T5010] device bridge_slave_1 entered promiscuous mode
[  169.352193][ T5115] loop1: detected capacity change from 0 to 32768
[  169.369154][ T5115] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum"
[  169.378787][ T5115] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)...
[  169.398733][ T5115] gfs2: fsid=statfs_quantum.s: fatal: filesystem consistency error
[  169.398733][ T5115]   inode = 1 19
[  169.398733][ T5115]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464
[  169.417799][ T5115] gfs2: fsid=statfs_quantum.s: G:  s:SH n:2/13 f:qobnN t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1
[  169.427702][ T5115] gfs2: fsid=statfs_quantum.s:  H: s:SH f:eEcH e:0 p:5115 [syz.1.172] init_journal+0x1879/0x2470
[  169.439912][ T5115] gfs2: fsid=statfs_quantum.s:  I: n:1/19 t:8 f:0x00 d:0x00000fff s:8388608 p:0
[  169.449079][ T5115] gfs2: fsid=statfs_quantum.s: about to withdraw this file system
[  169.457012][ T5115] gfs2: fsid=statfs_quantum.s: Journal recovery skipped for jid 0 until next mount.
[  169.466825][ T5115] gfs2: fsid=statfs_quantum.s: Glock dequeues delayed: 0
[  169.474070][ T5115] gfs2: fsid=statfs_quantum.s: File system withdrawn
[  169.480896][ T5115] CPU: 1 PID: 5115 Comm: syz.1.172 Not tainted 6.1.127-syzkaller #0
[  169.489004][ T5115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  169.499165][ T5115] Call Trace:
[  169.502456][ T5115]  <TASK>
[  169.505396][ T5115]  dump_stack_lvl+0x1e3/0x2cb
[  169.510106][ T5115]  ? nf_tcp_handle_invalid+0x642/0x642
[  169.515862][ T5115]  ? panic+0x764/0x764
[  169.519953][ T5115]  ? kobject_uevent_env+0x54a/0x8c0
[  169.525172][ T5115]  gfs2_withdraw+0xfcb/0x1550
[  169.529878][ T5115]  ? gfs2_lm+0x230/0x230
[  169.534133][ T5115]  ? make_kgid+0x1f2/0x6f0
[  169.538566][ T5115]  ? from_kuid_munged+0x7b0/0x7b0
[  169.543606][ T5115]  ? gfs2_consist_inode_i+0xf1/0x110
[  169.548907][ T5115]  gfs2_inode_refresh+0xbde/0x1060
[  169.554045][ T5115]  ? gfs2_inode_metasync+0xf0/0xf0
[  169.559175][ T5115]  ? gfs2_glock_nq+0xd2d/0x1590
[  169.564043][ T5115]  gfs2_instantiate+0x188/0x250
[  169.568910][ T5115]  gfs2_glock_wait+0x1db/0x2a0
[  169.573736][ T5115]  check_journal_clean+0x11f/0x350
[  169.578865][ T5115]  ? gfs2_assert_i+0x20/0x20
[  169.583513][ T5115]  ? init_journal+0x1879/0x2470
[  169.588382][ T5115]  ? gfs2_lookup_by_inum+0xe0/0xe0
[  169.593522][ T5115]  ? _raw_spin_unlock+0x24/0x40
[  169.598403][ T5115]  ? gfs2_jdesc_find+0xa7/0xc0
[  169.603186][ T5115]  init_journal+0x1879/0x2470
[  169.607886][ T5115]  ? init_inodes+0xdc/0x310
[  169.612409][ T5115]  ? _compound_head+0x130/0x130
[  169.617282][ T5115]  ? init_sb+0xc34/0x1320
[  169.621743][ T5115]  ? snprintf+0xd6/0x120
[  169.626002][ T5115]  ? init_inodes+0xdc/0x310
[  169.630519][ T5115]  ? vscnprintf+0x80/0x80
[  169.634874][ T5115]  init_inodes+0xdc/0x310
[  169.639223][ T5115]  gfs2_fill_super+0x1b87/0x2680
[  169.644192][ T5115]  ? gfs2_reconfigure+0xcf0/0xcf0
[  169.649247][ T5115]  ? init_locking+0xbd/0x210
[  169.653850][ T5115]  ? set_blocksize+0x1c6/0x350
[  169.658630][ T5115]  get_tree_bdev+0x3fe/0x620
[  169.663247][ T5115]  ? gfs2_reconfigure+0xcf0/0xcf0
[  169.668317][ T5115]  gfs2_get_tree+0x50/0x210
[  169.672835][ T5115]  ? bpf_lsm_capable+0x5/0x10
[  169.677521][ T5115]  vfs_get_tree+0x88/0x270
[  169.681955][ T5115]  do_new_mount+0x2ba/0xb40
[  169.686472][ T5115]  ? ns_capable+0x85/0xe0
[  169.690818][ T5115]  ? do_move_mount_old+0x160/0x160
[  169.695951][ T5115]  __se_sys_mount+0x2d5/0x3c0
[  169.700653][ T5115]  ? __x64_sys_mount+0xc0/0xc0
[  169.705433][ T5115]  ? syscall_enter_from_user_mode+0x2e/0x230
[  169.711430][ T5115]  ? lockdep_hardirqs_on+0x94/0x130
[  169.716642][ T5115]  ? __x64_sys_mount+0x1c/0xc0
[  169.721433][ T5115]  do_syscall_64+0x3b/0xb0
[  169.725859][ T5115]  ? clear_bhb_loop+0x45/0xa0
[  169.730547][ T5115]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  169.736496][ T5115] RIP: 0033:0x7f36ecb8e4ca
[  169.740923][ T5115] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  169.760539][ T5115] RSP: 002b:00007f36ed94ae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  169.768973][ T5115] RAX: ffffffffffffffda RBX: 00007f36ed94aef0 RCX: 00007f36ecb8e4ca
[  169.776953][ T5115] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 00007f36ed94aeb0
[  169.784931][ T5115] RBP: 0000000020000000 R08: 00007f36ed94aef0 R09: 0000000000008859
[  169.792909][ T5115] R10: 0000000000008859 R11: 0000000000000246 R12: 0000000020000140
[  169.800889][ T5115] R13: 00007f36ed94aeb0 R14: 000000000001278c R15: 0000000020000180
[  169.808973][ T5115]  </TASK>
[  169.812654][ T5115] gfs2: fsid=statfs_quantum.s: Error -5 locking journal for spectator mount.
[  169.828743][ T4256] Bluetooth: hci4: command 0x0419 tx timeout
[  169.892424][ T4369] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  169.928586][ T5010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  169.975282][ T5121] CIFS mount error: No usable UNC path provided in device string!
[  169.975282][ T5121] 
[  169.985397][ T5121] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  169.998065][ T4261] Bluetooth: Unexpected start frame (len 12)
[  170.053720][ T5010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.427012][ T5010] team0: Port device team_slave_0 added
[  170.501767][ T5126] loop4: detected capacity change from 0 to 32768
[  170.562849][ T5010] team0: Port device team_slave_1 added
[  170.700312][ T5133] loop3: detected capacity change from 0 to 64
[  171.207350][ T5143] loop4: detected capacity change from 0 to 1024
[  171.594772][ T5010] batman_adv: batadv0: Adding interface: batadv_slave_0
[  171.601760][ T5010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.800621][ T5010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  171.816055][ T4855] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  171.947891][ T5153] loop3: detected capacity change from 0 to 256
[  171.970912][ T5153] exfat: Unknown parameter 'ÿÿÿÿ»�÷ûi£j”äûœM›uµÔEéíîÅvá'
[  172.074582][ T5010] batman_adv: batadv0: Adding interface: batadv_slave_1
[  172.299637][ T5010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.795914][ T5161] loop1: detected capacity change from 0 to 164
[  174.807232][ T5010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  174.995787][ T4855] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  175.292059][ T4855] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  175.393354][ T5168] CIFS mount error: No usable UNC path provided in device string!
[  175.393354][ T5168] 
[  175.522290][ T4291] device hsr_slave_0 left promiscuous mode
[  175.522726][ T5168] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  175.722135][ T5174] netlink: 'syz.4.181': attribute type 27 has an invalid length.
[  175.767338][ T4291] device hsr_slave_1 left promiscuous mode
[  176.598598][ T4261] Bluetooth: Unexpected start frame (len 12)
[  176.725435][ T4291] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  176.753911][ T4291] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.781040][ T5179] loop1: detected capacity change from 0 to 128
[  176.799008][ T4291] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.806516][ T4291] batman_adv: batadv0: Removing interface: batadv_slave_1
[  178.639011][ T4291] device veth1_macvtap left promiscuous mode
[  178.680510][ T4291] device veth0_macvtap left promiscuous mode
[  178.713152][ T4291] device veth1_vlan left promiscuous mode
[  178.721896][ T4291] device veth0_vlan left promiscuous mode
[  183.150427][ T5203] loop4: detected capacity change from 0 to 32768
[  183.327629][ T4291] team0 (unregistering): Port device team_slave_1 removed
[  183.397068][ T4291] team0 (unregistering): Port device team_slave_0 removed
[  184.156012][ T4291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  184.236156][ T4291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  184.386276][ T5214] loop1: detected capacity change from 0 to 4096
[  184.409072][ T5214] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  184.490109][ T5214] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  184.509631][ T5214] ntfs3: loop1: Failed to load $Extend.
