last executing test programs:

2m15.708260378s ago: executing program 2 (id=139):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c)
listen(r0, 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r1, &(0x7f0000000b80)="1b77", 0x2, 0x20040041, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)

2m15.608226796s ago: executing program 2 (id=140):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a004000"], 0xb8}}, 0x0)

2m15.485929546s ago: executing program 2 (id=142):
gettid()
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x0)

2m14.257985185s ago: executing program 2 (id=146):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000081)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = timerfd_create(0x6, 0x80000)
timerfd_gettime(r1, &(0x7f0000002680))

2m11.074910733s ago: executing program 2 (id=149):
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x2, &(0x7f0000ffe000/0x1000)=nil)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10)
write(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40800)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70800"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73"], 0x54}}, 0x0)

2m10.721807841s ago: executing program 2 (id=154):
gettid()
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000", @ANYBLOB, @ANYBLOB], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00')
pread64(r5, 0x0, 0x0, 0x3c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x5f, 0x2e]}}, &(0x7f0000002200)=""/4110, 0x2b, 0x100e, 0x1}, 0x28)

1m55.650521361s ago: executing program 32 (id=154):
gettid()
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000", @ANYBLOB, @ANYBLOB], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00')
pread64(r5, 0x0, 0x0, 0x3c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x5f, 0x2e]}}, &(0x7f0000002200)=""/4110, 0x2b, 0x100e, 0x1}, 0x28)

1m36.241742202s ago: executing program 5 (id=270):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090)

1m28.585491721s ago: executing program 5 (id=285):
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x3, 0x7f)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES32=0x0], 0x50)
write$binfmt_register(0xffffffffffffffff, &(0x7f0000000740)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a\xdd\x05\xdc\xb8\xc7\xb4v\x1f\xe3\xb6)\x1dM\x1e\xf9\x97\xffLW\x82\t\xf7\xb4\xe2fP\b\n\xdd\x03\x9d&\xd2\xce<f\xfb\xed\xdaP\xf0e\xb6\f\x9a\xa7\xe7c\xf3C\x9br\xf0L\xe5\xb3\xfbD\x1b\x88\xb7\b\x1b\xba}\xc9\va_\x9dYC\xffQ\x84 %(;\xac\x95\x90_\xe9\"\"\xf3\xe3#N\x0f\xdf\x7f\x90\x0f\x90S\x8cF\xff\xdb\x80\x9d\xf8A\xa9\x8f7F\x03\xc3T\xd8\xa4\xb9@\xa8\xa7\x94\xd0\x89)C\xfb\x1eV9\xceE', 0x3a, '', 0x3a, './file0'}, 0x1b0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x62, 0xa, 0xff00, 0x14}, [@call={0x75}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)

1m25.895758159s ago: executing program 5 (id=298):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8a}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r2, 0x0, &(0x7f0000001740)=""/4085}, 0x20)

1m25.485838952s ago: executing program 5 (id=301):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000300)={[{@auto_da_alloc_val}, {@test_dummy_encryption_v1}, {@init_itable_val={'init_itable', 0x3d, 0x5c}}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x45c, &(0x7f00000003c0)="$eJzs3MtvG0UYAPBv7Til9JFQyqMPIFAQEY+kaQv0wAEQSByKhAQHOEZJWpW6DWqCRKuIpgiVE0JI3BFH/gVOcEGIExJXuKNKFcqlLReM1t5NbMd283BqiH8/aduZ3dnOfJ4de3bHbgB9ayT9I4nYHRG/R8RQLdtYYKT2162lhanbSwtTSVQq7/yVVMvdXFqYyovm5+3KMqM7IuKzJA61qHfu0uVzk+XyzMUsPz5//sPxuUuXnz97fvLMzJmZC8dOnjxxfOKlF4+90JU40zbdPPjJ7OEDb77/1VunvmiIvymOLhnpdPCpSqXL1fXWnrp0MtDDhrAuxYhIu6tUHf9DUYyVzhuKNz7taeOALVWpVCq72h9erADbWBKNeUMe+kX+QZ/e/+Zb8yTgla2bfvTcjVdrN0Bp3LeyrXZkIApZmVLT/W03jUTEe4t/f5NuUe2Hvd1+DgEA0OCHdP7zXKv5XyEerCu3N1sbGo6I+yJiX0TcHxH7I+KBiGrZhyLi4XXW37xIsnr+Wbi+ocDWKJ3/vZytbTXO//LZXwwXs9yeavyl5PTZ8szR7DUZjdKOND/RoY4fX//ty3bH6ud/6ZbWn88Fs3ZcH9jReM705PzkZmKud+NqxMGBVvEnyysBSUQciIiDG6zj7DPfHW537M7xd9CFdabKtxFP1/p/MZrizyWd1yfH74nyzNHx/KpY7Zdfr73douZ/YrPxd0Ha//e2vP6X4x9O6tdr59Zfx7U/Pm97T7Om6/9K4znp9T+YvFtND2b7Pp6cn784ETGYnKo1un7/sZVz83xePo1/9Ejr8b8vVl6JQxGRXsSPRMSjEfFY1vbHI+KJiDjSIf6fX3vyg43Hv7XS+KfX1f8ricFo3tM6UTz30/cNlQ6viv925/e/E9XUaLZnLe9/a2nXxq5mAAAA+P8pRMTuSApjy+lCYWys9n35/RGF8uzc/LOnZz+6MF37jcBwlAr5k66huuehE9ltfS1/NSJqXy3Ijx/Pnht/XdxZzY9NzZanex089LldbcZ/6s9ir1sHbDm/14L+ZfxD/zL+oX8Z/9C/Woz/nb1oB3D3tfr8v9KDdgB3X9P4t+wHfcT9P/SvtuN/O//PP0CVz3/oS3M7484/ku+YyP+lDZ6+bRNR+k80Y/OJStKyc6PQ64ZJbGWit+9LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fJvAAAA//+KNeJZ")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000001ccb140418110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffd], [0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r4)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r8, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007840)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="180100001c0001000000000000ebffff0501008014000300050001"], 0x118}], 0x1}, 0x0)
getdents64(r3, 0x0, 0x0)

1m21.80269587s ago: executing program 5 (id=311):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
getpeername$inet6(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
sched_setscheduler(r0, 0x0, &(0x7f0000000000)=0x29)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r3, 0x400448e0, &(0x7f0000000040))

1m18.856943478s ago: executing program 5 (id=317):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$inet(0x2, 0x1, 0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)

1m3.399897351s ago: executing program 33 (id=317):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$inet(0x2, 0x1, 0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)

11.676730462s ago: executing program 1 (id=556):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg$unix(r1, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x18}}], 0x1, 0x0)
r3 = dup3(r1, r0, 0x0)
connect$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e)

11.676043322s ago: executing program 6 (id=558):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

11.45340743s ago: executing program 1 (id=562):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000300)={[{@auto_da_alloc_val}, {@test_dummy_encryption_v1}, {@init_itable_val={'init_itable', 0x3d, 0x5c}}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x45c, &(0x7f00000003c0)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000001ccb140418110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffd], [0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r4)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r8, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007840)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="180100001c0001000000000000ebffff0501008014000300050001"], 0x118}], 0x1}, 0x0)
getdents64(r3, 0x0, 0x0)

10.959353181s ago: executing program 6 (id=564):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
getpeername$inet6(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r3, 0x400448e0, &(0x7f0000000040))

8.329898684s ago: executing program 3 (id=569):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$VT_ACTIVATE(r0, 0x5606, 0xfffffffffffffffa)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18)
r2 = epoll_create1(0x80000)
epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x8, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x6e)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0xfab]}, 0x8, 0xc00)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
lseek(r7, 0x3, 0x2)
sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x68, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe4, 0x4c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008044}, 0xc000)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/stat\x00', 0x0, 0x0)

8.243601381s ago: executing program 1 (id=570):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18)
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
syz_read_part_table(0x60d, &(0x7f0000002200)="$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")
socket$packet(0x11, 0x2, 0x300)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0xdb)
timer_create(0x0, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_REMOVE(r0, 0x0, 0x4040494)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1)

6.393455601s ago: executing program 3 (id=573):
socket$packet(0x11, 0x3, 0x300)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x18)
setpriority(0x2, 0x0, 0x33c)

6.381137522s ago: executing program 0 (id=575):
syz_open_dev$tty1(0xc, 0x4, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000010000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
timerfd_create(0x0, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
syz_emit_ethernet(0x42, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = dup(0xffffffffffffffff)
sendmsg$netlink(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)

6.093663145s ago: executing program 0 (id=576):
r0 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000180a01"], 0x160}, 0x1, 0x0, 0x0, 0x48805}, 0x80840)

6.093399096s ago: executing program 4 (id=577):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="20131d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

6.093141216s ago: executing program 3 (id=578):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0xfffffffd, 0x0)

5.730217355s ago: executing program 0 (id=579):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_usb_connect$uac1(0x3, 0x9c, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x5, 0xa0, 0x18, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x4}, [@extension_unit={0x7, 0x24, 0x8, 0x6, 0x4, 0x60}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x307, 0x2, 0x59, 0x7, 0x5, 0xf8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x9, 0x0, 0xe, {0x7, 0x25, 0x1, 0x1, 0xff, 0x7ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x6, 0x1001}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x3, 0x5, 0x81}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x40, 0x10, 0x80}]}, {{0x9, 0x5, 0x82, 0x9, 0x787, 0x6, 0xd9, 0x7, {0x7, 0x25, 0x1, 0x2, 0x7, 0x1}}}}}}}]}}, 0x0)
sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x10)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_usb_disconnect(r0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001b40)={0x0, 0x0})
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0)
ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, 0x0)
fsetxattr$trusted_overlay_upper(r1, 0x0, 0x0, 0x0, 0x3)
fsmount(0xffffffffffffffff, 0x0, 0x70)

5.729564025s ago: executing program 1 (id=580):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000300)={[{@auto_da_alloc_val}, {@test_dummy_encryption_v1}, {@init_itable_val={'init_itable', 0x3d, 0x5c}}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x45c, &(0x7f00000003c0)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000001ccb140418110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffd], [0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r4)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r8, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007840)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="180100001c0001000000000000ebffff0501008014000300050001"], 0x118}], 0x1}, 0x0)
getdents64(r3, 0x0, 0x0)

5.580883587s ago: executing program 3 (id=581):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$inet6(0x10, 0x2, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000200), &(0x7f0000000280)=""/113}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r3}, 0x18)
open(0x0, 0x14927e, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
readv(r4, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1)

5.481522135s ago: executing program 6 (id=582):
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003f64ecb21ed7d74b542e43ae9f57f61af1c5b6016901992307df92d7c26b05a7da0582d208fd1f57c41cee38c7023e71dc864ab49f7894dd5ee29721d0625ee50c8aeca9b5090d85ff1c5df40229f0981507171aec7dc97abd981893d51a27e8a1033fa344fa3c6c27705648a66a47e0a1bc8fcede095704453c77f6c5370191ab55c423aae05729e69c987cf5f9aa2fd88c9e2114f53b9f82157c197397e43647b083db79f1f2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000440)={0x0, r2}, 0x10)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
capset(&(0x7f0000000040)={0x20080522}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x141e02, 0x20)

3.82809214s ago: executing program 4 (id=583):
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x3, 0x7f)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES32=0x0], 0x50)
write$binfmt_register(0xffffffffffffffff, &(0x7f0000000740)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a\xdd\x05\xdc\xb8\xc7\xb4v\x1f\xe3\xb6)\x1dM\x1e\xf9\x97\xffLW\x82\t\xf7\xb4\xe2fP\b\n\xdd\x03\x9d&\xd2\xce<f\xfb\xed\xdaP\xf0e\xb6\f\x9a\xa7\xe7c\xf3C\x9br\xf0L\xe5\xb3\xfbD\x1b\x88\xb7\b\x1b\xba}\xc9\va_\x9dYC\xffQ\x84 %(;\xac\x95\x90_\xe9\"\"\xf3\xe3#N\x0f\xdf\x7f\x90\x0f\x90S\x8cF\xff\xdb\x80\x9d\xf8A\xa9\x8f7F\x03\xc3T\xd8\xa4\xb9@\xa8\xa7\x94\xd0\x89)C\xfb\x1eV9\xceE', 0x3a, '', 0x3a, './file0'}, 0x1b0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x62, 0xa, 0xff00, 0x14}, [@call={0x75}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)

3.814414911s ago: executing program 6 (id=584):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$VT_ACTIVATE(r0, 0x5606, 0xfffffffffffffffa)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18)
r2 = epoll_create1(0x80000)
epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x8, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x6e)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0xfab]}, 0x8, 0xc00)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
lseek(r7, 0x3, 0x2)
sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x68, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe4, 0x4c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008044}, 0xc000)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/stat\x00', 0x0, 0x0)

2.613930938s ago: executing program 0 (id=585):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg$unix(r1, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x18}}], 0x1, 0x0)
r5 = dup3(r1, r0, 0x0)
connect$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e)

2.612128778s ago: executing program 4 (id=586):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wg1\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000240)='\x00', 0x1, 0x800, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}}, 0x14)

2.200930072s ago: executing program 3 (id=587):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0)
fcntl$setlease(r1, 0x400, 0x1)
open(&(0x7f0000000040)='./file2\x00', 0x0, 0x124)
r2 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c)
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r3 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c044)
fcntl$getflags(r1, 0x401)

2.162584035s ago: executing program 1 (id=588):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10)
r1 = timerfd_create(0x1, 0x80000)
timerfd_settime(r1, 0x0, &(0x7f0000000400)={{}, {0x77359400}}, 0x0)

