last executing test programs:

8.547156633s ago: executing program 0 (id=921):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r2, 0x800448d3, 0x0)

7.684774157s ago: executing program 3 (id=924):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x48051}, 0x240000c4)
r4 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f00000006c0)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r4, 0x100847c0, 0x0, 0x1, 0x0, 0x0)

6.812951598s ago: executing program 0 (id=927):
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4)
socket$rds(0x15, 0x5, 0x0)
ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)

6.767654964s ago: executing program 3 (id=928):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280), 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00')
pread64(r4, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000)
r5 = syz_usb_connect(0x2, 0x52, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, 0x0, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x0, 0x1)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)

6.760388079s ago: executing program 4 (id=929):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)

6.668924968s ago: executing program 2 (id=930):
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x7)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$read(0xb, r4, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
r5 = gettid()
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
setreuid(0x0, 0xee01)

5.560387784s ago: executing program 0 (id=932):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44020}, 0x20000054)

5.427195434s ago: executing program 0 (id=934):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f00000002c0)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@ssd_spread}, {@nodatasum}, {@enospc_debug}, {@ssd_spread}, {@clear_cache}]}, 0x3, 0x55a3, &(0x7f0000005600)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x0)
fallocate(r1, 0x10, 0xfbf7, 0xd49)

5.409750941s ago: executing program 2 (id=935):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_pidfd_open(0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
shutdown(r4, 0x2)

5.042688716s ago: executing program 1 (id=937):
getpid()
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f15655595860608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"})
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
unshare(0x4000280)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}})
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000805}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

4.952973675s ago: executing program 1 (id=938):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x48051}, 0x240000c4)
r4 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f00000006c0)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r4, 0x100847c0, 0x0, 0x1, 0x0, 0x0)

4.671374612s ago: executing program 1 (id=939):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x2d, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000280)="0f30", 0x2, 0x0, 0x0, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0)

3.723717326s ago: executing program 1 (id=940):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x9}]}}}]}, 0x40}}, 0x0)

3.676266232s ago: executing program 3 (id=941):
sched_setscheduler(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28)

3.263939027s ago: executing program 1 (id=942):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
syz_usb_connect$uac1(0x1, 0x96, &(0x7f0000000600)=ANY=[@ANYBLOB="12010002000000086b1d0101400001020301090284000301ff300609040000"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "980127", 0x0, 0x2f, 0x0, @mcast2, @private1, [@dstopts={0x88}]}}}}}}}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0x3, 0x82}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$cdc_ncm(0x5, 0x0, 0x0, &(0x7f0000000180)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x0, 0xac, 0xb, 0x40, 0x9}, 0x5, &(0x7f0000000840)={0x5, 0xf, 0x5}, 0x1, [{0x78, &(0x7f00000002c0)=@string={0x78, 0x3, "9cfca9136907304a0e8716322eae07966dabd446f7108b611b96e81dff0a6ed879dc14d0f25c8b21edfb373b335d042be8ee80dc43a77d7b0f9976d92d81a5880203514f4853fb9e79af87790dac04c181a7db744ac0467b210dba7e38667d6a6c8ed1daa4f69267a50c91d0ebf9caa75ebe30ef3918"}}]})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

2.771280869s ago: executing program 3 (id=943):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@gettfilter={0x24, 0x25, 0x6ce324a938346939, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)

2.665030305s ago: executing program 4 (id=944):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44020}, 0x20000054)

2.615841995s ago: executing program 4 (id=945):
r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x7)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$read(0xb, r4, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
r5 = gettid()
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
setreuid(0x0, 0xee01)

2.573111084s ago: executing program 0 (id=946):
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0xfd, 0x11f3, &(0x7f0000001b80)="$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")
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000440), 0x1000a)

2.463086805s ago: executing program 3 (id=947):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
write$tcp_congestion(r0, 0x0, 0x0)

1.738800397s ago: executing program 3 (id=948):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000000080), 0x3, 0x56d, &(0x7f0000000c00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x4b, 0x2, {0xb}}, 0x36f0516f)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000)

1.62498939s ago: executing program 4 (id=949):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x48051}, 0x240000c4)
r4 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f00000006c0)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r4, 0x100847c0, 0x0, 0x1, 0x0, 0x0)

1.285821004s ago: executing program 4 (id=950):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty, 0x8000000}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000120001010000000000000000000000000000000000170000000000000000000000000000fa04c63136e330375e326c6b55"], 0x4c}}, 0x2400c800)

1.120287066s ago: executing program 4 (id=951):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)={[{@coherency_buffered}, {@heartbeat_none}, {@coherency_full}, {@commit={'commit', 0x3d, 0x4}}, {@heartbeat_none}, {@localflocks}, {@intr}, {@dir_resv_level}, {@noacl}, {@resv_level={'resv_level', 0x3d, 0x1}}, {@journal_async_commit}, {@commit={'commit', 0x3d, 0xf9}}]}, 0x9, 0x442b, &(0x7f0000004480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000002300)='./file1\x00', 0x141842, 0x100)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
read$FUSE(r0, 0x0, 0x0)
write$FUSE_BMAP(r1, &(0x7f0000000080)={0x18, 0xffffffffffffffda, 0x0, {0x2}}, 0x18)
ftruncate(r1, 0x2007ff3)
copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffa003e459, 0x700000000000000)

960.921937ms ago: executing program 2 (id=952):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x9}]}}}]}, 0x40}}, 0x0)

926.834704ms ago: executing program 2 (id=953):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)

555.762225ms ago: executing program 0 (id=954):
syz_open_dev$usbmon(&(0x7f0000000040), 0x2, 0xa2040)
bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0500000004000000e27f000001"], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x8)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r3, &(0x7f0000001240)=""/102400, 0x200000, 0x0)

391.938034ms ago: executing program 2 (id=955):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44020}, 0x20000054)

83.5465ms ago: executing program 2 (id=956):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0)

