last executing test programs:

17m23.511294773s ago: executing program 32 (id=23):
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
fchdir(r1)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000002c0)='proc\x00', 0x189, 0x0)
r3 = syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00')
fchdir(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r4, 0x0, 0x0)

16m44.068217367s ago: executing program 33 (id=110):
socket$nl_generic(0x10, 0x3, 0x10)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000})
r1 = syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r1})
io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5)

16m41.31316353s ago: executing program 34 (id=115):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00'], 0x48}, 0x1, 0x0, 0x0, 0x4004081}, 0x2005c840)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40100, 0x0)
open_by_handle_at(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="220000005100000005"], 0x922c3)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r5, 0x2, 0x4, 0x25}, &(0x7f00000000c0)=0x10)

15m33.237932312s ago: executing program 35 (id=112):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000880)={0x2, 0x4e1d, @multicast1}, 0x10, 0x0}, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioprio_get$pid(0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="880000000001010400000000141a000002f0ff00240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414bb08000200e00000010c000280050001000000000008000740000000011c00108008000240000000070800012708000480040003"], 0x88}, 0x1, 0x0, 0x0, 0x4000090}, 0x0)
lstat(&(0x7f0000000600)='./file0\x00', 0x0)

14m43.003374557s ago: executing program 36 (id=291):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=@newtfilter={0x8bc, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x888, 0x2, [@TCA_MATCHALL_ACT={0x884, 0x2, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x852, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x3ff, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1fe, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x2f6, 0x5, 0x10001, 0xf7, 0x3, 0x8, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d2c, 0x7, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0xffffffff, 0x8, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0xbaf, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x8000, 0x6, 0xfed, 0xf, 0x6ae, 0x2, 0x23, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x5, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x80008, 0x80000001, 0x0, 0x74, 0x6, 0x7fffffff, 0x0, 0xa, 0xfffffc01, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x200, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x1, 0x5, 0x354d, 0x0, 0x2, 0x1, 0x7, 0x1, 0x177, 0x8, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7e, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x4, 0x9, 0x8, 0x0, 0xfffffffe, 0x23, 0x62, 0x3, 0x2, 0xfa56, 0xd, 0x0, 0x1, 0x3c42, 0x200, 0x2, 0xffff, 0x7, 0x3, 0x5599, 0x70c, 0x8, 0xa0d, 0x9, 0x9, 0x9, 0x6, 0x1, 0xff, 0xb, 0x1, 0x1, 0x3, 0xc, 0x5, 0x0, 0x0, 0x4, 0x4, 0x80d, 0x9, 0x2, 0xe, 0xc, 0x8000, 0x6, 0xa91, 0x1000, 0x8, 0x7, 0x9, 0x88000000, 0x6, 0x0, 0x8, 0x1ff, 0x101, 0x8, 0x0, 0x3, 0x8, 0x5, 0x1, 0x6, 0xff, 0xff, 0xdf, 0x401, 0xc, 0x3, 0x0, 0x9, 0x0, 0x490, 0x7, 0x7fffffff, 0x1, 0x5, 0x80000001, 0x1, 0x8, 0x95, 0x9b, 0x5, 0x6, 0x8, 0xfffff462, 0x8001, 0x6, 0x2, 0x5, 0x4, 0x0, 0x4, 0x9, 0x8, 0x1, 0x4, 0xfffffff9, 0x8, 0x6, 0x6, 0x0, 0x91b, 0x6, 0x46a1, 0x0, 0x6, 0x7b6, 0x80, 0x80, 0x5, 0x4, 0x10000, 0x7, 0xc, 0x1, 0x72, 0x21783f92, 0x2, 0xce, 0x8, 0x1, 0x2, 0x10000, 0x10001, 0x9, 0xd0, 0x2, 0xaaf, 0x8f, 0x6, 0x7ff, 0x8, 0x5d7, 0x9, 0x7, 0x4, 0xffffffff, 0x1, 0x7ff, 0xdff4, 0x4, 0x4, 0x4, 0x9, 0xd1ce, 0x2, 0x6, 0x9, 0x80, 0x9, 0x2, 0xfffffe00, 0xf, 0x7, 0x1, 0x2, 0xef31, 0x4, 0x5, 0xb0b6, 0x4, 0x3, 0xfffffffb, 0x838, 0x94fb, 0x2, 0x5, 0xfffffffe, 0x8, 0x5, 0x101, 0x80000001, 0xfffffff7, 0xfffffff5, 0x9, 0xfffffff7, 0x4, 0x2, 0x8, 0xb, 0x0, 0x9, 0x0, 0x6, 0xf, 0xfffffff6, 0x7, 0x80000001, 0xe91, 0x5, 0x4, 0x5, 0x2, 0x4, 0x7, 0xd, 0x10000, 0x5, 0x80000001, 0x3, 0x5, 0x9b22, 0x200, 0xfffffff7, 0x2, 0xc, 0x3, 0x4, 0x81, 0xd, 0x2, 0x6, 0x6, 0x1ff, 0x80000000, 0x9, 0x7, 0x81, 0x9, 0x9, 0x3, 0x7ff, 0x3, 0xff, 0x7, 0x3ff, 0x3, 0x5, 0xfffffffe, 0xffd, 0xff000000, 0x6, 0xb, 0x7, 0x6, 0xb342, 0xefd, 0x1000, 0xb089, 0x0, 0x10, 0x0, 0x401, 0x1, 0x6, 0x72, 0x5, 0x1, 0x9, 0x1c, 0x5, 0x5, 0x2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8bc}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket(0x2, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0)

14m40.643420297s ago: executing program 37 (id=296):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x18, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280), 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r1 = socket(0x10, 0x2, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket(0x10, 0x80003, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)

7m19.973502991s ago: executing program 38 (id=1142):
syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xf3, 0x46, 0x7, 0x20, 0x458, 0x7003, 0xd919, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x74, [{{0x9, 0x4, 0x77, 0x0, 0x0, 0x37, 0x96, 0xc3}}]}}]}}, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

7m4.548077779s ago: executing program 5 (id=1213):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x406, r0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
shutdown(r0, 0x1)

7m3.882668764s ago: executing program 5 (id=1215):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x2, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0xf8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15)
pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1)

7m3.311513652s ago: executing program 5 (id=1219):
r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c)
r1 = socket$inet6(0xa, 0x802, 0x88)
setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f0000000040)=0x800000001, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0xcc0a, @mcast1}, 0x1c)
sendto$inet6(r1, &(0x7f00000001c0)='~', 0x1, 0x40000, 0x0, 0x0)
ppoll(&(0x7f0000000000)=[{r0, 0x4230}], 0x1, 0x0, 0x0, 0x0)

7m3.007259975s ago: executing program 5 (id=1220):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x999047, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0)
mount$bpf(0x200000000000, 0x0, 0x0, 0x225451, 0x0)

7m2.631511227s ago: executing program 5 (id=1223):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xe}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}]}}]}, 0x4c}}, 0x24004000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

7m1.954807207s ago: executing program 39 (id=1221):
r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfffffefc)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000300)={0x0, 0xfffffffa, 0x206, 0x7fff, 0xffffffffffffffff, 0x4, 0x8, 0x8005, 0xf54e, 0xfffffffffffffffa, 0xfffffffe, 0x1})

6m47.434060951s ago: executing program 40 (id=1223):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xe}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}]}}]}, 0x4c}}, 0x24004000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

6m46.607909573s ago: executing program 41 (id=1283):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x3, 0x8, 0x81, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x101, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x6, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x3, 0x808, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0xffffffff, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x29a, 0x5, 0x0, 0xfffffffa, 0x4, 0x1, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000000, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0x8001, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x10001, 0x379, 0x9, 0xe, 0x5, 0x7, 0x4, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x2003], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x8001, 0x2, 0x7, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x1, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x8, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x2, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x0, 0x0, 0x9, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x7, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x3, 0x2, 0x84, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x0, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)
read(r3, 0x0, 0x0)
write$input_event(r3, 0x0, 0x0)

6m43.073077105s ago: executing program 3 (id=1299):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r2, 0x3, {0x2, 0xff, 0x392d39a281630aa1}}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r3=>0x0})
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18)
sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000b00)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x3}}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c000}, 0xef)

6m42.891126915s ago: executing program 3 (id=1300):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
write$tun(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="080008000600060000001400000045"], 0xfce)

6m42.30298983s ago: executing program 3 (id=1303):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0xbe7ba000)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r2, &(0x7f00000000c0)=""/28, 0x1c)
getdents64(r2, &(0x7f0000001f80)=""/4104, 0x1008)

6m42.212111137s ago: executing program 3 (id=1304):
syz_mount_image$udf(&(0x7f0000000240), &(0x7f0000000100)='./file1\x00', 0x1004000, &(0x7f0000000480)={[{@gid}, {@undelete}, {@anchor={'anchor', 0x3d, 0x4}}, {@lastblock={'lastblock', 0x3d, 0x4}}, {@uid_forget}, {@umask={'umask', 0x3d, 0x8}}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@utf8}, {@uid}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000001bc0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020)

6m41.99545448s ago: executing program 3 (id=1305):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x8001, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001900)=""/73, 0x49}, {&(0x7f0000001980)=""/233, 0xe9}], 0x2}, 0x10001}], 0x1, 0x40000000, 0x0)

6m39.94777093s ago: executing program 3 (id=1310):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000300)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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")
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
fallocate(r0, 0x0, 0xbf5, 0x2000402)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0xf0, 0x0, 0x0, 0xfffffffffdffffff})

6m39.586504615s ago: executing program 42 (id=1310):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000300)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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")
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
fallocate(r0, 0x0, 0xbf5, 0x2000402)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0xf0, 0x0, 0x0, 0xfffffffffdffffff})

6m20.657925509s ago: executing program 0 (id=1388):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x6f)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140)
sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x1a, r3, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14)

6m20.319949166s ago: executing program 0 (id=1391):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

6m17.527165298s ago: executing program 0 (id=1398):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[@ANYBLOB="6e6f646973636172642c6e6f636865636b706f696e745f6d657267652c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c666c7573685f6d657267652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030303235362c646973636172642c6e6f61636c2c6673796e635f6d6f64653d706f7369782c616c6c6f635f6d6f64653d64656661756c742c6e6f657874656e745f63616368652c6163746976655f6c6f67733d322c6661756c745f747970653d30303030303030303030303031363737373231342c0002d1c71f8348abae1fff96ec907a723dca530cf5aea9622c1169c27c91b4d703f02da55a70e4108d30dd0a1b6e467d05c6c0237e3772dfb37da0e9705c62c7f6dc21ef782f52303a65f3196af86a3d58c8bfb0ef60c974b0e0b44af5ce33f407facb3838bd4bf9b7a99d612518ac3ddddf95b10ead9f78580da79051b5011a94bc44336ebf9378b479860af435366b6d4cdb9c5ffd949b52f82ac9c92de853"], 0x5, 0x5505, &(0x7f0000000340)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fallocate(r2, 0x3, 0x5000000, 0x8000c62)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0)

6m16.557011455s ago: executing program 0 (id=1402):
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x32100d2, &(0x7f0000000140)={[{@order_strict}, {@errors_remount_ro}, {@order_relaxed}, {@errors_continue}, {@errors_continue}, {@nobarrier}, {@norecovery}, {@errors_continue}], [], 0x2c}, 0x3, 0xf0e, &(0x7f0000001e80)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

6m15.915348509s ago: executing program 0 (id=1404):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x80, 0x40, 0xfffffff9, 0x5, {{0x5, 0x4, 0x3, 0x3e, 0x14, 0x64, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, @dev={0xac, 0x14, 0x14, 0x41}}}}})
r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0)
syz_usb_disconnect(r1)
syz_usb_connect(0x6, 0x24, &(0x7f0000000740)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r1, 0x40085503, &(0x7f0000000200)=0x6)

6m15.035412894s ago: executing program 0 (id=1410):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40046304, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

6m14.317524518s ago: executing program 43 (id=1410):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40046304, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

5m41.603886477s ago: executing program 6 (id=1584):
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}, {0xe, 0xffff}}}, 0x24}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

5m41.175875127s ago: executing program 6 (id=1587):
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
r1 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)={0x30000010})
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0)
mount$bind(&(0x7f0000001a40)='./file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0)
mount$9p_unix(&(0x7f0000000680)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d3498, 0x0)

