last executing test programs:

24.10044931s ago: executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400))
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat$nullb(0xffffffffffffff9c, 0x0, 0x169802, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x0, 0x0, 0x0, r2}, &(0x7f0000000240), &(0x7f0000000040))
io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000})
mlockall(0x1)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x410}, [@IFLA_MASTER={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4042}, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

18.774649354s ago: executing program 3:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

17.70035346s ago: executing program 3:
socket$inet6(0xa, 0x3, 0x9)
socket(0x10, 0x803, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9, 0x10001, 0x9, 0x1}, 0x48)
socket$unix(0x1, 0x1, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00')
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10002})
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280))
socket(0x1d, 0x2, 0x6)
socket$inet_sctp(0x2, 0x1, 0x84)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000740))
socket$pppoe(0x18, 0x1, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYRES16=r0], 0x20}, 0x1, 0xc00000000000000}, 0x0)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd)

17.566722881s ago: executing program 3:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x62503, 0x0)
ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000006c0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x800000, &(0x7f0000006a80)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYBLOB="53d2d9de939847c9dd37ed564f2be0a4f9d29f7e23b3a032bbe730dc52348cbe87ceee766fd6025fe3e79ae4be665c25801faff43856dd4a90209ef9ad9a90beca5921e77f0b0248d2793d9a477240b4d3e13b1079fb066ea5b89316eaa679c336a781bafb6020144f23f787a4057fcb152a4a807a2fda22545953e4650264b5f42a2712642c0e"], 0x25, 0x558f, &(0x7f00000014c0)="$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")
getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000240)={0x6, 0x7, 'syz1\x00'}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))

16.229283418s ago: executing program 3:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

14.061362413s ago: executing program 3:
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)

13.787674546s ago: executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/166, 0xa6}], 0x1, 0x0, 0x0)
lseek(r0, 0x0, 0x1)

13.675228263s ago: executing program 0:
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x80d0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='dots,errors=continue,nodots,dmask=00000000000000000077777,nodots,dots,nodots,nodots,showexec,dots,sys_immutable,discard,dots,nodots,nodots,dots,nodots,dots,nfs,dots,dots,dots,dots,nodots,nodots,nodots,quiet,dots,nodots,gid=', @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000000O00000,erroRs=coe,uid<\x00\x00\x00\x00\x00', @ANYRESDEC, @ANYBLOB=',\x00'], 0xfd, 0x1bf, &(0x7f0000000640)="$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")

13.530423925s ago: executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='block_split\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='block_split\x00', r3}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r4, &(0x7f0000000180), 0x40001)

13.359458602s ago: executing program 0:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

11.94785103s ago: executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)

3.949645008s ago: executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f00001d9000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'gretap0\x00', 0x0})
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='scalable\x00', 0x9)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

3.699428687s ago: executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfffffc47}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/243, 0xe2}], 0x50, 0x0, 0x0)

3.327253075s ago: executing program 4:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="1b7192fe05679963e2f2447aff7ef120", 0x10}], 0x1}, 0x20000080)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="0503d6fcd3fc03000000478803", 0xd, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0)

3.262386905s ago: executing program 4:
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000003c0)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@nossd}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$eJzs3V9oVFceB/Az+aPxDyY+xV32wX1YWcUFWRF2UdggGF2Whdn1YVnYrFlZxT+7JUgDwb5YS2lBxGCgthSKD33pS0mlUFqqBAsthYogVloUW0teWiiESsGXlpK590xmzvVmxlQbq5+PJHfO/d1z7pnhPsx3zLkTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIIRwcM3Kv+xaPb2urD7dP3bq6LLt507vP3ljaGjLlRAqtf2VvL5n+66/79+95689scPw37JtX1/ZkFnXz7PGkqads/2af/4TQuhOBujMtzs6G/pW0hOEI8UB53XgZv/o5u7BaxN3zmy8eP3QhuJTZ1bPYk9gseTX1fTctTRQ+92RHFFvN1x6laZLNOufXnA/yZMAAO7JpmptU387mr/FrbePpfWkPZC0x5N2fIcw3thYiGzcJWXzXJvWF2meA1lUWFo6z6Sev/71djXtn7STqHEP82w+NI80PWXzHEnqizVPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIfJqx9euvTcy+u3ldWn+8dOHV22/dzp/SdvDA1tuRJCX21/JStXlv+q8w+fLtt57fiRN36zr+ftk515v7jtajg4fBIf/LE3hL0Nlek47JerQqg2F2rN8FKxcLD24M+xAAAAwKPkF7XfHfV2Fge7m9qVWpqs1P5FWVg8cLN/dHP34LWJO2c2Xrx+aMPCx6uWjDdw1/Hq7b65n0pDMI7xNx1vrh4PPVIYZ37piGme/2zmyVsXJn7777L+hfzfN3/+j6+c/A8AAMCPIf+n48yvVf6/+s7zT3UN7n2vrH8h/69tOmUh/8cZx/zfERaW/wEAAOBh9qDz/0BhnPm1yv/fnZ86f/nb46+U9S/k/03t5f+uxmnHnR/FCR/uDWFTq6kDAAAAJeL/u899tBDzevbJQZrXO2ZGe6d6blwtG6+Q/wfay//d9/2ZAQAAAAv1v7F/Hb8wNn6zrF7I/9X28v/SBz5zAAAAoF37Tvz/3PoNIyvL6oX8P9xe/l+eb/OVD1mn9+NfIUz0htAz+2AkK3wQxv9ULwAAAAD3SczpX41u/f7jwel3y44r5P+R+e//H+90ENf/N93/r7D+v6GQ3fVvqxsDAAAA8DgqruePt8fPvrmg7Pv3213/f+uXO3b9d+c/vig7fyH/H2sv/3c2bu/n9/8BAADAAvzcvv/vn4Vx5tfq/v/fDN36et3hZwfL+hfy/3h7+T9uVzQ+van4+jzTG8Ka2Qf53QRfi6c7nBQmuxsK2Quf9Ngde+SFyaUNhZqRpMfve0P49eyDY0lhdSyMJ4WZVXnhbFK4HAv59VAvvJ4UpuKV9sKqfLpp4a1YyBdYTMYVFCvqSyKSHrfLeswW7trjev3kAAAAj5UYnvMs293cDGmUnay0OmB5qwM6Wh3Q2eqAruSA9MCy/WG4uRD3v7jtd7evPPHm06FEIf+fbS//x5diSbYpW/8f4vr//HsN6+v/h2OhLylMxkI1vWNANZ4jC7sn4jn6qnmPmTX1AgAAADzS4ucCnYs8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5g7/6D7KrqA4Cf/f0jm91FHAFJNYqA6ZDNJjFKK1MC1UFxpi4OdZw60UR2g9ssJCZhICnthEA7U5hUVKa1o0NDHUdpkUY6jlK1pEyBcaRTm7ZMxWhl/EFtaxnGSodSm87be8/d+87dm/dCdiFLP58/9p33vufnfT/2nXvvOxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/h38ZWPMb+1f89Py6+PfPuOHDewcuve+jWw8c3bRpw5EQJmYf78jCHYMrui785sBlj+3f+flzp/rvP9Cbl8vjYVnjT2d+55ai1uUhfLEjhO40sHooC/Tk94difSuGQjgtzAWKElODWYm04fDQQAgHw1ygqOr+gRCGSoErjzz4wIFG4o6BEM4NIfSlbXy7L2tjIA2c15sFBtPA9u4s8F/HMkXgS51ZAE5afDMUL/pDE80ZRucvV/P661mwjr240uF1xcRofb4fX7LInSrpTR+YOKmnrVIdi6Ly9jjs3bYE3m2V7Xy7p638RSr/hnJsLtQXOientm65bmZ3fKQzjI111dW0SM/z40/feNWJpJfM6zB2YHRBXofP3vme68+afMuNt24/54m177vg6Ml2s27zLra+kL/mlszzGG30ebIE3n6Vb0krfekKIfzcB7tv6vrtI5+qi1fm/6PHn//Hl3O87WzKHWt9bjibm8dHhmLiqeFsbg4AAABLxlLYa/qjs1/xe6s61zxeV19l/r+yveP/8ZB/PpnPRns4hI2ziZtHQjhz9vEscHds7gMjIbxmNjXRHLgkCRwO4azZxKqiqqREfyyxMgk8OZwHNiaBh2NgIgl8OgZuTwK3xMChJHBVDBxOApfGQJhuHsfPD+fjaDswEAObs414KJ6F8JPh2Fqyrb5VVAUAALBA8tlhT/Pd0rkOJ5shTi8PDbTKEM/Ars3Ql9SQzmCLaVVtDd2tauhsVUMx7n3HH36l5o5WNVdOw+hoznDpK/7w/BVfu+ELoUZl/j9+/Pl/3zwd6agc/w/hitm/MXdnHpkp4psnmjIAAAAAJ2HtG2a+9idnv+nNdfHK/H9je+f/x30iXaXM4dG4G2LbSAjjzYGs2jdXA9lR72V5AAAAAJaC4nh8cSx8Or/NTtFO59PV/BMnmD8e+N84b/5fCpOnb/vBUxvq+luZ/0+0d/7/YPNt1omHYy8+NhJCfynwSOxlIzBrZQx89+LmQD7+h+MGuC1WlZ+YUFR1WyyxOQbGk8DBuhLfKEqc2RzIn6yi8ZuLcUznJUoBAAAAeMHF3QHxuHw8///Ctd/70KaP7/1cXbnK/H/ziZ3/PzsPrpzeP7MshDXdIXSlPwx4dDBbGDAGhjryxFcHs7q60qpuGgzhosbA0qqeyNf/707XGDwykFUVA2e+9rNPn9dIfGoghDXlwGPvvWt2x8juJFA0/qsDIby6Mdq08S/0Z433pI3/QX8IryoFiqo+0B9Co7HetKoH+/LrGKRV/VlfCKeXAkVVb+wLYU8AYImK/0onyw/u2rN325aZmamdi5iI+/AHwtbpmamxq7bPTPbV9Gky6XPTMkY3VcfU2ebYj+ZLFN1z+dhIO+nid4Lj5b7k+/ErJw7m9+N3oZ7Zca7rabq7Ph3y68+pNpEO6cUY8mC5krknsVJ/zN8bloX+63ZN7Ry7Ycvu3TvXZn/bzb4u+xsPM2Xbam26rQbn61sbL492F0N/vtuq6TJXa3Zfs2PNrj17V09fs+Xqqaunrn3D+LrxdevHN7zpwjWNUY1nf1sM9fz5qk6Geuyu6hDavQbU8x3qK7tLlbwQnxoSEhJLLbHl4q/+5b1nfWJZ3cdPZf6/4/jz//ipEz/58/UZ6o7/j8bD/Nnjc4f5N8fAwXaP/4/WHc0vTgxYmQT2xcA+h/kBAAB4aYi7G+PezLhXuuem1WN//MlHnqwrV5n/72vv9/8LtP5/sXT95XXL/K+KJcbr1v9Pl/kv1v/fV7f+f7rMf7H+/8EXYf3/64pAskl+Yv1/AADgpeCFW/+/5fL+6QUCKhlaLu+fXiCgkqHlMv7tXiDghNf/f/tzr+u55iOvviXUqMz/b29v/m/hfgAAADh13HVkQ8eD//o/D9XFK/P/g+3N/1/49f9C3fn/K+sCE3ULA1r/DwAAgCWqbv2/9a/78ebP/WzFD+vKVeb/h9qb/8fTLjqbcsdanxvO1rQL6Zp2Tw0XPxkAAACApaEzjI21u6Jp08qolzz/Nh/PlwI9Xrrsr758zT8+8tb39tfVV5n/H25v/t/0u4xn73zP9WdNvuXG527dfs4Ta993wdG54/8AAADA4ml3vwQAAAAAAAAAAAAAAPDie3rv5Lv++ew7P1MXr/z+P1wx+3jd7//jdf/i7wte3pQ71tp6/b/8/pXvuHfP7JKFjw6HcE45sG3/ttNCfm3+88uBBzatOqOR2J+W+Mp3Lv1BI/H+NPC21S97ppG4KAlsjosknpUG4lUVn1meBOLyin+fBuL2OJQGevPA7y7PxtGRbqsfDWXbqiPdVo8PhTBSChTb6otDWRsd6QDvSALFAD+UBuIAfyUPdKa9undZ1qsYGIpF/2hZ1isAAE5Z8VtgT9g6PTM1Hr/Cx9tXdjffRk1Llt1UrbajzeaP5kuT3XP52Eg76a70u+jctcZ7Ql9jCGsrX1fLWTpmR7kwtbTYdC+vGXKr1d7a/XX2iW663voRDWQjGrtq+8xkT8uBr2+dZV13yyxrK5OdcpbO2U3aRi1t9KWNEbW5bdrocrzfGcbGupJcvxiDo6HJQr0iyuv81b0Kynn2Tb7xb75x7Nihuvoq8//R9ub/feVxPZNfDGBfvLLezSMhnNnmiAAAAIB2fevL/7Ru+yd+55709ort1956weCPLq4rV5n/r2xv/h93jOWHgrO9HYfj9f+L+f9oFrg7NveBkRBeM5uaiCWyC+pfHkuMZ4G74w6TVbHE5onmqvpj4FASeHI4DxxOAg/HQL6X4rMh35XzkeEQNsymrmgusSOWGE0C74yBlUlgLAbGk8DyGNiYBP59eR6YSAJfj4Ew3byt/ny5vSsAAMDzkM+zeprvhnSed6i7VYaOVhkGW2XobJWhr1WGulHE+/fFDD3JySsdpUw9aa0DSS2VDPFi+Cfcr0qG8I3mnGnBStPx/IPifIOO5gz/dtnrv33erlXtX/9/vL35/2Dzbdb6w3H+P3f9vyzwSOzex+Kp4ytj4LsXNwfyHQMPx8nubUVVE3mJfNJ+WyyxMQZWJoEdMbAxCWy+Ig8cPKM5kM+0i8ZvLhqfzkuUAgAAAPCCizsI4m6aOP//0/+++3MH/uHav64rV5n/b2xv/h/bW1Zu7Jai1uUhfLFjrjdFYPVQFoj7MYbiz+NXDIVwWmkHR1FiajAr0Zs0HB4ayH6h3ptWdf9AtsZAvH/lkQcfONBI3DEQwrmlvS9FG9/uy9oYSAPn9WaBwTSwvTsLxD0/ReBLnVkATlqxVzC+oPJTXQqj85eref29VK4Jmg6vsg90nnzz/eZqsfSlD+T7VAsn9rRVqmNRVN4eh73bluK7bdS7rfxFKv+Gcmwu1Bc6J6e2brluZnd8pPxL1opFep7Lv1JtJ70Ar8N9z7+3rfWlHRhPPj7G5y83/+uwI1b37J3vuf6sybfceOv2c55Y+74LjrbdjRrxh8Lv/uTLRsubd7H1hfw1t+Q+TyZ8nizFfwMrPW2NGexTv//V//jp4z+ri1fm/xPtzf+7k9tZz8aNuWskhNeXNu6jcfP/8kj2OVgKZJ+Sp1cD2SH37w3XfnICAADAQit2dxT7C6bz2+yE8HSeXM0/cYL54/6KjfPmb7ffW29+aP8P/+6Or9TFK/P/zcef//cn3XT83/F/Fonj//M61XdF96cP7DupXdGV6lgUjv/P61R/tzn+Py/H/x3/n4/j/y04/j+vU/1pq3xL2uFLVwjh6++/8+33bP+18+rilfn/jvbm/9b/m3/RvmL9v8116//tqFv/b5/1/wAAgEVVs9BcOs+rrN5XyZCu3lfJ0HKBwJZLDFr/74TX/3vrO//3+mOvuGRnqFGZ/+9rb/4fXw7Lyq0vlfX/Vl5RU9XtMbDDwoAAAACciup2EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDievcvPLl8029eOF0X//4ZN3x478Cl931064GjmzZtOBJClrUjC3cMrui68JsDlz22f+fnz53qv/9AX16uJ789uyl3rPW54RAOlh4Ziomnhht35gJXvuPePd2NxKPDIZxTDmzbv+20RuLTwyGcXw48sGnVGY3E/rTEV75z6Q8aifengbetftkzjcRFeaAj7e4nl2fd7Ui7e2B5CCOlQNHdX1/eXFXRxmV5oDNt4zNDWRsxMBSLfnwoayMGZmKJ6f4Q1nSH0JVW9bW+rKqutKq/6Muq6kqr+q2+EC4KIXSnVX2nN6uqOx353/ZmVcXAma/97NPnNRIHe0NYUw489t67NjQSH0oCRePv6g3h1Y2XTNr4fT1Z4z1p43f0hPCqEEJvWuI/u7MSvWmJJ7pDOL0UKBr/YHcIewIvCfHDZ7L84K49e7dtmZmZ2rmIid68rYGwdXpmauyq7TOTfUmf6nSU0sduOn78eI4+feNVjdt7Lh8baSfdnZfrme3yup6mu+sXqvftOtHex34NliuZez4q9cf8vWFZ6L9u19TOsRu27N69c232t93s67K/XXk021ZrF2pbdbYoHz3fbXV+uZI1u6/ZsWbXnr2rp6/ZcvXU1VPXvmF83fi69eMb3nThmsaoxrO/CzHUu44fX4yhvrK7VMkL8QEgISGx1BKdTZ9u46f6P73KF/25jvaEvtkP6Mq0opylY3aUCzHoS6rxrkUadGVKUhnR2srEoZJlXess6yuTibksA1mW2e91lclhuabO2U0a73eGsbHazTLafLe8eX88z+Zt1+P5pms3DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/B87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAsAAAAACPO3DqNnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBSAAAA//+3Rsqd")
fcntl$setsig(0xffffffffffffffff, 0xa, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000c40)={0x2, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @struct, 0x0, 0x0, [0x4]}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})