0s ago: executing program 1 (id=957):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_pts(0xffffffffffffffff, 0x141601)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, 0x0, &(0x7f0000000000))
shmctl$IPC_RMID(0x0, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04221001ffffffb7f33317e62f372f6307e304ed3a12202884fd80f49221809980c1d27ac77b78344e71b708286f5f1000dee7e168806cd2c0d6388f86aeec364d4b6789f8b6c04109fd"], 0x13)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.22' (ED25519) to the list of known hosts.
[   41.920058][ T6477] cgroup: Unknown subsys name 'net'
[   42.118146][ T6477] cgroup: Unknown subsys name 'cpuset'
[   42.122510][ T6477] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.445930][ T6477] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SS
[   43.973581][ T6501] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   43.974780][ T6501] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   43.975564][ T6501] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   43.975922][ T6501] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   43.976378][ T6501] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   43.976528][ T6501] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   43.977653][ T6501] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   43.977798][ T6501] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   43.978530][ T6501] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   43.978673][ T6501] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   43.986630][ T6056] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   43.997153][ T6056] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   43.997453][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   44.001505][ T6056] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   44.003688][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   44.006802][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   44.006864][ T6056] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   44.006982][ T6056] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   44.009276][   T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   44.016578][ T6501] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   44.020350][   T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   44.022889][   T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   44.027015][ T6500] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   44.029347][ T6500] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   44.029888][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   44.296899][ T6489] chnl_net:caif_netlink_parms(): no params data found
[   44.341721][ T6488] chnl_net:caif_netlink_parms(): no params data found
[   44.411786][ T6490] chnl_net:caif_netlink_parms(): no params data found
[   44.529422][ T6489] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.529549][ T6489] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.529671][ T6489] bridge_slave_0: entered allmulticast mode
[   44.530534][ T6489] bridge_slave_0: entered promiscuous mode
[   44.532393][ T6489] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.532449][ T6489] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.532570][ T6489] bridge_slave_1: entered allmulticast mode
[   44.533374][ T6489] bridge_slave_1: entered promiscuous mode
[   44.589203][ T6489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.592079][ T6493] chnl_net:caif_netlink_parms(): no params data found
[   44.595911][ T6489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.634885][ T6487] chnl_net:caif_netlink_parms(): no params data found
[   44.649249][ T6489] team0: Port device team_slave_0 added
[   44.649579][ T6488] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.649645][ T6488] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.649738][ T6488] bridge_slave_0: entered allmulticast mode
[   44.650582][ T6488] bridge_slave_0: entered promiscuous mode
[   44.652602][ T6488] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.652645][ T6488] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.652765][ T6488] bridge_slave_1: entered allmulticast mode
[   44.653560][ T6488] bridge_slave_1: entered promiscuous mode
[   44.677862][ T6490] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.677931][ T6490] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.678031][ T6490] bridge_slave_0: entered allmulticast mode
[   44.678880][ T6490] bridge_slave_0: entered promiscuous mode
[   44.684042][ T6489] team0: Port device team_slave_1 added
[   44.698311][ T6490] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.698406][ T6490] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.698499][ T6490] bridge_slave_1: entered allmulticast mode
[   44.699312][ T6490] bridge_slave_1: entered promiscuous mode
[   44.733804][ T6488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.751645][ T6490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.769997][ T6488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.777886][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_0
[   44.779860][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.785290][ T6489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   44.786805][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_1
[   44.786831][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.786863][ T6489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   44.818982][ T6490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.874954][ T6488] team0: Port device team_slave_0 added
[   44.878240][ T6488] team0: Port device team_slave_1 added
[   44.882778][ T6489] hsr_slave_0: entered promiscuous mode
[   44.885086][ T6489] hsr_slave_1: entered promiscuous mode
[   44.913611][ T6490] team0: Port device team_slave_0 added
[   44.928582][ T6493] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.930610][ T6493] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.932723][ T6493] bridge_slave_0: entered allmulticast mode
[   44.935296][ T6493] bridge_slave_0: entered promiscuous mode
[   44.952386][ T6490] team0: Port device team_slave_1 added
[   44.954430][ T6487] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.954527][ T6487] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.954662][ T6487] bridge_slave_0: entered allmulticast mode
[   44.958474][ T6487] bridge_slave_0: entered promiscuous mode
[   44.959738][ T6487] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.959781][ T6487] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.959880][ T6487] bridge_slave_1: entered allmulticast mode
[   44.960871][ T6487] bridge_slave_1: entered promiscuous mode
[   44.961683][ T6493] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.961728][ T6493] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.961823][ T6493] bridge_slave_1: entered allmulticast mode
[   44.962674][ T6493] bridge_slave_1: entered promiscuous mode
[   44.974475][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_0
[   44.974504][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.974543][ T6488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   44.978531][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_1
[   44.978557][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.978589][ T6488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.060594][ T6490] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.060651][ T6490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.060691][ T6490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.061770][ T6490] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.061794][ T6490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.061827][ T6490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.070060][ T6487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.071789][ T6487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.088554][ T6493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.090443][ T6493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.098625][ T6488] hsr_slave_0: entered promiscuous mode
