last executing test programs:

2m0.984201243s ago: executing program 3 (id=4):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[], 0xf, 0x2a4, &(0x7f00000001c0)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x40, 0xfffffffffffffff9, 0x0, 0x0, 0x20000002, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4, 0xf3]})

2m0.446469978s ago: executing program 3 (id=8):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8931, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_map={0xc, 0x7, 0x9, 0x8, 0x9, 0xf}})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001a0001002bbd7000040020001c000000", @ANYRES32=0x0], 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x8000)

1m59.498568568s ago: executing program 3 (id=12):
syz_open_dev$dri(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0x404900, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d)
sendfile(r0, r1, 0x0, 0x8000002b)

1m58.05659503s ago: executing program 32 (id=12):
syz_open_dev$dri(0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0x404900, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d)
sendfile(r0, r1, 0x0, 0x8000002b)

1m58.035777461s ago: executing program 2 (id=3):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x0)

1m57.63982301s ago: executing program 2 (id=15):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x16, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x14}, 0xf1)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000100000"])

1m57.294480246s ago: executing program 4 (id=16):
r0 = syz_mount_image$btrfs(&(0x7f00000004c0), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@clear_cache}, {@user_subvol_rm}, {@flushoncommit}, {@noautodefrag}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x7, 0x32, 0x38, 0x2d, 0x32, 0x36, 0x78, 0x2d, 0x2d, 0x37]}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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")
chdir(&(0x7f0000000080)='./file0\x00')
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000580)={0x1})
ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0)
unlinkat(0xffffffffffffff9c, 0x0, 0x0)

1m56.992408362s ago: executing program 2 (id=17):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[], 0xf, 0x2a4, &(0x7f00000001c0)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x40, 0xfffffffffffffff9, 0x0, 0x0, 0x20000002, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4, 0xf3]})

1m56.198292183s ago: executing program 2 (id=19):
r0 = socket$netlink(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xfffeffff)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0)
r2 = mq_open(&(0x7f0000000000)='\x81!(.\x00', 0x43, 0xa2, 0x0)
mq_timedreceive(r2, 0x0, 0x0, 0xfff, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000002740), 0x2, 0x0)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
read$FUSE(r6, &(0x7f0000000700)={0x2020}, 0xeffd)
pipe(&(0x7f00000001c0)={<r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f0000000100)=[{&(0x7f0000000240)='D6]', 0x3}], 0x1, 0xf)
read$FUSE(r6, &(0x7f00000000c0)={0x2020}, 0x2020)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, &(0x7f0000002a40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4)
setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x8, &(0x7f0000000000), 0x4)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)={[{@part={'part', 0x3d, 0x500f}}, {@nodecompose}, {}, {@part={'part', 0x3d, 0xc}}, {@uid}, {@barrier}, {@nls={'nls', 0x3d, 'cp949'}}, {@gid={'gid', 0x3d, 0xee00}}]}, 0x3, 0x5f4, &(0x7f0000000640)="$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")
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT={0x8}]}, 0x1c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000002900)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000028c0)={&(0x7f00000027c0)={0xd8, 0x1403, 0x201, 0x70bd27, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'gretap0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x848}, 0x0)

1m53.925404675s ago: executing program 4 (id=26):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x0)

1m53.224136664s ago: executing program 4 (id=27):
r0 = syz_open_dev$vbi(0x0, 0x0, 0x2)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8af, 0x640, 0x0, 0x1, 0xd59f87, 0x6, 0x42, 0x4, 0x3, 0x3, 0x8, 0x2800, 0x2, 0xba2, 0xe, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}})

1m52.96891766s ago: executing program 2 (id=28):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x16, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x14}, 0xf1)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000100000"])

1m51.699362504s ago: executing program 33 (id=28):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x16, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x14}, 0xf1)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000100000"])

1m51.689495895s ago: executing program 4 (id=30):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[], 0xf, 0x2a4, &(0x7f00000001c0)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x40, 0xfffffffffffffff9, 0x0, 0x0, 0x20000002, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4, 0xf3]})

1m50.571539695s ago: executing program 4 (id=33):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r2 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
syz_open_procfs(0xffffffffffffffff, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e24, 0x8000, @empty}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0)

1m40.587814401s ago: executing program 4 (id=50):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x1c57, &(0x7f0000000580)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0})
io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000340)='./file0\x00')
openat$incfs(0xffffffffffffff9c, &(0x7f00000a0040)='.pending_reads\x00', 0x80102, 0x10)

1m39.323113734s ago: executing program 34 (id=50):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x1c57, &(0x7f0000000580)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0})
io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000340)='./file0\x00')
openat$incfs(0xffffffffffffff9c, &(0x7f00000a0040)='.pending_reads\x00', 0x80102, 0x10)

11.92288015s ago: executing program 0 (id=199):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x4000074, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x2)
rseq(0x0, 0x0, 0x0, 0x0)
r3 = timerfd_create(0x8, 0x0)
timerfd_settime(r3, 0x1, &(0x7f00000020c0)={{0x77359400}, {0x0, 0x989680}}, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x200)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000540)={0x0, 0xd})

10.818194471s ago: executing program 0 (id=202):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r3, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x1, [<r5=>0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, <r6=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6})
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

10.538481083s ago: executing program 5 (id=203):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240))
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

9.618244493s ago: executing program 0 (id=204):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x400, 0x1, 0x1, 0xd59f83, 0x19fa, 0x3b, 0x19ef, 0x3, 0x8, 0x2800, 0x2803, 0x3, 0xba2, 0x0, 0x2b, {0x8, 0xffffffff}, 0xd1, 0x9}})

8.769439648s ago: executing program 5 (id=205):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0x19})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0x15, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r3, 0x0, <r4=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x334e8b})

8.498746734s ago: executing program 5 (id=206):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18)
r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72})
ioctl$MON_IOCX_GETX(r1, 0x80089203, &(0x7f0000000a40)={0x0, 0x0})
syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)

8.446547307s ago: executing program 0 (id=207):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$sg(0x0, 0x80000000, 0x103001)
r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
connect$caif(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, 0x0, 0x84)
socket$kcm(0x29, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pread64(r3, &(0x7f0000000080)=""/176, 0xb0, 0x365)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0)

7.673865761s ago: executing program 0 (id=208):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

7.558166315s ago: executing program 1 (id=209):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x441, 0x14a)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x20, 0x4000, 0x8000)

7.544660019s ago: executing program 5 (id=210):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', &(0x7f0000000040), 0x1c00)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x0, @hyper}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket(0x848000000015, 0x805, 0x0)
setsockopt$RDS_FREE_MR(r5, 0x114, 0x3, &(0x7f00000005c0), 0x10)
sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000800)=ANY=[@ANYBLOB="200000000109010800000400000000000d0000020900010073797a300000"], 0x20}, 0x1, 0x0, 0x0, 0x40840}, 0x4010)
listen(r3, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$int_in(r6, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000300))

4.05348177s ago: executing program 5 (id=211):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
syz_open_dev$video4linux(&(0x7f0000000080), 0x6d6b, 0x480)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f0000000440)="fa5e65bce6e6517902c8d011cd607cbc1a0664814f64b1c9a1e87962ad99c429db584004e8b08fcb054dc3621c59ae54e92c57268761aa3c21e58b0b7ecfaf1e22f791c8fa2881a1ae1ff847c70ae0e6281665db2c020ad74f5ad331e0e7623bfbe7f50180e12d6f0c906464987b6b28a13e13893a13b10a1a5c7cca11098f09f7423c94f1e78dbf9881cf9f9624a97aaaad3eb6521769de0b", 0x99}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x6}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000100)}, {&(0x7f0000000340)="e4", 0x1}], 0x2}}], 0x4, 0x4000000)

4.052373603s ago: executing program 0 (id=212):
syz_mount_image$jfs(&(0x7f00000021c0), &(0x7f0000002140)='./bus\x00', 0x2008010, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x6286, &(0x7f000000dc80)="$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")
chdir(&(0x7f0000000380)='./file0\x00')
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x108)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x86)
symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./bus\x00')
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)

3.849562647s ago: executing program 1 (id=213):
syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x800800, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1, 0x153e, &(0x7f0000002080)="$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")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

2.751771785s ago: executing program 5 (id=214):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000200)='./file1\x00', 0x300000a, &(0x7f0000000280)={[{@enospc_debug}, {@clear_cache}, {@nodiscard}, {@discard_sync}, {@ref_verify}, {@space_cache_v2}, {@notreelog}, {@thread_pool={'thread_pool', 0x3d, 0x5}}, {@skip_balance}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0xff, 0x55a3, &(0x7f000000e0c0)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=")
r0 = open(&(0x7f0000000240)='./bus\x00', 0x14927e, 0x182)
fallocate(r0, 0x0, 0x0, 0x1000f4)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000100)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x2}}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xfffffffd)
execve(&(0x7f0000000000)='./file2\x00', 0x0, 0x0)
r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff)
r6 = add_key$user(&(0x7f0000000140), &(0x7f0000002840)={'syz', 0x0}, &(0x7f0000002880)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b", 0xbd, 0xfffffffffffffffb)
r7 = add_key$user(&(0x7f0000000040), &(0x7f0000001180)={'syz', 0x3}, &(0x7f00000000c0)="2538a31458875a3834", 0x9, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000001340)={r5, r6, r7}, &(0x7f0000000180)=""/4093, 0xffd, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000001580)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000001200)={'gre0\x00', @link_local})

2.46238828s ago: executing program 1 (id=215):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0x19})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0x15, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r3, 0x0, <r4=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x334e8b})

2.162284748s ago: executing program 1 (id=216):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240))
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

1.002219391s ago: executing program 1 (id=217):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$sg(0x0, 0x80000000, 0x103001)
r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
connect$caif(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, 0x0, 0x84)
socket$kcm(0x29, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pread64(r3, &(0x7f0000000080)=""/176, 0xb0, 0x365)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0)