[  185.868832][ T5222] loop4: detected capacity change from 0 to 64
[  186.250135][ T5225] loop1: detected capacity change from 0 to 8
[  186.344524][ T5225] xt_NFQUEUE: number of total queues is 0
[  187.960799][ T4291] bond0 (unregistering): Released all slaves
[  188.597772][ T5235] binder: 5232:5235 ioctl c0306201 20000680 returned -14
[  188.730279][ T4855] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  188.744923][ T5238] loop1: detected capacity change from 0 to 1764
[  188.774410][ T5010] device hsr_slave_0 entered promiscuous mode
[  189.018734][ T5010] device hsr_slave_1 entered promiscuous mode
[  189.049825][ T5010] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  189.070266][ T5010] Cannot create hsr debugfs directory
[  189.120085][ T5242] ax25_connect(): syz.1.200 uses autobind, please contact jreuter@yaina.de
[  189.300854][ T5244] loop3: detected capacity change from 0 to 1024
[  189.326702][ T5244] EXT4-fs: Ignoring removed i_version option
[  189.371225][ T5244] EXT4-fs: inline encryption not supported
[  189.378105][ T5244] EXT4-fs (loop3): Test dummy encryption mode enabled
[  189.595528][ T5244] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  190.686538][ T4855] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.810802][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  190.818929][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  190.883256][ T4855] 8021q: adding VLAN 0 to HW filter on device team0
[  191.677770][ T5010] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  191.714701][ T4257] EXT4-fs (loop3): unmounting filesystem.
[  191.760821][ T5010] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  191.802582][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  191.820655][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  191.861752][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.868896][ T4321] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.882927][ T5272] loop4: detected capacity change from 0 to 64
[  192.120574][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  192.129476][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  192.235673][ T5278] input: syz0 as /devices/virtual/input/input6
[  193.236831][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.244017][ T4321] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.263469][ T5010] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  193.274213][ T5010] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  193.589073][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  193.607150][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  193.637637][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  193.726563][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  193.737405][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  193.745014][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  193.762978][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  193.777534][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  193.787578][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  193.818067][ T4855] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  193.829002][ T5292] CIFS mount error: No usable UNC path provided in device string!
[  193.829002][ T5292] 
[  193.959730][ T4855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  193.972218][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  194.002170][ T5292] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  194.016920][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  194.078062][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  195.064685][ T4256] Bluetooth: Unexpected start frame (len 12)
[  195.111155][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  195.149754][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  195.183801][ T5010] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.301739][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  195.351746][ T5010] 8021q: adding VLAN 0 to HW filter on device team0
[  195.393362][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  195.411803][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  195.426202][ T5301] loop4: detected capacity change from 0 to 256
[  195.490250][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  195.509818][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  195.533760][ T5258] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.540887][ T5258] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.611637][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  195.633463][ T5307] binder: 5303:5307 ioctl c0306201 20000680 returned -14
[  195.647723][ T5306] loop3: detected capacity change from 0 to 1024
[  195.675512][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  195.685134][ T5301] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  195.716545][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  195.748133][ T5306] EXT4-fs: Ignoring removed i_version option
[  195.769818][ T4527] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.776956][ T4527] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.799356][ T5306] EXT4-fs: inline encryption not supported
[  195.809445][ T4256] Bluetooth: hci1: command 0x0406 tx timeout
[  195.809503][ T4261] Bluetooth: hci2: command 0x0406 tx timeout
[  195.815492][ T4256] Bluetooth: hci3: command 0x0406 tx timeout
[  195.830636][ T5306] EXT4-fs (loop3): Test dummy encryption mode enabled
[  195.926804][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  196.103793][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  196.394411][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  196.405777][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  196.467003][ T5306] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  196.511160][ T5010] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  196.521604][ T5010] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  196.535495][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  196.613136][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  197.158513][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  197.441080][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  197.458084][ T4252] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  197.467283][ T4252] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  197.478823][ T4252] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  197.487268][ T4252] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  197.495568][ T4252] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  197.503119][ T4252] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  197.514618][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  197.523794][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  197.533105][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  197.543320][ T4257] EXT4-fs (loop3): unmounting filesystem.
[  197.700967][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  197.931487][ T5330] loop1: detected capacity change from 0 to 64
[  199.274250][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  199.298585][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  199.326870][ T5010] 8021q: adding VLAN 0 to HW filter on device batadv0
[  199.568444][ T4261] Bluetooth: hci0: command 0x0409 tx timeout
[  199.654905][ T5317] chnl_net:caif_netlink_parms(): no params data found
[  199.766225][ T5359] CIFS mount error: No usable UNC path provided in device string!
[  199.766225][ T5359] 
[  200.193183][ T5359] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  201.562974][ T5377] loop4: detected capacity change from 0 to 1024
[  201.619181][ T5377] EXT4-fs: Ignoring removed i_version option
[  201.648188][ T4261] Bluetooth: hci0: command 0x041b tx timeout
[  201.668073][ T5377] EXT4-fs: inline encryption not supported
[  201.681062][ T5377] EXT4-fs (loop4): Test dummy encryption mode enabled
[  201.727003][ T5317] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.763503][ T5317] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.804528][ T5317] device bridge_slave_0 entered promiscuous mode
[  201.815846][ T5382] binder: 5380:5382 ioctl c0306201 20000680 returned -14
[  201.840487][ T5377] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  202.010590][ T5317] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.017778][ T5317] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.981158][ T4248] jfs_flush_journal: synclist not empty
[  202.987043][ T4248] metapage: ffff88803163a9b0: 00001000 00000000 00003aec 00000000
[  203.001242][ T4248] metapage: ffff88803163a9c0: 026b9120 ffffc900 7e6c4a28 ffff8880
[  203.005682][ T5317] device bridge_slave_1 entered promiscuous mode
[  203.019713][ T4248] metapage: ffff88803163a9d0: 00000004 00000000 00000000 00000000
[  203.027588][ T4248] metapage: ffff88803163a9e0: 587c2000 ffff8880 0000001c 00000000
[  203.045299][ T5389] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  203.148087][ T4248] metapage: ffff88803163a9f0: 00000000 dead4ead ffffffff 00000000
[  203.149089][ T4253] EXT4-fs (loop4): unmounting filesystem.
[  203.223493][ T4248] metapage: ffff88803163aa00: ffffffff ffffffff 974fb620 ffffffff
[  203.264000][ T4248] metapage: ffff88803163aa10: 90c55760 ffffffff 00000000 00000000
[  203.314694][ T4248] metapage: ffff88803163aa20: 8b45d660 ffffffff 00000200 00000000
[  203.394683][ T5317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  203.413051][ T4248] metapage: ffff88803163aa30: 3163aa30 ffff8880 3163aa30 ffff8880
[  203.427490][ T5399] loop4: detected capacity change from 0 to 64
[  203.455379][ T4248] metapage: ffff88803163aa40: 0161f080 ffffea00 25bd0000 ffff8880
[  203.460712][ T5317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  203.484556][ T4248] metapage: ffff88803163aa50: 00001000 00000000 00000001 00000000
[  203.597779][ T4248] metapage: ffff88803163aa60: 7e6c4800 ffff8880
[  203.604086][ T4248] page: ffffea000161f080: 00fff50000002056 ffffea000161f188
[  203.754728][ T4248] page: ffffea000161f090: ffffea00015ccd48 ffff888070928658
[  203.787726][ T4261] Bluetooth: hci0: command 0x040f tx timeout
[  204.507629][ T4248] page: ffffea000161f0a0: 000000000000001c ffff88803163a9b0
[  204.514977][ T4248] page: ffffea000161f0b0: 00000002ffffffff ffff8880579dc000
[  204.615668][ T5317] team0: Port device team_slave_0 added
[  204.616293][ T4248] tblock:ffffc900026b9110: 03040910 00000000 00003aec 00000000
[  204.682803][ T4248] tblock:ffffc900026b9120: 7e6c4a28 ffff8880 3163a9c0 ffff8880
[  204.684331][ T5317] team0: Port device team_slave_1 added
[  204.824766][ T4248] tblock:ffffc900026b9130: 25bd0000 ffff8880 00030001 00000000
[  204.847836][ T4248] tblock:ffffc900026b9140: 00000000 dead4ead ffffffff 00000000
[  204.855446][ T4248] tblock:ffffc900026b9150: ffffffff ffffffff 974fb820 ffffffff
[  204.927647][ T5409] loop4: detected capacity change from 0 to 2048
[  205.017962][ T4248] tblock:ffffc900026b9160: 90c56420 ffffffff 00000000 00000000
[  205.089660][ T4248] tblock:ffffc900026b9170: 8b45eb40 ffffffff 00000200 00000000
[  205.126444][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  205.231135][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  205.294956][ T4248] tblock:ffffc900026b9180: 026b9180 ffffc900 026b9180 ffffc900
[  205.722461][ T5409] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  205.981919][ T4256] Bluetooth: hci0: command 0x0419 tx timeout
[  206.870096][ T4248] tblock:ffffc900026b9190: 00000001 00000000 00000100 dead0000
[  206.908737][ T4253] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  206.945070][ T4248] tblock:ffffc900026b91a0: 00000122 dead0000 00003cbc 00000000
[  207.009969][ T4248] tblock:ffffc900026b91b0: 7d48d600 ffff8880 00000003 00000cbc
[  207.057379][ T4248] tblock:ffffc900026b91c0: 00000000 dead4ead ffffffff 00000000
[  207.095433][ T4248] tblock:ffffc900026b91d0: ffffffff ffffffff 974fb800 ffffffff
[  207.125156][ T4248] tblock:ffffc900026b91e0: 00000000 00000000 00000000 00000000
[  207.138123][ T4253] EXT4-fs (loop4): unmounting filesystem.