[   45.099391][ T6488] hsr_slave_1: entered promiscuous mode
[   45.099741][ T6488] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   45.099809][ T6488] Cannot create hsr debugfs directory
[   45.138478][ T6490] hsr_slave_0: entered promiscuous mode
[   45.138956][ T6490] hsr_slave_1: entered promiscuous mode
[   45.139262][ T6490] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   45.139290][ T6490] Cannot create hsr debugfs directory
[   45.141061][ T6487] team0: Port device team_slave_0 added
[   45.163078][ T6487] team0: Port device team_slave_1 added
[   45.173568][ T6493] team0: Port device team_slave_0 added
[   45.176685][ T6493] team0: Port device team_slave_1 added
[   45.241914][ T6487] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.241963][ T6487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.242008][ T6487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.243121][ T6487] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.243146][ T6487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.243190][ T6487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.246637][ T6493] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.246664][ T6493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.246697][ T6493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.247798][ T6493] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.247822][ T6493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.247855][ T6493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.359513][ T6493] hsr_slave_0: entered promiscuous mode
[   45.360004][ T6493] hsr_slave_1: entered promiscuous mode
[   45.360327][ T6493] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   45.360356][ T6493] Cannot create hsr debugfs directory
[   45.419966][ T6487] hsr_slave_0: entered promiscuous mode
[   45.422246][ T6487] hsr_slave_1: entered promiscuous mode
[   45.424117][ T6487] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   45.426674][ T6487] Cannot create hsr debugfs directory
[   45.514667][ T6489] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   45.519781][ T6489] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   45.546063][ T6489] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   45.564298][ T6489] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   45.622141][ T6488] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   45.626146][ T6488] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   45.629887][ T6488] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   45.646682][ T6488] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   45.683767][ T6490] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   45.689912][ T6490] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   45.694674][ T6490] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   45.700854][ T6490] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   45.754206][ T6489] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.770184][ T6493] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   45.773661][ T6493] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   45.786051][ T6493] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   45.791935][ T6489] 8021q: adding VLAN 0 to HW filter on device team0
[   45.806412][ T6493] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   45.819953][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.820063][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.840017][ T6487] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   45.845863][ T3593] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.845932][ T3593] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.853218][ T6487] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   45.857424][ T6487] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   45.884504][ T6487] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   45.939242][ T6488] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.957033][ T6490] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.962006][ T6488] 8021q: adding VLAN 0 to HW filter on device team0
[   45.969686][ T6493] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.977004][ T6493] 8021q: adding VLAN 0 to HW filter on device team0
[   45.988123][ T3593] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.988216][ T3593] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.989204][ T3593] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.989249][ T3593] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.004350][  T462] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.004428][  T462] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.010009][ T6499] Bluetooth: hci1: command tx timeout
[   46.027013][ T6490] 8021q: adding VLAN 0 to HW filter on device team0
[   46.048873][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.048940][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.061681][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.061758][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.086278][ T6499] Bluetooth: hci4: command tx timeout
[   46.086451][ T6499] Bluetooth: hci2: command tx timeout
[   46.086562][ T6499] Bluetooth: hci3: command tx timeout
[   46.086653][ T6499] Bluetooth: hci0: command tx timeout
[   46.112002][   T14] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.112091][   T14] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.120563][ T6489] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.140515][ T6489] veth0_vlan: entered promiscuous mode
[   46.145558][ T6489] veth1_vlan: entered promiscuous mode
[   46.174881][ T6487] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.183998][ T6489] veth0_macvtap: entered promiscuous mode
[   46.193627][ T6489] veth1_macvtap: entered promiscuous mode
[   46.233555][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.240257][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.243748][ T6489] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.246526][ T6489] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.248919][ T6489] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.251323][ T6489] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.257977][ T6487] 8021q: adding VLAN 0 to HW filter on device team0
[   46.270719][  T462] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.270801][  T462] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.271615][  T462] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.271658][  T462] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.294225][ T6493] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.309450][ T6487] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   46.312304][ T6487] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.409320][  T213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.409409][  T213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.466937][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.467004][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.487738][ T6490] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.533663][ T6490] veth0_vlan: entered promiscuous mode
[   46.554904][ T6490] veth1_vlan: entered promiscuous mode