5m40.872544735s ago: executing program 6 (id=1588):
syz_open_dev$vim2m(&(0x7f00000002c0), 0xf, 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0xb2df, 0x10100, 0x0, 0x33a}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

5m40.553696737s ago: executing program 7 (id=1589):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000180)={[{@nossd}, {@commit={'commit', 0x3d, 0x6}}, {@compress_force_algo={'compress-force', 0x3d, 'zlib'}}, {@nodatacow}, {@clear_cache}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x7, 0x32, 0x37, 0x33, 0x32, 0x39, 0x25, 0x2d, 0x2d, 0x37]}}, {@usebackuproot}]}, 0x0, 0x559e, &(0x7f00000103c0)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR")
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000d5780))

5m40.422025699s ago: executing program 6 (id=1590):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = dup(r2)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendfile(r3, r3, 0x0, 0xffffffff)

5m37.131501974s ago: executing program 6 (id=1608):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'})

5m37.050157482s ago: executing program 7 (id=1609):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x2, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newtfilter={0x60, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x4044080)

5m36.822609734s ago: executing program 6 (id=1610):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x800000, &(0x7f0000000040)={[{@huge_advise}]})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000008, 0x13, r0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
ftruncate(r0, 0x472e)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
mprotect(&(0x7f0000001000/0x400000)=nil, 0x400000, 0x4)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240480c4}, 0x40000)

5m36.343652699s ago: executing program 7 (id=1613):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

5m35.884139385s ago: executing program 7 (id=1618):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50ed, &(0x7f00000051c0)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x5b, 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f283e6d60200000000000000000000000100", [0x208]})
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x184)
rename(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mount(0x0, &(0x7f00000002c0)='.\x00', 0x0, 0xc22, 0x0)

5m32.546784688s ago: executing program 7 (id=1631):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016", 0x5}], 0x1}, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

5m31.48984627s ago: executing program 7 (id=1636):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0xe0, 0x101, 0x0})
syz_open_dev$radio(&(0x7f00000018c0), 0x1, 0x2)
socket(0x10, 0x3, 0x0)

5m30.943240717s ago: executing program 44 (id=1636):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0xe0, 0x101, 0x0})
syz_open_dev$radio(&(0x7f00000018c0), 0x1, 0x2)
socket(0x10, 0x3, 0x0)

5m16.175470884s ago: executing program 45 (id=1610):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x800000, &(0x7f0000000040)={[{@huge_advise}]})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000008, 0x13, r0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
ftruncate(r0, 0x472e)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
mprotect(&(0x7f0000001000/0x400000)=nil, 0x400000, 0x4)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240480c4}, 0x40000)

2.543723684s ago: executing program 1 (id=2422):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

2.175752069s ago: executing program 9 (id=2427):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x404000, @loopback, 0x7cfd1f0f, 0x1}, 0x20)
bind$l2tp6(r0, &(0x7f00000024c0)={0xa, 0x7, 0x80000001, @loopback, 0x4}, 0x20)

2.175468994s ago: executing program 1 (id=2428):
syz_usb_connect(0x5, 0x27, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000240)={&(0x7f0000000200)=[{0x3d, 0x1000, 0x1, &(0x7f00000000c0)="ac"}, {0x3980, 0x2001, 0x2, &(0x7f0000000480)="d502"}], 0x2})

1.911035753s ago: executing program 2 (id=2433):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018edc, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x1, 0x644, &(0x7f00000006c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x9)
fchown(r0, 0x0, 0xee01)

1.889890342s ago: executing program 9 (id=2434):
unshare(0x4020400)
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, 0x0}, 0x108)

1.668266246s ago: executing program 8 (id=2436):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="89db70ac", 0x4}], 0x1}}], 0x1, 0x0)

1.623714488s ago: executing program 9 (id=2437):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd28, 0x6, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4054}, 0x0)

1.442223034s ago: executing program 1 (id=2438):
r0 = syz_usbip_server_init(0x2)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b00010000000009"], 0x0)
write$usbip_server(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35)

1.383703848s ago: executing program 4 (id=2439):
syz_mount_image$hfsplus(&(0x7f0000001140), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000180)=ANY=[], 0xfe, 0x66b, &(0x7f0000001180)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105942, 0x5)
unlink(&(0x7f0000000000)='./file2\x00')

1.365678995s ago: executing program 8 (id=2440):
r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r0)
waitid(0x0, 0x0, 0x0, 0xe, 0x0)

1.273722585s ago: executing program 9 (id=2441):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x81380, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x30, 0x7f, 0x86, 0xfffff014}, {0x6, 0xfd, 0x0, 0xffffffff}]})

1.243456528s ago: executing program 2 (id=2442):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)

1.092251863s ago: executing program 4 (id=2443):
gettid()
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4080)
sendmsg$xdp(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x28004080}, 0x8094)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x24040800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0xdc, 0x0, &(0x7f0000000740)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000600)={@fda={0x66646185, 0x0, 0x0, 0x3f}, @flat=@handle={0x73682a85, 0x0, 0x1}, @fd}, &(0x7f0000000540)={0x0, 0x20, 0x38}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000680)={@fda={0x66646185, 0x8, 0x1, 0x18}, @flat=@binder={0x73622a85, 0x1101}, @flat=@binder={0x73622a85, 0x2, 0x3}}, 0x0}}], 0x0, 0x0, 0x0})

935.788468ms ago: executing program 9 (id=2444):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$poke(0x1, r0, &(0x7f00000011c0), 0xfffffffffffffffb)

924.449983ms ago: executing program 2 (id=2445):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe})
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', 0x0})

742.898622ms ago: executing program 4 (id=2446):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x5, 0x1, 0x5, 0x1be2, 0x6, 0x6})

671.74355ms ago: executing program 8 (id=2447):
r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff8, 0x7f, 0x10000, 0x0, 0x6})
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)

671.394193ms ago: executing program 1 (id=2448):
unshare(0x600)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r0, 0x11, 0x65, 0x0, 0x0)

606.654202ms ago: executing program 2 (id=2449):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0xc, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248)

535.035731ms ago: executing program 4 (id=2450):
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00')
preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/106, 0x6a}], 0x1, 0xe, 0x1)

447.88456ms ago: executing program 8 (id=2451):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x281, 0x0)
r1 = openat$comedi(0xffffff9c, 0x0, 0x2180, 0x0)
ioctl$COMEDI_INSN(r1, 0x8028640c, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$sndctrl(0x0, 0x20000, 0x2)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r2, &(0x7f0000000f40)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xa}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x400004, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000040)='>', 0x1}], 0x1}}], 0x2, 0x40c4)

447.476478ms ago: executing program 9 (id=2452):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0xa08813, &(0x7f0000000080)={[{@nobarrier}, {@flushoncommit}, {@compress_force}, {@datacow}, {@flushoncommit}, {@rescue={'rescue', 0x3d, 'all'}}, {@acl}, {@nodiscard}]}, 0xfb, 0x5122, &(0x7f000000f380)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x6)
ioctl$FS_IOC_SETFLAGS(r0, 0x41009432, &(0x7f00000001c0)=0x80ff)

433.471466ms ago: executing program 1 (id=2453):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
arch_prctl$ARCH_SHSTK_STATUS(0x5005, 0x0)

308.462966ms ago: executing program 4 (id=2454):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x1)
open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f1000000"], 0x0)

242.695133ms ago: executing program 8 (id=2455):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000380)={0x1, 0x0, r1})

242.351933ms ago: executing program 2 (id=2456):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}}, 0x0)

111.28245ms ago: executing program 1 (id=2457):
gettid()
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4080)
sendmsg$xdp(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x28004080}, 0x8094)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x24040800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0xdc, 0x0, &(0x7f0000000740)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000600)={@fda={0x66646185, 0x0, 0x0, 0x3f}, @flat=@handle={0x73682a85, 0x0, 0x1}, @fd}, &(0x7f0000000540)={0x0, 0x20, 0x38}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000680)={@fda={0x66646185, 0x8, 0x1, 0x18}, @flat=@binder={0x73622a85, 0x1101}, @flat=@binder={0x73622a85, 0x2, 0x3}}, 0x0}}], 0x0, 0x0, 0x0})

110.687704ms ago: executing program 4 (id=2458):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0xbc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xc00, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

58.532659ms ago: executing program 8 (id=2459):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xac}, 0x1, 0x0, 0x0, 0x840}, 0x0)

6.120539ms ago: executing program 2 (id=2460):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi3\x00', 0x141000, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl818\x00', [0x4f27, 0x4, 0x7cc1, 0x401, 0x1, 0x6dc3, 0xfff, 0x1838, 0x5, 0x3fb, 0x802, 0xc42, 0x1, 0x2, 0x9, 0xe1cb, 0x5, 0x7f, 0x0, 0x395, 0x8000008c, 0xfffffffe, 0xa, 0xfffffff5, 0x0, 0x3, 0xab99, 0x2, 0x5, 0x8000000, 0xff]})
ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000080))

0s ago: executing program 5 (id=1637):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x89}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x442, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000040)={0xf0, 0x2})

kernel console output (not intermixed with test programs):