0s ago: executing program 1 (id=218):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
dup(0xffffffffffffffff)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000001}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e22, 0x8, @private1, 0x2}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}], 0x74)
r5 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.123' (ED25519) to the list of known hosts.
[  101.500763][   T55] cfg80211: failed to load regulatory.db
[  102.704084][ T5830] cgroup: Unknown subsys name 'net'
[  102.824506][ T5830] cgroup: Unknown subsys name 'cpuset'
[  102.834927][ T5830] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  104.610363][ T5830] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  107.812138][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  107.829866][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  107.839529][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  107.847207][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  107.856116][ T5855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  107.863598][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  107.864545][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  107.879209][ T5865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  107.887394][ T5865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  107.896404][ T5865] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  107.905748][ T5865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  107.913643][ T5865] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  107.921775][ T5865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  107.931285][ T5865] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  107.935229][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  107.940578][ T5865] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  107.953351][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  107.956319][ T5865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  107.969027][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  107.980733][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  107.981195][ T5160] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  107.992004][ T5863] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  108.009130][ T5160] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  108.016714][ T5160] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  108.029559][ T5160] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  108.057284][   T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  108.057810][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  108.072472][   T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  108.084842][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  108.092994][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  109.070350][ T5845] chnl_net:caif_netlink_parms(): no params data found
[  109.091445][ T5843] chnl_net:caif_netlink_parms(): no params data found
[  109.227311][ T5844] chnl_net:caif_netlink_parms(): no params data found
[  109.312111][ T5846] chnl_net:caif_netlink_parms(): no params data found
[  109.474951][ T5842] chnl_net:caif_netlink_parms(): no params data found
[  109.633523][ T5847] chnl_net:caif_netlink_parms(): no params data found
[  109.678515][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.685807][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.694542][ T5844] bridge_slave_0: entered allmulticast mode
[  109.703836][ T5844] bridge_slave_0: entered promiscuous mode
[  109.713353][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.720664][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.727962][ T5845] bridge_slave_0: entered allmulticast mode
[  109.737299][ T5845] bridge_slave_0: entered promiscuous mode
[  109.813201][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.821253][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.829823][ T5844] bridge_slave_1: entered allmulticast mode
[  109.837854][ T5844] bridge_slave_1: entered promiscuous mode
[  109.845930][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.853507][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.861334][ T5845] bridge_slave_1: entered allmulticast mode
[  109.869945][ T5845] bridge_slave_1: entered promiscuous mode
[  109.944542][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.951851][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.960205][ T5846] bridge_slave_0: entered allmulticast mode
[  109.967901][ T5846] bridge_slave_0: entered promiscuous mode
[  110.030045][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.037309][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.045064][ T5843] bridge_slave_0: entered allmulticast mode
[  110.053934][ T5843] bridge_slave_0: entered promiscuous mode
[  110.060300][ T5859] Bluetooth: hci1: command tx timeout
[  110.060307][   T51] Bluetooth: hci2: command tx timeout
[  110.071704][ T5848] Bluetooth: hci3: command tx timeout
[  110.112274][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.123733][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.131671][ T5846] bridge_slave_1: entered allmulticast mode
[  110.138607][ T5859] Bluetooth: hci5: command tx timeout
[  110.140168][ T5846] bridge_slave_1: entered promiscuous mode
[  110.144345][ T5859] Bluetooth: hci0: command tx timeout
[  110.155850][ T5848] Bluetooth: hci4: command tx timeout
[  110.177973][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  110.192594][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  110.202036][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.210083][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.217352][ T5843] bridge_slave_1: entered allmulticast mode
[  110.226112][ T5843] bridge_slave_1: entered promiscuous mode
[  110.257350][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.264941][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.272297][ T5842] bridge_slave_0: entered allmulticast mode
[  110.281034][ T5842] bridge_slave_0: entered promiscuous mode
[  110.309758][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  110.322149][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  110.365600][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.373204][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.381605][ T5842] bridge_slave_1: entered allmulticast mode
[  110.390475][ T5842] bridge_slave_1: entered promiscuous mode
[  110.400974][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  110.414467][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  110.458791][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  110.573996][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  110.602384][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.610133][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.617435][ T5847] bridge_slave_0: entered allmulticast mode
[  110.625550][ T5847] bridge_slave_0: entered promiscuous mode
[  110.656928][ T5846] team0: Port device team_slave_0 added
[  110.666929][ T5844] team0: Port device team_slave_0 added
[  110.677149][ T5844] team0: Port device team_slave_1 added
[  110.687349][ T5845] team0: Port device team_slave_0 added
[  110.711674][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.719512][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.726749][ T5847] bridge_slave_1: entered allmulticast mode
[  110.734951][ T5847] bridge_slave_1: entered promiscuous mode
[  110.745096][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  110.760134][ T5846] team0: Port device team_slave_1 added
[  110.800504][ T5845] team0: Port device team_slave_1 added
[  110.807617][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[  110.817397][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.844772][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  110.860871][ T5843] team0: Port device team_slave_0 added
[  110.887270][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  110.931645][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[  110.939217][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.965776][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  110.980820][ T5843] team0: Port device team_slave_1 added
[  111.073363][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[  111.080767][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.107135][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  111.150870][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  111.191375][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[  111.198958][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.225322][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  111.238191][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[  111.246013][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.273404][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  111.286363][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[  111.293532][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.319624][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  111.335519][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  111.366064][ T5842] team0: Port device team_slave_0 added
[  111.373308][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[  111.381002][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.407497][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  111.453478][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[  111.461146][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.487831][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  111.527521][ T5842] team0: Port device team_slave_1 added
[  111.571832][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[  111.579205][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.605717][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  111.642663][ T5844] hsr_slave_0: entered promiscuous mode
[  111.649584][ T5844] hsr_slave_1: entered promiscuous mode
[  111.661611][ T5847] team0: Port device team_slave_0 added
[  111.712916][ T5846] hsr_slave_0: entered promiscuous mode
[  111.721671][ T5846] hsr_slave_1: entered promiscuous mode
[  111.728026][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  111.737411][ T5846] Cannot create hsr debugfs directory
[  111.744938][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[  111.752096][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.778565][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  111.810694][ T5847] team0: Port device team_slave_1 added
[  111.935027][ T5845] hsr_slave_0: entered promiscuous mode
[  111.942951][ T5845] hsr_slave_1: entered promiscuous mode
[  111.950380][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  111.957983][ T5845] Cannot create hsr debugfs directory
[  111.982645][ T5843] hsr_slave_0: entered promiscuous mode
[  111.990402][ T5843] hsr_slave_1: entered promiscuous mode
[  111.996732][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  112.004909][ T5843] Cannot create hsr debugfs directory
[  112.011671][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[  112.018721][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.044750][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  112.122374][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[  112.129898][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.142169][ T5848] Bluetooth: hci2: command tx timeout
[  112.157750][ T5859] Bluetooth: hci1: command tx timeout
[  112.161565][   T51] Bluetooth: hci3: command tx timeout
[  112.166984][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  112.219073][ T5848] Bluetooth: hci5: command tx timeout
[  112.224574][ T5848] Bluetooth: hci4: command tx timeout
[  112.230489][   T51] Bluetooth: hci0: command tx timeout
[  112.304961][ T5842] hsr_slave_0: entered promiscuous mode
[  112.312450][ T5842] hsr_slave_1: entered promiscuous mode
[  112.319570][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  112.327341][ T5842] Cannot create hsr debugfs directory
[  112.519594][ T5847] hsr_slave_0: entered promiscuous mode
[  112.526344][ T5847] hsr_slave_1: entered promiscuous mode
[  112.533645][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  112.541672][ T5847] Cannot create hsr debugfs directory
[  113.084182][ T5844] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  113.100609][ T5844] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  113.151381][ T5844] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  113.195975][ T5844] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  113.286688][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  113.301547][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  113.314450][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  113.346682][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  113.435990][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  113.454649][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  113.466280][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  113.495378][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  113.657781][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  113.670742][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  113.694598][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  113.732026][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  113.864046][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  113.890392][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.908741][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  113.923793][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  113.939531][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  114.025338][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[  114.099754][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.107082][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.146905][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.163753][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.171075][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.184952][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  114.202194][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.217751][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  114.225141][ T5848] Bluetooth: hci1: command tx timeout
[  114.230917][ T5848] Bluetooth: hci2: command tx timeout
[  114.231513][   T51] Bluetooth: hci3: command tx timeout
[  114.247752][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  114.262896][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  114.298945][   T51] Bluetooth: hci5: command tx timeout
[  114.308764][   T51] Bluetooth: hci4: command tx timeout
[  114.310794][ T5848] Bluetooth: hci0: command tx timeout
[  114.365240][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[  114.437002][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[  114.457236][ T3548] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.464491][ T3548] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.494899][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.502143][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.560445][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.567827][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.596609][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.633055][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.640312][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.793985][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[  114.817320][ T3548] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.824818][ T3548] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.862970][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.870223][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.054946][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.116546][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.253486][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[  115.267019][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[  115.286276][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.355152][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.362470][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.416596][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.423881][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.547018][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.554309][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.601937][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.609193][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.736490][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.841277][ T5847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  115.957025][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.200120][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.299036][ T5848] Bluetooth: hci3: command tx timeout
[  116.299224][   T51] Bluetooth: hci1: command tx timeout
[  116.304504][ T5848] Bluetooth: hci2: command tx timeout
[  116.343442][ T5846] veth0_vlan: entered promiscuous mode
[  116.380689][ T5859] Bluetooth: hci5: command tx timeout
[  116.382556][   T51] Bluetooth: hci0: command tx timeout
[  116.386180][ T5848] Bluetooth: hci4: command tx timeout
[  116.465966][ T5843] veth0_vlan: entered promiscuous mode
[  116.491939][ T5844] veth0_vlan: entered promiscuous mode
[  116.513484][ T5846] veth1_vlan: entered promiscuous mode
[  116.542472][ T5843] veth1_vlan: entered promiscuous mode
[  116.594298][ T5844] veth1_vlan: entered promiscuous mode
[  116.654255][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.680216][ T5843] veth0_macvtap: entered promiscuous mode
[  116.703939][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.726453][ T5843] veth1_macvtap: entered promiscuous mode
[  116.755257][ T5845] veth0_vlan: entered promiscuous mode
[  116.774403][ T5846] veth0_macvtap: entered promiscuous mode
[  116.808142][ T5845] veth1_vlan: entered promiscuous mode
[  116.851432][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.872505][ T5846] veth1_macvtap: entered promiscuous mode
[  116.923394][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.956741][ T5844] veth0_macvtap: entered promiscuous mode
[  116.974438][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.984171][ T5843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.993481][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.002714][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.037982][ T5844] veth1_macvtap: entered promiscuous mode
[  117.064931][ T5847] veth0_vlan: entered promiscuous mode
[  117.093747][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.107799][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.135918][ T5845] veth0_macvtap: entered promiscuous mode