[   46.567442][ T6488] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.586585][ T6487] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.590087][ T6489] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   46.602158][ T6490] veth0_macvtap: entered promiscuous mode
[   46.603962][ T6490] veth1_macvtap: entered promiscuous mode
[   46.630998][ T6490] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.650380][ T6490] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.651839][ T6490] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.651877][ T6490] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.651907][ T6490] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.651935][ T6490] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.673811][ T6573] loop2: detected capacity change from 0 to 764
[   46.688296][ T6573] rock: directory entry would overflow storage
[   46.690239][ T6573] rock: sig=0x4654, size=5, remaining=4
[   46.707106][ T6573] random: crng reseeded on system resumption
[   46.713041][ T6488] veth0_vlan: entered promiscuous mode
[   46.737287][ T6488] veth1_vlan: entered promiscuous mode
[   46.769483][ T6493] veth0_vlan: entered promiscuous mode
[   46.772474][ T6493] veth1_vlan: entered promiscuous mode
[   46.803357][ T6487] veth0_vlan: entered promiscuous mode
[   46.809638][ T6493] veth0_macvtap: entered promiscuous mode
[   46.830999][ T6493] veth1_macvtap: entered promiscuous mode
[   46.846346][ T6487] veth1_vlan: entered promiscuous mode
[   46.857189][ T6487] veth0_macvtap: entered promiscuous mode
[   46.860670][ T6487] veth1_macvtap: entered promiscuous mode
[   46.868814][ T6487] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.873554][ T6487] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.879022][ T6487] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.881537][ T6487] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.883906][ T6487] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.886704][ T6487] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.909983][ T6488] veth0_macvtap: entered promiscuous mode
[   46.932996][ T6493] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.976825][ T6488] veth1_macvtap: entered promiscuous mode
[   47.015062][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.016166][ T6493] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.017838][ T6493] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.017877][ T6493] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.017906][ T6493] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.017935][ T6493] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.023889][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.032936][ T6488] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.034749][ T6488] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.039378][ T3593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.039407][ T3593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.048704][ T6488] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.051434][ T6488] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.052750][ T6488] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.052782][ T6488] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.070583][   T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.070635][   T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.091063][   T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.091113][   T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.191664][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.191730][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.287159][   T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.287234][   T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.384706][   T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.384763][   T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.426596][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.426659][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.472527][ T6582] loop1: detected capacity change from 0 to 32768
[   47.476666][ T6582] =======================================================
[   47.476666][ T6582] WARNING: The mand mount option has been deprecated and
[   47.476666][ T6582]          and is ignored by this kernel. Remove the mand
[   47.476666][ T6582]          option from the mount to silence this warning.
[   47.476666][ T6582] =======================================================
[   47.562444][ T6582] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[   47.575866][ T6589] loop4: detected capacity change from 0 to 128
[   47.578491][ T6589] vfat: Unknown parameter '184467440737095516150x000000000000002300000000000000000000043'
[   47.591512][ T6582] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   47.842236][ T6603] loop2: detected capacity change from 0 to 8
[   47.842818][ T6603] squashfs: Unknown parameter '
'
[   48.089063][ T6491] Bluetooth: hci1: command tx timeout
[   48.334802][ T6491] Bluetooth: hci0: command tx timeout
[   48.335116][ T6491] Bluetooth: hci3: command tx timeout
[   48.335545][ T6491] Bluetooth: hci2: command tx timeout
[   48.335866][ T6491] Bluetooth: hci4: command tx timeout
[   49.406436][ T6609] loop4: detected capacity change from 0 to 32768
[   49.482331][ T6616] loop2: detected capacity change from 0 to 32768
[   49.508273][ T6609] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[   49.508404][ T6609] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[   49.515371][ T6490] ocfs2: Unmounting device (7,1) on (node local)
[   49.517662][ T6616] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[   49.526165][ T6621] loop3: detected capacity change from 0 to 128
[   49.531302][ T6609] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   49.566832][ T6621] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[   49.576428][ T6616] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   49.641141][ T6621] netlink: 88 bytes leftover after parsing attributes in process `syz.3.14'.
[   50.666944][ T6499] Bluetooth: hci1: command tx timeout
[   50.667118][ T6499] Bluetooth: hci4: command tx timeout
[   50.667228][ T6499] Bluetooth: hci2: command tx timeout
[   50.667308][ T6499] Bluetooth: hci3: command tx timeout
[   50.667413][ T6499] Bluetooth: hci0: command tx timeout
[   50.739886][ T6628] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma?
[   51.143691][ T6636] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[   51.236919][ T6493] ocfs2: Unmounting device (7,4) on (node local)
[   51.454159][ T6644] vlan2: entered allmulticast mode
[   51.456172][ T6644] macvtap0: entered allmulticast mode
[   51.456237][ T6644] veth0_macvtap: entered allmulticast mode
[   51.644088][ T6489] ocfs2: Unmounting device (7,2) on (node local)
[   51.758943][ T6649] loop3: detected capacity change from 0 to 16
[   51.785396][ T6649] erofs (device loop3): mounted with root inode @ nid 36.
[   52.441698][ T6640] loop1: detected capacity change from 0 to 32768
[   52.468728][ T6640] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[   52.474663][ T6650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   52.481641][ T6650] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   52.521209][ T6640] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   52.726865][ T6499] Bluetooth: hci3: command tx timeout
[   52.726940][ T6499] Bluetooth: hci2: command tx timeout
[   52.726992][ T6499] Bluetooth: hci4: command tx timeout
[   52.727031][ T6499] Bluetooth: hci1: command tx timeout
[   52.733302][ T6491] Bluetooth: hci0: command tx timeout
[   53.553658][ T6653] loop3: detected capacity change from 0 to 32768