43] bridge0: port 2(bridge_slave_1) entered blocking state
[  902.043496][T13543] bridge0: port 2(bridge_slave_1) entered disabled state
[  902.062711][T13543] bridge_slave_1: entered allmulticast mode
[  902.284393][T13543] bridge_slave_1: entered promiscuous mode
[  903.429593][T13543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  903.584564][T13543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  903.917730][T13676] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  903.927720][T13676] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  903.936427][T13676] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  903.945022][T13676] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  904.267467][T13676] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  904.638291][ T6183] net_ratelimit: 212 callbacks suppressed
[  904.638317][ T6183] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  904.658168][ T5993] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  904.718327][ T5993] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  904.743645][ T6183] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  904.768709][T13278] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  904.788526][   T60] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  904.809586][ T9444] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  904.828294][ T6183] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  904.848621][ T6183] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  904.849221][   T36] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  905.096197][T13543] team0: Port device team_slave_0 added
[  905.694814][T13543] team0: Port device team_slave_1 added
[  905.855680][T13119] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  905.977506][T13543] batman_adv: batadv0: Adding interface: batadv_slave_0
[  906.001359][T13119] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  906.022922][T13543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  906.168057][T13543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  906.204130][ T4227] bridge_slave_1: left allmulticast mode
[  906.252178][ T4227] bridge_slave_1: left promiscuous mode
[  906.291977][ T4227] bridge0: port 2(bridge_slave_1) entered disabled state
[  906.644342][T13676] Bluetooth: hci5: command tx timeout
[  906.732499][T13688] fido_id[13688]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  906.751137][ T4227] bridge_slave_0: left allmulticast mode
[  906.765385][ T4227] bridge_slave_0: left promiscuous mode
[  906.790157][ T4227] bridge0: port 1(bridge_slave_0) entered disabled state
[  906.874048][T13703] netlink: 'syz.1.1805': attribute type 1 has an invalid length.
[  907.584691][T13713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1807'.
[  907.654104][ T4227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  907.667206][ T4227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  907.678841][ T4227] bond0 (unregistering): Released all slaves
[  907.695778][T13543] batman_adv: batadv0: Adding interface: batadv_slave_1
[  907.704753][T13543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  907.759316][T13543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  907.795023][T13703] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  908.708110][T13676] Bluetooth: hci5: command tx timeout
[  908.712412][T13673] lo speed is unknown, defaulting to 1000
[  909.172006][ T4227] hsr_slave_0: left promiscuous mode
[  909.219011][ T4227] hsr_slave_1: left promiscuous mode
[  909.235458][ T4227] batman_adv: batadv0: Removing interface: batadv_slave_0
[  909.268856][ T4227] batman_adv: batadv0: Removing interface: batadv_slave_1
[  909.742100][T13740] netlink: 'syz.1.1815': attribute type 2 has an invalid length.
[  910.354959][T13016] net_ratelimit: 256 callbacks suppressed
[  910.354984][T13016] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  910.355000][ T6066] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  910.494537][T12740] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  910.537559][ T1415] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  910.558325][ T6049] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  910.570218][ T7021] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  910.637678][ T9444] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  910.646830][ T7021] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  910.697948][ T7021] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  910.707499][   T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  910.807466][T13676] Bluetooth: hci5: command tx timeout
[  912.004211][ T4227] team0 (unregistering): Port device team_slave_1 removed
[  912.098151][ T4227] team0 (unregistering): Port device team_slave_0 removed
[  912.381391][T13676] Bluetooth: hci2: command 0x0406 tx timeout
[  912.858005][   T52] Bluetooth: hci5: command tx timeout
[  914.923165][T13779] overlayfs: failed to clone upperpath
[  915.187846][T13673] virt_wifi0 speed is unknown, defaulting to 1000
[  915.232080][T13543] hsr_slave_0: entered promiscuous mode
[  915.358094][ T7021] net_ratelimit: 370 callbacks suppressed
[  915.358153][ T7021] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  915.468860][T13543] hsr_slave_1: entered promiscuous mode
[  915.509014][ T6079] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  915.590025][ T7440] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  915.627100][ T7440] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  915.652318][T13543] debugfs: 'hsr0' already exists in 'hsr'
[  915.659217][ T6079] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  915.689149][T13543] Cannot create hsr debugfs directory
[  915.734958][ T1415] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  915.746049][ T7440] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  915.814132][ T1415] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  915.867288][ T7440] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  915.879999][   T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  917.199609][T13799] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1835'.
[  917.209400][T13799] netlink: 'syz.8.1835': attribute type 3 has an invalid length.
[  920.113619][T13673] chnl_net:caif_netlink_parms(): no params data found
[  920.377839][ T9444] net_ratelimit: 106 callbacks suppressed
[  920.377862][ T9444] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  920.393963][ T7083] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  920.426920][ T7083] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  920.429347][ T9444] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  920.477051][ T1040] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  920.516853][ T9444] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  920.516869][ T3545] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  920.544065][ T6063] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  920.557719][ T3545] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  920.610037][ T3545] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  922.057268][T13673] bridge0: port 1(bridge_slave_0) entered blocking state
[  922.815939][T13673] bridge0: port 1(bridge_slave_0) entered disabled state
[  922.824325][T13673] bridge_slave_0: entered allmulticast mode
[  922.859431][T13673] bridge_slave_0: entered promiscuous mode
[  923.136701][T13853] geneve2: entered promiscuous mode
[  923.156482][ T7440] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  924.315333][T13673] bridge0: port 2(bridge_slave_1) entered blocking state
[  924.354321][T13673] bridge0: port 2(bridge_slave_1) entered disabled state
[  924.838663][T13673] bridge_slave_1: entered allmulticast mode
[  925.373345][T13673] bridge_slave_1: entered promiscuous mode
[  925.399283][ T3483] net_ratelimit: 165 callbacks suppressed
[  925.399301][ T3483] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  925.413394][ T6059] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  925.476083][T13016] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  925.536201][T13016] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  925.926128][ T5993] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  925.933883][ T5993] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  925.956822][ T1040] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  925.995806][ T5993] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  926.006463][T13278] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  926.068174][ T6066] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  926.105883][ T7440] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  926.315746][ T7440] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  927.240396][ T7440] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  930.288810][T13673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  930.367348][T13673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  930.422857][ T6049] net_ratelimit: 147 callbacks suppressed
[  930.422903][ T6049] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  930.638062][ T3450] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  930.745686][ T6049] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  930.784796][ T3450] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  930.935318][ T3545] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  931.026220][   T50] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  931.126917][   T50] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  931.135316][   T50] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  931.155255][ T6183] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  931.159594][ T3450] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  931.556170][T13673] team0: Port device team_slave_0 added
[  932.291443][T13673] team0: Port device team_slave_1 added
[  932.480426][T13543] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  934.184936][T13543] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  934.273435][T13936] loop9: detected capacity change from 0 to 512
[  934.334508][T13673] batman_adv: batadv0: Adding interface: batadv_slave_0
[  934.346407][T13936] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[  934.407315][T13673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  934.516806][T13673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  934.556631][T13543] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  934.590156][T13936] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #17: comm syz.9.1868: inode has both inline data and extents flags
[  934.623657][T13936] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.1868: couldn't read orphan inode 17 (err -117)
[  934.645873][T13936] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  934.648721][T13673] batman_adv: batadv0: Adding interface: batadv_slave_1
[  934.866148][T13936] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1868: bg 0: block 65: padding at end of block bitmap is not set
[  934.881687][T13673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  935.022843][T13936] Quota error (device loop9): write_blk: dquota write failed
[  935.435056][T12587] net_ratelimit: 199 callbacks suppressed
[  935.435111][T12587] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  935.449088][ T5993] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  935.590976][T13673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  935.602280][T13543] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  935.624253][T13936] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota
[  935.654837][ T1415] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  935.656417][T13936] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.1868: Failed to acquire dquot type 0
[  935.665206][T13949] Quota error (device loop9): do_check_range: Getting block 144 out of range 0-5
[  935.687313][ T6066] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  935.735199][ T6066] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  935.754756][ T6755] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  935.785023][ T1415] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  935.814927][ T6066] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  935.836620][ T6755] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  935.864901][ T1415] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  935.901711][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  935.914879][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  936.128380][ T4227] bridge_slave_1: left allmulticast mode
[  936.141088][ T4227] bridge_slave_1: left promiscuous mode
[  936.152581][ T4227] bridge0: port 2(bridge_slave_1) entered disabled state
[  936.182523][ T4227] bridge_slave_0: left allmulticast mode
[  936.194534][ T4227] bridge_slave_0: left promiscuous mode
[  936.210003][ T4227] bridge0: port 1(bridge_slave_0) entered disabled state
[  937.581026][T13973] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1877'.
[  937.630077][T10247] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  937.741324][ T4227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  937.832281][ T4227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  937.883472][ T4227] bond0 (unregistering): Released all slaves
[  938.031023][T13673] hsr_slave_0: entered promiscuous mode
[  938.096124][T13673] hsr_slave_1: entered promiscuous mode
[  938.125406][T13673] debugfs: 'hsr0' already exists in 'hsr'
[  938.131157][T13673] Cannot create hsr debugfs directory
[  940.125267][T13985] tipc: Started in network mode
[  940.130174][T13985] tipc: Node identity 0629be1d4ab9, cluster identity 4711
[  940.158598][T13985] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  940.446889][ T6066] net_ratelimit: 228 callbacks suppressed
[  940.446912][ T6066] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  940.460515][   T36] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  940.514273][ T1040] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  940.524925][ T6066] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  940.566755][ T6066] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  940.566798][ T4227] hsr_slave_0: left promiscuous mode
[  940.594918][ T6066] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  940.602687][ T1040] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  940.644347][ T6066] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  940.654248][ T4227] hsr_slave_1: left promiscuous mode
[  940.667225][ T1040] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  940.688250][ T4227] batman_adv: batadv0: Removing interface: batadv_slave_0
[  940.734235][ T7083] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  940.788986][ T4227] batman_adv: batadv0: Removing interface: batadv_slave_1
[  941.290203][T14009] xt_hashlimit: size too large, truncated to 1048576
[  941.316450][T14009] xt_hashlimit: max too large, truncated to 1048576
[  941.675871][ T4227] team0 (unregistering): Port device team_slave_1 removed
[  941.822711][ T4227] team0 (unregistering): Port device team_slave_0 removed
[  942.857538][T13979] tipc: Resetting bearer <eth:syzkaller0>
[  942.919987][T13978] tipc: Disabling bearer <eth:syzkaller0>
[  942.969658][T13143] tipc: Node number set to 1284554269
[  943.019273][T14013] bond0: (slave vxlan0): Enslaving as an active interface with an up link
[  943.041718][T14015] 8021q: VLANs not supported on ip6gre0
[  944.072183][   T36] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  944.095226][   T36] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  944.116560][   T36] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  944.245648][   T36] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  944.332846][T14025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  947.225201][T13278] net_ratelimit: 284 callbacks suppressed
[  947.225225][T13278] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  947.248020][T12587] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  947.327608][ T6079] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  947.383459][T13278] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  947.426145][ T1415] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  947.483475][ T6066] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  947.493373][ T3545] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  947.575674][ T3545] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  947.583512][ T3450] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  947.613425][ T1040] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  949.465375][T14044] netlink: 'syz.9.1896': attribute type 3 has an invalid length.
[  949.473794][T14044] netlink: 'syz.9.1896': attribute type 3 has an invalid length.
[  951.075294][T14056] input: syz0 as /devices/virtual/input/input31
[  952.937332][T13016] net_ratelimit: 129 callbacks suppressed
[  952.937357][T13016] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  952.954052][   T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  953.105945][   T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  953.482909][   T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  953.502877][T13016] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  953.532867][   T50] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  953.552817][   T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  953.593090][ T1040] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  953.623605][   T50] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  953.642792][   T36] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  956.944317][T14082] loop9: detected capacity change from 0 to 512
[  957.023298][T14082] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  957.044001][T13676] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  957.066400][T13676] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  957.075177][T13676] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  957.083443][T13676] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  957.093172][T13676] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  957.101256][T14082] EXT4-fs (loop9): 1 truncate cleaned up
[  957.129344][T14082] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  957.251445][T14082] syz.9.1905 (pid 14082) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  957.288776][T14089] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1906'.
[  957.325006][T14089] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1906'.
[  957.334366][T14089] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1906'.
[  957.369572][T14089] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1906'.
[  957.406356][T14082] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload
[  957.454998][T14082] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload
[  957.541980][T14084] lo speed is unknown, defaulting to 1000
[  957.637970][T10247] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  957.710530][T14084] virt_wifi0 speed is unknown, defaulting to 1000
[  957.823000][T13673] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  957.942469][T13278] net_ratelimit: 131 callbacks suppressed
[  957.942488][T13278] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  957.965812][T12587] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  957.990060][T13278] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  958.246422][   T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  959.192981][T13676] Bluetooth: hci1: command tx timeout
