last executing test programs:

49.885058108s ago: executing program 4:
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xccba275ff009971}, 0x24000050)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

48.720628608s ago: executing program 4:
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xccba275ff009971}, 0x24000050)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

46.324355949s ago: executing program 4:
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0)
mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20)
open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x88000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0)
move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f00000023c0)={0x2020}, 0x2020)

46.143800207s ago: executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000180), 0x6db6e559)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
r1 = epoll_create1(0x0)
r2 = ioctl$NS_GET_PARENT(r1, 0x5450, 0x0)
r3 = dup(r1)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000080))
epoll_pwait2(r3, &(0x7f0000000300)=[{}], 0x1, &(0x7f0000000340), 0x0, 0x0)

45.435844257s ago: executing program 4:
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xccba275ff009971}, 0x24000050)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

44.392367948s ago: executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000180), 0x6db6e559)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
r1 = epoll_create1(0x0)
r2 = ioctl$NS_GET_PARENT(r1, 0x5450, 0x0)
r3 = dup(r1)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000080))
epoll_pwait2(r3, &(0x7f0000000300)=[{}], 0x1, &(0x7f0000000340), 0x0, 0x0)

31.933904777s ago: executing program 2:
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00')
read$FUSE(r2, &(0x7f00000000c0)={0x2020}, 0x2067)
write$proc_mixer(r1, &(0x7f0000000240)=ANY=[], 0xbf)
dup3(r0, r1, 0x0)

31.608209487s ago: executing program 2:
syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file0\x00', 0x8c48, &(0x7f0000000240)=ANY=[], 0x1, 0x59d, &(0x7f00000009c0)="$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")
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)
quotactl$Q_GETINFO(0x0, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000040), 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x280008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c302c73686f72746e616d653d77696e39352c6572726f72733d72656d6f756e742d726f2c696f636861727365743d64656661756c742c756e695f786c6125048de308e7862bfa74653d302c6e6f6e756d7461696c3d302c7574663820302c666c7573682c726f6469722c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e39352c7569643d00f1ac5e6060c5b360cb02c812f9a71447b5d45409497a79", @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=0,shortname=mixed,uni_xlate=0,shortname=winnt,\x00'], 0x97, 0x2a9, &(0x7f0000000500)="$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")
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x0, 0x0, 0x101}})

31.418718647s ago: executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ipvlan0\x00', 0x2})
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
close(r1)
poll(0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
rt_sigreturn()
mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0)
socket$packet(0x11, 0x0, 0x300)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140))
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/dmi', 0x0, 0x0)

31.403107539s ago: executing program 2:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

31.262281661s ago: executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cdf}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x766c, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x0)
bind$packet(r9, &(0x7f0000000040)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r9, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000640)='svcrdma_page_overrun_err\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, <r13=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000005c0)={&(0x7f00000002c0)="86eb777b58924e2f58cc61838d55cb9007b8ac0c000789d3463e758baef693ad7a2b3016bc3b42925124b87100d706878e840e6500d4df48f08fc02c2ef5ec0961fffc37051635b6fb788bbbcbc9fc45f48fec28705c34e7f3bbb00f6733e6baf41045acebb424b1efb18f9fb9d44beb6839d79b6f5d746ff9463328e866d700840a686d7b8b3b91962b3e77c31ed6852b138500c312898afd99a14bcfa29534a8e262", &(0x7f0000000380)=""/180, &(0x7f0000000440)="4dd1192f0bc220960cc77d53d2777708d9d9f00a7f06f8b86376a56d55081c034a10eeeb707d17870111adb4d38db16eb236a98ef8aa5a0124da6d80a41e939f17bab1e3fae4f232357aed80ae30502ce51213f78ac4b13cd5f625532fee07d1b80645bdffee54df9918f953b768a916a33984a3de1b9e88e934f557543d2deceb1d85be987e70d8694b2d500b5fd1ba55804a834db610d3f239d6ab9ca5375b8d3db13da4ca99b697d74de4c06806b69ffdc3c9030340820524", &(0x7f0000000500)="bbdc4dcc922cd8f94c856d22ce7c8f11b78c2ad3600525a725b7a22a1bb7ad549c3ea967be1fbe0271a1115361f35465c49e4fd7aa9b18d3452a728de364f20cea5addf1b3c2f4915886158acf78cb3ec03dfa67a82f1098b53bc169d6f07c2575b436fccdc7d51c720939cd7f5060d2724ce3499a8f146fad64b495882f71c532c70a736864acd8c70e36e24448a959", 0x5, r13, 0x4}, 0x38)
syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd602e5cea00483c0020010000000000000000000000000002ff0200000000000000000000000000010004"], 0x0)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r14, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000030801010000000000000000020000010900010073797a30000000000600024000040022050003003a000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0)

30.968907986s ago: executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc)

30.921272804s ago: executing program 0:
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00')
read$FUSE(r2, &(0x7f00000000c0)={0x2020}, 0x2067)
write$proc_mixer(r1, &(0x7f0000000240)=ANY=[], 0xbf)
dup3(r0, r1, 0x0)

30.831940137s ago: executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cdf}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x766c, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x0)
bind$packet(r9, &(0x7f0000000040)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r9, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000640)='svcrdma_page_overrun_err\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, <r13=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000005c0)={&(0x7f00000002c0)="86eb777b58924e2f58cc61838d55cb9007b8ac0c000789d3463e758baef693ad7a2b3016bc3b42925124b87100d706878e840e6500d4df48f08fc02c2ef5ec0961fffc37051635b6fb788bbbcbc9fc45f48fec28705c34e7f3bbb00f6733e6baf41045acebb424b1efb18f9fb9d44beb6839d79b6f5d746ff9463328e866d700840a686d7b8b3b91962b3e77c31ed6852b138500c312898afd99a14bcfa29534a8e262", &(0x7f0000000380)=""/180, &(0x7f0000000440)="4dd1192f0bc220960cc77d53d2777708d9d9f00a7f06f8b86376a56d55081c034a10eeeb707d17870111adb4d38db16eb236a98ef8aa5a0124da6d80a41e939f17bab1e3fae4f232357aed80ae30502ce51213f78ac4b13cd5f625532fee07d1b80645bdffee54df9918f953b768a916a33984a3de1b9e88e934f557543d2deceb1d85be987e70d8694b2d500b5fd1ba55804a834db610d3f239d6ab9ca5375b8d3db13da4ca99b697d74de4c06806b69ffdc3c9030340820524", &(0x7f0000000500)="bbdc4dcc922cd8f94c856d22ce7c8f11b78c2ad3600525a725b7a22a1bb7ad549c3ea967be1fbe0271a1115361f35465c49e4fd7aa9b18d3452a728de364f20cea5addf1b3c2f4915886158acf78cb3ec03dfa67a82f1098b53bc169d6f07c2575b436fccdc7d51c720939cd7f5060d2724ce3499a8f146fad64b495882f71c532c70a736864acd8c70e36e24448a959", 0x5, r13, 0x4}, 0x38)
syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd602e5cea00483c0020010000000000000000000000000002ff0200000000000000000000000000010004"], 0x0)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r14, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000030801010000000000000000020000010900010073797a30000000000600024000040022050003003a000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0)

30.710598566s ago: executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c000000120001010000000000000000000000004e2200000000000000000000000000000000000000000000000000400000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000080000f9ffff"], 0x4c}}, 0x0)

30.610752782s ago: executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000240)={0x1, 0x2, 0x1, 0x20000})

30.523873165s ago: executing program 1:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x8000003d)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

30.48937982s ago: executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ipvlan0\x00', 0x2})
preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
close(r1)
poll(0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
rt_sigreturn()
mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0)
socket$packet(0x11, 0x0, 0x300)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140))
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/dmi', 0x0, 0x0)

30.451971186s ago: executing program 0:
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000001740)=ANY=[@ANYRES64=r1, @ANYBLOB="297c00f9c21980234eab918ac814309e197710e2d610b50fc9fa30d71b80aa11665fc7ff638d11ea1f12", @ANYBLOB="3d8bf0955e571ed85bd72e40205496ed401eb01ba54c3a2ec565f6baf4011d1b6cc3e2148ed1e5742b70c0409b2460a9be8fe02bac9b630c48cf798f3207221bed5de4094c4ebd7a2cdc494ddb81193e47564a211318914f329065e640ff2cf61a6e53498b14d49de642ac1c9835c4f21328f118150a5eb2563fe4e1823b44bf87a12fe02c4be98933fc52966076dd4291f7358e1064699e51ed1c7be6fc8025f11f070c046f1b8cfc0bb68626fd9ed953f649f076d424c8ee174c3ce621d7ff7590627456bc7f70e3032aeac2", @ANYRES16, @ANYBLOB="6b36cc1c67784f38aea4fbe12779dc033e6da3654442af1f3745ef9960f433e51bd0f8c57df57a30eeeba1eaefbc8f0615c16bbb43784a34aa8c4b180f4dbd8786d81cc3b2a23fd7f66ae762ff6b458aa6ab52638e904f2f7bb561491db1447ee6b90ff2c4bccd06a24defd20b9fed47408cc406df6eecdd2fd56e0a45c4c6ffa0f265bd84a7d969c13135e79b97ec4d24c22cd9c8883dbee1ac7ad48a0505e555ff75795582a0c79c7bfd7adcaa2f5f6ecb4993", @ANYBLOB="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", @ANYRES8, @ANYRES32=r0], 0x2, 0x1e0, &(0x7f00000001c0)="$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")

30.351374932s ago: executing program 0:
r0 = syz_open_dev$I2C(&(0x7f00000021c0), 0x0, 0x0)
ioctl$I2C_SLAVE(r0, 0x703, 0x21f)

30.349499632s ago: executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001500)={0x2c, r2, 0x1, 0x0, 0x0, {0x1d}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x2c}}, 0x0)

30.223387592s ago: executing program 1:
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000040)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}, @printk={@ld}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)

30.193285806s ago: executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cdf}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x766c, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x0)
bind$packet(r9, &(0x7f0000000040)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r9, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000640)='svcrdma_page_overrun_err\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, <r13=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000005c0)={&(0x7f00000002c0)="86eb777b58924e2f58cc61838d55cb9007b8ac0c000789d3463e758baef693ad7a2b3016bc3b42925124b87100d706878e840e6500d4df48f08fc02c2ef5ec0961fffc37051635b6fb788bbbcbc9fc45f48fec28705c34e7f3bbb00f6733e6baf41045acebb424b1efb18f9fb9d44beb6839d79b6f5d746ff9463328e866d700840a686d7b8b3b91962b3e77c31ed6852b138500c312898afd99a14bcfa29534a8e262", &(0x7f0000000380)=""/180, &(0x7f0000000440)="4dd1192f0bc220960cc77d53d2777708d9d9f00a7f06f8b86376a56d55081c034a10eeeb707d17870111adb4d38db16eb236a98ef8aa5a0124da6d80a41e939f17bab1e3fae4f232357aed80ae30502ce51213f78ac4b13cd5f625532fee07d1b80645bdffee54df9918f953b768a916a33984a3de1b9e88e934f557543d2deceb1d85be987e70d8694b2d500b5fd1ba55804a834db610d3f239d6ab9ca5375b8d3db13da4ca99b697d74de4c06806b69ffdc3c9030340820524", &(0x7f0000000500)="bbdc4dcc922cd8f94c856d22ce7c8f11b78c2ad3600525a725b7a22a1bb7ad549c3ea967be1fbe0271a1115361f35465c49e4fd7aa9b18d3452a728de364f20cea5addf1b3c2f4915886158acf78cb3ec03dfa67a82f1098b53bc169d6f07c2575b436fccdc7d51c720939cd7f5060d2724ce3499a8f146fad64b495882f71c532c70a736864acd8c70e36e24448a959", 0x5, r13, 0x4}, 0x38)
syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd602e5cea00483c0020010000000000000000000000000002ff0200000000000000000000000000010004"], 0x0)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r14, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000030801010000000000000000020000010900010073797a30000000000600024000040022050003003a000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0)

30.183311918s ago: executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc)

30.140593345s ago: executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0)