3.237538109s ago: executing program 2:
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x728, 0x0, 0x0, 0x448, 0x358, 0x1b0, 0x658, 0x658, 0x658, 0x658, 0x658, 0x6, 0x0, {[{{@uncond, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2, @empty}}, @common=@inet=@multiport={{0x50}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}, {{@ipv6={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], '\x00', 'vlan0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x1e8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}, @common=@hbh={{0x48}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x788)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0x2ac, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x234, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x54, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x1}}}, @TCA_POLICE_RESULT={0x8}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x1cc, 0x6, [@m_ctinfo={0xb0, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x81, 0x6, "55eb88be72ea2bba577976ef9b5ab407e07afa05e4594285326849c2ec806d7b79f86d10adeb18245c150ce2b9eaeb2380aa7104a6df31aefd38f6b7bb0a45721ccbc5daab03190ea553ce464d09642e4ff5eeaf1f2e6171c16bc9ed3d7f4e1d714b45e839ac2719fe34dbba607211f211a9b5b79c050373b7bea3b552"}, {0xc}, {0xc}}}, @m_nat={0x54, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x29, 0x6, "ef93daeef78df7f9a037a0d7a2f92a1cc341deabba437fc636cbf66a843bc4e0304e79be1f"}, {0xc}, {0xc}}}, @m_connmark={0xc4, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x59, 0x6, "66396e732cf67237ecb590a592c571fa73ca19ec26dea927df7162b385d80fe15ca7f5cb6a4d958bd18714cd4f89f48d039d7da0dc8795f6ad32634b6b66cf821e93079c15dda212b0b37b761850342ebe270d64e9"}, {0xc}, {0xc}}}]}]}}]}, 0x2ac}}, 0x0)
r2 = socket(0x0, 0x803, 0x0)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0), 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000010000108d3a8", @ANYRES32, @ANYBLOB], 0x58}}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)

3.120562327s ago: executing program 1:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000f0a9c8085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='block_bio_remap\x00', r0}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xe, 0x4, 0x8, 0x9}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200))
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102386, 0xffffffa8}], 0x1, 0x800, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c)
write$P9_RGETLOCK(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB='!\x00\x00\x007\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="030025a765b37f48b69946a429ea53"], 0xe6da)
r4 = gettid()
process_vm_writev(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000730000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000000)='jbd2_handle_stats\x00', r6}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={0x0, r5}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)

2.734521316s ago: executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = userfaultfd(0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$UFFDIO_CONTINUE(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1})
syz_open_dev$usbmon(0x0, 0x0, 0x0)
syz_open_dev$usbfs(0x0, 0x20000007d, 0x0)
ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x40189206, &(0x7f0000000180))
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpu.stat\x00', 0x275a, 0x0)
ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000000))
r3 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000040)={'bond0\x00'})
r4 = syz_open_procfs(0x0, &(0x7f0000000880)='mountinfo\x00')
r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendfile(r5, r4, 0x0, 0x3)

2.466624718s ago: executing program 2:
socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='devices.list\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040))
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0)

2.00327084s ago: executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x568}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x0)

1.947603048s ago: executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x3)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20008})

789.806957ms ago: executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x24, 0x1, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044013}, 0x80c0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'})

769.31931ms ago: executing program 0:
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x0, 0x0, 0x0, 0x9bae3b140fa8913e}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, 0x0, 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x6}]}, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r4)
r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)

750.598214ms ago: executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x41}, [@ldst]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r1, 0xffffffffffffffff, 0x0, 0x0, @void}, 0x10)
preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r3)
r4 = inotify_init1(0x0)
fcntl$setown(r4, 0x8, 0xffffffffffffffff)
fcntl$getownex(r4, 0x10, &(0x7f0000000040)={0x0, <r5=>0x0})
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0xfffffffffffffff8, &(0x7f0000000380)=""/166)
ptrace$setopts(0x4206, r5, 0x0, 0x0)
r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$VIDIOC_CROPCAP(r6, 0xc02c563a, &(0x7f0000000380))
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r7, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r7)
dup(r2)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
connect$can_bcm(r8, &(0x7f0000000300), 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58)

608.000876ms ago: executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f00001d9000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'gretap0\x00', 0x0})
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='scalable\x00', 0x9)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

547.564365ms ago: executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100005131e70863072110621c000000010902120001000000000904000000ff"], 0x0)

494.593193ms ago: executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180), 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000200), 0x12)

198.878629ms ago: executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000480)={0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r1}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x8, 0xfffffffffffffd55, 0x0}}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0xc7, &(0x7f0000000140)=""/199, 0x0, 0x0, '\x00', r3}, 0x90)

163.701424ms ago: executing program 4:
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x728, 0x0, 0x0, 0x448, 0x358, 0x1b0, 0x658, 0x658, 0x658, 0x658, 0x658, 0x6, 0x0, {[{{@uncond, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2, @empty}}, @common=@inet=@multiport={{0x50}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}, {{@ipv6={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], '\x00', 'vlan0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x1e8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}, @common=@hbh={{0x48}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x788)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0x2ac, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x234, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x54, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x1}}}, @TCA_POLICE_RESULT={0x8}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x1cc, 0x6, [@m_ctinfo={0xb0, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x81, 0x6, "55eb88be72ea2bba577976ef9b5ab407e07afa05e4594285326849c2ec806d7b79f86d10adeb18245c150ce2b9eaeb2380aa7104a6df31aefd38f6b7bb0a45721ccbc5daab03190ea553ce464d09642e4ff5eeaf1f2e6171c16bc9ed3d7f4e1d714b45e839ac2719fe34dbba607211f211a9b5b79c050373b7bea3b552"}, {0xc}, {0xc}}}, @m_nat={0x54, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x29, 0x6, "ef93daeef78df7f9a037a0d7a2f92a1cc341deabba437fc636cbf66a843bc4e0304e79be1f"}, {0xc}, {0xc}}}, @m_connmark={0xc4, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x59, 0x6, "66396e732cf67237ecb590a592c571fa73ca19ec26dea927df7162b385d80fe15ca7f5cb6a4d958bd18714cd4f89f48d039d7da0dc8795f6ad32634b6b66cf821e93079c15dda212b0b37b761850342ebe270d64e9"}, {0xc}, {0xc}}}]}]}}]}, 0x2ac}}, 0x0)
r2 = socket(0x0, 0x803, 0x0)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0), 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000010000108d3a8", @ANYRES32, @ANYBLOB], 0x58}}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)

0s ago: executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = userfaultfd(0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$UFFDIO_CONTINUE(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1})
syz_open_dev$usbmon(0x0, 0x0, 0x0)
syz_open_dev$usbfs(0x0, 0x20000007d, 0x0)
ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x40189206, &(0x7f0000000180))
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpu.stat\x00', 0x275a, 0x0)
ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000000))
r3 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000040)={'bond0\x00'})
r4 = syz_open_procfs(0x0, &(0x7f0000000880)='mountinfo\x00')
r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendfile(r5, r4, 0x0, 0x3)

kernel console output (not intermixed with test programs):

