last executing test programs:

42.679810007s ago: executing program 2 (id=734):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r2, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}}, 0x0)

42.521413557s ago: executing program 2 (id=735):
socket$inet_icmp(0x2, 0x2, 0x1)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, 0x0, 0xb4f)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x7}, @mixer_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0)
socket$igmp(0x2, 0x3, 0x2)

40.853407961s ago: executing program 2 (id=756):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001700)={'batadv0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000001800ffff00000000000000000a00000000000009"], 0x1c}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', r2, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1}})

40.532777827s ago: executing program 2 (id=758):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000300), 0x3, 0x445, &(0x7f0000000b00)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file2\x00', 0x10074, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f0000000000)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

39.837873249s ago: executing program 2 (id=763):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nodiscard}, {}, {@acl}, {@alloc_mode_reuse}, {@inline_xattr}, {@disable_roll_forward}, {@background_gc_on}, {@nobarrier}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S")
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
fsync(r0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)

38.864239831s ago: executing program 2 (id=770):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB='nonumtail=0,iocharset=cp950,umask=00000000000000000000000,uni_xlate=1,uni_xlate=1,shortname=win95,utf8=0,shortname=win95,utf8=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c696f636861727365743d6d616363726f617469616e2c696f636861727365743d63703433372c757365667265652c726f6469722c7569643e74353a7bd912f41b207e4bc4478b479f5a21373fd412d72f65702b57308921a665e19ef4cc41aac5e7c09d211fd4c1fbf43833c769c6b16297c14d0d92df4f0371acd1b184d6", @ANYRES16, @ANYBLOB="2c2b8f688a63e7770600"], 0x6, 0x2aa, &(0x7f0000000500)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setfsuid(r2)
utimensat(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0)

37.268764924s ago: executing program 5 (id=782):
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000008c0))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000300))

37.206872501s ago: executing program 5 (id=783):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000580)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/42, 0x2a}], 0x1}}], 0x1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@delqdisc={0x24}, 0x24}}, 0x0)

36.46087597s ago: executing program 1 (id=789):
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000280)=@multiplanar_mmap={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e7789ce8"}, 0x0, 0x1, {0x0}})
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]})
syz_open_dev$video4linux(0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x2753, &(0x7f0000000140), &(0x7f0000000080), &(0x7f0000ffc000))
io_uring_register$IORING_REGISTER_FILES(r1, 0x14, &(0x7f00000002c0)=[0xffffffffffffffff], 0x7)

36.242875929s ago: executing program 5 (id=790):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
ftruncate(r0, 0xc17a)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f00000000c0)=0x1f, 0x4)
sendto$inet(r1, &(0x7f0000000100)="1ce0", 0xffeb, 0x900, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10)

36.156738004s ago: executing program 5 (id=791):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x2805011, 0x0)

35.91664544s ago: executing program 5 (id=793):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
shmdt(0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00')
read$FUSE(r1, &(0x7f0000004480)={0x2020, 0x0, 0x0, <r2=>0x0}, 0x2020)
setuid(r2)
tkill(r0, 0x0)

35.496196742s ago: executing program 1 (id=795):
r0 = socket$igmp6(0xa, 0x3, 0x2)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010001"], 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

35.040438444s ago: executing program 5 (id=798):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x5c, r2, 0x11, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "84b7d0afc1"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x5c}}, 0x0)

35.033419242s ago: executing program 1 (id=800):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x4421, &(0x7f0000008940)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x18c)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0)
sendfile(r1, r1, 0x0, 0xceb8)
lseek(r1, 0x6, 0x3)

33.769853744s ago: executing program 1 (id=806):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x8000, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1, 0x5517, &(0x7f00000079c0)="$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")
mkdir(&(0x7f0000000640)='./bus\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000009c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

31.430143702s ago: executing program 1 (id=811):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@delalloc}, {@nouid32}]}, 0xfe, 0x24d, &(0x7f0000000840)="$eJzs3T9o3GYYB+BXuru6Z5vitkuh9A+UUlqDcbdCl3ZpwVCKKaXQFlxK6VTsgmOTzZcpS4ZkToKnLCZki5MxZDFZAlmdxIOzZIjJEJMhGS7odBcu9pkkPvsUrOcBnfRJn/RKoN93WnQXQGmNRcR3EVGJiPGIqEVE0t3h03waazeX62szEc3mLw+TVr+8nevsNxIRjYj4JqLa2ba4+sfm4/Ufvzi1UPv8wurv9UFdX7etzY2fts//fPLy1NeLaXvdaHvefR0HKemxrppEvHcYxd4QSbXoM+BVTB+/dDvL/fsR8Vkr/7VI25E9Pf/W9Vp8dW6vfc88uPXhIM8VOHjNZi37Dmw0gdJJW8/ASToREflymk5M5M/wdyrD6X9z88fG/51bmP2n6JEKOCijERs/XB26MrIj//cref6BoyvL/6/TK3ez5e1K0WcDDMRH+SzL//hfS1+G/EPpyD+Ul/xDeck/HAH7zK78Q3nJP5SX/MMRVussNHpuln8oL/mH8pJ/KK/u/AMA5dIcKvoNZKAoRY8/AAAAAAAAAAAAAAAAAADAbsv1tZnONKiaN85GbH0fEdVe9Sut/yOOeLv1Ofwoybo9l+S79eXPT/o8QJ8uFvz29Tv3iq1/8+PDOe6JF5v1vfotzUY0ss6T1eru+y9p33/79+5Lttf+7rPAa0p2tL/9bbD1d3q6Umz9qfWIa9n4M9lr/Enjg9a89/gz2v0Ty/v0/5M+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDAPAsAAP///YVqDQ==")
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
link(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

26.264971566s ago: executing program 1 (id=817):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioperm(0x0, 0x23d, 0xe)
pselect6(0x0, 0x0, 0x0, &(0x7f00000010c0), &(0x7f0000001100)={0x0, 0x3938700}, &(0x7f0000001040)={0x0})
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x108)
memfd_secret(0x0)

21.010939074s ago: executing program 3 (id=853):
r0 = io_uring_setup(0x30d3, &(0x7f0000000000))
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000080), 0xc)
read(r1, &(0x7f0000000180)=""/52, 0xfffffdef)
getpeername$qrtr(r1, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

20.522329815s ago: executing program 3 (id=855):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0)

20.47192459s ago: executing program 3 (id=856):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
bpf$BPF_BTF_GET_NEXT_ID(0x7, &(0x7f00000000c0)={0x20ffffff}, 0x8)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r1})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2b8000000000000})

20.363637685s ago: executing program 3 (id=857):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000e00)='./file0\x00', 0x200000, &(0x7f0000000f40)={[{@grpjquota}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@nojournal_checksum}, {@dioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x85c5}}, {@nojournal_checksum}, {@sysvgroups}]}, 0xfe, 0x584, &(0x7f0000001000)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000), &(0x7f0000000100), 0x2, 0x0)
mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000400), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]})

20.049019053s ago: executing program 3 (id=858):
socket(0x40000000015, 0x5, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)
setrlimit(0x7, &(0x7f0000000400)={0x8, 0x1000})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x89e0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

18.137166422s ago: executing program 3 (id=864):
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xc1, &(0x7f0000000880)=@string={0xc1, 0x3, "289bf4c57b2888772af1dd9694320cfb2d07d97fdb0b750006e17c86114975f57eea829ae05b0762bfb3865b4dc7be7b412390ce8feb28b457028c7d4750e851ff7810747fd25d53316b6b0f8b7d9e1b75e1be0d6c7f0cf5e0f860a47204b08ac6794f29dd1392477baca45273c1ce23af0c9d8e5f18c553c0617d3014aed74eea42fede243df170462c644f6a1f883b3091efcc7a07e87b70b7c587da7b226c5a382dd527f87ae26ebaa1a8c70524230cc7070779dce3e8408bedb1ae0fed"}}]})
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000002c0)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc01c64b9, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, <r2=>0x0], &(0x7f00000000c0), 0x3, r1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000840)={0x0, 0x1, &(0x7f0000000040)=[r1], &(0x7f0000000980)=[0x3], &(0x7f0000000780)=[r2], &(0x7f0000000940)})

8.109206614s ago: executing program 0 (id=909):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000000)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000440)={&(0x7f00000002c0)=[0x0, 0x0, <r3=>0x0], 0x0, 0x0, 0x0, 0x3})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000480)={0x0, 0x0, r1, r3, 0x0, 0x0, 0x0, 0x9, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0d0fc9a7ff4bdd3d65a0ceb36a03b8fc10129f00"}})

6.613754603s ago: executing program 0 (id=912):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x3a)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32)
close(r2)

6.471779516s ago: executing program 0 (id=913):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0xfefc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r1, 0x0)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000280))

6.298253793s ago: executing program 0 (id=914):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
write$cgroup_int(r1, &(0x7f0000000100), 0x12)
set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x4)
syz_io_uring_setup(0x5b3f, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x0, 0x0)

6.070260628s ago: executing program 0 (id=915):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xcf543737ff523749}}, 0x50)
newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})

5.441185687s ago: executing program 0 (id=918):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="5300000007000046009d40ed"], 0x53)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})

3.638643834s ago: executing program 4 (id=922):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8000, @none, 0x7}, 0xe)
listen(r0, 0xd50a)
getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x516f55c6494de8e3)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1f}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x60d6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3f, 0x2}, 0xe)

3.526306342s ago: executing program 4 (id=923):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
write$binfmt_script(r0, &(0x7f0000000180), 0xb)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x23010, 0x0)
mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x23010, 0x0)

3.367949418s ago: executing program 4 (id=924):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00')
r1 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r2, 0x0)
fchdir(r0)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0)

3.243197777s ago: executing program 4 (id=925):
r0 = socket(0x1e, 0x1, 0x0)
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001b00), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x2007ff}}}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)

1.083466855s ago: executing program 4 (id=926):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000100)=0x3, 0x4)

0s ago: executing program 4 (id=927):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x444, &(0x7f0000000980)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0xffffff85)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x6611)

kernel console output (not intermixed with test programs):