[  207.139990][ T4248] tblock:ffffc900026b91f0: 8b45eb00 ffffffff 00000200 00000000
[  207.153670][ T4248] tblock:ffffc900026b9200: 026b9200 ffffc900 026b9200 ffffc900
[  207.187221][ T4248] tblock:ffffc900026b9210: 7092b270 ffff8880 00000000 00000000
[  207.488605][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  207.516381][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  207.677350][ T5317] batman_adv: batadv0: Adding interface: batadv_slave_0
[  207.684436][ T5317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.830410][ T5317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  207.843773][ T5317] batman_adv: batadv0: Adding interface: batadv_slave_1
[  207.850946][ T5317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.877607][ T5317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.713691][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  208.768124][ T5438] loop1: detected capacity change from 0 to 1024
[  208.769554][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  208.775442][ T5438] EXT4-fs: Ignoring removed i_version option
[  208.792969][ T5438] EXT4-fs: inline encryption not supported
[  208.801106][ T5438] EXT4-fs (loop1): Test dummy encryption mode enabled
[  208.841053][ T5438] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  208.927725][ T5010] device veth0_vlan entered promiscuous mode
[  208.950359][ T5010] device veth1_vlan entered promiscuous mode
[  209.110857][ T5317] device hsr_slave_0 entered promiscuous mode
[  210.008283][ T5446] loop3: detected capacity change from 0 to 1024
[  210.043378][ T5447] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  210.166238][ T4262] EXT4-fs (loop1): unmounting filesystem.
[  210.197498][ T5317] device hsr_slave_1 entered promiscuous mode
[  210.235719][ T5317] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  210.296945][ T5317] Cannot create hsr debugfs directory
[  210.358108][ T5456] loop3: detected capacity change from 0 to 64
[  210.738919][ T5461] trusted_key: encrypted_key: insufficient parameters specified
[  212.484754][ T5463] loop1: detected capacity change from 0 to 32768
[  212.569003][ T5463] gfs2: fsid=statfs_quantum: Trying to join cluster "lock_nolock", "statfs_quantum"
[  212.578627][ T5463] gfs2: fsid=statfs_quantum: Now mounting FS (format 1801)...
[  212.602609][ T5463] gfs2: fsid=statfs_quantum.s: fatal: filesystem consistency error
[  212.602609][ T5463]   inode = 1 19
[  212.602609][ T5463]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464
[  212.621902][ T5463] gfs2: fsid=statfs_quantum.s: G:  s:SH n:2/13 f:qobnN t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1
[  212.631836][ T5463] gfs2: fsid=statfs_quantum.s:  H: s:SH f:eEcH e:0 p:5463 [syz.1.239] init_journal+0x1879/0x2470
[  212.642593][ T5463] gfs2: fsid=statfs_quantum.s:  I: n:1/19 t:8 f:0x00 d:0x00000fff s:8388608 p:0
[  212.651859][ T5463] gfs2: fsid=statfs_quantum.s: about to withdraw this file system
[  212.659932][ T5463] gfs2: fsid=statfs_quantum.s: Journal recovery skipped for jid 0 until next mount.
[  212.669445][ T5463] gfs2: fsid=statfs_quantum.s: Glock dequeues delayed: 0
[  212.678759][ T5463] gfs2: fsid=statfs_quantum.s: File system withdrawn
[  212.685972][ T5463] CPU: 1 PID: 5463 Comm: syz.1.239 Not tainted 6.1.127-syzkaller #0
[  212.693981][ T5463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  212.704184][ T5463] Call Trace:
[  212.707518][ T5463]  <TASK>
[  212.710474][ T5463]  dump_stack_lvl+0x1e3/0x2cb
[  212.715197][ T5463]  ? nf_tcp_handle_invalid+0x642/0x642
[  212.720705][ T5463]  ? panic+0x764/0x764
[  212.724810][ T5463]  ? kobject_uevent_env+0x54a/0x8c0
[  212.730081][ T5463]  gfs2_withdraw+0xfcb/0x1550
[  212.734849][ T5463]  ? gfs2_lm+0x230/0x230
[  212.739123][ T5463]  ? make_kgid+0x1f2/0x6f0
[  212.743580][ T5463]  ? from_kuid_munged+0x7b0/0x7b0
[  212.748644][ T5463]  ? gfs2_consist_inode_i+0xf1/0x110
[  212.753968][ T5463]  gfs2_inode_refresh+0xbde/0x1060
[  212.759127][ T5463]  ? gfs2_inode_metasync+0xf0/0xf0
[  212.764276][ T5463]  ? gfs2_glock_nq+0xd2d/0x1590
[  212.769161][ T5463]  gfs2_instantiate+0x188/0x250
[  212.774079][ T5463]  gfs2_glock_wait+0x1db/0x2a0
[  212.778879][ T5463]  check_journal_clean+0x11f/0x350
[  212.784038][ T5463]  ? gfs2_assert_i+0x20/0x20
[  212.788666][ T5463]  ? init_journal+0x1879/0x2470
[  212.793553][ T5463]  ? _raw_spin_unlock+0x36/0x40
[  212.798422][ T5463]  ? gfs2_jdesc_find+0xa7/0xc0
[  212.803205][ T5463]  init_journal+0x1879/0x2470
[  212.807994][ T5463]  ? init_inodes+0xdc/0x310
[  212.812515][ T5463]  ? _compound_head+0x130/0x130
[  212.817383][ T5463]  ? print_irqtrace_events+0x210/0x210
[  212.822865][ T5463]  ? snprintf+0xd6/0x120
[  212.827150][ T5463]  ? init_inodes+0xdc/0x310
[  212.831703][ T5463]  ? vscnprintf+0x80/0x80
[  212.836139][ T5463]  init_inodes+0xdc/0x310
[  212.840486][ T5463]  gfs2_fill_super+0x1b87/0x2680
[  212.845452][ T5463]  ? gfs2_reconfigure+0xcf0/0xcf0
[  212.850503][ T5463]  ? init_locking+0xbd/0x210
[  212.855102][ T5463]  ? set_blocksize+0x1c6/0x350
[  212.859876][ T5463]  get_tree_bdev+0x3fe/0x620
[  212.864484][ T5463]  ? gfs2_reconfigure+0xcf0/0xcf0
[  212.869523][ T5463]  gfs2_get_tree+0x50/0x210
[  212.874037][ T5463]  ? bpf_lsm_capable+0x5/0x10
[  212.878723][ T5463]  vfs_get_tree+0x88/0x270
[  212.883154][ T5463]  do_new_mount+0x2ba/0xb40
[  212.887692][ T5463]  ? ns_capable+0x85/0xe0
[  212.892058][ T5463]  ? do_move_mount_old+0x160/0x160
[  212.897195][ T5463]  __se_sys_mount+0x2d5/0x3c0
[  212.901899][ T5463]  ? __x64_sys_mount+0xc0/0xc0
[  212.906684][ T5463]  ? syscall_enter_from_user_mode+0x2e/0x230
[  212.912682][ T5463]  ? lockdep_hardirqs_on+0x94/0x130
[  212.917895][ T5463]  ? __x64_sys_mount+0x1c/0xc0
[  212.922677][ T5463]  do_syscall_64+0x3b/0xb0
[  212.927134][ T5463]  ? clear_bhb_loop+0x45/0xa0
[  212.931823][ T5463]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  212.937733][ T5463] RIP: 0033:0x7f36ecb8e4ca
[  212.942168][ T5463] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  212.962303][ T5463] RSP: 002b:00007f36ed94ae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  212.970731][ T5463] RAX: ffffffffffffffda RBX: 00007f36ed94aef0 RCX: 00007f36ecb8e4ca
[  212.978803][ T5463] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 00007f36ed94aeb0
[  212.986894][ T5463] RBP: 0000000020000000 R08: 00007f36ed94aef0 R09: 0000000000008859
[  212.994870][ T5463] R10: 0000000000008859 R11: 0000000000000246 R12: 0000000020000140
[  213.002870][ T5463] R13: 00007f36ed94aeb0 R14: 000000000001278c R15: 0000000020000180
[  213.010957][ T5463]  </TASK>
[  213.014298][ T5463] gfs2: fsid=statfs_quantum.s: Error -5 locking journal for spectator mount.
[  213.637330][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  213.703464][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  213.768787][ T5471] loop1: detected capacity change from 0 to 2048
[  213.858307][ T5471] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  214.065111][ T5010] device veth0_macvtap entered promiscuous mode
[  214.629980][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  214.873544][ T4262] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  214.954902][ T5010] device veth1_macvtap entered promiscuous mode
[  215.073982][ T4262] EXT4-fs (loop1): unmounting filesystem.
[  215.141599][ T5010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.186537][ T5010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.221340][ T5010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.268398][ T5010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.300220][ T5010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.476846][ T5010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.546095][ T5010] batman_adv: batadv0: Interface activated: batadv_slave_0
[  216.368697][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  216.381872][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  216.507851][ T5010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  216.512424][ T5499] loop1: detected capacity change from 0 to 1024
[  216.546475][ T5010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.576590][ T5010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  216.580662][ T5499] EXT4-fs: Ignoring removed i_version option
[  216.629241][ T5499] EXT4-fs: inline encryption not supported
[  216.636337][ T5010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.654724][ T5499] EXT4-fs (loop1): Test dummy encryption mode enabled
[  216.654984][ T5503] loop4: detected capacity change from 0 to 64
[  216.676343][ T5010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  216.696410][ T5010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.724181][ T5499] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  216.737689][ T5484] loop3: detected capacity change from 0 to 32768
[  216.793251][ T5010] batman_adv: batadv0: Interface activated: batadv_slave_1
[  216.853718][ T5010] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  216.862580][ T5010] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  216.871338][ T5010] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  216.880274][ T5010] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  217.138713][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  218.682820][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  218.725680][ T5512] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  218.903638][ T4262] EXT4-fs (loop1): unmounting filesystem.