mes ready
[   50.970753][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   50.980100][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   50.982886][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   50.987578][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   50.990370][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   51.002084][ T4006] device veth0_vlan entered promiscuous mode
[   51.017563][ T4006] device veth1_vlan entered promiscuous mode
[   51.029906][ T4004] device veth1_macvtap entered promiscuous mode
[   51.039288][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   51.041917][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   51.046266][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   51.048878][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   51.051498][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   51.072316][ T4004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   51.076442][ T4004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.080213][ T4004] batman_adv: batadv0: Interface activated: batadv_slave_0
[   51.090147][ T4009] device veth0_vlan entered promiscuous mode
[   51.102798][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   51.106768][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   51.109490][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   51.112207][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   51.116577][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   51.120182][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   51.123664][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   51.126090][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   51.128642][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   51.131161][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   51.146143][ T4004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   51.148898][ T4004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.152424][ T4004] batman_adv: batadv0: Interface activated: batadv_slave_1
[   51.164662][ T3994] device veth0_vlan entered promiscuous mode
[   51.172406][ T3994] device veth1_vlan entered promiscuous mode
[   51.191724][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   51.195622][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   51.198526][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   51.203581][ T4009] device veth1_vlan entered promiscuous mode
[   51.206643][ T4004] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.208971][ T4004] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.211131][ T4004] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.215821][ T4004] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.231650][ T4006] device veth0_macvtap entered promiscuous mode
[   51.242125][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   51.246315][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   51.249866][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   51.252544][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   51.284516][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   51.287312][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   51.290138][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   51.292851][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   51.297622][ T4006] device veth1_macvtap entered promiscuous mode
[   51.305300][ T1662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.307724][ T1662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.341968][ T3994] device veth0_macvtap entered promiscuous mode
[   51.349958][ T3994] device veth1_macvtap entered promiscuous mode
[   51.352927][ T4009] device veth0_macvtap entered promiscuous mode
[   51.356174][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   51.358769][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   51.361409][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   51.364903][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   51.367361][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   51.369955][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   51.374045][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   51.378193][ T4006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   51.380777][ T4006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.387277][ T4006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   51.390004][ T4006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.394635][ T4006] batman_adv: batadv0: Interface activated: batadv_slave_0
[   51.424364][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   51.427199][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   51.432362][ T4009] device veth1_macvtap entered promiscuous mode
[   51.435539][ T1662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.437749][ T1662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.442096][ T3994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   51.449556][ T3994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.452208][ T3994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   51.455678][ T3994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.458185][ T3994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   51.460913][ T3994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.465847][ T3994] batman_adv: batadv0: Interface activated: batadv_slave_0
[   51.473525][ T4006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   51.476980][ T4006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.479625][ T4006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   51.482399][ T4006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.488978][ T4006] batman_adv: batadv0: Interface activated: batadv_slave_1
[   51.500087][ T4009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   51.502907][ T4009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.508435][ T4009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   51.511220][ T4009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.514303][ T4009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   51.517058][ T4009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.519517][ T4009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   51.522147][ T4009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.527500][ T4009] batman_adv: batadv0: Interface activated: batadv_slave_0
[   51.529620][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   51.532198][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   51.535814][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   51.538494][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   51.541168][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   51.545261][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   51.547945][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   51.550540][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   51.565483][ T3994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   51.568246][ T3994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.570703][ T3994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   51.576456][ T3994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.579232][ T3994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   51.581909][ T3994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.586545][ T3994] batman_adv: batadv0: Interface activated: batadv_slave_1
[   51.608760][ T1676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.611006][ T1676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.611637][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   51.616515][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   51.619384][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   51.622870][ T4006] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.653793][ T4006] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.656286][ T4006] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.658395][ T4006] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.672523][ T4009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   51.676967][ T4009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.679634][ T4009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   51.682392][ T4009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.691183][ T4009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   51.703719][ T4009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.706655][ T4009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   51.709467][ T4009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   51.717499][ T4009] batman_adv: batadv0: Interface activated: batadv_slave_1
[   51.726582][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   51.729451][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   51.733164][ T3994] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.737497][ T3994] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.739753][ T3994] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.742000][ T3994] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.775310][ T4009] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.777622][ T4009] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.779911][ T4009] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.782180][ T4009] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.806243][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.808459][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.829797][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   51.980297][ T1676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.982534][ T1676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.985230][ T1662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.988257][ T1662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.992516][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   52.018459][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   52.075815][ T1676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.077890][ T1676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.082366][ T1662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.088793][ T1662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.096869][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   52.099607][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   52.122151][ T1676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.135516][ T1676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.160045][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   52.182271][ T1867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.200691][ T1867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.227080][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   52.238283][ T4082] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[   52.592201][ T4097] bridge0: port 3(gretap0) entered blocking state
[   52.602559][ T4097] bridge0: port 3(gretap0) entered disabled state
[   52.614504][ T4097] device gretap0 entered promiscuous mode
[   52.618206][ T4097] bridge0: port 3(gretap0) entered blocking state
[   52.620181][ T4097] bridge0: port 3(gretap0) entered forwarding state
[   52.661675][ T4103] device gretap0 left promiscuous mode
[   52.668769][ T4103] bridge0: port 3(gretap0) entered disabled state
[   52.773913][   T13] Bluetooth: hci0: command 0x040f tx timeout
[   52.775666][   T13] Bluetooth: hci1: command 0x040f tx timeout
[   52.788467][ T4101] udc-core: couldn't find an available UDC or it's busy
[   52.797422][ T4101] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   52.809759][ T4101] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[   52.875919][ T4101] batman_adv: batadv0: Adding interface: team0
[   52.877535][ T4101] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.909927][ T4101] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   52.924245][   T13] Bluetooth: hci3: command 0x040f tx timeout
[   52.925921][   T13] Bluetooth: hci4: command 0x040f tx timeout
[   52.938418][ T4112] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[   52.942236][ T4112] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'.
[   52.978096][ T4112] device team0 entered promiscuous mode
[   52.979768][ T4112] device team_slave_0 entered promiscuous mode
[   53.000016][ T4112] device team_slave_1 entered promiscuous mode
[   53.018869][ T4112] 8021q: adding VLAN 0 to HW filter on device team0
[   53.020940][ T4112] batman_adv: batadv0: Interface activated: team0
[   53.022808][ T4112] batman_adv: batadv0: Interface deactivated: team0
[   53.025002][ T4112] batman_adv: batadv0: Removing interface: team0
[   53.032416][ T4112] bridge0: port 3(team0) entered blocking state
[   53.034350][ T4112] bridge0: port 3(team0) entered disabled state
[   53.037466][ T4112] bridge0: port 3(team0) entered blocking state
[   53.039265][ T4112] bridge0: port 3(team0) entered forwarding state
[   53.074198][ T4040] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   54.065856][ T1676] Bluetooth: hci5: Frame reassembly failed (-84)
[   54.086008][ T4116] Zero length message leads to an empty skb
[   54.293619][ T4040] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[   54.296169][ T4040] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   54.322720][ T4040] usb 1-1: config 0 descriptor??
[   54.853732][   T13] Bluetooth: hci1: command 0x0419 tx timeout
[   55.003892][   T13] Bluetooth: hci4: command 0x0419 tx timeout
[   55.005650][   T13] Bluetooth: hci3: command 0x0419 tx timeout
[   55.130800][ T4139] netlink: 276 bytes leftover after parsing attributes in process `syz-executor.1'.
[   55.228139][ T4144] netlink: 'syz-executor.2': attribute type 21 has an invalid length.
[   55.230412][ T4144] netlink: 'syz-executor.2': attribute type 20 has an invalid length.
[   55.232607][ T4144] IPv6: NLM_F_CREATE should be specified when creating new route
[   55.235233][ T4144] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   55.237294][ T4144] IPv6: NLM_F_CREATE should be set when creating new route
[   55.239147][ T4144] IPv6: NLM_F_CREATE should be set when creating new route
[   55.240992][ T4144] IPv6: NLM_F_CREATE should be set when creating new route
[   55.329447][ T4152] loop2: detected capacity change from 0 to 128
[   55.855410][ T4182] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[   55.952590][ T4184] loop2: detected capacity change from 0 to 2048
[   56.006728][ T4184]  loop2: p1 < > p4
[   56.012287][ T4184] loop2: p4 size 8388608 extends beyond EOD, truncated
[   56.124731][ T1711] Bluetooth: hci5: command 0x1003 tx timeout
[   56.126511][ T3997] Bluetooth: hci5: sending frame failed (-49)
[   56.190111][ T4040] pegasus 1-1:0.0: setup Pegasus II specific registers
[   56.255982][ T3985] udevd[3985]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   56.290062][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   56.485819][ T4040] pegasus 1-1:0.0: can't locate MII phy, using default
[   56.501206][ T4200] bridge0: port 3(vlan2) entered blocking state
[   56.517181][ T4200] bridge0: port 3(vlan2) entered disabled state
[   56.519799][ T4200] device vlan2 entered promiscuous mode
[   56.521444][ T4200] bridge0: adding interface vlan2 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   56.542757][ T4040] pegasus 1-1:0.0: eth0, ELECOM USB Ethernet LD-USB20, da:f6:c1:2b:52:40
[   56.560786][ T4040] usb 1-1: USB disconnect, device number 2
[   56.684914][ T4038] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[   56.687326][ T4038] Bluetooth: hci2: Injecting HCI hardware error event
[   56.690066][ T3997] Bluetooth: hci2: hardware error 0x00
[   57.143759][ T4038] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   57.148776][ T4250] loop2: detected capacity change from 0 to 256
[   57.204228][ T4250] =======================================================
[   57.204228][ T4250] WARNING: The mand mount option has been deprecated and
[   57.204228][ T4250]          and is ignored by this kernel. Remove the mand
[   57.204228][ T4250]          option from the mount to silence this warning.
[   57.204228][ T4250] =======================================================
[   57.544806][ T4038] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[   57.547348][ T4038] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.550055][ T4277] loop2: detected capacity change from 0 to 64
[   57.554270][ T4038] usb 1-1: config 0 descriptor??
[   57.780917][ T4292] udc-core: couldn't find an available UDC or it's busy
[   57.788989][ T4292] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   57.939005][ T4298] loop3: detected capacity change from 0 to 4096
[   58.002609][ T4298] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[   58.057749][ T4298] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[   58.061942][ T4298] ntfs3: loop3: Failed to load $Extend.
[   58.211012][ T1711] Bluetooth: hci5: command 0x1001 tx timeout
[   58.212732][  T144] Bluetooth: hci5: sending frame failed (-49)
[   58.631815][ T4324] loop1: detected capacity change from 0 to 32768
[   58.738205][ T4324] XFS (loop1): Mounting V5 Filesystem
[   58.803463][ T4324] XFS (loop1): Ending clean mount
[   58.862842][ T4006] XFS (loop1): Unmounting Filesystem
[   59.177290][ T4340] device vlan0 entered promiscuous mode
[   59.320818][ T4348] loop2: detected capacity change from 0 to 2048
[   59.359827][ T4348] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   59.359961][ T4352] loop3: detected capacity change from 0 to 512
[   59.380036][ T4348] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   59.396688][ T4038] pegasus 1-1:0.0: setup Pegasus II specific registers
[   59.408839][ T4352] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[   59.411079][ T4352] System zones: 1-12
[   59.439463][ T4352] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor.3: invalid indirect mapped block 1819239214 (level 1)
[   59.458044][ T4352] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor.3: bg 0: block 361: padding at end of block bitmap is not set
[   59.472234][ T4352] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6186: Corrupt filesystem
[   59.482876][ T4352] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz-executor.3: attempt to clear invalid blocks 33619980 len 1
[   59.487990][ T4352] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor.3: invalid indirect mapped block 1819239214 (level 0)
[   59.493907][ T4352] EXT4-fs (loop3): 1 truncate cleaned up
[   59.495422][ T4352] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=continue,nojournal_checksum,grpid,data_err=ignore,data=writeback,,errors=continue. Quota mode: none.
[   59.714568][ T4368] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[   59.723408][ T4038] pegasus 1-1:0.0: can't locate MII phy, using default
[   59.876037][ T4038] pegasus 1-1:0.0: eth0, ELECOM USB Ethernet LD-USB20, a6:2f:84:9c:fb:73
[   59.884955][ T4038] usb 1-1: USB disconnect, device number 3
[   60.096018][ T4386] loop0: detected capacity change from 0 to 1024
[   60.144961][ T4384] loop1: detected capacity change from 0 to 4096
[   60.285492][ T4040] Bluetooth: hci5: command 0x1009 tx timeout
[   60.484387][ T4396] loop1: detected capacity change from 0 to 256
[   60.587916][ T4396] FAT-fs (loop1): Directory bread(block 64) failed
[   60.589885][ T4396] FAT-fs (loop1): Directory bread(block 65) failed
[   60.591694][ T4396] FAT-fs (loop1): Directory bread(block 66) failed