[   53.574165][ T6653] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[   53.577433][ T6653] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[   53.613777][ T6662] loop2: detected capacity change from 0 to 16
[   53.616998][ T6653] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   53.720322][ T6662] erofs (device loop2): mounted with root inode @ nid 36.
[   53.730706][ T6490] ocfs2: Unmounting device (7,1) on (node local)
[   56.051150][ T6487] ocfs2: Unmounting device (7,3) on (node local)
[   56.139737][ T6683] loop2: detected capacity change from 0 to 16
[   56.147945][ T6683] erofs (device loop2): mounted with root inode @ nid 36.
[   57.173367][ T6676] loop1: detected capacity change from 0 to 32768
[   57.208531][ T6676] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[   57.218142][ T6676] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   57.238049][ T6695] FAULT_INJECTION: forcing a failure.
[   57.238049][ T6695] name failslab, interval 1, probability 0, space 0, times 1
[   57.241605][ T6695] CPU: 0 UID: 0 PID: 6695 Comm: syz.2.29 Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT 
[   57.241627][ T6695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   57.241634][ T6695] Call trace:
[   57.241638][ T6695]  show_stack+0x2c/0x3c (C)
[   57.241655][ T6695]  __dump_stack+0x30/0x40
[   57.241666][ T6695]  dump_stack_lvl+0xd8/0x12c
[   57.241676][ T6695]  dump_stack+0x1c/0x28
[   57.241686][ T6695]  should_fail_ex+0x41c/0x594
[   57.241698][ T6695]  should_failslab+0xc0/0x128
[   57.241711][ T6695]  kmem_cache_alloc_node_noprof+0x88/0x3f4
[   57.241726][ T6695]  __alloc_skb+0x144/0x2ec
[   57.241740][ T6695]  netlink_alloc_large_skb+0xd8/0x118
[   57.241752][ T6695]  netlink_sendmsg+0x498/0x930
[   57.241764][ T6695]  ____sys_sendmsg+0x490/0x7b8
[   57.241777][ T6695]  ___sys_sendmsg+0x204/0x278
[   57.241790][ T6695]  __arm64_sys_sendmsg+0x184/0x238
[   57.241803][ T6695]  invoke_syscall+0x98/0x2b8
[   57.241814][ T6695]  el0_svc_common+0x130/0x23c
[   57.241824][ T6695]  do_el0_svc+0x48/0x58
[   57.241834][ T6695]  el0_svc+0x58/0x17c
[   57.241848][ T6695]  el0t_64_sync_handler+0x78/0x108
[   57.241861][ T6695]  el0t_64_sync+0x198/0x19c
[   57.358084][ T6685] loop3: detected capacity change from 0 to 32768
[   57.459470][ T6685] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[   57.459549][ T6685] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[   57.539619][ T6685] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   58.779374][ T6708] RDS: rds_bind could not find a transport for fe88::3, load rds_tcp or rds_rdma?
[   59.208801][   T31] audit: type=1326 audit(58.530:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6702 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb15a768 code=0x7ffc0000
[   59.214337][   T31] audit: type=1326 audit(58.530:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6702 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb15a768 code=0x7ffc0000
[   59.220370][   T31] audit: type=1326 audit(58.530:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6702 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=425 compat=0 ip=0xffffbb15a768 code=0x7ffc0000
[   59.226098][   T31] audit: type=1326 audit(58.540:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6702 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffbb15a79c code=0x7ffc0000
[   59.233011][   T31] audit: type=1326 audit(58.540:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6702 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb15a768 code=0x7ffc0000
[   59.238966][   T31] audit: type=1326 audit(58.540:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6702 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb15a768 code=0x7ffc0000
[   59.244826][   T31] audit: type=1326 audit(58.550:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6702 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffffbb15a768 code=0x7ffc0000
[   59.250779][   T31] audit: type=1326 audit(58.550:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6702 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb15a768 code=0x7ffc0000
[   59.305756][   T31] audit: type=1326 audit(58.550:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6702 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb15a768 code=0x7ffc0000
[   59.305825][   T31] audit: type=1326 audit(58.550:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6702 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb15a768 code=0x7ffc0000
[   59.379619][ T6698] loop0: detected capacity change from 0 to 32768
[   59.403198][ T6698] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.30 (6698)
[   59.738984][ T6721] RDS: rds_bind could not find a transport for fe88::3, load rds_tcp or rds_rdma?
[   60.333707][ T6698] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   60.333871][ T6698] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm
[   60.333936][ T6698] BTRFS info (device loop0): using free-space-tree
[   60.346419][ T6726] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.353768][ T6726] FAULT_INJECTION: forcing a failure.
[   60.353768][ T6726] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   60.353831][ T6726] CPU: 1 UID: 0 PID: 6726 Comm: syz.2.35 Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT 
[   60.353847][ T6726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   60.353854][ T6726] Call trace:
[   60.353859][ T6726]  show_stack+0x2c/0x3c (C)
[   60.353875][ T6726]  __dump_stack+0x30/0x40
[   60.353887][ T6726]  dump_stack_lvl+0xd8/0x12c
[   60.353897][ T6726]  dump_stack+0x1c/0x28
[   60.353906][ T6726]  should_fail_ex+0x41c/0x594
[   60.353918][ T6726]  should_fail+0x14/0x24
[   60.353929][ T6726]  should_fail_usercopy+0x20/0x30
[   60.353940][ T6726]  _inline_copy_from_user+0x40/0x180
[   60.353952][ T6726]  ___sys_sendmsg+0x144/0x278
[   60.353969][ T6726]  __arm64_sys_sendmsg+0x184/0x238
[   60.353983][ T6726]  invoke_syscall+0x98/0x2b8
[   60.353994][ T6726]  el0_svc_common+0x130/0x23c
[   60.354004][ T6726]  do_el0_svc+0x48/0x58
[   60.354014][ T6726]  el0_svc+0x58/0x17c
[   60.354028][ T6726]  el0t_64_sync_handler+0x78/0x108
[   60.354041][ T6726]  el0t_64_sync+0x198/0x19c
[   60.476994][ T6698] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[   60.479053][ T6698] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[   60.479350][ T6698] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[   60.479534][ T6698] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[   60.479707][ T6698] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[   60.479901][ T6698] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[   60.481256][ T6698] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[   60.481447][ T6698] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[   60.481636][ T6698] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[   60.481831][ T6698] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[   60.482030][ T6698] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[   60.484040][ T6698] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[   60.532761][ T6490] ocfs2: Unmounting device (7,1) on (node local)
[   60.539442][ T6698] BTRFS error (device loop0): open_ctree failed: -12
[   60.559836][ T6487] ocfs2: Unmounting device (7,3) on (node local)
[   60.630000][ T6746] loop4: detected capacity change from 0 to 1024
[   61.059914][ T6761] loop1: detected capacity change from 0 to 16
[   61.132152][ T6761] erofs (device loop1): mounted with root inode @ nid 36.
[   61.696150][ T6765] loop2: detected capacity change from 0 to 128