[  219.009931][ T4527] device hsr_slave_0 left promiscuous mode
[  219.047116][ T4527] device hsr_slave_1 left promiscuous mode
[  219.159301][ T4527] batman_adv: batadv0: Removing interface: batadv_slave_0
[  219.217020][ T4527] batman_adv: batadv0: Removing interface: batadv_slave_1
[  219.252992][ T4527] device bridge_slave_1 left promiscuous mode
[  219.271909][ T4527] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.307908][ T4527] device bridge_slave_0 left promiscuous mode
[  219.314186][ T4527] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.734864][ T5531] Cannot find add_set index 0 as target
[  221.348170][ T4261] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  221.358827][ T4261] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  221.381640][ T4261] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  221.394385][ T4261] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  221.405014][ T4252] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  221.414516][ T4252] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  221.482337][ T4527] team0 (unregistering): Port device team_slave_1 removed
[  221.529376][ T4527] team0 (unregistering): Port device team_slave_0 removed
[  221.570549][ T4527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  221.613263][ T4527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  222.004981][ T4527] bond0 (unregistering): Released all slaves
[  223.491462][ T4256] Bluetooth: hci5: command 0x0409 tx timeout
[  223.531913][ T5552] CIFS mount error: No usable UNC path provided in device string!
[  223.531913][ T5552] 
[  223.583607][ T5552] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  223.651362][ T4256] Bluetooth: Unexpected start frame (len 12)
[  223.820653][ T5534] chnl_net:caif_netlink_parms(): no params data found
[  224.067359][ T5317] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  224.207052][ T5565] loop4: detected capacity change from 0 to 2048
[  224.229376][ T5317] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  224.253019][ T5565] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  224.383510][ T4527] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.460255][ T5317] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  224.473098][ T5317] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  224.486254][ T5534] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.494423][ T5534] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.689088][ T5534] device bridge_slave_0 entered promiscuous mode
[  224.794747][ T5534] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.864213][ T5534] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.930718][ T5534] device bridge_slave_1 entered promiscuous mode
[  225.095648][ T5534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  225.115160][ T5534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  225.183095][ T5534] team0: Port device team_slave_0 added
[  225.200579][ T5534] team0: Port device team_slave_1 added
[  225.240930][ T5534] batman_adv: batadv0: Adding interface: batadv_slave_0
[  225.252269][ T5534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.278809][ T5534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  225.283791][ T4253] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  225.292448][ T5534] batman_adv: batadv0: Adding interface: batadv_slave_1
[  225.311535][ T5534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.341853][ T5534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  225.358972][ T4253] EXT4-fs (loop4): unmounting filesystem.
[  225.444984][ T4527] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.460929][ T5579] loop4: detected capacity change from 0 to 1024
[  225.468810][ T5579] EXT4-fs: Ignoring removed i_version option
[  225.475633][ T5579] EXT4-fs: inline encryption not supported
[  225.543804][ T5579] EXT4-fs (loop4): Test dummy encryption mode enabled
[  225.565421][ T5581] loop1: detected capacity change from 0 to 64
[  225.568541][ T5579] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  225.571859][ T4256] Bluetooth: hci5: command 0x041b tx timeout
[  225.855136][ T4527] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.693170][ T5534] device hsr_slave_0 entered promiscuous mode
[  226.734237][ T5586] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  226.874256][ T5534] device hsr_slave_1 entered promiscuous mode
[  226.911296][ T4253] EXT4-fs (loop4): unmounting filesystem.
[  227.129532][ T4527] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.329837][ T5317] 8021q: adding VLAN 0 to HW filter on device bond0
[  227.717993][ T4256] Bluetooth: hci5: command 0x040f tx timeout
[  228.525036][ T5317] 8021q: adding VLAN 0 to HW filter on device team0
[  228.546796][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  228.594854][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  228.679650][ T5613] loop4: detected capacity change from 0 to 8
[  229.692689][ T5317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  229.725965][ T4256] Bluetooth: hci5: command 0x0419 tx timeout
[  229.759456][ T5317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  229.913880][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  229.927122][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  229.946963][ T4446] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.954097][ T4446] bridge0: port 1(bridge_slave_0) entered forwarding state
[  229.962377][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  229.971242][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  229.979981][ T4446] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.987135][ T4446] bridge0: port 2(bridge_slave_1) entered forwarding state
[  229.997086][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  230.010105][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  230.023558][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  230.063307][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  230.090421][ T5625] CIFS mount error: No usable UNC path provided in device string!
[  230.090421][ T5625] 
[  230.122017][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  230.229131][ T5625] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  230.254344][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  230.362410][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  230.490830][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  230.632608][ T4256] Bluetooth: Unexpected start frame (len 12)
[  230.647114][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  230.682824][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  230.724573][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  230.743491][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  230.751813][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  230.946133][ T5634] loop4: detected capacity change from 0 to 2048
[  230.994506][ T5634] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  231.588535][ T5652] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  231.631921][ T5652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  231.648692][ T5652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  231.663611][ T5652] device bridge_slave_0 left promiscuous mode
[  231.682128][ T5652] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.704546][ T5652] device bridge_slave_1 left promiscuous mode
[  231.714080][ T5652] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.742036][ T5652] bond0: (slave bond_slave_0): Releasing backup interface
[  231.779493][ T5652] bond0: (slave bond_slave_1): Releasing backup interface
[  231.882751][ T5652] team0: Port device team_slave_0 removed
[  231.918975][ T5652] team0: Port device team_slave_1 removed
[  231.946883][ T5652] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  231.965913][ T5652] batman_adv: batadv0: Removing interface: batadv_slave_0
[  231.975011][ T5652] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  231.996504][ T5652] batman_adv: batadv0: Removing interface: batadv_slave_1
[  232.070605][ T5534] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  232.135565][ T5653] device geneve2 entered promiscuous mode
[  232.152397][ T5653] batman_adv: batadv0: Adding interface: geneve2
[  232.162394][ T5653] batman_adv: batadv0: Interface activated: geneve2
[  232.264092][ T5534] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  232.284342][ T5534] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  232.345065][ T5317] 8021q: adding VLAN 0 to HW filter on device batadv0
[  232.398070][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  232.415981][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  232.425099][ T5534] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  232.831382][ T4253] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  233.666883][ T4527] device hsr_slave_0 left promiscuous mode
[  233.709081][ T4527] device hsr_slave_1 left promiscuous mode
[  233.735598][ T4527] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  233.743102][ T4527] batman_adv: batadv0: Removing interface: batadv_slave_0
[  233.767226][ T4253] EXT4-fs (loop4): unmounting filesystem.
[  233.791788][ T4527] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  233.837590][ T4527] batman_adv: batadv0: Removing interface: batadv_slave_1
[  233.866986][ T4527] device bridge_slave_1 left promiscuous mode
[  233.873282][ T4527] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.910507][ T4527] device bridge_slave_0 left promiscuous mode
[  233.916905][ T4527] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.960086][ T4527] device veth1_macvtap left promiscuous mode
[  233.966700][ T4527] device veth0_macvtap left promiscuous mode
[  233.972912][ T4527] device veth1_vlan left promiscuous mode
[  233.979412][ T4527] device veth0_vlan left promiscuous mode
[  235.349870][ T5688] CIFS mount error: No usable UNC path provided in device string!
[  235.349870][ T5688] 
[  235.385582][ T5688] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  235.404300][ T4256] Bluetooth: Unexpected start frame (len 12)
[  235.847879][ T4252] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  235.859907][ T4252] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  235.878398][ T4252] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  235.892028][ T4252] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  235.911412][ T4252] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  235.930311][ T4252] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  235.996044][ T4527] team0 (unregistering): Port device team_slave_1 removed
[  236.086534][ T4527] team0 (unregistering): Port device team_slave_0 removed
[  236.590229][ T5698] Cannot find add_set index 0 as target
[  236.641525][ T4527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  236.701359][ T4527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  237.362019][ T4527] bond0 (unregistering): Released all slaves
[  237.733008][ T5534] 8021q: adding VLAN 0 to HW filter on device bond0
[  237.867501][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  237.887670][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  237.908654][ T5534] 8021q: adding VLAN 0 to HW filter on device team0
[  237.966220][ T4256] Bluetooth: hci4: command 0x0409 tx timeout
[  238.024539][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  238.034231][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  238.151919][ T4445] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.159132][ T4445] bridge0: port 1(bridge_slave_0) entered forwarding state
[  239.008820][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  239.026340][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  239.035131][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  239.045662][ T4445] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.052798][ T4445] bridge0: port 2(bridge_slave_1) entered forwarding state
[  239.062369][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  239.096609][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  239.116660][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  239.156995][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  239.189701][ T5693] chnl_net:caif_netlink_parms(): no params data found
[  239.214653][ T5317] device veth0_vlan entered promiscuous mode
[  239.235528][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  239.259417][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  239.263206][ T5717] loop1: detected capacity change from 0 to 4096
[  239.280119][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  239.309175][ T5717] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  239.325310][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  239.374913][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  239.398173][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  239.415341][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  239.534389][ T5317] device veth1_vlan entered promiscuous mode
[  239.553585][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  239.573457][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  239.618348][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  239.663943][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  239.716955][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  239.739157][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  239.877362][ T5534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  239.947921][ T5317] device veth0_macvtap entered promiscuous mode
[  239.958744][ T5317] device veth1_macvtap entered promiscuous mode
[  239.998232][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  240.013459][ T5730] loop1: detected capacity change from 0 to 4096
[  240.016555][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  240.037890][ T5730] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  240.106901][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  240.575686][ T5730] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  240.597481][ T5730] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match.  Run ntfsfix or chkdsk.