[  959.631052][ T6023] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  959.638881][   T50] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  959.672173][ T6023] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  959.680013][ T6066] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  959.794046][ T6066] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  959.807005][T13673] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  959.812501][   T50] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  961.312340][T13673] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  961.319606][T13676] Bluetooth: hci1: command tx timeout
[  963.441850][T13676] Bluetooth: hci1: command tx timeout
[  963.463090][ T3483] net_ratelimit: 144 callbacks suppressed
[  963.463109][ T3483] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  963.484662][T12587] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  963.963744][T12587] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  963.990522][ T3483] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  964.352359][   T50] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  964.362436][ T6066] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  964.381809][T13016] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  964.411788][T13278] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  964.428369][   T50] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  964.471496][   T50] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  964.711453][   T30] audit: type=1326 audit(2000000688.464:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14134 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405cb8f749 code=0x7ffc0000
[  964.776754][   T30] audit: type=1326 audit(2000000688.464:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14134 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405cb8f749 code=0x7ffc0000
[  964.821529][T14138] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1916'.
[  964.846589][   T30] audit: type=1326 audit(2000000688.464:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14134 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405cb8f749 code=0x7ffc0000
[  964.927273][   T30] audit: type=1326 audit(2000000688.464:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14134 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405cb8f749 code=0x7ffc0000
[  964.974525][   T30] audit: type=1326 audit(2000000688.464:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14134 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f405cb8f749 code=0x7ffc0000
[  965.034349][   T30] audit: type=1326 audit(2000000688.464:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14134 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405cb8f749 code=0x7ffc0000
[  965.094868][T14143] loop9: detected capacity change from 0 to 2048
[  965.110476][   T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  965.126298][   T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  965.134154][   T30] audit: type=1326 audit(2000000688.464:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14134 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405cb8f749 code=0x7ffc0000
[  965.158243][   T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  965.164380][T14146] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  965.178801][   T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  965.186709][   T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  965.295727][   T30] audit: type=1326 audit(2000000688.464:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14134 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405cb8f749 code=0x7ffc0000
[  965.366195][T14084] chnl_net:caif_netlink_parms(): no params data found
[  965.419423][   T30] audit: type=1326 audit(2000000688.464:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14134 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405cb8f749 code=0x7ffc0000
[  965.531612][   T52] Bluetooth: hci1: command tx timeout
[  965.532348][T14150] NILFS error (device loop9): nilfs_lookup: deleted inode referenced: 12
[  965.612578][   T30] audit: type=1326 audit(2000000688.464:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14134 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f405cb8f749 code=0x7ffc0000
[  965.756117][T14150] Remounting filesystem read-only
[  967.107134][T14144] lo speed is unknown, defaulting to 1000
[  967.291333][   T52] Bluetooth: hci5: command tx timeout
[  967.674663][T14144] virt_wifi0 speed is unknown, defaulting to 1000
[  968.462255][T14182] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  968.471916][ T6755] net_ratelimit: 211 callbacks suppressed
[  968.471938][ T6755] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  968.487943][   T13] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  968.542291][ T4227] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  968.692811][ T6079] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  968.711099][ T6755] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  968.721310][ T6755] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  968.746300][ T4227] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  968.771660][ T4227] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  968.773130][ T1415] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  968.801212][ T9444] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  968.813265][T14084] bridge0: port 1(bridge_slave_0) entered blocking state
[  969.020193][T14084] bridge0: port 1(bridge_slave_0) entered disabled state
[  969.333260][   T52] Bluetooth: hci5: command tx timeout
[  969.644690][T14084] bridge_slave_0: entered allmulticast mode
[  969.662921][T14084] bridge_slave_0: entered promiscuous mode
[  969.675143][T14190] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1930'.
[  970.573549][T14191] geneve2: entered promiscuous mode
[  970.724409][T14084] bridge0: port 2(bridge_slave_1) entered blocking state
[  970.762167][T14084] bridge0: port 2(bridge_slave_1) entered disabled state
[  970.769447][T14084] bridge_slave_1: entered allmulticast mode
[  971.056200][T14084] bridge_slave_1: entered promiscuous mode
[  971.085332][T14206] random: crng reseeded on system resumption
[  971.127685][T13016] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  971.412147][   T52] Bluetooth: hci5: command tx timeout
[  971.440503][T13016] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  973.541208][   T52] Bluetooth: hci5: command tx timeout
[  973.546661][ T6049] net_ratelimit: 142 callbacks suppressed
[  973.546679][ T6049] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  973.561371][ T3450] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  973.580584][   T36] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  973.611441][ T6066] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  973.630694][ T6066] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  973.645446][ T1415] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  973.742724][T13016] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  973.760583][T13016] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  973.780317][ T7083] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  973.802481][T14084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  973.840547][ T7083] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  973.850546][ T4227] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  973.885314][ T6049] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  974.900935][ T7440] bridge_slave_1: left allmulticast mode
[  974.920403][ T7440] bridge_slave_1: left promiscuous mode
[  974.926215][ T7440] bridge0: port 2(bridge_slave_1) entered disabled state
[  975.169136][ T7440] bridge_slave_0: left allmulticast mode
[  975.183838][ T7440] bridge_slave_0: left promiscuous mode
[  975.202586][ T7440] bridge0: port 1(bridge_slave_0) entered disabled state
[  976.323845][T14263] futex_wake_op: syz.4.1946 tries to shift op by -1; fix this program
[  977.861631][ T7440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  977.897918][ T7440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  977.926911][ T7440] bond0 (unregistering): Released all slaves
[  978.112374][T14084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  978.414327][ T7440] hsr_slave_0: left promiscuous mode
[  978.424754][ T7440] hsr_slave_1: left promiscuous mode
[  978.435921][ T7440] batman_adv: batadv0: Removing interface: batadv_slave_0
[  978.560073][T12587] net_ratelimit: 150 callbacks suppressed
[  978.560097][T12587] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  978.574276][ T6063] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  978.600748][ T7440] batman_adv: batadv0: Removing interface: batadv_slave_1
[  978.622888][T13016] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  978.663549][T12587] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  978.671714][T13016] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  979.540157][T12587] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  979.540168][T13016] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  979.560131][ T6063] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  979.579844][T13016] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  979.624000][T13016] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  981.444366][ T7440] team0 (unregistering): Port device team_slave_1 removed
[  981.826547][ T7440] team0 (unregistering): Port device team_slave_0 removed
[  984.519272][ T6063] net_ratelimit: 156 callbacks suppressed
[  984.519295][ T6063] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  984.570693][ T6755] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  984.611413][ T6755] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  984.619310][ T6063] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  984.802325][ T6023] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  984.839289][ T6755] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  984.859325][ T6755] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  984.882130][ T6755] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  984.917532][T14320] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1961'.
[  984.979301][ T6063] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  984.999723][ T6063] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  988.024881][T14084] team0: Port device team_slave_0 added
[  988.073139][T14084] team0: Port device team_slave_1 added
[  989.528835][ T3545] net_ratelimit: 127 callbacks suppressed
[  989.528861][ T3545] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  989.542489][ T1040] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  989.598971][ T3545] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  989.608764][ T1040] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  989.853955][ T4227] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  990.878625][ T4227] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  991.330255][ T1415] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  991.358343][ T3545] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  991.496411][T14340] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  991.505653][ T6049] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  991.513760][ T1415] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  991.550885][T14348] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1969'.
[  993.179499][T14084] batman_adv: batadv0: Adding interface: batadv_slave_0
[  993.186474][T14084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  993.263409][T14084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  993.327705][T14084] batman_adv: batadv0: Adding interface: batadv_slave_1
[  993.347336][T14084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  993.477760][T14084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  993.835798][T14084] hsr_slave_0: entered promiscuous mode
[  993.871620][T14084] hsr_slave_1: entered promiscuous mode
[  993.884582][T14084] debugfs: 'hsr0' already exists in 'hsr'
[  993.891391][T14084] Cannot create hsr debugfs directory
[  993.907120][T14144] chnl_net:caif_netlink_parms(): no params data found
[  994.985729][ T7440] net_ratelimit: 125 callbacks suppressed
[  994.985777][ T7440] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  995.148161][ T7440] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  995.197733][   T60] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  995.238149][ T7440] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  995.247484][   T60] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  995.298493][ T6183] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  995.320757][T12740] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  995.329613][ T3483] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  995.348202][T12740] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[  995.508258][ T3483] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[  996.833803][T14405] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1980'.
[  996.884663][   T30] kauditd_printk_skb: 66 callbacks suppressed
[  996.884681][   T30] audit: type=1800 audit(2000000720.648:251): pid=14405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1980" name="nullb0" dev="tmpfs" ino=741 res=0 errno=0
[  997.258008][T10524] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[  997.324060][T14144] bridge0: port 1(bridge_slave_0) entered blocking state
[  997.349863][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  997.356328][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  997.539307][T10524] usb 10-1: Using ep0 maxpacket: 8
[  997.570911][T14144] bridge0: port 1(bridge_slave_0) entered disabled state
[  997.639772][T10524] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  997.654515][T14144] bridge_slave_0: entered allmulticast mode
[  997.685683][T14144] bridge_slave_0: entered promiscuous mode
[  997.700092][T10524] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  997.731984][T10524] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  997.759812][T10524] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  997.774242][T10524] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  997.784283][T10524] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  998.033537][T10524] usb 10-1: GET_CAPABILITIES returned 0
[  998.059523][T10524] usbtmc 10-1:16.0: can't read capabilities
[  998.385086][T10524] usb 10-1: USB disconnect, device number 22
[  998.844842][T14144] bridge0: port 2(bridge_slave_1) entered blocking state
[  998.852145][T14144] bridge0: port 2(bridge_slave_1) entered disabled state
[  998.859708][T14144] bridge_slave_1: entered allmulticast mode
[  998.879573][T14144] bridge_slave_1: entered promiscuous mode
[  998.994218][T14144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1000.080549][ T6755] net_ratelimit: 278 callbacks suppressed
[ 1000.080572][ T6755] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1000.112577][   T60] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1000.124321][T14454] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1986'.
[ 1000.167771][ T3450] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1000.177247][ T6755] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1000.210208][ T6755] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1000.220905][ T3450] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1000.263696][ T3450] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1000.271640][ T6755] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1000.307659][ T3450] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1000.315541][ T6755] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1001.954907][T14144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1002.006541][T14473] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1994'.
[ 1002.047434][T14473] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1994'.
[ 1002.078039][T14473] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1994'.
[ 1002.092789][T14473] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1994'.
[ 1002.176979][T14144] team0: Port device team_slave_0 added
[ 1002.218549][T14144] team0: Port device team_slave_1 added
[ 1003.680202][T14489] loop9: detected capacity change from 0 to 128
[ 1003.764196][T14489] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[ 1004.038298][   T30] audit: type=1800 audit(2000000727.788:252): pid=14488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1997" name="file1" dev="loop9" ino=94 res=0 errno=0
[ 1004.259150][T14144] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1004.295122][T14144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1004.945284][T14144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1005.097957][ T6075] net_ratelimit: 164 callbacks suppressed
[ 1005.098005][ T6075] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1005.115344][T13278] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1005.217112][T13278] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1005.236812][T14498] tipc: Started in network mode
[ 1005.241902][T14498] tipc: Node identity 4, cluster identity 4711
[ 1005.248131][T14498] tipc: Node number set to 4
[ 1005.306405][T14144] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1005.314991][T14144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1005.357492][ T6755] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1005.376671][T14502] loop9: detected capacity change from 0 to 256
[ 1005.383072][T13278] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1005.384639][T14144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1005.402498][T13278] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1005.411669][ T6075] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1005.437096][ T6755] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1005.438089][T13278] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1005.456073][T14502] vfat: Unknown parameter 'sys_immun±™ýe'
[ 1005.487173][ T6755] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1006.589651][   T12] bridge_slave_1: left allmulticast mode
[ 1006.595325][   T12] bridge_slave_1: left promiscuous mode
[ 1006.664906][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1006.741031][T14519] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2007'.
[ 1006.759723][   T12] bridge_slave_0: left allmulticast mode
[ 1006.765355][   T12] bridge_slave_0: left promiscuous mode
[ 1006.790517][T14519] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2007'.
[ 1006.812976][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1006.830100][T14519] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2007'.
[ 1006.854915][T14519] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2007'.
[ 1008.058763][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1008.121308][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1008.224511][   T12] bond0 (unregistering): Released all slaves
[ 1008.608811][T14542] loop9: detected capacity change from 0 to 1024
[ 1008.637739][T14542] EXT4-fs: inline encryption not supported
[ 1008.708532][T14542] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1008.890160][T10247] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1008.900607][T14144] hsr_slave_0: entered promiscuous mode