[   61.701024][ T6766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   61.703985][ T6766] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   61.737581][ T6765] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   61.782620][ T6765] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:376: inode #2: comm syz.2.43: No space for directory leaf checksum. Please run e2fsck -D.
[   61.782740][ T6765] EXT4-fs error (device loop2): __ext4_find_entry:1628: inode #2: comm syz.2.43: checksumming directory block 0
[   61.921566][ T6772] binder: 6771:6772 ioctl c00c6211 0 returned -14
[   62.718059][ T6769] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:376: inode #2: comm syz.2.43: No space for directory leaf checksum. Please run e2fsck -D.
[   62.724866][ T6769] EXT4-fs error (device loop2): __ext4_find_entry:1628: inode #2: comm syz.2.43: checksumming directory block 0
[   62.855103][ T6489] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   64.727866][ T2390] ieee802154 phy0 wpan0: encryption failed: -22
[   64.728012][ T2390] ieee802154 phy1 wpan1: encryption failed: -22
[   64.916807][ T6789] binder: 6788:6789 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   64.916886][ T6789] binder: 6789 RLIMIT_NICE not set
[   65.104813][ T6796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   65.105144][ T6796] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   65.382866][ T6803] loop0: detected capacity change from 0 to 164
[   66.026489][ T6806] binder: 6805:6806 got transaction to invalid handle, 1
[   66.026730][ T6806] binder: 6806:6805 cannot find target node
[   66.026761][ T6806] binder: 6805:6806 transaction call to 0:0 failed 3/29201/-22, code 0 size 0-0 line 3150
[   66.026810][ T6806] binder: 6805:6806 ioctl c0306201 20000780 returned -14
[   66.040606][ T6540] binder: undelivered TRANSACTION_ERROR: 29201
[   66.213427][ T6812] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   67.397595][ T6787] loop1: detected capacity change from 0 to 40427
[   67.423452][ T6787] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   67.423562][ T6787] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   67.515227][ T6787] F2FS-fs (loop1): invalid crc_offset: 33558524
[   68.205343][ T6787] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-4)
[   68.525586][ T6858] syz.3.74 uses obsolete (PF_INET,SOCK_PACKET)
[   69.692645][ T6871] loop0: detected capacity change from 0 to 2048
[   69.696725][ T6871] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   69.781703][ T6872] netlink: 'syz.1.71': attribute type 1 has an invalid length.
[   70.156622][ T3888] cfg80211: failed to load regulatory.db
[   71.083845][ T6896] loop3: detected capacity change from 0 to 2048
[   71.153207][ T6896] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   71.387841][ T6546] IPVS: starting estimator thread 0...
[   71.486115][ T6903] IPVS: using max 29 ests per chain, 69600 per kthread
[   71.911404][ T6901] loop0: detected capacity change from 0 to 8192
[   71.925143][ T6901] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   72.984872][   T31] kauditd_printk_skb: 142 callbacks suppressed
[   72.984939][   T31] audit: type=1326 audit(72.710:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6921 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb15a768 code=0x7ffc0000
[   72.984987][   T31] audit: type=1326 audit(72.710:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6921 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb15a768 code=0x7ffc0000
[   72.985032][   T31] audit: type=1326 audit(72.710:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6921 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffbb15a768 code=0x7ffc0000
[   72.985076][   T31] audit: type=1326 audit(72.710:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6921 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb15a768 code=0x7ffc0000
[   72.985119][   T31] audit: type=1326 audit(72.710:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6921 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb15a768 code=0x7ffc0000
[   72.985228][   T31] audit: type=1326 audit(72.710:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6921 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbb15a768 code=0x7ffc0000
[   72.985276][   T31] audit: type=1326 audit(72.710:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6921 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb15a768 code=0x7ffc0000
[   72.985320][   T31] audit: type=1326 audit(72.710:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6921 comm="syz.2.93" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbb15a768 code=0x7ffc0000
[   73.789557][ T6927] sctp: failed to load transform for md5: -2
[   74.005656][ T6941] binder: 6940:6941 got reply transaction with no transaction stack
[   74.005722][ T6941] binder: 6940:6941 transaction reply to 0:0 failed 4/29201/-71, code 0 size 0-0 line 3051
[   74.490755][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.92'.
[   75.315957][ T6950] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[   75.316091][ T6950] Error validating options; rc = [-22]
[   76.085091][ T6956] loop1: detected capacity change from 0 to 1024
[   77.110187][ T6956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.166009][ T6546] binder: undelivered TRANSACTION_ERROR: 29201
[   77.181013][ T6966] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   77.248537][   T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   77.434330][   T24] usb 1-1: Using ep0 maxpacket: 8
[   77.440548][   T24] usb 1-1: config 0 has no interfaces?
[   77.440660][   T24] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   77.440708][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.481306][ T6971] loop3: detected capacity change from 0 to 256
[   77.507142][   T45] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   77.510768][   T45] EXT4-fs (loop1): This should not happen!! Data will be lost
[   77.510768][   T45] 
[   77.513831][   T45] EXT4-fs (loop1): Total free blocks count 0
[   77.516342][   T45] EXT4-fs (loop1): Free/Dirty block details
[   77.518207][   T45] EXT4-fs (loop1): free_blocks=4293918720
[   77.519965][   T45] EXT4-fs (loop1): dirty_blocks=16
[   77.521646][   T45] EXT4-fs (loop1): Block reservation details
[   77.521694][   T45] EXT4-fs (loop1): i_reserved_data_blocks=1
[   77.534284][   T24] usb 1-1: config 0 descriptor??
[   77.546768][ T6971] exfat: Deprecated parameter 'utf8'
[   77.546853][ T6971] exfat: Deprecated parameter 'utf8'
[   77.554818][ T6490] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.592222][ T6971] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d)
[   78.695486][ T6540] usb 1-1: USB disconnect, device number 2
[   78.837060][ T6992] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[   78.837163][ T6992] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   78.837730][ T6992] vhci_hcd vhci_hcd.0: Device attached
[   78.854403][ T6992] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6)
[   78.854440][ T6992] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   78.854508][ T6992] vhci_hcd vhci_hcd.0: Device attached
[   78.855410][ T6992] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   78.866620][ T6989] netlink: 'syz.2.107': attribute type 4 has an invalid length.
[   78.872310][ T6992] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(10)
[   78.872346][ T6992] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   78.872407][ T6992] vhci_hcd vhci_hcd.0: Device attached
[   78.893669][ T6992] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(12)
[   78.893705][ T6992] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   78.893775][ T6992] vhci_hcd vhci_hcd.0: Device attached