rom 0 to 40427
[  202.725937][ T7501] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  202.733846][ T7501] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  203.029062][ T7511] loop1: detected capacity change from 0 to 32768
[  203.183536][ T7511] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.592 (7511)
[  203.292862][ T7511] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  203.317372][ T7511] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm
[  203.333039][ T7511] BTRFS info (device loop1): using free-space-tree
[  203.383849][ T7524] loop5: detected capacity change from 0 to 4096
[  203.400735][ T7501] F2FS-fs (loop0): Found nat_bits in checkpoint
[  203.436819][ T7530] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  203.667777][   T46] usb 5-1: USB disconnect, device number 11
[  203.723592][ T7501] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  203.733618][ T7501] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  203.844542][ T7501] bio_check_eod: 1109 callbacks suppressed
[  203.844571][ T7501] syz.0.591: attempt to access beyond end of device
[  203.844571][ T7501] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  203.942355][ T7545] loop5: detected capacity change from 0 to 1024
[  203.966042][ T7511] BTRFS info (device loop1): rebuilding free space tree
[  203.987759][ T7545] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.016890][ T7501] syz.0.591: attempt to access beyond end of device
[  204.016890][ T7501] loop0: rw=0, sector=45096, nr_sectors = 8 limit=40427
[  204.093830][ T7550] loop3: detected capacity change from 0 to 128
[  204.246589][ T6944] syz-executor: attempt to access beyond end of device
[  204.246589][ T6944] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  204.282326][ T6944] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  204.317436][ T5231] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.534734][ T5246] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  204.546314][ T6744] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  204.628579][ T7556] loop3: detected capacity change from 0 to 4096
[  204.654578][ T7556] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  204.684500][ T5246] usb 3-1: Using ep0 maxpacket: 16
[  204.707468][ T5246] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA5, changing to 0x85
[  204.727469][ T5246] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 104
[  204.746118][ T7556] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  204.776248][ T5246] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  204.794512][ T5246] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.853705][ T5246] usb 3-1: Product: syz
[  204.866234][ T5246] usb 3-1: Manufacturer: syz
[  204.870903][ T5246] usb 3-1: SerialNumber: syz
[  204.907113][ T5246] usb 3-1: config 0 descriptor??
[  204.920722][ T7553] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  204.988772][ T5246] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input16
[  205.154636][   T54] Bluetooth: Frame is too long (len 12, expected len 4)
[  205.167677][   T46] usb 3-1: USB disconnect, device number 10
[  205.167748][    C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  205.372540][ T7563] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  205.609635][ T7571] loop4: detected capacity change from 0 to 256
[  205.662818][ T7573] loop1: detected capacity change from 0 to 512
[  205.703418][ T7557] loop5: detected capacity change from 0 to 32768
[  205.728778][ T7573] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.608: casefold flag without casefold feature
[  205.762688][ T7557] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.601 (7557)
[  205.775238][ T7570] loop0: detected capacity change from 0 to 32768
[  205.818965][ T7573] EXT4-fs error (device loop1): ext4_orphan_get:1391: comm syz.1.608: couldn't read orphan inode 15 (err -117)
[  205.828393][ T7557] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  205.842272][ T7557] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm
[  205.843495][ T7573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.851236][ T7557] BTRFS info (device loop5): using free-space-tree
[  205.932884][ T7570] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  206.052499][ T7557] BTRFS info (device loop5): rebuilding free space tree
[  206.060215][ T5246] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  206.084620][ T7570] XFS (loop0): Ending clean mount
[  206.093893][ T7570] XFS (loop0): Quotacheck needed: Please wait.
[  206.160705][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  206.162782][ T7570] XFS (loop0): Quotacheck: Done.
[  206.169599][   T54] Bluetooth: hci3: command 0x0406 tx timeout
[  206.172780][ T5233] Bluetooth: hci4: command 0x0406 tx timeout
[  206.202776][ T6744] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.238435][ T5291] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  206.265927][   T29] audit: type=1804 audit(1729203875.596:17): pid=7557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.601" name="/newroot/115/bus/bus" dev="loop5" ino=263 res=1 errno=0
[  206.293029][ T5246] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  206.307131][ T5246] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  206.321519][   T29] audit: type=1804 audit(1729203875.656:18): pid=7557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.601" name="/newroot/115/bus/bus" dev="loop5" ino=263 res=1 errno=0
[  206.347760][ T5246] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  206.365077][ T5246] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  206.373247][ T5246] usb 4-1: SerialNumber: syz
[  206.432269][ T5291] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  206.453044][ T5291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  206.474601][ T5329] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  206.504403][ T5291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  206.520765][ T5291] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  206.574407][ T5291] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  206.583810][ T5291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.611396][ T5291] usb 5-1: config 0 descriptor??
[  206.621692][ T5246] usb 4-1: 0:2 : does not exist
[  206.657698][ T6944] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  206.676879][ T5329] usb 3-1: Using ep0 maxpacket: 8
[  206.692936][ T5231] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  206.698325][ T5246] usb 4-1: USB disconnect, device number 13
[  206.715900][ T5329] usb 3-1: config 0 has no interfaces?
[  206.721670][ T5329] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  206.743605][ T5329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.791740][ T5329] usb 3-1: config 0 descriptor??
[  207.057358][ T5246] usb 3-1: USB disconnect, device number 11
[  207.089428][ T5291] plantronics 0003:047F:FFFF.000B: ignoring exceeding usage max
[  207.100921][ T5291] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving
[  207.147369][ T5291] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  207.634633][ T5329] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  207.773533][ T7608] loop1: detected capacity change from 0 to 32768
[  207.816311][ T7608] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.626 (7608)
[  207.816675][ T5329] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  207.878368][ T5329] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  207.902201][ T7608] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  207.917781][ T5329] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  207.954276][ T5329] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  207.967840][ T7608] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  207.994992][ T7608] BTRFS info (device loop1): using free-space-tree
[  207.995721][ T5329] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  208.043511][ T5329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.077706][ T5329] usb 4-1: config 0 descriptor??
[  208.150550][   T29] audit: type=1800 audit(1729203877.486:19): pid=7608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.626" name="bus" dev="loop1" ino=263 res=0 errno=0
[  208.261024][   T29] audit: type=1800 audit(1729203877.596:20): pid=7608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.626" name="bus" dev="loop1" ino=263 res=0 errno=0
[  208.335619][ T7616] loop5: detected capacity change from 0 to 40427
[  208.345910][ T7616] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  208.353838][ T7616] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  208.401948][ T7616] F2FS-fs (loop5): Found nat_bits in checkpoint
[  208.487479][ T7646] loop0: detected capacity change from 0 to 128
[  208.513336][ T7616] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  208.519440][ T5329] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0
[  208.521129][ T7616] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  208.548279][ T5329] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving
[  208.564605][   T46] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  208.580129][ T5329] plantronics 0003:047F:FFFF.000C: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  208.622886][ T7616] syz.5.613: attempt to access beyond end of device
[  208.622886][ T7616] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  208.689111][ T7616] syz.5.613: attempt to access beyond end of device
[  208.689111][ T7616] loop5: rw=0, sector=45096, nr_sectors = 8 limit=40427
[  208.750452][   T46] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  208.761920][   T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  208.784625][   T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  208.802442][   T46] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  208.823358][ T5231] syz-executor: attempt to access beyond end of device
[  208.823358][ T5231] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  208.840541][   T46] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  208.858991][   T46] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  208.869065][ T5231] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  208.878406][   T46] usb 3-1: Manufacturer: syz
[  208.878753][ T6744] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  208.895469][   T46] usb 3-1: config 0 descriptor??
[  209.243832][ T2894] bridge_slave_1: left allmulticast mode
[  209.251267][ T5330] usb 5-1: USB disconnect, device number 12
[  209.280537][ T2894] bridge_slave_1: left promiscuous mode
[  209.315109][ T2894] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.386026][   T46] appleir 0003:05AC:8243.000D: unknown main item tag 0x0
[  209.393831][   T46] appleir 0003:05AC:8243.000D: No inputs registered, leaving
[  209.435513][ T2894] bridge_slave_0: left allmulticast mode
[  209.452551][ T2894] bridge_slave_0: left promiscuous mode
[  209.456645][   T46] appleir 0003:05AC:8243.000D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  209.480838][ T2894] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.953119][ T5291] usb 3-1: USB disconnect, device number 12
[  210.152629][ T7669] Bluetooth: MGMT ver 1.23
[  210.485076][ T5299] usb 4-1: USB disconnect, device number 14
[  210.903290][ T2894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  210.933310][ T2894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  210.952312][ T2894] bond0 (unregistering): Released all slaves
[  211.451598][ T7676] loop4: detected capacity change from 0 to 32768
[  211.475626][ T7696] raw_sendmsg: syz.2.642 forgot to set AF_INET. Fix it!
[  211.561974][ T7698] loop0: detected capacity change from 0 to 512
[  211.603949][ T7698] EXT4-fs: Ignoring removed i_version option
[  211.674426][ T5299] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  211.721100][ T7698] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.643: bad orphan inode 1
[  211.786335][ T7676] overlayfs: upper fs needs to support d_type.
[  211.793889][ T7676] overlayfs: upper fs does not support tmpfile.
[  211.825308][ T7676] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  211.837427][ T5299] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  211.856316][ T5299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  211.872039][ T5299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  211.891664][ T5299] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  211.893850][ T7685] loop3: detected capacity change from 0 to 40427
[  211.906374][ T7698] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.931421][ T7685] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  211.939555][ T7685] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  211.964677][ T5299] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  211.978008][ T7685] F2FS-fs (loop3): Found nat_bits in checkpoint
[  212.014746][ T5299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.048887][ T5299] usb 2-1: config 0 descriptor??
[  212.064921][ T5329] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  212.131060][ T7685] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  212.138513][ T7685] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  212.186049][ T2894] hsr_slave_0: left promiscuous mode
[  212.210145][ T2894] hsr_slave_1: left promiscuous mode
[  212.241952][ T7685] syz.3.638: attempt to access beyond end of device
[  212.241952][ T7685] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  212.256294][ T5329] usb 3-1: Using ep0 maxpacket: 8
[  212.262196][ T2894] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  212.270632][ T2894] batman_adv: batadv0: Removing interface: batadv_slave_0
[  212.279480][ T5329] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  212.291562][ T5329] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  212.295747][ T6944] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.343243][ T5329] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  212.355057][ T2894] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  212.362606][ T2894] batman_adv: batadv0: Removing interface: batadv_slave_1
[  212.406777][ T5329] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  212.425555][ T5329] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  212.439386][ T5329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.485996][ T2894] veth1_vlan: left promiscuous mode
[  212.498823][ T2894] veth0_vlan: left promiscuous mode
[  212.519045][ T7685] syz.3.638: attempt to access beyond end of device
[  212.519045][ T7685] loop3: rw=0, sector=45096, nr_sectors = 8 limit=40427
[  212.557814][ T5299] plantronics 0003:047F:FFFF.000E: ignoring exceeding usage max
[  212.569489][ T5299] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving
[  212.591694][ T5299] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  212.628405][ T7349] syz-executor: attempt to access beyond end of device
[  212.628405][ T7349] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  212.660501][ T5329] usb 3-1: GET_CAPABILITIES returned 0
[  212.666176][ T5329] usbtmc 3-1:16.0: can't read capabilities
[  212.682932][ T7349] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  212.714510][ T5330] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  212.871050][ T5330] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  212.888985][ T5299] usb 3-1: USB disconnect, device number 13
[  212.909172][ T5330] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  212.935995][ T5330] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  212.956411][ T5330] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  212.992863][ T5330] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  213.009184][ T5330] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  213.026854][ T5330] usb 6-1: Manufacturer: syz
[  213.074673][ T5330] usb 6-1: config 0 descriptor??
[  213.317873][ T7716] loop0: detected capacity change from 0 to 32768
[  213.449191][ T7716] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  213.532853][ T5330] appleir 0003:05AC:8243.000F: unknown main item tag 0x0
[  213.551378][ T5330] appleir 0003:05AC:8243.000F: No inputs registered, leaving
[  213.602382][ T5330] appleir 0003:05AC:8243.000F: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[  213.788794][ T7716] XFS (loop0): Ending clean mount
[  213.806450][ T7716] XFS (loop0): Quotacheck needed: Please wait.
[  213.894717][ T7716] XFS (loop0): Quotacheck: Done.
[  213.975975][ T2894] team0 (unregistering): Port device team_slave_1 removed
[  214.045103][ T2894] team0 (unregistering): Port device team_slave_0 removed
[  214.093327][ T6944] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  214.686497][ T5330] usb 2-1: USB disconnect, device number 10