2.069823022s ago: executing program 4 (id=589):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1)

1.893209997s ago: executing program 0 (id=590):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast})

1.784326515s ago: executing program 4 (id=591):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)

1.028901947s ago: executing program 6 (id=592):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
getpeername$inet6(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r3, 0x400448e0, &(0x7f0000000040))

933.660125ms ago: executing program 3 (id=593):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$eJzs3EtvG1UUAODrpOmbEiEW7DpShZRItVWnSQW7AK14iFQRjwUr6tiO5db2RLHjhKxYsEQs+CcIJFYs+Q0sWLNDLEDskIo89wY1PCpQHJsk3ydNz8yd6zPnjqpEZyZyAM6s+ezXn0vhWrgUQpgNIVwNodgvpa2wGsMLIYTrIYSZJ7ZSGv9j4HwI4XII4dooecxZSqc+vzm8sfLTW798892Fc1e++Pr76a0amLYXQwjdrbi/240xb8X4MI3Xhu0idpeHKcYT3UfpOI9xt7lRZNitHcyrFfF2K87Pt3b6o7jZqdVHsdXeLMa3evGC/WHrIE/xgYe17eK40dwoYrufF7G1H+va248/2/b7g5inkfJ9VKQPg8FBjOPNvWZcz9ajItZ7gzQe8+aN5t4oDlNMlwv1vNMo6tg4yp3+f3u73dvZy4bN7X4772UrlepLleqdcnU7bzQHzeVyrdu4s5wttDqjaeVBs9ZdbeV5q9Os1PPuYrbQqtfL1Wq2cLe50a71smq1crtyq7yymPZuZq/ffz/rNLKFUXy13dsZtDv9bDPfzuInFrOlyu2XF7Mb1ezdtfVs/Z1799bW3/vw7gf3X1l787U06S9lZQtLt5aWytVb5aXq4sld/+h3/X9a/yep6DGuH46k9LSTDyZXB8AJov8HpmGi/f9cGHv/H/T/Y6H/P7Prf5wc7QZytj21/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT7Ye7LN4qd+Xh8JY0/k4aeS8elEMJMCOHx35gN5w/lnE155v5h/tyfavi2FIoMo2tcSNvlEMJq2n579rjvAgAAAJxeX318/bPYrcd/5qddEJMUH9rMXH0wpnylEMLc/I9jyBLSw6bw/NGrikb/v8+FvTFlKx5gXRxTsvjI7dy4sv0rs4fCxSdCKYaZg5nnJ1oXAABwnA53ApPtQgAAAJikT6ddANNRvGlNf4ufXvNdiCG9ELx06AgAAAA4gUrTLgAAAAA4dkX/7/v/AAAA4HSL3/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRAICfDS609AdV3fcq3cExeoQuu4y4CkcgV8gFOAPZZZtdBBH2JAoRhBAbE6Lvk+xhbOvxjPDijUcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzTdTEbX1787teNs1zV08zdAAAAANssitm4/DCs+oN0/Fs69DP1s4jII2Jb7d6JTxsxOylOseP64lkOVxFlhPV39NL2JSL+pO3ux7F/BQAAAPi45pPpqKrWq93w1AnRpmrQJv/6t6F4WUQUw5uGouXr3a9XXbraPz60/n934/+Os9lhqZUDW1F7ysyDcsit21S0/TrpcX9s+k+arGry9tIBAADaslkJtFiFAAAA0LJ/p06A0yjfeqa5+GkCf69q0gvBzxs9AAAA4AwdOusZAAAAeI8GL54t6/8zWP/v+631/wAAAODNqvX/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOKZFMRvPJ9NR3TjLVT3N3A0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAPfvzjsIwDAZhcJMor07oAr7/Lc2C3bp1MwOCj38rAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABceRwvzzNejZlso9eZ5N3zSvLp1Ph2avw6N/5Jxrr7NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF/3ul/8TU+NMMnfaWDoeSdauGltXjb0HjaMH4+3fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fvGzcVBwD8e+fzlRYQIaAMQYhKDLDQ9FpaujKAIgb+BKQovZbAlR9tBlpVoCxsKHMXBCNCSKCw9X/o3EpdytbhhiIxMYDss5PXo4iDKvaRfD7S8/vacvy+z4mifP2cAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2fnMvzorNwiTuVsduP7i+XvR3pvrCze27y0Ur4s7fXP+L/Up8/r2Y7nSW2ksEAACAwyOr6/uIfuQ7q0XQXSjr/7w+p6j5v3l6Etf1/HTdX/d17V+0n3+6//zuQAuTcYqLXtgYDU/+NZVeto/znGfP/OMZvfLOl89esvIb0n1n67lxXt7Pzle3br3VL8MjTWQLAPwXJ+q+Cuq/h4p+0GZiABwavaoV7lX1f7bQbk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATehvxZN13ImI5d5eXLjz4Pp62U/t39y+u1y3szdubKfXLC6RR8SFjdHwZFMT+R+4cvXah2uj0fBy88FLEdHe6FXw3gznRLSZoeBxg271sz7bVx2PiPZzbj9o+RcTAAAHTl61oq6/l++sFsc6ixF/fPtw/f9KEkda/0/1af1///2zt9Ox0vp/0NgM59/K5qVPVq5cvfbaxqW1i8OLw49ePzV4Y3D63Jkz51bKZyUrnpgAAADwePpVS+v/7mLEeGr9/1gSx4z1/6dfDz5Px8rU/4+0t+jXdiYAAACH27PHf/u184jjnX4/Plvb3Lw8mGx3909Nti2k+q8dqVpa/2eLbWcFAAAANGG81Xlo/f98EseM6/9PfffCD+k1s4g4Wq3/n1j/eHS+uem05PeZzmri34n3faoAAADMtaNVS9f/8/L9/+7uKw/diHj15UlcfQzgTPV/9vaX36djpe//n25uinOpuzS5H2W/FNFbajsjAAAADrInqlYU+7/kO6sf/Hjs3b73/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa9mcAAAD//6vIRLE=")
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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")
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x30)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x2, &(0x7f0000002400)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}])
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10)
bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="0f00000004000000040000000200020000000000", @ANYRES32=0x1, @ANYBLOB="fdffffff00000000000000000000000000000000cdfef00687b0a9a26f8f60004e967a4ff440410d0932b1fa2e7237d56a580c799f9f83a8fdec7297df5a7b615119f1477a7d4f6219d30090f0ebde3970d200282c083e6e9d6b578c316ad5c78fa9ed4aa4b907c800b64e8cd2d38585bc8aff8085e3de791cdffdf6c3f6cfbb8f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x48)
write$binfmt_script(r6, 0x0, 0x0)

838.959432ms ago: executing program 0 (id=594):
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008413, &(0x7f0000000000)={[{@noblock_validity}, {@barrier}]}, 0x0, 0x517, &(0x7f00000000c0)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x14, 0x0, @gue={{0x1, 0x1, 0x1, 0x2, 0x100, @void}, "9935704b5f4cd745"}}}}}}, 0x0)

838.640502ms ago: executing program 4 (id=595):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)

48.850426ms ago: executing program 1 (id=596):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
gettid()
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r6}, 0x18)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r7}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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")
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x400c6313, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

0s ago: executing program 6 (id=597):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
prlimit64(0x0, 0xe, 0x0, 0x0)
socket$inet6(0x10, 0x2, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000200), &(0x7f0000000280)=""/113}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r3}, 0x18)
open(0x0, 0x14927e, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
readv(r4, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1)

kernel console output (not intermixed with test programs):