30.031945821s ago: executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cdf}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x766c, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x0)
bind$packet(r9, &(0x7f0000000040)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r9, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000640)='svcrdma_page_overrun_err\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, <r13=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000005c0)={&(0x7f00000002c0)="86eb777b58924e2f58cc61838d55cb9007b8ac0c000789d3463e758baef693ad7a2b3016bc3b42925124b87100d706878e840e6500d4df48f08fc02c2ef5ec0961fffc37051635b6fb788bbbcbc9fc45f48fec28705c34e7f3bbb00f6733e6baf41045acebb424b1efb18f9fb9d44beb6839d79b6f5d746ff9463328e866d700840a686d7b8b3b91962b3e77c31ed6852b138500c312898afd99a14bcfa29534a8e262", &(0x7f0000000380)=""/180, &(0x7f0000000440)="4dd1192f0bc220960cc77d53d2777708d9d9f00a7f06f8b86376a56d55081c034a10eeeb707d17870111adb4d38db16eb236a98ef8aa5a0124da6d80a41e939f17bab1e3fae4f232357aed80ae30502ce51213f78ac4b13cd5f625532fee07d1b80645bdffee54df9918f953b768a916a33984a3de1b9e88e934f557543d2deceb1d85be987e70d8694b2d500b5fd1ba55804a834db610d3f239d6ab9ca5375b8d3db13da4ca99b697d74de4c06806b69ffdc3c9030340820524", &(0x7f0000000500)="bbdc4dcc922cd8f94c856d22ce7c8f11b78c2ad3600525a725b7a22a1bb7ad549c3ea967be1fbe0271a1115361f35465c49e4fd7aa9b18d3452a728de364f20cea5addf1b3c2f4915886158acf78cb3ec03dfa67a82f1098b53bc169d6f07c2575b436fccdc7d51c720939cd7f5060d2724ce3499a8f146fad64b495882f71c532c70a736864acd8c70e36e24448a959", 0x5, r13, 0x4}, 0x38)
syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd602e5cea00483c0020010000000000000000000000000002ff0200000000000000000000000000010004"], 0x0)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r14, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000030801010000000000000000020000010900010073797a30000000000600024000040022050003003a000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0)

464.851177ms ago: executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}, @IFLA_MTU={0x8, 0x4, 0x4e2affba}]}, 0x44}}, 0x0)

175.351883ms ago: executing program 0:
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00')
read$FUSE(r2, &(0x7f00000000c0)={0x2020}, 0x2067)
write$proc_mixer(r1, &(0x7f0000000240)=ANY=[], 0xbf)
dup3(r0, r1, 0x0)

127.8722ms ago: executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cdf}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x766c, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x0)
bind$packet(r9, &(0x7f0000000040)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r9, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000640)='svcrdma_page_overrun_err\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, <r13=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000005c0)={&(0x7f00000002c0)="86eb777b58924e2f58cc61838d55cb9007b8ac0c000789d3463e758baef693ad7a2b3016bc3b42925124b87100d706878e840e6500d4df48f08fc02c2ef5ec0961fffc37051635b6fb788bbbcbc9fc45f48fec28705c34e7f3bbb00f6733e6baf41045acebb424b1efb18f9fb9d44beb6839d79b6f5d746ff9463328e866d700840a686d7b8b3b91962b3e77c31ed6852b138500c312898afd99a14bcfa29534a8e262", &(0x7f0000000380)=""/180, &(0x7f0000000440)="4dd1192f0bc220960cc77d53d2777708d9d9f00a7f06f8b86376a56d55081c034a10eeeb707d17870111adb4d38db16eb236a98ef8aa5a0124da6d80a41e939f17bab1e3fae4f232357aed80ae30502ce51213f78ac4b13cd5f625532fee07d1b80645bdffee54df9918f953b768a916a33984a3de1b9e88e934f557543d2deceb1d85be987e70d8694b2d500b5fd1ba55804a834db610d3f239d6ab9ca5375b8d3db13da4ca99b697d74de4c06806b69ffdc3c9030340820524", &(0x7f0000000500)="bbdc4dcc922cd8f94c856d22ce7c8f11b78c2ad3600525a725b7a22a1bb7ad549c3ea967be1fbe0271a1115361f35465c49e4fd7aa9b18d3452a728de364f20cea5addf1b3c2f4915886158acf78cb3ec03dfa67a82f1098b53bc169d6f07c2575b436fccdc7d51c720939cd7f5060d2724ce3499a8f146fad64b495882f71c532c70a736864acd8c70e36e24448a959", 0x5, r13, 0x4}, 0x38)
syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd602e5cea00483c0020010000000000000000000000000002ff0200000000000000000000000000010004"], 0x0)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r14, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000030801010000000000000000020000010900010073797a30000000000600024000040022050003003a000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0)

0s ago: executing program 2:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1}}], 0x1, 0x0)
accept4$x25(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r1}, 0x10)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = socket$inet(0xa, 0x801, 0x84)
sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
listen(0xffffffffffffffff, 0x8)
r4 = accept4(r3, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRESOCT=0x0, @ANYRES64], 0x43, 0x555c, &(0x7f0000005b80)="$eJzs3E1rXNUbAPDnJk3f//0HceGuF4qQQCd00hd0V7XFF2wpVReudJK5HabN5IZkOokFQcGluPCbiIIrl34GF67diQvFnVCZe+5ooxaUzkvb/H4w89xz5sxznzOEgefeMAEcWIv5rz9ncSqORcR8RJyMGB7fzyIiGy26nMJzEXE6IuYeeGT1/B8ThyPieEScGiZPObP6pc/PDs5c/OmNX7757sihE198/f3sdg3M2vMR0dtKx7u9FMtOirfr+dagW8XehUEd0wu9O/W4THH347Uqw25rtK5VxfOdtL7curszjLc2WuvD2Onequa3NtMJdwYp7hZr1Rtut7arcbtYq2J3p6xi516qa+9e+m67t9NPedp1vg+q9NHvj2KaL/aKtJ+tO1Vc3+zX8ylv2S72hnFQx9F373q50a7qWHuED/ox92Z38+5ePii2d7rlZn5xpfnCSvNSo7ldtot+caHR6rUvXciXOhvDZY1+0epd7pRlZ6NYWS97y/lSZ3290WzmS1eKtW5rM282V86vnGtcXK6PzuavXn8n32jnS8P4cnfzbr+7sZPfKrfz9I7lfHXl/IvL+Zlm/ta1G/mNm1evXrvx9ntX3r3+0rXXX6kX/a2sfGn13Opqo3musdpcPkD7/6Queoz7h0eSzboAgCfPQ/r/0P8DkzTW/r94sP/fvhkx+f4/Jtj/16fT/z9u/e9B7/8nsH94JP+1//9wQnUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADB1Pyx8+Vp1sJjGJ+r5/9VTz9TjLCLmIuL+P5iPw/tyztd5Fh6yfuEvNXybRZVheI4j9eN4RFyuH7/9f9KfAgAAADy9vvro9GepW09Pi7MuiGlKF23mTr4/pnxZRCws/jimbHPDp2fHlKz6+z4Ue2PKVl3AOjqmZOmS26FxZftX5veFow+ELIW5qZYDAABMxf5OYLpdCAAAANP06awLYDayGN3KHN0Lrv7z/s8bgsf2jQAAAIAnUDbrAgAAAICJq/p/v/8HAAAAT7f0+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8zs795CoRgwEA/4b35j2efyIx7r2KOziF8QguXSIH8BKsXI9X8AKcAePGIxjG0A4EjYAJnUHN75cMbSfloyWQ0K+hAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAffpSN7NP85cfLo2zadu7iGjPeDjWp8xsAAAAgN9Z180sVSa5/bi7/7S79bxrVxExOrJ4v4m7g4jjfZz6SP/6lzF8jkgRtq9x312PIuJVd31/1ve7AAAAAP+v1WI5jbjZVtPD5NoDYkg5aTN68uZszypifj5eFRH15FuJoaVkUxXxolCw9Pm+jXeFoqUE1rhQsJxyuy0V7Y+kr/s+azc+KKpcjE4/v9jcAQCAAeWVwO73/rCrEAAAAIb09toDoKD3B/XXp7tWsdvK3G8F3uei2957+KkFAAAA/IOqaw8AAAAA6F1a/6/r5uPXKHn+X/5PgfP/AAAA4O+Qz/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgT+u6ma0Wy+mlcTbtZcrMBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjB/ryjQAiEQRjsXd+ZzP0PKw2amppUgfDxNwYDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCb3/3l/8TUOJPMvTaWnkeStVNj69TYOzeO/jC+fg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf785ICIRAEUTBn/O+k739YSdAziBABDY8qatEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8EW/++X/xNQ4k8ydNpaOR5K1q8bWVWPvQePowXj7NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc79w8bNxUGAPzZPl+bAiIElCEMIDHAQtNraekGDKCIgYUdKUqvJfTKnzYDrSpQFjbI3AWVESEkUNgqRtbOrdQlbB0yFIk56Nm+nkMv6hWofSS/n/T8Pp98ft/zVU2+e3YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACGtt8axVnczJZxWr12697Vldjf/lsf3di4sxBbjJOw3mTa/wcz9Z1kvr1EAAAAOBiSqrbPqv2tfHMp9ulsUf/nw+NizX/9qdF7wpi6P/aHa7V/bL/8fPe5+4PNluPEk55dHfSPPZhO5zFOdao9/dAjOsWVL757yYoPJH13/dntvLieydc3b77dLcJDTWQLAOxpZ+8fxkfLbut6FQx/H4p9r6H0ADjYOrXCe1j/Z7Pt5gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQhO318MQwTkIIC51RHN2+d3VlXH9j487CsJ26dm2jfs54ijyEcHZ10D/W4Fym3aXLV84vDwb9i80HL4QQ2hr9jWr65z+Y4OAQWrk+gv8oSKsPe1ryKYPf/vnbd4b/eh9Thm+GEAYt/YcEAMC+lVct1vVb+eZSfC2ZC2Hnu931/8u1OExY/9/98NSt4uBv0l3jxfq/19wUp97i2oVPFy9dvvLq6oXlc/1z/Y9fO957vXfi9MmTpxeL70oWfWMCAADAv9OtWr3+T+ceXP8/UovDhPX/Z9/2vqiPlan/xxot+rWdCQAAwMH2zIt//pGMeT3pdsPny2trF3vl9v7+8XLbQqqP7FDV6vV/Ntd2VgAAAEATtteTXev/Z2pxmHD9/8nvn/+xfs4shDBTrf8fXflkcKa56Uy1R3ow+CFPUH+5x3Pybc8RAACAds1Urb7+nxf3/6dVqf/r+3H7ykvlXvVnACeq/7N3vvqhPlb9/v8TDc5xGqXz5fUo+vkQOvNtZwQAAMB+drhqsdj/Pd9c+uinI+913f8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0LS/AgAA//8DsTnd")
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='flush,nocase,discard,dots,fmask=00000000000000000000177,dots,nodots,nodots,dots,\x00'], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=")
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000000)=0x1, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
ptrace$peek(0x2, r5, &(0x7f0000000100))
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x4000000}], 0x1, 0x0, 0x0, 0x0)
ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8)

kernel console output (not intermixed with test programs):