[  214.790156][ T7734] loop3: detected capacity change from 0 to 32768
[  214.846306][ T7734] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  215.016943][ T7734] XFS (loop3): Ending clean mount
[  215.060722][ T7734] XFS (loop3): Quotacheck needed: Please wait.
[  215.168420][ T7734] XFS (loop3): Quotacheck: Done.
[  215.416212][ T7739] netlink: 'syz.1.656': attribute type 2 has an invalid length.
[  215.423932][ T7739] netlink: 'syz.1.656': attribute type 4 has an invalid length.
[  215.464544][ T7739] netlink: 28 bytes leftover after parsing attributes in process `syz.1.656'.
[  215.540319][ T7741] loop0: detected capacity change from 0 to 32768
[  215.556619][ T5232] usb 6-1: USB disconnect, device number 10
[  215.568969][ T7741] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.657 (7741)
[  215.603733][ T7741] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  215.612433][ T7349] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  215.663055][ T7741] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  215.698311][ T7751] loop2: detected capacity change from 0 to 2048
[  215.709416][ T7741] BTRFS info (device loop0): using free-space-tree
[  215.731965][ T7751] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  216.584598][ T7756] loop5: detected capacity change from 0 to 32768
[  216.722724][ T7756] overlayfs: upper fs needs to support d_type.
[  216.729696][ T7756] overlayfs: upper fs does not support tmpfile.
[  216.740999][ T7756] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  216.816559][ T2894] IPVS: stop unused estimator thread 0...
[  216.883934][ T7781] loop1: detected capacity change from 0 to 64
[  217.053911][   T29] audit: type=1800 audit(1729203886.386:21): pid=7781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.666" name="bus" dev="loop1" ino=21 res=0 errno=0
[  217.275240][ T5230] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  217.285870][ T5230] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  217.295385][ T5230] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  217.303447][ T5230] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  217.311205][ T5230] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  217.318749][ T5230] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  217.635581][ T7792] loop2: detected capacity change from 0 to 512
[  217.643102][ T7792] EXT4-fs: Ignoring removed i_version option
[  217.660131][ T7792] EXT4-fs: Ignoring removed nobh option
[  217.746544][ T7792] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  217.767343][ T2955] kworker/u8:8: attempt to access beyond end of device
[  217.767343][ T2955] loop1: rw=1, sector=1507, nr_sectors = 24 limit=64
[  217.781845][ T2955] kworker/u8:8: attempt to access beyond end of device
[  217.781845][ T2955] loop1: rw=1, sector=1651, nr_sectors = 200 limit=64
[  217.798722][ T2955] kworker/u8:8: attempt to access beyond end of device
[  217.798722][ T2955] loop1: rw=1, sector=2011, nr_sectors = 464 limit=64
[  217.813598][ T2955] kworker/u8:8: attempt to access beyond end of device
[  217.813598][ T2955] loop1: rw=1, sector=2747, nr_sectors = 184 limit=64
[  217.828572][ T2955] kworker/u8:8: attempt to access beyond end of device
[  217.828572][ T2955] loop1: rw=1, sector=3219, nr_sectors = 256 limit=64
[  217.841124][ T6944] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  217.843022][ T2955] kworker/u8:8: attempt to access beyond end of device
[  217.843022][ T2955] loop1: rw=1, sector=3555, nr_sectors = 32 limit=64
[  217.866640][ T2955] kworker/u8:8: attempt to access beyond end of device
[  217.866640][ T2955] loop1: rw=1, sector=3619, nr_sectors = 24 limit=64
[  217.881831][ T2955] kworker/u8:8: attempt to access beyond end of device
[  217.881831][ T2955] loop1: rw=1, sector=3667, nr_sectors = 504 limit=64
[  217.896608][ T2955] kworker/u8:8: attempt to access beyond end of device
[  217.896608][ T2955] loop1: rw=1, sector=4172, nr_sectors = 16 limit=64
[  217.910359][ T2955] kworker/u8:8: attempt to access beyond end of device
[  217.910359][ T2955] loop1: rw=1, sector=4188, nr_sectors = 1 limit=64
[  217.923982][ T2955] buffer_io_error: 974 callbacks suppressed
[  217.924006][ T2955] Buffer I/O error on dev loop1, logical block 4188, lost async page write
[  217.937843][ T7792] EXT4-fs (loop2): 1 truncate cleaned up
[  217.938710][ T2955] Buffer I/O error on dev loop1, logical block 4189, lost async page write
[  217.951887][ T7792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.953111][ T2955] Buffer I/O error on dev loop1, logical block 4190, lost async page write
[  217.974096][ T2955] Buffer I/O error on dev loop1, logical block 4191, lost async page write
[  217.983345][ T2955] Buffer I/O error on dev loop1, logical block 4192, lost async page write
[  217.992304][ T2955] Buffer I/O error on dev loop1, logical block 4193, lost async page write
[  218.001121][ T2955] Buffer I/O error on dev loop1, logical block 4196, lost async page write
[  218.009893][ T2955] Buffer I/O error on dev loop1, logical block 4197, lost async page write
[  218.019809][ T2955] Buffer I/O error on dev loop1, logical block 4358, lost async page write
[  218.028781][ T2955] Buffer I/O error on dev loop1, logical block 4359, lost async page write
[  218.260829][ T5239] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.344920][ T5330] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  218.528894][ T5330] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  218.551120][ T5330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  218.604511][ T5330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  218.639180][ T5330] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  218.694650][ T5330] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  218.703824][ T5330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.813866][ T5330] usb 4-1: config 0 descriptor??
[  218.936759][ T4618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  218.940177][  T126] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.947239][ T4618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  218.971259][ T4618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  218.989845][ T4618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  218.999764][ T4618] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  219.010363][ T4618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  219.064857][ T5246] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  219.135804][   T46] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  219.226188][  T126] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.227059][ T5246] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  219.248535][ T5246] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  219.264473][ T5246] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  219.277956][ T5246] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  219.295307][ T5330] plantronics 0003:047F:FFFF.0010: ignoring exceeding usage max
[  219.306952][ T5330] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving
[  219.315128][ T5246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.319739][ T7783] chnl_net:caif_netlink_parms(): no params data found
[  219.332840][ T5330] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  219.363672][ T5246] usb 3-1: config 0 descriptor??
[  219.398944][  T126] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.446364][   T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  219.457576][   T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  219.467947][   T46] usb 1-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00
[  219.477348][   T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.487827][   T46] usb 1-1: config 0 descriptor??
[  219.561742][  T126] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.584499][ T4618] Bluetooth: hci4: command tx timeout
[  219.617180][ T7800] loop1: detected capacity change from 0 to 32768
[  219.626607][ T7800] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.670 (7800)
[  219.674857][ T7800] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  219.691736][ T7800] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm
[  219.704542][ T7800] BTRFS info (device loop1): using free-space-tree
[  219.746453][   T46] usbhid 1-1:0.0: can't add hid device: -71
[  219.752573][   T46] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  219.766077][   T46] usb 1-1: USB disconnect, device number 7
[  219.779288][ T7783] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.801476][ T7783] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.818689][ T5246] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0
[  219.821976][ T7783] bridge_slave_0: entered allmulticast mode
[  219.828675][ T5246] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving
[  219.834043][ T7783] bridge_slave_0: entered promiscuous mode
[  219.883274][ T5246] plantronics 0003:047F:FFFF.0011: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  219.904523][ T7783] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.913972][ T7783] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.926547][ T7783] bridge_slave_1: entered allmulticast mode
[  219.936301][ T7783] bridge_slave_1: entered promiscuous mode
[  220.065550][ T7783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  220.098260][ T6744] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  220.106034][ T7783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  220.133625][  T126] bridge_slave_1: left allmulticast mode
[  220.140187][  T126] bridge_slave_1: left promiscuous mode
[  220.146303][  T126] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.180310][  T126] bridge_slave_0: left allmulticast mode
[  220.203701][  T126] bridge_slave_0: left promiscuous mode
[  220.237673][  T126] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.497915][ T7834] loop0: detected capacity change from 0 to 512
[  220.528153][ T7834] EXT4-fs: Ignoring removed nomblk_io_submit option
[  220.556289][ T7834] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  220.564601][ T7834] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002]
[  220.573621][ T7834] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80)
[  220.584048][ T7834] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features
[  220.620042][ T7834] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  220.683521][ T7834] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none.
[  220.707141][ T7834] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80)
[  220.809509][ T5299] usb 3-1: USB disconnect, device number 14
[  220.836230][ T6944] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.104594][ T4618] Bluetooth: hci1: command tx timeout
[  221.384566][ T5299] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  221.539095][ T5299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  221.551284][  T126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  221.564388][ T5299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  221.589572][  T126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  221.594239][ T5299] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  221.624538][ T5299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.637059][  T126] bond0 (unregistering): Released all slaves
[  221.672828][ T4618] Bluetooth: hci4: command tx timeout
[  221.679636][ T5299] usb 1-1: config 0 descriptor??
[  221.692345][ T7808] chnl_net:caif_netlink_parms(): no params data found
[  221.744719][ T5330] usb 4-1: reset high-speed USB device number 15 using dummy_hcd
[  221.764866][ T5330] usb 4-1: device reset changed ep0 maxpacket size!
[  221.775851][ T5246] usb 4-1: USB disconnect, device number 15
[  221.841539][  T126] tipc: Disabling bearer <udp:s>
[  221.855101][  T126] tipc: Left network mode
[  221.875494][ T7783] team0: Port device team_slave_0 added
[  221.913869][ T7783] team0: Port device team_slave_1 added
[  221.935984][ T5246] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  222.030359][ T7845] loop1: detected capacity change from 0 to 32768
[  222.084575][ T7845] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  222.114467][ T5246] usb 4-1: Using ep0 maxpacket: 16
[  222.136715][ T5299] lg-g15 0003:046D:C222.0012: unknown main item tag 0x0
[  222.143929][ T5246] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  222.165864][ T5246] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  222.176092][ T5246] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  222.189176][ T5246] usb 4-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c
[  222.198445][ T5246] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.199475][ T7845] XFS (loop1): Ending clean mount
[  222.235194][ T5246] usb 4-1: config 0 descriptor??
[  222.243047][ T5299] lg-g15 0003:046D:C222.0012: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0
[  222.303387][ T7783] batman_adv: batadv0: Adding interface: batadv_slave_0
[  222.310935][ T7783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  222.316378][ T7856] loop2: detected capacity change from 0 to 32768
[  222.337138][ T7783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  222.373805][   T46] usb 1-1: USB disconnect, device number 8
[  222.434576][ T7856] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  222.507338][ T7783] batman_adv: batadv0: Adding interface: batadv_slave_1
[  222.516361][ T6744] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  222.520235][ T7856] XFS (loop2): Ending clean mount
[  222.525087][ T7783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  222.525143][ T7783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  222.597518][  T126] hsr_slave_0: left promiscuous mode
[  222.608762][  T126] hsr_slave_1: left promiscuous mode
[  222.616497][  T126] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  222.628062][  T126] batman_adv: batadv0: Removing interface: batadv_slave_0
[  222.638930][  T126] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.642128][ T7856] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_bnobt block 0x4 
[  222.653880][  T126] batman_adv: batadv0: Removing interface: batadv_slave_1
[  222.666606][ T7856] XFS (loop2): Unmount and run xfs_repair
[  222.691761][ T7856] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  222.709791][ T5246] hid-multitouch 0003:045E:9994.0013: unknown main item tag 0x2
[  222.718666][ T7856] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  222.722721][ T5246] hid-multitouch 0003:045E:9994.0013: unknown main item tag 0x0
[  222.738001][ T5246] hid-multitouch 0003:045E:9994.0013: unknown main item tag 0x0
[  222.746020][ T5246] hid-multitouch 0003:045E:9994.0013: unknown main item tag 0x0
[  222.757841][  T126] veth1_macvtap: left promiscuous mode
[  222.763500][ T5246] hid-multitouch 0003:045E:9994.0013: unknown main item tag 0x0
[  222.772023][  T126] veth0_macvtap: left promiscuous mode
[  222.777857][ T5246] hid-multitouch 0003:045E:9994.0013: unknown main item tag 0x0
[  222.786117][  T126] veth1_vlan: left promiscuous mode
[  222.791489][  T126] veth0_vlan: left promiscuous mode
[  222.797298][ T5246] hid-multitouch 0003:045E:9994.0013: unknown main item tag 0x0
[  222.806750][ T5246] hid-multitouch 0003:045E:9994.0013: unknown main item tag 0x0
[  222.814571][ T5246] hid-multitouch 0003:045E:9994.0013: unknown main item tag 0x0
[  222.822287][ T5246] hid-multitouch 0003:045E:9994.0013: unknown main item tag 0x0
[  222.830254][ T5246] hid-multitouch 0003:045E:9994.0013: unknown main item tag 0x0
[  222.840374][ T7856] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  222.852592][ T5246] hid-multitouch 0003:045E:9994.0013: hidraw0: USB HID v0.00 Device [HID 045e:9994] on usb-dummy_hcd.3-1/input0
[  222.868116][ T7856] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  222.877985][ T7856] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  222.887336][ T7856] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  222.896510][ T7856] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  222.905594][ T7856] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  222.916043][ T7856] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  222.920591][ T5291] usb 4-1: USB disconnect, device number 16
[  222.925564][ T7856] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x244/0x4f0" at daddr 0x4 len 4 error 74
[  223.133031][ T7856] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x414/0x990 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  223.149064][ T7856] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  223.234956][ T4618] Bluetooth: hci1: command tx timeout