[  117.183137][ T5846] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.192188][ T5846] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.201157][ T5846] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.211152][ T5846] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.242116][ T5845] veth1_macvtap: entered promiscuous mode
[  117.267808][ T5847] veth1_vlan: entered promiscuous mode
[  117.336730][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.373633][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.409263][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.428876][ T5844] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.440479][ T5844] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.449753][ T5844] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.458712][ T5844] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.484018][ T5847] veth0_macvtap: entered promiscuous mode
[  117.543492][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.560298][ T5847] veth1_macvtap: entered promiscuous mode
[  117.594281][ T5842] veth0_vlan: entered promiscuous mode
[  117.604283][ T5845] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.614111][ T5845] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.627476][ T5845] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.636682][ T5845] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.674990][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.683276][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.685531][ T5842] veth1_vlan: entered promiscuous mode
[  117.829626][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.864658][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.876880][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.902928][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.917345][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.925942][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.966323][ T5847] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.975562][ T5847] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.985088][ T5847] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.993946][ T5847] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.053873][ T5842] veth0_macvtap: entered promiscuous mode
[  118.093667][ T5842] veth1_macvtap: entered promiscuous mode
[  118.106309][  T131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.120243][  T131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.160348][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  118.213361][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.222521][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.231291][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.244690][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.384568][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[  118.439748][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[  118.459823][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.498333][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.546615][ T5842] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.558009][ T5988] program syz.0.1 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  118.584277][ T5842] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.597714][ T5842] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.604056][ T5990] loop3: detected capacity change from 0 to 256
[  118.612553][ T5842] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.728863][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  118.745864][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.780119][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.955474][ T5846] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  118.963654][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.976411][ T5846] FAT-fs (loop3): Filesystem has been set read-only
[  118.983839][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.007933][ T5846] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  119.013130][ T5992] loop0: detected capacity change from 0 to 1024
[  119.050085][ T5992] =======================================================
[  119.050085][ T5992] WARNING: The mand mount option has been deprecated and
[  119.050085][ T5992]          and is ignored by this kernel. Remove the mand
[  119.050085][ T5992]          option from the mount to silence this warning.
[  119.050085][ T5992] =======================================================
[  119.212178][ T5992] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.239590][ T5992] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.348354][  T131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.417405][  T131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.854842][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.864244][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.872554][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.889443][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.333658][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.764240][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  120.773263][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  120.837017][ T1152] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.014817][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  121.179864][ T6017] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  121.239571][ T5939] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  121.298781][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  121.352055][ T1152] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.418786][ T5939] usb 1-1: Using ep0 maxpacket: 16
[  121.433595][ T5939] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  121.466318][ T5939] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  121.507109][ T5939] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  121.557894][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.623859][ T5939] usb 1-1: Product: syz
[  121.641489][ T1152] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.665070][ T5939] usb 1-1: Manufacturer: syz
[  121.686688][ T5939] usb 1-1: SerialNumber: syz
[  122.000598][ T1152] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.003391][ T5939] usb 1-1: 0:2 : does not exist
[  122.075979][ T5939] usb 1-1: unit 9 not found!
[  122.176048][ T6025] program syz.2.15 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  122.348626][ T5939] usb 1-1: USB disconnect, device number 2
[  122.493646][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  122.789356][ T6030] loop2: detected capacity change from 0 to 256
[  122.979456][ T1152] bridge_slave_1: left allmulticast mode
[  123.066202][ T1152] bridge_slave_1: left promiscuous mode
[  123.111102][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.190727][ T5847] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  123.312116][ T1152] bridge_slave_0: left allmulticast mode
[  123.328449][ T5847] FAT-fs (loop2): Filesystem has been set read-only
[  123.368571][ T1152] bridge_slave_0: left promiscuous mode
[  123.395893][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.408808][ T5847] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  123.450148][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  123.478139][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  123.488540][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  123.497462][   T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  123.505326][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  123.533926][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  123.584346][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  124.280735][ T6028] loop4: detected capacity change from 0 to 32768
[  124.337293][ T6028] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.16 (6028)
[  124.470361][ T6028] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  124.507737][ T6028] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm
[  124.532663][ T6028] BTRFS info (device loop4): disk space caching is enabled
[  124.565584][ T6028] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  124.806993][ T6028] BTRFS info (device loop4): rebuilding free space tree
[  125.058043][ T6028] BTRFS info (device loop4): disabling free space tree
[  125.115373][ T6028] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  125.156914][ T6028] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  125.555020][ T5842] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  125.607181][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  125.658608][ T5848] Bluetooth: hci4: command tx timeout
[  125.669150][ T5939] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  125.795018][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  125.869243][ T5939] usb 6-1: Using ep0 maxpacket: 32
[  125.900950][ T5939] usb 6-1: config 0 has an invalid interface number: 12 but max is 0
[  125.902976][ T1152] bond0 (unregistering): Released all slaves
[  125.926186][ T5939] usb 6-1: config 0 has no interface number 0
[  125.948105][ T5939] usb 6-1: config 0 interface 12 has no altsetting 0
[  125.990908][ T5939] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  126.013689][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.043257][ T5939] usb 6-1: Product: syz
[  126.083850][ T5939] usb 6-1: Manufacturer: syz
[  126.105840][ T5939] usb 6-1: SerialNumber: syz
[  126.169608][ T5939] usb 6-1: config 0 descriptor??
[  126.635984][ T6077] loop0: detected capacity change from 0 to 32768
[  126.685847][ T6077] btrfs: Deprecated parameter 'usebackuproot'
[  126.717198][ T6077] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  126.752153][ T6077] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.23 (6077)
[  126.801521][ T6079] loop1: detected capacity change from 0 to 32768
[  126.880711][ T6077] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  126.892878][ T6079] XFS: ikeep mount option is deprecated.
[  126.957062][ T6077] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm
[  127.030809][ T6077] BTRFS info (device loop0): using free-space-tree
[  127.137200][ T6079] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  127.362163][ T6011] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  127.470599][ T6077] BTRFS error (device loop0): failed to load root extent
[  127.478195][ T6077] BTRFS warning (device loop0): try to load backup roots slot 1
[  127.490338][   T37] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  127.503988][ T6077] BTRFS warning (device loop0): couldn't read tree root
[  127.511643][ T6077] BTRFS warning (device loop0): try to load backup roots slot 2
[  127.520096][   T37] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  127.531044][ T6077] BTRFS warning (device loop0): couldn't read tree root
[  127.539871][ T6077] BTRFS warning (device loop0): try to load backup roots slot 3
[  127.634107][ T6079] XFS (loop1): Ending clean mount
[  127.669591][ T6077] BTRFS info (device loop0): rebuilding free space tree
[  127.718026][ T6079] XFS (loop1): Quotacheck needed: Please wait.
[  127.751822][ T5848] Bluetooth: hci4: command tx timeout
[  127.850590][ T6077] BTRFS info (device loop0): checking UUID tree
[  127.979290][ T6119] loop4: detected capacity change from 0 to 256
[  128.009761][ T6079] XFS (loop1): Quotacheck: Done.
[  128.135685][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[  128.198624][    T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!!
[  128.242854][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[  128.569129][ T5939] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71
[  128.577521][ T5939] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71
[  128.598364][ T5939] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  128.606051][ T5939] f81534 6-1:0.12: probe with driver f81534 failed with error -71
[  128.653451][ T5939] usb 6-1: USB disconnect, device number 2
[  128.688467][ T5845] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  128.779146][ T1152] hsr_slave_0: left promiscuous mode
[  128.808267][ T5842] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  128.817802][ T5842] FAT-fs (loop4): Filesystem has been set read-only
[  128.826094][ T5842] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  128.938723][ T1152] hsr_slave_1: left promiscuous mode
[  128.945021][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  128.967785][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0
[  129.034670][ T5843] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  129.125079][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  129.189037][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1
[  129.478683][ T1152] veth1_macvtap: left promiscuous mode
[  129.484621][ T1152] veth0_macvtap: left promiscuous mode
[  129.528831][ T1152] veth1_vlan: left promiscuous mode
[  129.536520][ T1152] veth0_vlan: left promiscuous mode
[  129.818753][ T5848] Bluetooth: hci4: command tx timeout
[  130.524487][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  130.533601][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  130.542000][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  130.559404][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  130.567500][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  131.898659][   T51] Bluetooth: hci4: command tx timeout
[  132.618517][   T51] Bluetooth: hci2: command tx timeout
[  134.025417][ T6160] loop0: detected capacity change from 0 to 32768
[  134.146123][ T6160] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.38 (6160)
[  134.178792][ T6160] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  134.189297][ T6160] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm
[  134.198201][ T6160] BTRFS info (device loop0): disk space caching is enabled
[  134.212029][ T6160] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  134.699211][   T51] Bluetooth: hci2: command tx timeout
[  134.722867][ T6160] BTRFS info (device loop0): rebuilding free space tree
[  135.029606][ T6160] BTRFS info (device loop0): disabling free space tree
[  135.107948][ T6160] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  135.196519][ T6160] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  135.505207][ T6196] loop1: detected capacity change from 0 to 256
[  135.547224][ T5843] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  135.605104][ T1152] team0 (unregistering): Port device team_slave_1 removed
[  135.624942][   T30] audit: type=1804 audit(1751728726.150:2): pid=6196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.44" name="/newroot/9/file0/bus" dev="loop1" ino=1048625 res=1 errno=0
[  135.848630][ T1152] team0 (unregistering): Port device team_slave_0 removed
[  136.778410][   T51] Bluetooth: hci2: command tx timeout
[  137.852760][ T6193] loop5: detected capacity change from 0 to 32768
[  138.413932][ T6203] lo speed is unknown, defaulting to 1000
[  138.423404][ T6203] lo speed is unknown, defaulting to 1000
[  138.431338][ T6203] lo speed is unknown, defaulting to 1000
[  138.752157][ T6203] infiniband syz0: set active
[  138.757143][ T6203] infiniband syz0: added lo
[  138.765156][ T6203] syz0: rxe_create_cq: returned err = -12
[  138.771447][ T6203] infiniband syz0: Couldn't create ib_mad CQ
[  138.778927][ T6203] infiniband syz0: Couldn't open port 1
[  138.813522][ T6203] RDS/IB: syz0: added
[  138.818139][ T6203] smc: adding ib device syz0 with port count 1
[  138.824749][ T6203] smc:    ib device syz0 port 1 has pnetid 
[  138.858505][   T51] Bluetooth: hci2: command tx timeout
[  139.021045][ T6203] lo speed is unknown, defaulting to 1000
[  139.289902][ T6203] lo speed is unknown, defaulting to 1000
[  139.529608][ T5920] lo speed is unknown, defaulting to 1000
[  139.640098][ T5826] lo speed is unknown, defaulting to 1000
[  139.647262][ T6203] lo speed is unknown, defaulting to 1000
[  140.228981][ T6203] lo speed is unknown, defaulting to 1000
[  140.744014][ T6145] lo speed is unknown, defaulting to 1000
[  141.012408][ T6232] Zero length message leads to an empty skb
[  141.323677][ T6228] loop1: detected capacity change from 0 to 2048
[  141.624640][ T6228] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  141.782243][ T6228] NILFS (loop1): mounting unchecked fs
[  142.478922][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  142.485510][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  142.596235][ T5831] udevd[5831]: incorrect nilfs2 checksum on /dev/loop1
[  142.642883][ T6228] NILFS (loop1): recovery complete
[  142.691113][ T6036] chnl_net:caif_netlink_parms(): no params data found
[  142.749490][ T6235] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  142.988848][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  142.997756][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  143.006470][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  143.015246][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  143.029591][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  143.876659][ T6203] lo speed is unknown, defaulting to 1000
[  144.255807][ T6036] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.266351][ T6254] program syz.1.57 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  144.278404][ T6254] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  144.380895][ T6036] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.389821][ T6036] bridge_slave_0: entered allmulticast mode
[  144.397929][ T6036] bridge_slave_0: entered promiscuous mode
[  144.442692][ T6036] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.467675][ T6036] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.487236][ T6036] bridge_slave_1: entered allmulticast mode
[  144.497025][ T6036] bridge_slave_1: entered promiscuous mode
[  144.556710][ T6203] lo speed is unknown, defaulting to 1000
[  144.949599][ T6237] loop5: detected capacity change from 0 to 32768
[  144.987448][ T6036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  145.016740][ T6237] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.55 (6237)
[  145.047535][ T6239] lo speed is unknown, defaulting to 1000
[  145.083773][ T6036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  145.100622][ T6237] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  145.102132][   T51] Bluetooth: hci5: command tx timeout
[  145.138540][ T6237] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm
[  145.147438][ T6237] BTRFS info (device loop5): disk space caching is enabled
[  145.229467][ T6237] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  145.445759][ T6036] team0: Port device team_slave_0 added
[  145.488150][ T6036] team0: Port device team_slave_1 added
[  145.509032][ T6237] BTRFS info (device loop5): rebuilding free space tree
[  145.560535][ T6237] BTRFS info (device loop5): disabling free space tree