0:50:50:50:50:50
[  610.618827][T17855] device veth1_macvtap entered promiscuous mode
[  610.636605][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  610.667387][T17855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  610.690634][T17855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  610.707718][T17855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  610.719787][   T48] Bluetooth: hci2: command tx timeout
[  610.732444][T17855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  610.747495][T17855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  610.759885][T17855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  610.766406][T17963] loop4: detected capacity change from 0 to 2048
[  610.781681][T17855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  610.784733][T17963] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  610.796527][T17855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  610.808150][T17963] NILFS (loop4): mounting unchecked fs
[  610.812564][T17855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  610.828474][T17855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  610.840036][T17855] batman_adv: batadv0: Interface activated: batadv_slave_0
[  610.840941][T17963] NILFS (loop4): recovery required for readonly filesystem
[  610.850893][T17855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  610.861594][T17963] NILFS (loop4): write access will be enabled during recovery
[  610.870944][T17855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  610.883325][T17963] NILFS (loop4): norecovery option specified, skipping roll-forward recovery
[  610.883899][T17855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  610.904172][T17855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  610.914365][T17855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  610.924979][T17855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  610.937822][T17855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  610.948811][T17855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  610.959369][T17855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  610.970518][T17855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  610.993401][T17855] batman_adv: batadv0: Interface activated: batadv_slave_1
[  611.012022][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  611.020390][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  611.052982][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  611.061778][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  611.084640][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  611.093547][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  611.108712][T17855] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  611.127721][T17855] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  611.155912][T17855] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  611.170465][T17855] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  611.239935][T17972] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  611.267874][T17973] loop2: detected capacity change from 0 to 2048
[  611.439090][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  611.484145][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  611.533189][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  611.568043][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  611.581181][T17982] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  611.590808][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  611.642692][ T4110] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  611.912844][ T3581] Bluetooth: hci4: command tx timeout
[  612.228099][ T4110] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  612.382140][ T3579] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  612.502157][ T4110] usb 3-1: Using ep0 maxpacket: 32
[  612.622063][ T3579] usb 5-1: Using ep0 maxpacket: 32
[  612.622197][ T4110] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  612.644082][ T4110] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  612.748896][ T3579] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  612.768600][ T3579] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  612.780790][   T26] kauditd_printk_skb: 680 callbacks suppressed
[  612.780805][   T26] audit: type=1804 audit(1717154999.564:6551): pid=18018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir741381151/syzkaller.G6P70W/2/bus" dev="sda1" ino=1964 res=1 errno=0
[  612.823922][ T4110] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  612.859333][ T4110] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  612.898437][ T4110] usb 3-1: Product: syz
[  612.918131][ T3579] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  612.921434][ T4110] usb 3-1: Manufacturer: syz
[  612.932220][ T3579] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  612.950402][ T3579] usb 5-1: Product: syz
[  612.963159][ T3579] usb 5-1: Manufacturer: syz
[  612.983211][ T4110] hub 3-1:4.0: USB hub found
[  613.022905][ T3579] hub 5-1:4.0: USB hub found
[  613.118316][T18027] loop3: detected capacity change from 0 to 2048
[  613.154973][T18027] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  613.173717][T18027] NILFS (loop3): mounting unchecked fs
[  613.179223][T18027] NILFS (loop3): recovery required for readonly filesystem
[  613.212199][ T4110] hub 3-1:4.0: 2 ports detected
[  613.217301][T18027] NILFS (loop3): write access will be enabled during recovery
[  613.247435][T18027] NILFS (loop3): norecovery option specified, skipping roll-forward recovery
[  613.255352][ T3579] hub 5-1:4.0: 2 ports detected
[  613.571622][T18045] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  613.987826][T18073] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  614.219903][T18087] loop3: detected capacity change from 0 to 512
[  614.253058][T18087] EXT4-fs: Ignoring removed bh option
[  614.296961][T18087] EXT4-fs error (device loop3): __ext4_iget:5044: inode #15: block 1803188595: comm syz-executor.3: invalid block
[  614.311452][T18087] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 15 (err -117)
[  614.336460][T18087] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  614.496941][T17855] EXT4-fs (loop3): unmounting filesystem.
[  614.512098][ T4110] hub 3-1:4.0: activate --> -90
[  614.578356][ T4505] hub 5-1:4.0: activate --> -90
[  614.813943][T18114] loop3: detected capacity change from 0 to 128
[  614.822438][T17996] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  614.862034][ T4110] hub 3-1:4.0: hub_ext_port_status failed (err = -71)
[  614.869079][ T3615] usb 3-1: USB disconnect, device number 27
[  614.890247][T18000] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  614.934213][ T3648] usb 5-1: USB disconnect, device number 24
[  614.942026][ T4505] hub 5-1:4.0: hub_ext_port_status failed (err = -71)
[  615.041078][T18121] loop3: detected capacity change from 0 to 512
[  615.049542][T18121] EXT4-fs: Ignoring removed bh option
[  615.060896][T18121] EXT4-fs error (device loop3): __ext4_iget:5044: inode #15: block 1803188595: comm syz-executor.3: invalid block
[  615.074252][T18121] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 15 (err -117)
[  615.092583][T18121] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  615.244598][T17855] EXT4-fs (loop3): unmounting filesystem.
[  615.580118][T18152] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  615.952197][ T4110] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  616.008697][T18189] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
[  616.076418][ T3579] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  616.095678][T18193] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
[  616.209549][T18199] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  616.230939][T18199] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  616.250986][T18199] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  616.262161][ T4110] usb 4-1: Using ep0 maxpacket: 32
[  616.283102][T18199] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  616.304024][T18199] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  616.322231][ T3579] usb 5-1: Using ep0 maxpacket: 32
[  616.333975][T18199] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  616.355126][T18199] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  616.398447][ T4110] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  616.418584][ T4110] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  616.435007][T18201] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  616.442386][ T3579] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  616.455814][T18201] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  616.463432][ T3579] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  616.474138][T18201] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  616.483545][T18201] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  616.492792][T18201] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  616.501622][T18201] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  616.510060][T18201] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  616.566514][T18203] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  616.579763][T18203] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  616.582330][ T4110] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  616.589577][T18203] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  616.603794][ T4110] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  616.603823][ T4110] usb 4-1: Product: syz
[  616.603838][ T4110] usb 4-1: Manufacturer: syz
[  616.621129][ T3579] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  616.636246][ T3579] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  616.642924][T18203] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  616.645741][ T3579] usb 5-1: Product: syz
[  616.653753][T18203] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  616.661193][ T3579] usb 5-1: Manufacturer: syz
[  616.664865][T18203] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  616.677275][ T4110] hub 4-1:4.0: USB hub found
[  616.683133][T18203] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  616.703347][ T3579] hub 5-1:4.0: USB hub found
[  616.906677][ T4110] hub 4-1:4.0: 2 ports detected
[  616.922169][ T3579] hub 5-1:4.0: 2 ports detected
[  617.606499][T18209] loop2: detected capacity change from 0 to 131072
[  617.617442][T18209] F2FS-fs (loop2): invalid crc value
[  617.631106][T18209] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[  617.674597][T18209] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b
[  617.992040][   T48] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  617.992234][ T3581] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  618.105503][T18215] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  618.152326][T18217] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  618.212891][ T4110] hub 4-1:4.0: activate --> -90
[  618.272196][ T3579] hub 5-1:4.0: activate --> -90
[  618.338397][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  618.376352][T18228] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  618.399489][T18228] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  618.408345][T18228] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  618.422675][T18228] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  618.431303][T18228] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  618.445793][T18228] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  618.459836][T18228] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  618.484035][T18233] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  618.552613][T18160] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  618.595280][ T3648] usb 4-1: USB disconnect, device number 23
[  618.602366][T18171] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  618.612180][ T4110] hub 4-1:4.0: hub_ext_port_status failed (err = -71)
[  618.651604][ T4110] usb 5-1: USB disconnect, device number 25
[  618.665154][ T4505] hub 5-1:4.0: hub_ext_port_status failed (err = -71)
[  619.288575][T18261] loop4: detected capacity change from 0 to 512
[  619.297090][T18261] EXT4-fs: Ignoring removed bh option
[  619.339338][T18261] EXT4-fs error (device loop4): __ext4_iget:5044: inode #15: block 1803188595: comm syz-executor.4: invalid block
[  619.355322][T18261] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz-executor.4: couldn't read orphan inode 15 (err -117)
[  619.373965][T18261] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  619.456193][T11714] EXT4-fs (loop4): unmounting filesystem.
[  619.649978][T18272] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  619.671179][T18272] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  619.681680][T18272] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  619.693527][T18272] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  619.701434][T18272] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  619.757412][T18272] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  619.794708][T18272] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  619.918148][T18278] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  619.940251][T18278] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  619.954993][T18278] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  619.967818][T18278] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  619.980863][T18278] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  619.993909][T18278] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  620.008292][T18278] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  620.368297][T18275] loop2: detected capacity change from 0 to 32768
[  620.387060][T18275] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (18275)
[  620.430812][T18275] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  620.461545][T18275] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  620.489681][T18300] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[  620.506629][T18275] BTRFS info (device loop2): using free space tree
[  620.663354][T18275] BTRFS info (device loop2): enabling ssd optimizations
[  620.724869][T18321] Bluetooth: MGMT ver 1.22
[  620.768051][T13195] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  620.879407][ T3581] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  620.882091][   T48] Bluetooth: hci5: command 0x1003 tx timeout
[  621.172821][T18330] loop3: detected capacity change from 0 to 512
[  621.234867][T18330] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  621.267588][T18334] netlink: 87 bytes leftover after parsing attributes in process `syz-executor.4'.
[  621.296488][T18330] ext4 filesystem being mounted at /root/syzkaller-testdir741381151/syzkaller.G6P70W/30/bus supports timestamps until 2038 (0x7fffffff)
[  621.390729][   T26] audit: type=1800 audit(1717155008.174:6552): pid=18330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=18 res=0 errno=0
[  621.504103][T17855] EXT4-fs (loop3): unmounting filesystem.
[  622.257221][T18354] loop3: detected capacity change from 0 to 32768
[  622.286855][T18354] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (18354)
[  622.323637][T18354] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  622.353361][T18354] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  622.383744][T18354] BTRFS info (device loop3): using free space tree
[  622.471519][   T26] audit: type=1800 audit(1717155009.254:6553): pid=18381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1967 res=0 errno=0
[  622.501025][T18354] BTRFS info (device loop3): enabling ssd optimizations
[  622.621185][T17855] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  623.513781][ T3581] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  623.515249][   T48] Bluetooth: hci5: command 0x1003 tx timeout
[  623.867542][T18418] loop3: detected capacity change from 0 to 32768
[  623.896634][   T26] audit: type=1800 audit(1717155010.684:6554): pid=18418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=7 res=0 errno=0
[  624.153889][ T1251] ieee802154 phy0 wpan0: encryption failed: -22
[  624.160217][ T1251] ieee802154 phy1 wpan1: encryption failed: -22
[  625.320738][T18471] loop3: detected capacity change from 0 to 4096
[  625.341401][T18471] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[  625.346686][T18476] loop4: detected capacity change from 0 to 4096
[  625.374388][T18476] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[  625.613217][T18487] loop4: detected capacity change from 0 to 512
[  625.632541][T18487] EXT4-fs: Ignoring removed orlov option
[  625.648410][T18487] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  625.690441][T18487] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6040e09c, mo2=0002]
[  625.706764][T18487] System zones: 1-12
[  625.721536][T18487] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz-executor.4: casefold flag without casefold feature
[  625.738272][T18464] loop2: detected capacity change from 0 to 32768
[  625.772863][T18487] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.4: missing EA_INODE flag
[  625.789824][T18487] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor.4: error while reading EA inode 12 err=-117
[  625.797823][T18464] ERROR: (device loop2): dbDiscardAG: -EIO
[  625.797823][T18464] 
[  625.812086][T18487] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.4: missing EA_INODE flag
[  625.825979][T18487] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor.4: error while reading EA inode 12 err=-117
[  625.844947][T18487] EXT4-fs (loop4): 1 orphan inode deleted
[  625.850868][T18487] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  626.062459][   T26] audit: type=1804 audit(1717155012.854:6555): pid=18506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir741381151/syzkaller.G6P70W/41/file0" dev="sda1" ino=1965 res=1 errno=0
[  626.355027][T18510] loop3: detected capacity change from 0 to 4096
[  626.378306][T18510] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[  626.400635][T11714] EXT4-fs (loop4): unmounting filesystem.
[  626.654739][T18516] loop2: detected capacity change from 0 to 8192
[  626.696967][T18516] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  626.756345][T18516] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  626.786483][   T26] audit: type=1800 audit(1717155013.574:6556): pid=18527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1964 res=0 errno=0