[ 1008.921515][T14144] hsr_slave_1: entered promiscuous mode
[ 1008.965501][T14144] debugfs: 'hsr0' already exists in 'hsr'
[ 1008.986747][T14144] Cannot create hsr debugfs directory
[ 1009.137816][   T12] hsr_slave_0: left promiscuous mode
[ 1009.172316][T13676] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1009.183254][   T12] hsr_slave_1: left promiscuous mode
[ 1009.183977][T13676] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1009.199899][T13676] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1009.209070][T13676] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1009.209510][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1009.227009][T13676] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1009.308372][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1010.434414][ T7440] net_ratelimit: 262 callbacks suppressed
[ 1010.434439][ T7440] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1010.472456][ T7440] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1010.575018][ T6079] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1010.575366][ T5027] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1010.671786][ T5027] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1010.702158][T14557] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1010.713396][ T7273] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1010.753950][ T7273] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1010.764754][T14560] overlayfs: failed to clone upperpath
[ 1010.765597][T14557] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1010.796494][ T5027] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1011.234785][T14548] loop9: detected capacity change from 0 to 32768
[ 1011.256516][   T52] Bluetooth: hci6: command tx timeout
[ 1011.926850][   T12] team0 (unregistering): Port device team_slave_1 removed
[ 1011.974340][T14548] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1012.072117][T14548] workqueue: Failed to create a rescuer kthread for wq "xfs-cil/loop9": -EINTR
[ 1012.085576][T14548] XFS (loop9): log mount failed
[ 1012.117927][   T12] team0 (unregistering): Port device team_slave_0 removed
[ 1013.346193][   T52] Bluetooth: hci6: command tx timeout
[ 1013.461043][T14590] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1015.415918][   T52] Bluetooth: hci6: command tx timeout
[ 1015.459191][ T7273] net_ratelimit: 237 callbacks suppressed
[ 1015.459213][ T7273] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1015.459466][ T3739] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1015.486613][T13278] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1015.494338][T13278] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1015.772420][T12587] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1015.926232][T14557] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1015.934291][T14604] Invalid ELF header magic: != ELF
[ 1016.053459][T14557] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1016.198773][ T6063] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1016.285838][ T1040] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1016.315827][T13016] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1017.487030][   T52] Bluetooth: hci6: command tx timeout
[ 1017.503815][T14550] lo speed is unknown, defaulting to 1000
[ 1017.535316][T14550] virt_wifi0 speed is unknown, defaulting to 1000
[ 1017.771452][T14623] loop9: detected capacity change from 0 to 16
[ 1017.882462][T14623] erofs (device loop9): mounted with root inode @ nid 36.
[ 1017.954712][T14620] erofs (device loop9): readahead error at folio 7 @ nid 36
[ 1018.194603][T14620] erofs (device loop9): bogus lookback distance 26160 @ lcn 6 of nid 36
[ 1018.825602][T14620] erofs (device loop9): readahead error at folio 6 @ nid 36
[ 1018.847035][T14620] erofs (device loop9): readahead error at folio 5 @ nid 36
[ 1018.857142][T14620] erofs (device loop9): readahead error at folio 4 @ nid 36
[ 1018.864440][T14620] erofs (device loop9): inconsistent algorithmtype 0 for nid 36
[ 1019.043661][T14620] erofs (device loop9): readahead error at folio 3 @ nid 36
[ 1019.076255][T14620] erofs (device loop9): inconsistent algorithmtype 0 for nid 36
[ 1019.104691][T14620] erofs (device loop9): readahead error at folio 1 @ nid 36
[ 1019.162820][T14620] erofs (device loop9): bogus lookback distance 0 @ lcn 0 of nid 36
[ 1019.171850][T14620] erofs (device loop9): readahead error at folio 0 @ nid 36
[ 1019.179814][T14620] syz.9.2035: attempt to access beyond end of device
[ 1019.179814][T14620] loop9: rw=524288, sector=525136, nr_sectors = 8 limit=16
[ 1019.751160][T14620] erofs (device loop9): bogus lookback distance 0 @ lcn 0 of nid 36
[ 1019.759516][T14620] erofs (device loop9): bogus lookback distance 0 @ lcn 0 of nid 36
[ 1019.872813][T14637] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2039'.
[ 1019.899027][T14637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2039'.
[ 1019.899695][T14620] erofs (device loop9): read error -117 @ 0 of nid 36
[ 1019.910922][T14620] erofs (device loop9): failed to readdir of logical block 0 of nid 36
[ 1019.925760][T14623] erofs (device loop9): inconsistent algorithmtype 0 for nid 36
[ 1019.934770][T14623] erofs (device loop9): inconsistent algorithmtype 0 for nid 36
[ 1019.942746][T14623] erofs (device loop9): read error -117 @ 72 of nid 36
[ 1019.950299][T14637] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2039'.
[ 1019.961950][T14637] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2039'.
[ 1020.051800][T14641] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2040'.
[ 1020.396903][T14645] loop9: detected capacity change from 0 to 8
[ 1020.465804][ T6059] net_ratelimit: 264 callbacks suppressed
[ 1020.465850][ T6059] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1020.492932][T14647] netlink: 'syz.1.2042': attribute type 3 has an invalid length.
[ 1020.535418][T13278] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1021.155722][ T3450] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1021.165823][ T3739] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1021.176280][   T12] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1022.049740][   T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1022.055388][ T6059] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1022.095217][ T3450] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1022.115469][ T6059] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1022.163429][ T3450] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1022.516346][T13143] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[ 1023.467387][T13143] usb 10-1: Using ep0 maxpacket: 32
[ 1024.213927][T13143] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1024.255335][T13143] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1024.287806][T13143] usb 10-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad
[ 1024.320634][T13143] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1024.554908][T13143] usb 10-1: Product: syz
[ 1024.559200][T13143] usb 10-1: Manufacturer: syz
[ 1024.566103][T13143] usb 10-1: SerialNumber: syz
[ 1024.583793][T13143] usb 10-1: config 0 descriptor??
[ 1025.409585][T13143] usb 10-1: can't set config #0, error -71
[ 1025.455038][T13143] usb 10-1: USB disconnect, device number 23
[ 1025.486462][ T1415] net_ratelimit: 89 callbacks suppressed
[ 1025.486482][ T1415] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1025.492013][T12740] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1025.534842][T12587] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1025.573051][ T1415] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1025.604357][ T3739] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1025.634827][T12587] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1025.642644][ T3739] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1025.655108][T14641] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1025.667835][T12740] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1025.676813][T12587] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1025.705174][T13016] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1026.332902][T14641] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1026.356093][T14641] bond0 (unregistering): (slave vxlan0): Releasing backup interface
[ 1026.373567][T13676] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1026.391899][T13676] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1026.393718][T14641] bond0 (unregistering): Released all slaves
[ 1026.411088][T13676] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1026.421515][T13676] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1026.430019][T13676] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1026.612561][ T6183] bridge_slave_1: left allmulticast mode
[ 1026.619762][ T6183] bridge_slave_1: left promiscuous mode
[ 1026.635379][ T6183] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1026.649458][T14682] netlink: 'syz.4.2051': attribute type 3 has an invalid length.
[ 1026.664893][T14682] netlink: 'syz.4.2051': attribute type 1 has an invalid length.
[ 1026.675089][ T6183] bridge_slave_0: left allmulticast mode
[ 1026.684874][ T6183] bridge_slave_0: left promiscuous mode
[ 1026.702073][ T6183] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1027.955185][ T6183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1028.228114][ T6183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1028.360826][ T6183] bond0 (unregistering): Released all slaves
[ 1028.591582][T13676] Bluetooth: hci1: command tx timeout
[ 1028.625696][T13278] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1028.646654][T14696] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12
[ 1028.654555][   T30] audit: type=1800 audit(2000000752.421:253): pid=14696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2054" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[ 1028.660223][T14696] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12
[ 1028.689199][T14696] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1029.038453][T13278] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1029.354186][T14702] Invalid ELF header magic: != ELF
[ 1029.560939][T12587] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1029.570014][T12587] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1029.729486][ T6183] hsr_slave_0: left promiscuous mode
[ 1029.774494][ T6183] hsr_slave_1: left promiscuous mode
[ 1029.780657][ T6183] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1029.813094][ T6183] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1029.967374][T14711] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2060'.
[ 1029.986773][T14711] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2060'.
[ 1030.024303][T14711] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2060'.
[ 1030.064280][T14711] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2060'.
[ 1030.509412][ T5027] net_ratelimit: 324 callbacks suppressed
[ 1030.509461][ T5027] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1030.523412][ T6023] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1030.618154][ T3450] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1030.626191][T13676] Bluetooth: hci1: command tx timeout
[ 1030.684805][ T3450] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1030.692578][ T3450] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1030.716703][ T3450] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1030.737701][ T3450] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1030.762215][T13278] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1030.796028][ T6063] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1030.817528][ T5027] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1032.683997][T13676] Bluetooth: hci1: command tx timeout
[ 1035.161840][ T6183] team0 (unregistering): Port device team_slave_1 removed
[ 1035.202279][ T6183] team0 (unregistering): Port device team_slave_0 removed
[ 1035.244066][T13676] Bluetooth: hci1: command tx timeout
[ 1035.917393][T12740] net_ratelimit: 83 callbacks suppressed
[ 1035.917417][T12740] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1036.011804][ T6059] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1036.073705][ T6059] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1036.093968][T12740] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1036.114876][T12740] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1036.134148][T12740] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1036.143783][ T7273] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1036.164194][T12740] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1036.173751][T12740] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1036.183755][ T6059] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1039.010280][T14550] chnl_net:caif_netlink_parms(): no params data found
[ 1042.017584][   T30] audit: type=1804 audit(2000000764.822:254): pid=14769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.2075" name="/newroot/225/file0" dev="tmpfs" ino=1234 res=1 errno=0
[ 1042.039074][ T4227] net_ratelimit: 136 callbacks suppressed
[ 1042.039094][ T4227] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1042.039127][ T7440] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1042.073098][ T3739] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1042.093241][T13016] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1042.151657][ T6079] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1042.203953][ T6079] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1042.254635][ T6079] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1042.317732][T14767] uprobe: syz.9.2075:14767 failed to unregister, leaking uprobe
[ 1042.339474][ T7273] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1042.347299][ T3450] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1043.300702][ T3450] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1043.342942][T14679] lo speed is unknown, defaulting to 1000
[ 1043.365308][T14679] virt_wifi0 speed is unknown, defaulting to 1000
[ 1043.716647][T14550] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1043.772973][T14550] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1043.814484][T14550] bridge_slave_0: entered allmulticast mode
[ 1043.858908][T14550] bridge_slave_0: entered promiscuous mode
[ 1044.586597][T14550] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1044.599343][T14550] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1044.623548][T14550] bridge_slave_1: entered allmulticast mode
[ 1044.638275][T14550] bridge_slave_1: entered promiscuous mode
[ 1044.803222][T14550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1044.901971][T14550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1046.125373][ T6183] bridge_slave_1: left allmulticast mode
[ 1046.177164][ T6183] bridge_slave_1: left promiscuous mode
[ 1046.203063][ T6183] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1046.493951][ T6183] bridge_slave_0: left allmulticast mode
[ 1046.499623][ T6183] bridge_slave_0: left promiscuous mode
[ 1046.522713][ T6183] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1047.648657][ T6063] net_ratelimit: 195 callbacks suppressed
[ 1047.648682][ T6063] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1047.653683][ T5027] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1047.658126][ T6183] bridge_slave_1: left allmulticast mode
[ 1047.682427][ T7021] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1047.703601][ T4227] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1047.726690][ T6183] bridge_slave_1: left promiscuous mode
[ 1047.762624][ T6183] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1047.769871][ T3450] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1047.769900][ T6063] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1047.872381][ T3450] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1047.880246][ T6183] bridge_slave_0: left allmulticast mode
[ 1047.887484][ T6049] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1047.909488][ T6183] bridge_slave_0: left promiscuous mode
[ 1047.922201][ T6183] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1047.929605][ T6049] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1047.939138][ T3450] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1049.539387][T14822] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2087'.
[ 1049.557389][T14822] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2087'.
[ 1049.582257][T14822] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2087'.
[ 1049.610844][T14822] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2087'.
[ 1049.794653][ T6183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1049.817728][ T6183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1049.848353][ T6183] bond0 (unregistering): Released all slaves
[ 1052.662014][T13016] net_ratelimit: 245 callbacks suppressed
[ 1052.662105][T13016] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1052.676083][ T6063] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1052.723530][ T7273] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1052.731740][ T6079] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1052.762221][ T7273] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1052.770116][ T6079] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1052.829337][ T6079] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1052.839639][ T7273] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1052.891941][T12740] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1052.943334][T12740] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1053.284246][T14844] loop9: detected capacity change from 0 to 128
[ 1054.511988][ T6183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1054.533059][ T6183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1054.552450][ T6183] bond0 (unregistering): Released all slaves
[ 1055.194061][T14550] team0: Port device team_slave_0 added
[ 1055.388190][T14550] team0: Port device team_slave_1 added
[ 1055.438682][T14849] overlayfs: failed to clone upperpath
[ 1057.749222][ T3450] net_ratelimit: 224 callbacks suppressed
[ 1057.749245][ T3450] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1057.765718][ T6079] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1057.821745][   T60] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1057.851032][T13356] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1058.131966][ T6079] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1058.490252][T12587] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1058.551433][T12587] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1058.602127][T13356] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1058.693866][T12587] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1058.721385][T12587] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1058.776963][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1058.783505][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1062.400292][T14892] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1063.573478][ T7021] net_ratelimit: 48 callbacks suppressed
