last executing test programs:

1m40.194348292s ago: executing program 0 (id=1):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe, &(0x7f0000000700)={[{@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x7fffffff}}, {@debug}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000cc0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ftruncate(r1, 0x2000009)
write$cgroup_int(r0, &(0x7f00000000c0), 0x12)
write$binfmt_script(r1, &(0x7f0000000140), 0xfcb8)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001, 0x0, 0x10000})

1m39.030265626s ago: executing program 0 (id=22):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x18)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})

1m38.837304673s ago: executing program 0 (id=27):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4})
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={0x0})
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4, 0xc, 0x8, 0x100, 0x80000001, 0x5, 0x5, 0xfffffff9, 0x80000000})
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r3=>0x0], 0x0, 0x0, 0xfffffd52, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r3, 0x1, 0xffff, 0xa, 0x1ff, 0x1})

1m37.94176428s ago: executing program 0 (id=30):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x845, &(0x7f0000000400)={[{@shortname_winnt}, {@shortname_winnt}, {@shortname_winnt}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@discard}, {@shortname_mixed}, {@shortname_mixed}, {@uni_xlate}, {@rodir}, {@shortname_win95}, {@fat=@dos1xfloppy}, {@utf8}]}, 0x0, 0x274, &(0x7f0000000780)="$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")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x400, 0x0, 0x0, 0x0, &(0x7f0000000000))
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c})

1m37.726412837s ago: executing program 0 (id=37):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f00000000c0), 0x12)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001, 0x0, 0x10000})

1m34.652057397s ago: executing program 0 (id=55):
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket(0xa, 0x2, 0x3a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = syz_io_uring_setup(0x7de, &(0x7f0000000240)={0x0, 0x49cb, 0x10100, 0x1, 0x193}, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000540)=<r2=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

1m34.457268405s ago: executing program 32 (id=55):
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket(0xa, 0x2, 0x3a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = syz_io_uring_setup(0x7de, &(0x7f0000000240)={0x0, 0x49cb, 0x10100, 0x1, 0x193}, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000540)=<r2=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

11.711612577s ago: executing program 2 (id=503):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00')
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000001040)={0xe, {"a2e3ad21ed0d52f90b9b6e0987f70e06d038e7ff7fc6e5539b3248298b089b0708346d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d1780700523c921b1b9b31070d075d0936cd3b78130daa61f94b61404d64aec1b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c088215ec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6f44ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d208001349b41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2a15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee53259289d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c1980778efa5ea567b7b7430acc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a0700d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8440daaa69bf5c8f4350aeae9ca1207e76061b28f27da19acc7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211c7847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7beddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e781171e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b906ce2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf3f2aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7ae288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289d8523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c78e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e7c7b2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df06720ba2b26bbfcc807c8aabb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db38b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1040}}, 0x1006)

9.100943218s ago: executing program 5 (id=528):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)

7.989105615s ago: executing program 2 (id=532):
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000002, 0x1c3082)
syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x288}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0})
syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501)

7.988798859s ago: executing program 5 (id=533):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
getpid()
socket$inet(0x2, 0x6b627b6ebc1ec976, 0xffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xff58a}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0x60}}, 0x4000000)

7.814659559s ago: executing program 2 (id=535):
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x400}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x1, 0x1, 0x0, 0x6}, 0x20)

7.725905141s ago: executing program 2 (id=537):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r2, 0x400454cd, 0x308)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

6.390540791s ago: executing program 5 (id=544):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='macvlan1\x00', 0x10)
sendto$inet(r0, &(0x7f0000000200), 0x0, 0x5, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x0)

6.339847678s ago: executing program 1 (id=545):
syz_open_dev$usbmon(&(0x7f0000000000), 0x80000002, 0x1c3082)
r0 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x288}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r0, 0x3516, 0x0, 0x4, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501)

6.191463838s ago: executing program 1 (id=547):
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x1, 0x1, 0x0, 0x6}, 0x20)

6.122407698s ago: executing program 1 (id=548):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000780)=ANY=[@ANYBLOB='iocharset=cp850,fmask=000000 0000000000000240,errors=remount-ro,iocharset=cp936,iocharset=iso8859-14,dmask=00000000000000000000000,gid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000001,errors=continue,iocharset=iso8859-2,\x00'], 0x1, 0x152f, &(0x7f00000037c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18)
r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', <r7=>0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r7, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}})

4.733483948s ago: executing program 5 (id=549):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000600)={[{@treelog}, {@nodatacow}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@space_cache_v1}, {@space_cache_v1}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@commit={'commit', 0x3d, 0x3}}, {@ssd}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x38, 0x36, 0x38, 0x35, 0x65, 0x25]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734fVCUoXQKNkkNY6beL22gUQtVdaUqhEpzbqhoCqi2NhrsnjBjm1KjEJkbCIaIShtkJIPRRhFUc0HqBWISAoIFymOUHlEVEUBBAqtIQoipSQRaYIUqtl7z+ydc3cefqzx0t9P8s6Z+Z/nnYfn3HvnXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/h4Feu+dtm8Ud/e96zL1w8fsWetRe/et15pz4ZwsTM4x1ZuKP/xtvHf373uffseWD1HfcdPv+jvXm5PB4Gqn868zs3xFoPLw7h/o4QutPAisEs0JPfH4z1vW8whFPCbKBWYrI/K5E2HL7fF8K+MBuoVfW9vhAGC4ELn3rk4Zuridv6QlgaQqikbTxfydroSwNn9GaB/jSwtTsL/OqtTC3w3c4sAMcsvhlqL/oDE/UZhucu1+D113PcOvb2SofXFRPDjfP9bO08d6qgN31g4pietlJ1zIvS2+Ogd9sCeLeVtvOtnrbiF6n8G8pbs6FK6Nw0uXnD1dM74yOdYXS0q1FN8/Q8P/P6lzYeSXrBvA5jB4aPy+vwlieW3t21/ILH71ux9OX9H9v7yrF280eFTVpMz7dKyF9zC+Z5jMZ9niyAt1/pW9KIL10hhM2f/73PNIuX5v/Dzef/8eUcbzvrcsda3xzK5ubxkcGYeG0om5sDAADAgrEQ9ppuHX3oE83qK83/R9o7/h8P+eeT+Wy0B0MYn0nsXRLCaTOPZ4G7YnOXLQnhgzOpifrA2iRwMIT3ziSW16pKSiyKJUaSwE+G8sB4EjgUAxNJ4FsxcGsSuCEGDiSBjTFwMAmcGwNhqn4cvz+Uj6PtQF8MrM824oF4FsIvhmJrybZ6rlYVAADAcZLPDnvq7xbOdTjWDHF6eaCvVYZ4BnbDDJWkhnQGW5tWNayhu1UNna1qqI17d/Phl2ruaFVz6TSMjvoMt//ybz4bmijN/8eaz/8rc3Sko3T8P4R1M39j7s48Ml2Lr5+oywAAAAAcg4H/ffGbzeKl+f94e+f/x30iXYXM4bG4G2LLkhDG6gNZtX9YDmRHvQfyAAAAACwEtePxtWPhU/ltdop2Op8u5584wvzxwP/4nPl7Dz64vll/S/P/ifbO/++vv806cSj24mtLQlhUCPwg9rIamDESAz/+ZH0gH/+huAFuilXlJybUqropllgfA2NJYF+jEj+slTitPpA/WbXG99bGMZWXKAQAAADghIu7A+Jx+Xj+/4d+s/qaZuVK8//1R3b+/8w8uHR6//RACCu7Q+hKfxjwWH+2MGAMDHbkiYf6s7q60qqu7w/hnOrA0qpezNf/707XGHyqL6sqBk770P7Xz6gmvtkXwspi4OnP3XlWNbEzCdQa/8u+ED5QHW3a+HcWZY33pI1/fVEI7y8EalVdtiiEamO9aVWPVPLrGKRV/XMlhHcVArWqzq6EsCsAsEDF/0o3FR/csevaLRumpye3z2Mi7sPvC5unpidHN26d3lRp0KdNSZ/rljG6vjymdq9881y+RNFF964bbCdd+53gWLGtfD9+6cTB/H78LtQzM87VPXV316RD/siHy02EwjepRkPunOch9xcrmX0SS/XH/L1hICy6esfk9tEvbti5c/uq7G+72Vdnf+NhpmxbrUq3Vf9cfWvj5dFwtazE0W6rZcVKVu68ctvKHbuuXTF15YbLJy+fvGrV2avHzhxbM/bxM1dWRzWW/W0x1GVzVZ0M9a072xzXcRzq6d2FSk7Ep4aEhMRCS2wdWNb0/+TS/H9b8/l//NSJn/z5+gyNjv8Px8P82eOzh/nXx8C+do//Dzc6ml87MWAkCeyOgd0O8wMAAPDOECf5cW9m3Cv90+XfeblZudL8f3d7v/8/Tuv/15auP7/RMv/LY4mxRuv/p8v819b/391o/f90mf/a+v/73ob1/6+uBZJN8gvr/wMAAO8EJ279/5bL+6cXCChlaLm8f3qBgFKGlsv4t3uBgCNe///5//yr/w5NlOb/t7Y3/7dwPwAAAJw8vvxn1/xOs3hp/r+vvfn/iV//LzQ6/3+kUWCi0cKA1v8DAABggWq0/t/wjf2XNitXmv8faG/+H0+76KzLHWt9cyhb0y6ka9q9NlT7yQAAAAAsDJ1hdLSnzbx1K6OuPfo2n8mXAm2WLnrxTw4f2fn/B9ub/9f9LuOWJ5be3bX8gsffvG/F0pf3f2zvK7PH/wEAAID50+5+CQAAAAAAAAAAAAAA4O334n/sWdMsXvr9f1g383ij3//H6/7F3xe8uy53rLX1+n/5/Qs/fc+umSULHxsK4cPFwJY9W04J+bX5lxUDD1+y/D3VxJ60xIMvnPtSNXFpGvjUilPfqCbOSQLr4yKJ700D8aqKbyxOAnF5xX9PA3F7HEgDvXngq4uzcXSk2+qng9m26ki31bODISwpBGrb6v7BrI2OdIC3JYHaAL+QBuIA/zwPdKa9umcg61UMDMaidwxkvQIA4KQVvwX2hM1T05Nj8St8vD29u/42qluy7PpytR1tNv9cvjTZRfeuG2wn3ZV+F5291nhPqFSHsKr0dbWYpWNmlMenlhab7t0NhtxqtbfOBuVSR7rpehuPqC8b0ejGrdObeloOfE3rLKu7W2ZZVZrsFLN0zmzSNmppoy9tjKjNbdNGl+P9zjA62pXk+oMYHA51Wr0i2v29fnGdv0avgmKeqw7v/VWz+krz/+H25v+V4rjeyC8GsDteWe/vlljmHwAAAObXV9f++hvx32dvfPTpZnlL8/+R9ub/cQ9Wfig429txMF7/f++SEGYurT+cBe6KzV22JIQPzqQmYonsgvrnxxJjWeCuuMNkeSyxfqK+qkUxcCAJ/GQoDxxMAodiIN9LsT/ku3L+fiiEs2ZS6+pLbIslhpPAZ2JgJAmMxsBYElgcA+NJ4NXFeWAiCfxbDISp+m117+J8WwEAAByJfJ7VU383pPO8A92tMnS0ytDfKkNnqwyVVhkajSLe/3bM0JOcvNJRyNST1tqX1FLKEC+Gf8T9KmUIP6zPmRYsNR3PP6idb9BRn+GBT3RXQhOl+f9Ye/P//vrbrPVDcf4/e/2/LPCD2L2vxVPHR2Lgx5+sD+Q7Bg7Fye5Ntaom8hL5pP2mWGI8BkaSwLYYGE8C69flgX3vqQ/kM+1a43trjU/lJQoBAAAAOOHiDoK4mybO/+/Y8ZWBZuVK8//x9ub/sb2BYmM3xFoPLw7h/o7Z3tQCKwazQNyPMRh/Hv++wRBOKezgqJWY7M9K9CYNh+/3Zb9Q702r+l5f9uODeP/Cpx55+OZq4ra+EJYW9r7U2ni+krXRlwbO6M0C/Wlga3cWiHt+aoHvdmYBOGa1vYLxBZWf6lIzPHe5Bq+/d8o1QdPhlfaBzpFvrt9czZfSDtd8n2rNkT1tTfffctyU3h4HvdsW4rtt2Lut+EUq/4by1myoEjo3TW7ecPX0zvhI8ZesJfP0PBd/pdpO+ji8DncffW9bq6QdGEs+PsbmLjf367AjVnfLE0vv7lp+weP3rVj68v6P7X2l7W40EH8o/Mh1/zr4o8LmnW+VkL/mFtznyYTPk4X438CIpy2EsO7Vr9/ULF6a/0+0N//vTm5n/DpuzB1LQvhIYeM+Fjf/Hy/JPgcLgexT8l3lQHbI/b+GGn5yAgAAwPFW291R218wld9mJ4Sn8+Ry/okjzB/3V4zPmb/dfvf/9SVLm8VL8//1zef/i5JuOv7v+D/zxPH/OZ3su6IXpQ/sPqZd0aXqmBeO/8/pZH+3Of4/J8f/Hf+fi+P/LTj+P6eT/WkrfUva5ktXCOHlP3ro2Wbx0vx/W3vzf+v/zb1oX239v/WN1v/b1mj9v93W/wMAAOZVg4Xm0nleafW+UoZ09b5ShpYLBLZcYtD6f0e8/t9Lpz//m9BEaf6/u735f3w5DBRbXyjr/42sa1DVrTGwzcKAAAAAnIwa7SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg7fXAP/zPpmbxR3973rMvXDx+xZ61F7963XmnPhnC1MzjHVm4o//G28d/fve59+x5YPUd9x0+/6OVvFxPfvu7dbljrW8OhbCv8MhgTLw2VL0zG7jw0/fs6q4mHhsK4cPFwJY9W06pJr41FMKyYuDhS5a/p5rYk5Z48IVzX6omLk0Dn1px6hvVxDl5oCPt7j8uzrrbkXb35sUhLCkEat29YnF9VbU2/jQPdKZt/NNg1kYMDMai3xjM2oiB6VhialEIK7tD6EqrerSSVdWVVvUvlayqrrSqL1dCOCeE0J1W9UJvVlV3OvIne7OqYuC0D+1//YxqYl9vCCuLgac/d+dZ1cQXkkCt8b/oDeED1ZdM2vi3e7LGe9LGb+sJ4f0hhN60xC+7sxK9aYkXu0N4VyFQa/zz3SHsCrwjxA+fuk+0Hbuu3bJhenpy+zwmevO2+sLmqenJ0Y1bpzdVkj410lFIv3X90Y/9ude/tLF6e9G96wbbSXfn5Xpmury6p+7umpO997Ff/cVKZp+PUv0xf28YCIuu3jG5ffSLG3bu3L4q+9tu9tXZ3648mm2rVQtlWy0rVrJy55XbVu7Yde2KqSs3XD55+eRVq85ePXbm2Jqxj5+5sjqqsezv8RjqnSd+qKd3Fyo5ER8AEhISCy3RWffpNnayf5CXvujPdrQnVGY+oEvTimKWjplRHo9Brz3KER/N95SWI1pVmjiUsqyeI8v19VnWlCYTs7X0ZVlmvteVJofFxjpnNmm83xlGR7sabYfh+rvFzfuzY9i8z+Sbrt00AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rcPo2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEsBAAD//+erI4o=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
pwritev2(r0, &(0x7f0000000440)=[{&(0x7f0000000380)="864795d47c5c5dc1a8bed2f5ecf498a236", 0x11}], 0x1, 0xe7e, 0x7, 0x3)
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(>.', 0x0)
openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x20000080)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x0)