[  626.818203][T18516] REISERFS (device loop2): using ordered data mode
[  626.847503][T18516] reiserfs: using flush barriers
[  626.893553][T18516] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  626.949304][T18516] REISERFS (device loop2): checking transaction log (loop2)
[  626.988352][T18516] REISERFS (device loop2): Using r5 hash to sort names
[  626.996652][T18516] REISERFS (device loop2): using 3.5.x disk format
[  627.013421][T18516] REISERFS warning (device loop2): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are!
[  627.040013][T18516] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  627.130833][T18537] 9pnet_fd: p9_fd_create_tcp (18537): problem connecting socket to 127.0.0.1
[  627.721001][T18548] loop2: detected capacity change from 0 to 1024
[  627.748134][T18548] EXT4-fs: Ignoring removed orlov option
[  627.775903][T18548] EXT4-fs (loop2): Test dummy encryption mode enabled
[  627.782661][T18533] loop3: detected capacity change from 0 to 32768
[  627.819792][T18548] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  627.862479][T18533] ERROR: (device loop3): dbDiscardAG: -EIO
[  627.862479][T18533] 
[  628.118570][T18548] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  628.457424][   T26] audit: type=1804 audit(1717155015.244:6557): pid=18565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3523531432/syzkaller.QV6JEo/448/bus" dev="sda1" ino=1962 res=1 errno=0
[  628.484989][T18565] Invalid ELF header type: 0 != 1
[  628.510336][T13195] EXT4-fs (loop2): unmounting filesystem.
[  628.590982][    C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  629.037561][T18576] loop4: detected capacity change from 0 to 8192
[  629.077917][T18576] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  629.098403][T18576] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  629.108368][T18576] REISERFS (device loop4): using ordered data mode
[  629.116925][T18576] reiserfs: using flush barriers
[  629.124688][T18576] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  629.141438][T18576] REISERFS (device loop4): checking transaction log (loop4)
[  629.159904][T18576] REISERFS (device loop4): Using r5 hash to sort names
[  629.167037][T18576] REISERFS (device loop4): using 3.5.x disk format
[  629.174271][T18576] REISERFS warning (device loop4): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are!
[  629.187196][T18576] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  629.353484][T18559] loop3: detected capacity change from 0 to 32768
[  629.418575][   T26] audit: type=1800 audit(1717155016.204:6558): pid=18559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=7 res=0 errno=0
[  629.480395][T18569] loop2: detected capacity change from 0 to 32768
[  629.538601][T18581] loop4: detected capacity change from 0 to 1024
[  629.546913][T18569] ERROR: (device loop2): dbDiscardAG: -EIO
[  629.546913][T18569] 
[  629.560355][T18581] EXT4-fs: Ignoring removed orlov option
[  629.575461][T18581] EXT4-fs (loop4): Test dummy encryption mode enabled
[  629.636648][T18581] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  629.951630][T11714] EXT4-fs (loop4): unmounting filesystem.
[  630.281278][T18602] loop4: detected capacity change from 0 to 128
[  630.289236][T18602] VFS: Found a Xenix FS (block size = 512) on device loop4
[  630.321607][T18602] sysv_count_free_blocks: free block count was -2041545935, correcting to 3
[  630.410808][T18602] sysv_count_free_inodes: unable to read inode table
[  630.419913][T18605] sysv_free_block: trying to free block not in datazone
[  630.482300][T11714] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  630.541982][ T6233] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  630.674114][T18613] loop4: detected capacity change from 0 to 2048
[  630.717594][T18615] loop2: detected capacity change from 0 to 1024
[  630.732047][ T6233] usb 4-1: device descriptor read/64, error -71
[  630.736311][T18615] EXT4-fs: Ignoring removed orlov option
[  630.749094][T18613] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  630.768988][T18615] EXT4-fs (loop2): Test dummy encryption mode enabled
[  630.769195][T18613] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  630.827804][T18615] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  631.004257][ T6233] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  631.168986][T13195] EXT4-fs (loop2): unmounting filesystem.
[  631.296387][T18628] loop4: detected capacity change from 0 to 256
[  631.402341][T18628] loop4: detected capacity change from 256 to 0
[  631.414964][    C0] I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  631.424225][T18628] Unable to read inode block
[  631.480967][    C0] I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  631.490255][T11714] Unable to read inode block
[  631.501562][    C0] I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  631.510823][T11714] Unable to read inode block
[  631.783186][T18652] 9pnet_fd: p9_fd_create_tcp (18652): problem connecting socket to 127.0.0.1
[  631.851825][    C1] I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  631.872232][   T11] Unable to read inode block
[  631.878042][ T8679] loop: Write error at byte offset 9223372036854845439, length 1024.
[  631.890000][    C1] I/O error, dev loop4, sector 136 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  631.899483][    C1] Buffer I/O error on dev loop4, logical block 68, lost async page write
[  631.920481][T18659] loop3: detected capacity change from 0 to 256
[  631.945835][    C1] I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  631.955110][   T11] Unable to read inode block
[  632.016522][   T32] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.051830][T18661] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  632.082056][T18659] loop3: detected capacity change from 256 to 0
[  632.089433][    C1] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  632.098708][T18662] Unable to read inode block
[  632.139508][    C1] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  632.149069][T17855] Unable to read inode block
[  632.175214][T18661] device bond1 entered promiscuous mode
[  632.195612][T18661] 8021q: adding VLAN 0 to HW filter on device bond1
[  632.205868][    C1] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  632.215111][T17855] Unable to read inode block
[  632.265044][   T32] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.366289][   T26] audit: type=1804 audit(1717155019.154:6559): pid=18666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3987181647/syzkaller.5KgWPZ/453/bus" dev="sda1" ino=1946 res=1 errno=0
[  632.393757][T18666] Invalid ELF header type: 0 != 1
[  632.451461][   T32] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.573788][   T32] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.604957][    C1] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  632.614274][ T8679] Unable to read inode block
[  632.619524][   T11] loop: Write error at byte offset 9223372036854845439, length 1024.
[  632.632167][    C0] Buffer I/O error on dev loop3, logical block 68, lost async page write
[  632.654068][ T8679] Unable to read inode block
[  632.908184][   T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  632.920972][   T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  632.937607][   T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  632.948544][   T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  633.005131][   T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  633.014739][   T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  633.175298][T18657] loop2: detected capacity change from 0 to 32768
[  633.214100][T18657] XFS: ikeep mount option is deprecated.
[  633.251161][T18657] XFS: ikeep mount option is deprecated.
[  633.315789][T18657] XFS (loop2): Mounting V5 Filesystem
[  633.395996][T18701] netlink: 'syz-executor.1': attribute type 6 has an invalid length.
[  633.472892][T18657] XFS (loop2): Ending clean mount
[  633.488116][T18683] chnl_net:caif_netlink_parms(): no params data found
[  633.509343][T18657] XFS (loop2): Quotacheck needed: Please wait.
[  633.561277][   T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  633.570854][   T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  633.606411][   T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  633.614714][   T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  633.626031][   T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  633.636976][   T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  633.674733][T18657] XFS (loop2): Quotacheck: Done.
[  633.878333][T18683] bridge0: port 1(bridge_slave_0) entered blocking state
[  633.893909][T18683] bridge0: port 1(bridge_slave_0) entered disabled state
[  633.907272][T13195] XFS (loop2): Unmounting Filesystem
[  633.935036][T18683] device bridge_slave_0 entered promiscuous mode
[  633.943945][T18683] bridge0: port 2(bridge_slave_1) entered blocking state
[  633.951124][T18683] bridge0: port 2(bridge_slave_1) entered disabled state
[  633.961704][T18683] device bridge_slave_1 entered promiscuous mode
[  634.098890][T18683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  634.140213][T18683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  634.188630][T18683] team0: Port device team_slave_0 added
[  634.223555][T18683] team0: Port device team_slave_1 added
[  634.261140][   T32] device hsr_slave_0 left promiscuous mode
[  634.268738][   T32] device hsr_slave_1 left promiscuous mode
[  634.275530][   T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  634.283277][   T32] batman_adv: batadv0: Removing interface: batadv_slave_0
[  634.293044][   T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  634.300637][   T32] batman_adv: batadv0: Removing interface: batadv_slave_1
[  634.319669][   T32] device bridge_slave_1 left promiscuous mode
[  634.330478][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[  634.357901][   T32] device bridge_slave_0 left promiscuous mode
[  634.376808][   T32] bridge0: port 1(bridge_slave_0) entered disabled state
[  634.402954][   T32] device veth1_macvtap left promiscuous mode
[  634.408999][   T32] device veth0_macvtap left promiscuous mode
[  634.423451][   T32] device veth1_vlan left promiscuous mode
[  634.425363][T18728] loop2: detected capacity change from 0 to 8192
[  634.435633][   T32] device veth0_vlan left promiscuous mode
[  634.450546][T18728] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  634.463961][T18728] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  634.473375][T18728] REISERFS (device loop2): using ordered data mode
[  634.479894][T18728] reiserfs: using flush barriers
[  634.486940][T18728] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  634.503806][T18728] REISERFS (device loop2): checking transaction log (loop2)
[  634.514905][T18728] REISERFS (device loop2): Using r5 hash to sort names
[  634.522446][T18728] REISERFS (device loop2): using 3.5.x disk format
[  634.529407][T18728] REISERFS warning (device loop2): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are!
[  634.545872][T18728] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  634.673542][   T32] bond1 (unregistering): Released all slaves
[  634.869384][   T32] team0 (unregistering): Port device team_slave_1 removed
[  634.897990][   T32] team0 (unregistering): Port device team_slave_0 removed
[  634.920087][   T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  634.938623][   T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  635.057854][   T32] bond0 (unregistering): Released all slaves
[  635.112122][ T3581] Bluetooth: hci0: command tx timeout
[  635.186926][T18683] batman_adv: batadv0: Adding interface: batadv_slave_0
[  635.194149][T18683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  635.221715][T18683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  635.285773][T18750] device ipvlan2 entered promiscuous mode
[  635.338026][T18683] batman_adv: batadv0: Adding interface: batadv_slave_1
[  635.352084][T18683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  635.386792][T18683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  635.449164][T18755] loop2: detected capacity change from 0 to 4096
[  635.510011][T18683] device hsr_slave_0 entered promiscuous mode
[  635.539947][T18683] device hsr_slave_1 entered promiscuous mode
[  635.576479][T18708] chnl_net:caif_netlink_parms(): no params data found
[  635.672665][ T3581] Bluetooth: hci4: command tx timeout
[  635.880502][T18708] bridge0: port 1(bridge_slave_0) entered blocking state
[  635.893518][T18708] bridge0: port 1(bridge_slave_0) entered disabled state
[  635.914287][T18708] device bridge_slave_0 entered promiscuous mode
[  635.933960][T18771] loop2: detected capacity change from 0 to 1024
[  635.957938][T18708] bridge0: port 2(bridge_slave_1) entered blocking state
[  635.972222][T18771] EXT4-fs: Ignoring removed nomblk_io_submit option
[  635.974491][T18708] bridge0: port 2(bridge_slave_1) entered disabled state
[  635.991778][T18708] device bridge_slave_1 entered promiscuous mode
[  636.040575][T18771] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  636.146226][T13195] EXT4-fs (loop2): unmounting filesystem.
[  636.185559][T18708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  636.221052][T18708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  636.244033][T18776] loop2: detected capacity change from 0 to 128
[  636.259745][T18776] VFS: Found a Xenix FS (block size = 512) on device loop2
[  636.299431][T18776] sysv_count_free_blocks: free block count was -2041545935, correcting to 3
[  636.333688][T18708] team0: Port device team_slave_0 added
[  636.361727][T18708] team0: Port device team_slave_1 added
[  636.424280][T18708] batman_adv: batadv0: Adding interface: batadv_slave_0
[  636.437127][T18708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  636.487653][T18776] sysv_count_free_inodes: unable to read inode table
[  636.502053][T18708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  636.512704][T18777] sysv_free_block: trying to free block not in datazone
[  636.554197][T18708] batman_adv: batadv0: Adding interface: batadv_slave_1
[  636.561174][T18708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  636.631568][T13195] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  636.633421][T18708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  636.785677][T18708] device hsr_slave_0 entered promiscuous mode
[  636.800258][T18708] device hsr_slave_1 entered promiscuous mode
[  636.828007][T18708] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  636.842859][T18708] Cannot create hsr debugfs directory
[  636.861263][T18683] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  636.905938][T18683] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  636.971825][T18683] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  637.057423][T18683] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  637.202101][ T3581] Bluetooth: hci0: command tx timeout
[  637.472534][T18708] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  637.566009][T18683] 8021q: adding VLAN 0 to HW filter on device bond0
[  637.624398][T18708] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  637.665891][T18683] 8021q: adding VLAN 0 to HW filter on device team0
[  637.680924][T15070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  637.691560][T15070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  637.721628][T18708] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  637.752121][T18187] Bluetooth: hci4: command tx timeout
[  637.799847][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  637.819495][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  637.851088][ T4504] bridge0: port 1(bridge_slave_0) entered blocking state
[  637.858306][ T4504] bridge0: port 1(bridge_slave_0) entered forwarding state
[  637.891310][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  637.918552][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  637.947807][ T4504] bridge0: port 2(bridge_slave_1) entered blocking state
[  637.955079][ T4504] bridge0: port 2(bridge_slave_1) entered forwarding state
[  638.028769][T18708] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.076173][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  638.091526][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  638.107870][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  638.116972][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  638.131820][T18803] loop2: detected capacity change from 0 to 32768
[  638.143446][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  638.156588][T18803] XFS: ikeep mount option is deprecated.
[  638.156769][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  638.168885][T18803] XFS: ikeep mount option is deprecated.
[  638.175686][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  638.202886][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  638.230549][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  638.257102][T18683] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  638.282768][T18803] XFS (loop2): Mounting V5 Filesystem
[  638.317048][T18683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  638.373351][T15070] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  638.381406][T15070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  638.382293][T18803] XFS (loop2): Ending clean mount
[  638.407268][T15070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  638.449735][T18803] XFS (loop2): Quotacheck needed: Please wait.
[  638.598314][T18803] XFS (loop2): Quotacheck: Done.
[  638.800864][T18708] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  638.855581][T18708] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  638.901340][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  638.906830][T13195] XFS (loop2): Unmounting Filesystem
[  638.923549][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  638.931203][T18708] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  638.969724][T18708] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  639.030243][T18683] 8021q: adding VLAN 0 to HW filter on device batadv0
[  639.252586][T18708] 8021q: adding VLAN 0 to HW filter on device bond0
[  639.273164][T18187] Bluetooth: hci0: command tx timeout