[   60.599183][ T4396] FAT-fs (loop1): Directory bread(block 67) failed
[   60.600876][ T4396] FAT-fs (loop1): Directory bread(block 68) failed
[   60.602880][ T4396] FAT-fs (loop1): Directory bread(block 69) failed
[   60.624843][ T4396] FAT-fs (loop1): Directory bread(block 70) failed
[   60.626525][ T4396] FAT-fs (loop1): Directory bread(block 71) failed
[   60.628308][ T4396] FAT-fs (loop1): Directory bread(block 72) failed
[   60.629997][ T4396] FAT-fs (loop1): Directory bread(block 73) failed
[   60.653923][ T4382] loop3: detected capacity change from 0 to 32768
[   60.748070][ T4382] XFS (loop3): Mounting V5 Filesystem
[   60.806551][ T4409] loop1: detected capacity change from 0 to 64
[   60.813385][ T4040] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   60.926646][ T4382] XFS (loop3): Ending clean mount
[   60.931395][ T4382] XFS (loop3): Quotacheck needed: Please wait.
[   60.992847][ T4420] loop1: detected capacity change from 0 to 1024
[   61.001677][ T4382] XFS (loop3): Quotacheck: Done.
[   61.016699][ T4422] loop2: detected capacity change from 0 to 256
[   61.030535][ T3998] XFS (loop3): Unmounting Filesystem
[   61.038425][ T4420] EXT4-fs (loop1): Ignoring removed orlov option
[   61.090247][ T4420] EXT4-fs (loop1): Test dummy encryption mode enabled
[   61.092104][ T4420] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   61.095939][ T4420] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869)
[   61.098846][ T4420] EXT4-fs (loop1): invalid journal inode
[   61.117486][ T4420] EXT4-fs (loop1): can't get journal size
[   61.124580][ T4420] EXT4-fs (loop1): mounted filesystem without journal. Opts: data=writeback,norecovery,orlov,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[   61.173700][ T4040] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[   61.176440][ T4040] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.191595][ T4040] usb 1-1: config 0 descriptor??
[   63.803521][ T4040] pegasus 1-1:0.0: setup Pegasus II specific registers
[   63.880865][ T4485] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'.
[   64.088372][ T4493] loop1: detected capacity change from 0 to 512
[   64.093173][ T4495] loop3: detected capacity change from 0 to 512
[   64.103529][ T4040] pegasus 1-1:0.0: can't locate MII phy, using default
[   64.132630][ T4040] pegasus 1-1:0.0: eth0, ELECOM USB Ethernet LD-USB20, 22:79:fe:a5:b8:a7
[   64.136212][ T4040] usb 1-1: USB disconnect, device number 4
[   64.162620][ T4495] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz-executor.3: inline data xattr refers to an external xattr inode
[   64.163153][ T4493] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   64.170011][ T4495] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz-executor.3: couldn't read orphan inode 12 (err -117)
[   64.178272][ T4495] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   64.203080][ T4493] IPv6: Can't replace route, no match found
[   64.321576][ T4507] udc-core: couldn't find an available UDC or it's busy
[   64.340905][ T4507] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   64.391217][ T4514] loop3: detected capacity change from 0 to 512
[   64.454788][ T4514] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   64.574437][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   64.652065][ T4514] EXT4-fs (loop3): 1 orphan inode deleted
[   64.653852][ T4514] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   64.688526][ T4514] udc-core: couldn't find an available UDC or it's busy
[   64.694277][ T4514] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   64.711262][ T4514] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #13: comm syz-executor.3: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 257, max 0(0), depth 0(0)
[   65.013137][ T4533] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[   65.020077][ T4533] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[   65.188470][ T4538] loop2: detected capacity change from 0 to 1024
[   65.318870][ T4538] hfsplus: unable to parse mount options
[   65.558642][ T4555] loop1: detected capacity change from 0 to 1024
[   65.613297][   T13] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   65.617303][ T4560] udc-core: couldn't find an available UDC or it's busy
[   65.619147][ T4560] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   66.123554][   T13] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[   66.126186][   T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.142396][   T13] usb 1-1: config 0 descriptor??
[   66.708089][ T4586] loop3: detected capacity change from 0 to 512
[   66.784875][  T153] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.822303][ T4586] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[   66.854260][  T153] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.860668][ T4586] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[   66.863066][ T4586] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,usrquota,prjquota,debug_want_extra_isize=0x0000000000000006,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9f,nodiscard,,errors=continue. Quota mode: writeback.
[   67.096939][  T153] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.144408][ T4592] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters
[   67.188196][  T153] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.201154][ T4587] chnl_net:caif_netlink_parms(): no params data found
[   67.292118][ T4587] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.294708][ T4587] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.300549][ T4587] device bridge_slave_0 entered promiscuous mode
[   67.310946][ T4587] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.313336][ T4587] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.316198][ T4587] device bridge_slave_1 entered promiscuous mode
[   67.365699][ T4587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.370634][ T4587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.397617][ T4601] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[   67.440836][ T4587] team0: Port device team_slave_0 added
[   67.445474][ T4587] team0: Port device team_slave_1 added
[   67.471995][ T4587] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.497698][ T4587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.519067][ T4587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.532450][ T4604] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[   67.544524][ T4587] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.546413][ T4587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.563565][ T4587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.794912][ T4587] device hsr_slave_0 entered promiscuous mode
[   68.810729][ T4618] loop3: detected capacity change from 0 to 256
[   68.813819][   T13] pegasus 1-1:0.0: setup Pegasus II specific registers
[   68.853302][ T3988] Bluetooth: hci4: command 0x0409 tx timeout
[   68.882196][ T4587] device hsr_slave_1 entered promiscuous mode
[   68.894565][ T4618] exfat: Deprecated parameter 'utf8'
[   68.896109][ T4618] exfat: Bad value for 'errors'
[   70.954766][ T2051] ieee802154 phy0 wpan0: encryption failed: -22
[   70.956724][ T2051] ieee802154 phy1 wpan1: encryption failed: -22
[   70.971475][ T4587] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.973668][ T4587] Cannot create hsr debugfs directory
[   70.975828][ T4038] Bluetooth: hci4: command 0x041b tx timeout
[   71.113083][   T26] audit: type=1326 audit(71.050:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4637 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb620e8 code=0x7ffc0000
[   71.173561][   T13] pegasus 1-1:0.0: can't locate MII phy, using default
[   71.176009][   T26] audit: type=1326 audit(71.120:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4637 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c00000b7 syscall=443 compat=0 ip=0xffff7fb620e8 code=0x7ffc0000
[   71.181980][   T26] audit: type=1326 audit(71.120:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4637 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb620e8 code=0x7ffc0000
[   71.223672][   T26] audit: type=1326 audit(71.120:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4637 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7fb620e8 code=0x7ffc0000
[   71.225507][   T13] pegasus 1-1:0.0: eth4, ELECOM USB Ethernet LD-USB20, 3a:bd:f8:98:5b:f4
[   71.233170][   T13] usb 1-1: USB disconnect, device number 5
[   71.381705][ T4645] loop0: detected capacity change from 0 to 4096
[   71.462318][ T4645] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[   71.527811][ T4645] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[   71.839803][ T4656] vhci_hcd: invalid port number 0
[   71.988633][ T4630] loop1: detected capacity change from 0 to 32768
[   72.173088][ T4659] loop0: detected capacity change from 0 to 32768
[   72.232529][ T4659] gfs2: Invalid block size
[   72.294873][ T4630] XFS (loop1): Mounting V5 Filesystem
[   72.314319][ T4650] loop3: detected capacity change from 0 to 40427
[   72.442963][ T4630] XFS (loop1): Ending clean mount
[   72.453559][ T4650] F2FS-fs (loop3): Found nat_bits in checkpoint
[   72.529156][ T4659] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.0'.
[   72.532103][ T4659] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'.
[   72.611378][ T4006] XFS (loop1): Unmounting Filesystem
[   72.625450][ T4587] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.632847][ T4650] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   72.815382][ T4587] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.858433][ T4587] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.831518][ T3988] Bluetooth: hci4: command 0x040f tx timeout
[   73.870768][ T4587] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   74.066223][ T4691] loop0: detected capacity change from 0 to 256
[   74.068849][ T4693] udc-core: couldn't find an available UDC or it's busy
[   74.070780][ T4693] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   74.101935][ T4691] exfat: Deprecated parameter 'utf8'
[   74.118131][ T4691] exfat: Bad value for 'errors'
[   74.254224][  T153] device hsr_slave_0 left promiscuous mode
[   74.353925][  T153] device hsr_slave_1 left promiscuous mode
[   74.388069][ T4698] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET)
[   75.337135][ T1528] cfg80211: failed to load regulatory.db
[   75.415486][  T153] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.419339][  T153] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.452853][  T153] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.477414][  T153] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.497991][  T153] device bridge_slave_1 left promiscuous mode
[   75.500903][  T153] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.594447][  T153] device bridge_slave_0 left promiscuous mode
[   75.596233][  T153] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.788143][ T4715] loop3: detected capacity change from 0 to 4096
[   75.819435][ T4715] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[   75.849761][  T153] device veth1_macvtap left promiscuous mode
[   75.851804][  T153] device veth0_macvtap left promiscuous mode
[   75.854790][  T153] device veth1_vlan left promiscuous mode
[   75.856539][  T153] device veth0_vlan left promiscuous mode
[   75.884437][ T4715] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[   75.893690][ T3988] Bluetooth: hci4: command 0x0419 tx timeout
[   76.194628][ T4728] loop3: detected capacity change from 0 to 1024
[   76.776710][  T153] team0 (unregistering): Port device team_slave_1 removed
[   76.816978][  T153] team0 (unregistering): Port device team_slave_0 removed
[   76.835767][  T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   76.901878][  T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   77.228563][  T153] bond0 (unregistering): Released all slaves
[   78.531823][ T4587] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.535493][ T4751] loop0: detected capacity change from 0 to 256
[   78.574156][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   78.576870][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   78.601783][ T4587] 8021q: adding VLAN 0 to HW filter on device team0
[   78.614289][ T4751] exfat: Deprecated parameter 'utf8'
[   78.615826][ T4751] exfat: Bad value for 'errors'
[   78.629949][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   78.643848][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   78.646471][ T4048] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.648364][ T4048] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.651118][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   78.749613][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   78.752311][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   78.755285][ T4040] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.757250][ T4040] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.759547][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   78.762388][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   78.786416][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   78.813510][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   78.822770][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   78.896509][ T4761] device syz_tun entered promiscuous mode
[   78.934256][ T4761] device batadv_slave_0 entered promiscuous mode
[   79.918456][ T1956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   79.921772][ T1956] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   79.934505][ T1956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   79.958356][ T1956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   79.961551][ T1956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   79.973914][ T1956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   79.977925][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   79.995625][ T4766] loop1: detected capacity change from 0 to 4096
[   80.027614][ T4766] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[   80.084553][ T4766] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[   81.074750][ T4787] loop4: detected capacity change from 0 to 2048
[   81.165630][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   81.357824][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   81.360206][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   82.347105][ T4587] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.372160][ T4787] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   82.387399][ T4787] fs-verity: sha512 using implementation "sha512-arm64"
[   82.437246][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   82.440369][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   82.541444][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   82.544113][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   82.547255][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   82.549743][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   82.557000][ T4587] device veth0_vlan entered promiscuous mode
[   82.608880][ T4587] device veth1_vlan entered promiscuous mode
[   82.720473][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   82.724010][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   82.734861][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   82.747003][ T4834] loop3: detected capacity change from 0 to 256
[   82.752262][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   82.774296][ T4587] device veth0_macvtap entered promiscuous mode
[   82.779107][ T4587] device veth1_macvtap entered promiscuous mode
[   82.804771][ T4834] exfat: Deprecated parameter 'utf8'
[   82.808562][ T4834] exfat: Bad value for 'errors'
[   82.873004][ T4587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.912406][ T4587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.947842][ T4587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.968899][ T4587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.984991][ T4587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.010939][ T4587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.032286][ T4587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.077325][ T4587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.081704][ T4587] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.068641][ T1956] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   84.071360][ T1956] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   84.074175][ T1956] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   84.079171][ T1956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   84.125125][ T4587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.127848][ T4587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.130337][ T4587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.157366][ T4587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.159919][ T4587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.162633][ T4587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.184910][ T4587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.192709][ T4587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.219527][ T4587] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.221703][ T4854] loop1: detected capacity change from 0 to 4096
[   84.230949][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   84.234675][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   84.247529][ T4587] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.253296][ T4587] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.269474][ T4587] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.291254][ T4587] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.333122][ T4854] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[   84.385122][ T4875] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[   84.428561][ T4854] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[   84.526322][  T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.528635][  T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.533124][ T1956] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   84.611834][ T4628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.613444][ T4040] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   84.621921][ T4628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.633921][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   84.755962][ T4880] loop3: detected capacity change from 0 to 8192
[   84.816099][ T4893] udc-core: couldn't find an available UDC or it's busy
[   84.818170][ T4893] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   84.973455][ T4040] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   84.976778][ T4040] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   84.981450][ T4040] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   84.986909][ T4040] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.003768][ T4040] usb 1-1: config 0 descriptor??
[   85.412727][ T4902] udc-core: couldn't find an available UDC or it's busy
[   85.421295][ T4902] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   85.489221][ T4040] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   85.491451][ T4040] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   85.498307][ T4906] loop4: detected capacity change from 0 to 256