[  145.588629][ T6237] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  145.605092][ T6237] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  145.886619][ T1152] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.941206][ T6261] loop1: detected capacity change from 0 to 32768
[  145.986305][   T37] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared)
[  145.998174][ T6261] btrfs: Deprecated parameter 'usebackuproot'
[  146.028361][ T6261] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  146.081211][ T5844] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  146.102821][ T6261] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.58 (6261)
[  146.215097][ T6036] batman_adv: batadv0: Adding interface: batadv_slave_0
[  146.240550][ T6261] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  146.254497][ T6036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.296528][ T6261] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm
[  146.332297][ T6036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  146.373983][ T6261] BTRFS info (device loop1): using free-space-tree
[  146.397477][ T6036] batman_adv: batadv0: Adding interface: batadv_slave_1
[  146.437126][ T6036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.505820][ T6036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  146.614183][ T1152] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.639880][   T36] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  146.969618][ T6261] BTRFS error (device loop1): failed to load root extent
[  146.981297][ T6261] BTRFS warning (device loop1): try to load backup roots slot 1
[  146.997335][   T12] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  147.013171][ T6261] BTRFS warning (device loop1): couldn't read tree root
[  147.022254][ T6261] BTRFS warning (device loop1): try to load backup roots slot 2
[  147.031956][   T36] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  147.114616][ T1152] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.136044][ T6261] BTRFS warning (device loop1): couldn't read tree root
[  147.169032][ T6261] BTRFS warning (device loop1): try to load backup roots slot 3
[  147.179881][   T51] Bluetooth: hci5: command tx timeout
[  147.409453][ T6261] BTRFS info (device loop1): rebuilding free space tree
[  147.538923][ T6261] BTRFS info (device loop1): checking UUID tree
[  147.867414][ T1152] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.013993][ T6036] hsr_slave_0: entered promiscuous mode
[  148.159984][ T6036] hsr_slave_1: entered promiscuous mode
[  148.168214][ T6036] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  148.175981][ T6036] Cannot create hsr debugfs directory
[  148.346780][ T5845] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  149.260270][   T51] Bluetooth: hci5: command tx timeout
[  149.410494][ T6316] loop5: detected capacity change from 0 to 40427
[  149.462440][ T6316] F2FS-fs (loop5): Image doesn't support compression
[  149.500035][ T6145] chnl_net:caif_netlink_parms(): no params data found
[  149.539784][ T6316] F2FS-fs (loop5): invalid crc value
[  149.922855][ T1152] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.028666][ T6316] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  150.133008][   T30] audit: type=1800 audit(1751728740.670:3): pid=6316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.61" name="file1" dev="loop5" ino=10 res=0 errno=0
[  150.236049][ T6345] netlink: 24 bytes leftover after parsing attributes in process `syz.1.65'.
[  150.258836][ T5844] syz-executor: attempt to access beyond end of device
[  150.258836][ T5844] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  150.274927][ T5844] CPU: 0 UID: 0 PID: 5844 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) 
[  150.274978][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  150.275000][ T5844] Call Trace:
[  150.275012][ T5844]  <TASK>
[  150.275025][ T5844]  dump_stack_lvl+0x16c/0x1f0
[  150.275091][ T5844]  f2fs_handle_critical_error+0x621/0x9f0
[  150.275143][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.275189][ T5844]  ? f2fs_build_fault_attr+0x53/0x1f0
[  150.275242][ T5844]  f2fs_write_end_io+0x785/0xc20
[  150.275299][ T5844]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  150.275358][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.275416][ T5844]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  150.275467][ T5844]  bio_endio+0x70d/0x850
[  150.275511][ T5844]  submit_bio_noacct+0x56d/0x1eb0
[  150.275579][ T5844]  __submit_merged_bio+0x33c/0x770
[  150.275639][ T5844]  __submit_merged_write_cond+0x319/0x3f0
[  150.275707][ T5844]  f2fs_write_cache_pages+0x2067/0x2570
[  150.275801][ T5844]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  150.275861][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.275908][ T5844]  ? exit_to_user_mode_loop+0xeb/0x110
[  150.275955][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.275999][ T5844]  ? __kasan_check_byte+0x13/0x50
[  150.276049][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.276095][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.276138][ T5844]  ? rcu_is_watching+0x12/0xc0
[  150.276187][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.276233][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.276300][ T5844]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  150.276432][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.276476][ T5844]  ? add_lock_to_list+0x9d/0x130
[  150.276537][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.276598][ T5844]  f2fs_write_data_pages+0x4ad/0xd90
[  150.276669][ T5844]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  150.276725][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.276784][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.276835][ T5844]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  150.276900][ T5844]  do_writepages+0x27a/0x600
[  150.276943][ T5844]  ? __pfx_do_writepages+0x10/0x10
[  150.276976][ T5844]  ? do_raw_spin_unlock+0x172/0x230
[  150.277019][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.277063][ T5844]  ? _raw_spin_unlock+0x28/0x50
[  150.277122][ T5844]  filemap_fdatawrite_wbc+0x104/0x160
[  150.277157][ T5844]  ? __pfx_stack_trace_save+0x10/0x10
[  150.277212][ T5844]  __filemap_fdatawrite_range+0xb2/0xf0
[  150.277260][ T5844]  ? __pfx___filemap_fdatawrite_range+0x10/0x10
[  150.277307][ T5844]  ? check_path.constprop.0+0x24/0x50
[  150.277426][ T5844]  ? find_held_lock+0x2b/0x80
[  150.277476][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.277520][ T5844]  ? do_raw_spin_unlock+0x172/0x230
[  150.277564][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.277623][ T5844]  f2fs_sync_dirty_inodes+0x2a9/0x990
[  150.277710][ T5844]  block_operations+0x2a3/0xfd0
[  150.277786][ T5844]  ? __pfx_block_operations+0x10/0x10
[  150.277843][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.277955][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.277999][ T5844]  ? down_write+0x14d/0x200
[  150.278037][ T5844]  ? __pfx_down_write+0x10/0x10
[  150.278077][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.278120][ T5844]  ? rcu_is_watching+0x12/0xc0
[  150.278177][ T5844]  f2fs_write_checkpoint+0x2b8/0x4c60
[  150.278248][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.278296][ T5844]  ? kfree+0x2b4/0x4d0
[  150.278326][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.278376][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.278419][ T5844]  ? rcu_is_watching+0x12/0xc0
[  150.278468][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.278511][ T5844]  ? kthread_stop+0x273/0x650
[  150.278550][ T5844]  kill_f2fs_super+0x3c2/0x470
[  150.278591][ T5844]  ? __pfx_kill_f2fs_super+0x10/0x10
[  150.278624][ T5844]  ? lockdep_hardirqs_on+0x7c/0x110
[  150.278703][ T5844]  deactivate_locked_super+0xc1/0x1a0
[  150.278745][ T5844]  deactivate_super+0xde/0x100
[  150.278788][ T5844]  cleanup_mnt+0x225/0x450
[  150.278836][ T5844]  task_work_run+0x150/0x240
[  150.278881][ T5844]  ? __pfx_task_work_run+0x10/0x10
[  150.278919][ T5844]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.278967][ T5844]  ? __pfx___x64_sys_umount+0x10/0x10
[  150.279028][ T5844]  exit_to_user_mode_loop+0xeb/0x110
[  150.279074][ T5844]  do_syscall_64+0x3f6/0x4c0
[  150.279113][ T5844]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.279150][ T5844] RIP: 0033:0x7f9c4858fc57
[  150.279180][ T5844] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  150.279216][ T5844] RSP: 002b:00007ffc1e1d3ac8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  150.279250][ T5844] RAX: 0000000000000000 RBX: 00007f9c48610925 RCX: 00007f9c4858fc57
[  150.279275][ T5844] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc1e1d3b80
[  150.279298][ T5844] RBP: 00007ffc1e1d3b80 R08: 0000000000000000 R09: 0000000000000000
[  150.279321][ T5844] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc1e1d4c10
[  150.279345][ T5844] R13: 00007f9c48610925 R14: 0000000000024a97 R15: 00007ffc1e1d4c50
[  150.279399][ T5844]  </TASK>
[  150.812225][ T5844] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  150.876974][ T6036] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  150.907980][ T6036] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  150.921640][ T6036] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  151.339035][   T51] Bluetooth: hci5: command tx timeout
[  151.379256][ T5948] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  151.380243][ T1152] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.548380][ T5948] usb 2-1: Using ep0 maxpacket: 16
[  151.561161][ T5948] usb 2-1: config 4 has an invalid interface number: 51 but max is 0
[  151.577476][ T5948] usb 2-1: config 4 has no interface number 0
[  151.588369][ T5948] usb 2-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16
[  151.605531][ T6036] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  151.632774][ T5948] usb 2-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  151.676028][ T5948] usb 2-1: config 4 interface 51 has no altsetting 0
[  151.704577][ T5948] usb 2-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76
[  151.727072][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.737189][ T5948] usb 2-1: Product: syz
[  151.747021][ T5948] usb 2-1: Manufacturer: syz
[  151.763089][ T5948] usb 2-1: SerialNumber: syz
[  151.792864][ T6350] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  151.808605][ T6350] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  151.887987][ T1152] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.109915][ T6341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.65'.
[  152.126603][ T6145] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.147045][ T6145] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.167686][ T6145] bridge_slave_0: entered allmulticast mode
[  152.207126][ T5948] cdc_eem 2-1:4.51: probe with driver cdc_eem failed with error -71
[  152.226500][ T6145] bridge_slave_0: entered promiscuous mode
[  152.254714][ T6145] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.266785][ T5948] usb 2-1: USB disconnect, device number 2
[  152.285279][ T6145] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.307283][ T6145] bridge_slave_1: entered allmulticast mode
[  152.340339][ T6145] bridge_slave_1: entered promiscuous mode
[  152.465414][ T1152] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.531628][ T6239] chnl_net:caif_netlink_parms(): no params data found
[  152.821521][ T6145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  152.906254][ T6145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  153.206970][ T6239] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.236941][ T6239] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.258007][ T6239] bridge_slave_0: entered allmulticast mode
[  153.275661][ T6239] bridge_slave_0: entered promiscuous mode
[  153.306688][ T6239] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.328622][ T6239] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.358229][ T6239] bridge_slave_1: entered allmulticast mode
[  153.378649][ T6239] bridge_slave_1: entered promiscuous mode
[  153.423501][ T6145] team0: Port device team_slave_0 added
[  153.467220][ T6145] team0: Port device team_slave_1 added
[  153.570925][ T6383] loop1: detected capacity change from 0 to 2048
[  153.587102][ T6383] udf: Unknown parameter 'i/charset'
[  154.075239][ T6239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  154.109101][ T6239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  154.190306][ T6145] batman_adv: batadv0: Adding interface: batadv_slave_0
[  154.218481][ T6145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.241900][ T6377] loop5: detected capacity change from 0 to 32768
[  154.275786][ T6145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  154.320370][ T6377] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  154.328979][ T6377] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  154.441397][ T6377] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  154.486263][ T6145] batman_adv: batadv0: Adding interface: batadv_slave_1
[  154.486928][ T5966] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  154.493766][ T6145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.526285][ T5966] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  154.591656][ T6387] loop1: detected capacity change from 0 to 512
[  154.639585][ T6145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  154.802035][ T6239] team0: Port device team_slave_0 added
[  154.854252][ T6239] team0: Port device team_slave_1 added
[  155.227205][ T5966] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 700ms
[  155.252986][ T5966] gfs2: fsid=syz:syz.0: jid=0: Done
[  155.265341][ T6377] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  155.302959][ T1152] bridge_slave_1: left allmulticast mode
[  155.321892][ T1152] bridge_slave_1: left promiscuous mode
[  155.331902][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.375967][ T1152] bridge_slave_0: left allmulticast mode
[  155.385628][ T1152] bridge_slave_0: left promiscuous mode
[  155.409084][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.455109][ T1152] bridge_slave_1: left allmulticast mode
[  155.463447][ T1152] bridge_slave_1: left promiscuous mode
[  155.470982][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.506340][ T1152] bridge_slave_0: left allmulticast mode
[  155.521670][ T1152] bridge_slave_0: left promiscuous mode
[  155.534101][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.592034][ T6395] program syz.1.73 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  155.602280][ T6395] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  156.424907][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  156.442801][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  156.463936][ T1152] bond0 (unregistering): Released all slaves
[  156.804384][ T6399] loop5: detected capacity change from 0 to 32768
[  156.840413][ T6399] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  156.950091][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  156.966391][ T6399] XFS (loop5): Ending clean mount
[  156.982178][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  156.993633][ T6399] XFS (loop5): Quotacheck needed: Please wait.
[  157.006707][ T1152] bond0 (unregistering): Released all slaves
[  157.071875][ T6239] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.084144][ T6399] XFS (loop5): Quotacheck: Done.
[  157.100288][ T6239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.146896][ T6239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  157.339404][ T5844] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  157.364331][ T6145] hsr_slave_0: entered promiscuous mode
[  157.409955][ T6145] hsr_slave_1: entered promiscuous mode
[  157.424938][ T6145] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  157.466862][ T6145] Cannot create hsr debugfs directory
[  157.476824][ T6239] batman_adv: batadv0: Adding interface: batadv_slave_1
[  157.486258][ T6239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.513694][ T6239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  157.562936][ T6036] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.378041][ T6423] syz0: rxe_newlink: already configured on lo
[  159.939708][ T6036] 8021q: adding VLAN 0 to HW filter on device team0
[  160.156371][ T6440] loop1: detected capacity change from 0 to 64
[  160.168426][ T5939] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  160.179322][ T6239] hsr_slave_0: entered promiscuous mode
[  160.186161][ T6239] hsr_slave_1: entered promiscuous mode
[  160.223517][ T6239] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  160.255618][ T6239] Cannot create hsr debugfs directory
[  160.358434][ T5939] usb 1-1: Using ep0 maxpacket: 32
[  160.379982][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  160.411728][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  160.453088][ T5939] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  160.490625][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.529060][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.536339][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  160.551585][ T5939] usb 1-1: config 0 descriptor??
[  160.722028][ T6428] loop5: detected capacity change from 0 to 32768
[  160.776250][ T6428] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.82 (6428)
[  160.848089][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.855397][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.914595][ T6428] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  160.969090][ T6428] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm
[  161.007378][ T6428] BTRFS info (device loop5): using free-space-tree
[  161.112436][ T5939] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0
[  161.266802][ T6428] BTRFS info (device loop5): rebuilding free space tree
[  161.320138][ T5948] usb 1-1: USB disconnect, device number 3
[  161.595161][ T6440] syz.1.85 (6440): drop_caches: 2
[  162.250614][ T6462] fido_id[6462]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  163.323328][ T5844] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  163.398449][ T5948] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  163.581791][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  163.612572][ T5948] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  163.648424][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  163.658954][ T5948] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  163.707402][ T5948] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  163.752323][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.860430][ T5948] usb 2-1: config 0 descriptor??
[  164.147642][ T5948] hdpvr 2-1:0.0: firmware version 0xd4 dated �3���~�s?8b�h������C��#*��JBx��c��

[  164.181312][ T5948] hdpvr 2-1:0.0: untested firmware, the driver might not work.
[  164.277777][ T6036] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  164.294586][ T6486] loop0: detected capacity change from 0 to 256
[  164.326679][ T6036] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  164.369924][ T5948] hdpvr 2-1:0.0: device init failed
[  164.375657][ T5948] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12
[  164.455195][ T5948] usb 2-1: USB disconnect, device number 3
[  164.729861][ T6145] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  164.804873][ T6145] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  165.015457][ T6145] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  165.483575][ T6145] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  166.184179][ T6505] rdma_rxe: rxe_newlink: failed to add lo
[  167.561961][ T6239] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  167.711896][ T6239] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  167.892917][ T6239] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  167.984441][ T6239] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  168.173030][ T6536] loop1: detected capacity change from 0 to 256
[  168.208708][ T1152] hsr_slave_0: left promiscuous mode
[  168.246865][ T1152] hsr_slave_1: left promiscuous mode
[  168.259460][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  168.266956][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0
[  168.350914][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  168.377228][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1
[  168.787788][ T1152] hsr_slave_0: left promiscuous mode
[  168.818736][ T5939] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  168.990542][ T5939] usb 2-1: Using ep0 maxpacket: 32
[  169.061570][ T5939] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  169.145689][ T5939] usb 2-1: config 0 has no interface number 0
[  169.205762][ T5939] usb 2-1: config 0 interface 12 has no altsetting 0
[  169.301220][ T5939] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  169.318498][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.336856][ T5939] usb 2-1: Product: syz
[  169.354488][ T5939] usb 2-1: Manufacturer: syz
[  169.364594][ T5939] usb 2-1: SerialNumber: syz
[  169.389470][ T5939] usb 2-1: config 0 descriptor??
[  169.429338][ T1152] hsr_slave_1: left promiscuous mode
[  169.457017][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  169.487316][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0
[  169.550284][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  169.570382][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1
[  169.675683][ T1152] veth1_macvtap: left promiscuous mode
[  169.694138][ T1152] veth0_macvtap: left promiscuous mode
[  169.707744][ T1152] veth1_vlan: left promiscuous mode
[  169.727679][ T1152] veth0_vlan: left promiscuous mode
[  169.750772][ T1152] veth1_macvtap: left promiscuous mode
[  169.756580][ T1152] veth0_macvtap: left promiscuous mode
[  169.762583][ T1152] veth1_vlan: left promiscuous mode
[  169.768317][ T1152] veth0_vlan: left promiscuous mode
[  171.096625][ T1152] team0 (unregistering): Port device team_slave_1 removed
[  171.192274][ T6551] loop0: detected capacity change from 0 to 32768
[  171.200683][ T6551] btrfs: Deprecated parameter 'usebackuproot'
[  171.207871][ T6551] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  171.221187][ T1152] team0 (unregistering): Port device team_slave_0 removed
[  171.236765][ T6551] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.105 (6551)
[  171.274815][ T6551] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  171.293757][ T6551] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm
[  171.348501][ T6551] BTRFS info (device loop0): using free-space-tree
[  171.486696][ T5939] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71
[  171.496712][ T5939] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  171.497564][  T131] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  171.535161][ T5939] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  171.551820][ T6551] BTRFS error (device loop0): failed to load root extent
[  171.552590][ T5939] f81534 2-1:0.12: probe with driver f81534 failed with error -71
[  171.559899][ T6551] BTRFS warning (device loop0): try to load backup roots slot 1
[  171.587372][   T61] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  171.622809][ T5939] usb 2-1: USB disconnect, device number 4
[  171.637535][ T6551] BTRFS warning (device loop0): couldn't read tree root
[  171.656127][ T6551] BTRFS warning (device loop0): try to load backup roots slot 2
[  171.686046][ T6008] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  171.698085][ T6551] BTRFS warning (device loop0): couldn't read tree root
[  171.711480][ T6551] BTRFS warning (device loop0): try to load backup roots slot 3
[  171.783993][ T6551] BTRFS info (device loop0): rebuilding free space tree
[  171.817187][ T6551] BTRFS info (device loop0): checking UUID tree
[  172.295325][ T6572] loop1: detected capacity change from 0 to 2048
[  172.320607][ T5843] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  172.436672][ T6572] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  172.490386][ T5831] udevd[5831]: incorrect nilfs2 checksum on /dev/loop1
[  172.508349][ T6572] NILFS (loop1): mounting unchecked fs
[  172.590811][ T6572] NILFS (loop1): recovery complete
[  172.607326][ T6575] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  173.518485][ T5940] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  173.633158][ T1152] team0 (unregistering): Port device team_slave_1 removed
[  173.678431][ T5940] usb 1-1: Using ep0 maxpacket: 16
[  173.691746][ T1152] team0 (unregistering): Port device team_slave_0 removed
[  173.694284][ T5940] usb 1-1: config 0 has an invalid interface number: 126 but max is 0
[  173.722125][ T5940] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  173.738191][ T5940] usb 1-1: config 0 has no interface number 0
[  173.745325][ T5940] usb 1-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  173.757569][ T5940] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024
[  173.772202][ T5940] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  173.793305][ T5940] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  173.804364][ T5940] usb 1-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  173.833878][ T5940] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88
[  173.843245][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.866090][ T5940] usb 1-1: config 0 descriptor??
[  173.874224][ T6581] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  173.887671][ T5940] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  174.048526][ T6093] udevd[6093]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  174.124117][ T5940] usb 1-1: USB disconnect, device number 4
[  174.683673][ T6588] loop5: detected capacity change from 0 to 8
[  174.721212][ T6588] squashfs: Unknown parameter '��d ('
[  174.724857][ T6036] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.194726][ T6239] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.648205][ T6145] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.040805][ T6239] 8021q: adding VLAN 0 to HW filter on device team0
[  177.165629][ T6469] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.174176][ T6469] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.262904][ T6145] 8021q: adding VLAN 0 to HW filter on device team0
[  177.481826][ T6469] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.489083][ T6469] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.632383][ T6469] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.639689][ T6469] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.842672][ T6469] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.849940][ T6469] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.288756][ T6626] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5
[  178.828383][ T6637] syz0: rxe_newlink: already configured on lo
[  179.512087][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  179.616282][ T6614] loop5: detected capacity change from 0 to 32768
[  179.728546][ T6614] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.116 (6614)
[  179.813495][ T6036] veth0_vlan: entered promiscuous mode
[  179.858061][ T6644] loop1: detected capacity change from 0 to 2048
[  179.940565][ T6644] udf: Unknown parameter 'i/charset'
[  179.946026][ T6614] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  179.964132][ T6036] veth1_vlan: entered promiscuous mode
[  179.988514][ T6614] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm
[  180.048513][ T6614] BTRFS info (device loop5): using free-space-tree
[  180.125937][ T6644] loop1: detected capacity change from 0 to 128
[  180.201768][ T6036] veth0_macvtap: entered promiscuous mode
[  180.330767][ T6036] veth1_macvtap: entered promiscuous mode
[  180.487789][ T6036] batman_adv: batadv0: Interface activated: batadv_slave_0
[  180.574985][ T6036] batman_adv: batadv0: Interface activated: batadv_slave_1
[  181.075591][ T6036] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.146754][ T6036] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.212903][ T6036] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.274361][ T6036] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  181.355932][ T5844] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  181.556711][ T6239] 8021q: adding VLAN 0 to HW filter on device batadv0
[  181.717584][ T6145] 8021q: adding VLAN 0 to HW filter on device batadv0
[  184.030887][ T6691] loop1: detected capacity change from 0 to 64
[  185.682198][ T6717] overlayfs: missing 'lowerdir'
[  186.439352][   T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  186.459671][   T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  186.484706][   T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  186.503329][   T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  186.519002][   T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  186.888749][ T6727] blktrace: Concurrent blktraces are not allowed on loop0
[  188.345488][  T131] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.619118][   T51] Bluetooth: hci6: command tx timeout
[  188.633389][ T6716] lo speed is unknown, defaulting to 1000
[  190.698575][   T51] Bluetooth: hci6: command tx timeout
[  191.240490][  T131] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.496707][ T6239] veth0_vlan: entered promiscuous mode
[  191.567818][ T6239] veth1_vlan: entered promiscuous mode
[  192.640631][  T131] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.778798][   T51] Bluetooth: hci6: command tx timeout
[  193.121789][  T131] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.187662][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  193.215878][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  193.228827][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  193.243371][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  193.262159][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  193.626243][ T6759] loop5: detected capacity change from 0 to 32768