[  240.615673][ T5730] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  240.657851][ T5693] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.665266][ T5693] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.688155][ T5730] ntfs: (device loop1): ntfs_attr_find(): Inode is corrupt.  Run chkdsk.
[  240.703813][ T5693] device bridge_slave_0 entered promiscuous mode
[  240.709301][ T4256] Bluetooth: hci4: command 0x041b tx timeout
[  240.727569][ T5730] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  240.740996][ T5730] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  240.755468][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  240.764128][ T5730] ntfs: volume version 3.1.
[  240.769232][ T5730] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  240.783035][ T5730] ntfs: (device loop1): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  240.805995][ T5693] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.813132][ T5693] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.846696][ T5693] device bridge_slave_1 entered promiscuous mode
[  240.854559][ T5317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.892493][ T5317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.169634][ T5317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  241.417168][ T5317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.533889][ T5317] batman_adv: batadv0: Interface activated: batadv_slave_0
[  241.602955][ T5317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  241.684704][ T5317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.767603][ T5317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  241.812466][ T5317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.879330][ T5317] batman_adv: batadv0: Interface activated: batadv_slave_1
[  241.929206][ T5317] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  241.982767][ T5317] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  242.032259][ T5317] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  242.061650][ T5317] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  242.295414][ T5739] netlink: 'syz.4.282': attribute type 10 has an invalid length.
[  242.304789][ T5739] netlink: 40 bytes leftover after parsing attributes in process `syz.4.282'.
[  242.314560][ T5739] device ipvlan1 entered promiscuous mode
[  242.324739][ T5739] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  242.344981][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  242.354452][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  242.364454][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  242.374944][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  242.425339][ T5693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  242.498557][ T5693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  242.554077][ T4446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.586113][ T4446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.653324][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  242.674547][ T5693] team0: Port device team_slave_0 added
[  242.698506][ T5693] team0: Port device team_slave_1 added
[  242.765701][ T4256] Bluetooth: hci4: command 0x040f tx timeout
[  242.785870][ T4304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.794551][ T4304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.842997][ T5693] batman_adv: batadv0: Adding interface: batadv_slave_0
[  242.886428][ T5693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  242.945732][ T5693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  242.990978][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  243.026880][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  243.044717][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  243.081426][ T5534] 8021q: adding VLAN 0 to HW filter on device batadv0
[  243.112643][ T5693] batman_adv: batadv0: Adding interface: batadv_slave_1
[  243.126325][ T5693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  243.163947][ T5693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  244.574772][ T5777] CIFS mount error: No usable UNC path provided in device string!
[  244.574772][ T5777] 
[  244.637740][ T5777] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  244.751211][ T4256] Bluetooth: Unexpected start frame (len 12)
[  244.845815][ T4256] Bluetooth: hci4: command 0x0419 tx timeout
[  245.026325][ T5773] virt_wifi0 speed is unknown, defaulting to 1000
[  245.045689][ T5693] device hsr_slave_0 entered promiscuous mode
[  245.115183][ T5693] device hsr_slave_1 entered promiscuous mode
[  245.133718][ T5693] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  245.173385][ T5693] Cannot create hsr debugfs directory
[  245.203147][ T5773] virt_wifi0 speed is unknown, defaulting to 1000
[  245.212728][ T5773] virt_wifi0 speed is unknown, defaulting to 1000
[  245.225320][ T5773] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  245.240541][ T5773] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  245.280058][ T5773] virt_wifi0 speed is unknown, defaulting to 1000
[  245.287978][ T5773] virt_wifi0 speed is unknown, defaulting to 1000
[  245.295399][ T5773] virt_wifi0 speed is unknown, defaulting to 1000
[  245.302969][ T5773] virt_wifi0 speed is unknown, defaulting to 1000
[  245.310479][ T5773] virt_wifi0 speed is unknown, defaulting to 1000
[  245.318071][ T5773] virt_wifi0 speed is unknown, defaulting to 1000
[  245.361727][ T5791] input: syz0 as /devices/virtual/input/input7
[  246.455793][ T5802] loop1: detected capacity change from 0 to 512
[  246.545491][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  246.866694][ T5802] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  246.957037][ T5802] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  247.356537][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  247.641773][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  247.777659][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  247.931657][ T4262] EXT4-fs (loop1): unmounting filesystem.
[  247.941965][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  247.986324][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  247.995377][ T5534] device veth0_vlan entered promiscuous mode
[  248.024357][ T5813] loop4: detected capacity change from 0 to 64
[  248.056701][ T5534] device veth1_vlan entered promiscuous mode
[  248.108035][ T5693] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  248.137539][ T5693] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  248.201753][ T5534] device veth0_macvtap entered promiscuous mode
[  248.228431][ T5693] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  248.269907][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  248.313926][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  248.333018][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  248.743328][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  248.987276][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  249.053095][ T5821] loop5: detected capacity change from 0 to 1024
[  249.090376][ T5821] EXT4-fs: Ignoring removed orlov option
[  249.124839][ T5534] device veth1_macvtap entered promiscuous mode
[  249.136599][ T5821] EXT4-fs: Ignoring removed orlov option
[  249.147753][ T5693] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  249.208590][ T5821] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  249.271153][ T5534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  249.332775][ T5534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.378771][ T5534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  249.389477][ T5534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.399792][ T5534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  249.411228][ T5534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.423390][ T5534] batman_adv: batadv0: Interface activated: batadv_slave_0
[  249.827966][ T5831] hub 9-0:1.0: USB hub found
[  249.836842][ T5831] hub 9-0:1.0: 1 port detected
[  250.240405][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  250.306892][ T5832] EXT4-fs error (device loop5): ext4_discard_preallocations:5111: comm syz.5.292: Error -117 loading buddy information for 4294954320
[  250.316624][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  250.347201][ T5534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  250.361621][ T5832] EXT4-fs (loop5): Remounting filesystem read-only
[  250.370432][ T5534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  250.390847][ T5534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  250.402090][ T5832] EXT4-fs error (device loop5): ext4_free_blocks:6210: comm syz.5.292: Freeing blocks not in datazone - block = 115, count = 1
[  250.415739][ T5534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  250.432568][ T5832] EXT4-fs (loop5): Remounting filesystem read-only
[  250.450080][ T5534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  250.460789][ T5832] EXT4-fs error (device loop5): __ext4_get_inode_loc:4506: comm syz.5.292: Invalid inode table block 0 in block_group 0
[  250.462563][ T5534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  250.531684][ T5832] EXT4-fs (loop5): Remounting filesystem read-only
[  250.540003][ T5832] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5885: Corrupt filesystem
[  250.557887][ T5832] EXT4-fs (loop5): Remounting filesystem read-only
[  250.564743][ T5832] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #18: comm syz.5.292: mark_inode_dirty error
[  250.600196][ T5534] batman_adv: batadv0: Interface activated: batadv_slave_1
[  250.629742][ T5832] EXT4-fs (loop5): Remounting filesystem read-only
[  250.638253][ T5832] EXT4-fs error (device loop5): __ext4_get_inode_loc:4506: comm syz.5.292: Invalid inode table block 0 in block_group 0
[  250.660817][ T5832] EXT4-fs (loop5): Remounting filesystem read-only
[  250.675043][ T5832] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5885: Corrupt filesystem
[  250.703805][ T5832] EXT4-fs (loop5): Remounting filesystem read-only
[  250.726943][ T5832] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #18: comm syz.5.292: mark_inode_dirty error
[  250.740849][ T5832] EXT4-fs (loop5): Remounting filesystem read-only
[  250.784024][ T5832] EXT4-fs error (device loop5): __ext4_get_inode_loc:4506: comm syz.5.292: Invalid inode table block 0 in block_group 0
[  250.880874][ T5832] EXT4-fs (loop5): Remounting filesystem read-only
[  250.888644][ T5832] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5885: Corrupt filesystem
[  250.955099][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  251.090968][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  251.122606][ T5534] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  251.140098][ T5534] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  251.152119][ T5534] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  251.179486][ T5534] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  251.377454][ T5317] EXT4-fs warning (device loop5): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block
[  251.466277][ T5843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.298'.
[  251.763136][ T5847] Cannot find add_set index 0 as target
[  251.767667][ T5693] 8021q: adding VLAN 0 to HW filter on device bond0
[  251.795059][ T5162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  251.800145][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  251.822838][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  251.833381][ T5162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  251.843823][ T5693] 8021q: adding VLAN 0 to HW filter on device team0
[  251.880215][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  251.902939][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  251.932566][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.939757][ T5808] bridge0: port 1(bridge_slave_0) entered forwarding state
[  252.049409][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  252.069649][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  252.078407][ T5854] loop1: detected capacity change from 0 to 512
[  252.094484][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  252.113846][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  252.134061][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.141337][ T5808] bridge0: port 2(bridge_slave_1) entered forwarding state
[  252.143585][ T5854] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  252.189895][ T5854] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  252.206711][ T4538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.225979][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  252.237751][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  252.248409][ T4538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.374015][ T4262] EXT4-fs (loop1): unmounting filesystem.