[   85.501183][ T4040] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   85.508865][ T4040] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   85.512775][ T4040] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   85.517636][ T4040] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   85.519836][ T4040] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   85.521892][ T4040] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   85.523862][ T4908] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[   85.537725][ T4040] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   85.540022][ T4040] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   85.542071][ T4040] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   85.545855][ T4040] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   85.547913][ T4040] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   85.549863][ T4040] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   85.552112][ T4040] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[   85.571742][ T4910] loop2: detected capacity change from 0 to 512
[   85.587847][ T4040] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[   85.618301][ T4040] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   85.630418][ T4912] loop3: detected capacity change from 0 to 256
[   85.682518][ T4910] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   85.805207][ T4906] loop4: detected capacity change from 0 to 2048
[   86.829274][ T4906] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   87.065195][   T13] usb 1-1: USB disconnect, device number 6
[   87.084616][ T3998] device syz_tun left promiscuous mode
[   87.520156][ T1851] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.599252][ T1851] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.662236][ T1851] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.734646][   T13] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   87.741743][ T1851] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.820897][ T4960] chnl_net:caif_netlink_parms(): no params data found
[   87.859983][ T4971] loop2: detected capacity change from 0 to 256
[   87.892710][ T4971] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x246ed14c, utbl_chksum : 0xe619d30d)
[   87.902211][ T4971] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 1)
[   87.906413][ T4960] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.908374][ T4960] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.911117][ T4960] device bridge_slave_0 entered promiscuous mode
[   87.915944][ T4960] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.917957][ T4960] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.920703][ T4960] device bridge_slave_1 entered promiscuous mode
[   87.922049][ T4971] exFAT-fs (loop2): failed to load alloc-bitmap
[   87.930401][ T4971] exFAT-fs (loop2): failed to recognize exfat type
[   87.949599][ T4960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.955506][ T4960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.992506][ T4960] team0: Port device team_slave_0 added
[   87.997248][ T4960] team0: Port device team_slave_1 added
[   88.093524][   T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.096514][   T13] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   88.099908][   T13] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   88.102297][   T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.124396][   T13] usb 1-1: config 0 descriptor??
[   88.199775][ T4980] loop4: detected capacity change from 0 to 512
[   88.202614][ T4960] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.211618][ T4960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.231704][ T4960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.266441][ T4960] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.268362][ T4960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.290499][ T4960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.339829][ T4980] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #15: comm syz-executor.4: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[   88.375589][ T4980] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz-executor.4: couldn't read orphan inode 15 (err -117)
[   88.395848][ T4980] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   88.419844][ T4977] loop2: detected capacity change from 0 to 32768
[   88.485484][ T4960] device hsr_slave_0 entered promiscuous mode
[   88.513858][ T4960] device hsr_slave_1 entered promiscuous mode
[   88.553801][ T4960] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.555978][ T4960] Cannot create hsr debugfs directory
[   88.587457][ T4977] XFS (loop2): Mounting V5 Filesystem
[   88.606676][   T13] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   88.608775][   T13] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   88.613039][   T13] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   88.621531][   T13] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   88.629041][   T13] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   88.636725][   T13] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   88.638817][   T13] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   88.640733][   T13] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   88.698975][   T13] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   88.700972][   T13] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   88.721935][   T13] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   88.731645][   T13] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   88.740145][   T13] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   88.740366][ T5005] loop4: detected capacity change from 0 to 256
[   88.742229][   T13] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   88.747394][   T13] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[   88.749806][   T13] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[   88.762815][ T4977] XFS (loop2): Ending clean mount
[   88.771713][   T13] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   88.788311][ T4977] XFS (loop2): Quotacheck needed: Please wait.
[   88.879068][ T5005] FAT-fs (loop4): Directory bread(block 64) failed
[   88.880878][ T5005] FAT-fs (loop4): Directory bread(block 65) failed
[   88.884923][ T4977] XFS (loop2): Quotacheck: Done.
[   88.890719][ T5005] FAT-fs (loop4): Directory bread(block 66) failed
[   88.895769][ T5005] FAT-fs (loop4): Directory bread(block 67) failed
[   88.897856][ T5005] FAT-fs (loop4): Directory bread(block 68) failed
[   88.899606][ T5005] FAT-fs (loop4): Directory bread(block 69) failed
[   88.901426][ T5005] FAT-fs (loop4): Directory bread(block 70) failed
[   88.903943][ T5005] FAT-fs (loop4): Directory bread(block 71) failed
[   88.905731][ T5005] FAT-fs (loop4): Directory bread(block 72) failed
[   88.907522][ T5005] FAT-fs (loop4): Directory bread(block 73) failed
[   89.075185][ T4587] XFS (loop2): Unmounting Filesystem
[   89.096770][ T5010] device wlan0 entered promiscuous mode
[   89.120953][ T5010] team0: Port device macvlan2 added
[   89.404485][ T4960] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   89.440892][ T4039] usb 1-1: USB disconnect, device number 7
[   89.445356][ T4960] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   89.502920][ T4960] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   89.545548][ T4960] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   89.654061][ T1711] Bluetooth: hci1: command 0x0409 tx timeout
[   89.778562][ T5025] loop4: detected capacity change from 0 to 32768
[   89.814981][ T5025] XFS: ikeep mount option is deprecated.
[   89.816653][ T5025] XFS: ikeep mount option is deprecated.
[   89.856219][ T1851] device batadv_slave_0 left promiscuous mode
[   89.887292][ T5025] XFS (loop4): Mounting V5 Filesystem
[   89.952047][ T1851] device hsr_slave_0 left promiscuous mode
[   89.991531][ T5034] loop2: detected capacity change from 0 to 32768
[   90.004055][ T1851] device hsr_slave_1 left promiscuous mode
[   90.025798][ T5025] XFS (loop4): Ending clean mount
[   90.029722][ T5025] XFS (loop4): Quotacheck needed: Please wait.
[   90.060222][ T5025] XFS (loop4): Quotacheck: Done.
[   90.064045][ T1851] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   90.066076][ T1851] batman_adv: batadv0: Removing interface: batadv_slave_0
[   90.072397][ T1851] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.083990][ T1851] batman_adv: batadv0: Removing interface: batadv_slave_1
[   90.090111][ T1851] bridge0: port 3(team0) entered disabled state
[   90.095057][ T5051] loop1: detected capacity change from 0 to 256
[   90.111464][ T5034] XFS (loop2): Mounting V5 Filesystem
[   90.115093][ T3994] XFS (loop4): Unmounting Filesystem
[   90.143040][ T1851] device bridge_slave_1 left promiscuous mode
[   90.145083][ T1851] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.169934][ T5051] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x246ed14c, utbl_chksum : 0xe619d30d)
[   90.184405][ T5051] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 1)
[   90.194131][ T5051] exFAT-fs (loop1): failed to load alloc-bitmap
[   90.196204][ T5051] exFAT-fs (loop1): failed to recognize exfat type
[   90.196517][ T1851] device bridge_slave_0 left promiscuous mode
[   90.199983][ T1851] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.226332][ T5034] XFS (loop2): Ending clean mount
[   90.231702][ T5034] XFS (loop2): Quotacheck needed: Please wait.
[   90.301280][ T5034] XFS (loop2): Quotacheck: Done.
[   90.344432][ T1851] device veth1_macvtap left promiscuous mode
[   90.345968][ T4587] XFS (loop2): Unmounting Filesystem
[   90.346260][ T1851] device veth0_macvtap left promiscuous mode
[   90.350125][ T1851] device veth1_vlan left promiscuous mode
[   90.358014][ T1851] device veth0_vlan left promiscuous mode
[   90.843893][ T1851] device team_slave_1 left promiscuous mode
[   90.849298][ T1851] team0 (unregistering): Port device team_slave_1 removed
[   90.860156][ T1851] device team_slave_0 left promiscuous mode
[   90.862714][ T1851] team0 (unregistering): Port device team_slave_0 removed
[   90.872175][ T1851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   90.928587][ T1851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   91.019452][ T5069] loop2: detected capacity change from 0 to 512
[   91.072844][ T5065] loop0: detected capacity change from 0 to 32768
[   91.093406][ T5069] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   91.112500][ T5069] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   91.127539][ T5069] EXT4-fs (loop2): 1 truncate cleaned up
[   91.129168][ T5069] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback.
[   91.154257][ T1851] bond0 (unregistering): Released all slaves
[   91.183660][ T5065] XFS (loop0): Mounting V5 Filesystem
[   91.234047][ T5065] XFS (loop0): Ending clean mount
[   91.238121][ T5065] XFS (loop0): Quotacheck needed: Please wait.
[   91.298890][ T5065] XFS (loop0): Quotacheck: Done.
[   91.424623][ T5087] udc-core: couldn't find an available UDC or it's busy
[   91.426597][ T5087] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   91.451328][ T4960] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.470663][ T5091] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[   91.487075][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   91.489633][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   91.498184][ T4960] 8021q: adding VLAN 0 to HW filter on device team0
[   91.508350][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   91.511089][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   91.515233][ T4039] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.517241][ T4039] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.519885][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   91.552209][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   91.557246][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   91.559707][ T1711] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.561654][ T1711] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.567624][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   91.582753][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   91.612291][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   91.617198][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   91.619874][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   91.624191][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   91.626373][ T4004] XFS (loop0): Unmounting Filesystem
[   91.626964][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   91.630508][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   91.639520][ T4960] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   91.672651][ T4960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   91.682724][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   91.700498][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   91.709632][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   91.744832][ T4039] Bluetooth: hci1: command 0x041b tx timeout
[   91.995485][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   91.997886][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   92.028166][ T4960] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.105440][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   92.108403][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   92.172324][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   92.175348][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   92.178762][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   92.188209][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   92.203577][ T4960] device veth0_vlan entered promiscuous mode
[   92.256813][ T4960] device veth1_vlan entered promiscuous mode
[   92.286278][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   92.289294][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   92.342817][ T5129] device batadv0 entered promiscuous mode
[   92.374102][ T5129] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   92.381668][ T5129] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[   92.402650][ T4960] device veth0_macvtap entered promiscuous mode
[   92.406622][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   92.409430][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   92.417235][ T4960] device veth1_macvtap entered promiscuous mode
[   92.424196][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   92.426696][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   92.485485][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.488397][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.491040][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.523996][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.540711][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.543573][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.546007][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.573502][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.582130][ T4960] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.594813][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   92.597620][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   92.612977][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.622718][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.629053][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.631913][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.637550][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.640209][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.642694][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.665951][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.676954][ T4960] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.679760][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   92.691131][ T1711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   92.725969][ T4960] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.728241][ T4960] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.730469][ T4960] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.732929][ T4960] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.896122][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.898340][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.903123][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   92.918846][ T5114] loop1: detected capacity change from 0 to 32768
[   92.982233][  T396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.034884][  T396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.046315][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   93.127025][ T5114] XFS (loop1): Mounting V5 Filesystem
[   93.201933][ T5168] device lo entered promiscuous mode
[   93.285537][ T5168] device tunl0 entered promiscuous mode
[   93.313813][ T5114] XFS (loop1): Ending clean mount
[   93.329852][ T5114] XFS (loop1): Quotacheck needed: Please wait.
[   93.340953][ T5175] udc-core: couldn't find an available UDC or it's busy
[   93.343141][ T5175] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   93.351163][ T5168] device gre0 entered promiscuous mode
[   93.373819][ T5114] XFS (loop1): Quotacheck: Done.
[   93.485678][ T5168] device gretap0 entered promiscuous mode
[   93.521485][ T4006] XFS (loop1): Unmounting Filesystem
[   93.551809][ T5168] device erspan0 entered promiscuous mode
[   93.600961][ T5168] device ip_vti0 entered promiscuous mode
[   93.610778][ T5147] loop2: detected capacity change from 0 to 32768
[   93.638367][ T5168] device ip6_vti0 entered promiscuous mode
[   93.670950][ T5168] device sit0 entered promiscuous mode
[   93.782624][ T5168] device ip6tnl0 entered promiscuous mode
[   93.808251][ T5147] XFS (loop2): Mounting V5 Filesystem
[   93.813623][ T4039] Bluetooth: hci1: command 0x040f tx timeout
[   93.820178][ T5168] device ip6gre0 entered promiscuous mode
[   93.937041][ T5147] XFS (loop2): Ending clean mount
[   93.941274][ T5147] XFS (loop2): Quotacheck needed: Please wait.
[   93.987755][ T5147] XFS (loop2): Quotacheck: Done.
[   94.049553][ T5168] device syz_tun entered promiscuous mode
[   94.097434][ T5168] device ip6gretap0 entered promiscuous mode
[   94.180005][ T5168] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.183693][ T5168] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.205173][ T4587] XFS (loop2): Unmounting Filesystem
[   94.228268][ T5168] device bridge0 entered promiscuous mode
[   94.280624][ T5168] device vcan0 entered promiscuous mode
[   94.318663][ T5168] device bond0 entered promiscuous mode
[   94.320150][ T5168] device bond_slave_0 entered promiscuous mode
[   94.322069][ T5168] device bond_slave_1 entered promiscuous mode
[   94.329289][ T5168] device macvlan2 entered promiscuous mode
[   94.400296][ T5168] device team0 entered promiscuous mode
[   94.401801][ T5168] device team_slave_0 entered promiscuous mode
[   94.404420][ T5168] device team_slave_1 entered promiscuous mode
[   94.455155][ T5168] device dummy0 entered promiscuous mode
[   94.506792][ T5168] device nlmon0 entered promiscuous mode
[   94.511986][ T5168] device caif0 entered promiscuous mode
[   94.600606][ T5168] device vxcan0 entered promiscuous mode
[   94.621569][ T5168] device vxcan1 entered promiscuous mode
[   94.631786][ T5168] device veth0 entered promiscuous mode