4.642780909s ago: executing program 1 (id=550):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)

4.52078723s ago: executing program 1 (id=551):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0xa0, 0x80, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
syz_mount_image$bcachefs(&(0x7f00000002c0), &(0x7f0000005900)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="86c7b60f3364c28d5d1532094f4b968e8c749cc47435e537f086a833d6cc92682221d755d56fcedf01f720dbb4ca4b7ebae0f9a31e1f5d9352dd5e12010105e5e29c463962894c1a6b71b275805a921dfe2d63a5f84eb6e6803c8d9f6dcab25471c7a880ddb333b5f1f5590e17178ed081e61ee9deb62a125e7d5e4c9324c793e94404a542fe7a3ac77a8d38f6064660c6c4aa743b2fa88b7cc79b0fd3ec58a70f420723034c22fcf31c180000000000000000"], 0x1, 0x5906, &(0x7f0000010b40)="$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")
lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

4.508954494s ago: executing program 2 (id=552):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400fb015c291d00090509"], 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$FUSE_NOTIFY_RESEND(r3, &(0x7f0000000240)={0x14}, 0x14)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000030c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000000)={0x3, 0x3, 0x0, 0x3, 0x6})

4.384097063s ago: executing program 3 (id=553):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d)
socket$inet6(0xa, 0x2, 0x3a)
clock_settime(0x1ed5d7403, &(0x7f0000000000))

4.181674323s ago: executing program 4 (id=554):
r0 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000001200)={0x60000010})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'})
shutdown(r1, 0x1)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f0000000580)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x8000, 0x3, 0x0, 0x81, "9a999054f06baf0c229d931312e96fa2ec283e515bdc44f16d381f06c35bc86aeae405a2888aa0f0ba29334601c28cb990eed8c6465ec8964685ff9ea679c67d4c763a94dc5b6d6e89965a84cce34657cfebe4e9ebf0378b02a1207f82402809fd6132ff6f6da93983f71a8717ecaf44e6cfe1dc4ac3ed190a4c32384d461c58"})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0)

3.786341201s ago: executing program 4 (id=555):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
getpid()
socket$inet(0x2, 0x6b627b6ebc1ec976, 0xffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xff58a}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0x60}}, 0x4000000)

3.464503492s ago: executing program 3 (id=556):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c5"}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x20004049}, 0x0)

2.219150065s ago: executing program 4 (id=557):
syz_open_dev$usbmon(&(0x7f0000000000), 0x80000002, 0x1c3082)
r0 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x288}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r0, 0x3516, 0x0, 0x4, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501)

2.083673506s ago: executing program 3 (id=558):
r0 = socket(0x10, 0x803, 0x0)
write(r0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4)
sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x200080c0, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000280)=""/72, 0x48}, {&(0x7f0000000600)=""/209, 0xd1}, {&(0x7f0000000dc0)=""/4100, 0x1004}, {&(0x7f0000001f80)=""/217, 0xd9}, {&(0x7f0000002080)=""/238, 0xee}, {&(0x7f00000000c0)=""/52, 0x34}, {&(0x7f0000000340)=""/98, 0x62}], 0x7}, 0x887a}, {{&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000440)=""/150, 0x96}, {&(0x7f0000000000)=""/37, 0x25}, {&(0x7f0000000500)=""/139, 0x8b}, {&(0x7f0000000700)=""/204, 0xcc}, {&(0x7f0000000800)=""/197, 0xc5}, {&(0x7f0000000200)=""/122, 0x7a}], 0x6}, 0x1}], 0x2, 0x20, 0x0)

2.018372864s ago: executing program 5 (id=559):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000780)=ANY=[@ANYBLOB='iocharset=cp850,fmask=000000 0000000000000240,errors=remount-ro,iocharset=cp936,iocharset=iso8859-14,dmask=00000000000000000000000,gid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000001,errors=continue,iocharset=iso8859-2,\x00'], 0x1, 0x152f, &(0x7f00000037c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18)
fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fchdir(0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', <r6=>0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r6, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}})

2.004140418s ago: executing program 4 (id=560):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700", @ANYRES32=r3], 0x5c}}, 0x40)
socket$packet(0x11, 0x2, 0x300)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000004c0)=0x14)

1.935403937s ago: executing program 3 (id=561):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c0012"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044)

1.655801636s ago: executing program 1 (id=562):
r0 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000001200)={0x60000010})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'})
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f0000000580)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x8000, 0x3, 0x0, 0x81, "9a999054f06baf0c229d931312e96fa2ec283e515bdc44f16d381f06c35bc86aeae405a2888aa0f0ba29334601c28cb990eed8c6465ec8964685ff9ea679c67d4c763a94dc5b6d6e89965a84cce34657cfebe4e9ebf0378b02a1207f82402809fd6132ff6f6da93983f71a8717ecaf44e6cfe1dc4ac3ed190a4c32384d461c58"})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0)

1.487135908s ago: executing program 3 (id=563):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4101}, 0x10)
r1 = socket$inet6(0xa, 0x3, 0x7)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@local, 0xfffffffc, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000500)={0x1, 0x1, 0x1000, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0})
sendmsg$nl_xfrm(r3, 0x0, 0x0)

1.30482129s ago: executing program 4 (id=564):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x169000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x2000c004)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0)

354.981902ms ago: executing program 5 (id=565):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0})
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

278.286086ms ago: executing program 4 (id=566):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d)
socket$inet6(0xa, 0x2, 0x3a)
clock_settime(0x1ed5d7403, &(0x7f0000000000))

209.778019ms ago: executing program 3 (id=567):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x10000, 0x0, 0x0, 0x0, 0x2, 0x1}})