eth0_to_team: link becomes ready
[   43.155552][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   43.158667][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   43.173915][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   43.176916][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   43.181599][ T4305] 8021q: adding VLAN 0 to HW filter on device bond0
[   43.192216][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   43.196369][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   43.199378][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.201406][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.209106][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   43.211926][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   43.215956][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.218157][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.220497][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   43.238742][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   43.241595][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   43.245386][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   43.248330][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   43.251051][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   43.262071][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   43.268506][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   43.271266][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   43.274407][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   43.279445][ T4305] 8021q: adding VLAN 0 to HW filter on device team0
[   43.299225][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   43.302566][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   43.310989][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   43.314567][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   43.317281][   T55] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.319232][   T55] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.324566][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   43.327219][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   43.342393][ T4307] 8021q: adding VLAN 0 to HW filter on device bond0
[   43.350002][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   43.360806][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   43.364251][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   43.366910][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   43.369862][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   43.372685][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   43.380389][  T323] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.382428][  T323] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.385094][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   43.387639][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   43.394434][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   43.400305][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   43.420848][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   43.428229][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   43.430747][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   43.449607][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   43.453183][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   43.456258][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   43.461757][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   43.466086][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   43.470825][ T4307] 8021q: adding VLAN 0 to HW filter on device team0
[   43.484865][ T4312] 8021q: adding VLAN 0 to HW filter on device bond0
[   43.486969][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   43.489972][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   43.497460][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   43.499857][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   43.511392][ T4312] 8021q: adding VLAN 0 to HW filter on device team0
[   43.518006][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   43.520458][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   43.522921][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   43.529488][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   43.532082][  T323] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.534224][  T323] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.541498][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   43.550836][ T4305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   43.556472][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   43.560624][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   43.565113][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   43.567956][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   43.570789][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   43.574714][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.576830][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.585806][ T4306] 8021q: adding VLAN 0 to HW filter on device batadv0
[   43.588103][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   43.591622][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   43.600440][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   43.603549][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   43.608251][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.610340][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.628634][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   43.635067][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   43.644836][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   43.648060][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.650144][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.652583][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   43.662314][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   43.670152][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   43.675022][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   43.687356][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   43.689953][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   43.692880][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   43.706640][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   43.709635][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   43.712646][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   43.718308][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   43.723791][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   43.740241][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   43.744468][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   43.747249][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   43.749505][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   43.758332][ T4307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   43.761930][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   43.772447][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   43.777128][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   43.779899][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   43.782712][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   43.785468][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   43.788844][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   43.794871][ T4308] 8021q: adding VLAN 0 to HW filter on device batadv0
[   43.806610][ T4312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   43.810149][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   43.812697][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   43.816374][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   43.835334][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   43.838073][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   43.840769][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   43.845456][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   43.848326][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   43.850814][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   43.868568][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   43.871329][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   43.875317][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   43.878389][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   43.882925][ T4306] device veth0_vlan entered promiscuous mode
[   43.916794][ T4306] device veth1_vlan entered promiscuous mode
[   43.936482][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   43.939235][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   43.941651][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   43.947884][ T4308] device veth0_vlan entered promiscuous mode
[   43.966608][ T4305] 8021q: adding VLAN 0 to HW filter on device batadv0
[   43.986635][ T4308] device veth1_vlan entered promiscuous mode
[   44.008134][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   44.010896][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   44.017610][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   44.020518][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   44.039909][ T4306] device veth0_macvtap entered promiscuous mode
[   44.045711][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   44.049723][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   44.052436][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   44.057914][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   44.062200][ T4306] device veth1_macvtap entered promiscuous mode
[   44.071501][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   44.077263][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   44.080210][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   44.107302][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   44.109656][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   44.111826][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   44.115027][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   44.129141][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_0
[   44.132495][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   44.135815][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   44.140202][ T4307] 8021q: adding VLAN 0 to HW filter on device batadv0
[   44.149612][ T4308] device veth0_macvtap entered promiscuous mode
[   44.155289][ T4312] 8021q: adding VLAN 0 to HW filter on device batadv0
[   44.166386][ T4305] device veth0_vlan entered promiscuous mode
[   44.171477][ T4306] batman_adv: batadv0: Interface activated: batadv_slave_1
[   44.174016][ T4320] Bluetooth: hci0: command 0x041b tx timeout
[   44.174048][ T4318] Bluetooth: hci2: command 0x041b tx timeout
[   44.175711][ T4320] Bluetooth: hci3: command 0x041b tx timeout
[   44.177369][ T4318] Bluetooth: hci1: command 0x041b tx timeout
[   44.181061][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   44.184655][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   44.187273][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   44.190778][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   44.195743][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   44.201177][ T4308] device veth1_macvtap entered promiscuous mode
[   44.217582][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   44.220392][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   44.228877][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   44.237012][ T4305] device veth1_vlan entered promiscuous mode
[   44.242018][ T4306] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   44.249395][ T4306] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   44.251892][ T4306] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   44.254582][ T4311] Bluetooth: hci4: command 0x041b tx timeout
[   44.260543][ T4306] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   44.288819][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   44.291491][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   44.296081][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   44.310882][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   44.314753][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   44.317568][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   44.320759][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   44.327670][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   44.350501][ T4312] device veth0_vlan entered promiscuous mode
[   44.355804][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   44.358818][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.363421][ T4308] batman_adv: batadv0: Interface activated: batadv_slave_0
[   44.372244][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   44.375892][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   44.388272][ T4308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   44.391198][ T4308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.395677][ T4308] batman_adv: batadv0: Interface activated: batadv_slave_1
[   44.399562][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   44.402429][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   44.407508][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   44.410345][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   44.414479][ T4305] device veth0_macvtap entered promiscuous mode
[   44.422212][ T4312] device veth1_vlan entered promiscuous mode
[   44.442894][ T4305] device veth1_macvtap entered promiscuous mode
[   44.456737][ T4308] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   44.459170][ T4308] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   44.461684][ T4308] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   44.468555][ T4308] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   44.476331][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   44.479002][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   44.481868][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   44.531090][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   44.536703][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.539534][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   44.542395][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.547402][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_0
[   44.552780][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   44.557134][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   44.559903][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   44.562691][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   44.569137][ T4312] device veth0_macvtap entered promiscuous mode
[   44.572624][   T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   44.576701][   T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   44.591966][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   44.595741][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   44.598441][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   44.601257][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   44.607259][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   44.609912][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   44.614419][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   44.617365][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.620088][ T4305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   44.624100][ T4305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.628075][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_1
[   44.631584][ T4312] device veth1_macvtap entered promiscuous mode
[   44.641576][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   44.644942][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   44.648093][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   44.651151][ T4307] device veth0_vlan entered promiscuous mode
[   44.672747][ T4305] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   44.676576][ T4305] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   44.680408][ T4305] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   44.682728][ T4305] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   44.698953][ T4312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   44.702002][ T4312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.705891][ T4312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   44.708977][ T4312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.711825][ T4312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   44.715968][ T4312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.720118][ T4312] batman_adv: batadv0: Interface activated: batadv_slave_0
[   44.731180][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   44.735737][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   44.741961][ T4307] device veth1_vlan entered promiscuous mode
[   44.747602][ T4312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   44.750564][ T4312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.754676][ T4312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   44.757719][   T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   44.757762][ T4312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.759881][   T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   44.762603][ T4312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   44.768753][ T4312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.774957][ T4312] batman_adv: batadv0: Interface activated: batadv_slave_1
[   44.785399][  T323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   44.787610][  T323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   44.795935][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   44.798588][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   44.801105][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   44.808129][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   44.811280][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   44.844630][ T4312] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   44.847239][ T4312] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   44.849684][ T4312] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   44.852043][ T4312] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   44.886948][  T323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   44.889226][  T323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   44.891967][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   44.897173][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   44.899739][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   44.902498][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   44.940047][ T4307] device veth0_macvtap entered promiscuous mode
[   44.946091][ T4307] device veth1_macvtap entered promiscuous mode