[  252.407889][   T46] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.463104][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  252.498408][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  252.551442][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  252.650042][   T46] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.707099][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  252.725823][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  252.754020][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  252.803194][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  252.814461][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  253.343928][ T5876] Cannot find add_set index 0 as target
[  253.897109][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  253.935057][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  254.362848][ T4261] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  254.378180][ T4261] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  254.386338][ T4261] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  254.396097][ T4261] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  254.404651][ T4261] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  254.412418][ T4261] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  254.499380][   T46] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.740958][   T46] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.804074][ T5887] virt_wifi0 speed is unknown, defaulting to 1000
[  255.168467][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  255.174835][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  255.250585][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  255.274121][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  255.578586][ T5693] 8021q: adding VLAN 0 to HW filter on device batadv0
[  255.746871][ T5887] chnl_net:caif_netlink_parms(): no params data found
[  256.200144][ T5887] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.215773][ T5887] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.237312][ T5887] device bridge_slave_0 entered promiscuous mode
[  256.356199][ T5887] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.371333][ T5887] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.405295][ T5887] device bridge_slave_1 entered promiscuous mode
[  256.446372][ T4256] Bluetooth: hci0: command 0x0409 tx timeout
[  256.568793][ T5930] loop1: detected capacity change from 0 to 64
[  256.612907][ T5887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  256.754544][ T5887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  257.681337][ T5938] CIFS mount error: No usable UNC path provided in device string!
[  257.681337][ T5938] 
[  257.687887][ T5887] team0: Port device team_slave_0 added
[  257.725658][ T5938] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  257.803728][ T5887] team0: Port device team_slave_1 added
[  257.940974][ T5944] Cannot find add_set index 0 as target
[  258.507749][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_0
[  258.526012][ T4256] Bluetooth: hci0: command 0x041b tx timeout
[  258.562829][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  258.715486][ T5887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  258.770359][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  258.790206][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  259.776797][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_1
[  259.849906][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.079450][ T5887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  260.144675][ T5970] loop4: detected capacity change from 0 to 2048
[  260.214821][ T5970] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  260.413637][ T5975] netlink: 'syz.6.315': attribute type 27 has an invalid length.
[  261.216459][ T4256] Bluetooth: hci0: command 0x040f tx timeout
[  261.554040][ T4253] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  261.634840][ T4253] EXT4-fs (loop4): unmounting filesystem.
[  262.612793][ T5693] device veth0_vlan entered promiscuous mode
[  262.776099][ T5887] device hsr_slave_0 entered promiscuous mode
[  262.787248][ T5887] device hsr_slave_1 entered promiscuous mode
[  262.794009][ T5887] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  262.801823][ T5887] Cannot create hsr debugfs directory
[  262.868305][ T5994] binder: 5989:5994 ioctl c0306201 0 returned -14
[  262.882214][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  262.897933][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  262.926655][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  262.937898][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  262.974254][   T46] device hsr_slave_0 left promiscuous mode
[  262.984185][   T46] device hsr_slave_1 left promiscuous mode
[  262.993918][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  263.008159][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[  263.032503][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  263.050368][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[  263.069231][   T46] device bridge_slave_1 left promiscuous mode
[  263.081034][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  263.099242][   T46] device bridge_slave_0 left promiscuous mode
[  263.106999][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  263.174910][   T46] device veth1_macvtap left promiscuous mode
[  263.181732][   T46] device veth0_macvtap left promiscuous mode
[  263.190751][   T46] device veth1_vlan left promiscuous mode
[  263.197142][   T46] device veth0_vlan left promiscuous mode
[  263.516198][ T4261] Bluetooth: hci0: command 0x0419 tx timeout
[  263.523299][ T5995] CIFS mount error: No usable UNC path provided in device string!
[  263.523299][ T5995] 
[  263.635832][ T5995] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  265.197459][ T6010] Cannot find add_set index 0 as target
[  265.861104][   T46] team0 (unregistering): Port device team_slave_1 removed
[  265.938396][   T46] team0 (unregistering): Port device team_slave_0 removed
[  266.002544][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  266.063482][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  266.615303][   T46] bond0 (unregistering): Released all slaves
[  266.731789][ T5693] device veth1_vlan entered promiscuous mode
[  266.929767][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  266.946750][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  267.053851][ T5693] device veth0_macvtap entered promiscuous mode
[  267.124985][ T5693] device veth1_macvtap entered promiscuous mode
[  267.188650][ T5693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.199247][ T5693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.209265][ T5693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.220142][ T5693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.246753][ T5693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  267.442802][ T5693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  267.720489][ T5693] batman_adv: batadv0: Interface activated: batadv_slave_0
[  267.940110][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.324'.
[  267.976956][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  267.987793][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  268.055270][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  268.136667][ T5808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  268.159490][ T5693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.202450][ T5693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.247221][ T6025] loop6: detected capacity change from 0 to 2048
[  268.275878][ T5693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.296353][ T6025] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  268.315406][ T5693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.506119][ T5693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.517166][ T5693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.564188][ T5693] batman_adv: batadv0: Interface activated: batadv_slave_1
[  269.611860][ T5534] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  269.739260][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  269.752860][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  269.765189][ T5693] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  269.780667][ T5693] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.791227][ T5693] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  269.807348][ T5693] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  269.822975][ T5534] EXT4-fs (loop6): unmounting filesystem.
[  270.024739][ T6043] loop4: detected capacity change from 0 to 8
[  270.036188][ T1170] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  270.099305][ T5887] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  270.147413][ T5887] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  270.152817][ T5808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.216771][ T5808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.245551][ T1170] usb 2-1: Using ep0 maxpacket: 16
[  270.257326][ T5887] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  270.274927][ T1170] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  270.357450][ T1170] usb 2-1: config 0 interface 0 has no altsetting 0
[  270.400499][ T1170] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00
[  270.419772][ T6047] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.428186][ T6047] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.458758][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  270.503311][ T5887] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  270.513311][ T1170] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.639473][ T1170] usb 2-1: config 0 descriptor??
[  270.814612][ T5162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.842126][ T5162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.891589][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  270.972799][ T6058] loop4: detected capacity change from 0 to 64
[  271.072157][ T5887] 8021q: adding VLAN 0 to HW filter on device bond0
[  271.171288][ T5887] 8021q: adding VLAN 0 to HW filter on device team0
[  271.208707][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  271.254779][ T1170] corsair 0003:1B1C:1B34.0001: unknown main item tag 0x0
[  271.264838][ T1170] corsair 0003:1B1C:1B34.0001: unknown main item tag 0x0
[  271.264871][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  271.271998][ T1170] corsair 0003:1B1C:1B34.0001: unknown main item tag 0x0
[  271.272076][ T1170] corsair 0003:1B1C:1B34.0001: unknown main item tag 0x0
[  271.293685][ T1170] corsair 0003:1B1C:1B34.0001: unknown main item tag 0x0
[  272.946555][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  272.997556][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  273.038043][ T4304] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.045441][ T4304] bridge0: port 1(bridge_slave_0) entered forwarding state
[  273.116177][ T6068] CIFS mount error: No usable UNC path provided in device string!
[  273.116177][ T6068] 
[  273.147165][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  273.160997][ T6068] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  273.181266][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  273.207433][ T1170] corsair 0003:1B1C:1B34.0001: hidraw0: USB HID v0.05 Device [HID 1b1c:1b34] on usb-dummy_hcd.1-1/input0
[  273.255628][ T1170] usb 2-1: USB disconnect, device number 2
[  273.291819][ T4304] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.299066][ T4304] bridge0: port 2(bridge_slave_1) entered forwarding state
[  273.540994][ T6074] Cannot find add_set index 0 as target
[  273.725718][   T28] INFO: task jfsCommit:108 blocked for more than 144 seconds.
[  273.975868][   T28]       Not tainted 6.1.127-syzkaller #0
[  274.069022][ T6080] loop4: detected capacity change from 0 to 64
[  274.751506][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  274.776985][   T28] task:jfsCommit       state:D stack:26400 pid:108   ppid:2      flags:0x00004000
[  274.858088][ T6078] overlayfs: upper fs needs to support d_type.
[  274.868418][ T6078] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  274.875538][ T6078] overlayfs: failed to set xattr on upper
[  274.881289][ T6078] overlayfs: ...falling back to index=off,metacopy=off.