0s ago: executing program 2 (id=568):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000780)=ANY=[@ANYBLOB='iocharset=cp850,fmask=000000 0000000000000240,errors=remount-ro,iocharset=cp936,iocharset=iso8859-14,dmask=00000000000000000000000,gid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000001,errors=continue,iocharset=iso8859-2,\x00'], 0x1, 0x152f, &(0x7f00000037c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18)
r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', <r7=>0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r7, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.188' (ED25519) to the list of known hosts.
[   42.673103][ T6477] cgroup: Unknown subsys name 'net'
[   42.895503][ T6477] cgroup: Unknown subsys name 'cpuset'
[   42.899075][ T6477] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   43.225562][ T6477] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SS
[   45.656445][ T6493] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.659724][ T6491] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.661491][ T6499] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.662617][ T6498] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.662842][ T6498] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.664693][ T6499] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.666006][ T6499] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.667299][ T6498] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.669125][ T6498] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.669525][ T6498] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.672097][ T6499] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.674035][ T6498] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.677250][ T6498] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.677601][ T6498] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.677890][ T6498] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   45.679147][ T6498] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   45.679561][ T6498] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   45.680656][ T6057] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   45.683372][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.693160][ T6057] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   45.709968][ T6493] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   45.725107][ T6493] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   45.727743][ T6493] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   45.730666][ T6493] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   45.733554][ T6493] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   45.997254][ T6488] chnl_net:caif_netlink_parms(): no params data found
[   46.092056][ T6497] chnl_net:caif_netlink_parms(): no params data found
[   46.142271][ T6489] chnl_net:caif_netlink_parms(): no params data found
[   46.198321][ T6488] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.198435][ T6488] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.198575][ T6488] bridge_slave_0: entered allmulticast mode
[   46.199469][ T6488] bridge_slave_0: entered promiscuous mode
[   46.206456][ T6488] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.206537][ T6488] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.206655][ T6488] bridge_slave_1: entered allmulticast mode
[   46.207556][ T6488] bridge_slave_1: entered promiscuous mode
[   46.236774][ T6490] chnl_net:caif_netlink_parms(): no params data found
[   46.256498][ T6488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.280129][ T6497] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.282270][ T6497] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.282438][ T6497] bridge_slave_0: entered allmulticast mode
[   46.285470][ T6497] bridge_slave_0: entered promiscuous mode
[   46.287280][ T6497] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.287339][ T6497] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.287447][ T6497] bridge_slave_1: entered allmulticast mode
[   46.288343][ T6497] bridge_slave_1: entered promiscuous mode
[   46.290406][ T6488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.358816][ T6488] team0: Port device team_slave_0 added
[   46.359753][ T6489] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.359848][ T6489] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.359965][ T6489] bridge_slave_0: entered allmulticast mode
[   46.360862][ T6489] bridge_slave_0: entered promiscuous mode
[   46.362310][ T6489] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.362378][ T6489] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.362490][ T6489] bridge_slave_1: entered allmulticast mode
[   46.367816][ T6489] bridge_slave_1: entered promiscuous mode
[   46.370258][ T6497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.386028][ T6488] team0: Port device team_slave_1 added
[   46.389414][ T6497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.460136][ T6489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.475778][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.477863][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.485807][ T6488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.492825][ T6489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.512002][ T6497] team0: Port device team_slave_0 added
[   46.513695][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.513727][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.513755][ T6488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.548487][ T6497] team0: Port device team_slave_1 added
[   46.557904][ T6490] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.560091][ T6490] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.562197][ T6490] bridge_slave_0: entered allmulticast mode
[   46.565452][ T6490] bridge_slave_0: entered promiscuous mode
[   46.568598][ T6490] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.570662][ T6490] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.572708][ T6490] bridge_slave_1: entered allmulticast mode
[   46.574249][ T6490] bridge_slave_1: entered promiscuous mode
[   46.576750][ T6489] team0: Port device team_slave_0 added
[   46.598175][ T6488] hsr_slave_0: entered promiscuous mode
[   46.598874][ T6488] hsr_slave_1: entered promiscuous mode
[   46.610476][ T6489] team0: Port device team_slave_1 added
[   46.617423][ T6500] chnl_net:caif_netlink_parms(): no params data found
[   46.628054][ T6497] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.630424][ T6497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.633410][ T6497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.652421][ T6497] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.652481][ T6497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.653159][ T6497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.657951][ T6490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.660660][ T6490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.661080][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.661104][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.661133][ T6489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.662755][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.662784][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.662812][ T6489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.752302][ T6490] team0: Port device team_slave_0 added
[   46.782457][ T6490] team0: Port device team_slave_1 added
[   46.791921][ T6497] hsr_slave_0: entered promiscuous mode
[   46.792523][ T6497] hsr_slave_1: entered promiscuous mode
[   46.793698][ T6497] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.793888][ T6497] Cannot create hsr debugfs directory
[   46.830473][ T6490] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.830526][ T6490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.830555][ T6490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.831640][ T6490] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.831665][ T6490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.831693][ T6490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.885286][ T6500] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.885393][ T6500] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.885497][ T6500] bridge_slave_0: entered allmulticast mode
[   46.886331][ T6500] bridge_slave_0: entered promiscuous mode
[   46.888057][ T6500] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.888105][ T6500] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.888240][ T6500] bridge_slave_1: entered allmulticast mode
[   46.889047][ T6500] bridge_slave_1: entered promiscuous mode
[   46.891832][ T6489] hsr_slave_0: entered promiscuous mode
[   46.892329][ T6489] hsr_slave_1: entered promiscuous mode
[   46.892630][ T6489] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.892659][ T6489] Cannot create hsr debugfs directory
[   46.962564][ T6500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.968237][ T6490] hsr_slave_0: entered promiscuous mode
[   46.970478][ T6490] hsr_slave_1: entered promiscuous mode
[   46.972521][ T6490] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.973598][ T6490] Cannot create hsr debugfs directory
[   47.012582][ T6500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.055431][ T6500] team0: Port device team_slave_0 added
[   47.102420][ T6500] team0: Port device team_slave_1 added
[   47.171049][ T6500] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.173137][ T6500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.175696][ T6500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.192652][ T6500] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.192707][ T6500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.192736][ T6500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.206460][ T6488] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   47.233732][ T6488] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   47.251827][ T6488] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   47.269186][ T6500] hsr_slave_0: entered promiscuous mode
[   47.269752][ T6500] hsr_slave_1: entered promiscuous mode
[   47.270061][ T6500] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.270091][ T6500] Cannot create hsr debugfs directory
[   47.275198][ T6488] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   47.338013][ T6497] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.357941][ T6497] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.380586][ T6497] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.384956][ T6497] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.447747][ T6489] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.451733][ T6489] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.456722][ T6489] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.470625][ T6489] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.546991][ T6488] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.556967][ T6490] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.567598][ T6497] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.577051][ T6490] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.582164][ T6488] 8021q: adding VLAN 0 to HW filter on device team0
[   47.597247][   T14] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.597392][   T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.598728][   T14] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.598800][   T14] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.599747][ T6490] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.632827][ T6490] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.671014][ T6500] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   47.679241][ T6497] 8021q: adding VLAN 0 to HW filter on device team0
[   47.689813][ T6500] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   47.709289][ T6500] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   47.715739][  T364] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.715824][  T364] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.716689][  T364] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.716764][  T364] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.731589][ T6500] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   47.753834][ T6502] Bluetooth: hci2: command tx timeout
[   47.754031][ T6502] Bluetooth: hci4: command tx timeout
[   47.754156][ T6502] Bluetooth: hci0: command tx timeout
[   47.754258][ T6502] Bluetooth: hci3: command tx timeout
[   47.754478][ T6493] Bluetooth: hci1: command tx timeout
[   47.806337][ T6489] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.820063][ T6489] 8021q: adding VLAN 0 to HW filter on device team0
[   47.869909][ T6490] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.876478][   T14] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.876740][   T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.889043][ T6490] 8021q: adding VLAN 0 to HW filter on device team0
[   47.896593][ T6488] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.927121][  T364] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.927206][  T364] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.937315][  T364] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.937406][  T364] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.955662][ T6500] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.962413][ T6500] 8021q: adding VLAN 0 to HW filter on device team0
[   47.975888][  T364] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.975963][  T364] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.980706][  T364] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.980791][  T364] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.981844][  T364] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.981897][  T364] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.996227][ T6488] veth0_vlan: entered promiscuous mode
[   48.015098][ T6488] veth1_vlan: entered promiscuous mode
[   48.020850][ T6497] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.034942][ T6488] veth0_macvtap: entered promiscuous mode
[   48.038831][ T6488] veth1_macvtap: entered promiscuous mode
[   48.062026][ T6488] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.101361][ T6500] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   48.105608][ T6500] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   48.114545][ T6488] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.119386][ T6488] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.122070][ T6488] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.126834][ T6488] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.129422][ T6488] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.140013][ T6497] veth0_vlan: entered promiscuous mode
[   48.167821][ T6497] veth1_vlan: entered promiscuous mode
[   48.195393][ T6497] veth0_macvtap: entered promiscuous mode
[   48.199135][ T6497] veth1_macvtap: entered promiscuous mode
[   48.225903][ T6497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   48.234194][ T6497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.235331][ T6497] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.269226][ T6497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   48.269294][ T6497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.270340][ T6497] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.294111][ T6497] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.294193][ T6497] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.294225][ T6497] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.294256][ T6497] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.345777][ T2070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.345875][ T2070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.369702][ T6490] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.374536][ T6500] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.388913][ T6489] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.436276][ T2070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.436348][ T2070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.487287][  T364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.487355][  T364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.516511][ T6489] veth0_vlan: entered promiscuous mode
[   48.527296][ T6490] veth0_vlan: entered promiscuous mode
[   48.531046][ T6490] veth1_vlan: entered promiscuous mode
[   48.539061][ T6489] veth1_vlan: entered promiscuous mode
[   48.540915][ T3880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.540969][ T3880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.559900][ T6488] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.596333][ T6490] veth0_macvtap: entered promiscuous mode
[   48.598363][ T6490] veth1_macvtap: entered promiscuous mode
[   48.631364][ T6489] veth0_macvtap: entered promiscuous mode
[   48.672792][ T6500] veth0_vlan: entered promiscuous mode
[   48.700409][ T6500] veth1_vlan: entered promiscuous mode
[   48.749002][ T6500] veth0_macvtap: entered promiscuous mode
[   48.753952][ T6489] veth1_macvtap: entered promiscuous mode