[  223.236512][ T5239] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  223.641790][ T7886] loop3: detected capacity change from 0 to 256
[  223.744459][ T4618] Bluetooth: hci4: command tx timeout
[  224.250282][ T7892] netlink: 'syz.3.694': attribute type 1 has an invalid length.
[  224.284420][ T7892] netlink: 9116 bytes leftover after parsing attributes in process `syz.3.694'.
[  224.333060][ T7892] netlink: 'syz.3.694': attribute type 2 has an invalid length.
[  224.364479][ T7892] netlink: 177 bytes leftover after parsing attributes in process `syz.3.694'.
[  224.413902][ T7884] loop0: detected capacity change from 0 to 32768
[  224.426611][ T7884] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.691 (7884)
[  224.479080][ T7884] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  224.492035][ T7884] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  224.530654][ T7884] BTRFS info (device loop0): using free-space-tree
[  224.559257][ T7894] loop3: detected capacity change from 0 to 64
[  224.612979][   T29] audit: type=1800 audit(1729203893.936:22): pid=7894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.695" name="bus" dev="loop3" ino=21 res=0 errno=0
[  224.638287][ T7888] loop2: detected capacity change from 0 to 32768
[  224.648116][ T7888] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.689 (7888)
[  224.691125][ T7888] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  224.702942][  T126] team0 (unregistering): Port device team_slave_1 removed
[  224.712260][ T7888] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm
[  224.775395][  T126] team0 (unregistering): Port device team_slave_0 removed
[  224.811457][   T29] audit: type=1800 audit(1729203894.146:23): pid=7884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.691" name="bus" dev="loop0" ino=263 res=0 errno=0
[  224.936906][ T7888] BTRFS info (device loop2): rebuilding free space tree
[  224.985820][ T7888] BTRFS info (device loop2): disabling free space tree
[  225.002324][ T7888] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  225.027483][ T7888] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  225.202775][ T6944] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  225.272921][ T4618] Bluetooth: hci1: command tx timeout
[  225.525088][ T5239] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  225.645557][   T53] bio_check_eod: 1649 callbacks suppressed
[  225.645586][   T53] kworker/u8:3: attempt to access beyond end of device
[  225.645586][   T53] loop3: rw=1, sector=1315, nr_sectors = 32 limit=64
[  225.675693][   T53] kworker/u8:3: attempt to access beyond end of device
[  225.675693][   T53] loop3: rw=1, sector=1771, nr_sectors = 136 limit=64
[  225.690129][   T53] kworker/u8:3: attempt to access beyond end of device
[  225.690129][   T53] loop3: rw=1, sector=2051, nr_sectors = 168 limit=64
[  225.704088][   T53] kworker/u8:3: attempt to access beyond end of device
[  225.704088][   T53] loop3: rw=1, sector=2219, nr_sectors = 1 limit=64
[  225.717912][   T53] buffer_io_error: 1438 callbacks suppressed
[  225.717938][   T53] Buffer I/O error on dev loop3, logical block 2219, lost async page write
[  225.732850][   T53] kworker/u8:3: attempt to access beyond end of device
[  225.732850][   T53] loop3: rw=1, sector=2220, nr_sectors = 1 limit=64
[  225.746550][   T53] Buffer I/O error on dev loop3, logical block 2220, lost async page write
[  225.755640][   T53] kworker/u8:3: attempt to access beyond end of device
[  225.755640][   T53] loop3: rw=1, sector=2221, nr_sectors = 1 limit=64
[  225.769361][   T53] Buffer I/O error on dev loop3, logical block 2221, lost async page write
[  225.778336][   T53] kworker/u8:3: attempt to access beyond end of device
[  225.778336][   T53] loop3: rw=1, sector=2222, nr_sectors = 1 limit=64
[  225.791983][   T53] Buffer I/O error on dev loop3, logical block 2222, lost async page write
[  225.800924][   T53] kworker/u8:3: attempt to access beyond end of device
[  225.800924][   T53] loop3: rw=1, sector=2247, nr_sectors = 1 limit=64
[  225.816266][   T53] Buffer I/O error on dev loop3, logical block 2247, lost async page write
[  225.825923][   T53] kworker/u8:3: attempt to access beyond end of device
[  225.825923][   T53] loop3: rw=1, sector=2248, nr_sectors = 1 limit=64
[  225.836450][ T4618] Bluetooth: hci4: command tx timeout
[  225.839780][   T53] Buffer I/O error on dev loop3, logical block 2248, lost async page write
[  225.853715][   T53] kworker/u8:3: attempt to access beyond end of device
[  225.853715][   T53] loop3: rw=1, sector=2249, nr_sectors = 1 limit=64
[  225.868070][   T53] Buffer I/O error on dev loop3, logical block 2249, lost async page write
[  225.876921][   T53] Buffer I/O error on dev loop3, logical block 2250, lost async page write
[  225.885949][   T53] Buffer I/O error on dev loop3, logical block 2315, lost async page write
[  225.894802][   T53] Buffer I/O error on dev loop3, logical block 2316, lost async page write
[  226.203902][ T7934] loop3: detected capacity change from 0 to 512
[  226.289526][ T7934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  226.302791][ T7934] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  226.486060][ T7349] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.705306][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.701'.
[  226.933933][ T7939] loop0: detected capacity change from 0 to 32768
[  227.014216][ T7939] overlayfs: upper fs needs to support d_type.
[  227.024628][ T7939] overlayfs: upper fs does not support tmpfile.
[  227.033949][ T7939] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  227.060352][ T7808] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.085010][ T7808] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.095383][ T7808] bridge_slave_0: entered allmulticast mode
[  227.107478][ T7808] bridge_slave_0: entered promiscuous mode
[  227.132360][ T7808] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.155182][ T7808] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.173109][ T7808] bridge_slave_1: entered allmulticast mode
[  227.195474][ T7808] bridge_slave_1: entered promiscuous mode
[  227.344584][ T4618] Bluetooth: hci1: command tx timeout
[  227.396196][ T5291] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  227.407344][ T7953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.708'.
[  227.433217][ T7808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  227.553291][ T7808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  227.577594][ T5291] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  227.588159][ T7783] hsr_slave_0: entered promiscuous mode
[  227.590562][ T5291] usb 3-1: config 0 has no interface number 0
[  227.604541][ T5291] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  227.605205][ T7783] hsr_slave_1: entered promiscuous mode
[  227.643241][ T5291] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  227.658672][ T7783] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  227.668430][ T7783] Cannot create hsr debugfs directory
[  227.684283][ T5291] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  227.706702][ T5291] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64
[  227.724532][ T5291] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  227.768234][ T7808] team0: Port device team_slave_0 added
[  227.774906][ T5291] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  227.784015][ T5291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.808174][ T7808] team0: Port device team_slave_1 added
[  227.817100][ T5291] usb 3-1: config 0 descriptor??
[  227.823163][ T7947] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  227.878445][ T5291] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  228.046498][ T7808] batman_adv: batadv0: Adding interface: batadv_slave_0
[  228.073898][ T7808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.154395][ T7808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  228.155197][   T46] usb 3-1: USB disconnect, device number 15
[  228.174465][   T46] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[  228.252245][ T7808] batman_adv: batadv0: Adding interface: batadv_slave_1
[  228.259294][  T126] IPVS: stop unused estimator thread 0...
[  228.276803][ T7808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  228.334464][ T7808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  228.632752][ T7808] hsr_slave_0: entered promiscuous mode
[  228.654794][ T7808] hsr_slave_1: entered promiscuous mode
[  228.671575][ T7808] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  228.704478][ T7808] Cannot create hsr debugfs directory
[  228.771442][ T7957] loop3: detected capacity change from 0 to 32768
[  228.814156][ T7956] loop1: detected capacity change from 0 to 32768
[  228.828063][ T7957] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.709 (7957)
[  228.880395][ T7957] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  228.905419][ T7957] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm
[  229.000169][ T5230] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  229.014787][ T5230] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  229.026858][ T5230] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  229.027905][ T7956] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  229.048779][ T5230] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  229.064479][ T5230] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  229.078442][ T7783] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.089560][ T5230] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  229.148853][ T7976] loop2: detected capacity change from 0 to 2048
[  229.161098][ T7956] XFS (loop1): Starting recovery (logdev: internal)
[  229.181561][ T7976] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  229.184684][ T7957] BTRFS info (device loop3): rebuilding free space tree
[  229.235287][ T7957] BTRFS info (device loop3): disabling free space tree
[  229.242480][ T7957] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  229.251259][ T7956] XFS (loop1): Ending recovery (logdev: internal)
[  229.253984][ T7957] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  229.309949][ T7976] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  229.368009][ T7783] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.461423][ T6744] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  229.676398][ T7783] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.774854][ T7349] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  229.870130][ T7783] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.210573][ T8000] loop3: detected capacity change from 0 to 512
[  230.220048][ T8001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.714'.
[  230.258212][ T8000] EXT4-fs error (device loop3): ext4_read_inode_bitmap:138: comm syz.3.718: Invalid inode bitmap blk 4 in block_group 0
[  230.289832][ T8000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  230.338137][ T8000] EXT4-fs error (device loop3): ext4_read_inode_bitmap:138: comm syz.3.718: Invalid inode bitmap blk 4 in block_group 0
[  230.358190][ T7964] chnl_net:caif_netlink_parms(): no params data found
[  230.367528][ T8000] EXT4-fs error (device loop3) in ext4_free_inode:360: Corrupt filesystem
[  230.500018][ T7349] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.612944][ T7964] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.661314][ T7964] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.695052][ T7964] bridge_slave_0: entered allmulticast mode
[  230.726922][ T7964] bridge_slave_0: entered promiscuous mode
[  230.746438][ T7964] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.753771][ T7964] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.763713][ T7964] bridge_slave_1: entered allmulticast mode
[  230.771371][ T7964] bridge_slave_1: entered promiscuous mode
[  230.870510][ T7964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  230.904888][ T5299] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  230.919245][ T7964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  230.987386][ T7783] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  231.049994][ T7783] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  231.075430][ T8027] netlink: 'syz.2.727': attribute type 3 has an invalid length.
[  231.093950][ T7964] team0: Port device team_slave_0 added
[  231.119944][ T7964] team0: Port device team_slave_1 added
[  231.134893][ T7783] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  231.174530][ T5299] usb 4-1: config 0 has an invalid interface number: 20 but max is 0
[  231.182715][ T5299] usb 4-1: config 0 has no interface number 0
[  231.195272][ T4618] Bluetooth: hci5: command tx timeout
[  231.200744][ T5299] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  231.212074][ T5299] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  231.234601][ T7783] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  231.242532][ T5299] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  231.252029][ T5299] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  231.260435][ T5299] usb 4-1: Product: syz
[  231.265177][ T5299] usb 4-1: Manufacturer: syz
[  231.269827][ T5299] usb 4-1: SerialNumber: syz
[  231.286115][ T5299] usb 4-1: config 0 descriptor??
[  231.291891][ T8016] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  231.306381][ T5299] usb-storage 4-1:0.20: USB Mass Storage device detected
[  231.321323][ T7964] batman_adv: batadv0: Adding interface: batadv_slave_0
[  231.321617][ T5299] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  231.336671][ T7964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.363269][ T7964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  231.380724][ T7964] batman_adv: batadv0: Adding interface: batadv_slave_1
[  231.387900][ T7964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.414134][ T7964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  231.491224][ T7808] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  231.512151][ T8016] netlink: 'syz.3.723': attribute type 9 has an invalid length.
[  231.522133][ T8016] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.723'.
[  231.525838][ T7808] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  231.555466][ T5299] scsi host1: usb-storage 4-1:0.20
[  231.565820][ T7808] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  231.585433][ T5299] usb 4-1: USB disconnect, device number 17
[  231.612379][ T7964] hsr_slave_0: entered promiscuous mode
[  231.619170][ T7964] hsr_slave_1: entered promiscuous mode
[  231.626063][ T7964] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  231.633661][ T7964] Cannot create hsr debugfs directory
[  231.676692][ T7808] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  231.909162][ T7783] 8021q: adding VLAN 0 to HW filter on device bond0
[  231.969030][ T7964] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.020801][ T7783] 8021q: adding VLAN 0 to HW filter on device team0
[  232.063722][ T7808] 8021q: adding VLAN 0 to HW filter on device bond0
[  232.085004][  T126] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.092183][  T126] bridge0: port 1(bridge_slave_0) entered forwarding state
[  232.128971][ T7964] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.185013][ T2894] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.192258][ T2894] bridge0: port 2(bridge_slave_1) entered forwarding state
[  232.263729][ T7964] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.287850][ T7808] 8021q: adding VLAN 0 to HW filter on device team0
[  232.303995][  T126] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.311311][  T126] bridge0: port 1(bridge_slave_0) entered forwarding state
[  232.359606][ T2894] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.366882][ T2894] bridge0: port 2(bridge_slave_1) entered forwarding state
[  232.408486][ T7964] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.671467][ T7964] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  232.723600][ T7964] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  232.749928][ T7964] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  232.762381][ T7964] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  232.820697][ T7783] 8021q: adding VLAN 0 to HW filter on device batadv0
[  232.840651][ T7808] 8021q: adding VLAN 0 to HW filter on device batadv0
[  233.005507][ T7964] 8021q: adding VLAN 0 to HW filter on device bond0
[  233.057179][ T7964] 8021q: adding VLAN 0 to HW filter on device team0
[  233.092434][ T2955] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.099682][ T2955] bridge0: port 1(bridge_slave_0) entered forwarding state