[  275.107628][ T4253] syz-executor: attempt to access beyond end of device
[  275.107628][ T4253] loop4: rw=0, sector=8192, nr_sectors = 2 limit=64
[  275.169763][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  275.221849][ T4253] Buffer I/O error on dev loop4, logical block 4096, async page read
[  275.233162][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  275.242062][ T4253] syz-executor: attempt to access beyond end of device
[  275.242062][ T4253] loop4: rw=0, sector=8192, nr_sectors = 2 limit=64
[  275.259070][   T28] Call Trace:
[  275.262485][   T28]  <TASK>
[  275.275418][   T28]  __schedule+0x143f/0x4570
[  275.280002][   T28]  ? mark_lock+0x9a/0x340
[  275.284397][   T28]  ? release_firmware_map_entry+0x186/0x186
[  275.296617][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  275.325720][ T4253] Buffer I/O error on dev loop4, logical block 4096, async page read
[  275.338044][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  275.355376][   T28]  ? do_raw_spin_unlock+0x137/0x8a0
[  275.360651][   T28]  ? lockdep_hardirqs_on+0x94/0x130
[  275.370270][ T4253] Trying to free block not in datazone
[  275.378286][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  275.399009][   T28]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  275.404992][   T28]  schedule+0xbf/0x180
[  275.411645][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  275.430119][   T28]  io_schedule+0x88/0x100
[  275.434527][   T28]  lock_metapage+0x250/0x370
[  275.453863][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  275.464750][   T28]  ? lock_metapage+0x16e/0x370
[  275.481937][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  275.490027][   T28]  ? lock_page+0x2b0/0x2b0
[  275.494492][   T28]  ? do_task_dead+0xd0/0xd0
[  275.500917][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  275.509925][   T28]  ? PageHeadHuge+0x8e/0x1c0
[  275.514611][   T28]  __get_metapage+0x50f/0x1040
[  275.520539][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  275.528521][   T28]  ? __get_metapage+0x9ae/0x1040
[  275.533526][   T28]  diIAGRead+0xcb/0x130
[  275.539074][   T28]  diFree+0xa7a/0x2fb0
[  275.543974][   T28]  ? diWrite+0x19b0/0x19b0
[  275.544597][ T5887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  275.549117][   T28]  ? jfs_free_zero_link+0x46a/0x6e0
[  275.569608][   T28]  ? jfs_write_failed+0x190/0x190
[  275.577143][ T5887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  275.578812][   T28]  ? bit_waitqueue+0x30/0x30
[  275.591456][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  275.600709][   T28]  jfs_evict_inode+0x329/0x440
[  275.604191][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  275.608059][   T28]  ? jfs_write_inode+0x210/0x210
[  275.629500][   T28]  evict+0x529/0x930
[  275.633567][   T28]  ? proc_nr_inodes+0x310/0x310
[  275.642398][   T28]  ? _raw_spin_unlock+0x24/0x40
[  275.652463][   T28]  ? iput+0x73f/0x980
[  275.664367][   T28]  txUpdateMap+0x825/0x9e0
[  275.669264][   T28]  ? txCommit+0x6ba0/0x6ba0
[  275.673904][   T28]  jfs_lazycommit+0x476/0xb60
[  275.679277][   T28]  ? _raw_spin_unlock_irqrestore+0x8b/0x130
[  275.685947][   T28]  ? lockdep_hardirqs_on+0x94/0x130
[  275.691356][   T28]  ? txFreelock+0x580/0x580
[  275.696501][   T28]  ? do_task_dead+0xd0/0xd0
[  275.701163][   T28]  ? _raw_spin_unlock+0x40/0x40
[  275.706823][   T28]  ? __kthread_parkme+0x168/0x1c0
[  275.712017][   T28]  kthread+0x28d/0x320
[  275.718581][   T28]  ? txFreelock+0x580/0x580
[  275.727383][   T28]  ? kthread_blkcg+0xd0/0xd0
[  275.737909][   T28]  ret_from_fork+0x1f/0x30
[  275.743927][   T28]  </TASK>
[  275.748439][   T28] 
[  275.748439][   T28] Showing all locks held in the system:
[  275.782903][ T4253] Trying to free block not in datazone
[  275.794365][   T28] 1 lock held by rcu_tasks_kthre/12:
[  275.816143][   T28]  #0: ffffffff8d32b290 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[  275.850315][   T28] 1 lock held by rcu_tasks_trace/13:
[  275.868001][   T28]  #0: ffffffff8d32ba90 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[  275.906070][   T28] 1 lock held by khungtaskd/28:
[  275.910977][   T28]  #0: ffffffff8d32b0c0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[  275.935619][   T28] 2 locks held by jfsCommit/108:
[  275.950408][   T28]  #0: ffff888027c40920 (&(imap->im_aglock[index])){+.+.}-{3:3}, at: diFree+0x378/0x2fb0
[  275.975387][   T28]  #1: ffff88807092a638 (&jfs_ip->rdwrlock/1){.+.+}-{3:3}, at: diFree+0x394/0x2fb0
[  275.984840][   T28] 2 locks held by getty/4010:
[  276.004549][   T28]  #0: ffff88814c5ef098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  276.025470][   T28]  #1: ffffc9000325e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0
[  276.045672][   T28] 2 locks held by syz-executor/4248:
[  276.051013][   T28]  #0: ffff888025bd00e0 (&type->s_umount_key#71){+.+.}-{3:3}, at: deactivate_super+0xa9/0xe0
[  276.095408][   T28]  #1: ffffffff8d722448 (jfs_log_mutex){+.+.}-{3:3}, at: lmLogClose+0xae/0x530
[  276.110607][   T28] 1 lock held by syz-executor/4253:
[  276.116430][   T28]  #0: ffffffff8d3306b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930
[  276.126937][ T6083] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  276.134872][ T6083] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  276.137847][   T28] 2 locks held by syz-executor/4257:
[  276.159438][   T28]  #0: ffff88801aef00e0 (&type->s_umount_key#71){+.+.}-{3:3}, at: deactivate_super+0xa9/0xe0
[  276.170283][   T28]  #1: ffffffff8d722448 (jfs_log_mutex){+.+.}-{3:3}, at: lmLogClose+0xae/0x530
[  276.189441][   T28] 1 lock held by syz-executor/4262:
[  276.192254][ T5887] 8021q: adding VLAN 0 to HW filter on device batadv0
[  276.201537][   T28] 2 locks held by kworker/0:7/4298:
[  276.212651][   T28]  #0: ffff888017c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  276.235381][   T28]  #1: ffffc90004267d20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  276.260633][   T28] 2 locks held by kworker/u4:6/4304:
[  276.271693][   T28]  #0: ffff888017c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  276.315452][   T28]  #1: ffffc900042a7d20 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  276.352891][   T28] 2 locks held by kworker/u4:11/4446:
[  276.370878][   T28] 2 locks held by rm/6100:
[  276.394235][   T28] 
[  276.405530][   T28] =============================================
[  276.405530][   T28] 
[  276.424349][   T28] NMI backtrace for cpu 0
[  276.428816][   T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.127-syzkaller #0
[  276.436743][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  276.446825][   T28] Call Trace:
[  276.450131][   T28]  <TASK>
[  276.453090][   T28]  dump_stack_lvl+0x1e3/0x2cb
[  276.457817][   T28]  ? nf_tcp_handle_invalid+0x642/0x642
[  276.463320][   T28]  ? panic+0x764/0x764
[  276.467424][   T28]  ? vprintk_emit+0x622/0x740
[  276.472149][   T28]  ? printk_sprint+0x490/0x490
[  276.476958][   T28]  ? nmi_cpu_backtrace+0x252/0x560
[  276.482100][   T28]  nmi_cpu_backtrace+0x4e1/0x560
[  276.487052][   T28]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  276.493209][   T28]  ? _printk+0xd1/0x111
[  276.497388][   T28]  ? panic+0x764/0x764
[  276.501483][   T28]  ? __wake_up_klogd+0xcc/0x100
[  276.506354][   T28]  ? panic+0x764/0x764
[  276.510440][   T28]  ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0
[  276.516520][   T28]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  276.522602][   T28]  nmi_trigger_cpumask_backtrace+0x1ae/0x3f0
[  276.528597][   T28]  watchdog+0xf88/0xfd0
[  276.532768][   T28]  ? watchdog+0x1f8/0xfd0
[  276.537113][   T28]  kthread+0x28d/0x320
[  276.541182][   T28]  ? hungtask_pm_notify+0x50/0x50
[  276.546215][   T28]  ? kthread_blkcg+0xd0/0xd0
[  276.550808][   T28]  ret_from_fork+0x1f/0x30
[  276.555244][   T28]  </TASK>
[  276.558973][   T28] Sending NMI from CPU 0 to CPUs 1:
[  276.564213][    C1] NMI backtrace for cpu 1
[  276.564235][    C1] CPU: 1 PID: 4262 Comm: syz-executor Not tainted 6.1.127-syzkaller #0
[  276.564252][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  276.564262][    C1] RIP: 0010:__rcu_read_lock+0x2f/0xb0
[  276.564288][    C1] Code: 53 49 be 00 00 00 00 00 fc ff df 65 4c 8b 3d b8 1a 8e 7e 49 81 c7 3c 04 00 00 4c 89 fb 48 c1 eb 03 42 0f b6 04 33 84 c0 75 2f <41> 8b 2f ff c5 42 0f b6 04 33 84 c0 75 38 41 89 2f 42 0f b6 04 33