[   48.760184][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   48.760257][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.760280][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   48.760302][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.760989][ T6490] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.762810][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   48.764818][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.764853][ T6490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   48.764878][ T6490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.765751][ T6490] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.767705][ T6490] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.767751][ T6490] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.767786][ T6490] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.767821][ T6490] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.790829][ T6489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   48.790869][ T6489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.790893][ T6489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   48.790918][ T6489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.790940][ T6489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   48.790964][ T6489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.791682][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.430676][ T6500] veth1_macvtap: entered promiscuous mode
[   49.447038][ T6500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.450117][ T6500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.452827][ T6500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.456113][ T6500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.458877][ T6500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.461796][ T6500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.464559][ T6500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.467362][ T6500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.470898][ T6500] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.474825][ T6500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.477824][ T6500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.480596][ T6500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.483465][ T6500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.486063][ T6500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.488829][ T6500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.492310][ T6500] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.496852][ T6500] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.499814][ T6500] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.511825][ T6500] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.511908][ T6500] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.523101][ T6489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.523163][ T6489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.523205][ T6489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.523240][ T6489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.523268][ T6489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.523294][ T6489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.523323][ T6489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.523349][ T6489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.524017][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.525954][ T6489] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.526016][ T6489] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.526067][ T6489] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.526109][ T6489] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.788129][ T2110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.790796][ T2110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.834822][ T6491] Bluetooth: hci1: command tx timeout
[   49.834905][ T6491] Bluetooth: hci3: command tx timeout
[   49.834941][ T6491] Bluetooth: hci0: command tx timeout
[   49.834974][ T6491] Bluetooth: hci4: command tx timeout
[   49.835007][ T6491] Bluetooth: hci2: command tx timeout
[   49.840840][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.840873][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.910124][   T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.912428][   T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.922811][ T2110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.923868][ T2110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.038065][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.038129][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.120148][ T3880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.120211][ T3880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.230371][ T6599] loop0: detected capacity change from 0 to 512
[   50.237421][ T6599] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   50.237472][ T6599] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   50.266836][ T6599] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[   50.266970][ T6599] System zones: 1-12
[   50.281345][ T6599] EXT4-fs (loop0): 1 truncate cleaned up
[   50.286046][ T6599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.149692][ T6612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'.
[   51.369510][ T6490] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.461932][ T6628] syz.4.25 uses obsolete (PF_INET,SOCK_PACKET)
[   51.914182][ T6491] Bluetooth: hci4: command tx timeout
[   51.914538][ T6491] Bluetooth: hci0: command tx timeout
[   51.915108][ T6491] Bluetooth: hci3: command tx timeout
[   51.915466][ T6491] Bluetooth: hci1: command tx timeout
[   51.922780][ T6493] Bluetooth: hci2: command tx timeout
[   52.428426][ T6644] loop0: detected capacity change from 0 to 128
[   52.431058][ T6644] =======================================================
[   52.431058][ T6644] WARNING: The mand mount option has been deprecated and
[   52.431058][ T6644]          and is ignored by this kernel. Remove the mand
[   52.431058][ T6644]          option from the mount to silence this warning.
[   52.431058][ T6644] =======================================================
[   52.508574][ T6644] overlayfs: failed to clone upperpath
[   52.858418][ T6662] Injecting memory failure for pfn 0x1a9a69 at process virtual address 0x20ffa000
[   52.858669][ T6662] Memory failure: 0x1a9a69: recovery action for reserved kernel page: Ignored
[   54.123980][ T6669] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   54.129260][ T6493] Bluetooth: hci2: command tx timeout
[   54.129473][ T6493] Bluetooth: hci3: command tx timeout
[   54.129510][ T6493] Bluetooth: hci0: command tx timeout
[   54.129545][ T6493] Bluetooth: hci4: command tx timeout
[   54.668612][ T6683] loop3: detected capacity change from 0 to 1024
[   54.692754][ T6683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.757323][ T6488] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.721598][ T6703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   55.721946][ T6703] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   56.099581][ T6708] Injecting memory failure for pfn 0x1a9a69 at process virtual address 0x20ffa000
[   56.099647][ T6708] Memory failure: 0x1a9a69: already hardware poisoned
[   56.099861][ T6708] Memory failure: 0x1a9a69: Sending SIGBUS to syz.1.59:6708 due to hardware memory corruption
[   56.099993][ T6708] Memory failure: 0x1a9a69: recovery action for already poisoned: Failed
[   56.152287][   T44] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.866750][ T6493] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.874991][ T6493] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.877253][ T6493] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.880000][ T6493] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.883708][ T6493] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.954835][   T44] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.143292][   T44] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.152649][ T6720] loop1: detected capacity change from 0 to 32768
[   57.310400][ T6720] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=gzip,erasure_code,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow
[   57.310400][ T6720]   allowing incompatible features above 0.0: (unknown version)
[   57.315419][   T44] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.326275][ T6720] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[   57.330723][ T6720] bcachefs (loop1): Version upgrade required:
[   57.330723][ T6720] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[   57.330723][ T6720] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags
[   57.330723][ T6720]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[   57.351871][ T6720] bcachefs (loop1): dropping and reconstructing all alloc info
[   57.377384][ T6720] bcachefs (loop1): accounting_read... done
[   57.413456][ T6720] bcachefs (loop1): alloc_read... done
[   57.413554][ T6720] bcachefs (loop1): snapshots_read... done
[   57.414323][ T6720] bcachefs (loop1): done starting filesystem
[   57.508423][ T6489] bcachefs (loop1): shutting down
[   58.707693][   T44] bridge_slave_1: left allmulticast mode
[   58.709996][   T44] bridge_slave_1: left promiscuous mode
[   58.713500][   T44] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.942282][ T6489] bcachefs (loop1): shutdown complete
[   58.949743][   T44] bridge_slave_0: left allmulticast mode
[   58.949820][   T44] bridge_slave_0: left promiscuous mode
[   58.949972][   T44] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.014827][ T6493] Bluetooth: hci1: command tx timeout
[   59.142080][ T6756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.142407][ T6756] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.174731][ T6758] Injecting memory failure for pfn 0x1a9a69 at process virtual address 0x20ffa000
[   59.174799][ T6758] Memory failure: 0x1a9a69: already hardware poisoned
[   59.174922][ T6758] Memory failure: 0x1a9a69: Sending SIGBUS to syz.4.70:6758 due to hardware memory corruption
[   59.174964][ T6758] Memory failure: 0x1a9a69: recovery action for already poisoned: Failed
[   61.032978][ T6493] Bluetooth: hci1: command tx timeout
[   61.246180][   T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   61.285820][   T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   61.335581][   T44] bond0 (unregistering): Released all slaves
[   61.363133][ T6714] chnl_net:caif_netlink_parms(): no params data found
[   61.687012][ T6800] loop2: detected capacity change from 0 to 512
[   61.701188][ T6800] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   61.763602][ T6800] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[   61.763706][ T6800] System zones: 1-12
[   61.773852][ T6800] EXT4-fs (loop2): 1 truncate cleaned up
[   61.774736][ T6800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   61.979067][ T6807] loop1: detected capacity change from 0 to 40427
[   62.051353][ T6807] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   62.051489][ T6807] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   62.070148][ T6807] F2FS-fs (loop1): invalid crc value
[   62.543785][ T6807] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   62.543983][ T6807] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   62.699773][ T6497] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.022781][ T6714] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.026506][ T6714] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.026703][ T6714] bridge_slave_0: entered allmulticast mode
[   63.027589][ T6714] bridge_slave_0: entered promiscuous mode
[   63.117611][ T6493] Bluetooth: hci1: command tx timeout
[   63.147699][ T6714] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.147787][ T6714] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.147947][ T6714] bridge_slave_1: entered allmulticast mode
[   63.148881][ T6714] bridge_slave_1: entered promiscuous mode
[   63.316951][ T6840] netlink: 20 bytes leftover after parsing attributes in process `syz.1.84'.
[   63.609861][ T6714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.126066][   T44] hsr_slave_0: left promiscuous mode
[   64.128244][   T44] hsr_slave_1: left promiscuous mode
[   64.128757][   T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.128829][   T44] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.135639][   T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.137971][   T44] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.220618][   T44] veth1_macvtap: left promiscuous mode
[   64.222481][   T44] veth0_macvtap: left promiscuous mode
[   64.225151][   T44] veth1_vlan: left promiscuous mode
[   64.226722][   T44] veth0_vlan: left promiscuous mode
[   64.297665][ T6849] loop3: detected capacity change from 0 to 4096
[   64.533830][ T6868] loop4: detected capacity change from 0 to 512
[   64.583071][ T6868] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   64.666535][ T6868] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[   64.669069][ T6868] System zones: 1-12
[   64.672717][ T6868] EXT4-fs (loop4): 1 truncate cleaned up
[   64.675460][ T6868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   65.634267][ T6493] Bluetooth: hci1: command tx timeout
[   65.667727][ T2391] ieee802154 phy0 wpan0: encryption failed: -22
[   65.669676][ T2391] ieee802154 phy1 wpan1: encryption failed: -22
[   65.729311][ T6500] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.808116][ T6872] loop3: detected capacity change from 0 to 32768
[   65.835033][ T6883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   65.835299][ T6883] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   65.850043][ T6872] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   65.890888][ T6872] XFS (loop3): Ending clean mount
[   65.902194][ T6872] XFS (loop3): Quotacheck needed: Please wait.
[   65.918350][ T6872] XFS (loop3): Quotacheck: Done.
[   65.980729][ T6488] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   66.104250][ T6889] netlink: 20 bytes leftover after parsing attributes in process `syz.3.98'.
[   67.826334][   T44] team0 (unregistering): Port device team_slave_1 removed
[   68.009962][   T44] team0 (unregistering): Port device team_slave_0 removed
[   69.843153][    T9] cfg80211: failed to load regulatory.db
[   70.236250][ T6714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.531516][ T6908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   70.536439][ T6908] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   70.553099][ T6904] Injecting memory failure for pfn 0x1a9a69 at process virtual address 0x20ffa000
[   70.553167][ T6904] Memory failure: 0x1a9a69: already hardware poisoned
[   70.553291][ T6904] Memory failure: 0x1a9a69: Sending SIGBUS to syz.4.103:6904 due to hardware memory corruption
[   70.553337][ T6904] Memory failure: 0x1a9a69: recovery action for already poisoned: Failed
[   70.586062][ T6714] team0: Port device team_slave_0 added
[   70.587657][ T6714] team0: Port device team_slave_1 added
[   70.608681][ T6912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   70.609693][ T6912] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   71.502997][ T6921] netlink: 20 bytes leftover after parsing attributes in process `syz.1.108'.
[   71.587209][ T6714] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.587279][ T6714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.587336][ T6714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.588476][ T6714] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.588502][ T6714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.588530][ T6714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.313911][ T6928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.314222][ T6928] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   72.383491][ T6714] hsr_slave_0: entered promiscuous mode
[   72.384067][ T6714] hsr_slave_1: entered promiscuous mode
[   72.384389][ T6714] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.384419][ T6714] Cannot create hsr debugfs directory
[   72.434577][ T6935] loop3: detected capacity change from 0 to 64
[   72.860130][ T6950] loop3: detected capacity change from 0 to 32768
[   72.918545][ T6957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.921519][ T6957] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   72.970366][ T6714] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   73.001891][ T6714] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   73.008681][ T6714] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   73.016278][ T6714] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   73.069511][ T6714] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.076746][ T6953] Injecting memory failure for pfn 0x1a9a69 at process virtual address 0x20ffa000
[   73.076803][ T6953] Memory failure: 0x1a9a69: already hardware poisoned
[   73.076922][ T6953] Memory failure: 0x1a9a69: Sending SIGBUS to syz.4.116:6953 due to hardware memory corruption
[   73.076966][ T6953] Memory failure: 0x1a9a69: recovery action for already poisoned: Failed
[   73.098454][ T6714] 8021q: adding VLAN 0 to HW filter on device team0
[   73.105813][ T3880] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.105869][ T3880] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.112576][ T6950] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[   73.112576][ T6950]   allowing incompatible features above 0.0: (unknown version)
[   73.112646][ T6950] bcachefs (loop3): initializing new filesystem
[   73.113487][ T6950] bcachefs (loop3): going read-write
[   73.114281][ T3880] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.114342][ T3880] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.183567][ T6950] bcachefs (loop3): marking superblocks
[   73.190228][ T6950] bcachefs (loop3): initializing freespace
[   73.191213][ T6950] bcachefs (loop3): done initializing freespace
[   73.193047][ T6950] bcachefs (loop3): reading snapshots table
[   73.193111][ T6950] bcachefs (loop3): reading snapshots done
[   73.308224][ T6950] bcachefs (loop3): done starting filesystem