[  233.155393][ T2944] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.162560][ T2944] bridge0: port 2(bridge_slave_1) entered forwarding state
[  233.267213][ T4618] Bluetooth: hci5: command tx timeout
[  233.409659][ T7783] veth0_vlan: entered promiscuous mode
[  233.483542][ T7783] veth1_vlan: entered promiscuous mode
[  233.497451][ T7808] veth0_vlan: entered promiscuous mode
[  233.588754][ T7808] veth1_vlan: entered promiscuous mode
[  233.611863][ T7783] veth0_macvtap: entered promiscuous mode
[  233.638621][ T7783] veth1_macvtap: entered promiscuous mode
[  233.678391][ T7964] 8021q: adding VLAN 0 to HW filter on device batadv0
[  233.692533][ T7783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  233.703407][ T7783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.715780][ T7783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  233.726616][ T7783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.738560][ T7783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  233.749561][ T7783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.760291][ T7783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  233.771611][ T7783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.781534][ T7783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  233.792381][ T7783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.802602][ T7783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  233.813648][ T7783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.827758][ T7783] batman_adv: batadv0: Interface activated: batadv_slave_0
[  233.849313][ T7783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  233.860519][ T7783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.870743][ T7783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  233.881548][ T7783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.891803][ T7783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  233.902352][ T7783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.922909][ T7783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  233.933671][ T7783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.944150][ T7783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  233.954739][ T7783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.965021][ T7783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  233.975866][ T7783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.988257][ T7783] batman_adv: batadv0: Interface activated: batadv_slave_1
[  234.015610][ T7783] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  234.024897][ T7783] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  234.033920][ T7783] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  234.043559][ T7783] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  234.073027][ T7808] veth0_macvtap: entered promiscuous mode
[  234.098703][ T7808] veth1_macvtap: entered promiscuous mode
[  234.177140][ T7808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.187982][ T7808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.200666][ T7808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.211529][ T7808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.221584][ T7808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.233743][ T7808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.244203][ T7808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.255395][ T7808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.265509][ T7808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.276581][ T7808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.286584][ T7808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.297251][ T7808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.308567][ T7808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.319375][ T7808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.331489][ T7808] batman_adv: batadv0: Interface activated: batadv_slave_0
[  234.375828][ T7808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  234.387430][ T7808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.397337][ T7808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  234.408848][ T7808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.418840][ T7808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  234.430408][ T7808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.440744][ T7808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  234.453042][ T7808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.463117][ T7808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  234.475464][ T7808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.485611][ T7808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  234.496145][ T7808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.506262][ T7808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  234.517017][ T7808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.530319][ T7808] batman_adv: batadv0: Interface activated: batadv_slave_1
[  234.558200][ T2955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.566352][ T2955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.577476][ T7808] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  234.586542][ T7808] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  234.595459][ T7808] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  234.604198][ T7808] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  234.632753][ T7964] veth0_vlan: entered promiscuous mode
[  234.670316][ T2944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.679362][ T7964] veth1_vlan: entered promiscuous mode
[  234.692299][ T2944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.824064][ T7964] veth0_macvtap: entered promiscuous mode
[  234.836338][ T7964] veth1_macvtap: entered promiscuous mode
[  234.974408][  T126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.982404][  T126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.058140][ T7964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.075066][ T7964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.085084][ T7964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.109810][ T7964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.129983][ T7964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.151016][ T7964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.176683][ T7964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.187395][ T7964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.197512][ T7964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.208124][ T7964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.218097][ T7964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.230207][ T7964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.240521][ T7964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.251074][ T7964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.262780][ T7964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.275543][ T7964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.288393][ T7964] batman_adv: batadv0: Interface activated: batadv_slave_0
[  235.321372][ T7964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.339858][ T7964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.350845][ T4618] Bluetooth: hci5: command tx timeout
[  235.356475][ T7964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.367426][ T7964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.379139][ T7964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.390006][ T7964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.400342][ T7964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.410969][ T7964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.420911][ T7964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.432037][ T7964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.442046][ T7964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.452660][ T7964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.462920][ T7964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.475004][ T7964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.484926][ T7964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.496010][ T7964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.507964][ T7964] batman_adv: batadv0: Interface activated: batadv_slave_1
[  235.529089][ T7964] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  235.538567][ T7964] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  235.547438][ T7964] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  235.557024][ T7964] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  235.577725][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.590910][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.867161][ T5441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.875548][ T5441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.955580][ T2944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.976052][ T2944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.444618][ T5299] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  236.748060][ T8085] loop2: detected capacity change from 0 to 1024
[  236.816944][ T8085] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c098, mo2=0002]
[  236.825420][ T8085] System zones: 0-1, 3-12
[  236.828306][ T8070] loop3: detected capacity change from 0 to 32768
[  236.834433][ T5299] usb 2-1: Using ep0 maxpacket: 32
[  236.842653][ T8085] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  236.858493][ T5299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  236.869032][ T5299] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0
[  236.899745][ T5299] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=6d.22
[  236.907172][ T8070] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.744 (8070)
[  236.931269][ T5299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.949269][ T5299] usb 2-1: Product: syz
[  236.968679][ T5299] usb 2-1: Manufacturer: syz
[  236.973384][ T5299] usb 2-1: SerialNumber: syz
[  236.984531][ T5291] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  236.995649][ T8070] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  237.001065][ T5299] usb 2-1: config 0 descriptor??
[  237.034580][ T8070] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  237.044057][ T8070] BTRFS info (device loop3): using free-space-tree
[  237.045714][ T5299] usbserial_generic 2-1:0.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  237.080794][ T5239] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.120867][ T5299] usbserial_generic 2-1:0.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  237.173754][ T5299] usbserial_generic 2-1:0.0: generic converter detected
[  237.174414][ T5291] usb 5-1: Using ep0 maxpacket: 16
[  237.204673][ T5299] usb 2-1: generic converter now attached to ttyUSB0
[  237.257192][ T5291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  237.268582][ T5291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  237.278527][ T5291] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  237.287907][ T5291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.300310][ T5291] usb 5-1: config 0 descriptor??
[  237.343252][ T8100] loop0: detected capacity change from 0 to 512
[  237.379760][ T5299] usb 2-1: USB disconnect, device number 11
[  237.390468][ T5299] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[  237.415768][ T5299] usbserial_generic 2-1:0.0: device disconnected
[  237.429227][ T8100] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.733: corrupted in-inode xattr: invalid ea_ino
[  237.439285][ T4618] Bluetooth: hci5: command tx timeout
[  237.449453][ T8100] EXT4-fs error (device loop0): ext4_orphan_get:1391: comm syz.0.733: couldn't read orphan inode 15 (err -117)
[  237.465311][ T8100] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.679595][ T8079] loop5: detected capacity change from 0 to 32768
[  237.689425][ T8079] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.728 (8079)
[  237.707111][ T8079] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  237.738735][ T8079] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm
[  237.747510][ T7964] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.755889][ T8083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  237.783292][ T8083] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  237.812024][ T5291] hid (null): report_id 30516 is invalid
[  237.813147][ T7349] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  237.833532][ T5291] hid (null): global environment stack underflow
[  237.841454][ T5291] hid (null): bogus close delimiter
[  237.847178][ T5291] hid (null): unknown global tag 0xc
[  237.854798][ T5291] hid (null): unknown global tag 0xd
[  237.862083][ T5291] hid (null): unknown global tag 0x40
[  237.867620][ T5291] hid (null): global environment stack overflow
[  237.947879][ T8126] loop0: detected capacity change from 0 to 4096
[  237.954729][ T5232] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  237.968049][ T8079] BTRFS info (device loop5): rebuilding free space tree
[  238.012118][ T5291] usb 5-1: string descriptor 0 read error: -71
[  238.050555][ T5291] usb 5-1: Max retries (5) exceeded reading string descriptor 200
[  238.059679][ T5291] letsketch 0003:6161:4D15.0014: probe with driver letsketch failed with error -32
[  238.104506][ T5232] usb 3-1: Using ep0 maxpacket: 8
[  238.111995][ T5232] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  238.132126][ T8079] BTRFS info (device loop5): disabling free space tree
[  238.142150][ T5291] usb 5-1: USB disconnect, device number 13
[  238.152326][ T5232] usb 3-1: config 1 has no interface number 1
[  238.171857][ T5232] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  238.191405][ T8079] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  238.218508][ T5232] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  238.247151][ T8079] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  238.280161][ T5232] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  238.302375][ T5232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.331517][ T5232] usb 3-1: Product: syz
[  238.352610][ T5232] usb 3-1: Manufacturer: syz
[  238.360740][ T5232] usb 3-1: SerialNumber: syz
[  238.598827][ T5232] usb 3-1: 2:1 : unsupported format bits 0x80
[  238.623082][ T7808] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  238.671297][ T5232] usb 3-1: USB disconnect, device number 16
[  238.764503][ T5291] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  238.842153][ T8146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.753'.
[  238.947816][ T5291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  238.962839][ T5291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  238.996771][ T5291] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00
[  239.015677][ T5291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.040154][ T5291] usb 4-1: config 0 descriptor??
[  239.477732][ T8138] syz.3.741[8138] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  239.477885][ T8138] syz.3.741[8138] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  239.554727][ T8138] syz.3.741[8138] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  239.563453][ T8157] loop0: detected capacity change from 0 to 2048
[  239.626327][ T5291] logitech-djreceiver 0003:046D:C71B.0015: item fetching failed at offset 6/7
[  239.635989][ T5291] logitech-djreceiver 0003:046D:C71B.0015: logi_dj_probe: parse failed
[  239.644389][ T5291] logitech-djreceiver 0003:046D:C71B.0015: probe with driver logitech-djreceiver failed with error -22
[  239.650679][ T8150] loop4: detected capacity change from 0 to 32768
[  239.691793][ T8157] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  239.717848][ T8157] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  239.728964][ T8161] loop2: detected capacity change from 0 to 512
[  239.752044][ T8161] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  239.779358][ T8157] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  239.808857][ T5299] usb 4-1: USB disconnect, device number 18
[  239.921982][ T8161] EXT4-fs (loop2): 1 truncate cleaned up
[  239.948642][ T8161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  240.243787][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.761'.
[  240.267425][ T7964] UDF-fs: warning (device loop0): udf_evict_inode: Inode 1367 (mode 100000) has inode size 4102 different from extent length 4608. Filesystem need not be standards compliant.
[  240.894075][ T8164] loop5: detected capacity change from 0 to 32768
[  240.918434][ T8173] loop1: detected capacity change from 0 to 32768