[ 1063.573499][ T7021] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1063.573641][ T1415] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1063.590902][ T3545] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1063.620663][ T7440] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1063.641158][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1063.660663][T13016] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1063.680972][ T6059] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1063.748067][T14550] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1063.777995][ T6049] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1063.797470][ T6059] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1063.805419][T14550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1063.850953][ T3545] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1064.456710][T14550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1066.071352][T14550] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1066.555801][T14550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1067.540118][T14550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1068.351169][T14932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2115'.
[ 1068.950159][ T7440] net_ratelimit: 95 callbacks suppressed
[ 1068.950181][ T7440] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1068.960113][ T6079] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1069.087839][ T7440] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1069.200242][ T3545] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1069.220094][ T7021] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1069.261537][ T3545] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1069.304401][ T3545] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1069.455230][ T7021] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1069.480069][ T7021] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1069.575616][ T3545] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1071.370914][ T6183] hsr_slave_0: left promiscuous mode
[ 1071.439915][ T6183] hsr_slave_1: left promiscuous mode
[ 1071.446097][ T6183] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1071.700739][ T6183] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1072.766261][T14968] overlayfs: failed to clone upperpath
[ 1072.790421][ T6183] hsr_slave_0: left promiscuous mode
[ 1073.033356][ T6183] hsr_slave_1: left promiscuous mode
[ 1073.049923][ T6183] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1073.057320][ T6183] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1073.796380][ T6183] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1073.870137][ T6183] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1073.960037][ T6079] net_ratelimit: 170 callbacks suppressed
[ 1073.960059][ T6079] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1073.960133][T13016] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1073.998273][ T6079] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1074.049927][ T6079] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1074.068342][ T6183] veth1_macvtap: left promiscuous mode
[ 1074.089525][ T6079] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1074.157688][ T3450] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1074.170844][ T6183] veth0_macvtap: left promiscuous mode
[ 1074.172234][T13016] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1074.176520][ T6183] veth1_vlan: left promiscuous mode
[ 1074.189795][ T6183] veth0_vlan: left promiscuous mode
[ 1074.233261][   T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1074.249563][   T13] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1074.259515][   T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1074.267855][   T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1074.277690][   T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1074.286942][   T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1074.302827][T13016] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1074.312812][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1074.888817][T14995] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2133'.
[ 1075.109656][T14995] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2133'.
[ 1075.881998][T15003] loop9: detected capacity change from 0 to 128
[ 1075.910266][T15003] vfat: Unknown parameter '0xffffffffffffffff˙01777777777777777777777¬‚ú'
[ 1076.372425][   T52] Bluetooth: hci5: command tx timeout
[ 1077.107479][T15012] overlayfs: failed to clone upperpath
[ 1078.257830][   T30] audit: type=1800 audit(2000000801.266:255): pid=15017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2138" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[ 1078.546417][   T52] Bluetooth: hci5: command tx timeout
[ 1079.638435][   T50] net_ratelimit: 171 callbacks suppressed
[ 1079.638461][   T50] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1079.654057][ T6049] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1079.770849][   T50] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1079.778965][ T6049] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1079.801843][ T1415] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1079.859992][   T50] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1079.926620][   T50] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1079.939045][ T6049] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1080.298939][ T5027] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1080.306782][ T6049] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1080.456037][ T6183] team0 (unregistering): Port device team_slave_1 removed
[ 1080.511656][ T6183] team0 (unregistering): Port device team_slave_0 removed
[ 1080.600426][   T52] Bluetooth: hci5: command tx timeout
[ 1080.618435][   T30] audit: type=1326 audit(2000000804.387:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.8.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1cb18f749 code=0x7ffc0000
[ 1080.683800][   T30] audit: type=1326 audit(2000000804.387:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.8.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1cb18f749 code=0x7ffc0000
[ 1080.764512][   T30] audit: type=1326 audit(2000000804.387:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.8.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7ff1cb18f749 code=0x7ffc0000
[ 1080.814555][   T30] audit: type=1326 audit(2000000804.387:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.8.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1cb18f749 code=0x7ffc0000
[ 1080.904907][   T30] audit: type=1326 audit(2000000804.387:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.8.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff1cb18f749 code=0x7ffc0000
[ 1080.974912][   T30] audit: type=1326 audit(2000000804.387:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.8.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1cb18f749 code=0x7ffc0000
[ 1081.011502][   T30] audit: type=1326 audit(2000000804.387:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.8.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7ff1cb18f749 code=0x7ffc0000
[ 1081.057843][   T30] audit: type=1326 audit(2000000804.387:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.8.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1cb18f749 code=0x7ffc0000
[ 1081.102331][   T30] audit: type=1326 audit(2000000804.527:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.8.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7ff1cb18f749 code=0x7ffc0000
[ 1081.867548][ T6183] team0 (unregistering): Port device team_slave_1 removed
[ 1081.971209][T15044] xt_CHECKSUM: unsupported CHECKSUM operation 68
[ 1082.045628][ T6183] team0 (unregistering): Port device team_slave_0 removed
[ 1082.678835][   T52] Bluetooth: hci5: command tx timeout
[ 1083.215338][T15027] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1083.223007][T15027] netlink: 'syz.1.2135': attribute type 3 has an invalid length.
[ 1084.496886][T13676] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1084.512076][T13676] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1084.520071][T13676] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1084.533273][T13676] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1084.542132][T13676] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1084.698517][T13356] net_ratelimit: 327 callbacks suppressed
[ 1084.698543][T13356] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1084.822637][   T50] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1085.558847][T13356] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1085.569636][   T50] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1085.678936][ T6049] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1085.686681][ T6049] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1085.698334][T13278] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1085.718273][   T50] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1085.739112][ T6049] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1085.758671][T14558] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1086.315891][T15040] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22
[ 1086.334276][T15040] netdevsim netdevsim8: Direct firmware load for . failed with error -22
[ 1086.358029][T15040] netdevsim netdevsim8: Falling back to sysfs fallback for: .
[ 1086.540833][T14984] lo speed is unknown, defaulting to 1000
[ 1086.617658][T13676] Bluetooth: hci6: command tx timeout
[ 1086.654674][T15062] lo speed is unknown, defaulting to 1000
[ 1086.726033][T14984] virt_wifi0 speed is unknown, defaulting to 1000
[ 1086.787132][T15062] virt_wifi0 speed is unknown, defaulting to 1000
[ 1087.266469][T15083] loop9: detected capacity change from 0 to 1024
[ 1088.143737][ T7440] hfsplus: b-tree write err: -5, ino 4
[ 1088.312647][T15092] 9pnet_fd: Insufficient options for proto=fd
[ 1088.698108][T13676] Bluetooth: hci6: command tx timeout
[ 1089.115389][T15100] loop9: detected capacity change from 0 to 256
[ 1089.880642][T12740] net_ratelimit: 225 callbacks suppressed
[ 1089.880666][T12740] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1089.894964][T14558] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1089.968002][T14558] bond1: (slave ip6gretap0): failed to get link speed/duplex
[ 1089.975489][T12740] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1090.087875][T12740] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1090.138178][ T4227] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1090.364741][T12740] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1090.390781][T14984] chnl_net:caif_netlink_parms(): no params data found
[ 1090.797895][T13676] Bluetooth: hci6: command tx timeout
[ 1091.097784][ T3545] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1091.118442][T13356] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1091.257718][T12740] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1091.291715][T15062] chnl_net:caif_netlink_parms(): no params data found
[ 1091.742544][T15117] loop9: detected capacity change from 0 to 512
[ 1091.930072][T15117] EXT4-fs (loop9): 1 truncate cleaned up
[ 1091.952753][T15117] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1092.162022][T15116] EXT4-fs error (device loop9): ext4_find_dest_de:2050: inode #2: block 13: comm syz.9.2160: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[ 1092.525110][T10247] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1092.837577][T13676] Bluetooth: hci6: command tx timeout
[ 1092.907701][ T6183] bridge_slave_1: left allmulticast mode
[ 1092.914026][ T6183] bridge_slave_1: left promiscuous mode
[ 1092.925601][ T6183] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1093.598796][T15130] 9pnet: Found fid 0 not clunked
[ 1093.605486][ T6183] bridge_slave_0: left allmulticast mode
[ 1093.624160][ T6183] bridge_slave_0: left promiscuous mode
[ 1093.634544][ T6183] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1093.768271][T15134] program syz.9.2163 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1094.162173][   T30] audit: type=1326 audit(2000000817.938:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15125 comm="syz.1.2164" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f405cb8f749 code=0x0
[ 1094.398341][T15137] loop9: detected capacity change from 0 to 2048
[ 1094.495266][T15140] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1095.519857][ T7440] net_ratelimit: 177 callbacks suppressed
[ 1095.519880][ T7440] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1095.551670][ T3545] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1096.038011][T14557] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1096.046222][T14557] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1096.596569][T14557] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1096.869823][T12740] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1096.907070][T12740] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1096.927068][ T7440] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1096.957096][T14557] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1096.964895][ T7440] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1097.227255][ T6183] bond0 (unregistering): Released all slaves
[ 1098.552092][T15158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2168'.
[ 1098.561109][T15158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2168'.
[ 1099.749091][ T6183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1099.819175][ T6183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1099.877168][ T6183] bond0 (unregistering): Released all slaves
[ 1099.917359][T15162] loop9: detected capacity change from 0 to 512
[ 1100.106760][T15162] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 1100.113562][T15162] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 1100.867518][T13356] net_ratelimit: 121 callbacks suppressed
[ 1100.867543][T13356] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1100.974932][T12740] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1101.010200][T15162] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.2169: bad orphan inode 131083
[ 1101.054829][T13356] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1101.079652][T13278] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1101.098653][T15162] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1101.123703][T14558] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1101.136745][T12740] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1101.176584][ T7440] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1101.366679][ T7440] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1101.376808][ T5027] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1101.970341][T15176] overlayfs: failed to clone upperpath
[ 1102.278848][ T3545] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1104.497719][T10247] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1104.875718][T15188] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2176'.
[ 1106.247819][T13356] net_ratelimit: 83 callbacks suppressed
[ 1106.247845][T13356] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1106.266373][ T5027] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1106.556785][   T13] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1106.596098][ T1040] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1107.554434][ T1040] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1107.791483][ T1040] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1107.799683][ T1040] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1107.816642][ T1040] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1107.827150][ T1040] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1107.918920][T13016] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1108.335495][T15196] 9pnet_fd: Insufficient options for proto=fd
[ 1108.519966][T15211] loop9: detected capacity change from 0 to 256
[ 1108.561749][T15211] exfat: Deprecated parameter 'namecase'
[ 1108.604369][T15211] exfat: Deprecated parameter 'utf8'
[ 1108.687817][T14984] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1108.702957][T15211] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[ 1108.727888][T14984] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1108.748130][T14984] bridge_slave_0: entered allmulticast mode
[ 1108.796475][T14984] bridge_slave_0: entered promiscuous mode
[ 1108.896015][T14984] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1108.923254][T14984] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1108.957832][T14984] bridge_slave_1: entered allmulticast mode
[ 1108.968475][T15211] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2182'.
[ 1108.999739][T14984] bridge_slave_1: entered promiscuous mode
[ 1109.008795][T15211] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2182'.
[ 1109.027064][ T6183] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1109.072707][ T6183] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1110.511316][ T6183] team0 (unregistering): Port device team_slave_1 removed
[ 1110.790136][T15230] loop9: detected capacity change from 0 to 1024
[ 1110.851619][T15230] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1110.892316][T15230] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1110.960410][ T6183] team0 (unregistering): Port device team_slave_0 removed
[ 1110.977195][T15230] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1111.297403][ T6059] net_ratelimit: 252 callbacks suppressed
[ 1111.297428][ T6059] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1111.316378][T13016] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1111.385626][T13016] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1111.394698][ T6059] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1111.485595][ T6059] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1111.494283][ T7440] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1111.545593][ T7440] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1111.555569][ T6059] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1111.588745][ T3450] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1111.597549][ T7440] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1111.609019][T10247] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1114.063135][T15062] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1114.148999][T15062] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1114.265817][T15062] bridge_slave_0: entered allmulticast mode
[ 1114.332477][T15062] bridge_slave_0: entered promiscuous mode