[   73.910866][ T6488] bcachefs (loop3): shutting down
[   73.910928][ T6488] bcachefs (loop3): going read-only
[   73.911156][ T6488] bcachefs (loop3): finished waiting for writes to stop
[   73.930165][ T6981] netlink: 20 bytes leftover after parsing attributes in process `syz.2.118'.
[   73.943259][ T6488] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3
[   73.991683][ T6714] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.104913][ T6992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.121'.
[   74.379821][ T6989] loop4: detected capacity change from 0 to 65536
[   74.384331][ T6488] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[   74.388672][ T6488] bcachefs (loop3): clean shutdown complete, journal seq 4
[   74.436201][ T6488] bcachefs (loop3): marking filesystem clean
[   74.455096][ T6989] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   74.509008][ T6714] veth0_vlan: entered promiscuous mode
[   74.519728][ T7017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   74.520489][ T7017] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   74.529552][ T6989] XFS (loop4): Ending clean mount
[   74.584487][ T6488] bcachefs (loop3): shutdown complete
[   74.605588][ T6714] veth1_vlan: entered promiscuous mode
[   74.621362][ T6714] veth0_macvtap: entered promiscuous mode
[   74.626375][ T6714] veth1_macvtap: entered promiscuous mode
[   74.645170][ T6500] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   74.722526][ T6714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.722602][ T6714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.724675][ T6714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.724911][ T6714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.724949][ T6714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.724977][ T6714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.725008][ T6714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.725043][ T6714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.726638][ T6714] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.736688][ T6714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.736724][ T6714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.736745][ T6714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.736765][ T6714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.736784][ T6714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.736804][ T6714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.736826][ T6714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.736846][ T6714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.737429][ T6714] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.738996][ T6714] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.739050][ T6714] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.739092][ T6714] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.739123][ T6714] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.889740][  T364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.889807][  T364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.992835][ T6814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.001925][ T6814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.225263][ T7045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   75.225583][ T7045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   75.619107][ T7058] netlink: 4 bytes leftover after parsing attributes in process `syz.5.134'.
[   75.890780][ T7076] loop1: detected capacity change from 0 to 2048
[   76.000548][ T7080] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   76.220447][ T7083] loop2: detected capacity change from 0 to 32768
[   76.257979][ T7083] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   76.424530][ T6497] ocfs2: Unmounting device (7,2) on (node local)
[   76.662697][ T7110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.145'.
[   76.732580][ T7087] loop4: detected capacity change from 0 to 32768
[   76.758634][ T7117] loop2: detected capacity change from 0 to 16
[   76.776837][ T7087] (syz.4.141,7087,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc2d589a7, computed 0xa7538fce. Applying ECC.
[   76.781460][ T7087] (syz.4.141,7087,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   76.785763][ T7087] (syz.4.141,7087,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   76.791280][ T7087] (syz.4.141,7087,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xaeb6429d, computed 0xb27ece20. Applying ECC.
[   76.884479][ T7117] erofs (device loop2): mounted with root inode @ nid 36.
[   76.931496][ T7087] (syz.4.141,7087,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xa9c51222, computed 0xb6cc4dbf. Applying ECC.
[   76.971425][ T7087] JBD2: Ignoring recovery information on journal
[   76.996891][ T7124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   76.999577][ T7124] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.041439][ T7125] erofs (device loop2): invalid de[0].nameoff 0 @ nid 36
[   77.084455][ T7087] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   77.110141][ T7114] loop5: detected capacity change from 0 to 65536
[   77.113833][ T7117] erofs (device loop2): corrupted dir block 72 @ nid 36
[   77.117844][ T7087] (syz.4.141,7087,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x78b62c9b, computed 0xa37c6f57. Applying ECC.
[   77.139084][ T7087] (syz.4.141,7087,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x4d558a87, computed 0x5be9c481. Applying ECC.
[   77.160652][ T7114] XFS (loop5): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   77.169041][   T14] (kworker/u8:1,14,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xa9c51222, computed 0xb6cc4dbf. Applying ECC.
[   77.229226][ T6500] ocfs2: Unmounting device (7,4) on (node local)
[   77.254238][ T7114] XFS (loop5): Ending clean mount
[   77.319748][ T6714] XFS (loop5): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   77.488631][ T7137] ALSA: seq fatal error: cannot create timer (-19)
[   77.811923][ T7165] netlink: 28 bytes leftover after parsing attributes in process `syz.1.155'.
[   77.812058][ T7165] netlink: 28 bytes leftover after parsing attributes in process `syz.1.155'.
[   77.812243][ T7165] netlink: 'syz.1.155': attribute type 6 has an invalid length.
[   78.103621][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.158'.
[   78.361815][ T7182] loop5: detected capacity change from 0 to 40427
[   78.418758][ T7182] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x3fffff
[   78.427932][ T7182] F2FS-fs (loop5): invalid crc value
[   78.452957][ T7182] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   78.498256][ T6714] syz-executor: attempt to access beyond end of device
[   78.498256][ T6714] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   78.501936][ T6714] CPU: 1 UID: 0 PID: 6714 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-ge0f4c8dd9d2d #0 PREEMPT 
[   78.501957][ T6714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   78.501965][ T6714] Call trace:
[   78.501969][ T6714]  show_stack+0x2c/0x3c (C)
[   78.501986][ T6714]  __dump_stack+0x30/0x40
[   78.501998][ T6714]  dump_stack_lvl+0xd8/0x12c
[   78.502009][ T6714]  dump_stack+0x1c/0x28
[   78.502019][ T6714]  f2fs_handle_critical_error+0x34c/0x4b8
[   78.502044][ T6714]  f2fs_stop_checkpoint+0x58/0x6c
[   78.502056][ T6714]  f2fs_write_end_io+0x794/0xadc
[   78.502071][ T6714]  bio_endio+0x81c/0x858
[   78.502084][ T6714]  submit_bio_noacct+0x158/0x176c
[   78.502095][ T6714]  submit_bio+0x354/0x4d4
[   78.502106][ T6714]  f2fs_submit_write_bio+0x13c/0x324
[   78.502119][ T6714]  __submit_merged_bio+0x254/0x704
[   78.502132][ T6714]  __submit_merged_write_cond+0x23c/0x4ac
[   78.502147][ T6714]  f2fs_write_data_pages+0x1e9c/0x27ac
[   78.502161][ T6714]  do_writepages+0x2c0/0x6a8
[   78.502176][ T6714]  filemap_fdatawrite+0x144/0x1e8
[   78.502191][ T6714]  f2fs_sync_dirty_inodes+0x2b8/0x788
[   78.502203][ T6714]  f2fs_write_checkpoint+0x684/0x1694
[   78.502215][ T6714]  kill_f2fs_super+0x21c/0x584
[   78.502228][ T6714]  deactivate_locked_super+0xc4/0x12c
[   78.502241][ T6714]  deactivate_super+0xe0/0x100
[   78.502252][ T6714]  cleanup_mnt+0x31c/0x3ac
[   78.502264][ T6714]  __cleanup_mnt+0x20/0x30
[   78.502276][ T6714]  task_work_run+0x1dc/0x260
[   78.502288][ T6714]  do_notify_resume+0x16c/0x1ec
[   78.502301][ T6714]  el0_svc+0xb0/0x150
[   78.502315][ T6714]  el0t_64_sync_handler+0x78/0x108
[   78.502327][ T6714]  el0t_64_sync+0x198/0x19c
[   78.517072][ T6714] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[   78.550552][ T7192] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   78.929103][ T7205] loop5: detected capacity change from 0 to 128
[   79.100802][ T7218] loop3: detected capacity change from 0 to 64
[   79.394889][ T7224] loop3: detected capacity change from 0 to 32768
[   79.401332][ T7224] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.174 (7224)
[   79.417686][ T7226] loop1: detected capacity change from 0 to 512
[   79.437727][ T7226] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   79.556771][ T7224] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   79.560265][ T7224] BTRFS info (device loop3): using crc32c (crc32c-arm64) checksum algorithm
[   79.560343][ T7224] BTRFS info (device loop3): disk space caching is enabled
[   79.560502][ T7224] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   79.572788][ T7226] EXT4-fs (loop1): 1 truncate cleaned up
[   79.575785][ T7226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.867231][ T7243] Injecting memory failure for pfn 0x1a9a69 at process virtual address 0x20ffa000
[   79.867320][ T7243] Memory failure: 0x1a9a69: already hardware poisoned
[   79.867446][ T7243] Memory failure: 0x1a9a69: Sending SIGBUS to syz.2.176:7243 due to hardware memory corruption
[   79.867491][ T7243] Memory failure: 0x1a9a69: recovery action for already poisoned: Failed
[   80.691362][ T7224] BTRFS info (device loop3): rebuilding free space tree
[   80.703970][ T7224] BTRFS info (device loop3): disabling free space tree
[   80.704081][ T7224] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   80.704168][ T7224] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   80.846742][ T6489] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.908531][ T6488] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   81.191818][ T7274] loop5: detected capacity change from 0 to 32768
[   81.233055][ T7274] 
[   81.233055][ T7274]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   81.233055][ T7274] 
[   81.254614][ T7274] 
[   81.254614][ T7274]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   81.254614][ T7274] 
[   81.254797][ T7274] 
[   81.254797][ T7274]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   81.254797][ T7274] 
[   81.254827][ T7274] 
[   81.254827][ T7274]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   81.254827][ T7274] 
[   81.269893][   T96] 
[   81.269893][   T96]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   81.269893][   T96] 
[   81.320768][ T6714] 
[   81.320768][ T6714]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   81.320768][ T6714] 
[   81.350437][ T6714] 
[   81.350437][ T6714]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   81.350437][ T6714] 
[   81.524788][ T7289] Injecting memory failure for pfn 0x1a9a69 at process virtual address 0x20ffa000
[   81.524859][ T7289] Memory failure: 0x1a9a69: already hardware poisoned
[   81.524999][ T7289] Memory failure: 0x1a9a69: Sending SIGBUS to syz.3.188:7289 due to hardware memory corruption
[   81.525061][ T7289] Memory failure: 0x1a9a69: recovery action for already poisoned: Failed
[   82.318666][ T7295] loop5: detected capacity change from 0 to 512
[   82.369460][ T7295] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   82.492444][ T7295] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[   82.492542][ T7295] System zones: 1-12
[   82.495815][ T7295] EXT4-fs (loop5): 1 truncate cleaned up
[   82.496697][ T7295] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.779236][ T6714] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.902517][ T7306] loop2: detected capacity change from 0 to 2048
[   83.010078][ T7318] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   83.051546][ T7313] loop1: detected capacity change from 0 to 40427
[   83.054518][ T7313] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x7
[   83.057225][ T7313] F2FS-fs (loop1): invalid crc value
[   83.082440][ T7313] F2FS-fs (loop1): Start checkpoint disabled!
[   83.093001][ T7313] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   83.298908][   T12] kworker/u8:0: attempt to access beyond end of device
[   83.298908][   T12] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   83.299969][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-rc4-syzkaller-ge0f4c8dd9d2d #0 PREEMPT 
[   83.299998][   T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   83.300007][   T12] Workqueue: writeback wb_workfn (flush-7:1)
[   83.300043][   T12] Call trace:
[   83.300047][   T12]  show_stack+0x2c/0x3c (C)
[   83.300062][   T12]  __dump_stack+0x30/0x40
[   83.300073][   T12]  dump_stack_lvl+0xd8/0x12c
[   83.300084][   T12]  dump_stack+0x1c/0x28
[   83.300095][   T12]  f2fs_handle_critical_error+0x34c/0x4b8
[   83.300110][   T12]  f2fs_stop_checkpoint+0x58/0x6c
[   83.300122][   T12]  f2fs_write_end_io+0x794/0xadc
[   83.300141][   T12]  bio_endio+0x81c/0x858
[   83.300154][   T12]  submit_bio_noacct+0x158/0x176c
[   83.300166][   T12]  submit_bio+0x354/0x4d4
[   83.300176][   T12]  f2fs_submit_write_bio+0x13c/0x324
[   83.300190][   T12]  __submit_merged_bio+0x254/0x704
[   83.300203][   T12]  __submit_merged_write_cond+0x23c/0x4ac
[   83.300216][   T12]  f2fs_write_data_pages+0x1e9c/0x27ac
[   83.300230][   T12]  do_writepages+0x2c0/0x6a8
[   83.300245][   T12]  __writeback_single_inode+0x15c/0x13e8
[   83.300256][   T12]  writeback_sb_inodes+0x558/0xe38
[   83.300267][   T12]  wb_writeback+0x3cc/0xd70
[   83.300281][   T12]  wb_workfn+0x338/0xdc0
[   83.300294][   T12]  process_one_work+0x7e8/0x156c
[   83.300309][   T12]  worker_thread+0x958/0xed8
[   83.300319][   T12]  kthread+0x5fc/0x75c
[   83.300333][   T12]  ret_from_fork+0x10/0x20
[   83.343641][   T12] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   83.391331][ T7328] Injecting memory failure for pfn 0x1a9a69 at process virtual address 0x20ffa000
[   83.391421][ T7328] Memory failure: 0x1a9a69: already hardware poisoned
[   83.391494][ T7328] Memory failure: 0x1a9a69: Sending SIGBUS to syz.2.200:7328 due to hardware memory corruption
[   83.391543][ T7328] Memory failure: 0x1a9a69: recovery action for already poisoned: Failed
[   83.616849][ T7336] loop5: detected capacity change from 0 to 512
[   83.625358][ T7336] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   83.636772][ T7336] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[   83.647962][ T7336] System zones: 1-12
[   83.650845][ T7336] EXT4-fs (loop5): 1 truncate cleaned up
[   83.658376][ T7336] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.815686][ T6714] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.921649][ T7342] loop1: detected capacity change from 0 to 4096
[   83.956473][ T7342] NILFS (loop1): invalid segment: Checksum error in segment payload
[   83.956649][ T7342] NILFS (loop1): trying rollback from an earlier position
[   84.022378][ T7342] NILFS (loop1): recovery complete
[   84.082331][ T7350] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   84.141441][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.5.209'.
[   84.301005][ T7364] loop5: detected capacity change from 0 to 512
[   84.310297][ T7364] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   84.399378][ T7364] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[   84.399481][ T7364] System zones: 1-12
[   84.405347][ T7364] EXT4-fs (loop5): 1 truncate cleaned up
[   84.414425][ T7364] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.531195][ T6714] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.878703][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.224'.
[   85.090516][ T7399] loop2: detected capacity change from 0 to 512
[   85.091589][ T7399] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   85.098304][ T7399] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[   85.098402][ T7399] System zones: 1-12
[   85.099209][ T7399] EXT4-fs (loop2): 1 truncate cleaned up
[   85.105209][ T7399] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.283371][ T6497] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.417655][ T7409] Injecting memory failure for pfn 0x1a9a69 at process virtual address 0x20ffa000
[   85.417727][ T7409] Memory failure: 0x1a9a69: already hardware poisoned
[   85.417850][ T7409] Memory failure: 0x1a9a69: Sending SIGBUS to syz.3.233:7409 due to hardware memory corruption
[   85.417900][ T7409] Memory failure: 0x1a9a69: recovery action for already poisoned: Failed
[   86.319275][ T7423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.236'.
[   86.889007][ T7436] loop4: detected capacity change from 0 to 32768
[   87.711641][ T7451] Injecting memory failure for pfn 0x1a9a69 at process virtual address 0x20ffa000
[   87.711714][ T7451] Memory failure: 0x1a9a69: already hardware poisoned
[   87.711855][ T7451] Memory failure: 0x1a9a69: Sending SIGBUS to syz.3.248:7451 due to hardware memory corruption
[   87.711905][ T7451] Memory failure: 0x1a9a69: recovery action for already poisoned: Failed
[   87.763069][ T7469] loop1: detected capacity change from 0 to 512
[   88.147854][ T7469] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   88.392656][ T7474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.252'.