[   44.969978][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   44.978809][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.981641][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   44.985314][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.989374][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   44.992197][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.995836][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   44.998747][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.012464][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.026606][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   45.029265][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   45.031759][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   45.037577][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   45.064820][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   45.067823][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.070476][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   45.102807][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.109804][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   45.114697][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.117469][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   45.120407][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.125014][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.131947][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   45.136749][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   45.152088][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.154553][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.170701][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.172945][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.193280][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   45.197557][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   45.211593][ T4307] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.215288][ T4307] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.217891][ T4307] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.220353][ T4307] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.340990][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.345015][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.347284][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.366976][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.409945][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   45.412750][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   45.451526][   T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.456015][   T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.459292][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   45.539183][  T323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.546729][  T323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.558256][   T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   45.741535][ T4432] vhci_hcd: invalid port number 96
[   45.747243][ T4432] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0
[   45.821154][ T4434] loop4: detected capacity change from 0 to 16
[   45.827771][ T4434] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[   45.830247][ T4434] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[   45.838883][ T4434] erofs: (device loop4): erofs_superblock_csum_verify: invalid checksum 0xfa73a025, 0x2a6de271 expected
[   45.889186][ T4299] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   46.638587][ T4318] Bluetooth: hci1: command 0x040f tx timeout
[   46.640312][ T4318] Bluetooth: hci3: command 0x040f tx timeout
[   46.641969][ T4318] Bluetooth: hci2: command 0x040f tx timeout
[   46.643719][ T4318] Bluetooth: hci0: command 0x040f tx timeout
[   46.645503][ T4318] Bluetooth: hci4: command 0x040f tx timeout
[   46.650284][ T1517] cfg80211: failed to load regulatory.db
[   48.123027][    C0] sched: RT throttling activated
[   48.447682][ T4459] netlink: 108 bytes leftover after parsing attributes in process `syz.2.14'.
[   48.450469][ T4459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'.
[   48.663077][ T4311] Bluetooth: hci4: command 0x0419 tx timeout
[   48.664872][ T4311] Bluetooth: hci0: command 0x0419 tx timeout
[   48.666660][ T4311] Bluetooth: hci2: command 0x0419 tx timeout
[   48.668250][ T4311] Bluetooth: hci3: command 0x0419 tx timeout
[   48.669992][ T4311] Bluetooth: hci1: command 0x0419 tx timeout
[   49.443910][ T4472] loop3: detected capacity change from 0 to 512
[   49.446469][ T4472] EXT4-fs: Ignoring removed i_version option
[   49.861234][ T4472] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002]
[   49.863898][ T4472] System zones: 0-2, 18-18, 34-35
[   49.940301][ T4472] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   51.331711][ T4489] bridge: RTM_NEWNEIGH with invalid ether address
[   51.728261][ T4306] EXT4-fs (loop3): unmounting filesystem.
[   51.857373][ T4491] binder: 4490:4491 DecRefs 0 refcount change on invalid ref 2 ret -22
[   51.937505][   T27] audit: type=1326 audit(51.910:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4492 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275ce28 code=0x7ffc0000
[   51.953175][   T27] audit: type=1326 audit(51.920:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4492 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa275ce28 code=0x7ffc0000
[   51.986249][   T27] audit: type=1326 audit(51.920:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4492 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275ce28 code=0x7ffc0000
[   51.998076][   T27] audit: type=1326 audit(51.920:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4492 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=11 compat=0 ip=0xffffa275ce28 code=0x7ffc0000
[   52.040680][ T4495] loop2: detected capacity change from 0 to 4096
[   52.060608][ T4495] ext4: Unknown parameter 'nouser_xattr'
[   52.181835][ T4299] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   52.220048][   T27] audit: type=1326 audit(51.920:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4492 comm="syz.3.21" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275ce28 code=0x7ffc0000
[   52.943725][ T4500] loop4: detected capacity change from 0 to 4096
[   53.079538][ T4500] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   53.305238][ T4500] process 'syz.4.25' launched '/dev/fd/3' with NULL argv: empty string added
[   53.356579][ T4503] loop3: detected capacity change from 0 to 4096
[   54.298135][ T4503] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   54.408860][ T4306] EXT4-fs (loop3): unmounting filesystem.
[   54.473448][ T4307] EXT4-fs (loop4): unmounting filesystem.
[   56.392726][ T4539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   56.409438][ T4352] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   56.421684][ T4539] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   56.430920][ T4352] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   56.551172][ T4539] loop1: detected capacity change from 0 to 512
[   56.590262][ T4539] EXT4-fs: Ignoring removed mblk_io_submit option
[   56.619237][ T4539] ext4: Unknown parameter 'seclabel'
[   57.145927][ T4543] loop2: detected capacity change from 0 to 256
[   57.149100][ T4543] FAT-fs (loop2): Unrecognized mount option "shortname" or missing value
[   57.185248][ T4299] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   57.582608][ T4548] capability: warning: `syz.2.39' uses deprecated v2 capabilities in a way that may be insecure
[   58.974080][ T4561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   58.980906][ T4561] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.169347][ T4554] loop4: detected capacity change from 0 to 40427
[   59.188624][ T4554] F2FS-fs (loop4): Wrong segment_count / block_count (64 > 16384)
[   59.203833][ T4554] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   59.206964][ T4554] F2FS-fs (loop4): Wrong SIT boundary, start(1536) end(2560) blocks(2048)
[   59.228729][ T4554] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[   60.654434][ T4574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   60.656948][ T4574] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   61.697549][ T4582] loop1: detected capacity change from 0 to 8192
[   61.700010][ T4582] =======================================================
[   61.700010][ T4582] WARNING: The mand mount option has been deprecated and
[   61.700010][ T4582]          and is ignored by this kernel. Remove the mand
[   61.700010][ T4582]          option from the mount to silence this warning.
[   61.700010][ T4582] =======================================================
[   61.716161][   T27] audit: type=1326 audit(61.090:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4575 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb255ce28 code=0x7ffc0000
[   61.724236][   T27] audit: type=1326 audit(61.090:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4575 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb255ce28 code=0x7ffc0000
[   61.731515][   T27] audit: type=1326 audit(61.100:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4575 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb255ce28 code=0x7ffc0000
[   62.621774][   T27] audit: type=1326 audit(61.100:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4575 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb255ce28 code=0x7ffc0000
[   62.641019][   T27] audit: type=1326 audit(61.100:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4575 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb255ce28 code=0x7ffc0000
[   62.650645][   T27] audit: type=1326 audit(61.110:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4575 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=99 compat=0 ip=0xffffb255ce28 code=0x7ffc0000
[   62.661925][   T27] audit: type=1326 audit(61.110:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4575 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb255ce28 code=0x7ffc0000
[   62.672612][   T27] audit: type=1326 audit(61.110:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4575 comm="syz.4.52" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb255ce28 code=0x7ffc0000
[   63.527129][ T4593] loop4: detected capacity change from 0 to 512
[   63.551984][ T4593] EXT4-fs: Ignoring removed mblk_io_submit option
[   63.574979][ T4593] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   63.609524][ T4593] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.56: iget: bad extended attribute block 1
[   63.615764][ T4593] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.56: couldn't read orphan inode 15 (err -117)
[   63.621796][ T4596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   63.622514][ T4593] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   63.661501][ T4596] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   63.714228][ T4307] EXT4-fs (loop4): unmounting filesystem.
[   63.860949][ T4606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   63.871213][ T4606] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   63.879807][   T27] audit: type=1326 audit(63.850:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4607 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc95ce28 code=0x7ffc0000
[   63.894368][   T27] audit: type=1326 audit(63.870:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4607 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc95ce28 code=0x7ffc0000
[   64.413262][ T1517] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   64.413893][ T4622] loop3: detected capacity change from 0 to 1024
[   64.485136][ T4622] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   64.494978][ T2059] ieee802154 phy0 wpan0: encryption failed: -22
[   64.496871][ T2059] ieee802154 phy1 wpan1: encryption failed: -22
[   64.531869][ T4306] EXT4-fs (loop3): unmounting filesystem.
[   64.672240][ T4627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.68'.
[   64.732626][ T1517] usb 1-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00
[   64.735574][ T1517] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.741420][ T1517] usb 1-1: config 0 descriptor??
[   65.689872][ T4644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   65.696813][ T4644] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   65.710480][ T4645] loop2: detected capacity change from 0 to 1024
[   65.719492][ T4645] EXT4-fs: Ignoring removed orlov option
[   65.787119][ T4651] loop1: detected capacity change from 0 to 512
[   65.793660][ T4651] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   65.799566][ T4645] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   65.817626][ T4648] input: syz0 as /devices/virtual/input/input3
[   65.909179][ T4651] EXT4-fs (loop1): orphan cleanup on readonly fs
[   65.913726][ T4651] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.78: Failed to acquire dquot type 1
[   65.920984][ T4651] EXT4-fs (loop1): 1 truncate cleaned up
[   65.924178][ T4651] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   66.211056][ T4305] EXT4-fs (loop2): unmounting filesystem.
[   67.115798][ T1517] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[   67.117987][ T1517] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[   67.120019][ T1517] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[   67.121912][ T1517] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[   67.123945][ T1517] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[   67.125884][ T1517] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[   67.127903][ T1517] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[   67.129831][ T1517] logitech 0003:046D:CA03.0002: unknown main item tag 0x0
[   67.131743][ T1517] logitech 0003:046D:CA03.0002: unbalanced collection at end of report description
[   67.134703][ T1517] logitech 0003:046D:CA03.0002: parse failed
[   67.136453][ T1517] logitech: probe of 0003:046D:CA03.0002 failed with error -22
[   67.142801][ T1517] usb 1-1: USB disconnect, device number 2
[   67.360553][ T4659] loop3: detected capacity change from 0 to 40427
[   67.386121][ T4659] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   67.405485][ T4659] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   67.437162][ T4659] F2FS-fs (loop3): invalid crc value
[   67.517139][ T4659] F2FS-fs (loop3): Found nat_bits in checkpoint
[   67.639706][ T4312] EXT4-fs (loop1): unmounting filesystem.
[   67.656433][ T4659] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   67.696707][ T4659] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   67.802153][ T4676] loop1: detected capacity change from 0 to 256
[   67.853967][ T4676] FAT-fs (loop1): Directory bread(block 64) failed
[   67.855893][ T4676] FAT-fs (loop1): Directory bread(block 65) failed
[   67.857790][ T4676] FAT-fs (loop1): Directory bread(block 66) failed
[   67.859783][ T4676] FAT-fs (loop1): Directory bread(block 67) failed
[   67.861735][ T4676] FAT-fs (loop1): Directory bread(block 68) failed
[   67.878345][ T4676] FAT-fs (loop1): Directory bread(block 69) failed
[   67.880401][ T4676] FAT-fs (loop1): Directory bread(block 70) failed
[   67.882159][ T4676] FAT-fs (loop1): Directory bread(block 71) failed
[   67.897358][ T4676] FAT-fs (loop1): Directory bread(block 72) failed
[   67.899441][ T4676] FAT-fs (loop1): Directory bread(block 73) failed
[   67.936238][ T4678] loop0: detected capacity change from 0 to 128
[   68.131702][ T4684] device wg2 entered promiscuous mode
[   68.260749][ T4690] loop0: detected capacity change from 0 to 256
[   68.302664][ T4690] FAT-fs (loop0): Directory bread(block 64) failed
[   68.311062][ T4690] FAT-fs (loop0): Directory bread(block 65) failed
[   68.329087][ T4690] FAT-fs (loop0): Directory bread(block 66) failed
[   68.332733][ T4690] FAT-fs (loop0): Directory bread(block 67) failed
[   68.370171][ T4690] FAT-fs (loop0): Directory bread(block 68) failed
[   68.372076][ T4690] FAT-fs (loop0): Directory bread(block 69) failed
[   68.376745][ T4690] FAT-fs (loop0): Directory bread(block 70) failed
[   68.382312][ T4690] FAT-fs (loop0): Directory bread(block 71) failed
[   68.388613][ T4690] FAT-fs (loop0): Directory bread(block 72) failed
[   68.390495][ T4690] FAT-fs (loop0): Directory bread(block 73) failed
[   68.800239][ T4701] loop1: detected capacity change from 0 to 512
[   68.803188][ T4701] EXT4-fs (loop1): #blocks per group too big: 466944
[   70.725540][ T4724] vhci_hcd: invalid port number 96
[   70.726985][ T4724] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0
[   71.676108][ T4730] usb usb2: usbfs: process 4730 (syz.0.107) did not claim interface 2 before use
[   71.811545][   T27] kauditd_printk_skb: 28 callbacks suppressed
[   71.811557][   T27] audit: type=1326 audit(71.780:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4733 comm="syz.0.109" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc95ce28 code=0x7ffc0000
[   71.831243][   T27] audit: type=1326 audit(71.800:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4733 comm="syz.0.109" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbc95ce28 code=0x7ffc0000
[   71.839238][   T27] audit: type=1326 audit(71.810:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4733 comm="syz.0.109" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc95ce28 code=0x7ffc0000
[   71.863110][   T27] audit: type=1326 audit(71.810:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4733 comm="syz.0.109" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=176 compat=0 ip=0xffffbc95ce28 code=0x7ffc0000
[   71.868893][   T27] audit: type=1326 audit(71.810:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4733 comm="syz.0.109" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc95ce28 code=0x7ffc0000
[   73.040824][ T4742] loop3: detected capacity change from 0 to 131072
[   73.049411][ T4742] F2FS-fs (loop3): invalid crc value
[   73.058292][ T4742] F2FS-fs (loop3): Found nat_bits in checkpoint
[   73.075228][ T4742] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2
[   73.077932][ T4742] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[   79.782931][ T4760] loop1: detected capacity change from 0 to 40427
[   79.801501][ T4760] F2FS-fs (loop1): Found nat_bits in checkpoint
[   80.292543][ T4760] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   81.977229][ T4790] loop0: detected capacity change from 0 to 512
[   81.979727][ T4790] EXT4-fs: Ignoring removed i_version option
[   82.205422][ T4790] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002]
[   82.207893][ T4790] System zones: 0-2, 18-18, 34-35
[   82.276172][ T4790] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   82.972379][ T4796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.007391][ T4796] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.228618][ T4799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.334083][ T4799] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.062836][ T4308] EXT4-fs (loop0): unmounting filesystem.
[   85.094565][ T4797] loop4: detected capacity change from 0 to 40427
[   85.111339][ T4797] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   85.113645][ T4797] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   85.176641][ T4797] F2FS-fs (loop4): Found nat_bits in checkpoint
[   85.289792][ T4820] loop3: detected capacity change from 0 to 512
[   85.316972][ T4820] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   85.415986][ T4820] EXT4-fs (loop3): orphan cleanup on readonly fs
[   85.435352][ T4820] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5
[   85.438573][ T4820] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[   85.441361][ T4820] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.127: Failed to acquire dquot type 1
[   85.459931][ T4820] EXT4-fs (loop3): 1 truncate cleaned up
[   85.468143][ T4820] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   91.100263][ T4306] EXT4-fs (loop3): unmounting filesystem.
[   91.106782][ T4848] device wg2 left promiscuous mode
[   92.337211][ T4852] loop0: detected capacity change from 0 to 40427
[   92.353354][ T4852] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   92.355772][ T4852] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   92.361043][ T4852] F2FS-fs (loop0): invalid crc value
[   92.552904][ T4852] F2FS-fs (loop0): Found nat_bits in checkpoint
[   92.809210][ T4879] loop4: detected capacity change from 0 to 2048
[   94.451893][ T4879] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   95.618872][ T4885] Zero length message leads to an empty skb
[   95.627262][ T4307] EXT4-fs (loop4): unmounting filesystem.