[  639.287930][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  639.300145][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  639.324662][T18708] 8021q: adding VLAN 0 to HW filter on device team0
[  639.363727][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  639.377435][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  639.422432][ T5044] bridge0: port 1(bridge_slave_0) entered blocking state
[  639.429631][ T5044] bridge0: port 1(bridge_slave_0) entered forwarding state
[  639.466624][T15070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  639.482923][T15070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  639.492635][T15070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  639.508629][T15070] bridge0: port 2(bridge_slave_1) entered blocking state
[  639.515786][T15070] bridge0: port 2(bridge_slave_1) entered forwarding state
[  639.528596][T15070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  639.550203][T15070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  639.612515][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  639.623578][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  639.632816][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  639.641802][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  639.661412][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  639.686714][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  639.740131][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  639.835225][T18187] Bluetooth: hci4: command tx timeout
[  639.873582][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  639.902608][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  639.910877][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  639.944125][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  639.962194][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  639.973172][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  639.996192][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  640.011745][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  640.028947][T18708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  640.092941][T18683] device veth0_vlan entered promiscuous mode
[  640.134736][T18683] device veth1_vlan entered promiscuous mode
[  640.243938][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  640.258687][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  640.273905][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  640.292280][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  640.312908][T18683] device veth0_macvtap entered promiscuous mode
[  640.343561][T18683] device veth1_macvtap entered promiscuous mode
[  640.428632][T18683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  640.462037][T18683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  640.490243][T18683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  640.517373][T18683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  640.545512][T18683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  640.572994][T18683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  640.584339][   T26] audit: type=1800 audit(1717155027.374:6560): pid=18896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1943 res=0 errno=0
[  640.590659][T18683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  640.653130][T18683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  640.680102][T18683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  640.709787][T18683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  640.745646][T18683] batman_adv: batadv0: Interface activated: batadv_slave_0
[  640.770538][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  640.785952][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  640.805322][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  640.822837][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  640.834554][T18882] loop2: detected capacity change from 0 to 32768
[  640.850914][T18683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  640.887154][T18683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  640.919791][T18882] XFS (loop2): Mounting V5 Filesystem
[  640.956460][T18683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  641.000036][T18683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  641.044141][T18882] XFS (loop2): Ending clean mount
[  641.067120][T18683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  641.080967][T18683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  641.104817][T18683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  641.127808][T18683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  641.153614][T18683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  641.168118][T18683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  641.180215][T13195] XFS (loop2): Unmounting Filesystem
[  641.194351][T18683] batman_adv: batadv0: Interface activated: batadv_slave_1
[  641.207188][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  641.222325][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  641.260267][T18683] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  641.298762][T18683] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  641.317275][T18683] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  641.328215][T18683] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  641.363595][T18187] Bluetooth: hci0: command tx timeout
[  641.424558][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  641.433181][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  641.534304][T18708] 8021q: adding VLAN 0 to HW filter on device batadv0
[  641.678506][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  641.697599][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  641.724944][ T8679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  641.748998][ T8679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  641.779909][T18922] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  641.826513][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  641.850010][ T8679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  641.877103][T18708] device veth0_vlan entered promiscuous mode
[  641.896221][ T8679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  641.901978][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  641.916905][T18187] Bluetooth: hci4: command tx timeout
[  641.932738][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  641.941456][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  641.957204][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  641.965296][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  642.063893][T18936] netlink: 'syz-executor.0': attribute type 6 has an invalid length.
[  642.097610][T18930] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  642.177360][   T32] device hsr_slave_0 left promiscuous mode
[  642.202655][   T32] device hsr_slave_1 left promiscuous mode
[  642.219002][   T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  642.254454][   T32] batman_adv: batadv0: Removing interface: batadv_slave_0
[  642.284143][   T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  642.291578][   T32] batman_adv: batadv0: Removing interface: batadv_slave_1
[  642.304309][   T32] device bridge_slave_1 left promiscuous mode
[  642.332177][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[  642.340988][   T32] device bridge_slave_0 left promiscuous mode
[  642.355404][   T32] bridge0: port 1(bridge_slave_0) entered disabled state
[  642.382611][   T32] device veth1_macvtap left promiscuous mode
[  642.388683][   T32] device veth0_macvtap left promiscuous mode
[  642.402093][   T32] device veth1_vlan left promiscuous mode
[  642.408300][   T32] device veth0_vlan left promiscuous mode
[  642.433802][ T3615] kernel read not supported for file [timerfd] (pid: 3615 comm: kworker/1:6)
[  642.626808][T18952] loop4: detected capacity change from 0 to 4096
[  642.692966][T18953] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  642.889741][   T32] team0 (unregistering): Port device team_slave_1 removed
[  642.922588][   T32] team0 (unregistering): Port device team_slave_0 removed
[  642.950374][   T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  642.976905][T18955] loop4: detected capacity change from 0 to 4096
[  642.982475][   T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  643.034161][T18956] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  643.142830][   T32] bond0 (unregistering): Released all slaves
[  643.208834][T18708] device veth1_vlan entered promiscuous mode
[  643.232837][T18941] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  643.273197][T18941] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  643.290979][T18950] device ipvlan2 entered promiscuous mode
[  643.306248][T18950] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  643.357169][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  643.412204][T18966] netlink: 'syz-executor.2': attribute type 6 has an invalid length.
[  643.458507][T18708] device veth0_macvtap entered promiscuous mode
[  643.474330][ T9783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  643.492673][ T9783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  643.515459][ T9783] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  643.532658][T18708] device veth1_macvtap entered promiscuous mode
[  643.594945][T18708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  643.615670][T18708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  643.626883][T18708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  643.638240][T18708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  643.655755][T18708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  643.674253][T18708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  643.684255][T18708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  643.704186][T18708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  643.718028][T18708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  643.736545][T18708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  643.794108][T18708] batman_adv: batadv0: Interface activated: batadv_slave_0
[  643.810495][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  643.819338][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  643.832167][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  643.847028][T18708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  643.860269][T18973] 9pnet: p9_errstr2errno: server reported unknown error ���
[  643.868674][T18708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  643.892046][T18708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  643.905842][T18708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  643.917071][T18708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  643.927688][T18708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  643.952052][T18708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  643.968279][   T26] audit: type=1800 audit(1717155030.754:6561): pid=18990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1959 res=0 errno=0
[  643.974613][T18708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  644.021211][T18708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  644.043648][T18708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  644.057742][   T26] audit: type=1800 audit(1717155030.754:6562): pid=18990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1959 res=0 errno=0
[  644.087262][T18708] batman_adv: batadv0: Interface activated: batadv_slave_1
[  644.101444][ T4110] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  644.126063][ T4110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  644.138660][T18708] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  644.159745][T18708] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  644.169305][T18708] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  644.185968][T18708] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  644.431123][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  644.456105][T18996] 9pnet: p9_errstr2errno: server reported unknown error ���
[  644.480499][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  644.514092][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  644.532456][ T9783] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  644.549713][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  644.593507][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  644.717720][T19008] loop4: detected capacity change from 0 to 256
[  644.738261][T19010] openvswitch: netlink: Message has 4 unknown bytes.
[  645.610293][T19005] loop2: detected capacity change from 0 to 32768
[  645.696318][T19005] XFS (loop2): Mounting V5 Filesystem
[  645.837855][T19005] XFS (loop2): Ending clean mount
[  645.921073][T19036] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  645.958319][T13195] XFS (loop2): Unmounting Filesystem
[  646.205040][T19045] loop3: detected capacity change from 0 to 256
[  646.213099][T19046] loop4: detected capacity change from 0 to 256
[  646.412307][T19042] 9pnet: p9_errstr2errno: server reported unknown error ���
[  646.764133][T19053] 9pnet: p9_errstr2errno: server reported unknown error ���
[  646.912731][T19073] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  647.463040][T19051] loop3: detected capacity change from 0 to 32768
[  647.485911][T19051] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (19051)
[  647.509309][T19051] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  647.535115][T19051] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  647.550384][T19051] BTRFS info (device loop3): use zlib compression, level 3
[  647.557863][T19051] BTRFS info (device loop3): using free space tree
[  647.595917][   T26] audit: type=1800 audit(1717155034.384:6563): pid=19096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1965 res=0 errno=0
[  647.642015][   T26] audit: type=1800 audit(1717155034.414:6564): pid=19096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1965 res=0 errno=0
[  647.730389][T19051] BTRFS info (device loop3): enabling ssd optimizations
[  648.006936][T18708] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  648.079434][T19114] loop4: detected capacity change from 0 to 256
[  648.184653][T19116] binder: 19115:19116 ioctl 400c620e 0 returned -14
[  648.370920][T19120] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  648.682379][ T6233] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  648.772028][ T4779] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  649.012127][ T4779] usb 5-1: Using ep0 maxpacket: 8
[  649.028520][T19137] loop3: detected capacity change from 0 to 32768
[  649.036836][T19137] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (19137)
[  649.049644][  T935] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  649.066248][T19137] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  649.088309][T19137] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  649.097725][T19137] BTRFS info (device loop3): use zlib compression, level 3
[  649.105591][T19137] BTRFS info (device loop3): using free space tree
[  649.134540][ T4779] usb 5-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=bd.3b
[  649.140789][T19137] BTRFS info (device loop3): enabling ssd optimizations
[  649.147905][ T4779] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  649.160789][ T4779] usb 5-1: config 0 descriptor??
[  649.212285][ T6233] usb 3-1: New USB device found, idVendor=0582, idProduct=0023, bcdDevice=53.24
[  649.222712][ T6233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  649.230917][ T6233] usb 3-1: Product: syz
[  649.235412][ T6233] usb 3-1: Manufacturer: syz
[  649.240231][ T6233] usb 3-1: SerialNumber: syz
[  649.246885][ T6233] usb 3-1: config 0 descriptor??
[  649.289682][T18708] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  649.303386][  T935] usb 1-1: Using ep0 maxpacket: 32
[  649.319968][ T6233] snd-usb-audio: probe of 3-1:0.0 failed with error -2
[  649.434722][  T935] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  649.445827][  T935] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  649.455772][  T935] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  649.495346][T15070] usb 5-1: USB disconnect, device number 26
[  649.570123][ T4780] usb 3-1: USB disconnect, device number 28
[  649.632165][  T935] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  649.641772][  T935] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  649.650746][  T935] usb 1-1: Product: syz
[  649.655248][  T935] usb 1-1: Manufacturer: syz
[  649.660090][  T935] usb 1-1: SerialNumber: syz
[  649.704696][  T935] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input38
[  649.738587][T19161] loop3: detected capacity change from 0 to 2048
[  649.785051][T19161] UDF-fs: iocharset i�o8859-1 not found
[  649.912467][ T4780] usb 1-1: USB disconnect, device number 16
[  649.924196][ T4780] appletouch 1-1:1.0: input: appletouch disconnected
[  650.146439][T19172] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  650.263326][T19175] loop4: detected capacity change from 0 to 512
[  650.305653][T19175] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  650.315730][T19175] EXT4-fs (loop4): orphan cleanup on readonly fs
[  650.326157][T19175] EXT4-fs warning (device loop4): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  650.351418][T19175] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  650.380708][T19175] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #16: comm syz-executor.4: casefold flag without casefold feature
[  650.565354][T19175] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 40: padding at end of block bitmap is not set
[  650.655808][T19175] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6171: Corrupt filesystem
[  650.706585][T19175] EXT4-fs (loop4): 1 truncate cleaned up
[  650.730143][T19186] binder: 19184:19186 ioctl 400c620e 0 returned -14
[  650.754604][T19175] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  650.964139][T19180] loop2: detected capacity change from 0 to 32768
[  650.971495][T18683] EXT4-fs (loop4): unmounting filesystem.
[  650.977644][T19180] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (19180)
[  651.011533][T19180] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  651.048302][T19180] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  651.064155][T19190] loop4: detected capacity change from 0 to 256