[   88.406083][ T7469] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[   88.406185][ T7469] System zones: 1-12
[   88.433886][ T7469] EXT4-fs (loop1): 1 truncate cleaned up
[   88.437047][ T7469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.449393][ T6489] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.850564][ T7516] Injecting memory failure for pfn 0x1a9a69 at process virtual address 0x20ffa000
[   89.850637][ T7516] Memory failure: 0x1a9a69: already hardware poisoned
[   89.850784][ T7516] Memory failure: 0x1a9a69: Sending SIGBUS to syz.3.264:7516 due to hardware memory corruption
[   89.850843][ T7516] Memory failure: 0x1a9a69: recovery action for already poisoned: Failed
[   89.861127][ T7526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.268'.
[   90.645169][ T7533] loop5: detected capacity change from 0 to 512
[   90.650240][ T7533] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   90.674744][ T7533] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[   90.674852][ T7533] System zones: 1-12
[   90.684708][ T7533] EXT4-fs (loop5): 1 truncate cleaned up
[   90.685649][ T7533] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.681096][ T6714] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.907417][ T7577] netlink: 4 bytes leftover after parsing attributes in process `syz.5.282'.
[   91.980199][ T7571] Injecting memory failure for pfn 0x1a9a69 at process virtual address 0x20ffa000
[   91.980271][ T7571] Memory failure: 0x1a9a69: already hardware poisoned
[   91.980411][ T7571] Memory failure: 0x1a9a69: Sending SIGBUS to syz.1.284:7571 due to hardware memory corruption
[   91.980461][ T7571] Memory failure: 0x1a9a69: recovery action for already poisoned: Failed
[   93.429546][ T7623] Injecting memory failure for pfn 0x1a9a69 at process virtual address 0x20ffa000
[   93.429620][ T7623] Memory failure: 0x1a9a69: already hardware poisoned
[   93.429763][ T7623] Memory failure: 0x1a9a69: Sending SIGBUS to syz.4.302:7623 due to hardware memory corruption
[   93.429892][ T7623] Memory failure: 0x1a9a69: recovery action for already poisoned: Failed
[   94.864406][ T7674] Injecting memory failure for pfn 0x1a9a69 at process virtual address 0x20ffa000
[   94.864477][ T7674] Memory failure: 0x1a9a69: already hardware poisoned
[   94.864599][ T7674] Memory failure: 0x1a9a69: Sending SIGBUS to syz.4.318:7674 due to hardware memory corruption
[   94.864643][ T7674] Memory failure: 0x1a9a69: recovery action for already poisoned: Failed
[   95.901118][ T7702] loop2: detected capacity change from 0 to 1024
[   95.986573][ T7702] hfsplus: invalid btree flag
[   95.987542][ T7702] hfsplus: failed to load catalog file
[   96.766306][ T7714] loop5: detected capacity change from 0 to 512
[   96.771856][ T7714] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   96.779569][ T7715] loop1: detected capacity change from 0 to 256
[   96.828332][ T7714] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[   96.828436][ T7714] System zones: 1-12
[   96.853061][ T7714] EXT4-fs (loop5): 1 truncate cleaned up
[   96.853929][ T7714] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.057897][ T6714] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.501925][ T7708] loop4: detected capacity change from 0 to 32768
[   98.388883][ T7742] Injecting memory failure for pfn 0x1a9a69 at process virtual address 0x20ffa000
[   98.388950][ T7742] Memory failure: 0x1a9a69: already hardware poisoned
[   98.389098][ T7742] Memory failure: 0x1a9a69: Sending SIGBUS to syz.3.336:7742 due to hardware memory corruption
[   98.389149][ T7742] Memory failure: 0x1a9a69: recovery action for already poisoned: Failed
[   99.133911][ T7708] workqueue: Failed to create a rescuer kthread for wq "bcachefs_journal": -EINTR
[   99.134039][ T7708] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete
[   99.169190][ T7760] loop5: detected capacity change from 0 to 4096
[   99.275513][ T7760] ntfs3(loop5): Failed to load $Extend (-22).
[   99.275672][ T7760] ntfs3(loop5): Failed to initialize $Extend.
[   99.324061][ T7767] Zero length message leads to an empty skb
[   99.454521][ T7773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.454789][ T7773] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.836436][ T7708] bcachefs: bch2_fs_get_tree() error: ENOMEM_fs_other_alloc
[  100.626538][ T7750] loop1: detected capacity change from 0 to 40427
[  100.633437][ T7750] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3fffff
[  100.636765][ T7750] F2FS-fs (loop1): Image doesn't support compression
[  100.638707][ T7750] F2FS-fs (loop1): heap/no_heap options were deprecated
[  100.640679][ T7750] F2FS-fs (loop1): Image doesn't support compression
[  100.645357][ T7750] F2FS-fs (loop1): invalid crc value
[  100.717725][ T7750] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  100.743316][ T7750] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20001
[  100.785996][ T7797] netlink: 8 bytes leftover after parsing attributes in process `syz.5.338'.
[  100.808741][ T7797] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  101.013961][ T7805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  101.016902][ T7805] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.230545][ T7750] nftables ruleset with unbound chain
[  101.283616][ T7750] syz.1.337: attempt to access beyond end of device
[  101.283616][ T7750] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  101.298526][ T7750] F2FS-fs (loop1): inject checkpoint error in f2fs_balance_fs of __f2fs_ioctl+0x3330/0x95f0
[  101.298903][ T7750] CPU: 0 UID: 0 PID: 7750 Comm: syz.1.337 Not tainted 6.15.0-rc4-syzkaller-ge0f4c8dd9d2d #0 PREEMPT 
[  101.298922][ T7750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  101.298929][ T7750] Call trace:
[  101.298934][ T7750]  show_stack+0x2c/0x3c (C)
[  101.298948][ T7750]  __dump_stack+0x30/0x40
[  101.298960][ T7750]  dump_stack_lvl+0xd8/0x12c
[  101.298971][ T7750]  dump_stack+0x1c/0x28
[  101.298981][ T7750]  f2fs_handle_critical_error+0x34c/0x4b8
[  101.298996][ T7750]  f2fs_stop_checkpoint+0x58/0x6c
[  101.299008][ T7750]  f2fs_balance_fs+0x258/0x6b4
[  101.299021][ T7750]  __f2fs_ioctl+0x3330/0x95f0
[  101.299050][ T7750]  f2fs_ioctl+0x130/0x208
[  101.299065][ T7750]  __arm64_sys_ioctl+0x14c/0x1c4
[  101.299080][ T7750]  invoke_syscall+0x98/0x2b8
[  101.299103][ T7750]  el0_svc_common+0x130/0x23c
[  101.299114][ T7750]  do_el0_svc+0x48/0x58
[  101.299125][ T7750]  el0_svc+0x58/0x150
[  101.299139][ T7750]  el0t_64_sync_handler+0x78/0x108
[  101.299152][ T7750]  el0t_64_sync+0x198/0x19c
[  101.299168][ T7750] F2FS-fs (loop1): Stopped filesystem due to reason: 1
[  101.472660][ T7816] loop4: detected capacity change from 0 to 32768
[  101.487536][ T7816] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  101.497454][ T7816] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  101.810624][ T6500] ocfs2: Unmounting device (7,4) on (node local)
[  101.826371][ T7830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  101.826647][ T7830] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  102.626170][ T7842] loop3: detected capacity change from 0 to 1024
[  102.773458][ T7843] loop2: detected capacity change from 0 to 32768
[  102.779236][ T7843] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.353 (7843)
[  102.785372][ T7842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.799706][ T7843] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  102.799819][ T7843] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm
[  102.799878][ T7843] BTRFS info (device loop2): using free-space-tree
[  102.861234][ T6488] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.926910][ T7843] btrfs: Unknown parameter 'resgid'
[  103.025226][ T6497] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  103.233510][ T7870] Injecting memory failure for pfn 0x1a9a69 at process virtual address 0x20ffa000
[  103.233576][ T7870] Memory failure: 0x1a9a69: already hardware poisoned
[  103.233653][ T7870] Memory failure: 0x1a9a69: Sending SIGBUS to syz.1.356:7870 due to hardware memory corruption
[  103.233702][ T7870] Memory failure: 0x1a9a69: recovery action for already poisoned: Failed
[  104.183805][ T7878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  104.186487][ T7878] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  104.333847][ T7884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  104.334152][ T7884] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  104.548145][ T7889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  104.549275][ T7889] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.419073][ T7892] loop5: detected capacity change from 0 to 512
[  105.425477][ T7892] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  105.433533][ T7892] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[  105.435900][ T7892] System zones: 1-12
[  105.439137][ T7892] EXT4-fs (loop5): 1 truncate cleaned up
[  105.449468][ T7892] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.672602][ T6714] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.934857][ T7915] Injecting memory failure for pfn 0x1a9a69 at process virtual address 0x20ffa000
[  106.934938][ T7915] Memory failure: 0x1a9a69: already hardware poisoned
[  106.935092][ T7915] Memory failure: 0x1a9a69: Sending SIGBUS to syz.4.371:7915 due to hardware memory corruption
[  106.935144][ T7915] Memory failure: 0x1a9a69: recovery action for already poisoned: Failed
[  107.860347][ T7924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.860615][ T7924] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  108.060752][ T7931] loop3: detected capacity change from 0 to 512
[  108.061805][ T7931] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  108.063303][ T7931] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[  108.063372][ T7931] System zones: 1-12
[  108.071978][ T7931] EXT4-fs (loop3): 1 truncate cleaned up
[  108.073115][ T7931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.236164][ T7940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  108.236424][ T7940] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  108.270746][ T6488] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.828875][ T7952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  108.835403][ T7952] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.241337][ T7966] Injecting memory failure for pfn 0x1a9a69 at process virtual address 0x20ffa000
[  110.241409][ T7966] Memory failure: 0x1a9a69: already hardware poisoned
[  110.241559][ T7966] Memory failure: 0x1a9a69: Sending SIGBUS to syz.2.390:7966 due to hardware memory corruption
[  110.241610][ T7966] Memory failure: 0x1a9a69: recovery action for already poisoned: Failed
[  111.101060][ T7975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.101447][ T7975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.363331][ T7978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.365939][ T7978] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.798898][ T7987] loop2: detected capacity change from 0 to 512
[  111.805521][ T7987] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  111.923570][ T7987] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[  111.923669][ T7987] System zones: 1-12
[  111.933388][ T7987] EXT4-fs (loop2): 1 truncate cleaned up
[  111.934264][ T7987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.704256][ T6497] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.934650][ T8001] Injecting memory failure for pfn 0x1a9a69 at process virtual address 0x20ffa000
[  112.934718][ T8001] Memory failure: 0x1a9a69: already hardware poisoned
[  112.934860][ T8001] Memory failure: 0x1a9a69: Sending SIGBUS to syz.3.403:8001 due to hardware memory corruption
[  112.934910][ T8001] Memory failure: 0x1a9a69: recovery action for already poisoned: Failed
[  113.745606][ T8014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.745873][ T8014] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.823788][ T8018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.824092][ T8018] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.830219][ T8020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.830503][ T8020] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.054205][ T8032] loop4: detected capacity change from 0 to 512
[  115.063464][ T8032] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  115.103902][ T8032] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[  115.106391][ T8032] System zones: 1-12
[  115.109594][ T8032] EXT4-fs (loop4): 1 truncate cleaned up
[  115.112470][ T8032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.158269][ T6500] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.536713][ T8047] Injecting memory failure for pfn 0x1a9a69 at process virtual address 0x20ffa000
[  116.536800][ T8047] Memory failure: 0x1a9a69: already hardware poisoned
[  116.536945][ T8047] Memory failure: 0x1a9a69: Sending SIGBUS to syz.5.418:8047 due to hardware memory corruption
[  116.537004][ T8047] Memory failure: 0x1a9a69: recovery action for already poisoned: Failed
[  117.392740][ T8056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.406287][ T8056] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.439633][ T8059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.442541][ T8059] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.915612][ T8071] loop3: detected capacity change from 0 to 512
[  117.937467][ T8071] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  118.022754][ T8071] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[  118.022984][ T8071] System zones: 1-12
[  118.033268][ T8071] EXT4-fs (loop3): 1 truncate cleaned up
[  118.035879][ T8071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.114349][ T6488] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.390106][ T8084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  118.417850][ T8084] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.269690][ T8085] Injecting memory failure for pfn 0x1a9a69 at process virtual address 0x20ffa000
[  119.269758][ T8085] Memory failure: 0x1a9a69: already hardware poisoned
[  119.269907][ T8085] Memory failure: 0x1a9a69: Sending SIGBUS to syz.5.433:8085 due to hardware memory corruption
[  119.269959][ T8085] Memory failure: 0x1a9a69: recovery action for already poisoned: Failed
[  121.355587][ T8107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  121.355859][ T8107] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  121.453900][ T8111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  121.456566][ T8111] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  121.602500][ T8115] loop4: detected capacity change from 0 to 512
[  121.647990][ T8115] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  121.787080][ T8115] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[  121.787178][ T8115] System zones: 1-12
[  121.788955][ T8115] EXT4-fs (loop4): 1 truncate cleaned up
[  121.790807][ T8115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.942607][ T6500] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.281441][ T8130] Injecting memory failure for pfn 0x1a9a69 at process virtual address 0x20ffa000
[  122.281505][ T8130] Memory failure: 0x1a9a69: already hardware poisoned
[  122.281656][ T8130] Memory failure: 0x1a9a69: Sending SIGBUS to syz.5.447:8130 due to hardware memory corruption
[  122.281728][ T8130] Memory failure: 0x1a9a69: recovery action for already poisoned: Failed
[  123.728152][ T8146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.728424][ T8146] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  124.921812][ T8143] loop4: detected capacity change from 0 to 32768
[  125.109485][ T8143] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  125.109485][ T8143]   allowing incompatible features above 0.0: (unknown version)
[  125.118014][ T8143] bcachefs (loop4): invalid bkey in superblock btree=extents level=0: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0
[  125.125615][ T8143]   invalid key type for btree extents (btree_ptr_v2), deleting
[  125.125833][ T8143] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  125.125972][ T8143] bcachefs (loop4): Version upgrade from 1.6: btree_subvolume_children to 1.7: mi_btree_bitmap incomplete
[  125.125972][ T8143] Doing compatible version upgrade from 1.6: btree_subvolume_children to 1.25: extent_flags
[  125.125972][ T8143]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  125.158334][ T8143] bcachefs (loop4): invalid bkey in btree_node btree=alloc level=0: u64s 11 type alloc_v4 0:6:0 len 0 ver 0: 
[  125.162424][ T8143]     gen 0 oldest_gen 0 data_type sb
[  125.162485][ T8143]     journal_seq_nonempty 1
[  125.162501][ T8143]     journal_seq_empty    0
[  125.162519][ T8143]     need_discard         1
[  125.162534][ T8143]     need_inc_gen         1
[  125.162549][ T8143]     dirty_sectors        256
[  125.162566][ T8143]     stripe_sectors       0
[  125.162583][ T8143]     cached_sectors       0
[  125.162597][ T8143]     stripe               0
[  125.162611][ T8143]     stripe_redundancy    0
[  125.162629][ T8143]     io_time[READ]        1
[  125.177113][ T8143]     io_time[WRITE]       9223372036854775809
[  125.177129][ T8143]     fragmentation     0
[  125.177139][ T8143]     bp_start          8
[  125.177150][ T8143]   
[  125.177159][ T8143]   invalid io_time[write]: 9223372036854775809, max 281474976710655, deleting
[  125.203152][ T8143] bcachefs (loop4): accounting_read... done
[  125.243164][ T8143] bcachefs (loop4): alloc_read... done
[  125.249006][ T8143] bcachefs (loop4): snapshots_read... done
[  125.258206][ T8143] bcachefs (loop4): check_allocations...