[  193.730735][ T6759] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  194.018828][ T6759] XFS (loop5): Ending clean mount
[  194.042120][ T6766] loop0: detected capacity change from 0 to 32768
[  194.334353][ T6766] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256
[  194.334402][ T6766]   allowing incompatible features above 0.0: (unknown version)
[  194.334425][ T6766]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  194.378964][ T6766] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  194.387262][ T6766] bcachefs (loop0): initializing new filesystem
[  194.403882][ T6766] bcachefs (loop0): going read-write
[  194.453093][ T6766] bcachefs (loop0): marking superblocks
[  194.476978][ T6766] bcachefs (loop0): initializing freespace
[  194.489279][ T6766] bcachefs (loop0): done initializing freespace
[  194.499455][ T6766] bcachefs (loop0): reading snapshots table
[  194.505581][ T6766] bcachefs (loop0): reading snapshots done
[  194.559403][ T6766] bcachefs (loop0): done starting filesystem
[  194.616012][ T6239] veth0_macvtap: entered promiscuous mode
[  194.616862][ T6766] bcachefs (loop0): going read-only
[  194.629605][ T6766] bcachefs (loop0): finished waiting for writes to stop
[  194.639737][ T5844] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  194.651615][ T6239] veth1_macvtap: entered promiscuous mode
[  194.661261][ T6790] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  194.677145][ T6239] batman_adv: batadv0: Interface activated: batadv_slave_0
[  194.709468][ T6766] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2
[  194.845491][ T6766] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 2
[  194.858668][   T51] Bluetooth: hci6: command tx timeout
[  194.879541][ T6766] bcachefs (loop0): clean shutdown complete, journal seq 3
[  194.888230][ T6766] bcachefs (loop0): marking filesystem clean
[  195.043791][ T6766] syz.0.141 (6766) used greatest stack depth: 17752 bytes left
[  195.079372][ T6239] batman_adv: batadv0: Interface activated: batadv_slave_1
[  195.086991][ T5843] bcachefs (loop0): shutting down
[  195.137688][ T6760] lo speed is unknown, defaulting to 1000
[  195.256947][ T5843] bcachefs (loop0): shutdown complete
[  195.293740][ T6239] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.318415][ T6239] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.327229][ T6239] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.338483][   T51] Bluetooth: hci4: command tx timeout
[  195.379444][ T6239] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.429500][  T131] bridge_slave_1: left allmulticast mode
[  195.435246][  T131] bridge_slave_1: left promiscuous mode
[  195.470769][  T131] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.566038][  T131] bridge_slave_0: left allmulticast mode
[  195.603108][  T131] bridge_slave_0: left promiscuous mode
[  195.655195][  T131] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.718116][   T51] Bluetooth: hci4: command tx timeout
[  199.288271][ T6805] loop1: detected capacity change from 0 to 1024
[  199.331472][ T6805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.368578][ T6805] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.554263][ T6805] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  199.614756][ T6805] EXT4-fs (loop1): Remounting filesystem read-only
[  199.649376][   T37] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4936: inode #15: block 3: len 13: ext4_ext_map_blocks returned -30
[  199.742624][   T51] Bluetooth: hci4: command tx timeout
[  199.750901][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.124082][  T131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  200.242956][  T131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  200.290962][  T131] bond0 (unregistering): Released all slaves
[  200.553411][ T6823] loop1: detected capacity change from 0 to 64
[  201.431671][ T6716] chnl_net:caif_netlink_parms(): no params data found
[  201.439027][ T6830] loop5: detected capacity change from 0 to 4096
[  201.819007][   T51] Bluetooth: hci4: command tx timeout
[  202.367632][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  202.389285][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  202.397894][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  202.410175][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  202.664646][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  203.145595][ T6838] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[  203.464940][  T131] hsr_slave_0: left promiscuous mode
[  203.506925][  T131] hsr_slave_1: left promiscuous mode
[  203.527993][  T131] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  203.571002][  T131] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.610152][  T131] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  203.617914][  T131] batman_adv: batadv0: Removing interface: batadv_slave_1
[  203.739560][  T131] veth1_macvtap: left promiscuous mode
[  203.753851][  T131] veth0_macvtap: left promiscuous mode
[  203.766657][  T131] veth1_vlan: left promiscuous mode
[  203.782643][  T131] veth0_vlan: left promiscuous mode
[  203.905361][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  203.964866][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  205.288612][ T5859] Bluetooth: hci2: command tx timeout
[  207.349358][   T51] Bluetooth: hci2: command tx timeout
[  209.418627][   T51] Bluetooth: hci2: command tx timeout
[  209.905219][ T6878] netlink: 28 bytes leftover after parsing attributes in process `syz.0.162'.
[  210.534947][ T6883] loop5: detected capacity change from 0 to 64
[  211.508524][   T51] Bluetooth: hci2: command tx timeout
[  211.628819][ T6890] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  213.375542][ T6899] overlayfs: failed to resolve './file1': -2
[  213.851160][ T6901] loop5: detected capacity change from 0 to 1024
[  214.005271][  T131] team0 (unregistering): Port device team_slave_1 removed
[  214.231788][ T6901] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  214.268938][  T131] team0 (unregistering): Port device team_slave_0 removed
[  214.596402][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.011036][ T6917] loop1: detected capacity change from 0 to 64
[  217.783829][ T6919] warning: `syz.5.177' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  218.209743][ T6760] chnl_net:caif_netlink_parms(): no params data found
[  218.258534][ T6716] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.286221][ T6716] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.304188][ T6716] bridge_slave_0: entered allmulticast mode
[  219.164812][ T6716] bridge_slave_0: entered promiscuous mode
[  219.232868][ T6716] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.295784][ T6940] overlayfs: failed to resolve './file1': -2
[  219.327010][ T6716] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.455862][ T6716] bridge_slave_1: entered allmulticast mode
[  219.704312][ T6716] bridge_slave_1: entered promiscuous mode
[  220.148138][ T6944] loop0: detected capacity change from 0 to 256
[  220.269266][   T30] audit: type=1804 audit(1751728810.800:4): pid=6944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.182" name="/newroot/46/file0/bus" dev="loop0" ino=1048631 res=1 errno=0
[  221.425828][ T6716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  221.509147][ T6716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  221.525426][ T6840] lo speed is unknown, defaulting to 1000
[  221.909961][ T6961] loop5: detected capacity change from 0 to 64
[  222.108473][ T5947] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  222.281355][ T5947] usb 2-1: unable to get BOS descriptor or descriptor too short
[  222.312813][ T5947] usb 2-1: not running at top speed; connect to a high speed hub
[  222.355616][ T5947] usb 2-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config
[  222.377225][ T5947] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b
[  222.402613][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.426539][ T6716] team0: Port device team_slave_0 added
[  222.443369][ T5947] usb 2-1: Product: syz
[  222.471058][ T5947] usb 2-1: Manufacturer: syz
[  222.476900][ T6716] team0: Port device team_slave_1 added
[  222.483068][ T5947] usb 2-1: SerialNumber: syz
[  222.742955][ T5947] usbtest 2-1:253.0: couldn't get endpoints, -22
[  222.781709][ T5947] usbtest 2-1:253.0: probe with driver usbtest failed with error -22
[  223.259388][ T6760] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.337133][ T6760] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.457518][ T6760] bridge_slave_0: entered allmulticast mode
[  223.588378][ T6760] bridge_slave_0: entered promiscuous mode
[  223.654308][ T6760] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.656842][ T5947] usb 2-1: USB disconnect, device number 5
[  223.684529][ T6760] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.693879][ T6978] loop5: detected capacity change from 0 to 1024
[  223.704898][ T6760] bridge_slave_1: entered allmulticast mode
[  223.755673][ T6760] bridge_slave_1: entered promiscuous mode
[  223.863450][ T6978] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.790062][ T6978] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  225.002043][ T6716] batman_adv: batadv0: Adding interface: batadv_slave_0
[  225.009857][ T6716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.108750][ T6716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  225.136805][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.172399][ T6716] batman_adv: batadv0: Adding interface: batadv_slave_1
[  225.208754][ T6716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.313097][ T6716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  225.661474][ T5920] lo speed is unknown, defaulting to 1000
[  225.771617][ T6760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  225.821995][ T7008] loop0: detected capacity change from 0 to 256
[  225.890406][   T30] audit: type=1804 audit(1751728816.430:5): pid=7008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.196" name="/newroot/50/file0/bus" dev="loop0" ino=1048632 res=1 errno=0
[  225.935401][  T131] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.131687][ T6760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  226.263939][ T6997] loop1: detected capacity change from 0 to 32768
[  227.373662][  T131] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.614348][ T6716] hsr_slave_0: entered promiscuous mode
[  227.666121][ T6716] hsr_slave_1: entered promiscuous mode
[  227.696797][ T6716] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  228.090516][   T51] Bluetooth: hci3: Unknown advertising packet type: 0x20
[  228.090634][   T51] Bluetooth: hci3: Malformed LE Event: 0x0d
[  228.470184][ T7022] loop5: detected capacity change from 0 to 1024
[  228.508361][ T6716] Cannot create hsr debugfs directory
[  228.539288][ T7022] EXT4-fs: inline encryption not supported
[  228.605970][ T7022] journal_path: Non-blockdev passed as './file1'
[  228.622561][ T7022] EXT4-fs: error: could not find journal device path