[   94.650846][ T5219] udc-core: couldn't find an available UDC or it's busy
[   94.652776][ T5219] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   94.658117][ T5168] device veth1 entered promiscuous mode
[   94.763856][ T5168] device wg0 entered promiscuous mode
[   94.863461][ T5168] device wg1 entered promiscuous mode
[   94.973465][ T5168] device wg2 entered promiscuous mode
[   94.990182][ T5168] device veth0_to_bridge entered promiscuous mode
[   95.020432][ T5168] device veth1_to_bridge entered promiscuous mode
[   95.057290][ T5168] device veth0_to_bond entered promiscuous mode
[   95.083889][ T5168] device veth1_to_bond entered promiscuous mode
[   95.108532][ T5168] device veth0_to_team entered promiscuous mode
[   95.138626][ T5168] device veth1_to_team entered promiscuous mode
[   95.167990][ T5168] device veth0_to_batadv entered promiscuous mode
[   95.172817][ T5168] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.193934][ T5168] device batadv_slave_0 entered promiscuous mode
[   95.221250][ T5168] device veth1_to_batadv entered promiscuous mode
[   95.226197][ T5168] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.259112][ T5168] device batadv_slave_1 entered promiscuous mode
[   95.284014][ T5168] device xfrm0 entered promiscuous mode
[   95.309538][ T5168] device veth0_to_hsr entered promiscuous mode
[   95.362264][ T5168] device veth1_to_hsr entered promiscuous mode
[   95.393600][ T5168] device hsr0 entered promiscuous mode
[   95.412730][ T5168] device veth1_virt_wifi entered promiscuous mode
[   95.430959][ T5168] device veth0_virt_wifi entered promiscuous mode
[   95.435762][ T5168] device virt_wifi0 entered promiscuous mode
[   95.492130][ T5168] device vlan0 entered promiscuous mode
[   95.503428][ T5168] device vlan1 entered promiscuous mode
[   95.543522][ T5168] device macvlan0 entered promiscuous mode
[   95.593792][ T5168] device macvlan1 entered promiscuous mode
[   95.598298][ T5168] device ipvlan0 entered promiscuous mode
[   95.599989][ T5168] device ipvlan1 entered promiscuous mode
[   95.693433][ T5168] device macvtap0 entered promiscuous mode
[   95.712574][ T5168] device macsec0 entered promiscuous mode
[   95.773645][ T5168] device geneve0 entered promiscuous mode
[   95.789296][ T5168] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.791760][ T5168] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.794839][ T5168] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.797321][ T5168] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.844514][ T5168] device geneve1 entered promiscuous mode
[   95.854737][ T5168] device netdevsim0 entered promiscuous mode
[   95.870445][ T5168] device netdevsim1 entered promiscuous mode
[   95.884947][ T4039] Bluetooth: hci1: command 0x0419 tx timeout
[   95.894742][ T5168] device netdevsim2 entered promiscuous mode
[   95.909117][ T5168] device netdevsim3 entered promiscuous mode
[   95.967735][ T5168] device wlan0 entered promiscuous mode
[   96.024993][ T5168] device wlan1 entered promiscuous mode
[   96.363004][ T5251] udc-core: couldn't find an available UDC or it's busy
[   96.389754][ T5251] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[   96.410686][ T5249] serio: Serial port pts0
[   98.675839][ T5311] input: syz0 as /devices/virtual/input/input8
[   98.711166][ T5312] dccp_close: ABORT with 60 bytes unread
[   98.841002][ T5320] loop2: detected capacity change from 0 to 1024
[  102.979164][ T5378] loop4: detected capacity change from 0 to 2048
[  103.692180][ T5378] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  103.889245][ T5399] serio: Serial port pts0
[  104.802012][   T26] audit: type=1326 audit(104.740:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5429 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff935a10e8 code=0x7ffc0000
[  104.813290][   T26] audit: type=1326 audit(104.740:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5431 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6cbe0e8 code=0x0
[  104.819275][   T26] audit: type=1326 audit(104.750:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5429 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff935a10e8 code=0x7ffc0000
[  104.860939][   T26] audit: type=1326 audit(104.750:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5429 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff935a10e8 code=0x7ffc0000
[  104.891412][   T26] audit: type=1326 audit(104.750:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5429 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff935a10e8 code=0x7ffc0000
[  104.916141][   T26] audit: type=1326 audit(104.750:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5429 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff935a10e8 code=0x7ffc0000
[  104.922714][   T26] audit: type=1326 audit(104.760:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5429 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff935a10e8 code=0x7ffc0000
[  105.278623][   T26] audit: type=1326 audit(104.760:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5429 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff935a10e8 code=0x7ffc0000
[  105.495646][   T26] audit: type=1326 audit(104.790:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5434 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94b010e8 code=0x7ffc0000
[  105.705402][   T26] audit: type=1326 audit(104.790:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5434 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94b010e8 code=0x7ffc0000
[  105.922707][ T5452] loop3: detected capacity change from 0 to 128
[  106.109422][ T5450] loop1: detected capacity change from 0 to 256
[  106.224639][ T5450] FAT-fs (loop1): Unrecognized mount option "shohtname=lower" or missing value
[  106.763989][ T5457] syz-executor.3 (5457): /proc/5451/oom_adj is deprecated, please use /proc/5451/oom_score_adj instead.
[  107.304638][ T5447] loop1: detected capacity change from 0 to 256
[  107.835717][ T5447] loop1: detected capacity change from 0 to 40427
[  108.122108][ T5471] udc-core: couldn't find an available UDC or it's busy
[  108.143275][ T5471] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  108.153150][ T5471] udc-core: couldn't find an available UDC or it's busy
[  108.174734][ T5471] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  108.194856][ T5475] loop2: detected capacity change from 0 to 512
[  108.244277][ T5475] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[  108.246447][ T5475] System zones: 0-5
[  108.254698][ T5475] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  108.764640][ T5475] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor.2: bg 0: block 161: padding at end of block bitmap is not set
[  109.135633][ T5492] loop4: detected capacity change from 0 to 128
[  109.196164][  T144] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  109.198961][  T144] CPU: 0 PID: 144 Comm: kworker/u5:0 Not tainted 5.15.161-syzkaller #0
[  109.201169][  T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  109.203845][  T144] Workqueue: hci1 hci_rx_work
[  109.205153][  T144] Call trace:
[  109.206013][  T144]  dump_backtrace+0x0/0x530
[  109.207211][  T144]  show_stack+0x2c/0x3c
[  109.208363][  T144]  dump_stack_lvl+0x108/0x170
[  109.209672][  T144]  dump_stack+0x1c/0x58
[  109.210783][  T144]  sysfs_create_dir_ns+0x278/0x318
[  109.212194][  T144]  kobject_add_internal+0x384/0x8f0
[  109.213632][  T144]  kobject_add+0x14c/0x21c
[  109.214835][  T144]  device_add+0x400/0xef4
[  109.216018][  T144]  hci_conn_add_sysfs+0xc4/0x1cc
[  109.217384][  T144]  le_conn_complete_evt+0x954/0x1228
[  109.218801][  T144]  hci_le_meta_evt+0xa54/0x30dc
[  109.220338][  T144]  hci_event_packet+0xd34/0x12b4
[  109.221704][  T144]  hci_rx_work+0x1c0/0x7c4
[  109.222858][  T144]  process_one_work+0x790/0x11b8
[  109.224216][  T144]  worker_thread+0x910/0x1034
[  109.225517][  T144]  kthread+0x37c/0x45c
[  109.226653][  T144]  ret_from_fork+0x10/0x20
[  109.233908][  T144] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  109.237388][  T144] Bluetooth: hci1: failed to register connection device
[  109.244941][ T5500] udc-core: couldn't find an available UDC or it's busy
[  109.246815][ T5500] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  110.561128][    C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
[  111.665187][ T5540] loop1: detected capacity change from 0 to 1024
[  111.679543][ T5545] loop2: detected capacity change from 0 to 128
[  111.741456][ T5540] udc-core: couldn't find an available UDC or it's busy
[  111.746192][ T5540] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  113.048390][ T5566] loop3: detected capacity change from 0 to 1024
[  113.131200][ T5566] EXT4-fs (loop3): Ignoring removed oldalloc option
[  113.133283][ T5566] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  113.179475][ T5570] loop2: detected capacity change from 0 to 4096
[  113.207703][ T5566] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,dioread_nolock,sysvgroups,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none.
[  113.490549][ T5581] udc-core: couldn't find an available UDC or it's busy
[  113.492463][ T5581] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  114.142761][ T5594] overlayfs: conflicting lowerdir path
[  114.339967][ T5601] loop2: detected capacity change from 0 to 128
[  114.352740][ T5603] process 'syz-executor.1' launched './file0' with NULL argv: empty string added
[  115.533354][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  116.607553][ T5638] loop2: detected capacity change from 0 to 2048
[  116.670589][ T5638] EXT4-fs (loop2): cluster size (2048) smaller than block size (4096)
[  117.570981][ T5679] udc-core: couldn't find an available UDC or it's busy
[  117.572904][ T5679] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  117.600421][ T5681] udc-core: couldn't find an available UDC or it's busy
[  117.607272][ T5681] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  118.462444][ T5673] loop1: detected capacity change from 0 to 32768
[  119.351003][ T5746] loop0: detected capacity change from 0 to 6
[  119.377779][ T5746] Dev loop0: unable to read RDB block 6
[  119.390522][ T5746]  loop0: unable to read partition table
[  119.401297][ T5746] loop0: partition table beyond EOD, truncated
[  119.415669][ T5746] loop_reread_partitions: partition scan of loop0 (�被x������ڬ��dƤ����ݡ�����
[  119.415669][ T5746] 
) failed (rc=-5)
[  120.270636][ T5818] serio: Serial port pts0
[  125.925020][    C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
[  129.720148][ T6001] dccp_close: ABORT with 60 bytes unread
[  129.746499][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  129.854627][ T6014] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it!
[  130.231644][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  130.602645][ T6042] team0: Port device macvlan2 removed
[  130.813689][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  131.085255][ T2051] ieee802154 phy0 wpan0: encryption failed: -22
[  131.087162][ T2051] ieee802154 phy1 wpan1: encryption failed: -22
[  131.651320][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  132.956971][    T9] wlan1: Trigger new scan to find an IBSS to join
[  133.084603][ T1851] wlan1: Trigger new scan to find an IBSS to join
[  134.123547][ T1851] wlan1: Trigger new scan to find an IBSS to join
[  134.532345][ T6150] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  134.688481][ T6152] udc-core: couldn't find an available UDC or it's busy
[  134.690397][ T6152] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  134.741603][   T26] kauditd_printk_skb: 18 callbacks suppressed
[  134.741617][   T26] audit: type=1326 audit(134.680:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d3120e8 code=0x7ffc0000
[  134.749344][   T26] audit: type=1326 audit(134.680:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d3120e8 code=0x7ffc0000
[  134.769460][   T26] audit: type=1326 audit(134.710:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9d3120e8 code=0x7ffc0000
[  134.783311][   T26] audit: type=1326 audit(134.710:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d3120e8 code=0x7ffc0000
[  134.789725][   T26] audit: type=1326 audit(134.710:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d3120e8 code=0x7ffc0000
[  134.827574][   T26] audit: type=1326 audit(134.720:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9d3120e8 code=0x7ffc0000
[  134.848430][   T26] audit: type=1326 audit(134.720:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d3120e8 code=0x7ffc0000
[  134.863261][   T26] audit: type=1326 audit(134.720:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d3120e8 code=0x7ffc0000
[  134.869293][   T26] audit: type=1326 audit(134.720:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=163 compat=0 ip=0xffff9d3120e8 code=0x7ffc0000
[  134.875191][   T26] audit: type=1326 audit(134.720:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d3120e8 code=0x7ffc0000
[  135.725255][ T6185] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network
[  135.728000][ T6185] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network
[  136.134658][  T136] wlan1: Trigger new scan to find an IBSS to join
[  136.245233][ T6221] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  136.419081][ T6225] device bridge0 entered promiscuous mode
[  136.454236][ T6225] device bond0 entered promiscuous mode
[  136.456036][ T6225] device bond_slave_0 entered promiscuous mode
[  136.457992][ T6225] device bond_slave_1 entered promiscuous mode
[  136.493352][ T6225] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  136.499487][ T6225] Cannot create hsr debugfs directory
[  136.511109][ T5228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  136.923842][ T6268] udc-core: couldn't find an available UDC or it's busy
[  136.933906][ T6268] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  137.084718][ T5799] wlan1: Trigger new scan to find an IBSS to join
[  137.209348][ T6278] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  137.347943][ T6280] device bridge0 entered promiscuous mode
[  137.383891][ T6280] device bond0 entered promiscuous mode
[  137.385768][ T6280] device bond_slave_0 entered promiscuous mode
[  137.387798][ T6280] device bond_slave_1 entered promiscuous mode
[  137.433714][ T6280] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  137.436005][ T6280] Cannot create hsr debugfs directory
[  137.439725][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  137.657013][ T6291] device team0 entered promiscuous mode
[  137.659001][ T6291] device team_slave_0 entered promiscuous mode
[  137.660868][ T6291] device team_slave_1 entered promiscuous mode
[  137.704122][ T6291] device team0 left promiscuous mode
[  137.705828][ T6291] device team_slave_0 left promiscuous mode
[  137.708740][ T6291] device team_slave_1 left promiscuous mode
[  139.015135][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  139.084331][  T396] wlan1: Trigger new scan to find an IBSS to join
[  139.163357][ T1662] wlan1: Trigger new scan to find an IBSS to join
[  140.004903][ T1851] wlan1: Creating new IBSS network, BSSID 7e:39:82:b0:8a:55
[  140.138093][    T9] wlan1: Trigger new scan to find an IBSS to join
[  140.175226][ T1851] wlan1: Creating new IBSS network, BSSID e6:61:7c:81:8d:55
[  141.840497][ T6387] udc-core: couldn't find an available UDC or it's busy
[  141.842379][ T6387] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  141.933494][ T6390] loop4: detected capacity change from 0 to 128
[  142.176560][  T396] wlan1: Creating new IBSS network, BSSID aa:fa:f4:29:f6:a6
[  143.544181][ T6403] device pim6reg1 entered promiscuous mode
[  143.595503][ T6401] device team0 entered promiscuous mode
[  143.597151][ T6401] device team_slave_0 entered promiscuous mode
[  143.598855][ T6401] device team_slave_1 entered promiscuous mode
[  143.631582][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  143.631597][   T26] audit: type=1326 audit(143.570:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6402 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d3120e8 code=0x0
[  143.640800][ T6401] device team0 left promiscuous mode
[  143.642269][ T6401] device team_slave_0 left promiscuous mode
[  143.644454][ T6401] device team_slave_1 left promiscuous mode
[  143.728980][ T6405] device pim6reg1 entered promiscuous mode
[  144.137220][ T5228] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  144.516944][ T5228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.519891][ T5228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  144.522471][ T5228] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00
[  144.533721][ T5228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.588927][ T5228] usb 1-1: config 0 descriptor??
[  145.612300][ T6425] overlayfs: failed to resolve './file2': -2
[  145.843827][ T5228] hid (null): unknown global tag 0xd
[  145.847222][ T5228] itetech 0003:258A:6A88.0003: unknown global tag 0xd
[  145.849006][ T5228] itetech 0003:258A:6A88.0003: item 0 1 1 13 parsing failed
[  145.851265][ T5228] itetech: probe of 0003:258A:6A88.0003 failed with error -22
[  146.047738][ T3988] usb 1-1: USB disconnect, device number 8
[  147.374577][ T6437] device veth1_macvtap left promiscuous mode
[  148.458910][ T6459] udc-core: couldn't find an available UDC or it's busy
[  148.466077][ T6459] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  148.511764][ T6461] device pim6reg1 entered promiscuous mode
[  148.579741][   T26] audit: type=1326 audit(148.520:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6460 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6cbe0e8 code=0x0
[  150.184819][ T6483] loop2: detected capacity change from 0 to 16
[  150.912345][ T6483] erofs: Unknown parameter '����01777777777777777777777������0xffffffffffffffff01777777777777777777777�18446744073709551615'
[  153.341224][ T6533] udc-core: couldn't find an available UDC or it's busy
[  153.350330][ T6533] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  153.376383][ T6535] udc-core: couldn't find an available UDC or it's busy
[  153.378323][ T6535] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  153.453289][ T5228] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  153.950301][ T6546] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  154.015237][ T5228] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  154.017787][ T5228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.024418][ T5228] usb 1-1: Product: syz
[  154.025563][ T5228] usb 1-1: Manufacturer: syz
[  154.026792][ T5228] usb 1-1: SerialNumber: syz
[  154.057648][ T6546] team0: Port device netdevsim0 added
[  154.074920][ T5228] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  154.087446][ T6549] device batadv0 entered promiscuous mode
[  154.089186][ T6549] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  154.110918][ T6549] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  154.129132][ T5228] usb 1-1: Direct firmware load for ath9k_htc/htc_9271-1.4.0.fw failed with error -2
[  154.132467][ T5228] usb 1-1: Falling back to sysfs fallback for: ath9k_htc/htc_9271-1.4.0.fw
[  155.209112][ T6557] udc-core: couldn't find an available UDC or it's busy
[  155.210944][ T6557] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  155.935330][ T6567] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  156.130371][ T6573] capability: warning: `syz-executor.2' uses 32-bit capabilities (legacy support in use)