[  125.268626][ T8143] bcachefs (loop4): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing
[  125.268805][ T8143] bcachefs (loop4): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[  125.269328][ T8143] bcachefs (loop4): bucket 0:27 gen 0 has wrong data_type: got btree, should be need_discard, fixing
[  125.269401][ T8143] bcachefs (loop4): bucket 0:27 gen 0 data type need_discard has wrong dirty_sectors: got 256, should be 0, fixing
[  125.269579][ T8143] bcachefs (loop4): bucket 0:34 gen 0 has wrong data_type: got user, should be need_discard, fixing
[  125.269689][ T8143] bcachefs (loop4): bucket 0:34 gen 0 data type need_discard has wrong dirty_sectors: got 16, should be 0, fixing
[  125.271232][ T8143]  done
[  125.296147][ T8143] bcachefs (loop4): going read-write
[  125.312623][ T8143] bcachefs (loop4): journal_replay... done
[  125.442807][ T8143] bcachefs (loop4): check_extents_to_backpointers...
[  125.451434][ T8143] bcachefs (loop4): scanning for missing backpointers in 5/128 buckets
[  125.459702][ T8143]  done
[  125.461758][ T8143] bcachefs (loop4): check_inodes...
[  125.463475][ T8143] bcachefs (loop4): inode points to dirent that does not point back:
[  125.467796][ T8143]   u64s 7 type dirent 4098:8977922886548783724:U32_MAX len 0 ver 0: file0 -> 844424930136067 type reg
[  125.472080][ T8143]   inum: 4099:4294967295 
[  125.472113][ T8143]     mode=100755
[  125.472129][ T8143]     flags=(15300000)
[  125.472143][ T8143]     journal_seq=5
[  125.472162][ T8143]     hash_seed=fc917866faeb7b5b
[  125.472177][ T8143]     hash_type=siphash
[  125.472191][ T8143]     bi_size=1050
[  125.472205][ T8143]     bi_sectors=8
[  125.472219][ T8143]     bi_version=0
[  125.472233][ T8143]     bi_atime=2770562249
[  125.472246][ T8143]     bi_ctime=2770562249
[  125.472260][ T8143]     bi_mtime=2770562249
[  125.472274][ T8143]     bi_otime=2770562249
[  125.472288][ T8143]     bi_uid=0
[  125.472302][ T8143]     bi_gid=0
[  125.472316][ T8143]     bi_nlink=0
[  125.472329][ T8143]     bi_generation=0
[  125.472343][ T8143]     bi_dev=0
[  125.472357][ T8143]     bi_data_checksum=0
[  125.472371][ T8143]     bi_compression=0
[  125.472385][ T8143]     bi_project=0
[  125.472400][ T8143]     bi_background_compression=0
[  125.472415][ T8143]     bi_data_replicas=0
[  125.472430][ T8143]     bi_promote_target=0
[  125.472445][ T8143]     bi_foreground_target=0
[  125.472460][ T8143]     bi_background_target=0
[  125.472474][ T8143]     bi_erasure_code=0
[  125.472489][ T8143]     bi_fields_set=0
[  125.472504][ T8143]     bi_dir=4098
[  125.472518][ T8143]     bi_dir_offset=8977922886548783724
[  125.472534][ T8143]     bi_subvol=0
[  125.472548][ T8143]     bi_parent_subvol=0
[  125.472563][ T8143]     bi_nocow=0
[  125.472577][ T8143]     bi_depth=0
[  125.472592][ T8143]     bi_inodes_32bit=0
[  125.472607][ T8143]     bi_casefold=0, fixing
[  125.493647][ T8143] bcachefs (loop4): inode points to missing dirent
[  125.493663][ T8143]   inum: 536870912:4294967295 
[  125.493672][ T8143]     mode=100755
[  125.493681][ T8143]     flags=(15300000)
[  125.493690][ T8143]     journal_seq=4
[  125.493699][ T8143]     hash_seed=8469d717004af4ef
[  125.493709][ T8143]     hash_type=siphash
[  125.493718][ T8143]     bi_size=10
[  125.493727][ T8143]     bi_sectors=8
[  125.493736][ T8143]     bi_version=0
[  125.493744][ T8143]     bi_atime=2780562352
[  125.493754][ T8143]     bi_ctime=2780562352
[  125.493763][ T8143]     bi_mtime=2780562352
[  125.493772][ T8143]     bi_otime=2780562352
[  125.493781][ T8143]     bi_uid=0
[  125.493790][ T8143]     bi_gid=0
[  125.493798][ T8143]     bi_nlink=0
[  125.493807][ T8143]     bi_generation=0
[  125.493816][ T8143]     bi_dev=0
[  125.493825][ T8143]     bi_data_checksum=0
[  125.493834][ T8143]     bi_compression=0
[  125.493843][ T8143]     bi_project=0
[  125.493852][ T8143]     bi_background_compression=0
[  125.493862][ T8143]     bi_data_replicas=0
[  125.493871][ T8143]     bi_promote_target=0
[  125.493880][ T8143]     bi_foreground_target=0
[  125.493889][ T8143]     bi_background_target=0
[  125.493899][ T8143]     bi_erasure_code=0
[  125.493908][ T8143]     bi_fields_set=0
[  125.493917][ T8143]     bi_dir=4096
[  125.493926][ T8143]     bi_dir_offset=4330382808765833931
[  125.493935][ T8143]     bi_subvol=0
[  125.493944][ T8143]     bi_parent_subvol=0
[  125.493953][ T8143]     bi_nocow=0
[  125.493962][ T8143]     bi_depth=0
[  125.493971][ T8143]     bi_inodes_32bit=0
[  125.493980][ T8143]     bi_casefold=0, fixing
[  125.494488][ T8143]  done
[  125.500091][ T8143] bcachefs (loop4): resume_logged_ops... done
[  125.500173][ T8143] bcachefs (loop4): delete_dead_inodes... done
[  125.503376][ T8143] bcachefs (loop4): Fixed errors, running fsck a second time to verify fs is clean
[  125.503411][ T8143] bcachefs (loop4): check_extents_to_backpointers... done
[  125.504235][ T8143] bcachefs (loop4): check_inodes... done
[  125.504674][ T8143] bcachefs (loop4): resume_logged_ops... done
[  125.504721][ T8143] bcachefs (loop4): delete_dead_inodes... done
[  125.508881][ T8143] bcachefs (loop4): done starting filesystem
[  125.606400][ T6500] bcachefs (loop4): shutting down
[  125.606474][ T6500] bcachefs (loop4): going read-only
[  125.606502][ T6500] bcachefs (loop4): finished waiting for writes to stop
[  125.633652][ T6500] bcachefs (loop4): flushing journal and stopping allocators, journal seq 21
[  125.635904][ T6500] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 21
[  125.645644][ T6500] bcachefs (loop4): clean shutdown complete, journal seq 22
[  125.693830][ T6500] bcachefs (loop4): marking filesystem clean
[  125.764949][ T6500] bcachefs (loop4): shutdown complete
[  125.770011][ T8169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  125.772773][ T8169] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  125.908491][ T8171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  125.908784][ T8171] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.154735][ T2391] ieee802154 phy0 wpan0: encryption failed: -22
[  126.154816][ T2391] ieee802154 phy1 wpan1: encryption failed: -22
[  126.321706][ T8173] loop2: detected capacity change from 0 to 512
[  126.335392][ T8173] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  126.351829][ T8173] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[  126.351937][ T8173] System zones: 1-12
[  126.353644][ T8173] EXT4-fs (loop2): 1 truncate cleaned up
[  126.354499][ T8173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.444536][ T6497] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.529757][ T8179] loop2: detected capacity change from 0 to 256
[  127.991566][ T8191] Injecting memory failure for pfn 0x1a9a69 at process virtual address 0x20ffa000
[  127.991644][ T8191] Memory failure: 0x1a9a69: already hardware poisoned
[  127.991785][ T8191] Memory failure: 0x1a9a69: Sending SIGBUS to syz.2.464:8191 due to hardware memory corruption
[  127.991836][ T8191] Memory failure: 0x1a9a69: recovery action for already poisoned: Failed
[  129.873413][ T8206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.873684][ T8206] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.923835][ T8208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.924138][ T8208] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.538209][ T8215] loop2: detected capacity change from 0 to 16
[  130.546120][ T8215] erofs (device loop2): mounted with root inode @ nid 36.
[  130.551567][ T8196] loop4: detected capacity change from 0 to 32768
[  130.593211][ T8218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.595891][ T8218] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  131.513500][ T8196] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  131.513500][ T8196]   allowing incompatible features above 0.0: (unknown version)
[  131.513720][ T8196] bcachefs (loop4): invalid bkey in superblock btree=extents level=0: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0
[  131.513738][ T8196]   invalid key type for btree extents (btree_ptr_v2), deleting
[  131.513832][ T8196] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  131.513924][ T8196] bcachefs (loop4): Version upgrade from 1.6: btree_subvolume_children to 1.7: mi_btree_bitmap incomplete
[  131.513924][ T8196] Doing compatible version upgrade from 1.6: btree_subvolume_children to 1.25: extent_flags
[  131.513924][ T8196]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  131.517904][ T8196] bcachefs (loop4): invalid bkey in btree_node btree=alloc level=0: u64s 11 type alloc_v4 0:6:0 len 0 ver 0: 
[  131.517927][ T8196]     gen 0 oldest_gen 0 data_type sb
[  131.517937][ T8196]     journal_seq_nonempty 1
[  131.517946][ T8196]     journal_seq_empty    0
[  131.517956][ T8196]     need_discard         1
[  131.517965][ T8196]     need_inc_gen         1
[  131.517980][ T8196]     dirty_sectors        256
[  131.517990][ T8196]     stripe_sectors       0
[  131.517999][ T8196]     cached_sectors       0
[  131.518011][ T8196]     stripe               0
[  131.518021][ T8196]     stripe_redundancy    0
[  131.518041][ T8196]     io_time[READ]        1
[  131.518050][ T8196]     io_time[WRITE]       9223372036854775809
[  131.518060][ T8196]     fragmentation     0
[  131.518069][ T8196]     bp_start          8
[  131.518078][ T8196]   
[  131.518087][ T8196]   invalid io_time[write]: 9223372036854775809, max 281474976710655, deleting
[  131.531522][ T8196] bcachefs (loop4): accounting_read... done
[  131.593249][ T8196] bcachefs (loop4): alloc_read... done
[  131.593306][ T8196] bcachefs (loop4): snapshots_read... done
[  131.594359][ T8196] bcachefs (loop4): check_allocations...
[  131.610842][ T8196] bcachefs (loop4): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing
[  131.610966][ T8196] bcachefs (loop4): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[  131.611546][ T8196] bcachefs (loop4): bucket 0:27 gen 0 has wrong data_type: got btree, should be need_discard, fixing
[  131.611621][ T8196] bcachefs (loop4): bucket 0:27 gen 0 data type need_discard has wrong dirty_sectors: got 256, should be 0, fixing
[  131.611810][ T8196] bcachefs (loop4): bucket 0:34 gen 0 has wrong data_type: got user, should be need_discard, fixing
[  131.611883][ T8196] bcachefs (loop4): bucket 0:34 gen 0 data type need_discard has wrong dirty_sectors: got 16, should be 0, fixing
[  131.624413][ T8196]  done
[  131.631913][ T8196] bcachefs (loop4): going read-write
[  131.654210][ T8196] bcachefs (loop4): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR
[  131.654336][ T8196] bcachefs (loop4): flushing journal and stopping allocators, journal seq 10
[  131.654629][ T8196] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 10
[  131.666864][ T8196] bcachefs (loop4): unclean shutdown complete, journal seq 11
[  131.705173][ T8196] bcachefs (loop4): bch2_fs_recovery(): error EINTR
[  131.705247][ T8196] bcachefs (loop4): bch2_fs_start(): error starting filesystem EINTR
[  131.705268][ T8196] bcachefs (loop4): shutting down
[  131.834671][ T8196] bcachefs (loop4): shutdown complete
[  132.193933][ T8215] erofs (device loop2): corrupted dir block 72 @ nid 36
[  133.759979][ T8247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.760272][ T8247] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  134.652720][ T8249] Injecting memory failure for pfn 0x1a9a69 at process virtual address 0x20ffa000
[  134.652792][ T8249] Memory failure: 0x1a9a69: already hardware poisoned
[  134.652964][ T8249] Memory failure: 0x1a9a69: Sending SIGBUS to syz.3.480:8249 due to hardware memory corruption
[  134.653018][ T8249] Memory failure: 0x1a9a69: recovery action for already poisoned: Failed
[  135.156667][ T8258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.159306][ T8258] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.380159][ T8196] bcachefs: bch2_fs_get_tree() error: EINTR
[  136.455757][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'.
[  136.832226][ T8277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.832497][ T8277] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.985515][ T8276] loop2: detected capacity change from 0 to 32768
[  138.028069][ T8297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  138.030773][ T8297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  138.191665][ T8276] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  138.191665][ T8276]   allowing incompatible features above 0.0: (unknown version)
[  138.199142][ T8276] bcachefs (loop2): invalid bkey in superblock btree=extents level=0: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0
[  138.199189][ T8276]   invalid key type for btree extents (btree_ptr_v2), deleting
[  138.204999][ T8276] bcachefs (loop2): recovering from clean shutdown, journal seq 10
[  138.205111][ T8276] bcachefs (loop2): Version upgrade from 1.6: btree_subvolume_children to 1.7: mi_btree_bitmap incomplete
[  138.205111][ T8276] Doing compatible version upgrade from 1.6: btree_subvolume_children to 1.25: extent_flags
[  138.205111][ T8276]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  138.220655][ T8276] bcachefs (loop2): invalid bkey in btree_node btree=alloc level=0: u64s 11 type alloc_v4 0:6:0 len 0 ver 0: 
[  138.220702][ T8276]     gen 0 oldest_gen 0 data_type sb
[  138.220729][ T8276]     journal_seq_nonempty 1
[  138.220739][ T8276]     journal_seq_empty    0
[  138.220748][ T8276]     need_discard         1
[  138.220757][ T8276]     need_inc_gen         1
[  138.220767][ T8276]     dirty_sectors        256
[  138.220776][ T8276]     stripe_sectors       0
[  138.220785][ T8276]     cached_sectors       0
[  138.220794][ T8276]     stripe               0
[  138.220803][ T8276]     stripe_redundancy    0
[  138.220812][ T8276]     io_time[READ]        1
[  138.220822][ T8276]     io_time[WRITE]       9223372036854775809
[  138.220831][ T8276]     fragmentation     0
[  138.220840][ T8276]     bp_start          8
[  138.220849][ T8276]   
[  138.220858][ T8276]   invalid io_time[write]: 9223372036854775809, max 281474976710655, deleting
[  138.231869][ T8276] bcachefs (loop2): accounting_read... done
[  138.266621][ T8276] bcachefs (loop2): alloc_read... done
[  138.266681][ T8276] bcachefs (loop2): snapshots_read... done
[  138.270999][ T8276] bcachefs (loop2): check_allocations...
[  138.301635][ T8276] bcachefs (loop2): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing
[  138.301764][ T8276] bcachefs (loop2): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[  138.302394][ T8276] bcachefs (loop2): bucket 0:27 gen 0 has wrong data_type: got btree, should be need_discard, fixing
[  138.306130][ T8276] bcachefs (loop2): bucket 0:27 gen 0 data type need_discard has wrong dirty_sectors: got 256, should be 0, fixing
[  138.306361][ T8276] bcachefs (loop2): bucket 0:34 gen 0 has wrong data_type: got user, should be need_discard, fixing
[  138.306426][ T8276] bcachefs (loop2): bucket 0:34 gen 0 data type need_discard has wrong dirty_sectors: got 16, should be 0, fixing
[  138.311216][ T8276]  done
[  138.322307][ T8276] bcachefs (loop2): going read-write
[  138.329765][ T8276] bcachefs (loop2): journal_replay...
[  138.357251][ T8311] netlink: 32 bytes leftover after parsing attributes in process `syz.3.499'.
[  138.419569][ T8306] loop1: detected capacity change from 0 to 32768
[  138.469236][ T8276]  done
[  138.470051][ T8276] bcachefs (loop2): check_extents_to_backpointers...
[  138.470828][ T8315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'.
[  138.472656][ T8276] bcachefs (loop2): scanning for missing backpointers in 5/128 buckets
[  138.473715][ T8276]  done
[  138.480641][ T8276] bcachefs (loop2): check_inodes...
[  138.481334][ T8276] bcachefs (loop2): inode points to dirent that does not point back:
[  138.481380][ T8276]   u64s 7 type dirent 4098:8977922886548783724:U32_MAX len 0 ver 0: file0 -> 844424930136067 type reg
[  138.481398][ T8276]   inum: 4099:4294967295 
[  138.481413][ T8276]     mode=100755
[  138.481427][ T8276]     flags=(15300000)
[  138.481441][ T8276]     journal_seq=5
[  138.481455][ T8276]     hash_seed=fc917866faeb7b5b
[  138.481469][ T8276]     hash_type=siphash
[  138.481483][ T8276]     bi_size=1050
[  138.481497][ T8276]     bi_sectors=8
[  138.481511][ T8276]     bi_version=0
[  138.481525][ T8276]     bi_atime=2770562249
[  138.481539][ T8276]     bi_ctime=2770562249
[  138.481553][ T8276]     bi_mtime=2770562249
[  138.481567][ T8276]     bi_otime=2770562249
[  138.481582][ T8276]     bi_uid=0
[  138.481596][ T8276]     bi_gid=0
[  138.481609][ T8276]     bi_nlink=0
[  138.481623][ T8276]     bi_generation=0
[  138.481638][ T8276]     bi_dev=0
[  138.481651][ T8276]     bi_data_checksum=0
[  138.481665][ T8276]     bi_compression=0
[  138.481679][ T8276]     bi_project=0
[  138.481693][ T8276]     bi_background_compression=0
[  138.481707][ T8276]     bi_data_replicas=0
[  138.481721][ T8276]     bi_promote_target=0
[  138.481735][ T8276]     bi_foreground_target=0
[  138.481749][ T8276]     bi_background_target=0
[  138.481763][ T8276]     bi_erasure_code=0
[  138.481777][ T8276]     bi_fields_set=0
[  138.481791][ T8276]     bi_dir=4098
[  138.481805][ T8276]     bi_dir_offset=8977922886548783724
[  138.481819][ T8276]     bi_subvol=0
[  138.481833][ T8276]     bi_parent_subvol=0
[  138.481847][ T8276]     bi_nocow=0
[  138.481860][ T8276]     bi_depth=0
[  138.481874][ T8276]     bi_inodes_32bit=0
[  138.481888][ T8276]     bi_casefold=0, fixing
[  138.484166][ T8276] bcachefs (loop2): inode points to missing dirent
[  138.484184][ T8276]   inum: 536870912:4294967295 
[  138.484194][ T8276]     mode=100755
[  138.484203][ T8276]     flags=(15300000)