[  240.941433][ T8173] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.764 (8173)
[  240.993947][ T8173] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  240.995664][ T5239] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.006538][ T8173] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm
[  241.040113][ T8164] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  241.218933][ T8173] BTRFS info (device loop1): rebuilding free space tree
[  241.286230][ T8173] BTRFS info (device loop1): disabling free space tree
[  241.293768][ T8173] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  241.404532][ T8173] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  241.597186][  T126] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.717312][ T7808] ocfs2: Unmounting device (7,5) on (node local)
[  241.966468][  T126] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.995278][ T6744] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  242.338380][  T126] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.358058][ T5299] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  242.449265][ T8217] netlink: 'syz.5.776': attribute type 1 has an invalid length.
[  242.467736][ T8217] netlink: 'syz.5.776': attribute type 4 has an invalid length.
[  242.484169][ T8181] loop3: detected capacity change from 0 to 40427
[  242.512605][ T8217] netlink: 15334 bytes leftover after parsing attributes in process `syz.5.776'.
[  242.524944][ T5299] usb 5-1: Using ep0 maxpacket: 16
[  242.534009][ T5299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.555187][ T8181] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1fffff
[  242.564039][ T5299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  242.585801][ T8181] F2FS-fs (loop3): Image doesn't support compression
[  242.607268][ T5299] usb 5-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00
[  242.637511][ T8181] F2FS-fs (loop3): Image doesn't support compression
[  242.644565][ T5299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.656715][ T5299] usb 5-1: config 0 descriptor??
[  242.748770][ T5230] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  242.763329][ T8181] F2FS-fs (loop3): invalid crc value
[  242.820694][ T5230] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  242.832512][ T5230] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  242.843705][ T5230] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  242.853296][ T5230] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  242.861066][ T5230] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  242.963350][ T8181] F2FS-fs (loop3): Found nat_bits in checkpoint
[  242.979040][  T126] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.160367][ T8181] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  243.259845][ T8181] bio_check_eod: 1162 callbacks suppressed
[  243.259873][ T8181] syz.3.769: attempt to access beyond end of device
[  243.259873][ T8181] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  243.292162][ T5299] lenovo 0003:17EF:6009.0016: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.4-1/input0
[  243.303981][ T8247] loop1: detected capacity change from 0 to 1024
[  243.321161][ T8181] F2FS-fs (loop3): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x246/0xb30
[  243.404422][   T29] audit: type=1800 audit(1729203912.726:24): pid=8247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.784" name="bus" dev="loop1" ino=26 res=0 errno=0
[  243.487024][ T8214] lenovo 0003:17EF:6009.0016: pid 8214 passed too short report
[  243.525700][ T7349] syz-executor: attempt to access beyond end of device
[  243.525700][ T7349] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  243.527450][ T5299] usb 5-1: USB disconnect, device number 14
[  243.586024][ T7349] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  243.702096][   T29] audit: type=1326 audit(1729203913.036:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8257 comm="syz.1.789" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43fe97dff9 code=0x0
[  244.546719][ T5330] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  244.604904][  T126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  244.645909][  T126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  244.685737][  T126] bond0 (unregistering): Released all slaves
[  244.710787][ T5330] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  244.720160][ T5330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.741276][ T5330] usb 4-1: config 0 descriptor??
[  244.777212][ T5330] cp210x 4-1:0.0: cp210x converter detected
[  244.944586][ T5230] Bluetooth: hci3: command tx timeout
[  245.196993][ T5330] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  245.215758][ T8282] netlink: 'syz.0.799': attribute type 4 has an invalid length.
[  245.234014][ T5330] usb 4-1: cp210x converter now attached to ttyUSB0
[  245.442615][ T5291] usb 4-1: USB disconnect, device number 19
[  245.495602][ T5291] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  245.603018][ T8280] loop1: detected capacity change from 0 to 32768
[  245.670342][ T5291] cp210x 4-1:0.0: device disconnected
[  245.681091][ T8280] JBD2: Ignoring recovery information on journal
[  245.865037][ T8280] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  245.939647][ T8274] loop4: detected capacity change from 0 to 32768
[  245.979897][ T8274] find_entry called with index >= next_index
[  245.987537][  T126] hsr_slave_0: left promiscuous mode
[  246.001476][  T126] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  246.023175][ T8274] find_entry called with index >= next_index
[  246.030401][  T126] batman_adv: batadv0: Removing interface: batadv_slave_0
[  246.045462][ T8274] find_entry called with index >= next_index
[  246.069049][  T126] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  246.097202][ T8291] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 1
[  246.097202][ T8291] 
[  246.114525][  T126] batman_adv: batadv0: Removing interface: batadv_slave_1
[  246.155599][ T8291] ERROR: (device loop4): remounting filesystem as read-only
[  246.163151][ T8291] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 3
[  246.163151][ T8291] 
[  246.207737][ T8291] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 4
[  246.207737][ T8291] 
[  246.283932][ T4618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  246.303203][  T126] veth1_macvtap: left promiscuous mode
[  246.330815][ T4618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  246.339029][  T126] veth0_macvtap: left promiscuous mode
[  246.346001][ T4618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  246.358903][  T126] veth1_vlan: left promiscuous mode
[  246.365215][ T4618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  246.376399][  T126] veth0_vlan: left promiscuous mode
[  246.381904][ T4618] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  246.384496][ T6744] ocfs2: Unmounting device (7,1) on (node local)
[  246.396036][ T4618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  246.795544][   T29] audit: type=1326 audit(1729203916.126:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8302 comm="syz.3.808" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1cad7dff9 code=0x0
[  247.024613][ T4618] Bluetooth: hci3: command tx timeout
[  247.099799][ T8295] loop0: detected capacity change from 0 to 32768
[  247.193238][ T8309] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt
[  247.193238][ T8309] 
[  247.247373][ T8309] ERROR: (device loop0): remounting filesystem as read-only
[  248.194193][ T8306] loop1: detected capacity change from 0 to 40427
[  248.235058][ T8306] F2FS-fs (loop1): invalid crc value
[  248.266147][ T8306] F2FS-fs (loop1): Found nat_bits in checkpoint
[  248.425178][ T8306] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  248.469137][ T4618] Bluetooth: hci1: command tx timeout
[  248.669557][ T6744] syz-executor: attempt to access beyond end of device
[  248.669557][ T6744] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  248.710966][ T6744] syz-executor: attempt to access beyond end of device
[  248.710966][ T6744] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  248.848798][ T8312] loop3: detected capacity change from 0 to 32768
[  248.876022][ T8312] XFS: ikeep mount option is deprecated.
[  248.915871][   T11] kworker/u8:0: attempt to access beyond end of device
[  248.915871][   T11] loop1: rw=2049, sector=45096, nr_sectors = 24 limit=40427
[  248.933642][   T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  248.940972][   T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  248.948117][   T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  249.040429][ T8312] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  249.072375][  T126] team0 (unregistering): Port device team_slave_1 removed
[  249.110609][ T4618] Bluetooth: hci3: command tx timeout
[  249.150708][ T8312] XFS (loop3): Ending clean mount
[  249.162780][ T8312] XFS (loop3): Quotacheck needed: Please wait.
[  249.215954][  T126] team0 (unregistering): Port device team_slave_0 removed
[  249.249304][ T8312] XFS (loop3): Quotacheck: Done.
[  249.402956][ T7349] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  249.803352][ T8330] loop4: detected capacity change from 0 to 4096
[  249.813363][ T8330] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  249.909649][   T29] audit: type=1800 audit(1729203919.246:27): pid=8330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.814" name="bus" dev="loop4" ino=33 res=0 errno=0
[  249.976102][   T29] audit: type=1800 audit(1729203919.316:28): pid=8330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.814" name="bus" dev="loop4" ino=33 res=0 errno=0
[  249.997363][   T29] audit: type=1800 audit(1729203919.316:29): pid=8330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.814" name="bus" dev="loop4" ino=33 res=0 errno=0
[  250.275271][ T8314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.809'.
[  250.564503][ T4618] Bluetooth: hci1: command tx timeout
[  251.184871][ T4618] Bluetooth: hci3: command tx timeout
[  252.626253][ T4618] Bluetooth: hci1: command tx timeout
[  252.833917][  T126] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.149492][  T126] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.358329][  T126] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.600802][  T126] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.767405][ T8228] chnl_net:caif_netlink_parms(): no params data found
[  254.089224][ T8296] chnl_net:caif_netlink_parms(): no params data found
[  254.180887][ T8345] loop3: detected capacity change from 0 to 2048
[  254.225947][ T5230] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  254.244609][ T5230] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  254.264744][ T5230] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  254.326546][ T5230] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  254.329764][ T8345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  254.335756][ T5230] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  254.353627][ T5230] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  254.362666][ T8345] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  254.562293][ T7349] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.740934][ T5230] Bluetooth: hci1: command tx timeout
[  254.756076][ T8357] loop0: detected capacity change from 0 to 32768
[  254.763804][ T8357] XFS: noikeep mount option is deprecated.
[  254.831325][ T8228] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.838899][ T8228] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.846292][ T8228] bridge_slave_0: entered allmulticast mode
[  254.853416][ T8228] bridge_slave_0: entered promiscuous mode
[  254.872129][ T8228] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.879675][ T8228] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.887122][ T8228] bridge_slave_1: entered allmulticast mode
[  254.894301][ T8228] bridge_slave_1: entered promiscuous mode
[  254.922161][ T8296] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.931541][ T8296] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.938851][ T8296] bridge_slave_0: entered allmulticast mode
[  254.946496][ T8296] bridge_slave_0: entered promiscuous mode
[  254.949037][ T8351] loop4: detected capacity change from 0 to 32768
[  254.957497][ T8296] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.974033][ T8351] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.820 (8351)
[  254.984461][ T8296] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.993951][ T8296] bridge_slave_1: entered allmulticast mode
[  254.999428][ T8351] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  255.016645][ T8296] bridge_slave_1: entered promiscuous mode
[  255.016781][ T8351] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm
[  255.069754][ T8357] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  255.086443][ T8351] BTRFS info (device loop4): using free-space-tree
[  255.118747][ T8228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  255.173881][ T8357] XFS (loop0): Ending clean mount
[  255.184945][ T8357] XFS (loop0): Quotacheck needed: Please wait.
[  255.188792][  T126] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.238671][ T8296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  255.279762][ T8357] XFS (loop0): Quotacheck: Done.
[  255.298096][ T8296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  255.329181][ T8228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  255.491407][ T7964] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  255.506448][ T7783] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  255.518225][  T126] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.757382][ T8392] random: crng reseeded on system resumption
[  255.875557][ T8228] team0: Port device team_slave_0 added
[  255.917954][ T8397] loop0: detected capacity change from 0 to 256
[  255.925440][ T8397] exfat: Deprecated parameter 'namecase'
[  255.967907][  T126] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.026826][ T8397] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  256.124093][ T8296] team0: Port device team_slave_0 added
[  256.158708][ T8296] team0: Port device team_slave_1 added
[  256.190679][ T8228] team0: Port device team_slave_1 added
[  256.474594][ T5230] Bluetooth: hci0: command tx timeout
[  256.549996][  T126] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.641856][ T8228] batman_adv: batadv0: Adding interface: batadv_slave_0
[  256.659604][ T8228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.708901][ T8228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  256.725672][ T8228] batman_adv: batadv0: Adding interface: batadv_slave_1
[  256.732657][ T8228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.777332][ T8228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  256.784732][ T8409] loop4: detected capacity change from 0 to 512
[  256.796469][ T8409] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  256.805131][ T8296] batman_adv: batadv0: Adding interface: batadv_slave_0
[  256.816943][ T8296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.848871][ T8296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  256.850102][ T8409] EXT4-fs (loop4): 1 orphan inode deleted
[  256.862866][ T8296] batman_adv: batadv0: Adding interface: batadv_slave_1
[  256.872816][ T8296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.894402][ T8409] EXT4-fs (loop4): 1 truncate cleaned up
[  256.900936][ T8296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  256.933946][ T8409] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.016132][ T8409] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  257.043549][ T8409] EXT4-fs (loop4): Remounting filesystem read-only
[  257.122628][ T7783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.228402][ T8296] hsr_slave_0: entered promiscuous mode
[  257.268529][ T8296] hsr_slave_1: entered promiscuous mode
[  257.281431][ T8421] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  257.314705][ T8296] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  257.329311][ T8296] Cannot create hsr debugfs directory
[  257.418420][ T8228] hsr_slave_0: entered promiscuous mode
[  257.442799][ T8228] hsr_slave_1: entered promiscuous mode
[  257.463330][ T8425] loop9: detected capacity change from 0 to 7
[  257.469828][ T8228] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  257.484626][ T8228] Cannot create hsr debugfs directory
[  257.497926][ T8425] Dev loop9: unable to read RDB block 7
[  257.507532][ T8425]  loop9: AHDI p2 p3 p4