[  156.172241][ T3988] usb 1-1: USB disconnect, device number 9
[  156.915937][ T6614] loop1: detected capacity change from 0 to 2048
[  156.977458][ T6617] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[  157.017296][ T6617] device bridge_slave_1 left promiscuous mode
[  157.019131][ T6617] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.035971][ T6614] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  157.172411][ T6614] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,grpquota,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: writeback.
[  157.191974][ T6614] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor.1: bg 0: block 234: padding at end of block bitmap is not set
[  157.240811][ T6614] EXT4-fs (loop1): Remounting filesystem read-only
[  157.242698][ T6614] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6186: Corrupt filesystem
[  157.565104][ T6658] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  157.581448][ T6658] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  157.776990][ T6672] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'.
[  157.873983][ T6676] serio: Serial port pts0
[  158.274936][ T6698] loop2: detected capacity change from 0 to 16
[  158.384621][ T6698] erofs: (device loop2): mounted with root inode @ nid 36.
[  158.771918][ T6688] loop1: detected capacity change from 0 to 32768
[  158.911757][ T6688] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (6688)
[  158.968615][ T6688] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  158.971660][ T6688] BTRFS info (device loop1): force zlib compression, level 3
[  158.992661][ T6688] BTRFS info (device loop1): force clearing of disk cache
[  159.003585][ T6688] BTRFS info (device loop1): setting nodatasum
[  159.005399][ T6688] BTRFS info (device loop1): allowing degraded mounts
[  159.007368][ T6688] BTRFS info (device loop1): enabling disk space caching
[  159.029863][ T6688] BTRFS info (device loop1): disk space caching is enabled
[  159.031929][ T6688] BTRFS info (device loop1): has skinny extents
[  159.046276][ T6701] loop0: detected capacity change from 0 to 32768
[  159.074670][ T6701] XFS: ikeep mount option is deprecated.
[  159.139151][ T6701] XFS (loop0): Mounting V5 Filesystem
[  159.318358][ T6688] BTRFS info (device loop1): clearing free space tree
[  159.320810][ T6688] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  159.359686][ T6688] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  159.381854][ T6701] XFS (loop0): Ending clean mount
[  159.412216][ T6701] XFS (loop0): Quotacheck needed: Please wait.
[  159.462461][ T6701] XFS (loop0): Quotacheck: Done.
[  159.519150][ T6688] BTRFS info (device loop1): balance: start -s
[  159.546635][ T4004] XFS (loop0): Unmounting Filesystem
[  159.557044][ T6688] BTRFS info (device loop1): relocating block group 1048576 flags system
[  159.737345][ T6688] BTRFS info (device loop1): balance: ended with status: 0
[  159.762286][ T6709] loop2: detected capacity change from 0 to 40427
[  159.766193][ T6711] loop3: detected capacity change from 0 to 40427
[  159.828779][ T6711] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  159.830805][ T6711] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  159.878072][ T6709] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  159.880208][ T6709] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  159.887736][ T6711] F2FS-fs (loop3): Found nat_bits in checkpoint
[  159.959629][ T6709] F2FS-fs (loop2): Found nat_bits in checkpoint
[  159.967881][ T6711] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  159.969875][ T6711] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  160.034113][ T6709] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  160.036133][ T6709] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  160.924280][ T6772] input: syz1 as /devices/virtual/input/input9
[  161.024128][ T6758] loop0: detected capacity change from 0 to 32768
[  161.047088][ T6776] device gretap0 entered promiscuous mode
[  161.067625][ T6758] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (6758)
[  161.084193][ T6776] device erspan0 entered promiscuous mode
[  161.117507][ T6780] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  161.121581][ T6758] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  161.127360][ T6778] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  161.131552][ T6778] batman_adv: batadv0: Adding interface: team0
[  161.135768][ T6778] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.154835][ T6758] BTRFS info (device loop0): force zlib compression, level 3
[  161.161868][ T6758] BTRFS info (device loop0): force clearing of disk cache
[  161.168907][ T6778] batman_adv: batadv0: Interface activated: team0
[  161.171477][ T6756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr2: link becomes ready
[  161.179024][ T6758] BTRFS info (device loop0): setting nodatasum
[  161.180693][ T6758] BTRFS info (device loop0): allowing degraded mounts
[  161.182498][ T6758] BTRFS info (device loop0): enabling disk space caching
[  161.204561][ T6758] BTRFS info (device loop0): disk space caching is enabled
[  161.214615][ T6758] BTRFS info (device loop0): has skinny extents
[  161.544691][ T6758] BTRFS info (device loop0): clearing free space tree
[  161.546763][ T6758] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  161.555023][ T6758] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  161.627526][ T6782] loop2: detected capacity change from 0 to 32768
[  161.640328][ T6758] BTRFS info (device loop0): balance: start -s
[  161.669450][ T6758] BTRFS info (device loop0): relocating block group 1048576 flags system
[  161.691129][ T6758] BTRFS info (device loop0): balance: ended with status: 0
[  161.729121][ T6782] Dev loop2 SGI disklabel: csum bad, label corrupted
[  161.777047][ T3592] Dev loop2 SGI disklabel: csum bad, label corrupted
[  161.953312][ T6808] loop0: detected capacity change from 0 to 6
[  162.004829][ T4521] Dev loop0: unable to read RDB block 6
[  162.006410][ T4521]  loop0: unable to read partition table
[  162.008077][ T4521] loop0: partition table beyond EOD, truncated
[  162.026251][ T6808] Dev loop0: unable to read RDB block 6
[  162.027949][ T6808]  loop0: unable to read partition table
[  162.029687][ T6808] loop0: partition table beyond EOD, truncated
[  162.031573][ T6808] loop_reread_partitions: partition scan of loop0 (�被x������ڬ��dƤ����ݡ�����
[  162.031573][ T6808] 
) failed (rc=-5)
[  162.308144][ T6792] loop3: detected capacity change from 0 to 40427
[  162.357403][ T6792] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  162.359979][ T6792] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  162.412402][ T6792] F2FS-fs (loop3): Found nat_bits in checkpoint
[  162.466410][ T6828] loop0: detected capacity change from 0 to 512
[  162.469480][ T6792] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  162.471392][ T6792] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  162.597889][ T6828] EXT4-fs (loop0): Ignoring removed nobh option
[  162.662244][ T6828] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  162.673493][ T6828] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it
[  162.676199][ T6828] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended
[  163.618918][ T6828] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[  163.621181][ T6828] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.0: corrupted in-inode xattr
[  163.663174][ T6828] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz-executor.0: couldn't read orphan inode 15 (err -117)
[  163.666981][ T6828] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=abort,noblock_validity,dioread_lock,init_itable,auto_da_alloc,grpjquota=.nouid32,nobh,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  163.675670][ T6828] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  163.679118][ T6828] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it
[  163.681798][ T6828] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended
[  163.723936][ T6828] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz-executor.0: path /root/syzkaller-testdir3519260140/syzkaller.7YirF6/165/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  164.208742][ T6861] udc-core: couldn't find an available UDC or it's busy
[  164.210990][ T6861] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  164.449518][ T6841] loop2: detected capacity change from 0 to 40427
[  164.481753][ T6841] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  164.483954][ T6841] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  164.675879][ T6841] F2FS-fs (loop2): Found nat_bits in checkpoint
[  164.837235][ T6841] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  164.839182][ T6841] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  165.050255][    T9] attempt to access beyond end of device
[  165.050255][    T9] loop2: rw=1, want=45104, limit=40427
[  165.288148][ T6863] loop0: detected capacity change from 0 to 40427
[  165.429091][ T6863] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  165.436754][ T6863] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  165.520400][ T6863] F2FS-fs (loop0): Found nat_bits in checkpoint
[  165.548239][ T6863] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  165.550336][ T6863] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  165.801669][ T6885] loop3: detected capacity change from 0 to 256
[  165.841126][ T6885] udc-core: couldn't find an available UDC or it's busy
[  165.842981][ T6885] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  166.132215][ T6896] udc-core: couldn't find an available UDC or it's busy
[  166.153351][ T6896] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  167.391505][ T6922] loop3: detected capacity change from 0 to 2048
[  167.463403][ T6922] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  168.086464][ T6944] bond0: (slave macvlan2): Error: Slave device does not support XDP
[  168.313630][ T4041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  168.315895][ T4041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  168.317796][ T4041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  168.319643][ T4041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  168.321582][ T4041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  168.393744][ T4041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  168.395797][ T4041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  168.397751][ T4041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  168.404648][ T6948] loop0: detected capacity change from 0 to 1024
[  168.420559][ T4041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  168.422605][ T4041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  168.435390][ T4041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  168.437471][ T4041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  168.439498][ T4041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  168.452465][ T4041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  168.455122][ T4041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  169.267454][ T4041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  169.269731][ T4041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  169.271693][ T4041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  169.273912][ T4041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  169.276052][ T4041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  169.278484][ T4041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  169.280434][ T4041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  169.282334][ T4041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  169.284448][ T4041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  169.286441][ T4041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  169.288333][ T4041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  169.290291][ T4041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  169.292206][ T4041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  169.294315][ T4041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  169.296199][ T4041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  169.298123][ T4041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  169.303915][ T6911] loop4: detected capacity change from 0 to 40427
[  169.304502][ T4041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  169.307724][ T4041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  169.315735][ T4041] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  169.328532][ T6756] Bluetooth: hci3: command 0x0406 tx timeout
[  169.387257][    T9] hfsplus: b-tree write err: -5, ino 4
[  169.399278][ T6911] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  169.401453][ T6911] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  169.442574][ T6960] loop2: detected capacity change from 0 to 512
[  169.485634][ T6911] F2FS-fs (loop4): Found nat_bits in checkpoint
[  169.561922][ T6911] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  169.563833][ T6911] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  169.590656][ T6960] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000000,nombcache,stripe=0x0000000000000002,usrquota,,errors=continue. Quota mode: writeback.
[  169.857385][ T4041] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  169.859337][ T4041] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  169.861344][ T4041] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  169.893883][ T4041] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  169.895984][ T4041] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  169.897890][ T4041] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  169.899817][ T4041] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  169.901758][ T4041] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  169.905218][ T6973] udc-core: couldn't find an available UDC or it's busy
[  169.907026][ T6973] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  169.937236][ T4041] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  169.939181][ T4041] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  169.941184][ T4041] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  169.943164][ T4041] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  169.966129][ T4041] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  169.968132][ T4041] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  169.970084][ T4041] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  169.972098][ T4041] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  170.003347][ T4041] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  170.005409][ T4041] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  170.007382][ T4041] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  170.009293][ T4041] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  170.011246][ T4041] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  170.043720][ T4041] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  170.052754][ T4041] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  170.062959][ T4041] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  170.075088][ T4041] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  170.083545][ T4041] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  170.092306][ T4041] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  170.101496][ T4041] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  170.110506][ T4041] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  170.117770][ T4041] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  170.127899][ T4041] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  170.130006][ T4041] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  170.150558][ T4041] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  170.363742][ T6978] loop4: detected capacity change from 0 to 2048
[  170.462275][ T6978] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  170.530100][ T6966] loop0: detected capacity change from 0 to 32768
[  170.627764][ T6966] XFS (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  170.630284][ T6966] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  170.632485][ T6966] XFS (loop0): DAX and reflink cannot be used together!
[  170.696383][ T6982] loop2: detected capacity change from 0 to 2048
[  170.712687][ T6989] loop4: detected capacity change from 0 to 1024
[  170.798084][ T6982] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  170.816335][ T6989] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[  170.819410][ T6989] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (25054!=20869)
[  170.821965][ T6989] EXT4-fs (loop4): filesystem has both journal inode and journal device!
[  171.934514][ T6996] ubi0: attaching mtd0
[  171.937334][ T6996] ubi0: scanning is finished
[  171.938547][ T6996] ubi0: empty MTD device detected
[  172.068246][ T7001] loop4: detected capacity change from 0 to 1024
[  172.072586][ T6996] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  172.075324][ T6996] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  172.077348][ T6996] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  172.085166][ T6996] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  172.087547][ T6996] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  172.089439][ T6996] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  172.098990][ T6996] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 472728083
[  172.101805][ T6996] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  172.108113][ T7002] ubi0: background thread "ubi_bgt0d" started, PID 7002
[  172.189570][ T5783] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  172.214692][ T5783] hfsplus: b-tree write err: -5, ino 4
[  172.310137][ T7014] udc-core: couldn't find an available UDC or it's busy
[  172.312052][ T7014] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  172.334357][ T6756] libceph: connect (1)[c::]:6789 error -101
[  172.336559][ T6756] libceph: mon0 (1)[c::]:6789 connect error
[  172.341796][ T7018] netlink: 'syz-executor.2': attribute type 21 has an invalid length.
[  172.349377][ T7018] netlink: 'syz-executor.2': attribute type 20 has an invalid length.
[  172.356830][ T6756] libceph: connect (1)[c::]:6789 error -101
[  172.358515][ T6756] libceph: mon0 (1)[c::]:6789 connect error
[  172.361279][ T7018] IPv6: NLM_F_CREATE should be specified when creating new route
[  172.369812][ T7018] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  172.371741][ T7018] IPv6: NLM_F_CREATE should be set when creating new route
[  172.373748][ T7018] IPv6: NLM_F_CREATE should be set when creating new route
[  172.375799][ T7018] IPv6: NLM_F_CREATE should be set when creating new route
[  172.404548][ T7012] ceph: No mds server is up or the cluster is laggy
[  172.565270][ T7022] loop2: detected capacity change from 0 to 2048
[  172.585843][ T7022] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  172.683632][    T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  172.684782][ T5783] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  173.398599][ T7046] ubi: mtd0 is already attached to ubi0
[  174.751075][ T7051] loop4: detected capacity change from 0 to 1024
[  174.855437][  T396] hfsplus: b-tree write err: -5, ino 4