[  138.484212][ T8276]     journal_seq=4
[  138.484221][ T8276]     hash_seed=8469d717004af4ef
[  138.484230][ T8276]     hash_type=siphash
[  138.484239][ T8276]     bi_size=10
[  138.484248][ T8276]     bi_sectors=8
[  138.484257][ T8276]     bi_version=0
[  138.484266][ T8276]     bi_atime=2780562352
[  138.484275][ T8276]     bi_ctime=2780562352
[  138.484284][ T8276]     bi_mtime=2780562352
[  138.484293][ T8276]     bi_otime=2780562352
[  138.484302][ T8276]     bi_uid=0
[  138.484319][ T8276]     bi_gid=0
[  138.484329][ T8276]     bi_nlink=0
[  138.484368][ T8276]     bi_generation=0
[  138.484378][ T8276]     bi_dev=0
[  138.484387][ T8276]     bi_data_checksum=0
[  138.484396][ T8276]     bi_compression=0
[  138.484405][ T8276]     bi_project=0
[  138.484414][ T8276]     bi_background_compression=0
[  138.484423][ T8276]     bi_data_replicas=0
[  138.484433][ T8276]     bi_promote_target=0
[  138.484442][ T8276]     bi_foreground_target=0
[  138.484451][ T8276]     bi_background_target=0
[  138.484460][ T8276]     bi_erasure_code=0
[  138.484469][ T8276]     bi_fields_set=0
[  138.484478][ T8276]     bi_dir=4096
[  138.484487][ T8276]     bi_dir_offset=4330382808765833931
[  138.484497][ T8276]     bi_subvol=0
[  138.484506][ T8276]     bi_parent_subvol=0
[  138.484515][ T8276]     bi_nocow=0
[  138.484524][ T8276]     bi_depth=0
[  138.484533][ T8276]     bi_inodes_32bit=0
[  138.484542][ T8276]     bi_casefold=0, fixing
[  138.485105][ T8276]  done
[  138.509462][ T8276] bcachefs (loop2): resume_logged_ops... done
[  138.509548][ T8276] bcachefs (loop2): delete_dead_inodes... done
[  138.518687][ T8276] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean
[  138.518730][ T8276] bcachefs (loop2): check_extents_to_backpointers... done
[  138.519545][ T8276] bcachefs (loop2): check_inodes... done
[  138.519978][ T8276] bcachefs (loop2): resume_logged_ops... done
[  138.520025][ T8276] bcachefs (loop2): delete_dead_inodes... done
[  138.520866][ T8276] bcachefs (loop2): done starting filesystem
[  138.598204][ T8306] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open
[  138.598438][ T8306] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete
[  138.630517][ T6497] bcachefs (loop2): shutting down
[  138.632086][ T6497] bcachefs (loop2): going read-only
[  138.634073][ T6497] bcachefs (loop2): finished waiting for writes to stop
[  138.665936][ T6497] bcachefs (loop2): flushing journal and stopping allocators, journal seq 19
[  138.666137][ T6497] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 19
[  138.684765][ T6497] bcachefs (loop2): clean shutdown complete, journal seq 20
[  138.702465][ T8306] bcachefs: bch2_fs_get_tree() error: EINVAL
[  138.714011][ T6497] bcachefs (loop2): marking filesystem clean
[  138.726090][ T8328] netlink: 20 bytes leftover after parsing attributes in process `syz.3.501'.
[  138.910136][ T6497] bcachefs (loop2): shutdown complete
[  139.008552][ T8336] loop3: detected capacity change from 0 to 16
[  139.027392][ T8336] erofs (device loop3): mounted with root inode @ nid 36.
[  139.940085][ T8350] netlink: 32 bytes leftover after parsing attributes in process `syz.5.511'.
[  140.070943][ T8353] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input2
[  140.111387][ T8355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  140.111664][ T8355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  140.221015][ T8367] loop5: detected capacity change from 0 to 16
[  140.226201][ T8367] erofs (device loop5): mounted with root inode @ nid 36.
[  140.430716][ T8375] netlink: 'syz.4.522': attribute type 1 has an invalid length.
[  140.483661][ T8375] 8021q: adding VLAN 0 to HW filter on device bond1
[  140.524834][ T8379] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  140.669495][ T8383] netlink: 32 bytes leftover after parsing attributes in process `syz.4.524'.
[  140.771729][ T8386] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input3
[  142.572529][ T8420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.573741][ T8420] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.664077][ T8423] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  144.279559][ T8450] loop1: detected capacity change from 0 to 256
[  144.280385][ T8450] exfat: Bad value for 'fmask'
[  145.478795][ T8441] loop4: detected capacity change from 0 to 32768
[  145.507667][ T8441] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.543 (8441)
[  145.558551][ T8441] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  145.558657][ T8441] BTRFS info (device loop4): using crc32c (crc32c-arm64) checksum algorithm
[  145.561883][ T8441] BTRFS info (device loop4): using free-space-tree
[  145.940229][ T8468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  145.940492][ T8468] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  146.104665][ T8441] BTRFS error: failed to open device for path gærzàá_m%ÁÔp­àÓë6Ôåé(#Ðûx%<<êPµ¿¢$×9N£ÈÎçž>âLä^VüMé‘ïiî’I÷§˜ئhNœ×µ with flags 0x1: -2
[  146.147860][ T6500] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  146.290127][ T8485] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input4
[  146.413743][ T8460] loop5: detected capacity change from 0 to 32768
[  146.423147][ T8460] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.549 (8460)
[  146.438426][ T8460] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  146.438536][ T8460] BTRFS info (device loop5): using crc32c (crc32c-arm64) checksum algorithm
[  146.438573][ T8460] BTRFS info (device loop5): disk space caching is enabled
[  146.438598][ T8460] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  146.500337][ T8464] loop1: detected capacity change from 0 to 32768
[  146.562197][ T8460] BTRFS info (device loop5): rebuilding free space tree
[  146.608186][ T8460] BTRFS info (device loop5): disabling free space tree
[  146.608280][ T8460] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  146.608309][ T8460] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  148.080844][ T8464] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  148.080844][ T8464]   allowing incompatible features above 0.0: (unknown version)
[  148.081083][ T8464] bcachefs (loop1): invalid bkey in superblock btree=extents level=0: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0
[  148.085388][ T8464]   invalid key type for btree extents (btree_ptr_v2), deleting
[  148.085497][ T8464] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  148.085596][ T8464] bcachefs (loop1): Version upgrade from 1.6: btree_subvolume_children to 1.7: mi_btree_bitmap incomplete
[  148.085596][ T8464] Doing compatible version upgrade from 1.6: btree_subvolume_children to 1.25: extent_flags
[  148.085596][ T8464]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  148.099114][ T8464] bcachefs (loop1): invalid bkey in btree_node btree=alloc level=0: u64s 11 type alloc_v4 0:6:0 len 0 ver 0: 
[  148.099135][ T8464]     gen 0 oldest_gen 0 data_type sb
[  148.099144][ T8464]     journal_seq_nonempty 1
[  148.099154][ T8464]     journal_seq_empty    0
[  148.099163][ T8464]     need_discard         1
[  148.099172][ T8464]     need_inc_gen         1
[  148.099182][ T8464]     dirty_sectors        256
[  148.101214][ T8464]     stripe_sectors       0
[  148.101230][ T8464]     cached_sectors       0
[  148.101240][ T8464]     stripe               0
[  148.101249][ T8464]     stripe_redundancy    0
[  148.101258][ T8464]     io_time[READ]        1
[  148.101267][ T8464]     io_time[WRITE]       9223372036854775809
[  148.101277][ T8464]     fragmentation     0
[  148.101286][ T8464]     bp_start          8
[  148.101295][ T8464]   
[  148.101304][ T8464]   invalid io_time[write]: 9223372036854775809, max 281474976710655, deleting
[  148.153691][ T8464] bcachefs (loop1): accounting_read... done
[  148.177695][ T8464] bcachefs (loop1): alloc_read... done
[  148.177790][ T8464] bcachefs (loop1): snapshots_read... done
[  148.177864][ T8464] bcachefs (loop1): check_allocations...
[  148.223531][ T8464] bcachefs (loop1): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing
[  148.223661][ T8464] bcachefs (loop1): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[  148.229657][ T8464] bcachefs (loop1): bucket 0:27 gen 0 has wrong data_type: got btree, should be need_discard, fixing
[  148.229774][ T8464] bcachefs (loop1): bucket 0:27 gen 0 data type need_discard has wrong dirty_sectors: got 256, should be 0, fixing
[  148.230017][ T8464] bcachefs (loop1): bucket 0:34 gen 0 has wrong data_type: got user, should be need_discard, fixing
[  148.230104][ T8464] bcachefs (loop1): bucket 0:34 gen 0 data type need_discard has wrong dirty_sectors: got 16, should be 0, fixing
[  148.238324][ T8464]  done
[  148.250491][ T8464] bcachefs (loop1): going read-write
[  148.274735][ T8464] bcachefs (loop1): journal_replay...
[  148.418472][ T6714] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  148.435625][ T8534] netlink: 'syz.4.560': attribute type 1 has an invalid length.
[  148.490278][ T8464]  done
[  148.493937][ T8464] bcachefs (loop1): check_extents_to_backpointers...
[  148.502185][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.560'.
[  148.502813][ T8464] bcachefs (loop1): scanning for missing backpointers in 5/128 buckets
[  148.505941][ T8464]  done
[  148.520725][ T8464] bcachefs (loop1): check_inodes...
[  148.521514][ T8464] bcachefs (loop1): inode points to dirent that does not point back:
[  148.521561][ T8464]   u64s 7 type dirent 4098:8977922886548783724:U32_MAX len 0 ver 0: file0 -> 844424930136067 type reg
[  148.521579][ T8464]   inum: 4099:4294967295 
[  148.521588][ T8464]     mode=100755
[  148.521597][ T8464]     flags=(15300000)
[  148.521606][ T8464]     journal_seq=5
[  148.521615][ T8464]     hash_seed=fc917866faeb7b5b
[  148.521624][ T8464]     hash_type=siphash
[  148.521633][ T8464]     bi_size=1050
[  148.521642][ T8464]     bi_sectors=8
[  148.521651][ T8464]     bi_version=0
[  148.521660][ T8464]     bi_atime=2770562249
[  148.521669][ T8464]     bi_ctime=2770562249
[  148.521678][ T8464]     bi_mtime=2770562249
[  148.521687][ T8464]     bi_otime=2770562249
[  148.521696][ T8464]     bi_uid=0
[  148.521705][ T8464]     bi_gid=0
[  148.521714][ T8464]     bi_nlink=0
[  148.521722][ T8464]     bi_generation=0
[  148.521731][ T8464]     bi_dev=0
[  148.521740][ T8464]     bi_data_checksum=0
[  148.521749][ T8464]     bi_compression=0
[  148.521758][ T8464]     bi_project=0
[  148.521767][ T8464]     bi_background_compression=0
[  148.521776][ T8464]     bi_data_replicas=0
[  148.521785][ T8464]     bi_promote_target=0
[  148.521794][ T8464]     bi_foreground_target=0
[  148.521803][ T8464]     bi_background_target=0
[  148.521813][ T8464]     bi_erasure_code=0
[  148.521822][ T8464]     bi_fields_set=0
[  148.521830][ T8464]     bi_dir=4098
[  148.521839][ T8464]     bi_dir_offset=8977922886548783724
[  148.521849][ T8464]     bi_subvol=0
[  148.521858][ T8464]     bi_parent_subvol=0
[  148.521867][ T8464]     bi_nocow=0
[  148.521875][ T8464]     bi_depth=0
[  148.521884][ T8464]     bi_inodes_32bit=0
[  148.521893][ T8464]     bi_casefold=0, fixing
[  148.522535][ T8464] bcachefs (loop1): inode points to missing dirent
[  148.522547][ T8464]   inum: 536870912:4294967295 
[  148.522557][ T8464]     mode=100755
[  148.522566][ T8464]     flags=(15300000)
[  148.522575][ T8464]     journal_seq=4
[  148.522584][ T8464]     hash_seed=8469d717004af4ef
[  148.522593][ T8464]     hash_type=siphash
[  148.522602][ T8464]     bi_size=10
[  148.522611][ T8464]     bi_sectors=8
[  148.522620][ T8464]     bi_version=0
[  148.522629][ T8464]     bi_atime=2780562352
[  148.522638][ T8464]     bi_ctime=2780562352
[  148.522647][ T8464]     bi_mtime=2780562352
[  148.522656][ T8464]     bi_otime=2780562352
[  148.522665][ T8464]     bi_uid=0
[  148.522674][ T8464]     bi_gid=0
[  148.522683][ T8464]     bi_nlink=0
[  148.522691][ T8464]     bi_generation=0
[  148.522700][ T8464]     bi_dev=0
[  148.522709][ T8464]     bi_data_checksum=0
[  148.522718][ T8464]     bi_compression=0
[  148.522727][ T8464]     bi_project=0
[  148.522736][ T8464]     bi_background_compression=0
[  148.522745][ T8464]     bi_data_replicas=0
[  148.522754][ T8464]     bi_promote_target=0
[  148.522763][ T8464]     bi_foreground_target=0
[  148.522773][ T8464]     bi_background_target=0
[  148.522782][ T8464]     bi_erasure_code=0
[  148.522791][ T8464]     bi_fields_set=0
[  148.522800][ T8464]     bi_dir=4096
[  148.522809][ T8464]     bi_dir_offset=4330382808765833931
[  148.522818][ T8464]     bi_subvol=0
[  148.522827][ T8464]     bi_parent_subvol=0
[  148.522836][ T8464]     bi_nocow=0
[  148.526162][ T8464]     bi_depth=0
[  148.526176][ T8464]     bi_inodes_32bit=0
[  148.526185][ T8464]     bi_casefold=0, fixing
[  148.526720][ T8464]  done
[  148.535474][ T8537] netlink: 56 bytes leftover after parsing attributes in process `syz.3.561'.
[  148.537930][ T8464] bcachefs (loop1): resume_logged_ops... done
[  148.538007][ T8464] bcachefs (loop1): delete_dead_inodes... done
[  148.548918][ T8464] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean
[  148.548956][ T8464] bcachefs (loop1): check_extents_to_backpointers... done
[  148.549740][ T8464] bcachefs (loop1): check_inodes... done
[  148.550174][ T8464] bcachefs (loop1): resume_logged_ops... done
[  148.550221][ T8464] bcachefs (loop1): delete_dead_inodes... done
[  148.561671][ T8464] bcachefs (loop1): done starting filesystem
[  148.593838][ T8534] 8021q: adding VLAN 0 to HW filter on device bond2
[  148.675442][ T6489] bcachefs (loop1): shutting down
[  148.675504][ T6489] bcachefs (loop1): going read-only
[  148.675553][ T6489] bcachefs (loop1): finished waiting for writes to stop
[  148.729803][ T6489] bcachefs (loop1): flushing journal and stopping allocators, journal seq 21
[  148.732661][ T6489] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 21
[  148.746049][ T6489] bcachefs (loop1): clean shutdown complete, journal seq 22
[  148.806483][ T6489] bcachefs (loop1): marking filesystem clean
[  148.883454][ T8541] loop5: detected capacity change from 0 to 256
[  148.884092][ T8541] exfat: Bad value for 'fmask'
[  148.902093][ T6489] bcachefs (loop1): shutdown complete
[  150.089082][ T8553] binder: BINDER_SET_CONTEXT_MGR already set
[  150.089217][ T8553] binder: 8552:8553 ioctl 4018620d 20000040 returned -16
[  150.381179][ T8561] loop2: detected capacity change from 0 to 256
[  150.994475][ T8561] exfat: Bad value for 'fmask'
[  151.053717][ T2110] Unable to handle kernel paging request at virtual address dfff800000000000
[  151.056702][ T2110] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  151.059754][ T2110] Mem abort info:
[  151.063374][ T2110]   ESR = 0x0000000096000005
[  151.064878][ T2110]   EC = 0x25: DABT (current EL), IL = 32 bits
[  151.066763][ T2110]   SET = 0, FnV = 0
[  151.068057][ T2110]   EA = 0, S1PTW = 0
[  151.069332][ T2110]   FSC = 0x05: level 1 translation fault
[  151.071098][ T2110] Data abort info:
[  151.072371][ T2110]   ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000
[  151.074834][ T2110]   CM = 0, WnR = 0, TnD = 0, TagAccess = 0
[  151.076754][ T2110]   GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0
[  151.079381][ T2110] [dfff800000000000] address between user and kernel address ranges
[  151.081954][ T2110] Internal error: Oops: 0000000096000005 [#1]  SMP
[  151.083652][ T2110] Modules linked in:
[  151.084640][ T2110] CPU: 1 UID: 0 PID: 2110 Comm: kworker/u8:7 Not tainted 6.15.0-rc4-syzkaller-ge0f4c8dd9d2d #0 PREEMPT 
[  151.087661][ T2110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  151.090351][ T2110] Workqueue: events_unbound bpf_map_free_deferred
[  151.091978][ T2110] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  151.093945][ T2110] pc : drain_mem_cache+0x90/0x494
[  151.095216][ T2110] lr : drain_mem_cache+0x88/0x494
[  151.096528][ T2110] sp : ffff80009fc57960
[  151.097605][ T2110] x29: ffff80009fc57960 x28: 1fffe0001ad4603b x27: ffffffffffffffff
[  151.099774][ T2110] x26: 0000000000000000 x25: dfff800000000000 x24: dfff800000000000
[  151.101980][ T2110] x23: dfff800000000000 x22: fffffdffbf6e3278 x21: 0000000000000001
[  151.104079][ T2110] x20: fffffdffbf6e31d0 x19: 0000000000000000 x18: 1fffe00036711a76
[  151.106118][ T2110] x17: ffff80008f2fe000 x16: ffff800080512f80 x15: 0000000000000001
[  151.108114][ T2110] x14: 1fffffbff7edc64f x13: 0000000000000000 x12: 0000000000000000
[  151.110174][ T2110] x11: ffff7fbff7edc650 x10: 0000000000ff0100 x9 : 0000000000000000
[  151.112256][ T2110] x8 : 0000000000000000 x7 : ffff8000807c8cbc x6 : 0000000000000000
[  151.114458][ T2110] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008090d8dc
[  151.116549][ T2110] x2 : 0000000000000001 x1 : 0000000000000001 x0 : 0000000000000000
[  151.118563][ T2110] Call trace:
[  151.119522][ T2110]  drain_mem_cache+0x90/0x494 (P)
[  151.120884][ T2110]  bpf_mem_alloc_destroy+0x120/0x450
[  151.122349][ T2110]  trie_free+0x124/0x150
[  151.123490][ T2110]  bpf_map_free_deferred+0xdc/0x108
[  151.124939][ T2110]  process_one_work+0x7e8/0x156c
[  151.126273][ T2110]  worker_thread+0x958/0xed8
[  151.127512][ T2110]  kthread+0x5fc/0x75c
[  151.128627][ T2110]  ret_from_fork+0x10/0x20
[  151.129797][ T2110] Code: aa1503e1 97f8098c b4000375 d343fea8 (38776908) 
[  151.131569][ T2110] ---[ end trace 0000000000000000 ]---
[  151.622829][ T2110] Kernel panic - not syncing: Oops: Fatal exception
[  151.624608][ T2110] SMP: stopping secondary CPUs
[  151.625877][ T2110] Kernel Offset: disabled
[  151.626979][ T2110] CPU features: 0x0800,000040e0,01000250,82017203
[  151.628655][ T2110] Memory Limit: none
[  152.118981][ T2110] Rebooting in 86400 seconds..