[   78.894511][ T6992] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   78.895154][ T6992] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   78.929031][ T6992] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(18)
[   78.929066][ T6992] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   78.929126][ T6992] vhci_hcd vhci_hcd.0: Device attached
[   78.930751][ T6993] vhci_hcd: connection closed
[   78.933514][ T7001] vhci_hcd: connection closed
[   78.938312][   T12] vhci_hcd: stop threads
[   78.938717][   T12] vhci_hcd: release socket
[   78.938761][   T12] vhci_hcd: disconnect device
[   78.939941][ T6999] vhci_hcd: connection closed
[   78.940219][ T6997] vhci_hcd: connection closed
[   78.940454][ T6995] vhci_hcd: connection closed
[   78.940602][   T12] vhci_hcd: stop threads
[   78.940628][   T12] vhci_hcd: release socket
[   78.940655][   T12] vhci_hcd: disconnect device
[   78.941376][   T12] vhci_hcd: stop threads
[   78.941400][   T12] vhci_hcd: release socket
[   78.941426][   T12] vhci_hcd: disconnect device
[   78.951229][   T12] vhci_hcd: stop threads
[   78.951255][   T12] vhci_hcd: release socket
[   78.951282][   T12] vhci_hcd: disconnect device
[   78.951472][   T12] vhci_hcd: stop threads
[   78.951490][   T12] vhci_hcd: release socket
[   78.951516][   T12] vhci_hcd: disconnect device
[   79.902463][ T7018] netlink: 'syz.4.112': attribute type 1 has an invalid length.
[   79.902527][ T7018] netlink: 'syz.4.112': attribute type 2 has an invalid length.
[   79.975499][ T7021] loop0: detected capacity change from 0 to 1024
[   80.062938][ T7021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.120951][ T7021] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   80.159011][ T7021] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28
[   80.159167][ T7021] EXT4-fs (loop0): This should not happen!! Data will be lost
[   80.159167][ T7021] 
[   80.159220][ T7021] EXT4-fs (loop0): Total free blocks count 0
[   80.159256][ T7021] EXT4-fs (loop0): Free/Dirty block details
[   80.159289][ T7021] EXT4-fs (loop0): free_blocks=4293918720
[   80.159322][ T7021] EXT4-fs (loop0): dirty_blocks=64
[   80.159349][ T7021] EXT4-fs (loop0): Block reservation details
[   80.159376][ T7021] EXT4-fs (loop0): i_reserved_data_blocks=4
[   80.938516][ T6886] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28
[   81.169415][ T7042] binder: 7039:7042 tried to acquire reference to desc 0, got 1 instead
[   81.396511][ T7011] syz.4.112 (7011): drop_caches: 2
[   82.217742][ T6282] binder: undelivered transaction 9, process died.
[   82.250489][ T6282] binder: undelivered TRANSACTION_COMPLETE
[   82.264508][ T7055] netlink: 'syz.2.122': attribute type 1 has an invalid length.
[   82.509547][ T7055] 8021q: adding VLAN 0 to HW filter on device bond1
[   83.210089][ T7055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.122'.
[   83.358962][ T6282] kernel read not supported for file /snd/controlC0 (pid: 6282 comm: kworker/0:3)
[   83.381577][ T7075] loop4: detected capacity change from 0 to 1024
[   84.129154][ T7075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.155875][ T7075] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   84.156772][ T7075] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28
[   84.156811][ T7075] EXT4-fs (loop4): This should not happen!! Data will be lost
[   84.156811][ T7075] 
[   84.156836][ T7075] EXT4-fs (loop4): Total free blocks count 0
[   84.156858][ T7075] EXT4-fs (loop4): Free/Dirty block details
[   84.156882][ T7075] EXT4-fs (loop4): free_blocks=4293918720
[   84.156906][ T7075] EXT4-fs (loop4): dirty_blocks=64
[   84.156928][ T7075] EXT4-fs (loop4): Block reservation details
[   84.156949][ T7075] EXT4-fs (loop4): i_reserved_data_blocks=4
[   84.934044][ T6886] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28
[   85.230172][ T7108] Bluetooth: MGMT ver 1.23
[   86.070064][ T7106] binder: 7105:7106 tried to acquire reference to desc 0, got 1 instead
[   86.074517][ T7106] binder: 7105:7106 got transaction with invalid offsets ptr
[   86.080168][ T7106] binder: 7105:7106 transaction async to 7105:0 failed 14/29201/-22, code 0 size 104-24 line 3683
[   86.080371][ T7112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.235359][ T1766] binder: undelivered TRANSACTION_ERROR: 29201
[   87.339633][ T7055] bond1 (unregistering): Released all slaves
[   87.373204][ T7098] netlink: 28 bytes leftover after parsing attributes in process `syz.3.135'.
[   87.373297][ T7098] netlink: 28 bytes leftover after parsing attributes in process `syz.3.135'.
[   87.386691][ T7129] loop0: detected capacity change from 0 to 1024
[   87.399229][ T7112] warning: `syz.3.135' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   87.416032][ T7129] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.500402][ T7129] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   87.500576][ T7129] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28
[   87.500614][ T7129] EXT4-fs (loop0): This should not happen!! Data will be lost
[   87.500614][ T7129] 
[   87.500644][ T7129] EXT4-fs (loop0): Total free blocks count 0
[   87.500672][ T7129] EXT4-fs (loop0): Free/Dirty block details
[   87.500702][ T7129] EXT4-fs (loop0): free_blocks=4293918720
[   87.500732][ T7129] EXT4-fs (loop0): dirty_blocks=64
[   87.500759][ T7129] EXT4-fs (loop0): Block reservation details
[   87.500786][ T7129] EXT4-fs (loop0): i_reserved_data_blocks=4
[   87.510277][ T7129] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28
[   87.593476][ T7136] loop3: detected capacity change from 0 to 256
[   87.741907][ T7138] loop1: detected capacity change from 0 to 8
[   88.356284][ T7143] netlink: 'syz.3.150': attribute type 1 has an invalid length.
[   88.538112][ T7146] wg2: entered promiscuous mode
[   88.538223][ T7146] wg2: entered allmulticast mode
[   89.507558][ T7158] binder: 7154:7158 ioctl 4018620d 0 returned -22
[   89.512545][ T7158] binder: 7154:7158 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2
[   89.512802][ T7158] binder: 7154:7158 got reply transaction with no transaction stack
[   89.512922][ T7158] binder: 7154:7158 transaction reply to 0:0 failed 17/29201/-71, code 0 size 88-24 line 3051
[   90.128127][ T3888] binder: undelivered TRANSACTION_ERROR: 29201
[   90.218168][ T7163] netlink: 'syz.1.154': attribute type 1 has an invalid length.
[   90.896165][ T7168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.155'.
[   90.948159][ T7170] loop4: detected capacity change from 0 to 1024
[   90.978913][ T7170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.981725][ T7177] Bluetooth: hci0: too big key_count value 12436
[   91.027613][ T7167] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   91.042672][ T7170] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   91.042832][ T7170] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28
[   91.042870][ T7170] EXT4-fs (loop4): This should not happen!! Data will be lost
[   91.042870][ T7170] 
[   91.042901][ T7170] EXT4-fs (loop4): Total free blocks count 0
[   91.043082][ T7170] EXT4-fs (loop4): Free/Dirty block details
[   91.043134][ T7170] EXT4-fs (loop4): free_blocks=4293918720
[   91.043195][ T7170] EXT4-fs (loop4): dirty_blocks=64
[   91.043231][ T7170] EXT4-fs (loop4): Block reservation details
[   91.043259][ T7170] EXT4-fs (loop4): i_reserved_data_blocks=4
[   91.049296][ T7163] 8021q: adding VLAN 0 to HW filter on device bond1
[   91.050297][ T3593] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   91.104023][ T7170] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28
[   91.167762][   T14] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   91.364098][ T7184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   91.814462][ T7184] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   92.779862][ T7189] loop0: detected capacity change from 0 to 8192