[  257.511827][ T8425] loop9: partition table partially beyond EOD, truncated
[  257.519538][ T8425] loop9: p2 start 2961973428 is beyond EOD, truncated
[  257.526808][ T8425] loop9: p3 start 1756542996 is beyond EOD, truncated
[  257.707069][ T8434] loop0: detected capacity change from 0 to 64
[  257.918771][ T8439] loop3: detected capacity change from 0 to 2048
[  257.960518][ T8439] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  258.061866][  T126] bridge_slave_1: left allmulticast mode
[  258.071605][  T126] bridge_slave_1: left promiscuous mode
[  258.088521][  T126] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.100155][ T8445] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  258.131388][  T126] bridge_slave_0: left allmulticast mode
[  258.138185][  T126] bridge_slave_0: left promiscuous mode
[  258.144010][  T126] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.220478][  T126] bridge_slave_1: left allmulticast mode
[  258.240469][  T126] bridge_slave_1: left promiscuous mode
[  258.272586][  T126] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.298355][  T126] bridge_slave_0: left allmulticast mode
[  258.309384][  T126] bridge_slave_0: left promiscuous mode
[  258.325471][  T126] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.457117][ T8454] loop3: detected capacity change from 0 to 128
[  258.502846][ T8454] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  258.545271][ T5230] Bluetooth: hci0: command tx timeout
[  258.555371][ T8454] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  258.605558][ T8454] overlayfs: upper fs needs to support d_type.
[  258.669666][ T8454] overlayfs: upper fs needs to support d_type.
[  258.755816][ T7349] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  258.829745][ T8460] loop3: detected capacity change from 0 to 128
[  258.852410][ T8460] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  258.906378][ T8460] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  259.080030][ T5441] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  259.384021][ T8458] loop0: detected capacity change from 0 to 32768
[  259.647241][ T8468] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  259.773714][ T8470] loop3: detected capacity change from 0 to 1024
[  259.802291][ T8470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  259.950649][ T8470] overlayfs: invalid origin (0000)
[  259.984815][  T126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  259.993239][ T8475] loop0: detected capacity change from 0 to 128
[  260.003446][ T8475] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  260.013833][  T126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  260.034760][ T8475] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  260.040114][ T7349] EXT4-fs error (device loop3): ext4_readdir:259: inode #11: block 32: comm syz-executor: path /58/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  260.081397][  T126] bond0 (unregistering): Released all slaves
[  260.105594][ T7349] EXT4-fs error (device loop3): ext4_empty_dir:3095: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  260.114454][   T29] audit: type=1800 audit(1729203929.426:30): pid=8475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.854" name="bus" dev="loop0" ino=105 res=0 errno=0
[  260.131346][ T7349] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  260.161378][ T7349] EXT4-fs error (device loop3): ext4_readdir:259: inode #11: block 32: comm syz-executor: path /58/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  260.186472][ T7349] EXT4-fs error (device loop3): ext4_empty_dir:3095: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  260.209947][ T7349] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  260.222788][ T7349] EXT4-fs error (device loop3): ext4_readdir:259: inode #11: block 32: comm syz-executor: path /58/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  260.244019][    C0] vkms_vblank_simulate: vblank timer overrun
[  260.274835][ T7349] EXT4-fs error (device loop3): ext4_empty_dir:3095: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  260.311378][ T7349] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  260.326635][ T7349] EXT4-fs error (device loop3): ext4_readdir:259: inode #11: block 32: comm syz-executor: path /58/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  260.349845][ T7349] EXT4-fs error (device loop3): ext4_empty_dir:3095: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  260.371863][ T7349] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  260.384020][ T7349] EXT4-fs error (device loop3): ext4_readdir:259: inode #11: block 32: comm syz-executor: path /58/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  260.411977][ T7349] EXT4-fs error (device loop3): ext4_empty_dir:3095: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  260.431978][ T1262] ieee802154 phy0 wpan0: encryption failed: -22
[  260.432025][ T7349] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  260.439234][ T1262] ieee802154 phy1 wpan1: encryption failed: -22
[  260.592381][  T126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  260.622123][  T126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  260.648120][ T7349] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  260.666953][  T126] bond0 (unregistering): Released all slaves
[  260.693341][ T5230] Bluetooth: hci0: command tx timeout
[  260.723796][ T7349] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  260.737889][ T7349] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  260.751586][ T7349] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  260.774994][ T7349] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.'
[  260.793513][ T8348] chnl_net:caif_netlink_parms(): no params data found
[  261.444908][ T8446] tunl0: entered promiscuous mode
[  261.453313][ T8446] netlink: 'syz.4.845': attribute type 1 has an invalid length.
[  261.461360][ T8446] netlink: 9 bytes leftover after parsing attributes in process `syz.4.845'.
[  261.812779][ T8486] loop0: detected capacity change from 0 to 1024
[  261.815856][ T7349] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.851653][ T8486] EXT4-fs: Ignoring removed oldalloc option
[  261.992483][ T8486] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  262.073861][ T8486] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  262.175262][ T8490] netlink: 'syz.4.865': attribute type 10 has an invalid length.
[  262.207902][ T8490] team0: Port device netdevsim0 added
[  262.214118][ T8495] netlink: 'syz.4.865': attribute type 10 has an invalid length.
[  262.296360][ T8495] team0: Port device netdevsim0 removed
[  262.348412][ T8495] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  262.483675][ T7964] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.716253][ T5230] Bluetooth: hci0: command tx timeout
[  262.736249][ T8348] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.760591][ T8348] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.804883][ T8348] bridge_slave_0: entered allmulticast mode
[  262.807876][ T4618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  262.812260][ T8348] bridge_slave_0: entered promiscuous mode
[  262.823062][ T4618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  262.834573][ T4618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  262.842610][ T4618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  262.851818][ T4618] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  262.859316][ T4618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  262.971308][ T8348] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.991497][ T8348] bridge0: port 2(bridge_slave_1) entered disabled state
[  263.015134][ T8348] bridge_slave_1: entered allmulticast mode
[  263.041735][ T8348] bridge_slave_1: entered promiscuous mode
[  263.240676][ T8348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  263.397994][ T8348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  263.566067][  T126] hsr_slave_0: left promiscuous mode
[  263.646660][  T126] hsr_slave_1: left promiscuous mode
[  263.684806][  T126] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  263.692596][  T126] batman_adv: batadv0: Removing interface: batadv_slave_0
[  263.741067][  T126] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  263.764569][  T126] batman_adv: batadv0: Removing interface: batadv_slave_1
[  263.856216][  T126] hsr_slave_0: left promiscuous mode
[  263.884987][  T126] hsr_slave_1: left promiscuous mode
[  263.899065][  T126] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  263.914637][  T126] batman_adv: batadv0: Removing interface: batadv_slave_0
[  263.933917][  T126] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  263.957343][  T126] batman_adv: batadv0: Removing interface: batadv_slave_1
[  264.112074][  T126] veth1_macvtap: left promiscuous mode
[  264.124681][  T126] veth0_macvtap: left promiscuous mode
[  264.134705][  T126] veth1_vlan: left promiscuous mode
[  264.140092][  T126] veth0_vlan: left promiscuous mode
[  264.344796][  T126] veth1_macvtap: left promiscuous mode
[  264.351578][  T126] veth0_macvtap: left promiscuous mode
[  264.357551][  T126] veth1_vlan: left promiscuous mode
[  264.362993][  T126] veth0_vlan: left promiscuous mode
[  264.945069][ T4618] Bluetooth: hci2: command tx timeout
[  264.989205][ T8524] loop4: detected capacity change from 0 to 32768
[  265.060538][ T8524] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  265.181257][ T8524] XFS (loop4): Ending clean mount
[  265.196025][ T8524] XFS (loop4): Quotacheck needed: Please wait.
[  265.225195][ T8524] XFS (loop4): Quotacheck: Done.
[  265.389532][ T7783] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  265.574460][  T126] team0 (unregistering): Port device team_slave_1 removed
[  265.681682][  T126] team0 (unregistering): Port device team_slave_0 removed
[  266.598281][  T126] team0 (unregistering): Port device team_slave_1 removed
[  266.649722][  T126] team0 (unregistering): Port device team_slave_0 removed
[  267.038235][ T4618] Bluetooth: hci2: command tx timeout
[  267.364188][ T8348] team0: Port device team_slave_0 added
[  267.402204][ T8348] team0: Port device team_slave_1 added
[  267.435658][ T8537] syz.0.879 uses obsolete (PF_INET,SOCK_PACKET)
[  267.595469][ T8296] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  267.641073][ T8348] batman_adv: batadv0: Adding interface: batadv_slave_0
[  267.655460][ T8348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.699738][ T8348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  267.731229][ T8348] batman_adv: batadv0: Adding interface: batadv_slave_1
[  267.746711][ T8348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.791034][ T8348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  267.821254][ T8296] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  267.853628][ T8296] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  267.954489][ T8296] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  268.050614][ T8348] hsr_slave_0: entered promiscuous mode
[  268.075050][ T8348] hsr_slave_1: entered promiscuous mode
[  268.161793][ T8551] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  268.255073][ T8503] chnl_net:caif_netlink_parms(): no params data found
[  268.657871][ T8503] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.676181][ T8503] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.683513][ T8503] bridge_slave_0: entered allmulticast mode
[  268.726076][ T8503] bridge_slave_0: entered promiscuous mode
[  268.792414][ T8503] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.814589][ T8503] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.821817][ T8503] bridge_slave_1: entered allmulticast mode
[  268.832591][ T8503] bridge_slave_1: entered promiscuous mode
[  269.014056][ T8503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  269.040809][ T8503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  269.100380][ T8575] loop0: detected capacity change from 0 to 256
[  269.107750][ T4618] Bluetooth: hci2: command tx timeout
[  269.123138][ T8503] team0: Port device team_slave_0 added
[  269.159878][ T8503] team0: Port device team_slave_1 added
[  269.229505][ T8228] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  269.246234][ T8228] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  269.382599][ T8503] batman_adv: batadv0: Adding interface: batadv_slave_0
[  269.403673][ T8503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  269.453807][ T8503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  269.485482][ T8228] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  269.568201][ T8503] batman_adv: batadv0: Adding interface: batadv_slave_1
[  269.596075][ T8503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  269.637740][ T8503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  269.680455][ T8228] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  269.719042][ T5232] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  269.725014][   T65] tipc: Subscription rejected, illegal request
[  269.734459][ T5232] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  269.774851][ T5232] hid-generic 0000:0000:0000.0017: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  269.826848][  T126] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.914994][ T8585] tipc: Started in network mode
[  269.924609][ T8585] tipc: Node identity 2007ff, cluster identity 4711
[  269.945271][ T8585] tipc: Node number set to 2099199
[  270.057800][  T126] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.102164][ T8503] hsr_slave_0: entered promiscuous mode
[  270.121169][ T8503] hsr_slave_1: entered promiscuous mode
[  270.129341][ T8503] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  270.137244][ T8503] Cannot create hsr debugfs directory
[  270.207391][  T126] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.361382][  T126] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.396244][ T8599] tls_set_device_offload_rx: netdev not found
[  270.529810][ T8296] 8021q: adding VLAN 0 to HW filter on device bond0
[  270.793694][ T8296] 8021q: adding VLAN 0 to HW filter on device team0
[  271.185370][ T4618] Bluetooth: hci2: command tx timeout
[  271.191002][ T8348] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  271.351653][ T8348] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  271.377363][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.384603][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  271.436392][ T8348] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  271.485667][ T8348] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  271.501418][ T8228] 8021q: adding VLAN 0 to HW filter on device bond0
[  271.521794][ T2944] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.528979][ T2944] bridge0: port 2(bridge_slave_1) entered forwarding state
[  271.554954][  T126] bridge_slave_1: left allmulticast mode
[  271.570546][  T126] bridge_slave_1: left promiscuous mode
[  271.584551][  T126] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.593709][  T126] bridge_slave_0: left allmulticast mode
[  271.614430][  T126] bridge_slave_0: left promiscuous mode
[  271.621310][  T126] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.658968][  T126] bridge_slave_1: left allmulticast mode
[  271.661110][ T8603] loop0: detected capacity change from 0 to 32768
[  271.678637][  T126] bridge_slave_1: left promiscuous mode
[  271.692534][  T126] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.708089][  T126] bridge_slave_0: left allmulticast mode
[  271.713821][  T126] bridge_slave_0: left promiscuous mode
[  271.720347][  T126] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.726675][ T8603] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  271.802626][ T8603] XFS (loop0): Ending clean mount
[  272.026888][ T7964] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  272.674093][  T126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  272.695916][  T126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  272.710097][  T126] bond0 (unregistering): Released all slaves
[  272.827613][  T126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  272.840277][  T126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  272.855415][  T126] bond0 (unregistering): Released all slaves
[  273.224627][ T8625] loop4: detected capacity change from 0 to 128
[  273.305972][ T8296] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  273.354473][ T8296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  273.483293][ T8228] 8021q: adding VLAN 0 to HW filter on device team0
[  273.493974][ T8625] EXT4-fs (loop4): Test dummy encryption mode enabled