[ 1114.593716][T14984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1116.085428][T15062] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1116.420129][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.426706][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.433216][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.439762][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.446300][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.452808][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.459335][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.465872][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.472376][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.478903][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.485456][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.491973][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.498492][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.505039][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.511539][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.518056][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.524547][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.531069][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.545318][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.551815][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.558333][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.564829][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.571342][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.577859][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.584349][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.590864][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.597389][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.603886][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.610404][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.616921][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.623411][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.629925][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.636443][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.642932][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.649448][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.655962][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.662457][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.668988][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.675506][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.682035][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.688559][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.695086][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.701582][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.708123][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.714625][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.721170][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.727683][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.734177][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.740687][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.747198][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.753690][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.760198][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.766753][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.773256][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.779765][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.786279][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.792795][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.799328][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.805844][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.812333][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.818855][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.825370][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.831884][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.838398][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.844932][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.851440][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.857980][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.864469][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.870988][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.877499][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.883990][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.890505][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.897026][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.903512][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.910052][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.916563][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.923055][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.929567][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.936079][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.942565][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.949072][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.955579][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.965252][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.971746][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.978256][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.984747][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.991258][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1116.997797][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.004300][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.010818][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.017333][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.023828][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.030341][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.036857][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.043344][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.049856][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.056368][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.062856][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.069367][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.075889][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.082394][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.088921][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.095439][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.101933][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.108451][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.114998][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.121491][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.128038][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.134532][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.141057][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.147575][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.154068][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.160596][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.167114][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.173601][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.180112][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.186627][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.193118][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.199630][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.206149][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.212639][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.219159][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.225672][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.232166][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.238687][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.245201][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.251691][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.258199][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.264689][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.271204][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.277715][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.284203][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.290715][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.297228][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.303717][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.310227][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.316750][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.323236][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.329748][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.336262][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.342749][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.349258][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.355775][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.362263][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.368780][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.375295][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[ 1117.401697][ T5027] net_ratelimit: 225 callbacks suppressed
[ 1117.401730][ T5027] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1117.422516][   T13] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1117.434887][ T1040] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1117.451801][T15062] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1117.515611][ T3450] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1117.525085][ T3739] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1117.542190][T15062] bridge_slave_1: entered allmulticast mode
[ 1117.595258][T12587] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1117.603024][T13016] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1117.652692][T15062] bridge_slave_1: entered promiscuous mode
[ 1117.664988][ T3739] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1117.674919][T12587] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1117.684881][ T3739] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1117.824053][   T30] audit: type=1800 audit(2000000841.601:266): pid=15269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2197" name="nullb0" dev="tmpfs" ino=848 res=0 errno=0
[ 1117.871099][T14984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1118.180069][T15062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1118.633016][    C1] vcan0: j1939_tp_rxtimer: 0xffff88804fb30400: rx timeout, send abort
[ 1119.143808][    C1] vcan0: j1939_tp_rxtimer: 0xffff88804fb30400: abort rx timeout. Force session deactivation
[ 1119.195965][T15062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1119.479720][T14984] team0: Port device team_slave_0 added
[ 1120.206043][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 1120.212367][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 1120.397094][T14984] team0: Port device team_slave_1 added
[ 1121.922738][T15062] team0: Port device team_slave_0 added
[ 1122.007452][T15062] team0: Port device team_slave_1 added
[ 1122.035588][T14984] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1122.054439][T14984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1123.001671][T14984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1123.035515][T12740] net_ratelimit: 225 callbacks suppressed
[ 1123.035538][T12740] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1123.043816][   T13] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1123.074633][ T6023] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1123.104277][ T6023] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1123.134002][T14984] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1123.144306][ T5027] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1123.195295][T12740] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1123.206558][T12740] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1123.214385][T12740] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1123.234395][T12740] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1123.242144][T12740] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1123.275826][T14984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1123.396654][T14984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1123.551913][T13676] Bluetooth: min 0 < 6
[ 1123.829430][T14984] hsr_slave_0: entered promiscuous mode
[ 1123.845954][T14984] hsr_slave_1: entered promiscuous mode
[ 1123.861813][T14984] debugfs: 'hsr0' already exists in 'hsr'
[ 1123.882966][T14984] Cannot create hsr debugfs directory
[ 1123.907270][T15062] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1123.934374][T15062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1124.010045][T15062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1124.668756][T15062] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1124.681632][T15062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1124.715481][T15062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1125.914144][   T52] Bluetooth: hci0: command 0x0406 tx timeout
[ 1126.165348][T15339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2218'.
[ 1127.490387][T15345] loop9: detected capacity change from 0 to 4096
[ 1127.528671][T15062] hsr_slave_0: entered promiscuous mode
[ 1127.535476][T15062] hsr_slave_1: entered promiscuous mode
[ 1127.538531][T15345] ntfs3(loop9): Different NTFS sector size (2048) and media sector size (512).
[ 1127.542030][T15062] debugfs: 'hsr0' already exists in 'hsr'
[ 1127.602114][T15062] Cannot create hsr debugfs directory
[ 1127.603545][T15345] ntfs3(loop9): RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only.
[ 1127.657151][T15345] ntfs3(loop9): It is recommended to use chkdsk.
[ 1127.692450][T15345] ntfs3(loop9): ino=0, mi_enum_attr
[ 1127.716565][T15345] ntfs3(loop9): failed to read volume at offset 0x201800
[ 1127.743940][T15345] ntfs3(loop9): failed to read volume at offset 0x201800
[ 1127.752626][T15345] ntfs3(loop9): failed to read volume at offset 0x201800
[ 1127.776780][T15345] ntfs3(loop9): failed to read volume at offset 0x201800
[ 1127.814907][T15345] ntfs3(loop9): failed to read volume at offset 0x202800
[ 1127.830662][T15345] ntfs3(loop9): failed to read volume at offset 0x203800
[ 1128.009235][T13676] Bluetooth: min 6 > max 0
[ 1128.044981][   T50] net_ratelimit: 185 callbacks suppressed
[ 1128.045003][   T50] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1128.054604][ T6059] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1128.385152][ T6183] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1128.434016][ T6059] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1128.454302][ T6183] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1128.473901][ T6059] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1128.527266][ T5027] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1128.537987][ T6079] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1128.600139][ T6059] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1128.611314][ T5027] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1128.882132][T15376] loop9: detected capacity change from 0 to 1024
[ 1128.955477][T14984] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1128.998008][ T6183] hfsplus: b-tree write err: -5, ino 4
[ 1129.014405][T14984] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1129.212586][T15062] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1129.229068][T15062] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1129.256093][T15062] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1129.278186][T15062] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1129.406635][T15062] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1129.430587][T15062] 8021q: adding VLAN 0 to HW filter on device team0
[ 1129.443379][ T6059] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1129.450567][ T6059] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1129.467151][ T6183] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1129.474320][ T6183] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1130.895383][T15413] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2247'.
[ 1130.943439][T15413] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2247'.
[ 1130.976334][T15413] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2247'.
[ 1131.038912][T15413] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2247'.
[ 1131.166906][T15423] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2248'.
[ 1131.183669][T15423] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2248'.
[ 1131.203178][T15423] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2248'.
[ 1131.235525][T15423] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2248'.
[ 1131.305743][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1131.321494][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1131.329759][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1131.339314][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1131.349390][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1131.359196][T15062] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1132.353552][ T5859] Bluetooth: hci0: command 0x0406 tx timeout
[ 1133.119945][T15062] veth0_vlan: entered promiscuous mode
[ 1133.154017][ T7021] net_ratelimit: 151 callbacks suppressed
[ 1133.154037][ T7021] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1133.170276][ T3739] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1133.211361][T15424] lo speed is unknown, defaulting to 1000
[ 1133.404836][ T5859] Bluetooth: hci1: command tx timeout
[ 1133.461027][ T3739] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1133.469686][   T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1133.535286][   T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1133.583312][   T50] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1133.623276][ T3739] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1133.635657][   T12] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1133.674369][   T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1133.683555][ T6183] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1133.736370][T15062] veth1_vlan: entered promiscuous mode
[ 1133.743768][T15424] virt_wifi0 speed is unknown, defaulting to 1000
[ 1133.953532][   T52] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[ 1133.964342][   T52] Bluetooth: hci3: Injecting HCI hardware error event
[ 1133.973464][ T5859] Bluetooth: hci3: hardware error 0x00
[ 1134.049467][T15062] veth0_macvtap: entered promiscuous mode
[ 1134.062666][T15062] veth1_macvtap: entered promiscuous mode
[ 1135.003645][T15062] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1135.168548][T15062] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1135.423501][T15466] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2264'.
[ 1135.437130][ T5027] bridge_slave_1: left allmulticast mode
[ 1135.442784][ T5027] bridge_slave_1: left promiscuous mode
[ 1135.493097][   T52] Bluetooth: hci1: command tx timeout
[ 1135.702168][ T5027] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1135.717574][ T5027] bridge_slave_0: left allmulticast mode
[ 1135.733021][ T5027] bridge_slave_0: left promiscuous mode
[ 1136.724607][ T5027] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1136.835394][ T5859] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[ 1137.173724][ T5027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1137.217845][ T5027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1137.245498][ T5027] bond0 (unregistering): Released all slaves
[ 1137.332957][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1137.564393][ T5859] Bluetooth: hci1: command tx timeout
[ 1137.584275][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1138.162885][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1138.347001][ T3739] net_ratelimit: 202 callbacks suppressed
[ 1138.347025][ T3739] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1138.373405][   T50] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1138.456358][T13016] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1138.482703][ T6063] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1138.506566][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1138.536986][ T3739] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1138.555281][T13016] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1138.612292][ T4227] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1138.622270][T13016] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1138.675733][T13016] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1138.698981][ T6183] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1138.857830][T15501] loop9: detected capacity change from 0 to 32768