[  174.866069][ T6756] libceph: connect (1)[c::]:6789 error -101
[  174.870694][ T6756] libceph: mon0 (1)[c::]:6789 connect error
[  174.884708][ T6756] libceph: connect (1)[c::]:6789 error -101
[  174.886446][ T6756] libceph: mon0 (1)[c::]:6789 connect error
[  174.936714][ T7059] ceph: No mds server is up or the cluster is laggy
[  175.062881][ T7071] udc-core: couldn't find an available UDC or it's busy
[  175.078045][ T7071] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  175.091770][ T7069] loop4: detected capacity change from 0 to 2048
[  175.152335][   T26] audit: type=1326 audit(175.090:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6cbe0e8 code=0x7ffc0000
[  175.158617][   T26] audit: type=1326 audit(175.100:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb6cbe0e8 code=0x7ffc0000
[  175.180250][   T26] audit: type=1326 audit(175.100:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6cbe0e8 code=0x7ffc0000
[  175.202590][   T26] audit: type=1326 audit(175.100:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb6cbe0e8 code=0x7ffc0000
[  175.222827][   T26] audit: type=1326 audit(175.100:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6cbe0e8 code=0x7ffc0000
[  175.238177][ T7069] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  175.256846][   T26] audit: type=1326 audit(175.100:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c00000b7 syscall=134 compat=0 ip=0xffffb6cbe0e8 code=0x7ffc0000
[  175.282481][   T26] audit: type=1326 audit(175.100:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6cbe0e8 code=0x7ffc0000
[  175.577057][ T7079] ubi: mtd0 is already attached to ubi0
[  176.514801][ T7088] netlink: 'syz-executor.0': attribute type 30 has an invalid length.
[  176.560781][ T7091] udc-core: couldn't find an available UDC or it's busy
[  176.562669][ T7091] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  176.966546][ T7098] udc-core: couldn't find an available UDC or it's busy
[  176.968804][ T7098] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  177.025605][ T7100] loop4: detected capacity change from 0 to 1024
[  177.140386][  T396] hfsplus: b-tree write err: -5, ino 4
[  177.268597][ T7102] udc-core: couldn't find an available UDC or it's busy
[  177.270535][ T7102] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  177.360258][ T7104] ceph: No mds server is up or the cluster is laggy
[  177.552867][ T7111] loop3: detected capacity change from 0 to 2048
[  177.712284][ T7111] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  178.854156][ T7122] ubi: mtd0 is already attached to ubi0
[  179.794173][ T7132] udc-core: couldn't find an available UDC or it's busy
[  179.798320][ T7132] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  179.896011][ T7136] udc-core: couldn't find an available UDC or it's busy
[  179.898012][ T7136] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  179.919108][ T7138] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  180.294491][ T4041] libceph: connect (1)[c::]:6789 error -101
[  180.296368][ T4041] libceph: mon0 (1)[c::]:6789 connect error
[  180.298407][ T4041] libceph: connect (1)[c::]:6789 error -101
[  180.300255][ T4041] libceph: mon0 (1)[c::]:6789 connect error
[  180.391280][ T7149] ceph: No mds server is up or the cluster is laggy
[  180.997727][ T7179] device pim6reg1 entered promiscuous mode
[  182.160235][ T7221] device pim6reg1 entered promiscuous mode
[  182.293658][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  183.013662][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  183.016207][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  183.232961][ T7274] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  183.422511][ T7266] loop3: detected capacity change from 0 to 128
[  183.485256][ T7266] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  183.535969][ T7286] fuse: Unknown parameter '00000000000000000000'
[  183.539203][  T144] Bluetooth: Wrong link type (-57)
[  183.671810][ T7292] loop0: detected capacity change from 0 to 16
[  183.714256][ T7292] erofs: Unknown parameter '����t�5�;�
�}	�7_c��������N�����"L������a�m)p�������'6~�'
[  183.722987][ T7270] loop2: detected capacity change from 0 to 32768
[  183.828325][ T7270] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (7270)
[  183.847735][ T7270] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm
[  183.857317][ T7270] BTRFS info (device loop2): setting nodatasum
[  183.863963][ T7297] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  183.869765][ T7270] BTRFS info (device loop2): force zlib compression, level 3
[  183.876414][ T7270] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  183.887318][ T7270] BTRFS info (device loop2): use lzo compression, level 0
[  183.891527][ T7270] BTRFS info (device loop2): turning on flush-on-commit
[  183.904667][ T7270] BTRFS info (device loop2): enabling auto defrag
[  183.906479][ T7270] BTRFS info (device loop2): using free space tree
[  183.908201][ T7270] BTRFS info (device loop2): has skinny extents
[  184.099264][ T7270] BTRFS info (device loop2): enabling ssd optimizations
[  184.836475][ T7344] device batadv0 entered promiscuous mode
[  185.691454][ T7383] device batadv0 entered promiscuous mode
[  187.433968][ T7395] sched: RT throttling activated
[  188.331491][ T4041] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  188.333746][ T4041] Bluetooth: hci1: Injecting HCI hardware error event
[  188.336388][ T3997] Bluetooth: hci1: hardware error 0x00
[  188.386588][ T7401] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  188.400853][ T7409] udc-core: couldn't find an available UDC or it's busy
[  188.402789][ T7409] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  188.412769][ T7411] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.0'.
[  188.420538][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  188.436221][ T7401] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  189.404003][   T13] Bluetooth: hci4: command 0x2016 tx timeout
[  191.063098][ T7454] loop3: detected capacity change from 0 to 40427
[  191.264638][ T7454] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  191.266742][ T7454] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  191.296002][ T7454] F2FS-fs (loop3): invalid crc value
[  191.365744][ T7454] F2FS-fs (loop3): Found nat_bits in checkpoint
[  191.399231][ T7454] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  191.401051][ T7454] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  191.484435][ T4040] Bluetooth: hci4: command 0x0406 tx timeout
[  191.736300][ T7482] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'.
[  193.133783][ T2051] ieee802154 phy0 wpan0: encryption failed: -22
[  193.135507][ T2051] ieee802154 phy1 wpan1: encryption failed: -22
[  194.158516][ T4040] Bluetooth: hci4: command 0x0406 tx timeout
[  194.365354][ T7522] loop0: detected capacity change from 0 to 256
[  194.679668][   T26] audit: type=1326 audit(194.620:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7538 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d3120e8 code=0x0
[  194.802702][ T7511] loop4: detected capacity change from 0 to 32768
[  194.889451][ T7511] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (7511)
[  195.903340][ T7511] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  195.910615][ T7511] BTRFS info (device loop4): force zlib compression, level 3
[  195.924935][ T7511] BTRFS info (device loop4): force clearing of disk cache
[  195.927082][ T7511] BTRFS info (device loop4): setting nodatasum
[  195.928733][ T7511] BTRFS info (device loop4): allowing degraded mounts
[  195.955557][ T7511] BTRFS info (device loop4): enabling disk space caching
[  195.968931][ T7511] BTRFS info (device loop4): disk space caching is enabled
[  195.970905][ T7511] BTRFS info (device loop4): has skinny extents
[  196.229302][ T7511] BTRFS info (device loop4): clearing free space tree
[  196.231145][ T7511] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  196.234729][ T7511] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  196.266576][ T7511] BTRFS info (device loop4): balance: start -s
[  196.270222][ T7511] BTRFS info (device loop4): relocating block group 1048576 flags system
[  196.343273][ T7511] BTRFS info (device loop4): balance: ended with status: 0
[  196.431906][ T7581] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  196.465359][ T7581] device macvlan2 entered promiscuous mode
[  196.516484][ T7581] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  197.692735][ T7599] input: syz1 as /devices/virtual/input/input10
[  199.031388][ T6752] Bluetooth: hci5: command 0x1003 tx timeout
[  199.034145][ T4001] Bluetooth: hci5: sending frame failed (-49)
[  199.787830][ T7616] loop4: detected capacity change from 0 to 32768
[  199.853406][ T7616] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (7616)
[  199.909188][ T7616] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  199.911715][ T7616] BTRFS info (device loop4): force zlib compression, level 3
[  199.929098][ T7616] BTRFS info (device loop4): force clearing of disk cache
[  199.930903][ T7616] BTRFS info (device loop4): setting nodatasum
[  199.932533][ T7616] BTRFS info (device loop4): allowing degraded mounts
[  199.962114][ T7616] BTRFS info (device loop4): enabling disk space caching
[  199.972274][ T7616] BTRFS info (device loop4): disk space caching is enabled
[  199.977011][ T7616] BTRFS info (device loop4): has skinny extents
[  200.349810][ T7616] BTRFS info (device loop4): clearing free space tree
[  200.351789][ T7616] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  200.355719][ T7616] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  200.498585][ T7616] BTRFS info (device loop4): balance: start -s
[  200.501363][ T7616] BTRFS info (device loop4): relocating block group 1048576 flags system
[  200.572190][ T7616] BTRFS info (device loop4): balance: ended with status: 0
[  201.099454][ T6752] Bluetooth: hci5: command 0x1001 tx timeout
[  201.101665][ T3997] Bluetooth: hci5: sending frame failed (-49)
[  203.747907][ T1851] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  203.752994][ T6749] Bluetooth: hci5: command 0x1009 tx timeout
[  203.861543][ T7671] loop1: detected capacity change from 0 to 4096
[  204.072576][   T26] audit: type=1326 audit(204.010:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7669 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff94b010e8 code=0x0
[  204.684425][ T5799] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  204.694550][ T5799] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  204.872884][ T7689] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  205.127777][ T7689] team0: Port device wlan1 added
[  205.765461][ T7686] loop4: detected capacity change from 0 to 32768
[  205.852276][ T7686] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (7686)
[  205.891121][ T7686] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  205.943504][ T7686] BTRFS info (device loop4): force zlib compression, level 3
[  205.945731][ T7686] BTRFS info (device loop4): force clearing of disk cache
[  205.959251][ T7686] BTRFS info (device loop4): setting nodatasum
[  205.968783][ T7686] BTRFS info (device loop4): allowing degraded mounts
[  205.970678][ T7686] BTRFS info (device loop4): enabling disk space caching
[  205.972513][ T7686] BTRFS info (device loop4): disk space caching is enabled
[  206.013478][ T7686] BTRFS info (device loop4): has skinny extents
[  207.250908][ T7723] netlink: 'syz-executor.1': attribute type 11 has an invalid length.
[  207.296815][ T7686] BTRFS info (device loop4): clearing free space tree
[  207.299056][ T7686] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  207.301713][ T7686] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  207.315983][ T7730] ptrace attach of "/root/syz-executor.2 exec"[4587] was attempted by "/root/syz-executor.2 exec"[7730]
[  207.410308][ T7686] BTRFS info (device loop4): balance: start -s
[  207.420380][ T7686] BTRFS info (device loop4): relocating block group 1048576 flags system
[  207.440811][ T7686] BTRFS info (device loop4): balance: ended with status: 0
[  207.463919][ T7736] udc-core: couldn't find an available UDC or it's busy
[  207.465820][ T7736] misc raw-gadget: fail, usb_gadget_probe_driver returned -19
[  207.962700][ T7747] netlink: 'syz-executor.4': attribute type 10 has an invalid length.
[  208.027158][ T7747] 
[  208.028017][ T7747] ======================================================
[  208.029988][ T7747] WARNING: possible circular locking dependency detected
[  208.031957][ T7747] 5.15.161-syzkaller #0 Not tainted
[  208.033339][ T7747] ------------------------------------------------------
[  208.035302][ T7747] syz-executor.4/7747 is trying to acquire lock:
[  208.036989][ T7747] ffff0000d86c8628 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_open+0x13c/0x1e0
[  208.039874][ T7747] 
[  208.039874][ T7747] but task is already holding lock:
[  208.041692][ T7747] ffff0000ce37cd00 (team->team_lock_key#3){+.+.}-{3:3}, at: team_add_slave+0xa8/0x1fb0
[  208.044081][ T7747] 
[  208.044081][ T7747] which lock already depends on the new lock.
[  208.044081][ T7747] 
[  208.046833][ T7747] 
[  208.046833][ T7747] the existing dependency chain (in reverse order) is:
[  208.049327][ T7747] 
[  208.049327][ T7747] -> #1 (team->team_lock_key#3){+.+.}-{3:3}:
[  208.051593][ T7747]        __mutex_lock_common+0x194/0x2154
[  208.053220][ T7747]        mutex_lock_nested+0xa4/0xf8
[  208.054645][ T7747]        team_port_change_check+0x5c/0x230
[  208.056261][ T7747]        team_device_event+0x1bc/0x4f4
[  208.057849][ T7747]        raw_notifier_call_chain+0xd4/0x164
[  208.059496][ T7747]        dev_close_many+0x2fc/0x468
[  208.060999][ T7747]        unregister_netdevice_many+0x408/0x189c
[  208.062692][ T7747]        macvlan_device_event+0x3d0/0x830
[  208.064260][ T7747]        raw_notifier_call_chain+0xd4/0x164
[  208.065843][ T7747]        unregister_netdevice_many+0xec4/0x189c
[  208.067536][ T7747]        unregister_netdevice_queue+0x2d0/0x31c
[  208.069285][ T7747]        _cfg80211_unregister_wdev+0x168/0x4a8
[  208.070952][ T7747]        cfg80211_unregister_wdev+0x24/0x34
[  208.072592][ T7747]        ieee80211_if_remove+0x1a4/0x294
[  208.074156][ T7747]        ieee80211_del_iface+0x20/0x34
[  208.075596][ T7747]        nl80211_del_interface+0x1dc/0x66c
[  208.077231][ T7747]        genl_rcv_msg+0xc18/0x1018
[  208.078615][ T7747]        netlink_rcv_skb+0x20c/0x3b8
[  208.080107][ T7747]        genl_rcv+0x38/0x50
[  208.081263][ T7747]        netlink_unicast+0x664/0x938
[  208.082803][ T7747]        netlink_sendmsg+0x844/0xb38
[  208.084344][ T7747]        ____sys_sendmsg+0x584/0x870
[  208.085829][ T7747]        ___sys_sendmsg+0x214/0x294
[  208.087255][ T7747]        __arm64_sys_sendmsg+0x1ac/0x25c
[  208.088802][ T7747]        invoke_syscall+0x98/0x2b8
[  208.090139][ T7747]        el0_svc_common+0x138/0x258
[  208.091585][ T7747]        do_el0_svc+0x58/0x14c
[  208.092803][ T7747]        el0_svc+0x7c/0x1f0
[  208.093995][ T7747]        el0t_64_sync_handler+0x84/0xe4
[  208.095497][ T7747]        el0t_64_sync+0x1a0/0x1a4
[  208.096900][ T7747] 
[  208.096900][ T7747] -> #0 (&rdev->wiphy.mtx){+.+.}-{3:3}:
[  208.099031][ T7747]        __lock_acquire+0x32d4/0x7638
[  208.100528][ T7747]        lock_acquire+0x240/0x77c
[  208.101914][ T7747]        __mutex_lock_common+0x194/0x2154
[  208.103491][ T7747]        mutex_lock_nested+0xa4/0xf8
[  208.104924][ T7747]        ieee80211_open+0x13c/0x1e0
[  208.106321][ T7747]        __dev_open+0x324/0x514
[  208.107711][ T7747]        dev_open+0xa8/0x23c
[  208.108954][ T7747]        team_add_slave+0x6e4/0x1fb0
[  208.110435][ T7747]        do_setlink+0xbe4/0x3164
[  208.111722][ T7747]        rtnl_newlink+0x12fc/0x1af4
[  208.113118][ T7747]        rtnetlink_rcv_msg+0xa74/0xdac
[  208.114640][ T7747]        netlink_rcv_skb+0x20c/0x3b8
[  208.116103][ T7747]        rtnetlink_rcv+0x28/0x38
[  208.117429][ T7747]        netlink_unicast+0x664/0x938
[  208.118881][ T7747]        netlink_sendmsg+0x844/0xb38
[  208.120380][ T7747]        ____sys_sendmsg+0x584/0x870
[  208.121767][ T7747]        ___sys_sendmsg+0x214/0x294
[  208.123256][ T7747]        __arm64_sys_sendmsg+0x1ac/0x25c
[  208.124845][ T7747]        invoke_syscall+0x98/0x2b8
[  208.126235][ T7747]        el0_svc_common+0x138/0x258
[  208.127688][ T7747]        do_el0_svc+0x58/0x14c
[  208.129167][ T7747]        el0_svc+0x7c/0x1f0
[  208.130452][ T7747]        el0t_64_sync_handler+0x84/0xe4
[  208.132022][ T7747]        el0t_64_sync+0x1a0/0x1a4
[  208.133403][ T7747] 
[  208.133403][ T7747] other info that might help us debug this:
[  208.133403][ T7747] 
[  208.136506][ T7747]  Possible unsafe locking scenario:
[  208.136506][ T7747] 
[  208.138574][ T7747]        CPU0                    CPU1
[  208.140101][ T7747]        ----                    ----
[  208.141579][ T7747]   lock(team->team_lock_key#3);
[  208.142937][ T7747]                                lock(&rdev->wiphy.mtx);
[  208.144869][ T7747]                                lock(team->team_lock_key#3);
[  208.146948][ T7747]   lock(&rdev->wiphy.mtx);
[  208.148240][ T7747] 
[  208.148240][ T7747]  *** DEADLOCK ***
[  208.148240][ T7747] 
[  208.150563][ T7747] 2 locks held by syz-executor.4/7747:
[  208.152177][ T7747]  #0: ffff800016a47328 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0xa2c/0xdac
[  208.154727][ T7747]  #1: ffff0000ce37cd00 (team->team_lock_key#3){+.+.}-{3:3}, at: team_add_slave+0xa8/0x1fb0
[  208.157582][ T7747] 
[  208.157582][ T7747] stack backtrace:
[  208.159215][ T7747] CPU: 0 PID: 7747 Comm: syz-executor.4 Not tainted 5.15.161-syzkaller #0
[  208.161467][ T7747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  208.164004][ T7747] Call trace:
[  208.164849][ T7747]  dump_backtrace+0x0/0x530
[  208.166042][ T7747]  show_stack+0x2c/0x3c
[  208.167140][ T7747]  dump_stack_lvl+0x108/0x170
[  208.168425][ T7747]  dump_stack+0x1c/0x58
[  208.169544][ T7747]  print_circular_bug+0x150/0x1b8
[  208.170964][ T7747]  check_noncircular+0x2cc/0x378
[  208.172317][ T7747]  __lock_acquire+0x32d4/0x7638
[  208.173624][ T7747]  lock_acquire+0x240/0x77c
[  208.174868][ T7747]  __mutex_lock_common+0x194/0x2154
[  208.176264][ T7747]  mutex_lock_nested+0xa4/0xf8
[  208.177535][ T7747]  ieee80211_open+0x13c/0x1e0
[  208.178849][ T7747]  __dev_open+0x324/0x514
[  208.180030][ T7747]  dev_open+0xa8/0x23c
[  208.181076][ T7747]  team_add_slave+0x6e4/0x1fb0
[  208.182328][ T7747]  do_setlink+0xbe4/0x3164
[  208.183498][ T7747]  rtnl_newlink+0x12fc/0x1af4
[  208.184835][ T7747]  rtnetlink_rcv_msg+0xa74/0xdac
[  208.186294][ T7747]  netlink_rcv_skb+0x20c/0x3b8
[  208.187651][ T7747]  rtnetlink_rcv+0x28/0x38
[  208.188901][ T7747]  netlink_unicast+0x664/0x938
[  208.190239][ T7747]  netlink_sendmsg+0x844/0xb38
[  208.191582][ T7747]  ____sys_sendmsg+0x584/0x870
[  208.192909][ T7747]  ___sys_sendmsg+0x214/0x294
[  208.194206][ T7747]  __arm64_sys_sendmsg+0x1ac/0x25c
[  208.195618][ T7747]  invoke_syscall+0x98/0x2b8
[  208.196868][ T7747]  el0_svc_common+0x138/0x258
[  208.198257][ T7747]  do_el0_svc+0x58/0x14c
[  208.199482][ T7747]  el0_svc+0x7c/0x1f0
[  208.200590][ T7747]  el0t_64_sync_handler+0x84/0xe4
[  208.201969][ T7747]  el0t_64_sync+0x1a0/0x1a4
1970/01/01 00:03:28 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  208.253087][ T7747] team0: Port device wlan1 added