[  273.544791][ T8625] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  273.585806][ T2955] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.593039][ T2955] bridge0: port 1(bridge_slave_0) entered forwarding state
[  273.626811][ T8625] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  273.829621][ T2955] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.833985][ T8642] cgroup: fork rejected by pids controller in 
[  273.836835][ T2955] bridge0: port 2(bridge_slave_1) entered forwarding state
[  273.914529][ T8642] /syz0
[  273.960990][ T8625] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  274.133900][ T7783] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  274.233498][ T8296] 8021q: adding VLAN 0 to HW filter on device batadv0
[  274.411743][ T8228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  274.674433][  T126] hsr_slave_0: left promiscuous mode
[  274.704617][  T126] hsr_slave_1: left promiscuous mode
[  274.733256][  T126] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  274.745800][  T126] batman_adv: batadv0: Removing interface: batadv_slave_0
[  274.765389][  T126] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  274.773114][  T126] batman_adv: batadv0: Removing interface: batadv_slave_1
[  274.884583][  T126] hsr_slave_0: left promiscuous mode
[  274.907443][  T126] hsr_slave_1: left promiscuous mode
[  274.924739][  T126] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  274.932300][  T126] batman_adv: batadv0: Removing interface: batadv_slave_0
[  274.975551][  T126] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  274.983077][  T126] batman_adv: batadv0: Removing interface: batadv_slave_1
[  275.082324][  T126] veth1_macvtap: left promiscuous mode
[  275.120815][  T126] veth0_macvtap: left promiscuous mode
[  275.144904][  T126] veth1_vlan: left promiscuous mode
[  275.150509][  T126] veth0_vlan: left promiscuous mode
[  275.173842][ T5230] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  275.187851][  T126] veth1_macvtap: left promiscuous mode
[  275.193642][  T126] veth0_macvtap: left promiscuous mode
[  275.214689][ T5230] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  275.215201][  T126] veth1_vlan: left promiscuous mode
[  275.231560][ T5230] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  275.239837][  T126] veth0_vlan: left promiscuous mode
[  275.246006][ T5230] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  275.260428][ T5230] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  275.274691][ T5230] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  275.692532][ T8662] loop4: detected capacity change from 0 to 32768
[  275.700401][ T8662] XFS: attr2 mount option is deprecated.
[  275.752225][ T8662] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  275.812263][ T8662] XFS (loop4): Ending clean mount
[  275.825489][ T8662] XFS (loop4): Quotacheck needed: Please wait.
[  275.930992][ T8662] XFS (loop4): Quotacheck: Done.
[  276.035145][ T7783] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  276.748051][  T126] team0 (unregistering): Port device team_slave_1 removed
[  276.878109][  T126] team0 (unregistering): Port device team_slave_0 removed
[  276.999007][   T35] tipc: Subscription rejected, illegal request
[  277.352387][ T5230] Bluetooth: hci5: command tx timeout
[  277.973538][  T126] team0 (unregistering): Port device team_slave_1 removed
[  278.069654][  T126] team0 (unregistering): Port device team_slave_0 removed
[  278.822381][ T8503] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  278.834838][ T8503] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  278.859818][ T8683] tipc: Started in network mode
[  278.885542][ T8683] tipc: Node identity 2007ff, cluster identity 4711
[  278.895252][ T8683] tipc: Node number set to 2099199
[  278.935358][ T8503] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  278.985932][ T8503] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  279.043286][ T8348] 8021q: adding VLAN 0 to HW filter on device bond0
[  279.261485][ T8348] 8021q: adding VLAN 0 to HW filter on device team0
[  279.310697][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.317892][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.353237][ T8228] 8021q: adding VLAN 0 to HW filter on device batadv0
[  279.428607][ T5230] Bluetooth: hci5: command tx timeout
[  279.510970][ T2944] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.518276][ T2944] bridge0: port 2(bridge_slave_1) entered forwarding state
[  279.545168][ T8296] veth0_vlan: entered promiscuous mode
[  279.631733][ T8296] veth1_vlan: entered promiscuous mode
[  279.728549][ T8228] veth0_vlan: entered promiscuous mode
[  279.798758][ T8228] veth1_vlan: entered promiscuous mode
[  279.842169][ T8503] 8021q: adding VLAN 0 to HW filter on device bond0
[  279.871507][ T8663] chnl_net:caif_netlink_parms(): no params data found
[  279.948959][ T8296] veth0_macvtap: entered promiscuous mode
[  279.973402][ T8228] veth0_macvtap: entered promiscuous mode
[  280.012200][ T8296] veth1_macvtap: entered promiscuous mode
[  280.110382][ T8228] veth1_macvtap: entered promiscuous mode
[  280.122009][ T8700] loop4: detected capacity change from 0 to 512
[  280.129460][ T8700] EXT4-fs: Ignoring removed bh option
[  280.172058][  T126] IPVS: stop unused estimator thread 0...
[  280.175909][ T8700] EXT4-fs error (device loop4): __ext4_iget:4952: inode #15: block 1803188595: comm syz.4.927: invalid block
[  280.215064][ T8700] EXT4-fs error (device loop4): ext4_orphan_get:1391: comm syz.4.927: couldn't read orphan inode 15 (err -117)
[  280.235112][ T8700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  280.250536][ T8503] 8021q: adding VLAN 0 to HW filter on device team0
[  280.288732][ T8296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  280.324167][ T8296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.354460][ T8296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  280.380628][ T8296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.408711][ T8705] ------------[ cut here ]------------
[  280.414235][ T8705] Looking for class "&ei->i_data_sem" with key __key.0, but found a different class "&ei->i_data_sem" with the same key
[  280.427091][ T8705] WARNING: CPU: 1 PID: 8705 at kernel/locking/lockdep.c:936 look_up_lock_class+0x140/0x150
[  280.437244][ T8705] Modules linked in:
[  280.441169][ T8705] CPU: 1 UID: 0 PID: 8705 Comm: syz.4.927 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0
[  280.451815][ T8705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  280.454630][ T8296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  280.461878][ T8705] RIP: 0010:look_up_lock_class+0x140/0x150
[  280.461947][ T8705] Code: c7 c7 60 cf 6c 8b e8 5f 21 2e f6 90 0f 0b 90 90 90 31 db eb be c6 05 96 d4 27 05 01 90 48 c7 c7 40 d2 6c 8b e8 41 21 2e f6 90 <0f> 0b 90 90 e9 58 ff ff ff 0f 1f 80 00 00 00 00 90 90 90 90 90 90
[  280.461988][ T8705] RSP: 0018:ffffc90002d7f850 EFLAGS: 00010086
[  280.462022][ T8705] RAX: 0000000000000000 RBX: ffffffff96ec6920 RCX: ffffc9000ad82000
[  280.462052][ T8705] RDX: 0000000000040000 RSI: ffffffff814e71b6 RDI: 0000000000000001
[  280.462082][ T8705] RBP: ffffffff9a8ef2c1 R08: 0000000000000001 R09: 0000000000000000
[  280.477875][ T8296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.478274][ T8705] R10: 0000000000000000 R11: 20676e696b6f6f4c R12: ffff888078516f80
[  280.510336][ T8296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  280.511991][ T8705] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff9a820820
[  280.512025][ T8705] FS:  00007fe6c01e76c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  280.536547][ T8296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.537748][ T8705] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  280.537783][ T8705] CR2: 00007fa45f0bd290 CR3: 00000000671b8000 CR4: 0000000000350ef0
[  280.561197][ T8296] batman_adv: batadv0: Interface activated: batadv_slave_0
[  280.564308][ T8705] Call Trace:
[  280.564323][ T8705]  <TASK>
[  280.564338][ T8705]  ? __warn+0xea/0x3d0
[  280.564405][ T8705]  ? look_up_lock_class+0x140/0x150
[  280.564468][ T8705]  ? report_bug+0x3c0/0x580
[  280.564532][ T8705]  ? handle_bug+0x54/0xa0
[  280.564572][ T8705]  ? exc_invalid_op+0x17/0x50
[  280.564615][ T8705]  ? asm_exc_invalid_op+0x1a/0x20
[  280.564686][ T8705]  ? __warn_printk+0x1a6/0x350
[  280.564751][ T8705]  ? look_up_lock_class+0x140/0x150
[  280.564817][ T8705]  register_lock_class+0xb1/0x1240
[  280.654839][ T8705]  ? __pfx_register_lock_class+0x10/0x10
[  280.660522][ T8705]  ? lockdep_lock+0xc6/0x200
[  280.665170][ T8705]  ? __pfx_lockdep_lock+0x10/0x10
[  280.670254][ T8705]  __lock_acquire+0x135/0x3ce0
[  280.675152][ T8705]  ? __pfx___lock_acquire+0x10/0x10
[  280.680417][ T8705]  lock_acquire.part.0+0x11b/0x380
[  280.685611][ T8705]  ? ext4_double_down_write_data_sem+0x67/0x80
[  280.691809][ T8705]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  280.697468][ T8705]  ? srso_alias_return_thunk+0x5/0xfbef5
[  280.703166][ T8705]  ? rcu_is_watching+0x12/0xc0
[  280.707991][ T8705]  ? srso_alias_return_thunk+0x5/0xfbef5
[  280.713693][ T8705]  ? trace_lock_acquire+0x14a/0x1d0
[  280.718948][ T8705]  ? srso_alias_return_thunk+0x5/0xfbef5
[  280.724652][ T8705]  ? ext4_double_down_write_data_sem+0x67/0x80
[  280.730948][ T8705]  ? srso_alias_return_thunk+0x5/0xfbef5
[  280.736638][ T8705]  ? lock_acquire+0x2f/0xb0
[  280.741275][ T8705]  ? ext4_double_down_write_data_sem+0x67/0x80
[  280.747491][ T8705]  down_write_nested+0x97/0x210
[  280.752394][ T8705]  ? ext4_double_down_write_data_sem+0x67/0x80
[  280.758675][ T8705]  ? __pfx_down_write_nested+0x10/0x10
[  280.764366][ T8705]  ? srso_alias_return_thunk+0x5/0xfbef5
[  280.770064][ T8705]  ? ext4_journal_check_start+0x1b4/0x2b0
[  280.775818][ T8705]  ? srso_alias_return_thunk+0x5/0xfbef5
[  280.781527][ T8705]  ext4_double_down_write_data_sem+0x67/0x80
[  280.787565][ T8705]  __ext4_ioctl+0x2a01/0x4630
[  280.792494][ T8705]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  280.798527][ T8705]  ? srso_alias_return_thunk+0x5/0xfbef5
[  280.804227][ T8705]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  280.810164][ T8705]  ? __pfx___ext4_ioctl+0x10/0x10
[  280.815251][ T8705]  ? srso_alias_return_thunk+0x5/0xfbef5
[  280.821155][ T8705]  ? do_vfs_ioctl+0x513/0x1990
[  280.825972][ T8705]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  280.831048][ T8705]  ? trace_lock_acquire+0x14a/0x1d0
[  280.836281][ T8705]  ? srso_alias_return_thunk+0x5/0xfbef5
[  280.842102][ T8705]  ? __sys_sendmsg+0x13c/0x1f0
[  280.847013][ T8705]  ? srso_alias_return_thunk+0x5/0xfbef5
[  280.852747][ T8705]  ? __fget_files+0x244/0x3f0
[  280.857501][ T8705]  ? __pfx_ext4_ioctl+0x10/0x10
[  280.862494][ T8705]  __x64_sys_ioctl+0x192/0x220
[  280.867327][ T8705]  do_syscall_64+0xcd/0x250
[  280.872001][ T8705]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.878057][ T8705] RIP: 0033:0x7fe6bf37dff9
[  280.882510][ T8705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  280.902183][ T8705] RSP: 002b:00007fe6c01e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  280.910662][ T8705] RAX: ffffffffffffffda RBX: 00007fe6bf536058 RCX: 00007fe6bf37dff9
[  280.918672][ T8705] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000004
[  280.926681][ T8705] RBP: 00007fe6bf3f0296 R08: 0000000000000000 R09: 0000000000000000
[  280.934687][ T8705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  280.942784][ T8705] R13: 0000000000000000 R14: 00007fe6bf536058 R15: 00007ffef69b4848
[  280.950895][ T8705]  </TASK>
[  280.953932][ T8705] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  280.961228][ T8705] CPU: 1 UID: 0 PID: 8705 Comm: syz.4.927 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0
[  280.971936][ T8705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  280.982016][ T8705] Call Trace:
[  280.985376][ T8705]  <TASK>
[  280.988320][ T8705]  dump_stack_lvl+0x3d/0x1f0
[  280.992938][ T8705]  panic+0x71d/0x800
[  280.996880][ T8705]  ? __pfx_panic+0x10/0x10
[  281.001430][ T8705]  ? show_trace_log_lvl+0x29d/0x3d0
[  281.006668][ T8705]  ? look_up_lock_class+0x140/0x150
[  281.011922][ T8705]  check_panic_on_warn+0xab/0xb0
[  281.016930][ T8705]  __warn+0xf6/0x3d0
[  281.020929][ T8705]  ? look_up_lock_class+0x140/0x150
[  281.026176][ T8705]  report_bug+0x3c0/0x580
[  281.030562][ T8705]  handle_bug+0x54/0xa0
[  281.034743][ T8705]  exc_invalid_op+0x17/0x50
[  281.039277][ T8705]  asm_exc_invalid_op+0x1a/0x20
[  281.044176][ T8705] RIP: 0010:look_up_lock_class+0x140/0x150
[  281.050041][ T8705] Code: c7 c7 60 cf 6c 8b e8 5f 21 2e f6 90 0f 0b 90 90 90 31 db eb be c6 05 96 d4 27 05 01 90 48 c7 c7 40 d2 6c 8b e8 41 21 2e f6 90 <0f> 0b 90 90 e9 58 ff ff ff 0f 1f 80 00 00 00 00 90 90 90 90 90 90
[  281.069764][ T8705] RSP: 0018:ffffc90002d7f850 EFLAGS: 00010086
[  281.075863][ T8705] RAX: 0000000000000000 RBX: ffffffff96ec6920 RCX: ffffc9000ad82000
[  281.083854][ T8705] RDX: 0000000000040000 RSI: ffffffff814e71b6 RDI: 0000000000000001
[  281.091862][ T8705] RBP: ffffffff9a8ef2c1 R08: 0000000000000001 R09: 0000000000000000
[  281.099854][ T8705] R10: 0000000000000000 R11: 20676e696b6f6f4c R12: ffff888078516f80
[  281.107850][ T8705] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff9a820820
[  281.115939][ T8705]  ? __warn_printk+0x1a6/0x350
[  281.120930][ T8705]  register_lock_class+0xb1/0x1240
[  281.126169][ T8705]  ? __pfx_register_lock_class+0x10/0x10
[  281.131833][ T8705]  ? lockdep_lock+0xc6/0x200
[  281.136551][ T8705]  ? __pfx_lockdep_lock+0x10/0x10
[  281.141622][ T8705]  __lock_acquire+0x135/0x3ce0
[  281.146770][ T8705]  ? __pfx___lock_acquire+0x10/0x10
[  281.152000][ T8705]  lock_acquire.part.0+0x11b/0x380
[  281.157139][ T8705]  ? ext4_double_down_write_data_sem+0x67/0x80
[  281.163331][ T8705]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  281.168990][ T8705]  ? srso_alias_return_thunk+0x5/0xfbef5
[  281.174847][ T8705]  ? rcu_is_watching+0x12/0xc0
[  281.179646][ T8705]  ? srso_alias_return_thunk+0x5/0xfbef5
[  281.185332][ T8705]  ? trace_lock_acquire+0x14a/0x1d0
[  281.190572][ T8705]  ? srso_alias_return_thunk+0x5/0xfbef5
[  281.196253][ T8705]  ? ext4_double_down_write_data_sem+0x67/0x80
[  281.202440][ T8705]  ? srso_alias_return_thunk+0x5/0xfbef5
[  281.208123][ T8705]  ? lock_acquire+0x2f/0xb0
[  281.212653][ T8705]  ? ext4_double_down_write_data_sem+0x67/0x80
[  281.218843][ T8705]  down_write_nested+0x97/0x210
[  281.223729][ T8705]  ? ext4_double_down_write_data_sem+0x67/0x80
[  281.229918][ T8705]  ? __pfx_down_write_nested+0x10/0x10
[  281.235501][ T8705]  ? srso_alias_return_thunk+0x5/0xfbef5
[  281.241184][ T8705]  ? ext4_journal_check_start+0x1b4/0x2b0
[  281.246939][ T8705]  ? srso_alias_return_thunk+0x5/0xfbef5
[  281.252630][ T8705]  ext4_double_down_write_data_sem+0x67/0x80
[  281.258654][ T8705]  __ext4_ioctl+0x2a01/0x4630
[  281.263407][ T8705]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  281.269472][ T8705]  ? srso_alias_return_thunk+0x5/0xfbef5
[  281.275192][ T8705]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  281.281240][ T8705]  ? __pfx___ext4_ioctl+0x10/0x10
[  281.286303][ T8705]  ? srso_alias_return_thunk+0x5/0xfbef5
[  281.291986][ T8705]  ? do_vfs_ioctl+0x513/0x1990
[  281.296787][ T8705]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  281.301947][ T8705]  ? trace_lock_acquire+0x14a/0x1d0
[  281.307190][ T8705]  ? srso_alias_return_thunk+0x5/0xfbef5
[  281.312875][ T8705]  ? __sys_sendmsg+0x13c/0x1f0
[  281.318459][ T8705]  ? srso_alias_return_thunk+0x5/0xfbef5
[  281.324142][ T8705]  ? __fget_files+0x244/0x3f0
[  281.328865][ T8705]  ? __pfx_ext4_ioctl+0x10/0x10
[  281.333757][ T8705]  __x64_sys_ioctl+0x192/0x220
[  281.339342][ T8705]  do_syscall_64+0xcd/0x250
[  281.343915][ T8705]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.349861][ T8705] RIP: 0033:0x7fe6bf37dff9
[  281.354295][ T8705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  281.374319][ T8705] RSP: 002b:00007fe6c01e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  281.382784][ T8705] RAX: ffffffffffffffda RBX: 00007fe6bf536058 RCX: 00007fe6bf37dff9
[  281.390778][ T8705] RDX: 0000000000000000 RSI: 0000000000006611 RDI: 0000000000000004
[  281.398857][ T8705] RBP: 00007fe6bf3f0296 R08: 0000000000000000 R09: 0000000000000000
[  281.407020][ T8705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  281.415024][ T8705] R13: 0000000000000000 R14: 00007fe6bf536058 R15: 00007ffef69b4848
[  281.423027][ T8705]  </TASK>
[  281.426397][ T8705] Kernel Offset: disabled
[  281.430730][ T8705] Rebooting in 86400 seconds..