[ 1138.872746][T15501] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2275 (15501)
[ 1139.017310][ T5027] hsr_slave_0: left promiscuous mode
[ 1139.022690][T15501] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1139.022769][T15501] BTRFS info (device loop9): using crc32c (crc32c-lib) checksum algorithm
[ 1139.132674][ T5027] hsr_slave_1: left promiscuous mode
[ 1139.165134][ T5027] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1139.204810][ T5027] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1139.234244][T15501] BTRFS info (device loop9): setting nodatasum
[ 1139.241062][T15501] BTRFS info (device loop9): setting nodatacow
[ 1139.247260][T15501] BTRFS info (device loop9): turning on async discard
[ 1139.254042][T15501] BTRFS info (device loop9): enabling free space tree
[ 1139.260789][T15501] BTRFS info (device loop9): enabling auto defrag
[ 1139.267278][T15501] BTRFS info (device loop9): max_inline set to 0
[ 1139.632599][ T5859] Bluetooth: hci1: command tx timeout
[ 1139.735753][T10247] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1140.331710][ T5027] team0 (unregistering): Port device team_slave_1 removed
[ 1140.462562][ T7853] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[ 1140.701631][ T5027] team0 (unregistering): Port device team_slave_0 removed
[ 1140.863635][T15533] overlayfs: failed to clone upperpath
[ 1141.524888][ T7853] usb 10-1: config 0 has an invalid interface number: 183 but max is 0
[ 1141.537891][ T7853] usb 10-1: config 0 has no interface number 0
[ 1141.544513][ T7853] usb 10-1: config 0 interface 183 altsetting 0 has an endpoint descriptor with address 0x1E, changing to 0xE
[ 1141.571421][ T7853] usb 10-1: config 0 interface 183 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023
[ 1141.595490][ T7853] usb 10-1: config 0 interface 183 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 32
[ 1141.629249][ T7853] usb 10-1: config 0 interface 183 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[ 1141.645057][ T7853] usb 10-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=45.20
[ 1141.655237][ T7853] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1141.670614][ T7853] usb 10-1: config 0 descriptor??
[ 1141.689390][T15527] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1141.697766][T15527] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1141.712121][ T7853] radio-si470x 10-1:0.183: could not find interrupt in endpoint
[ 1141.720652][ T7853] radio-si470x 10-1:0.183: probe with driver radio-si470x failed with error -5
[ 1141.730909][ T7853] usbhid 10-1:0.183: couldn't find an input interrupt endpoint
[ 1141.930394][T12786] usb 10-1: USB disconnect, device number 24
[ 1142.089684][ T5859] Bluetooth: hci0: unexpected event for opcode 0x1804
[ 1142.095065][ T3450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1142.137800][ T3450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1142.153125][T15424] chnl_net:caif_netlink_parms(): no params data found
[ 1142.168828][ T5859] Bluetooth: hci4: unexpected event for opcode 0x2028
[ 1142.349009][T13016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1142.383948][T13016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1142.632680][T15424] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1142.655745][T15424] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1142.795244][T15424] bridge_slave_0: entered allmulticast mode
[ 1142.805774][T15567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2295'.
[ 1142.814799][T15567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2295'.
[ 1142.993051][T15424] bridge_slave_0: entered promiscuous mode
[ 1143.281258][T15424] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1143.293789][T15424] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1143.309905][T15424] bridge_slave_1: entered allmulticast mode
[ 1143.352768][ T7021] net_ratelimit: 330 callbacks suppressed
[ 1143.352817][ T7021] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1143.368792][ T6183] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1143.615901][T15424] bridge_slave_1: entered promiscuous mode
[ 1143.654516][ T6079] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1143.702209][ T6183] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1143.709979][ T6079] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1143.768134][T13356] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1143.783959][ T6049] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1143.832143][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1143.842436][ T6079] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1143.921514][   T50] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1144.272042][T15583] binder: 15577:15583 ioctl 4018620d 0 returned -22
[ 1144.495583][T15424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1144.587631][T15424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1144.841825][T15424] team0: Port device team_slave_0 added
[ 1144.876192][T15424] team0: Port device team_slave_1 added
[ 1146.133575][T15424] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1146.176667][T15424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1146.282615][T15424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1146.348281][T15424] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1146.371302][T15424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1146.477510][T15424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1146.679880][T15629] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2323'.
[ 1146.701986][ T5853] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[ 1146.704912][T15629] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2323'.
[ 1146.778615][T15424] hsr_slave_0: entered promiscuous mode
[ 1146.800725][ T5859] Bluetooth: hci4: unexpected event for opcode 0x080f
[ 1146.802888][T15424] hsr_slave_1: entered promiscuous mode
[ 1146.846525][T15424] debugfs: 'hsr0' already exists in 'hsr'
[ 1146.859237][T15424] Cannot create hsr debugfs directory
[ 1146.884972][ T5853] usb 3-1: config 7 has an invalid interface number: 56 but max is 0
[ 1146.907973][ T5853] usb 3-1: config 7 has no interface number 0
[ 1146.923949][T15641] netlink: 'syz.8.2328': attribute type 27 has an invalid length.
[ 1146.947031][ T5853] usb 3-1: config 7 interface 56 has no altsetting 0
[ 1146.978272][ T5853] usb 3-1: New USB device found, idVendor=12d1, idProduct=0d09, bcdDevice=34.ea
[ 1147.021953][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1147.029980][ T5853] usb 3-1: Product: syz
[ 1147.070647][ T5853] usb 3-1: Manufacturer: syz
[ 1147.080950][ T5853] usb 3-1: SerialNumber: syz
[ 1147.303608][T15651] loop9: detected capacity change from 0 to 1024
[ 1147.374222][ T5853] option 3-1:7.56: GSM modem (1-port) converter detected
[ 1147.420313][T15656] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2335'.
[ 1147.469979][T15656] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2335'.
[ 1147.543110][T15656] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2335'.
[ 1147.613591][ T5853] usb 3-1: USB disconnect, device number 19
[ 1147.621030][ T5853] option 3-1:7.56: device disconnected
[ 1147.630930][T15656] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2335'.
[ 1147.759528][T15663] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1148.353558][ T5027] hfsplus: b-tree write err: -5, ino 4
[ 1148.452071][ T6059] net_ratelimit: 318 callbacks suppressed
[ 1148.452094][ T6059] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1148.472707][ T6079] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1148.480629][ T6079] bond1: (slave ip6gretap0): failed to get link speed/duplex
[ 1148.521756][ T6059] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1148.623433][ T6049] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1148.662284][ T6063] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1148.705903][ T6049] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1148.719041][ T6059] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1148.749367][T15676] bond3: entered promiscuous mode
[ 1148.768869][T15676] bond3: entered allmulticast mode
[ 1148.774572][   T50] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1148.782911][   T13] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1148.804181][T15676] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1150.372944][T15745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2374'.
[ 1150.836391][ T5859] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[ 1150.846687][ T5859] Bluetooth: hci4: Injecting HCI hardware error event
[ 1150.859566][ T5859] Bluetooth: hci4: hardware error 0x00
[ 1151.272779][T15424] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1151.294961][T15424] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1151.331149][T15424] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1151.343704][T15760] Cannot find add_set index 0 as target
[ 1151.443889][T15424] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1151.809481][T15783] netlink: 'syz.4.2389': attribute type 10 has an invalid length.
[ 1151.836736][T15783] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2389'.
[ 1151.893053][T15783] batadv0: entered promiscuous mode
[ 1151.926103][T15783] batadv0: entered allmulticast mode
[ 1151.960787][T15783] bridge0: port 3(batadv0) entered blocking state
[ 1151.993304][T15783] bridge0: port 3(batadv0) entered disabled state
[ 1152.029656][T15783] bridge0: port 3(batadv0) entered blocking state
[ 1152.036296][T15783] bridge0: port 3(batadv0) entered forwarding state
[ 1152.168738][T15424] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1152.252982][T15424] 8021q: adding VLAN 0 to HW filter on device team0
[ 1152.281178][ T6183] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[ 1152.291043][ T6183] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[ 1152.333703][T14557] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1152.340870][T14557] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1152.366648][T15802] loop9: detected capacity change from 0 to 512
[ 1152.392884][T15802] EXT4-fs: inline encryption not supported
[ 1152.411968][T15802] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1152.455411][ T6183] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1152.462609][ T6183] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1152.475299][T15802] EXT4-fs error (device loop9): ext4_orphan_get:1391: comm syz.9.2398: inode #13: comm syz.9.2398: iget: illegal inode #
[ 1152.551078][T15802] EXT4-fs (loop9): Remounting filesystem read-only
[ 1152.599138][T15802] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1152.621231][T15811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2403'.
[ 1152.826462][T10247] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1153.072266][ T5859] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[ 1153.268296][T15837] xt_TCPMSS: Only works on TCP SYN packets
[ 1153.533980][T14557] net_ratelimit: 4156 callbacks suppressed
[ 1153.534002][T14557] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1153.543740][ T6079] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1153.556635][T15424] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1153.622017][T12740] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1153.629845][T14557] bond1: (slave ip6gretap0): failed to get link speed/duplex
[ 1153.673191][T12740] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1153.702412][T12740] bond1: (slave ip6gretap1): failed to get link speed/duplex
[ 1153.795103][   T50] bond1: (slave ip6gretap0): link status up, enabling it in 0 ms
[ 1153.825431][   T50] bond1: (slave ip6gretap0): failed to get link speed/duplex
[ 1153.862499][T13278] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1153.902226][T14557] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1154.433557][T15882] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2431'.
[ 1154.524481][T15884] loop2: detected capacity change from 0 to 1024
[ 1154.563192][T15884] EXT4-fs: Ignoring removed nobh option
[ 1154.583995][T15884] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1154.638854][T15884] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.2433: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[ 1154.683224][T15884] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2433: couldn't read orphan inode 11 (err -117)
[ 1154.714461][T15884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1154.747237][T15424] veth0_vlan: entered promiscuous mode
[ 1154.759700][T15884] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2433: Invalid block bitmap block 0 in block_group 0
[ 1154.835134][T15884] Quota error (device loop2): write_blk: dquota write failed
[ 1154.847376][T15424] veth1_vlan: entered promiscuous mode
[ 1154.859403][T15884] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[ 1154.892583][T15884] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2433: Failed to acquire dquot type 0
[ 1155.018355][T15424] veth0_macvtap: entered promiscuous mode
[ 1155.035012][T15062] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1155.058802][T15424] veth1_macvtap: entered promiscuous mode
[ 1155.248158][T15424] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1155.299035][T15424] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1155.350212][T14557] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1155.390199][T14557] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1155.443019][T14557] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1155.451754][T14557] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1155.781765][ T6183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1155.862323][ T6183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1156.045247][ T6049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1156.092609][ T6049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1156.368503][T15944] comedi comedi3: pcl818: I/O port conflict (0x4f27,16)
[ 1156.391212][T15944] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN NOPTI
[ 1156.403270][T15944] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]
[ 1156.411662][T15944] CPU: 0 UID: 0 PID: 15944 Comm: syz.2.2460 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1156.422578][T15944] Tainted: [L]=SOFTLOCKUP
[ 1156.426880][T15944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1156.436916][T15944] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[ 1156.442455][T15944] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 69 e0 6d f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 48 e0 6d f9 4d 8b 24 24 48 83 c3
[ 1156.462822][T15944] RSP: 0018:ffffc9000bc079d8 EFLAGS: 00010216
[ 1156.468872][T15944] RAX: 0000000000000005 RBX: ffff888078cf3580 RCX: 0000000000080000
[ 1156.476823][T15944] RDX: ffffc90018cfa000 RSI: 0000000000003f27 RDI: 0000000000003f28
[ 1156.484775][T15944] RBP: 0000000000000001 R08: ffff88802ed9e12f R09: 1ffff11005db3c25
[ 1156.492729][T15944] R10: dffffc0000000000 R11: ffffffff88b93c70 R12: 0000000000000028
[ 1156.500682][T15944] R13: dffffc0000000000 R14: ffff88802ed9e000 R15: dffffc0000000000
[ 1156.508635][T15944] FS:  00007fb4fcd6e6c0(0000) GS:ffff888126095000(0000) knlGS:0000000000000000
[ 1156.517543][T15944] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1156.524107][T15944] CR2: 0000555581644808 CR3: 000000005adfa000 CR4: 0000000000350ef0
[ 1156.532060][T15944] Call Trace:
[ 1156.535317][T15944]  <TASK>
[ 1156.538228][T15944]  pcl818_detach+0x66/0xd0
[ 1156.542638][T15944]  comedi_device_detach_locked+0x178/0x750
[ 1156.548448][T15944]  comedi_device_attach+0x5d4/0x720
[ 1156.553638][T15944]  comedi_unlocked_ioctl+0x5ff/0x1020
[ 1156.559002][T15944]  ? kasan_quarantine_put+0xdd/0x220
[ 1156.564277][T15944]  ? lockdep_hardirqs_on+0x98/0x140
[ 1156.569466][T15944]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 1156.575278][T15944]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1156.580893][T15944]  ? do_futex+0x333/0x420
[ 1156.585213][T15944]  ? __fget_files+0x2a/0x420
[ 1156.589787][T15944]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1156.595401][T15944]  ? __fget_files+0x3a0/0x420
[ 1156.600061][T15944]  ? __fget_files+0x2a/0x420
[ 1156.604636][T15944]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1156.610252][T15944]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1156.615869][T15944]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 1156.621668][T15944]  __se_sys_ioctl+0xfc/0x170
[ 1156.626248][T15944]  do_syscall_64+0xfa/0xf80
[ 1156.630748][T15944]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1156.636801][T15944]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1156.642421][T15944]  ? exc_page_fault+0xab/0x100
[ 1156.647177][T15944]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1156.653054][T15944] RIP: 0033:0x7fb4fbf8f749
[ 1156.657453][T15944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1156.677128][T15944] RSP: 002b:00007fb4fcd6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1156.685527][T15944] RAX: ffffffffffffffda RBX: 00007fb4fc1e5fa0 RCX: 00007fb4fbf8f749
[ 1156.693497][T15944] RDX: 0000200000000180 RSI: 0000000040946400 RDI: 0000000000000003
[ 1156.701448][T15944] RBP: 00007fb4fc013f91 R08: 0000000000000000 R09: 0000000000000000
[ 1156.709415][T15944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1156.717366][T15944] R13: 00007fb4fc1e6038 R14: 00007fb4fc1e5fa0 R15: 00007ffc577a6b48
[ 1156.725333][T15944]  </TASK>
[ 1156.728331][T15944] Modules linked in:
[ 1156.734073][T15944] ---[ end trace 0000000000000000 ]---
[ 1156.963830][T15929] loop9: detected capacity change from 0 to 32768
[ 1156.971691][T15929] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2452 (15929)
[ 1156.989615][T15929] BTRFS info (device loop9 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1157.001278][T15929] BTRFS info (device loop9 state S): using crc32c (crc32c-lib) checksum algorithm
[ 1157.013068][T15944] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[ 1157.022310][T15944] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 69 e0 6d f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 48 e0 6d f9 4d 8b 24 24 48 83 c3
[ 1157.084215][T15944] RSP: 0018:ffffc9000bc079d8 EFLAGS: 00010216
[ 1157.124056][T15944] RAX: 0000000000000005 RBX: ffff888078cf3580 RCX: 0000000000080000
[ 1157.384075][T15944] RDX: ffffc90018cfa000 RSI: 0000000000003f27 RDI: 0000000000003f28
[ 1157.422195][T15944] RBP: 0000000000000001 R08: ffff88802ed9e12f R09: 1ffff11005db3c25
[ 1157.450923][T15944] R10: dffffc0000000000 R11: ffffffff88b93c70 R12: 0000000000000028
[ 1157.465954][ T6059] BTRFS warning (device loop9 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0x5afefc99 level 0, ignored
[ 1157.476091][T15944] R13: dffffc0000000000 R14: ffff88802ed9e000 R15: dffffc0000000000
[ 1157.504655][T15944] FS:  00007fb4fcd6e6c0(0000) GS:ffff888126195000(0000) knlGS:0000000000000000
[ 1157.521160][T15944] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1157.528297][T13016] BTRFS warning (device loop9 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x23b2bbff level 0, ignored
[ 1157.549895][T15944] CR2: 00007f02fcb85000 CR3: 000000005adfa000 CR4: 0000000000350ef0
[ 1157.563384][T15944] Kernel panic - not syncing: Fatal exception
[ 1157.569724][T15944] Kernel Offset: disabled
[ 1157.574070][T15944] Rebooting in 86400 seconds..