[  651.077252][T19180] BTRFS info (device loop2): using free space tree
[  651.125171][T19209] loop4: detected capacity change from 0 to 256
[  651.137332][T19180] BTRFS info (device loop2): enabling ssd optimizations
[  651.174497][T13195] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  651.309657][T19213] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  651.352410][  T935] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  651.601985][  T935] usb 2-1: Using ep0 maxpacket: 8
[  651.632009][ T4780] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  651.722212][  T935] usb 2-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=bd.3b
[  651.734360][T19215] loop2: detected capacity change from 0 to 32768
[  651.736290][  T935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  651.750414][  T935] usb 2-1: config 0 descriptor??
[  651.754817][T19215] XFS (loop2): Mounting V5 Filesystem
[  651.779519][T19215] XFS (loop2): Ending clean mount
[  651.823456][T13195] XFS (loop2): Unmounting Filesystem
[  652.009543][ T3615] usb 2-1: USB disconnect, device number 19
[  652.172110][ T4780] usb 5-1: New USB device found, idVendor=0582, idProduct=0023, bcdDevice=53.24
[  652.181280][ T4780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  652.182142][ T4109] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  652.189544][ T4780] usb 5-1: Product: syz
[  652.201350][ T4780] usb 5-1: Manufacturer: syz
[  652.206116][ T4780] usb 5-1: SerialNumber: syz
[  652.212047][ T4780] usb 5-1: config 0 descriptor??
[  652.259491][ T4780] snd-usb-audio: probe of 5-1:0.0 failed with error -2
[  652.461995][ T4109] usb 1-1: Using ep0 maxpacket: 32
[  652.480700][ T4780] usb 5-1: USB disconnect, device number 27
[  652.570913][T19240] loop3: detected capacity change from 0 to 128
[  652.585236][T19240] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  652.612052][ T4109] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  652.626225][ T4109] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  652.636679][ T4109] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  652.686326][T18708] FAT-fs (loop3): error, invalid access to FAT (entry 0x0affffff)
[  652.697353][T18708] FAT-fs (loop3): Filesystem has been set read-only
[  652.705334][T18708] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  652.832746][ T4109] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  652.851947][ T4109] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  652.860317][ T4109] usb 1-1: Product: syz
[  652.871922][ T4109] usb 1-1: Manufacturer: syz
[  652.876545][ T4109] usb 1-1: SerialNumber: syz
[  652.934462][ T4109] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input39
[  653.049002][T19247] loop3: detected capacity change from 0 to 32768
[  653.070848][T19253] input: syz0 as /devices/virtual/input/input40
[  653.071229][T19247] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (19247)
[  653.121774][T19247] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  653.147701][   T26] audit: type=1326 audit(1717155039.934:6565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19254 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2987cee9 code=0x7ffc0000
[  653.179585][T19247] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  653.189326][ T3615] usb 1-1: USB disconnect, device number 17
[  653.202912][ T3615] appletouch 1-1:1.0: input: appletouch disconnected
[  653.210489][T19252] loop4: detected capacity change from 0 to 4096
[  653.217128][T19247] BTRFS info (device loop3): using free space tree
[  653.228842][   T26] audit: type=1326 audit(1717155039.934:6566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19254 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd2987cee9 code=0x7ffc0000
[  653.252825][   T26] audit: type=1326 audit(1717155039.934:6567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19254 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2987cee9 code=0x7ffc0000
[  653.277678][   T26] audit: type=1326 audit(1717155039.934:6568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19254 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd2987cee9 code=0x7ffc0000
[  653.300836][   T26] audit: type=1326 audit(1717155039.964:6569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19254 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2987cee9 code=0x7ffc0000
[  653.324585][   T26] audit: type=1326 audit(1717155039.974:6570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19254 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fdd2987cee9 code=0x7ffc0000
[  653.350316][   T26] audit: type=1326 audit(1717155039.974:6571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19254 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdd2987a667 code=0x7ffc0000
[  653.379593][   T26] audit: type=1326 audit(1717155039.974:6572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19254 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdd29840329 code=0x7ffc0000
[  653.383184][T19252] ntfs3: loop4: failed to convert "0000" to iso8859-2
[  653.410892][   T26] audit: type=1326 audit(1717155039.974:6573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19254 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2987cee9 code=0x7ffc0000
[  653.459692][T19247] BTRFS info (device loop3): enabling ssd optimizations
[  653.545524][T18708] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  653.599139][T19281] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.4'.
[  653.602112][T18187] Bluetooth: hci4: command tx timeout
[  653.864697][T19285] i2c i2c-0: Invalid block write size 129
[  654.437219][T19296] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  654.661020][T19286] loop4: detected capacity change from 0 to 32768
[  654.686422][T19286] XFS: noikeep mount option is deprecated.
[  654.716626][T19286] XFS (loop4): Mounting V5 Filesystem
[  654.752065][ T4780] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  654.827989][T19286] XFS (loop4): Ending clean mount
[  654.841308][T19286] XFS (loop4): Quotacheck needed: Please wait.
[  654.966583][T19286] XFS (loop4): Quotacheck: Done.
[  655.131800][T18683] XFS (loop4): Unmounting Filesystem
[  655.302222][ T4780] usb 1-1: New USB device found, idVendor=0582, idProduct=0023, bcdDevice=53.24
[  655.318359][ T4780] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  655.331207][ T4780] usb 1-1: Product: syz
[  655.356811][ T4780] usb 1-1: Manufacturer: syz
[  655.368454][ T4780] usb 1-1: SerialNumber: syz
[  655.391646][ T4780] usb 1-1: config 0 descriptor??
[  655.449792][ T4780] snd-usb-audio: probe of 1-1:0.0 failed with error -2
[  655.663862][ T4780] usb 1-1: USB disconnect, device number 18
[  656.133890][T19354] loop4: detected capacity change from 0 to 512
[  656.184811][T19354] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #16: comm syz-executor.4: casefold flag without casefold feature
[  656.212650][T19354] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #3: comm syz-executor.4: corrupted inode contents
[  656.231311][T19354] EXT4-fs error (device loop4): ext4_dirty_inode:6072: inode #3: comm syz-executor.4: mark_inode_dirty error
[  656.243352][ T4109] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  656.253830][T19354] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 64: padding at end of block bitmap is not set
[  656.269677][T19354] Quota error (device loop4): write_blk: dquota write failed
[  656.277366][T19354] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz-executor.4: Failed to acquire dquot type 0
[  656.294104][T19354] EXT4-fs (loop4): 1 truncate cleaned up
[  656.299872][T19354] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  656.316975][T19354] ext4 filesystem being mounted at /root/syzkaller-testdir3348131777/syzkaller.lObnEm/31/file1 supports timestamps until 2038 (0x7fffffff)
[  656.410421][T18683] EXT4-fs (loop4): unmounting filesystem.
[  656.505962][ T4109] usb 3-1: Using ep0 maxpacket: 32
[  656.622116][ T4109] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  656.630499][ T4109] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  656.680767][ T4109] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  656.704285][ T4109] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  656.726301][ T4109] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  656.747239][ T4109] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  656.771979][ T4109] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  656.792635][ T4109] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  656.812808][ T4109] usb 3-1: config 0 descriptor??
[  656.922079][ T4780] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  657.075380][ T4109] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  657.167663][T19375] loop3: detected capacity change from 0 to 32768
[  657.174406][ T4780] usb 5-1: Using ep0 maxpacket: 32
[  657.271209][ T3615] usb 3-1: USB disconnect, device number 29
[  657.292211][ T4780] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  657.293977][ T3615] usblp0: removed
[  657.310923][ T4780] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  657.335890][ T4780] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  657.512196][ T4780] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  657.532181][ T4780] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  657.540563][ T4780] usb 5-1: Product: syz
[  657.554641][ T4780] usb 5-1: Manufacturer: syz
[  657.565065][ T4780] usb 5-1: SerialNumber: syz
[  657.614170][ T4780] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input41
[  657.828135][ T4780] usb 5-1: USB disconnect, device number 28
[  657.846491][ T4780] appletouch 5-1:1.0: input: appletouch disconnected
[  657.910336][T19427] mkiss: ax0: crc mode is auto.
[  657.988641][T19429] i2c i2c-0: Invalid block write size 129
[  658.109712][T19433] loop3: detected capacity change from 0 to 128
[  658.136041][T19433] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  658.327332][T18708] FAT-fs (loop3): error, invalid access to FAT (entry 0x0affffff)
[  658.343548][T18708] FAT-fs (loop3): Filesystem has been set read-only
[  658.357021][T18708] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  658.771365][T19461] loop4: detected capacity change from 0 to 8
[  658.799643][T19461] SQUASHFS error: lzo decompression failed, data probably corrupt
[  658.846425][T19461] SQUASHFS error: Failed to read block 0x91: -5
[  658.866177][T19461] SQUASHFS error: Unable to read metadata cache entry [8f]
[  658.904717][T19461] SQUASHFS error: Unable to read inode 0x11f
[  659.044396][T19468] loop3: detected capacity change from 0 to 128
[  659.084653][T19468] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  659.247067][ T3581] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  659.259757][ T3581] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  659.270742][ T3581] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  659.273312][T18708] FAT-fs (loop3): error, invalid access to FAT (entry 0x0affffff)
[  659.287729][ T3581] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  659.287902][T18708] FAT-fs (loop3): Filesystem has been set read-only
[  659.303122][ T3581] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  659.310371][ T3581] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  659.342321][T18708] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  659.518974][T19480] loop3: detected capacity change from 0 to 1024
[  659.563116][T19471] chnl_net:caif_netlink_parms(): no params data found
[  659.829661][T19471] bridge0: port 1(bridge_slave_0) entered blocking state
[  659.841844][T19471] bridge0: port 1(bridge_slave_0) entered disabled state
[  659.854959][T19471] device bridge_slave_0 entered promiscuous mode
[  659.893998][T19471] bridge0: port 2(bridge_slave_1) entered blocking state
[  659.901198][T19471] bridge0: port 2(bridge_slave_1) entered disabled state
[  659.942563][T19471] device bridge_slave_1 entered promiscuous mode
[  660.050470][ T5818] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  660.182684][ T5818] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  660.220655][T19471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  660.268385][T19471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  660.348202][ T5818] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  660.428250][T19471] team0: Port device team_slave_0 added
[  660.470237][ T5818] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  660.536300][T19471] team0: Port device team_slave_1 added
[  660.645190][T19471] batman_adv: batadv0: Adding interface: batadv_slave_0
[  660.669044][T19471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  660.748027][T19471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  660.833111][T19471] batman_adv: batadv0: Adding interface: batadv_slave_1
[  660.840726][T19471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  660.876901][T19531] loop3: detected capacity change from 0 to 2048
[  660.883118][T19471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  660.912487][T19531] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  660.923304][T18187] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  660.937507][T18187] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  660.950257][   T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  660.960221][   T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  660.968072][   T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  660.975489][   T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  661.009282][   T26] kauditd_printk_skb: 4 callbacks suppressed
[  661.009297][   T26] audit: type=1800 audit(1717155047.794:6577): pid=19539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1941 res=0 errno=0
[  661.043351][   T26] audit: type=1804 audit(1717155047.824:6578): pid=19539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3561695001/syzkaller.DMflcB/149/memory.events" dev="sda1" ino=1941 res=1 errno=0
[  661.068891][    C0] vkms_vblank_simulate: vblank timer overrun
[  661.075567][T19531] syz-executor.3: attempt to access beyond end of device
[  661.075567][T19531] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  661.102754][T19540] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  661.114073][   T26] audit: type=1804 audit(1717155047.854:6579): pid=19539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3561695001/syzkaller.DMflcB/149/memory.events" dev="sda1" ino=1941 res=1 errno=0
[  661.173575][T19531] syz-executor.3: attempt to access beyond end of device
[  661.173575][T19531] loop3: rw=0, sector=33554430, nr_sectors = 2 limit=2048
[  661.196082][T19531] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3)
[  661.211635][T19531] NILFS (loop3): error -5 reading inode: ino=15
[  661.277389][T19471] device hsr_slave_0 entered promiscuous mode
[  661.314802][T19471] device hsr_slave_1 entered promiscuous mode
[  661.331286][T19471] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  661.352149][   T48] Bluetooth: hci3: command tx timeout
[  661.361958][T19471] Cannot create hsr debugfs directory
[  661.390179][T19549] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[  662.482187][T19533] chnl_net:caif_netlink_parms(): no params data found
[  662.694702][T19570] loop3: detected capacity change from 0 to 512
[  662.713171][T19570] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  662.729191][T19570] EXT4-fs (loop3): 1 truncate cleaned up
[  662.735273][T19570] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  662.787422][T19580] loop4: detected capacity change from 0 to 64
[  662.793933][   T26] audit: type=1800 audit(1717155049.574:6580): pid=19570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="loop3" ino=18 res=0 errno=0
[  662.795371][T19533] bridge0: port 1(bridge_slave_0) entered blocking state
[  662.833424][   T26] audit: type=1804 audit(1717155049.614:6581): pid=19570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3616583818/syzkaller.YE9FeI/47/bus/memory.events" dev="loop3" ino=18 res=1 errno=0
[  662.856456][T19533] bridge0: port 1(bridge_slave_0) entered disabled state
[  662.860991][   T26] audit: type=1804 audit(1717155049.614:6582): pid=19570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3616583818/syzkaller.YE9FeI/47/bus/memory.events" dev="loop3" ino=18 res=1 errno=0
[  662.897796][T19533] device bridge_slave_0 entered promiscuous mode
[  662.919622][T19533] bridge0: port 2(bridge_slave_1) entered blocking state
[  662.930717][T19533] bridge0: port 2(bridge_slave_1) entered disabled state
[  662.948125][T19533] device bridge_slave_1 entered promiscuous mode
[  662.977700][T18708] EXT4-fs (loop3): unmounting filesystem.
[  663.032954][   T48] Bluetooth: hci1: command tx timeout
[  663.063615][T19471] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  663.101161][T19587] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  663.119376][T19533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  663.176006][T19471] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  663.203548][T19533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  663.268467][T19471] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  663.285417][T19594] nbd3: detected capacity change from 0 to 2199023255570
[  663.316851][T19533] team0: Port device team_slave_0 added
[  663.342395][T19533] team0: Port device team_slave_1 added
[  663.378906][T19471] bond0: (slave netdevsim0): Releasing backup interface
[  663.393994][T19471] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  663.414084][T19598] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  663.438434][   T48] Bluetooth: hci3: command tx timeout
[  663.462327][T19533] batman_adv: batadv0: Adding interface: batadv_slave_0
[  663.473259][T19533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  663.500448][T19533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  663.575660][ T5818] device hsr_slave_0 left promiscuous mode
[  663.583623][ T5818] device hsr_slave_1 left promiscuous mode
[  663.599182][ T5818] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  663.639529][ T5818] batman_adv: batadv0: Removing interface: batadv_slave_0
[  663.653630][ T5818] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  663.664121][ T5818] batman_adv: batadv0: Removing interface: batadv_slave_1