[   95.642178][ T4885] tipc: Started in network mode
[   95.669649][ T4885] tipc: Node identity ac14140f, cluster identity 4711
[   95.680474][ T4885] tipc: New replicast peer: 255.255.255.255
[   95.729159][ T4885] tipc: Enabled bearer <udp:s>, priority 10
[   95.989110][ T4891] tipc: Started in network mode
[   95.990550][ T4891] tipc: Node identity 6ac608088d37, cluster identity 4711
[   95.992522][ T4891] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.001565][ T4891] device syzkaller0 entered promiscuous mode
[   96.016978][ T4891] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   96.163897][ T4894] loop0: detected capacity change from 0 to 40427
[   96.321370][ T4900] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) !
[   96.500195][ T4894] F2FS-fs (loop0): Found nat_bits in checkpoint
[   96.571376][ T4894] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   96.963938][    T7] tipc: Node number set to 2886997007
[   97.012694][ T4912] tipc: Resetting bearer <eth:syzkaller0>
[   97.041262][ T4889] tipc: Resetting bearer <eth:syzkaller0>
[   97.189175][ T4910] tipc: Node number set to 3891333128
[   97.229337][ T4889] tipc: Disabling bearer <eth:syzkaller0>
[   99.469935][ T4924] loop1: detected capacity change from 0 to 512
[   99.766957][ T4932] loop4: detected capacity change from 0 to 128
[   99.989621][ T4932] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  100.151395][ T4924] EXT4-fs (loop1): Test dummy encryption mode enabled
[  100.638964][ T4924] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  100.662623][ T4924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.697179][ T4924] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.978282][ T4312] EXT4-fs (loop1): unmounting filesystem.
[  102.049226][ T4947] loop3: detected capacity change from 0 to 256
[  102.298985][ T4947] FAT-fs (loop3): Directory bread(block 64) failed
[  102.300845][ T4947] FAT-fs (loop3): Directory bread(block 65) failed
[  102.358061][ T4947] FAT-fs (loop3): Directory bread(block 66) failed
[  102.359990][ T4947] FAT-fs (loop3): Directory bread(block 67) failed
[  102.361833][ T4947] FAT-fs (loop3): Directory bread(block 68) failed
[  102.452322][ T4947] FAT-fs (loop3): Directory bread(block 69) failed
[  102.485622][ T4947] FAT-fs (loop3): Directory bread(block 70) failed
[  102.511716][ T4947] FAT-fs (loop3): Directory bread(block 71) failed
[  102.526180][ T4947] FAT-fs (loop3): Directory bread(block 72) failed
[  102.541637][ T4947] FAT-fs (loop3): Directory bread(block 73) failed
[  102.562905][ T4307] EXT4-fs (loop4): unmounting filesystem.
[  102.921800][ T4962] loop3: detected capacity change from 0 to 256
[  102.950876][ T4962] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d)
[  105.363190][ T4986] loop4: detected capacity change from 0 to 16
[  105.391624][ T4986] erofs: (device loop4): mounted with root inode @ nid 36.
[  105.437385][ T4986] syz.4.171: attempt to access beyond end of device
[  105.437385][ T4986] loop4: rw=0, sector=8, nr_sectors = 16 limit=16
[  106.633953][ T4993] loop0: detected capacity change from 0 to 256
[  106.669502][ T4993] FAT-fs (loop0): Unrecognized mount option "ÿÿÿÿÿÿÿÿ0x0000000000000000" or missing value
[  106.830750][ T4995] loop3: detected capacity change from 0 to 256
[  106.851563][ T4995] exfat: Deprecated parameter 'utf8'
[  106.853523][ T4995] exfat: Deprecated parameter 'utf8'
[  106.897890][ T4995] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d)
[  107.265713][ T4318] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  107.380250][ T4999] overlayfs: missing 'workdir'
[  107.531613][ T5001] loop3: detected capacity change from 0 to 512
[  107.622488][ T5001] EXT4-fs (loop3): Test dummy encryption mode enabled
[  107.783427][ T5001] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.179: inode #1: comm syz.3.179: iget: illegal inode #
[  107.790613][ T5001] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.179: error while reading EA inode 1 err=-117
[  107.796385][ T5001] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  107.800938][ T5001] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.179: inode #1: comm syz.3.179: iget: illegal inode #
[  107.808334][ T5001] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.179: error while reading EA inode 1 err=-117
[  107.818759][ T5001] EXT4-fs (loop3): 1 orphan inode deleted
[  107.820480][ T5001] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  110.919167][ T4306] EXT4-fs (loop3): unmounting filesystem.
[  111.122774][ T5027] loop3: detected capacity change from 0 to 512
[  111.204285][ T5027] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  111.498545][ T4306] EXT4-fs (loop3): unmounting filesystem.
[  111.579105][ T4318] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  111.583849][ T4318] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  111.591803][ T4318] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  111.598783][ T4318] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  111.601425][ T4318] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  111.609414][ T4318] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  111.989210][ T5048] device ip6gretap0 entered promiscuous mode
[  113.462803][   T27] audit: type=1326 audit(113.430:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5056 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa995ce28 code=0x7ffc0000
[  113.470133][   T27] audit: type=1326 audit(113.440:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5056 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=153 compat=0 ip=0xffffa995ce28 code=0x7ffc0000
[  113.476440][   T27] audit: type=1326 audit(113.440:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5056 comm="syz.1.197" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa995ce28 code=0x7ffc0000
[  113.673539][ T5035] chnl_net:caif_netlink_parms(): no params data found
[  113.693221][ T4311] Bluetooth: hci5: command 0x0409 tx timeout
[  113.800788][ T5035] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.803339][ T5035] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.806225][ T5035] device bridge_slave_0 entered promiscuous mode
[  113.820620][ T5035] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.824936][ T5035] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.830337][ T5035] device bridge_slave_1 entered promiscuous mode
[  113.868461][ T5035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  113.887737][ T5035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  113.951530][ T5035] team0: Port device team_slave_0 added
[  113.971263][ T5035] team0: Port device team_slave_1 added
[  114.012855][ T5035] batman_adv: batadv0: Adding interface: batadv_slave_0
[  114.021667][ T5035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.038259][ T5035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  114.053635][ T5035] batman_adv: batadv0: Adding interface: batadv_slave_1
[  114.059580][ T5035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.078387][   T27] audit: type=1326 audit(114.050:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc95ce28 code=0x7ffc0000
[  114.086574][   T27] audit: type=1326 audit(114.050:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbc95ce28 code=0x7ffc0000
[  114.092414][   T27] audit: type=1326 audit(114.050:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc95ce28 code=0x7ffc0000
[  114.092693][ T5035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  114.114282][   T27] audit: type=1326 audit(114.050:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=87 compat=0 ip=0xffffbc95ce28 code=0x7ffc0000
[  114.120340][   T27] audit: type=1326 audit(114.050:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5060 comm="syz.0.196" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc95ce28 code=0x7ffc0000
[  114.235191][ T5035] device hsr_slave_0 entered promiscuous mode
[  114.249935][   T27] audit: type=1326 audit(114.220:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5076 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb255ce28 code=0x7ffc0000
[  114.256743][   T27] audit: type=1326 audit(114.230:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5076 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb255ce28 code=0x7ffc0000
[  114.273801][ T5035] device hsr_slave_1 entered promiscuous mode
[  114.353373][ T5035] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  114.356574][ T5035] Cannot create hsr debugfs directory
[  116.403671][ T4311] Bluetooth: hci5: command 0x041b tx timeout
[  116.838691][ T5035] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  116.932825][ T5105] loop3: detected capacity change from 0 to 256
[  116.987244][ T5105] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  117.006443][ T5035] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  117.098803][ T5035] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  117.118765][ T5105] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  117.147543][ T5105] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  117.151552][ T5105] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  117.218015][ T5035] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  117.597152][ T5035] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.631987][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  117.637276][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  117.641798][ T5035] 8021q: adding VLAN 0 to HW filter on device team0
[  117.641988][ T5127] loop1: detected capacity change from 0 to 512
[  117.652812][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  117.656102][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  117.658708][ T5005] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.660791][ T5005] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.667466][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  117.670284][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  117.679865][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  117.684536][ T5005] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.686650][ T5005] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.692631][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  117.730244][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  117.737379][ T5127] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  117.785825][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  117.789806][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  117.799689][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  117.851279][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  117.862826][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  117.884371][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  117.888422][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  117.919981][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  117.923516][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  117.940771][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  118.872161][ T4318] Bluetooth: hci5: command 0x040f tx timeout
[  119.041389][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  119.048095][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  119.057446][ T5144] loop4: detected capacity change from 0 to 256
[  119.073190][ T5035] 8021q: adding VLAN 0 to HW filter on device batadv0
[  119.098856][ T5144] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  119.666173][   T39] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.707847][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  119.710851][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  119.733543][ T5146] loop1: detected capacity change from 0 to 40427
[  119.756709][ T5146] F2FS-fs (loop1): invalid crc value
[  119.777317][   T39] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.790866][ T5146] F2FS-fs (loop1): Found nat_bits in checkpoint
[  119.798393][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  119.805474][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  119.810117][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  119.813630][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  119.836821][ T5146] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  119.885084][   T39] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.890009][ T5035] device veth0_vlan entered promiscuous mode
[  119.890467][ T4312] syz-executor: attempt to access beyond end of device
[  119.890467][ T4312] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  119.900933][ T5035] device veth1_vlan entered promiscuous mode
[  119.927886][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  119.932767][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  119.949909][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  119.952780][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  119.995060][   T39] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.001646][ T5035] device veth0_macvtap entered promiscuous mode
[  120.007358][ T5035] device veth1_macvtap entered promiscuous mode
[  120.048180][ T5035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.055803][ T5035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.061772][ T5035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.069432][ T5035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.077032][ T5035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.082860][ T5035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.090470][ T5035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.105556][ T5035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.114556][ T5035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.130465][ T5035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.145944][ T5035] batman_adv: batadv0: Interface activated: batadv_slave_0
[  120.154607][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  120.157409][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  120.160061][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  120.169928][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  120.179935][ T5035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.186807][ T5035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.196719][ T5035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.206710][ T5035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.215092][ T5035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.221662][ T5035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.235474][ T5035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.245563][ T5035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.252951][ T5164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.256325][ T5035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.266048][ T5035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.274487][ T5164] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.279155][ T5035] batman_adv: batadv0: Interface activated: batadv_slave_1
[  120.296960][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  120.299843][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  120.330732][ T5035] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  120.336765][ T5035] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  120.347208][ T5035] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  120.349643][ T5035] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.808114][ T5170] loop0: detected capacity change from 0 to 40427
[  120.910746][ T4318] Bluetooth: hci5: command 0x0419 tx timeout
[  121.549693][   T39] tipc: Disabling bearer <udp:s>
[  121.554073][   T39] tipc: Left network mode
[  121.592847][ T5170] F2FS-fs (loop0): Found nat_bits in checkpoint
[  121.645422][ T5170] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  121.774133][ T5173] netlink: 96 bytes leftover after parsing attributes in process `syz.0.231'.
[  121.930935][ T4480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.936247][ T4480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.940549][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  122.116080][ T5211] loop3: detected capacity change from 0 to 512
[  122.120785][ T4361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.129841][ T4361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.134823][ T5211] EXT4-fs (loop3): Test dummy encryption mode enabled
[  122.136678][ T5211] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  122.140241][ T5211] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  122.155512][ T5005] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  122.186058][ T5211] EXT4-fs (loop3): 1 truncate cleaned up
[  122.188774][ T5211] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  122.236651][   T27] kauditd_printk_skb: 14 callbacks suppressed
[  122.236664][   T27] audit: type=1326 audit(122.210:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5215 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc95ce28 code=0x7ffc0000
[  122.250124][   T27] audit: type=1326 audit(122.210:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5215 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbc95ce28 code=0x7ffc0000
[  122.264635][   T27] audit: type=1326 audit(122.210:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5215 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc95ce28 code=0x7ffc0000
[  122.286692][   T27] audit: type=1326 audit(122.210:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5215 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbc95ce28 code=0x7ffc0000
[  122.436991][   T27] audit: type=1326 audit(122.210:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5215 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc95ce28 code=0x7ffc0000
[  122.453152][   T27] audit: type=1326 audit(122.210:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5215 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffbc95ce28 code=0x7ffc0000
[  122.459210][   T27] audit: type=1326 audit(122.210:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5215 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc95ce28 code=0x7ffc0000
[  122.473075][   T27] audit: type=1326 audit(122.210:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5215 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbc95ce28 code=0x7ffc0000
[  122.478914][   T27] audit: type=1326 audit(122.210:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5215 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc95ce28 code=0x7ffc0000
[  122.491694][   T27] audit: type=1326 audit(122.210:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5215 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbc95ce28 code=0x7ffc0000
[  124.445581][ T5244] netlink: 'syz.5.186': attribute type 1 has an invalid length.
[  124.448033][ T5244] netlink: 24 bytes leftover after parsing attributes in process `syz.5.186'.
[  125.122010][ T4306] EXT4-fs (loop3): unmounting filesystem.
[  125.342413][ T5268] loop3: detected capacity change from 0 to 2048
[  125.502794][ T5268] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  126.082098][ T5257] loop5: detected capacity change from 0 to 40427
[  126.091686][ T5257] F2FS-fs (loop5): Invalid log sectors per block(0) log sectorsize(9)
[  126.095445][ T5257] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  126.098596][ T5257] F2FS-fs (loop5): Corrupted extension count (37 + 77 > 64)
[  126.100599][ T5257] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  126.102004][ T2059] ieee802154 phy0 wpan0: encryption failed: -22
[  126.113251][ T2059] ieee802154 phy1 wpan1: encryption failed: -22
[  126.401567][ T4800] I/O error, dev loop5, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  126.882366][   T39] device hsr_slave_0 left promiscuous mode