[  229.866030][  T131] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.716740][ T6760] team0: Port device team_slave_0 added
[  230.844489][ T6760] team0: Port device team_slave_1 added
[  231.629770][  T131] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.659582][ T5859] Bluetooth: hci3: command 0x0406 tx timeout
[  231.659622][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  231.675167][ T5848] Bluetooth: hci0: command 0x0406 tx timeout
[  231.761149][ T6760] batman_adv: batadv0: Adding interface: batadv_slave_0
[  231.800837][ T6760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.849067][ T6760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  234.290629][ T7054] loop1: detected capacity change from 0 to 1024
[  234.365129][ T6760] batman_adv: batadv0: Adding interface: batadv_slave_1
[  234.502759][ T6760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.340813][ T6760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  235.373588][ T7054] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  235.633446][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.861907][ T6840] chnl_net:caif_netlink_parms(): no params data found
[  236.457237][ T7070] loop1: detected capacity change from 0 to 256
[  236.632962][ T7070] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x08fbab18, utbl_chksum : 0xe619d30d)
[  236.785865][ T6760] hsr_slave_0: entered promiscuous mode
[  236.822774][ T6760] hsr_slave_1: entered promiscuous mode
[  236.857122][ T6760] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  236.888369][ T6760] Cannot create hsr debugfs directory
[  238.348681][ T7074] loop5: detected capacity change from 0 to 32768
[  238.449087][ T7074] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.214 (7074)
[  238.503418][ T7066] loop0: detected capacity change from 0 to 32768
[  238.517781][ T7066] 
[  238.517781][ T7066]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  238.517781][ T7066] 
[  238.895681][ T7066] read_mapping_page failed!
[  238.929177][ T7074] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  238.941606][ T7066] ERROR: (device loop0): txAbort: 
[  238.941606][ T7066] 
[  239.197339][ T7074] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm
[  239.198721][ T7093] read_mapping_page failed!
[  239.253524][ T7074] BTRFS info (device loop5): using free-space-tree
[  239.347855][ T7093] ERROR: (device loop0): txAbort: 
[  239.347855][ T7093] 
[  239.475707][ T7094] ==================================================================
[  239.483864][ T7094] BUG: KASAN: slab-out-of-bounds in dtInsertEntry.isra.0+0x13a1/0x1670
[  239.492186][ T7094] Read of size 4 at addr ffff888056a5c954 by task syz.0.212/7094
[  239.499945][ T7094] 
[  239.502290][ T7094] CPU: 0 UID: 0 PID: 7094 Comm: syz.0.212 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) 
[  239.502335][ T7094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  239.502356][ T7094] Call Trace:
[  239.502367][ T7094]  <TASK>
[  239.502380][ T7094]  dump_stack_lvl+0x116/0x1f0
[  239.502440][ T7094]  print_report+0xcd/0x680
[  239.502563][ T7094]  ? srso_alias_return_thunk+0x5/0xfbef5
[  239.502606][ T7094]  ? srso_alias_return_thunk+0x5/0xfbef5
[  239.502648][ T7094]  ? __phys_addr+0xe8/0x180
[  239.502691][ T7094]  ? dtInsertEntry.isra.0+0x13a1/0x1670
[  239.502756][ T7094]  kasan_report+0xe0/0x110
[  239.502802][ T7094]  ? dtInsertEntry.isra.0+0x13a1/0x1670
[  239.502867][ T7094]  dtInsertEntry.isra.0+0x13a1/0x1670
[  239.502933][ T7094]  ? srso_alias_return_thunk+0x5/0xfbef5
[  239.502979][ T7094]  ? mark_held_locks+0x49/0x80
[  239.503036][ T7094]  ? __pfx_dtInsertEntry.isra.0+0x10/0x10
[  239.503094][ T7094]  ? lockdep_hardirqs_on+0x7c/0x110
[  239.503147][ T7094]  ? srso_alias_return_thunk+0x5/0xfbef5
[  239.503189][ T7094]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  239.503243][ T7094]  ? srso_alias_return_thunk+0x5/0xfbef5
[  239.503286][ T7094]  ? srso_alias_return_thunk+0x5/0xfbef5
[  239.503332][ T7094]  dtSplitPage+0x2bd0/0x39e0
[  239.503392][ T7094]  ? srso_alias_return_thunk+0x5/0xfbef5
[  239.503437][ T7094]  ? release_metapage+0x4f7/0x880
[  239.503479][ T7094]  ? dbAllocCtl+0x19a/0x800
[  239.503545][ T7094]  ? __pfx_dtSplitPage+0x10/0x10
[  239.503601][ T7094]  ? srso_alias_return_thunk+0x5/0xfbef5
[  239.503643][ T7094]  ? up_write+0x1b2/0x520
[  239.503682][ T7094]  ? srso_alias_return_thunk+0x5/0xfbef5
[  239.503724][ T7094]  ? dbAlloc+0x43f/0xac0
[  239.503783][ T7094]  ? srso_alias_return_thunk+0x5/0xfbef5
[  239.503829][ T7094]  dtSplitUp+0x7ba/0x5970
[  239.503891][ T7094]  ? srso_alias_return_thunk+0x5/0xfbef5
[  239.503933][ T7094]  ? stack_depot_save_flags+0x3e0/0xa40
[  239.503989][ T7094]  ? __lock_acquire+0xb8a/0x1c90
[  239.504047][ T7094]  ? srso_alias_return_thunk+0x5/0xfbef5
[  239.504089][ T7094]  ? kasan_save_stack+0x42/0x60
[  239.504129][ T7094]  ? __pfx_dtSplitUp+0x10/0x10
[  239.504183][ T7094]  ? __kasan_slab_free+0x51/0x70
[  239.504224][ T7094]  ? kfree+0x2b4/0x4d0
[  239.504254][ T7094]  ? dtSearch+0x19b3/0x24c0
[  239.504282][ T7094]  ? vfs_symlink+0x403/0x680
[  239.504315][ T7094]  ? do_symlinkat+0x261/0x310
[  239.504360][ T7094]  ? __x64_sys_symlink+0x75/0x90
[  239.504407][ T7094]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.504471][ T7094]  ? kasan_quarantine_put+0x10a/0x240
[  239.504510][ T7094]  ? srso_alias_return_thunk+0x5/0xfbef5
[  239.504551][ T7094]  ? lockdep_hardirqs_on+0x7c/0x110
[  239.504603][ T7094]  ? srso_alias_return_thunk+0x5/0xfbef5
[  239.504651][ T7094]  dtInsert+0x8dd/0xb60
[  239.504684][ T7094]  ? __pfx_dtInsert+0x10/0x10
[  239.504740][ T7094]  jfs_symlink+0x738/0x10e0
[  239.504776][ T7094]  ? __pfx_tomoyo_path_perm+0x10/0x10
[  239.504824][ T7094]  ? __pfx_jfs_symlink+0x10/0x10
[  239.504886][ T7094]  ? srso_alias_return_thunk+0x5/0xfbef5
[  239.504927][ T7094]  ? srso_alias_return_thunk+0x5/0xfbef5
[  239.504969][ T7094]  ? security_inode_permission+0xbf/0x260
[  239.505013][ T7094]  ? srso_alias_return_thunk+0x5/0xfbef5
[  239.505055][ T7094]  ? inode_permission+0x156/0x630
[  239.505113][ T7094]  vfs_symlink+0x403/0x680
[  239.505149][ T7094]  do_symlinkat+0x261/0x310
[  239.505197][ T7094]  ? __pfx_do_symlinkat+0x10/0x10
[  239.505244][ T7094]  ? getname_flags.part.0+0x1c5/0x550
[  239.505307][ T7094]  __x64_sys_symlink+0x75/0x90
[  239.505355][ T7094]  do_syscall_64+0xcd/0x4c0
[  239.505387][ T7094]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.505422][ T7094] RIP: 0033:0x7f60ddf8e929
[  239.505449][ T7094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  239.505483][ T7094] RSP: 002b:00007f60dee0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[  239.505515][ T7094] RAX: ffffffffffffffda RBX: 00007f60de1b6160 RCX: 00007f60ddf8e929
[  239.505539][ T7094] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000080
[  239.505561][ T7094] RBP: 00007f60de010b39 R08: 0000000000000000 R09: 0000000000000000
[  239.505582][ T7094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  239.505604][ T7094] R13: 0000000000000000 R14: 00007f60de1b6160 R15: 00007ffe0ae70368
[  239.505638][ T7094]  </TASK>
[  239.505650][ T7094] 
[  239.927403][ T7094] Allocated by task 7066:
[  239.931747][ T7094]  kasan_save_stack+0x33/0x60
[  239.936454][ T7094]  kasan_save_track+0x14/0x30
[  239.941162][ T7094]  __kasan_slab_alloc+0x89/0x90
[  239.946044][ T7094]  kmem_cache_alloc_lru_noprof+0x1d0/0x3b0
[  239.951883][ T7094]  jfs_alloc_inode+0x25/0x60
[  239.956514][ T7094]  alloc_inode+0x64/0x240
[  239.960860][ T7094]  iget_locked+0x2e4/0x830
[  239.965290][ T7094]  jfs_iget+0x1e/0x4c0
[  239.969374][ T7094]  jfs_lookup+0x2b2/0x380
[  239.973720][ T7094]  __lookup_slow+0x251/0x460
[  239.978329][ T7094]  walk_component+0x353/0x5b0
[  239.983033][ T7094]  path_lookupat+0x142/0x6d0
[  239.987648][ T7094]  filename_lookup+0x224/0x5f0
[  239.992437][ T7094]  user_path_at+0x3a/0x60
[  239.996788][ T7094]  __x64_sys_chdir+0xbe/0x270
[  240.001497][ T7094]  do_syscall_64+0xcd/0x4c0
[  240.006050][ T7094]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.012008][ T7094] 
[  240.014342][ T7094] The buggy address belongs to the object at ffff888056a5c088
[  240.014342][ T7094]  which belongs to the cache jfs_ip of size 2232
[  240.028080][ T7094] The buggy address is located 20 bytes to the right of
[  240.028080][ T7094]  allocated 2232-byte region [ffff888056a5c088, ffff888056a5c940)
[  240.042788][ T7094] 
[  240.045122][ T7094] The buggy address belongs to the physical page:
[  240.051541][ T7094] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x56a58
[  240.060325][ T7094] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  240.068871][ T7094] memcg:ffff88805c6df501
[  240.073119][ T7094] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  240.080682][ T7094] page_type: f5(slab)
[  240.084683][ T7094] raw: 00fff00000000040 ffff888147ad2a00 dead000000000122 0000000000000000
[  240.093298][ T7094] raw: 0000000000000000 00000000800d000d 00000000f5000000 ffff88805c6df501
[  240.101907][ T7094] head: 00fff00000000040 ffff888147ad2a00 dead000000000122 0000000000000000
[  240.110652][ T7094] head: 0000000000000000 00000000800d000d 00000000f5000000 ffff88805c6df501
[  240.119350][ T7094] head: 00fff00000000003 ffffea00015a9601 00000000ffffffff 00000000ffffffff
[  240.128053][ T7094] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  240.136757][ T7094] page dumped because: kasan: bad access detected
[  240.143190][ T7094] page_owner tracks the page as allocated
[  240.148944][ T7094] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd2050(__GFP_RECLAIMABLE|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6997, tgid 6995 (syz.1.193), ts 226280449636, free_ts 127910040103
[  240.171231][ T7094]  post_alloc_hook+0x1c0/0x230
[  240.176026][ T7094]  get_page_from_freelist+0x1321/0x3890
[  240.181601][ T7094]  __alloc_frozen_pages_noprof+0x261/0x23f0
[  240.187559][ T7094]  alloc_pages_mpol+0x1fb/0x550
[  240.192449][ T7094]  new_slab+0x23b/0x330
[  240.196635][ T7094]  ___slab_alloc+0xd9c/0x1940
[  240.201331][ T7094]  __slab_alloc.constprop.0+0x56/0xb0
[  240.206743][ T7094]  kmem_cache_alloc_lru_noprof+0xf4/0x3b0
[  240.212499][ T7094]  jfs_alloc_inode+0x25/0x60
[  240.217136][ T7094]  alloc_inode+0x64/0x240
[  240.221487][ T7094]  new_inode+0x22/0x1c0
[  240.225675][ T7094]  diReadSpecial+0x51/0x730
[  240.230219][ T7094]  jfs_mount+0xe4/0x8a0
[  240.234401][ T7094]  jfs_fill_super+0x823/0x1060
[  240.239207][ T7094]  get_tree_bdev_flags+0x38c/0x620
[  240.244349][ T7094]  vfs_get_tree+0x8e/0x340
[  240.249654][ T7094] page last free pid 6116 tgid 6116 stack trace:
[  240.256251][ T7094]  __free_frozen_pages+0x7fe/0x1180
[  240.261479][ T7094]  __put_partials+0x16d/0x1c0
[  240.266206][ T7094]  qlist_free_all+0x4d/0x120
[  240.270823][ T7094]  kasan_quarantine_reduce+0x195/0x1e0
[  240.276311][ T7094]  __kasan_slab_alloc+0x69/0x90
[  240.281192][ T7094]  kmem_cache_alloc_noprof+0x1cb/0x3b0
[  240.286768][ T7094]  getname_flags.part.0+0x4c/0x550
[  240.291925][ T7094]  getname_flags+0x93/0xf0
[  240.296365][ T7094]  vfs_fstatat+0xe1/0xf0
[  240.300647][ T7094]  __do_sys_newfstatat+0x97/0x120