[  663.681692][ T5818] device bridge_slave_1 left promiscuous mode
[  663.692549][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state
[  663.701444][ T5818] device bridge_slave_0 left promiscuous mode
[  663.712828][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state
[  663.743885][ T5818] device veth1_macvtap left promiscuous mode
[  663.757238][ T5818] device veth0_macvtap left promiscuous mode
[  663.768366][ T5818] device veth1_vlan left promiscuous mode
[  663.779666][ T5818] device veth0_vlan left promiscuous mode
[  663.916100][   T26] audit: type=1800 audit(1717155050.704:6583): pid=19609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1949 res=0 errno=0
[  663.939554][   T26] audit: type=1804 audit(1717155050.704:6584): pid=19609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3561695001/syzkaller.DMflcB/156/memory.events" dev="sda1" ino=1949 res=1 errno=0
[  663.982539][   T26] audit: type=1804 audit(1717155050.704:6585): pid=19609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3561695001/syzkaller.DMflcB/156/memory.events" dev="sda1" ino=1949 res=1 errno=0
[  664.705527][T19591] block nbd3: shutting down sockets
[  664.916651][ T5818] bond2 (unregistering): Released all slaves
[  664.941482][ T5818] bond1 (unregistering): Released all slaves
[  665.116342][ T3581] Bluetooth: hci1: command tx timeout
[  666.538092][   T48] Bluetooth: hci3: command tx timeout
[  667.202001][ T3581] Bluetooth: hci1: command tx timeout
[  667.316535][T19632] loop3: detected capacity change from 0 to 8
[  667.365897][T19632] SQUASHFS error: lzo decompression failed, data probably corrupt
[  667.391490][T19632] SQUASHFS error: Failed to read block 0x91: -5
[  667.430165][T19632] SQUASHFS error: Unable to read metadata cache entry [8f]
[  667.444382][T19632] SQUASHFS error: Unable to read inode 0x11f
[  667.524723][ T5818] team0 (unregistering): Port device team_slave_1 removed
[  667.548037][ T5818] team0 (unregistering): Port device team_slave_0 removed
[  667.562148][ T5818] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  667.578196][ T5818] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  667.685595][ T5818] bond0 (unregistering): Released all slaves
[  667.755674][T19533] batman_adv: batadv0: Adding interface: batadv_slave_1
[  667.772100][T19533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  667.856299][T19533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  668.149066][T19533] device hsr_slave_0 entered promiscuous mode
[  668.875497][ T3581] Bluetooth: hci3: command tx timeout
[  668.901091][T19533] device hsr_slave_1 entered promiscuous mode
[  668.990130][T19533] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  669.008002][T19533] Cannot create hsr debugfs directory
[  669.277405][ T3581] Bluetooth: hci1: command tx timeout
[  669.326768][T19471] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  669.356727][T19471] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  669.363915][ T3611] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[  669.403637][T19471] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  669.419519][   T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  669.420496][T19471] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  669.430691][   T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  669.445360][   T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  669.463568][   T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  669.476674][   T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  669.485377][   T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  669.734941][T19471] 8021q: adding VLAN 0 to HW filter on device bond0
[  669.792803][ T3611] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35
[  669.821203][ T3611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  669.846034][T19471] 8021q: adding VLAN 0 to HW filter on device team0
[  669.863098][ T3611] usb 1-1: config 0 descriptor??
[  669.888885][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  669.899320][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  669.934387][ T3611] dw2102: su3000_identify_state
[  669.939277][ T3611] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  669.952011][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  669.973494][ T3611] dw2102: su3000_power_ctrl: 1, initialized 0
[  669.987181][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  670.003340][ T3611] dvb-usb: bulk message failed: -22 (2/0)
[  670.018230][ T4653] bridge0: port 1(bridge_slave_0) entered blocking state
[  670.025412][ T4653] bridge0: port 1(bridge_slave_0) entered forwarding state
[  670.038213][ T3611] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  670.077893][ T3611] dvb-usb: TeVii S482 (tuner 2) error while loading driver (-19)
[  670.151548][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  670.158298][  T935] usb 1-1: USB disconnect, device number 19
[  670.186205][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  670.200038][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  670.216833][ T4653] bridge0: port 2(bridge_slave_1) entered blocking state
[  670.223988][ T4653] bridge0: port 2(bridge_slave_1) entered forwarding state
[  670.992898][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  671.004937][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  671.013877][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  671.053315][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  671.079614][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  671.115379][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  671.167054][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  671.206668][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  671.225706][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  671.274214][T19663] chnl_net:caif_netlink_parms(): no params data found
[  671.296845][T19471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  671.310772][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  671.327173][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  671.487029][T19686] loop3: detected capacity change from 0 to 8
[  671.515285][ T3581] Bluetooth: hci0: command tx timeout
[  671.533354][T19686] SQUASHFS error: lzo decompression failed, data probably corrupt
[  671.541248][T19686] SQUASHFS error: Failed to read block 0x91: -5
[  671.564496][T19686] SQUASHFS error: Unable to read metadata cache entry [8f]
[  671.572620][T19686] SQUASHFS error: Unable to read inode 0x11f
[  671.618496][T19663] bridge0: port 1(bridge_slave_0) entered blocking state
[  671.643201][T19663] bridge0: port 1(bridge_slave_0) entered disabled state
[  671.672406][T19663] device bridge_slave_0 entered promiscuous mode
[  671.702647][T19663] bridge0: port 2(bridge_slave_1) entered blocking state
[  671.722995][T19663] bridge0: port 2(bridge_slave_1) entered disabled state
[  671.739526][T19663] device bridge_slave_1 entered promiscuous mode
[  671.747717][T19533] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  671.816393][T19533] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  671.838375][T19663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  671.861118][T19533] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  671.871282][T19533] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  671.895374][T19663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  671.924658][T15070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  671.938472][T15070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  671.978657][T19471] 8021q: adding VLAN 0 to HW filter on device batadv0
[  672.040683][T19663] team0: Port device team_slave_0 added
[  672.093683][T19663] team0: Port device team_slave_1 added
[  672.258331][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  672.275999][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  672.291968][T19663] batman_adv: batadv0: Adding interface: batadv_slave_0
[  672.299790][T19663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  672.371079][T19663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  673.203249][T19663] batman_adv: batadv0: Adding interface: batadv_slave_1
[  673.210212][T19663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  673.291236][T19663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  673.458094][T19663] device hsr_slave_0 entered promiscuous mode
[  673.470657][T19663] device hsr_slave_1 entered promiscuous mode
[  673.481092][T19663] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  673.497499][T19663] Cannot create hsr debugfs directory
[  673.509375][T19471] device veth0_vlan entered promiscuous mode
[  673.522528][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  673.531834][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  673.571133][T19471] device veth1_vlan entered promiscuous mode
[  673.592046][ T3581] Bluetooth: hci0: command tx timeout
[  673.601325][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  673.612746][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  673.620601][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  673.674341][T19533] 8021q: adding VLAN 0 to HW filter on device bond0
[  673.730759][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  673.753748][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  673.774468][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  673.786772][T19471] device veth0_macvtap entered promiscuous mode
[  673.814607][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  673.831758][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  673.839939][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  673.855106][T19471] device veth1_macvtap entered promiscuous mode
[  673.894240][ T5818] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  673.998286][T19533] 8021q: adding VLAN 0 to HW filter on device team0
[  674.080416][T19533] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  674.090886][T19533] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  674.106950][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  674.873702][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  674.884414][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  674.893034][ T4780] bridge0: port 1(bridge_slave_0) entered blocking state
[  674.900142][ T4780] bridge0: port 1(bridge_slave_0) entered forwarding state
[  674.908594][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  674.926035][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  674.943591][ T4780] bridge0: port 2(bridge_slave_1) entered blocking state
[  674.950733][ T4780] bridge0: port 2(bridge_slave_1) entered forwarding state
[  674.992704][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  675.033383][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  675.042949][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  675.056713][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  675.065363][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  675.074753][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  675.083243][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  675.091488][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  675.099922][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  675.108854][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  675.150404][ T5818] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  675.186227][T15070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  675.202969][T15070] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  675.210927][T15070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  675.228054][T19471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  675.246441][T19471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  675.268538][T19471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  675.291809][T19471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  675.317191][T19471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  675.339088][T19471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  675.359231][T19471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  675.380730][T19471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  675.391123][T19471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  675.401757][T19471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  675.423613][T19471] batman_adv: batadv0: Interface activated: batadv_slave_0
[  675.458347][ T5818] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  675.717956][ T3581] Bluetooth: hci0: command tx timeout
[  675.832972][T19733] loop3: detected capacity change from 0 to 40427
[  675.858616][T19733] F2FS-fs (loop3): Invalid log blocks per segment (4278190089)
[  675.866403][T19733] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  676.564623][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  676.584410][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  676.608199][T19733] F2FS-fs (loop3): invalid crc value
[  676.619481][T19471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  676.661434][T19471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  676.671428][T19471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  676.684744][T19471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  676.698705][T19733] F2FS-fs (loop3): Found nat_bits in checkpoint
[  676.758218][T19733] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  676.765488][T19733] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  676.777040][T19471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  676.787788][T19471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  676.799148][T19471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  676.809750][T19471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  676.866571][T19471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  676.882426][T19471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  676.901849][T19471] batman_adv: batadv0: Interface activated: batadv_slave_1
[  676.967552][ T5818] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  676.996184][T19747] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  677.018161][T19748] bond2: (slave vcan1): The slave device specified does not support setting the MAC address
[  677.038152][T19748] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  677.883584][   T48] Bluetooth: hci0: command tx timeout
[  677.916178][T19748] bond2: (slave vcan1): making interface the new active one
[  677.934461][T19748] bond2: (slave vcan1): Enslaving as an active interface with an up link
[  677.956985][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  677.965868][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  677.977325][T19471] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  678.009002][T19471] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  678.018001][T19471] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  678.035738][T19471] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  678.248904][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  678.271957][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  678.326949][T11617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  678.338208][T11617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  678.347897][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  678.365286][T19533] 8021q: adding VLAN 0 to HW filter on device batadv0
[  678.393591][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  678.402318][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  678.430811][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  678.477680][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  678.497865][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  678.605010][T19766] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'.
[  678.614735][T19766] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[  678.691567][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  678.705126][T19768] loop3: detected capacity change from 0 to 736
[  678.712300][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  678.722904][T19533] device veth0_vlan entered promiscuous mode
[  678.759923][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  678.768265][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  678.828529][T19533] device veth1_vlan entered promiscuous mode
[  678.901784][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  678.913730][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  678.915595][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  678.950582][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  678.990426][T19533] device veth0_macvtap entered promiscuous mode
[  679.022552][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  679.045028][T19781] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  679.073959][T19533] device veth1_macvtap entered promiscuous mode
[  679.114630][T19533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  679.137372][T19533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.160203][T19533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  679.184664][T19533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.196474][T19789] ALSA: mixer_oss: invalid OSS volume 'V3'
[  679.202801][T19789] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  679.209254][T19789] ALSA: mixer_oss: invalid OSS volume '7'
[  679.216205][T19789] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  679.220889][T19533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  679.222746][T19789] ALSA: mixer_oss: invalid OSS volume '8'
[  679.222761][T19789] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  679.222774][T19789] ALSA: mixer_oss: invalid OSS volume '9'
[  679.253139][T19533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.263062][T19533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  679.275268][T19533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.291482][T19533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  679.302165][T19533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.312278][T19533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  679.322808][T19533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.365292][T19533] batman_adv: batadv0: Interface activated: batadv_slave_0