[  126.932423][ T5280] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set
[  126.982045][   T39] device hsr_slave_1 left promiscuous mode
[  127.046667][   T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.048914][   T39] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.051992][   T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  127.060341][   T39] batman_adv: batadv0: Removing interface: batadv_slave_1
[  127.071397][   T39] device bridge_slave_1 left promiscuous mode
[  127.074522][   T39] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.092489][ T4306] EXT4-fs (loop3): unmounting filesystem.
[  127.108431][   T39] device bridge_slave_0 left promiscuous mode
[  127.110869][   T39] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.176955][ T5300] loop4: detected capacity change from 0 to 2048
[  127.411490][ T5300]  loop4: p3 p4 < >
[  127.420095][ T5300] loop4: p3 size 83886080 extends beyond EOD, truncated
[  128.093802][   T39] device veth1_macvtap left promiscuous mode
[  128.095910][   T39] device veth0_macvtap left promiscuous mode
[  128.097738][   T39] device veth1_vlan left promiscuous mode
[  128.099516][   T39] device veth0_vlan left promiscuous mode
[  128.161093][ T3921]  loop4: p3 p4 < >
[  128.162366][ T3921] loop4: p3 size 83886080 extends beyond EOD, truncated
[  128.479552][ T4800] udevd[4800]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  128.484571][ T4781] udevd[4781]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  128.508818][ T4800] udevd[4800]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  128.521377][ T4781] udevd[4781]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  128.716973][ T5302] loop5: detected capacity change from 0 to 40427
[  128.734351][ T5302] F2FS-fs (loop5): Invalid SB checksum offset: 0
[  128.736354][ T5302] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  128.740419][ T5302] F2FS-fs (loop5): invalid crc value
[  128.836590][ T5302] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  128.990366][ T5302] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  129.018297][ T5302] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  130.087303][ T5035] syz-executor: attempt to access beyond end of device
[  130.087303][ T5035] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  130.127782][ T5335] loop0: detected capacity change from 0 to 1024
[  130.158869][ T5335] EXT4-fs: Ignoring removed nomblk_io_submit option
[  130.161513][ T5335] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  130.249138][ T5335] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  130.541226][ T4308] EXT4-fs (loop0): unmounting filesystem.
[  130.631572][ T5346] loop0: detected capacity change from 0 to 256
[  131.118239][ T5346] loop0: detected capacity change from 0 to 40427
[  131.194529][ T5346] F2FS-fs (loop0): Found nat_bits in checkpoint
[  131.209410][ T5346] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  131.771774][   T39] team0 (unregistering): Port device team_slave_1 removed
[  132.032846][ T4308] syz-executor: attempt to access beyond end of device
[  132.032846][ T4308] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  132.044720][   T39] team0 (unregistering): Port device team_slave_0 removed
[  132.240873][   T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  132.424579][   T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  132.593206][ T4475] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  133.533124][ T4475] usb 1-1: Using ep0 maxpacket: 32
[  133.535975][ T4475] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.539289][ T4475] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.560940][ T4475] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  133.564398][ T4475] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  133.566805][ T4475] usb 1-1: Product: syz
[  133.568022][ T4475] usb 1-1: Manufacturer: syz
[  133.586778][ T4475] hub 1-1:4.0: USB hub found
[  133.786485][ T4475] hub 1-1:4.0: 2 ports detected
[  134.631407][ T4475] hub 1-1:4.0: hub_hub_status failed (err = -71)
[  134.633522][ T4475] hub 1-1:4.0: config failed, can't get hub status (err -71)
[  134.674819][ T4475] usb 1-1: USB disconnect, device number 3
[  137.050736][   T39] bond0 (unregistering): Released all slaves
[  137.729076][ T5309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'.
[  138.408465][ T4475] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  139.275322][ T4475] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00
[  139.277925][ T4475] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.291562][ T4475] usb 1-1: config 0 descriptor??
[  139.310697][ T5414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.289'.
[  140.147550][ T4475] ryos 0003:1E7D:3232.0003: unknown main item tag 0x0
[  140.149563][ T4475] ryos 0003:1E7D:3232.0003: item fetching failed at offset 3/4
[  140.151997][ T4475] ryos 0003:1E7D:3232.0003: parse failed
[  140.171388][ T4475] ryos: probe of 0003:1E7D:3232.0003 failed with error -22
[  140.359240][ T4475] usb 1-1: USB disconnect, device number 4
[  140.561535][ T5448] loop4: detected capacity change from 0 to 8192
[  140.797137][ T5454] loop4: detected capacity change from 0 to 256
[  140.883831][ T5454] FAT-fs (loop4): Directory bread(block 64) failed
[  140.885953][ T5454] FAT-fs (loop4): Directory bread(block 65) failed
[  140.887892][ T5454] FAT-fs (loop4): Directory bread(block 66) failed
[  140.889659][ T5454] FAT-fs (loop4): Directory bread(block 67) failed
[  140.910568][ T5454] FAT-fs (loop4): Directory bread(block 68) failed
[  140.912553][ T5454] FAT-fs (loop4): Directory bread(block 69) failed
[  140.929762][   T27] kauditd_printk_skb: 10 callbacks suppressed
[  140.929773][   T27] audit: type=1326 audit(140.900:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5458 comm="syz.3.297" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275ce28 code=0x7ffc0000
[  140.963282][ T5454] FAT-fs (loop4): Directory bread(block 70) failed
[  140.965662][   T27] audit: type=1326 audit(140.940:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5458 comm="syz.3.297" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa275ce28 code=0x7ffc0000
[  140.970530][ T5454] FAT-fs (loop4): Directory bread(block 71) failed
[  140.971926][   T27] audit: type=1326 audit(140.940:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5458 comm="syz.3.297" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275ce28 code=0x7ffc0000
[  140.996359][   T27] audit: type=1326 audit(140.940:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5458 comm="syz.3.297" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275ce28 code=0x7ffc0000
[  141.002582][   T27] audit: type=1326 audit(140.940:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5458 comm="syz.3.297" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa275ce28 code=0x7ffc0000
[  141.043347][ T5454] FAT-fs (loop4): Directory bread(block 72) failed
[  141.045198][ T5454] FAT-fs (loop4): Directory bread(block 73) failed
[  141.069726][   T27] audit: type=1326 audit(140.940:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5458 comm="syz.3.297" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275ce28 code=0x7ffc0000
[  141.076382][   T27] audit: type=1326 audit(140.940:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5458 comm="syz.3.297" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275ce28 code=0x7ffc0000
[  141.082320][   T27] audit: type=1326 audit(140.960:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5458 comm="syz.3.297" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=114 compat=0 ip=0xffffa275ce28 code=0x7ffc0000
[  141.091050][   T27] audit: type=1326 audit(140.960:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5458 comm="syz.3.297" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275ce28 code=0x7ffc0000
[  141.099756][   T27] audit: type=1326 audit(140.960:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5458 comm="syz.3.297" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275ce28 code=0x7ffc0000
[  141.297901][ T5476] loop5: detected capacity change from 0 to 512
[  141.352116][ T5481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.303'.
[  141.364221][ T5481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.303'.
[  141.368156][ T5476] EXT4-fs (loop5): Test dummy encryption mode enabled
[  141.370145][ T5476] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  141.508061][ T5476] EXT4-fs (loop5): 1 truncate cleaned up
[  141.509735][ T5476] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  143.011305][ T5491] serio: Serial port ptm0
[  145.046433][ T5536] usb usb3: usbfs: process 5536 (syz.4.310) did not claim interface 0 before use
[  145.467532][ T5035] EXT4-fs (loop5): unmounting filesystem.
[  145.895553][ T5541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  145.899523][ T5541] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  148.382942][ T5593] loop0: detected capacity change from 0 to 512
[  148.438875][ T5593] EXT4-fs (loop0): Test dummy encryption mode enabled
[  148.446722][ T5593] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  148.471901][ T5593] EXT4-fs (loop0): 1 truncate cleaned up
[  148.478084][ T5593] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  150.397045][ T4528] Bluetooth: hci3: Frame reassembly failed (-84)
[  150.630166][ T4308] EXT4-fs (loop0): unmounting filesystem.
[  151.965643][ T5621] loop4: detected capacity change from 0 to 40427
[  151.975012][ T5621] F2FS-fs (loop4): invalid crc value
[  151.979888][ T5621] F2FS-fs (loop4): Found nat_bits in checkpoint
[  152.019869][ T5621] F2FS-fs (loop4): Start checkpoint disabled!
[  152.100160][ T5621] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  152.237149][ T5571] kworker/u4:21: attempt to access beyond end of device
[  152.237149][ T5571] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  152.413289][ T4318] Bluetooth: hci3: command 0x1003 tx timeout
[  152.413354][ T4311] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  153.621153][ T5656] loop4: detected capacity change from 0 to 512
[  153.751728][ T5656] EXT4-fs (loop4): Test dummy encryption mode enabled
[  153.763334][ T5656] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  153.833782][ T5656] EXT4-fs (loop4): 1 truncate cleaned up
[  153.835568][ T5656] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  155.872067][ T4307] EXT4-fs (loop4): unmounting filesystem.
[  158.573898][ T5739] loop4: detected capacity change from 0 to 8192
[  160.166137][ T5751] loop3: detected capacity change from 0 to 512
[  160.182107][ T5751] EXT4-fs (loop3): Test dummy encryption mode enabled
[  160.187471][ T5751] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  160.750597][ T5751] EXT4-fs (loop3): 1 truncate cleaned up
[  160.752201][ T5751] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  162.288381][ T4306] EXT4-fs (loop3): unmounting filesystem.
[  163.695980][ T4320] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  163.701963][ T4320] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  163.709937][ T4320] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  163.727926][ T4320] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  163.736140][ T4320] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  163.738724][ T4320] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  164.093132][ T4320] Bluetooth: hci2: command 0x0406 tx timeout
[  164.333362][ T4318] Bluetooth: hci1: command 0x0406 tx timeout
[  164.379092][ T5837] loop4: detected capacity change from 0 to 512
[  164.413324][ T4320] Bluetooth: hci4: command 0x0406 tx timeout
[  165.392957][ T5837] EXT4-fs (loop4): Test dummy encryption mode enabled
[  165.403125][ T5837] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  165.468804][ T5837] EXT4-fs (loop4): 1 truncate cleaned up
[  165.470476][ T5837] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  165.559016][ T5804] chnl_net:caif_netlink_parms(): no params data found
[  165.797805][ T4318] Bluetooth: hci3: command 0x0409 tx timeout
[  166.053835][ T4307] EXT4-fs (loop4): unmounting filesystem.
[  166.220658][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.236155][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.302202][ T5804] device bridge_slave_0 entered promiscuous mode
[  166.381932][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.424905][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.442785][ T5804] device bridge_slave_1 entered promiscuous mode
[  166.829168][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  167.587875][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  167.637135][ T5804] team0: Port device team_slave_0 added
[  167.652934][ T5804] team0: Port device team_slave_1 added
[  167.676424][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0
[  167.678686][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.686529][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  167.690792][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1
[  167.692854][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  167.700798][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  167.831206][ T5804] device hsr_slave_0 entered promiscuous mode
[  167.903189][ T4318] Bluetooth: hci3: command 0x041b tx timeout
[  168.016933][ T5804] device hsr_slave_1 entered promiscuous mode
[  168.356017][ T5804] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  168.405083][ T5804] Cannot create hsr debugfs directory
[  169.457254][ T5804] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  169.462595][ T5926] loop1: detected capacity change from 0 to 512
[  169.480016][ T5881] overlayfs: failed to resolve './bus': -2
[  169.522506][ T5804] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  169.531934][ T5926] EXT4-fs (loop1): Test dummy encryption mode enabled
[  169.552126][ T5926] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  169.575301][ T5804] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  169.618069][ T5804] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  169.621132][ T5926] EXT4-fs (loop1): 1 truncate cleaned up
[  169.622824][ T5926] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  169.933162][ T4320] Bluetooth: hci3: command 0x040f tx timeout
[  170.748316][ T4312] EXT4-fs (loop1): unmounting filesystem.
[  170.872437][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0
[  170.892761][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  170.899457][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  170.930027][ T5804] 8021q: adding VLAN 0 to HW filter on device team0
[  170.943943][ T5954] syz.1.386 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  170.960410][ T5954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  170.980664][ T5954] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  171.080292][ T5804] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  171.096400][ T5804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  171.761714][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  172.243381][ T4318] Bluetooth: hci3: command 0x0419 tx timeout
[  172.267604][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  172.451707][ T4528] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.453885][ T4528] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.463295][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  172.476966][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  172.481819][ T4528] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.484005][ T4528] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.513413][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  172.524222][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  172.533747][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  172.563557][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  172.566485][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  172.582062][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  172.593730][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  172.599842][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  172.602896][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  172.621890][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  172.630736][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  172.633666][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  172.639639][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  172.871817][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  172.881304][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  172.906380][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0
[  173.242972][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  173.250984][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  173.336723][ T5804] device veth0_vlan entered promiscuous mode
[  173.420106][ T5984] loop1: detected capacity change from 0 to 512
[  173.446336][ T5984] EXT4-fs (loop1): Test dummy encryption mode enabled
[  173.463512][ T5984] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  173.498384][ T5984] EXT4-fs (loop1): 1 truncate cleaned up
[  173.500101][ T5984] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  173.501876][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  173.505999][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  173.546277][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  173.549268][  T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  173.579411][ T5804] device veth1_vlan entered promiscuous mode
[  173.585756][   T27] audit: type=1326 audit(173.560:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5988 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275ce28 code=0x7ffc0000
[  173.600121][   T27] audit: type=1326 audit(173.560:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5988 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=155 compat=0 ip=0xffffa275ce28 code=0x7ffc0000
[  173.627561][   T27] audit: type=1326 audit(173.560:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5988 comm="syz.3.394" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275ce28 code=0x7ffc0000
[  173.727243][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  173.729942][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  173.744065][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  173.758500][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  173.772269][ T5804] device veth0_macvtap entered promiscuous mode
[  173.781253][ T5804] device veth1_macvtap entered promiscuous mode
[  173.786907][ T5994] loop4: detected capacity change from 0 to 1024
[  173.817815][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.820954][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.830486][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.834286][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.837128][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.840928][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.851935][ T5994] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  173.882601][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.910324][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.913384][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.925707][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.929950][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0
[  173.932688][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  173.936897][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  173.939648][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  173.953521][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  174.027501][ T4307] EXT4-fs (loop4): unmounting filesystem.