[  240.305718][ T7094]  do_syscall_64+0xcd/0x4c0
[  240.310247][ T7094]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.316164][ T7094] 
[  240.318494][ T7094] Memory state around the buggy address:
[  240.324132][ T7094]  ffff888056a5c800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  240.332231][ T7094]  ffff888056a5c880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  240.340314][ T7094] >ffff888056a5c900: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  240.348394][ T7094]                                                  ^
[  240.355083][ T7094]  ffff888056a5c980: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00
[  240.363163][ T7094]  ffff888056a5ca00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  240.371270][ T7094] ==================================================================
[  240.484186][ T7094] Disabling lock debugging due to kernel taint
[  240.533943][ T7094] find_entry called with index = 0
[  240.578866][ T7074] BTRFS error (device loop5): open_ctree failed: -4
[  240.612201][ T7094] read_mapping_page failed!
[  240.630346][ T7094] ERROR: (device loop0): txAbort: 
[  240.630346][ T7094] 
[  240.650880][ T7107] read_mapping_page failed!
[  240.674453][ T7107] bread failed!
[  240.688635][ T7107] jfs_mkdir: dtInsert returned -EIO
[  240.698093][ T7107] ERROR: (device loop0): txAbort: 
[  240.698093][ T7107] 
[  240.711921][ T6840] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.744118][ T6840] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.761823][ T6840] bridge_slave_0: entered allmulticast mode
[  240.779545][ T6840] bridge_slave_0: entered promiscuous mode
[  240.802611][ T6840] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.822305][ T6840] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.833682][   T12] read_mapping_page failed!
[  240.845741][   T12] ERROR: (device loop0): txAbort: 
[  240.845741][   T12] 
[  240.848508][ T6840] bridge_slave_1: entered allmulticast mode
[  240.879997][ T6840] bridge_slave_1: entered promiscuous mode
[  240.884850][   T12] jfs_write_inode: jfs_commit_inode failed!
[  240.907379][ T5843] 
[  240.907379][ T5843]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  240.907379][ T5843] 
[  240.927438][ T5843] 
[  240.927438][ T5843]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  240.927438][ T5843] 
[  241.142285][ T7121] rdma_rxe: rxe_newlink: failed to add lo
[  241.665772][ T6840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  241.705118][ T6840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  241.795044][ T6840] team0: Port device team_slave_0 added
[  241.803891][ T6840] team0: Port device team_slave_1 added
[  241.875031][ T6840] batman_adv: batadv0: Adding interface: batadv_slave_0
[  241.882758][ T6840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.908720][    C1] vkms_vblank_simulate: vblank timer overrun
[  241.920596][ T6840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  241.935621][ T6840] batman_adv: batadv0: Adding interface: batadv_slave_1
[  241.943159][ T6840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.971062][ T6840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  242.054717][ T6716] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  242.066409][  T131] bridge_slave_1: left allmulticast mode
[  242.073471][  T131] bridge_slave_1: left promiscuous mode
[  242.080843][  T131] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.093074][  T131] bridge_slave_0: left allmulticast mode
[  242.099014][  T131] bridge_slave_0: left promiscuous mode
[  242.104808][  T131] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.116256][  T131] bridge_slave_1: left allmulticast mode
[  242.122229][  T131] bridge_slave_1: left promiscuous mode
[  242.127979][  T131] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.137187][  T131] bridge_slave_0: left allmulticast mode
[  242.144184][  T131] bridge_slave_0: left promiscuous mode
[  242.150324][  T131] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.289486][  T131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  242.302392][  T131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  242.313467][  T131] bond0 (unregistering): Released all slaves
[  242.385866][  T131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  242.398933][  T131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  242.411614][  T131] bond0 (unregistering): Released all slaves
[  242.430734][ T6716] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  242.454222][ T6840] hsr_slave_0: entered promiscuous mode
[  242.460944][ T6840] hsr_slave_1: entered promiscuous mode
[  242.467250][ T6840] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  242.492883][ T6840] Cannot create hsr debugfs directory
[  242.498755][ T6716] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  242.513830][ T6716] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  242.736795][  T131] hsr_slave_0: left promiscuous mode
[  242.746067][  T131] hsr_slave_1: left promiscuous mode
[  242.752686][  T131] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  242.760236][  T131] batman_adv: batadv0: Removing interface: batadv_slave_0
[  242.768106][  T131] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  242.775706][  T131] batman_adv: batadv0: Removing interface: batadv_slave_1
[  242.790360][  T131] hsr_slave_0: left promiscuous mode
[  242.796617][  T131] hsr_slave_1: left promiscuous mode
[  242.802829][  T131] batman_adv: batadv0: Removing interface: batadv_slave_0
[  242.812408][  T131] batman_adv: batadv0: Removing interface: batadv_slave_1
[  242.826386][  T131] veth1_macvtap: left promiscuous mode
[  242.832210][  T131] veth0_macvtap: left promiscuous mode
[  242.837853][  T131] veth1_vlan: left promiscuous mode
[  242.843859][  T131] veth0_vlan: left promiscuous mode
[  243.061044][  T131] team0 (unregistering): Port device team_slave_1 removed
[  243.098618][  T131] team0 (unregistering): Port device team_slave_0 removed
[  243.297148][  T131] team0 (unregistering): Port device team_slave_1 removed
[  243.327356][  T131] team0 (unregistering): Port device team_slave_0 removed
[  243.531781][ T6760] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  243.544321][ T6760] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  243.582638][ T6760] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  243.603686][ T6760] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  243.653641][ T6716] 8021q: adding VLAN 0 to HW filter on device bond0
[  243.704534][ T6716] 8021q: adding VLAN 0 to HW filter on device team0
[  243.734398][ T6008] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.741606][ T6008] bridge0: port 1(bridge_slave_0) entered forwarding state
[  243.768239][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.775471][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  243.821854][ T6760] 8021q: adding VLAN 0 to HW filter on device bond0
[  243.846590][ T6760] 8021q: adding VLAN 0 to HW filter on device team0
[  243.877817][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.885037][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state
[  243.920838][ T6009] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.928001][ T6009] bridge0: port 2(bridge_slave_1) entered forwarding state
[  243.964601][ T6840] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  243.975505][ T6840] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  243.990071][ T6840] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  244.010174][ T6840] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  244.199724][ T6840] 8021q: adding VLAN 0 to HW filter on device bond0
[  244.239046][ T6840] 8021q: adding VLAN 0 to HW filter on device team0
[  244.260703][  T131] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.268035][  T131] bridge0: port 1(bridge_slave_0) entered forwarding state
[  244.286300][ T6008] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.293496][ T6008] bridge0: port 2(bridge_slave_1) entered forwarding state
[  244.405950][ T6716] 8021q: adding VLAN 0 to HW filter on device batadv0
[  244.467581][ T6760] 8021q: adding VLAN 0 to HW filter on device batadv0
[  244.855380][ T6840] 8021q: adding VLAN 0 to HW filter on device batadv0
[  245.070550][ T6760] veth0_vlan: entered promiscuous mode
[  245.094158][ T6760] veth1_vlan: entered promiscuous mode
[  245.121936][ T6716] veth0_vlan: entered promiscuous mode
[  245.160744][ T6716] veth1_vlan: entered promiscuous mode
[  245.184677][ T6760] veth0_macvtap: entered promiscuous mode
[  245.214616][ T6760] veth1_macvtap: entered promiscuous mode
[  245.236996][ T6716] veth0_macvtap: entered promiscuous mode
[  245.260797][ T6760] batman_adv: batadv0: Interface activated: batadv_slave_0
[  245.282088][ T6716] veth1_macvtap: entered promiscuous mode
[  245.300802][ T6760] batman_adv: batadv0: Interface activated: batadv_slave_1
[  245.326235][ T6760] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  245.337586][ T6760] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  245.347906][ T6760] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  245.359096][ T6760] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  245.384557][ T6716] batman_adv: batadv0: Interface activated: batadv_slave_0
[  245.405862][ T6716] batman_adv: batadv0: Interface activated: batadv_slave_1
[  245.440740][ T6716] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  245.451982][ T6716] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  245.461445][ T6716] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  245.470397][ T6716] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  245.493295][ T6840] veth0_vlan: entered promiscuous mode
[  245.541880][ T6840] veth1_vlan: entered promiscuous mode
[  245.564687][ T6008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.588260][ T6008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.638143][  T131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.669646][  T131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.724036][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.749708][ T6840] veth0_macvtap: entered promiscuous mode
[  245.757191][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.811822][ T6840] veth1_macvtap: entered promiscuous mode
[  245.824460][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.851148][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.866769][ T6840] batman_adv: batadv0: Interface activated: batadv_slave_0
[  245.889531][ T6840] batman_adv: batadv0: Interface activated: batadv_slave_1
[  245.918854][ T6840] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  245.933432][ T6840] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  245.943310][ T6840] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  245.952373][ T6840] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  246.064393][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.099140][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  246.127765][  T131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.136854][  T131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50