[  276.564302][    C1] RSP: 0018:ffffc90004087628 EFLAGS: 00000046
[  276.564317][    C1] RAX: 0000000000000000 RBX: 1ffff1100fcaabaf RCX: ffff88807e555940
[  276.564330][    C1] RDX: 00000000ffffffff RSI: 0000000000000013 RDI: ffffea00014a4a80
[  276.564342][    C1] RBP: ffffea00014a4a80 R08: ffffffff81b7066d R09: fffff94000294951
[  276.564355][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88813fffa000
[  276.564367][    C1] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff88807e555d7c
[  276.564380][    C1] FS:  0000555566271500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  276.564395][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  276.564407][    C1] CR2: 00007f3905ab5440 CR3: 000000005bf30000 CR4: 00000000003506e0
[  276.564421][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  276.564431][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  276.564442][    C1] Call Trace:
[  276.564447][    C1]  <NMI>
[  276.564453][    C1]  ? nmi_cpu_backtrace+0x3de/0x560
[  276.564470][    C1]  ? read_lock_is_recursive+0x10/0x10
[  276.564497][    C1]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  276.564514][    C1]  ? nmi_handle+0x25/0x440
[  276.564548][    C1]  ? nmi_cpu_backtrace_handler+0x8/0x10
[  276.564565][    C1]  ? nmi_handle+0x12e/0x440
[  276.564590][    C1]  ? nmi_handle+0x25/0x440
[  276.564616][    C1]  ? __rcu_read_lock+0x2f/0xb0
[  276.564634][    C1]  ? default_do_nmi+0x62/0x150
[  276.564653][    C1]  ? exc_nmi+0xa8/0x100
[  276.564668][    C1]  ? end_repeat_nmi+0x16/0x31
[  276.564688][    C1]  ? filemap_unaccount_folio+0xdd/0xa60
[  276.564715][    C1]  ? __rcu_read_lock+0x2f/0xb0
[  276.564734][    C1]  ? __rcu_read_lock+0x2f/0xb0
[  276.564754][    C1]  ? __rcu_read_lock+0x2f/0xb0
[  276.564772][    C1]  </NMI>
[  276.564777][    C1]  <TASK>
[  276.564790][    C1]  __mod_lruvec_page_state+0x9f/0x420
[  276.564814][    C1]  ? PageHeadHuge+0x8e/0x1c0
[  276.564836][    C1]  filemap_unaccount_folio+0x12a/0xa60
[  276.564864][    C1]  __filemap_remove_folio+0xc7/0xaa0
[  276.564890][    C1]  ? __rwlock_init+0x140/0x140
[  276.564910][    C1]  ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30
[  276.564938][    C1]  ? _raw_spin_lock_irq+0xdb/0x110
[  276.564962][    C1]  ? _raw_spin_lock_irqsave+0x120/0x120
[  276.564985][    C1]  ? folio_mapping+0x200/0x550
[  276.565010][    C1]  filemap_remove_folio+0x105/0x2e0
[  276.565036][    C1]  truncate_inode_folio+0x59/0x70
[  276.565054][    C1]  shmem_undo_range+0x570/0x2390
[  276.565089][    C1]  ? shmem_truncate_range+0xb0/0xb0
[  276.565148][    C1]  shmem_evict_inode+0x265/0xa60
[  276.565168][    C1]  ? inode_wait_for_writeback+0x21f/0x280
[  276.565196][    C1]  ? shmem_free_in_core_inode+0xb0/0xb0
[  276.565215][    C1]  ? bit_waitqueue+0x30/0x30
[  276.565238][    C1]  ? do_raw_spin_unlock+0x137/0x8a0
[  276.565257][    C1]  ? shmem_free_in_core_inode+0xb0/0xb0
[  276.565276][    C1]  evict+0x529/0x930
[  276.565311][    C1]  ? proc_nr_inodes+0x310/0x310
[  276.565342][    C1]  ? _raw_spin_unlock+0x24/0x40
[  276.565366][    C1]  ? iput+0x73f/0x980
[  276.565393][    C1]  do_unlinkat+0x509/0x820
[  276.565423][    C1]  ? fsnotify_link_count+0xf0/0xf0
[  276.565457][    C1]  __x64_sys_unlink+0x45/0x50
[  276.565479][    C1]  do_syscall_64+0x3b/0xb0
[  276.565493][    C1]  ? clear_bhb_loop+0x45/0xa0
[  276.565509][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  276.565542][    C1] RIP: 0033:0x7f36ecb8c2d7
[  276.565556][    C1] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  276.565570][    C1] RSP: 002b:00007ffcf7662c28 EFLAGS: 00000206 ORIG_RAX: 0000000000000057
[  276.565587][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f36ecb8c2d7
[  276.565599][    C1] RDX: 00007ffcf7662c50 RSI: 00007ffcf7662ce0 RDI: 00007ffcf7662ce0
[  276.565612][    C1] RBP: 00007ffcf7662ce0 R08: 0000000000000000 R09: 0000000000000000
[  276.565622][    C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffcf7663d60
[  276.565633][    C1] R13: 00007f36ecc0e08c R14: 00007ffcf7663da0 R15: 0000000000000072
[  276.565653][    C1]  </TASK>
[  276.641186][ T4248] jfs_flush_journal: synclist not empty
[  277.178385][   T28] Kernel panic - not syncing: hung_task: blocked tasks
[  277.185293][   T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.127-syzkaller #0
[  277.193223][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  277.203569][   T28] Call Trace:
[  277.206878][   T28]  <TASK>
[  277.209835][   T28]  dump_stack_lvl+0x1e3/0x2cb
[  277.214559][   T28]  ? nf_tcp_handle_invalid+0x642/0x642
[  277.220060][   T28]  ? panic+0x764/0x764
[  277.224163][   T28]  ? llist_add_batch+0x160/0x1d0
[  277.229148][   T28]  ? vscnprintf+0x59/0x80
[  277.233526][   T28]  panic+0x318/0x764
[  277.235684][ T4248] metapage: ffff88803163a9b0: 00001000 00000000 00003aec 00000000
[  277.235711][ T4248] metapage: ffff88803163a9c0: 026b9120 ffffc900 7e6c4a28 ffff8880
[  277.235740][ T4248] metapage: ffff88803163a9d0: 00000004 00000000 00000000 00000000
[  277.235761][ T4248] metapage: ffff88803163a9e0: 587c2000 ffff8880 0000001c 00000000
[  277.235782][ T4248] metapage: ffff88803163a9f0: 00000000 dead4ead ffffffff 00000000
[  277.235803][ T4248] metapage: ffff88803163aa00: ffffffff ffffffff 974fb620 ffffffff
[  277.235823][ T4248] metapage: ffff88803163aa10: 90c55760 ffffffff 00000000 00000000
[  277.235844][ T4248] metapage: ffff88803163aa20: 8b45d660 ffffffff 00000200 00000000
[  277.235866][ T4248] metapage: ffff88803163aa30: 3163aa30 ffff8880 3163aa30 ffff8880
[  277.235887][ T4248] metapage: ffff88803163aa40: 0161f080 ffffea00 25bd0000 ffff8880
[  277.235907][ T4248] metapage: ffff88803163aa50: 00001000 00000000 00000001 00000000
[  277.235924][ T4248] metapage: ffff88803163aa60: 7e6c4800 ffff8880
[  277.235943][ T4248] page: ffffea000161f080: 00fff50000002056 ffffea000161f188
[  277.235962][ T4248] page: ffffea000161f090: ffffea00015ccd48 ffff888070928658
[  277.235979][ T4248] page: ffffea000161f0a0: 000000000000001c ffff88803163a9b0
[  277.235997][ T4248] page: ffffea000161f0b0: 00000002ffffffff ffff8880579dc000
[  277.236017][ T4248] tblock:ffffc900026b9110: 03040910 00000000 00003aec 00000000
[  277.236038][ T4248] tblock:ffffc900026b9120: 7e6c4a28 ffff8880 3163a9c0 ffff8880
[  277.236059][ T4248] tblock:ffffc900026b9130: 25bd0000 ffff8880 00030001 00000000
[  277.236079][ T4248] tblock:ffffc900026b9140: 00000000 dead4ead ffffffff 00000000
[  277.236099][ T4248] tblock:ffffc900026b9150: ffffffff ffffffff 974fb820 ffffffff
[  277.236119][ T4248] tblock:ffffc900026b9160: 90c56420 ffffffff 00000000 00000000
[  277.236140][ T4248] tblock:ffffc900026b9170: 8b45eb40 ffffffff 00000200 00000000
[  277.236160][ T4248] tblock:ffffc900026b9180: 026b9180 ffffc900 026b9180 ffffc900
[  277.236181][ T4248] tblock:ffffc900026b9190: 00000001 00000000 00000100 dead0000
[  277.236201][ T4248] tblock:ffffc900026b91a0: 00000122 dead0000 00003cbc 00000000
[  277.236221][ T4248] tblock:ffffc900026b91b0: 7d48d600 ffff8880 00000003 00000cbc
[  277.236241][ T4248] tblock:ffffc900026b91c0: 00000000 dead4ead ffffffff 00000000
[  277.236262][ T4248] tblock:ffffc900026b91d0: ffffffff ffffffff 974fb800 ffffffff
[  277.236282][ T4248] tblock:ffffc900026b91e0: 00000000 00000000 00000000 00000000
[  277.236301][ T4248] tblock:ffffc900026b91f0: 8b45eb00 ffffffff 00000200 00000000
[  277.236323][ T4248] tblock:ffffc900026b9200: 026b9200 ffffc900 026b9200 ffffc900
[  277.236343][ T4248] tblock:ffffc900026b9210: 7092b270 ffff8880 00000000 00000000
[  277.487049][   T28]  ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0
[  277.493216][   T28]  ? memcpy_page_flushcache+0xfc/0xfc
[  277.499033][   T28]  ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0
[  277.505187][   T28]  ? nmi_trigger_cpumask_backtrace+0x338/0x3f0
[  277.511346][   T28]  ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0
[  277.517506][   T28]  watchdog+0xfc7/0xfd0
[  277.521683][   T28]  ? watchdog+0x1f8/0xfd0
[  277.526029][   T28]  kthread+0x28d/0x320
[  277.530106][   T28]  ? hungtask_pm_notify+0x50/0x50
[  277.535164][   T28]  ? kthread_blkcg+0xd0/0xd0
[  277.539760][   T28]  ret_from_fork+0x1f/0x30
[  277.544192][   T28]  </TASK>
[  277.547455][   T28] Kernel Offset: disabled
[  277.551788][   T28] Rebooting in 86400 seconds..