[  174.097904][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.110891][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.120191][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.123591][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.126298][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.129317][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.132107][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.135320][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.138111][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.142188][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.869775][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1
[  174.881944][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  174.884902][ T5003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  174.998352][ T4312] EXT4-fs (loop1): unmounting filesystem.
[  175.200135][ T6012] loop3: detected capacity change from 0 to 2048
[  175.259960][ T6009] netlink: 16 bytes leftover after parsing attributes in process `syz.3.403'.
[  175.270292][ T6010] netlink: 'syz.3.403': attribute type 16 has an invalid length.
[  175.272474][ T6010] netlink: 28 bytes leftover after parsing attributes in process `syz.3.403'.
[  175.359968][ T6012]  loop3: p1 < > p4
[  175.442197][   T27] audit: type=1326 audit(175.410:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.3.403" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275ce28 code=0x7ffc0000
[  175.466206][ T6012] loop3: p4 size 8388608 extends beyond EOD, truncated
[  175.477684][   T27] audit: type=1326 audit(175.450:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.3.403" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffffa275ce28 code=0x7ffc0000
[  175.521551][   T27] audit: type=1326 audit(175.490:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.3.403" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275ce28 code=0x7ffc0000
[  175.531165][   T27] audit: type=1326 audit(175.500:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.3.403" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffa275ce28 code=0x7ffc0000
[  175.547903][   T27] audit: type=1326 audit(175.500:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.3.403" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275ce28 code=0x7ffc0000
[  175.560906][   T27] audit: type=1326 audit(175.500:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.3.403" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=72 compat=0 ip=0xffffa275ce28 code=0x7ffc0000
[  176.416954][   T27] audit: type=1326 audit(176.390:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6008 comm="syz.3.403" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa275ce28 code=0x7ffc0000
[  176.491499][ T5804] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.500746][ T5804] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.507073][ T6028] 9pnet_fd: Insufficient options for proto=fd
[  176.512052][ T6027] loop1: detected capacity change from 0 to 256
[  176.513425][ T5804] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.516227][ T5804] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.581336][ T4756] udevd[4756]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  176.609697][ T4800] udevd[4800]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  177.190357][  T323] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.825318][ T5571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.827662][ T5571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.902844][ T6033] loop0: detected capacity change from 0 to 512
[  177.970958][ T6033] EXT4-fs (loop0): Test dummy encryption mode enabled
[  177.972835][ T6033] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  177.979541][  T323] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.023401][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  178.074525][ T6033] EXT4-fs (loop0): 1 truncate cleaned up
[  178.076231][ T6033] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  178.249732][  T323] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.282250][ T4550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.285445][ T4550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.356171][  T323] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.399636][ T4308] EXT4-fs (loop0): unmounting filesystem.
[  178.402466][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  180.779362][ T6078] loop3: detected capacity change from 0 to 512
[  180.919683][ T6078] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  181.200238][ T4306] EXT4-fs (loop3): unmounting filesystem.
[  181.281766][ T6063] loop4: detected capacity change from 0 to 40427
[  181.322493][ T6091] loop0: detected capacity change from 0 to 512
[  181.352344][ T6091] EXT4-fs (loop0): Test dummy encryption mode enabled
[  181.389297][ T6091] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  181.407054][ T6063] F2FS-fs (loop4): invalid crc value
[  181.419511][ T6091] EXT4-fs (loop0): 1 truncate cleaned up
[  181.421200][ T6091] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  181.442256][ T6063] F2FS-fs (loop4): Found nat_bits in checkpoint
[  181.509325][ T6101] loop3: detected capacity change from 0 to 256
[  181.512109][ T6101] exfat: Deprecated parameter 'utf8'
[  181.515972][ T6101] exfat: Deprecated parameter 'namecase'
[  181.517617][ T6101] exfat: Bad value for 'namecase'
[  181.611471][ T6063] F2FS-fs (loop4): Start checkpoint disabled!
[  182.047492][ T6063] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  182.459689][ T4308] EXT4-fs (loop0): unmounting filesystem.
[  182.544451][ T4572] kworker/u4:13: attempt to access beyond end of device
[  182.544451][ T4572] loop4: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  183.248317][   T27] kauditd_printk_skb: 4 callbacks suppressed
[  183.248330][   T27] audit: type=1326 audit(183.220:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.0.422" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc95ce28 code=0x7ffc0000
[  183.280225][   T27] audit: type=1326 audit(183.250:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.0.422" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc95ce28 code=0x7ffc0000
[  183.298866][   T27] audit: type=1326 audit(183.260:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.0.422" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbc95ce28 code=0x7ffc0000
[  183.308644][ T6125] loop6: detected capacity change from 0 to 1024
[  183.329870][   T27] audit: type=1326 audit(183.260:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.0.422" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc95ce28 code=0x7ffc0000
[  183.351594][   T27] audit: type=1326 audit(183.260:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.0.422" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc95ce28 code=0x7ffc0000
[  183.383208][   T27] audit: type=1326 audit(183.260:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.0.422" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbc95ce28 code=0x7ffc0000
[  183.389342][   T27] audit: type=1326 audit(183.260:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.0.422" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc95ce28 code=0x7ffc0000
[  183.428006][ T6125] EXT4-fs: Ignoring removed oldalloc option
[  183.479281][   T27] audit: type=1326 audit(183.260:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.0.422" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc95ce28 code=0x7ffc0000
[  183.501329][   T27] audit: type=1326 audit(183.310:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.0.422" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffbc95ce28 code=0x7ffc0000
[  183.515956][   T27] audit: type=1326 audit(183.310:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.0.422" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc95ce28 code=0x7ffc0000
[  183.613789][ T6125] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  183.937709][ T5804] EXT4-fs (loop6): unmounting filesystem.
[  184.115972][ T6154] devtmpfs: Unknown parameter 'posixacl'
[  184.329719][ T6166] loop1: detected capacity change from 0 to 512
[  184.580539][ T6180] loop6: detected capacity change from 0 to 512
[  184.618719][ T6166] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  184.621361][ T6180] EXT4-fs (loop6): Test dummy encryption mode enabled
[  184.623445][ T6180] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  184.644704][ T6180] EXT4-fs (loop6): 1 truncate cleaned up
[  184.646354][ T6180] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  184.918144][ T4312] EXT4-fs (loop1): unmounting filesystem.
[  185.427840][  T323] device hsr_slave_0 left promiscuous mode
[  185.464129][  T323] device hsr_slave_1 left promiscuous mode
[  185.540170][  T323] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.542639][  T323] batman_adv: batadv0: Removing interface: batadv_slave_0
[  185.546238][  T323] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.548290][  T323] batman_adv: batadv0: Removing interface: batadv_slave_1
[  185.557404][  T323] device bridge_slave_1 left promiscuous mode
[  185.559178][  T323] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.615500][  T323] device bridge_slave_0 left promiscuous mode
[  185.617290][  T323] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.773726][  T323] device veth1_macvtap left promiscuous mode
[  185.775597][  T323] device veth0_macvtap left promiscuous mode
[  185.778245][  T323] device veth1_vlan left promiscuous mode
[  185.782224][  T323] device veth0_vlan left promiscuous mode
[  186.531245][ T6229] loop0: detected capacity change from 0 to 1024
[  186.538024][ T6229] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  187.239838][ T6229] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  187.244723][ T6229] EXT4-fs error (device loop0): ext4_get_journal_inode:5735: inode #5: comm syz.0.445: unexpected bad inode w/o EXT4_IGET_BAD
[  187.252218][ T6229] EXT4-fs (loop0): no journal found
[  187.253838][ T6229] EXT4-fs (loop0): can't get journal size
[  187.266575][ T6229] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  187.376037][ T2059] ieee802154 phy0 wpan0: encryption failed: -22
[  187.377984][ T2059] ieee802154 phy1 wpan1: encryption failed: -22
[  187.487637][ T4308] EXT4-fs (loop0): unmounting filesystem.
[  189.281754][   T27] kauditd_printk_skb: 1 callbacks suppressed
[  189.281766][   T27] audit: type=1326 audit(189.250:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.1.453" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa995ce28 code=0x7ffc0000
[  189.291549][   T27] audit: type=1326 audit(189.260:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.1.453" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa995ce28 code=0x7ffc0000
[  189.303174][   T27] audit: type=1326 audit(189.260:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.1.453" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa995ce28 code=0x7ffc0000
[  189.309130][   T27] audit: type=1326 audit(189.260:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.1.453" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa995ce28 code=0x7ffc0000
[  189.318966][   T27] audit: type=1326 audit(189.260:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.1.453" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa995ce28 code=0x7ffc0000
[  189.333197][   T27] audit: type=1326 audit(189.260:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.1.453" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa995ce28 code=0x7ffc0000
[  189.339280][   T27] audit: type=1326 audit(189.270:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.1.453" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa995ce28 code=0x7ffc0000
[  189.356311][   T27] audit: type=1326 audit(189.270:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.1.453" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa995ce28 code=0x7ffc0000
[  189.367255][   T27] audit: type=1326 audit(189.270:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.1.453" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa995ce28 code=0x7ffc0000
[  189.382569][   T27] audit: type=1326 audit(189.270:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.1.453" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa995ce28 code=0x7ffc0000
[  189.409826][ T6259] loop3: detected capacity change from 0 to 512
[  189.421336][ T6259] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  189.427423][ T6259] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  189.430467][ T6259] EXT4-fs (loop3): orphan cleanup on readonly fs
[  189.432396][ T6259] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.455: bad orphan inode 267
[  189.436034][ T6259] EXT4-fs (loop3): Remounting filesystem read-only
[  189.438018][ T6259] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  189.596068][  T323] team0 (unregistering): Port device team_slave_1 removed
[  189.784424][  T323] team0 (unregistering): Port device team_slave_0 removed
[  189.983986][  T323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  190.359734][ T6264] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.455: dx entry: limit 0 != root limit 125
[  190.363291][ T6264] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.455: Corrupt directory, running e2fsck is recommended
[  190.554162][  T323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  190.691206][ T6266] loop1: detected capacity change from 0 to 512
[  190.725963][ T5804] EXT4-fs (loop6): unmounting filesystem.
[  190.929787][ T4306] EXT4-fs (loop3): unmounting filesystem.
[  190.938286][ T6272] loop6: detected capacity change from 0 to 2048
[  191.103841][ T6272] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  193.395563][ T6297] loop3: detected capacity change from 0 to 512
[  193.405493][ T6297] EXT4-fs (loop3): Test dummy encryption mode enabled
[  193.407439][ T6297] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  193.412893][ T6297] EXT4-fs (loop3): 1 truncate cleaned up
[  193.414838][ T6297] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  193.435998][  T323] bond0 (unregistering): Released all slaves
[  193.937705][ T6257] device wg2 entered promiscuous mode
[  194.271984][ T6318] device bridge_slave_1 left promiscuous mode
[  194.285602][ T6318] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.336727][ T5804] EXT4-fs (loop6): unmounting filesystem.
[  194.403536][ T6318] device bridge_slave_0 left promiscuous mode
[  194.406141][ T6318] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.541789][   T27] kauditd_printk_skb: 38 callbacks suppressed
[  195.541802][   T27] audit: type=1326 audit(195.510:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6357 comm="syz.0.477" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc95ce28 code=0x7ffc0000
[  195.549488][   T27] audit: type=1326 audit(195.520:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6357 comm="syz.0.477" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffffbc95ce28 code=0x7ffc0000
[  195.577591][   T27] audit: type=1326 audit(195.520:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6357 comm="syz.0.477" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc95ce28 code=0x7ffc0000
[  195.593608][   T27] audit: type=1326 audit(195.520:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6357 comm="syz.0.477" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=110 compat=0 ip=0xffffbc95ce28 code=0x7ffc0000
[  195.599660][   T27] audit: type=1326 audit(195.520:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6357 comm="syz.0.477" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffbd82a81c code=0x7ffc0000
[  195.643336][   T27] audit: type=1326 audit(195.520:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6357 comm="syz.0.477" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffbd82a81c code=0x7ffc0000
[  195.649349][   T27] audit: type=1326 audit(195.520:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6357 comm="syz.0.477" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffbd82a81c code=0x7ffc0000
[  195.667111][   T27] audit: type=1326 audit(195.520:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6357 comm="syz.0.477" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffbd82a81c code=0x7ffc0000
[  195.673123][   T27] audit: type=1326 audit(195.520:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6357 comm="syz.0.477" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffbd82a81c code=0x7ffc0000
[  195.678920][   T27] audit: type=1326 audit(195.520:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6357 comm="syz.0.477" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffbd82a81c code=0x7ffc0000
[  197.647804][ T6401] loop1: detected capacity change from 0 to 512
[  197.651036][ T6401] EXT4-fs (loop1): Test dummy encryption mode enabled
[  197.663102][ T6401] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  197.735752][ T6401] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.486: corrupted in-inode xattr
[  197.739462][ T6401] EXT4-fs (loop1): 1 orphan inode deleted
[  197.748881][ T6401] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  198.536308][ T6395] loop4: detected capacity change from 0 to 40427
[  198.699723][ T6395] F2FS-fs (loop4): Found nat_bits in checkpoint
[  198.749670][ T6395] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  198.798153][ T4312] EXT4-fs (loop1): unmounting filesystem.
[  199.047217][ T6421] syz.4.483: attempt to access beyond end of device
[  199.047217][ T6421] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  199.565225][ T4307] syz-executor: attempt to access beyond end of device
[  199.565225][ T4307] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  201.630792][ T4306] EXT4-fs (loop3): unmounting filesystem.
[  201.808775][ T6466] loop4: detected capacity change from 0 to 256
[  201.977796][ T6466] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  202.044979][ T6466] Cannot find add_set index 0 as target
[  202.949475][ T6474] netlink: 'syz.3.498': attribute type 3 has an invalid length.
[  202.952528][ T6474] netlink: 'syz.3.498': attribute type 3 has an invalid length.
[  203.022944][ T6478] loop1: detected capacity change from 0 to 256
[  203.926791][ T6488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  203.931279][ T6488] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.210411][ T6496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  204.213254][ T6496] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.912949][ T6506] binfmt_misc: register: failed to install interpreter file ./file0
[  204.946822][   T27] kauditd_printk_skb: 3267 callbacks suppressed
[  204.946835][   T27] audit: type=1326 audit(204.920:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.1.512" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa995ce28 code=0x7ffc0000
[  204.957921][   T27] audit: type=1326 audit(204.920:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.1.512" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa995ce28 code=0x7ffc0000
[  204.971723][   T27] audit: type=1326 audit(204.920:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.1.512" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa995ce28 code=0x7ffc0000
[  205.003177][   T27] audit: type=1326 audit(204.920:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.1.512" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa995ce28 code=0x7ffc0000
[  205.009112][   T27] audit: type=1326 audit(204.920:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.1.512" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa995ce28 code=0x7ffc0000
[  205.031684][   T27] audit: type=1326 audit(204.920:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.1.512" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa995ce28 code=0x7ffc0000
[  205.044177][   T27] audit: type=1326 audit(204.920:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.1.512" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa995ce28 code=0x7ffc0000