[  679.380338][T19533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  679.392198][T19533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.402205][T19533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  679.412797][T19533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.432082][T19533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  679.451937][T19533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.461797][T19533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  679.497100][T19533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.524965][T19533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  679.551965][T19533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.561820][T19533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  679.588304][T19533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.614932][T19533] batman_adv: batadv0: Interface activated: batadv_slave_1
[  679.636168][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  679.662872][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  679.671522][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  679.692817][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  679.722320][T19799] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'.
[  679.742608][T19799] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[  679.777916][T19533] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  679.812035][T19533] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  679.820774][T19533] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  679.838346][T19533] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  680.051423][T19805] loop2: detected capacity change from 0 to 736
[  680.132024][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  680.160103][T19663] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  680.160816][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  680.226820][T19663] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  680.249155][T19663] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  680.275719][T19663] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  680.318147][ T4110] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  680.355160][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  680.379084][T19814] ALSA: mixer_oss: invalid OSS volume 'V3'
[  680.400816][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  680.408221][T19814] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  680.408241][T19814] ALSA: mixer_oss: invalid OSS volume '8'
[  680.408252][T19814] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  680.408263][T19814] ALSA: mixer_oss: invalid OSS volume '9'
[  680.408274][T19814] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  680.408285][T19814] ALSA: mixer_oss: invalid OSS volume '10'
[  680.484056][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  680.598304][ T5818] device hsr_slave_0 left promiscuous mode
[  680.631490][ T5818] device hsr_slave_1 left promiscuous mode
[  680.640869][ T5818] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  680.656302][T19828] loop2: detected capacity change from 0 to 736
[  680.661659][ T5818] batman_adv: batadv0: Removing interface: batadv_slave_0
[  680.678625][ T5818] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  680.686367][ T5818] batman_adv: batadv0: Removing interface: batadv_slave_1
[  680.707737][ T5818] device bridge_slave_1 left promiscuous mode
[  680.721493][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state
[  680.744337][ T5818] device bridge_slave_0 left promiscuous mode
[  680.756201][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state
[  680.776183][ T5818] device veth1_macvtap left promiscuous mode
[  680.784196][ T5818] device veth0_macvtap left promiscuous mode
[  680.790424][ T5818] device veth1_vlan left promiscuous mode
[  680.797933][ T5818] device veth0_vlan left promiscuous mode
[  680.832062][ T5044] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  681.082072][ T5044] usb 2-1: Using ep0 maxpacket: 32
[  681.094499][ T5818] team0 (unregistering): Port device team_slave_1 removed
[  681.115009][ T5818] team0 (unregistering): Port device team_slave_0 removed
[  681.144915][ T5818] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  681.169877][ T5818] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  681.202195][ T5044] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  681.219541][ T5044] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  681.250252][ T5044] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  681.294044][ T5818] bond0 (unregistering): Released all slaves
[  681.442469][ T5044] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  681.451560][ T5044] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  681.451638][T19663] 8021q: adding VLAN 0 to HW filter on device bond0
[  681.470556][ T5044] usb 2-1: Product: syz
[  681.474866][ T5044] usb 2-1: Manufacturer: syz
[  681.485120][ T5044] usb 2-1: SerialNumber: syz
[  681.543294][ T5044] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input42
[  681.559457][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  681.576546][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  681.601442][T19663] 8021q: adding VLAN 0 to HW filter on device team0
[  681.639010][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  681.655446][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  681.680999][ T3615] bridge0: port 1(bridge_slave_0) entered blocking state
[  681.688256][ T3615] bridge0: port 1(bridge_slave_0) entered forwarding state
[  681.715131][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  681.724057][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  681.735546][T19850] ALSA: mixer_oss: invalid OSS volume 'V3'
[  681.736095][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  681.741366][T19850] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  681.741380][T19850] ALSA: mixer_oss: invalid OSS volume '7'
[  681.741393][T19850] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  681.741405][T19850] ALSA: mixer_oss: invalid OSS volume '8'
[  681.741416][T19850] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  681.741427][T19850] ALSA: mixer_oss: invalid OSS volume '9'
[  681.750046][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state
[  681.792978][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state
[  681.835705][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  681.850783][ T5044] usb 2-1: USB disconnect, device number 20
[  681.872044][ T5044] appletouch 2-1:1.0: input: appletouch disconnected
[  681.882804][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  681.901353][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  681.925246][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  681.962283][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  681.968476][T19854] loop2: detected capacity change from 0 to 736
[  681.990057][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  682.019296][T19663] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  682.067765][T19663] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  682.095888][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  682.106363][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  682.132925][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  682.152376][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  682.177816][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  682.253576][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  682.377751][T19871] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  682.418165][T19873] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  682.527222][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  682.542823][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  682.603672][T19663] 8021q: adding VLAN 0 to HW filter on device batadv0
[  682.705526][T19886] ALSA: mixer_oss: invalid OSS volume 'V3'
[  682.734050][T19887] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  682.745005][T19886] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  682.757485][T19886] ALSA: mixer_oss: invalid OSS volume '8'
[  682.773798][T19886] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  682.799562][T19886] ALSA: mixer_oss: invalid OSS volume '9'
[  682.822218][T19886] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  682.843477][T19890] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  682.869439][T19886] ALSA: mixer_oss: invalid OSS volume '10'
[  683.439643][T19913] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  685.600715][ T1251] ieee802154 phy0 wpan0: encryption failed: -22
[  685.607069][ T1251] ieee802154 phy1 wpan1: encryption failed: -22
[  713.292698][   T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  713.303672][   T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  713.313905][   T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  713.321709][   T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  713.329469][   T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  713.339251][   T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  713.909942][ T3581] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  713.923579][ T3581] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  713.932284][ T3581] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  713.941043][ T3581] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  713.950323][ T3581] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  713.957643][ T3581] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  714.074537][T18187] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  714.088317][T18187] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  714.100819][ T3573] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  714.111279][T18187] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  714.118478][T18187] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  714.127380][T19936] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  714.128488][T18187] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  714.135159][T19936] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  714.148975][T19936] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  714.159827][T18187] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  714.195824][T18187] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  714.203173][T18187] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  715.442148][T18187] Bluetooth: hci5: command tx timeout
[  715.992106][T18187] Bluetooth: hci6: command tx timeout
[  716.232028][T18187] Bluetooth: hci8: command tx timeout
[  716.232123][ T3581] Bluetooth: hci7: command tx timeout
[  717.512285][ T3581] Bluetooth: hci5: command tx timeout
[  718.081941][ T3581] Bluetooth: hci6: command tx timeout
[  718.312031][ T3581] Bluetooth: hci7: command tx timeout
[  718.317484][ T3581] Bluetooth: hci8: command tx timeout
[  719.592242][ T3581] Bluetooth: hci5: command tx timeout
[  720.159365][ T3581] Bluetooth: hci6: command tx timeout
[  720.391983][ T3581] Bluetooth: hci8: command tx timeout
[  720.397437][ T3581] Bluetooth: hci7: command tx timeout
[  721.672246][ T3581] Bluetooth: hci5: command tx timeout
[  722.231970][ T3581] Bluetooth: hci6: command tx timeout
[  722.471984][ T3581] Bluetooth: hci7: command tx timeout
[  722.471991][T19936] Bluetooth: hci8: command tx timeout
[  728.632030][T18187] Bluetooth: hci2: command 0x0406 tx timeout
[  734.504781][T18187] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  734.521432][T18187] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  734.532817][T18187] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  734.551316][T18187] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  734.559089][T18187] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  734.567746][T18187] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  736.632238][T19936] Bluetooth: hci9: command tx timeout
[  738.712628][T19936] Bluetooth: hci9: command tx timeout
[  740.792062][T19936] Bluetooth: hci9: command tx timeout
[  742.872243][T19936] Bluetooth: hci9: command tx timeout
[  747.033816][ T1251] ieee802154 phy0 wpan0: encryption failed: -22
[  747.040145][ T1251] ieee802154 phy1 wpan1: encryption failed: -22
[  759.352037][T18187] Bluetooth: hci4: command 0x0406 tx timeout
[  778.407605][T19936] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  778.428642][T19936] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  778.441101][T19936] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  778.449739][T19936] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  778.457411][T19936] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  778.469641][T19936] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  778.783055][T19936] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  778.795159][T19936] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  778.806006][T19936] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  778.813932][T19936] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  778.821495][T19936] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  778.828841][T19936] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  779.089063][ T3581] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  779.104119][ T3581] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  779.113776][ T3581] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  779.121702][ T3581] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  779.129292][ T3581] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  779.136636][ T3581] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  779.187474][T18187] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  779.201392][T18187] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  779.216701][T18187] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  779.227914][T18187] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  779.236915][T18187] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  779.244367][T18187] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  780.552029][T18187] Bluetooth: hci10: command tx timeout
[  780.872088][T18187] Bluetooth: hci11: command tx timeout
[  781.192257][T18187] Bluetooth: hci12: command tx timeout
[  781.282029][T18187] Bluetooth: hci13: command tx timeout
[  782.631973][T18187] Bluetooth: hci10: command tx timeout
[  782.951993][T19936] Bluetooth: hci11: command tx timeout
[  783.272389][T19936] Bluetooth: hci12: command tx timeout
[  783.351923][T19936] Bluetooth: hci13: command tx timeout
[  784.712016][T19936] Bluetooth: hci10: command tx timeout
[  784.952061][T19936] Bluetooth: hci3: command 0x0406 tx timeout
[  784.961943][T18187] Bluetooth: hci1: command 0x0406 tx timeout
[  785.031975][T18187] Bluetooth: hci11: command tx timeout
[  785.353527][T18187] Bluetooth: hci12: command tx timeout
[  785.432031][T18187] Bluetooth: hci13: command tx timeout
[  786.792018][T18187] Bluetooth: hci10: command tx timeout
[  787.112023][T18187] Bluetooth: hci11: command tx timeout
[  787.432272][T18187] Bluetooth: hci12: command tx timeout
[  787.511936][T18187] Bluetooth: hci13: command tx timeout
[  795.191900][T18187] Bluetooth: hci0: command 0x0406 tx timeout
[  799.558961][ T3581] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  799.577683][ T3581] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  799.590689][ T3581] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  799.600268][ T3581] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  799.611499][ T3581] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  799.618993][ T3581] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  801.672077][ T3581] Bluetooth: hci14: command tx timeout
[  803.752036][ T3581] Bluetooth: hci14: command tx timeout
[  805.831944][ T3581] Bluetooth: hci14: command tx timeout
[  807.911904][ T3581] Bluetooth: hci14: command tx timeout
[  808.483620][ T1251] ieee802154 phy0 wpan0: encryption failed: -22
[  808.489969][ T1251] ieee802154 phy1 wpan1: encryption failed: -22
[  831.512140][   T27] INFO: task kworker/1:18:4653 blocked for more than 143 seconds.
[  831.522610][   T27]       Not tainted 6.1.92-syzkaller #0
[  831.528183][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  831.545992][   T27] task:kworker/1:18    state:D stack:23192 pid:4653  ppid:2      flags:0x00004000
2024/05/31 11:33:38 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  831.559190][   T27] Workqueue: ipv6_addrconf addrconf_dad_work
[  831.610582][   T27] Call Trace:
[  831.614013][   T27]  <TASK>
[  831.616964][   T27]  __schedule+0x142d/0x4550
[  831.621522][   T27]  ? __sched_text_start+0x8/0x8
[  831.634057][   T27]  ? print_irqtrace_events+0x210/0x210
[  831.641209][   T27]  ? do_raw_spin_unlock+0x137/0x8a0
[  831.650679][   T27]  ? _raw_spin_unlock_irq+0x1f/0x40
[  831.659154][   T27]  ? lockdep_hardirqs_on+0x94/0x130
[  831.668759][   T27]  schedule+0xbf/0x180
[  831.676614][   T27]  schedule_preempt_disabled+0xf/0x20
[  831.686233][   T27]  __mutex_lock+0x6b9/0xd80
[  831.690771][   T27]  ? __mutex_lock+0x53c/0xd80
[  831.698703][   T27]  ? addrconf_dad_work+0xcc/0x16b0
[  831.709266][   T27]  ? mutex_lock_nested+0x10/0x10
[  831.718084][   T27]  addrconf_dad_work+0xcc/0x16b0
[  831.750743][   T27]  ? read_lock_is_recursive+0x10/0x10
[  831.756293][   T27]  ? ipv6_get_saddr_eval+0xe90/0xe90
[  831.761605][   T27]  ? print_irqtrace_events+0x210/0x210
[  831.794908][   T27]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  831.800869][   T27]  ? do_raw_spin_unlock+0x137/0x8a0
[  831.822582][   T27]  ? process_one_work+0x7a9/0x11d0
[  831.827752][   T27]  process_one_work+0x8a9/0x11d0
[  831.851890][   T27]  ? worker_detach_from_pool+0x260/0x260
[  831.857586][   T27]  ? _raw_spin_lock_irqsave+0x120/0x120
[  831.871854][   T27]  ? kthread_data+0x4e/0xc0
[  831.876410][   T27]  ? wq_worker_running+0x97/0x190
[  831.881454][   T27]  worker_thread+0xa47/0x1200
[  831.901865][   T27]  ? _raw_spin_unlock+0x40/0x40
[  831.906772][   T27]  kthread+0x28d/0x320
[  831.910849][   T27]  ? worker_clr_flags+0x190/0x190
[  831.932534][   T27]  ? kthread_blkcg+0xd0/0xd0
[  831.937269][   T27]  ret_from_fork+0x1f/0x30
[  831.947711][   T27]  </TASK>
[  831.950945][   T27] INFO: task kworker/u4:11:5818 blocked for more than 143 seconds.
[  831.971845][   T27]       Not tainted 6.1.92-syzkaller #0
[  831.977432][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[