[  205.050177][   T27] audit: type=1326 audit(204.920:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.1.512" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffffa995ce28 code=0x7ffc0000
[  205.062003][   T27] audit: type=1326 audit(204.920:3460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.1.512" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa995ce28 code=0x7ffc0000
[  205.069073][   T27] audit: type=1326 audit(204.920:3461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.1.512" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=109 compat=0 ip=0xffffa995ce28 code=0x7ffc0000
[  205.816731][ T6527] loop0: detected capacity change from 0 to 256
[  207.921082][ T6592] loop4: detected capacity change from 0 to 16
[  207.963479][ T6594] netlink: 40 bytes leftover after parsing attributes in process `syz.6.523'.
[  207.971846][ T6594] netlink: 12 bytes leftover after parsing attributes in process `syz.6.523'.
[  207.993730][ T6592] erofs: (device loop4): mounted with root inode @ nid 36.
[  208.350743][ T6612] binder: 6608:6612 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  208.364256][ T6612] binder: 6612:6608 cannot find target node
[  208.365940][ T6612] binder: 6608:6612 transaction call to 0:0 failed 1/29189/-22, size 0-0 line 3054
[  208.373841][ T4374] binder: undelivered TRANSACTION_ERROR: 29189
[  208.379466][ T6616] loop0: detected capacity change from 0 to 16
[  208.511823][ T6616] erofs: (device loop0): mounted with root inode @ nid 36.
[  208.794734][ T6629] loop3: detected capacity change from 0 to 16
[  208.849287][ T6629] erofs: (device loop3): mounted with root inode @ nid 36.
[  208.970669][ T6629] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  209.040988][ T6629] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851]
[  209.085885][ T6629] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117]
[  209.127984][ T6640] loop4: detected capacity change from 0 to 1024
[  209.158128][ T6640] EXT4-fs: Ignoring removed nobh option
[  209.168523][ T6640] EXT4-fs: Ignoring removed bh option
[  209.201733][ T6640] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  209.247648][ T6640] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  209.385900][ T6652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  209.388501][ T6652] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  209.414403][ T4307] EXT4-fs (loop4): unmounting filesystem.
[  209.531192][ T6662] loop6: detected capacity change from 0 to 512
[  209.667465][ T6662] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  209.717029][ T6672] loop4: detected capacity change from 0 to 256
[  209.722650][ T6672] FAT-fs (loop4): Unrecognized mount option "iocha	" or missing value
[  209.747463][ T5804] EXT4-fs (loop6): unmounting filesystem.
[  210.289641][ T6697] loop1: detected capacity change from 0 to 512
[  210.329369][ T6697] EXT4-fs (loop1): Test dummy encryption mode enabled
[  210.331465][ T6697] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  210.356211][ T6697] EXT4-fs (loop1): 1 truncate cleaned up
[  210.377805][ T6697] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  211.768763][ T6716] loop3: detected capacity change from 0 to 1024
[  211.821430][ T6716] EXT4-fs: Ignoring removed bh option
[  211.823270][ T6716] EXT4-fs: Ignoring removed nomblk_io_submit option
[  212.112351][ T6716] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  212.477558][ T6722] device pim6reg1 entered promiscuous mode
[  212.645339][ T4306] EXT4-fs (loop3): unmounting filesystem.
[  213.249510][ T4312] EXT4-fs (loop1): unmounting filesystem.
[  213.377509][ T6737] loop3: detected capacity change from 0 to 512
[  213.383753][ T6737] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  213.428346][ T6737] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  213.449438][ T6737] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.548: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[  213.466782][ T6737] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 12: comm syz.3.548: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[  213.650535][ T6737] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 13: comm syz.3.548: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[  213.658693][ T6737] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 14: comm syz.3.548: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  213.665243][ T6737] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 15: comm syz.3.548: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  213.671356][ T6737] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 16: comm syz.3.548: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[  213.678171][ T6737] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 17: comm syz.3.548: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  214.764460][ T6737] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 18: comm syz.3.548: lblock 23 mapped to illegal pblock 18 (length 1)
[  214.769161][ T6737] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 19: comm syz.3.548: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  214.911344][ T4306] EXT4-fs (loop3): unmounting filesystem.
[  215.262523][ T6770] loop1: detected capacity change from 0 to 512
[  215.306118][ T6770] EXT4-fs (loop1): Test dummy encryption mode enabled
[  215.308213][ T6770] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  215.330275][ T6769] loop0: detected capacity change from 0 to 512
[  215.351984][ T6769] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  215.383248][ T4320] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  215.400057][ T6770] EXT4-fs (loop1): 1 truncate cleaned up
[  215.401732][ T6770] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  215.402802][ T6769] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  215.438913][ T6769] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  215.441030][ T6769] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=4040e01c, mo2=0000]
[  215.446523][ T6769] EXT4-fs (loop0): too many log groups per flexible block group
[  215.448873][ T6769] EXT4-fs (loop0): failed to initialize mballoc (-12)
[  215.450850][ T6769] EXT4-fs (loop0): mount failed
[  215.601368][ T6774] vhci_hcd: default hub control req: 800f v0000 i0000 l31125
[  218.305270][ T6795] loop4: detected capacity change from 0 to 2048
[  218.436578][ T6795] Alternate GPT is invalid, using primary GPT.
[  218.438586][ T6795]  loop4: p1 p2 p3
[  218.929759][ T4312] EXT4-fs (loop1): unmounting filesystem.
[  219.432977][ T6801] loop1: detected capacity change from 0 to 2048
[  220.300550][ T6801]  loop1: p1 < > p4
[  220.311857][ T6801] loop1: p4 size 8388608 extends beyond EOD, truncated
[  220.358613][ T3921]  loop1: p1 < > p4
[  220.360450][ T3921] loop1: p4 size 8388608 extends beyond EOD, truncated
[  220.608528][ T6818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  220.618079][ T6818] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  221.017040][ T6826] loop1: detected capacity change from 0 to 512
[  221.020461][ T6826] EXT4-fs (loop1): Test dummy encryption mode enabled
[  221.022383][ T6826] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  221.070682][ T6826] EXT4-fs (loop1): 1 truncate cleaned up
[  221.072337][ T6826] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  222.633734][   T22] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  223.296331][   T22] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  223.298838][   T22] usb 1-1: config 1 has no interface number 1
[  223.300543][   T22] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  223.782063][   T22] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1927, setting to 1024
[  224.149753][   T22] usb 1-1: string descriptor 0 read error: -71
[  224.151622][   T22] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  224.154449][   T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.203851][   T22] usb 1-1: can't set config #1, error -71
[  224.206490][   T22] usb 1-1: USB disconnect, device number 5
[  224.508847][ T4312] EXT4-fs (loop1): unmounting filesystem.
[  224.657871][ T6851] serio: Serial port ptm0
[  225.884677][ T6871] loop0: detected capacity change from 0 to 512
[  226.665754][ T6871] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  226.681489][ T6871] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  226.692523][ T6871] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  226.722463][ T6871] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  226.734637][ T6871] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000]
[  226.739361][ T6871] EXT4-fs (loop0): orphan cleanup on readonly fs
[  226.741783][ T6871] 
[  226.742452][ T6871] ======================================================
[  226.744366][ T6871] WARNING: possible circular locking dependency detected
[  226.746271][ T6871] 6.1.147-syzkaller #0 Not tainted
[  226.747650][ T6871] ------------------------------------------------------
[  226.749632][ T6871] syz.0.594/6871 is trying to acquire lock:
[  226.751225][ T6871] ffff0000e1de5cd0 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x278/0x1770
[  226.753915][ T6871] 
[  226.753915][ T6871] but task is already holding lock:
[  226.755940][ T6871] ffff0000c3b82208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_read_dquot+0x4c/0x118
[  226.758556][ T6871] 
[  226.758556][ T6871] which lock already depends on the new lock.
[  226.758556][ T6871] 
[  226.761528][ T6871] 
[  226.761528][ T6871] the existing dependency chain (in reverse order) is:
[  226.764149][ T6871] 
[  226.764149][ T6871] -> #2 (&s->s_dquot.dqio_sem){++++}-{3:3}:
[  226.766477][ T6871]        down_read+0x64/0x304
[  226.767872][ T6871]        v2_read_dquot+0x4c/0x118
[  226.769269][ T6871]        dquot_acquire+0x120/0x4e0
[  226.770744][ T6871]        ext4_acquire_dquot+0x270/0x428
[  226.772298][ T6871]        dqget+0x654/0xccc
[  226.773582][ T6871]        __dquot_initialize+0x2d4/0xa80
[  226.775184][ T6871]        dquot_initialize+0x24/0x34
[  226.776585][ T6871]        ext4_mkdir+0x148/0xa2c
[  226.777789][ T6871]        vfs_mkdir+0x314/0x4d4
[  226.778971][ T6871]        do_mkdirat+0x1b4/0x3e0
[  226.780349][ T6871]        __arm64_sys_mkdirat+0x90/0xa8
[  226.782039][ T6871]        invoke_syscall+0x98/0x2bc
[  226.783489][ T6871]        el0_svc_common+0x138/0x258
[  226.784949][ T6871]        do_el0_svc+0x58/0x13c
[  226.786384][ T6871]        el0_svc+0x58/0x138
[  226.787688][ T6871]        el0t_64_sync_handler+0x84/0xf0
[  226.789321][ T6871]        el0t_64_sync+0x18c/0x190
[  226.790744][ T6871] 
[  226.790744][ T6871] -> #1 (&dquot->dq_lock){+.+.}-{3:3}:
[  226.792942][ T6871]        __mutex_lock_common+0x190/0x1f38
[  226.794606][ T6871]        mutex_lock_nested+0x38/0x44
[  226.796148][ T6871]        dquot_commit+0x50/0x1c4
[  226.797561][ T6871]        ext4_write_dquot+0x1b4/0x31c
[  226.799144][ T6871]        ext4_mark_dquot_dirty+0xe8/0x140
[  226.800799][ T6871]        mark_all_dquot_dirty+0x108/0x424
[  226.802456][ T6871]        __dquot_free_space+0x744/0xa80
[  226.804121][ T6871]        ext4_free_blocks+0x18c8/0x23cc
[  226.805703][ T6871]        ext4_ext_remove_space+0x15ac/0x39c4
[  226.807391][ T6871]        ext4_ext_truncate+0x164/0x20c
[  226.808941][ T6871]        ext4_truncate+0x9dc/0x1078
[  226.810440][ T6871]        ext4_evict_inode+0xbf0/0x124c
[  226.812033][ T6871]        evict+0x3c8/0x810
[  226.813278][ T6871]        iput+0x764/0x7f4
[  226.814529][ T6871]        vfs_rmdir+0x32c/0x438
[  226.815937][ T6871]        do_rmdir+0x238/0x50c
[  226.817267][ T6871]        __arm64_sys_unlinkat+0xcc/0xfc
[  226.818868][ T6871]        invoke_syscall+0x98/0x2bc
[  226.820397][ T6871]        el0_svc_common+0x138/0x258
[  226.821925][ T6871]        do_el0_svc+0x58/0x13c
[  226.823376][ T6871]        el0_svc+0x58/0x138
[  226.824689][ T6871]        el0t_64_sync_handler+0x84/0xf0
[  226.826296][ T6871]        el0t_64_sync+0x18c/0x190
[  226.827741][ T6871] 
[  226.827741][ T6871] -> #0 (&ei->i_data_sem/2){++++}-{3:3}:
[  226.829947][ T6871]        __lock_acquire+0x293c/0x6544
[  226.831510][ T6871]        lock_acquire+0x20c/0x644
[  226.832965][ T6871]        down_read+0x64/0x304
[  226.834289][ T6871]        ext4_map_blocks+0x278/0x1770
[  226.835849][ T6871]        ext4_getblk+0x170/0x654
[  226.837286][ T6871]        ext4_bread+0x3c/0x1b0
[  226.838667][ T6871]        ext4_quota_read+0x160/0x350
[  226.840184][ T6871]        find_tree_dqentry+0x174/0xc04
[  226.841685][ T6871]        find_tree_dqentry+0x4f8/0xc04
[  226.843269][ T6871]        find_tree_dqentry+0x4f8/0xc04
[  226.844796][ T6883] loop1: detected capacity change from 0 to 512
[  226.844836][ T6871]        find_tree_dqentry+0x4f8/0xc04
[  226.848138][ T6871]        qtree_read_dquot+0x454/0x724
[  226.849684][ T6871]        v2_read_dquot+0xbc/0x118
[  226.851128][ T6871]        dquot_acquire+0x120/0x4e0
[  226.852615][ T6871]        ext4_acquire_dquot+0x270/0x428
[  226.854229][ T6871]        dqget+0x654/0xccc
[  226.855459][ T6871]        __dquot_initialize+0x264/0xa80
[  226.856944][ T6871]        dquot_initialize+0x24/0x34
[  226.858398][ T6871]        ext4_process_orphan+0x5c/0x2b4
[  226.859910][ T6871]        ext4_orphan_cleanup+0x908/0x104c
[  226.861597][ T6871]        ext4_fill_super+0x62f8/0x6788
[  226.863210][ T6871]        get_tree_bdev+0x358/0x544
[  226.864681][ T6871]        ext4_get_tree+0x28/0x38
[  226.866095][ T6871]        vfs_get_tree+0x90/0x274
[  226.867523][ T6871]        do_new_mount+0x228/0x810
[  226.868996][ T6871]        path_mount+0x5b4/0xe78
[  226.870428][ T6871]        __arm64_sys_mount+0x49c/0x584
[  226.871927][ T6871]        invoke_syscall+0x98/0x2bc
[  226.873370][ T6871]        el0_svc_common+0x138/0x258
[  226.874829][ T6871]        do_el0_svc+0x58/0x13c
[  226.876282][ T6871]        el0_svc+0x58/0x138
[  226.877617][ T6871]        el0t_64_sync_handler+0x84/0xf0
[  226.879239][ T6871]        el0t_64_sync+0x18c/0x190
[  226.880781][ T6871] 
[  226.880781][ T6871] other info that might help us debug this:
[  226.880781][ T6871] 
[  226.883731][ T6871] Chain exists of:
[  226.883731][ T6871]   &ei->i_data_sem/2 --> &dquot->dq_lock --> &s->s_dquot.dqio_sem
[  226.883731][ T6871] 
[  226.887465][ T6871]  Possible unsafe locking scenario:
[  226.887465][ T6871] 
[  226.889528][ T6871]        CPU0                    CPU1
[  226.891043][ T6871]        ----                    ----
[  226.892521][ T6871]   lock(&s->s_dquot.dqio_sem);
[  226.893962][ T6871]                                lock(&dquot->dq_lock);
[  226.895884][ T6871]                                lock(&s->s_dquot.dqio_sem);
[  226.897997][ T6871]   lock(&ei->i_data_sem/2);
[  226.899303][ T6871] 
[  226.899303][ T6871]  *** DEADLOCK ***
[  226.899303][ T6871] 
[  226.901679][ T6871] 3 locks held by syz.0.594/6871:
[  226.903138][ T6871]  #0: ffff0000c3b820e0 (&type->s_umount_key#26/1){+.+.}-{3:3}, at: alloc_super+0x1a4/0x804
[  226.905985][ T6871]  #1: ffff0000dff087a8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_acquire+0x60/0x4e0
[  226.908725][ T6871]  #2: ffff0000c3b82208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_read_dquot+0x4c/0x118
[  226.911524][ T6871] 
[  226.911524][ T6871] stack backtrace:
[  226.913220][ T6871] CPU: 0 PID: 6871 Comm: syz.0.594 Not tainted 6.1.147-syzkaller #0
[  226.915465][ T6871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  226.918356][ T6871] Call trace:
[  226.919343][ T6871]  dump_backtrace+0x1c8/0x1f4
[  226.920647][ T6871]  show_stack+0x2c/0x3c
[  226.921828][ T6871]  __dump_stack+0x30/0x40
[  226.923030][ T6871]  dump_stack_lvl+0xf8/0x160
[  226.924292][ T6871]  dump_stack+0x1c/0x5c
[  226.925514][ T6871]  print_circular_bug+0x148/0x1b0
[  226.926907][ T6871]  check_noncircular+0x240/0x2d4
[  226.928354][ T6871]  __lock_acquire+0x293c/0x6544
[  226.929711][ T6871]  lock_acquire+0x20c/0x644
[  226.930996][ T6871]  down_read+0x64/0x304
[  226.932214][ T6871]  ext4_map_blocks+0x278/0x1770
[  226.933595][ T6871]  ext4_getblk+0x170/0x654
[  226.934898][ T6871]  ext4_bread+0x3c/0x1b0
[  226.936165][ T6871]  ext4_quota_read+0x160/0x350
[  226.937491][ T6871]  find_tree_dqentry+0x174/0xc04
[  226.938886][ T6871]  find_tree_dqentry+0x4f8/0xc04
[  226.940257][ T6871]  find_tree_dqentry+0x4f8/0xc04
[  226.941651][ T6871]  find_tree_dqentry+0x4f8/0xc04
[  226.943023][ T6871]  qtree_read_dquot+0x454/0x724
[  226.944370][ T6871]  v2_read_dquot+0xbc/0x118
[  226.945649][ T6871]  dquot_acquire+0x120/0x4e0
[  226.946997][ T6871]  ext4_acquire_dquot+0x270/0x428
[  226.948481][ T6871]  dqget+0x654/0xccc
[  226.949594][ T6871]  __dquot_initialize+0x264/0xa80
[  226.951053][ T6871]  dquot_initialize+0x24/0x34
[  226.952401][ T6871]  ext4_process_orphan+0x5c/0x2b4
[  226.953837][ T6871]  ext4_orphan_cleanup+0x908/0x104c
[  226.955268][ T6871]  ext4_fill_super+0x62f8/0x6788
[  226.956723][ T6871]  get_tree_bdev+0x358/0x544
[  226.958122][ T6871]  ext4_get_tree+0x28/0x38
[  226.958760][ T6866] loop3: detected capacity change from 0 to 40427
[  226.959360][ T6871]  vfs_get_tree+0x90/0x274
[  226.959375][ T6871]  do_new_mount+0x228/0x810
[  226.963763][ T6871]  path_mount+0x5b4/0xe78
[  226.964988][ T6871]  __arm64_sys_mount+0x49c/0x584
[  226.966412][ T6871]  invoke_syscall+0x98/0x2bc
[  226.967727][ T6871]  el0_svc_common+0x138/0x258
[  226.969027][ T6871]  do_el0_svc+0x58/0x13c
[  226.970255][ T6871]  el0_svc+0x58/0x138
[  226.971438][ T6871]  el0t_64_sync_handler+0x84/0xf0
[  226.972858][ T6871]  el0t_64_sync+0x18c/0x190
[  226.984565][ T6871] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.594: bg 0: block 34: padding at end of block bitmap is not set
[  226.989173][ T6871] __quota_error: 1 callbacks suppressed
[  226.989183][ T6871] Quota error (device loop0): write_blk: dquota write failed
[  226.995168][ T6871] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  226.998039][ T6871] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.594: Failed to acquire dquot type 1
[  227.001724][ T6883] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  227.005201][ T6866] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  227.007096][ T6871] EXT4-fs (loop0): ext4_process_orphan: truncating inode 13 to 1050 bytes
[  227.009574][ T6882] binder: 6874:6882 unknown command 1074553619
[  227.011246][ T6882] binder: 6874:6882 ioctl c0306201 20000180 returned -22
[  227.013952][ T6866] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  227.016386][ T6871] EXT4-fs (loop0): 1 truncate cleaned up
[  227.018328][ T6871] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  227.035383][   T27] audit: type=1326 audit(227.010:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.4.598" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb255ce28 code=0x7fc00000
[  227.042101][ T4308] EXT4-fs (loop0): unmounting filesystem.
[  227.042669][   T27] audit: type=1326 audit(227.010:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.4.598" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffb255ce28 code=0x7fc00000
[  227.051558][ T6866] F2FS-fs (loop3): invalid crc value
[  227.065972][ T6866] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  227.090405][ T6866] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  227.092575][ T6866] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  227.676292][   T27] audit: type=1326 audit(227.650:3465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.4.598" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb255ce28 code=0x7fc00000
[  227.691056][ T4312] EXT4-fs (loop1): unmounting filesystem.
[  227.877169][ T4306] syz-executor: attempt to access beyond end of device
[  227.877169][ T4306] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427