[   93.047794][ T7189] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   95.489137][ T7219] loop1: detected capacity change from 0 to 1024
[   95.672676][ T7225] loop0: detected capacity change from 0 to 16
[   95.676873][ T7225] erofs (device loop0): mounted with root inode @ nid 36.
[   95.692965][ T7219] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.701372][ T7219] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   96.742786][ T7230] netlink: 'syz.2.175': attribute type 5 has an invalid length.
[   96.875398][ T7219] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28
[   96.875466][ T7219] EXT4-fs (loop1): This should not happen!! Data will be lost
[   96.875466][ T7219] 
[   96.875507][ T7219] EXT4-fs (loop1): Total free blocks count 0
[   96.875536][ T7219] EXT4-fs (loop1): Free/Dirty block details
[   96.875566][ T7219] EXT4-fs (loop1): free_blocks=4293918720
[   96.875596][ T7219] EXT4-fs (loop1): dirty_blocks=64
[   96.875624][ T7219] EXT4-fs (loop1): Block reservation details
[   96.875651][ T7219] EXT4-fs (loop1): i_reserved_data_blocks=4
[   97.013708][ T6490] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.219923][ T7244] netlink: 'syz.3.179': attribute type 4 has an invalid length.
[   97.253616][ T7249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.253945][ T7249] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.869703][ T7257] loop2: detected capacity change from 0 to 2048
[   98.069423][ T7262] loop1: detected capacity change from 0 to 8
[   98.071913][ T7262] squashfs: Unknown parameter '����J���^�ˤ]5d������H�`���8	$�%gkX*[8��ۂ�qܗ*'
[   98.093720][ T7263] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   98.198287][ T7267] ieee802154 phy0 wpan0: encryption failed: -22
[   98.420303][ T7270] loop0: detected capacity change from 0 to 40427
[   98.892652][ T7270] F2FS-fs (loop0): invalid crc value
[   99.073331][ T7270] F2FS-fs (loop0): Start checkpoint disabled!
[   99.095460][ T7270] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  100.682718][ T7296] netlink: 830 bytes leftover after parsing attributes in process `syz.3.194'.
[  101.112652][ T6611] kworker/u8:8: attempt to access beyond end of device
[  101.112652][ T6611] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  101.151447][ T6611] CPU: 0 UID: 0 PID: 6611 Comm: kworker/u8:8 Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT 
[  101.151472][ T6611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  101.151480][ T6611] Workqueue: writeback wb_workfn (flush-7:0)
[  101.151502][ T6611] Call trace:
[  101.151506][ T6611]  show_stack+0x2c/0x3c (C)
[  101.151521][ T6611]  __dump_stack+0x30/0x40
[  101.151532][ T6611]  dump_stack_lvl+0xd8/0x12c
[  101.151542][ T6611]  dump_stack+0x1c/0x28
[  101.151551][ T6611]  f2fs_handle_critical_error+0x34c/0x4b8
[  101.151566][ T6611]  f2fs_stop_checkpoint+0x58/0x6c
[  101.151577][ T6611]  f2fs_write_end_io+0x794/0xadc
[  101.151591][ T6611]  bio_endio+0x81c/0x858
[  101.151604][ T6611]  submit_bio_noacct+0x158/0x176c
[  101.151615][ T6611]  submit_bio+0x354/0x4d4
[  101.151625][ T6611]  f2fs_submit_write_bio+0x13c/0x324
[  101.151638][ T6611]  __submit_merged_bio+0x254/0x704
[  101.151651][ T6611]  __submit_merged_write_cond+0x23c/0x4ac
[  101.151664][ T6611]  f2fs_write_data_pages+0x1e9c/0x27ac
[  101.151677][ T6611]  do_writepages+0x2c0/0x6a8
[  101.151691][ T6611]  __writeback_single_inode+0x15c/0x13e8
[  101.151702][ T6611]  writeback_sb_inodes+0x558/0xe38
[  101.151718][ T6611]  wb_writeback+0x3cc/0xd70
[  101.151729][ T6611]  wb_workfn+0x338/0xdc0
[  101.151741][ T6611]  process_one_work+0x7e8/0x156c
[  101.151753][ T6611]  worker_thread+0x958/0xed8
[  101.151764][ T6611]  kthread+0x5fc/0x75c
[  101.151776][ T6611]  ret_from_fork+0x10/0x20
[  101.202532][ T6611] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  101.314637][ T7303] loop2: detected capacity change from 0 to 256
[  102.187923][ T7315] loop2: detected capacity change from 0 to 256
[  102.190371][ T7311] netlink: 'syz.3.200': attribute type 3 has an invalid length.
[  103.586844][ T7326] loop4: detected capacity change from 0 to 4096
[  105.414390][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.206'.
[  105.414506][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.206'.
[  106.663977][ T7358] loop1: detected capacity change from 0 to 8
[  106.699738][ T7358] SQUASHFS error: xz decompression failed, data probably corrupt
[  106.700001][ T7358] SQUASHFS error: Failed to read block 0x108: -5
[  106.700094][ T7358] SQUASHFS error: Unable to read metadata cache entry [106]
[  106.700218][ T7358] SQUASHFS error: Unable to read inode 0x11f
[  107.461495][ T6500] Bluetooth: hci4: command 0x0405 tx timeout
[  108.138096][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.217'.
[  108.140883][ T7368] netlink: 20 bytes leftover after parsing attributes in process `syz.3.217'.
[  108.148169][ T7368] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  108.148335][ T7368] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  108.148388][ T7368] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  108.148435][ T7368] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  108.163497][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.217'.
[  108.190651][ T7370] loop4: detected capacity change from 0 to 16
[  108.206670][ T7368] netlink: 20 bytes leftover after parsing attributes in process `syz.3.217'.
[  108.209852][ T7368] Zero length message leads to an empty skb
[  108.268581][ T7370] erofs (device loop4): mounted with root inode @ nid 36.
[  109.313766][ T7385] loop4: detected capacity change from 0 to 32768
[  109.314401][ T7385] XFS: attr2 mount option is deprecated.
[  109.968782][ T7385] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  109.997754][ T7385] XFS (loop4): Ending clean mount
[  110.002161][ T7385] XFS (loop4): Quotacheck needed: Please wait.
[  110.041116][ T7385] XFS (loop4): Quotacheck: Done.
[  111.573639][ T6493] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  111.786559][ T7428] loop0: detected capacity change from 0 to 4096
[  112.083041][ T7428] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  112.300749][ T7444] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  113.909127][ T7428] overlayfs: failed to resolve './file4': -2
[  113.982472][ T7456] loop3: detected capacity change from 0 to 2048
[  114.077008][ T7456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.132377][ T6487] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.677314][   T24] IPVS: starting estimator thread 0...
[  114.765629][ T7484] IPVS: using max 31 ests per chain, 74400 per kthread
[  116.018100][ T7502] netlink: 'syz.4.262': attribute type 4 has an invalid length.
[  116.415756][ T7519] xt_TCPMSS: Only works on TCP SYN packets
[  117.996572][ T7531] binder: BINDER_SET_CONTEXT_MGR already set
[  117.999122][ T7531] binder: 7530:7531 ioctl 4018620d 200000c0 returned -16
[  118.007710][ T7531] binder: 7530:7531 IncRefs 0 refcount change on invalid ref 0 ret -22
[  118.031348][ T7531] binder: 7530:7531 got transaction to invalid handle, 1
[  118.031411][ T7531] binder: 7531:7530 cannot find target node
[  118.031450][ T7531] binder: 7530:7531 transaction async to 0:0 failed 22/29201/-22, code 0 size 0-0 line 3150
[  118.031742][ T7531] binder: 7530:7531 tried to acquire reference to desc 0, got 1 instead
[  118.031778][ T7531] binder: 7530:7531 unknown command 0
[  118.031805][ T7531] binder: 7530:7531 ioctl c0306201 200003c0 returned -22
[  118.035279][ T1766] binder: undelivered TRANSACTION_ERROR: 29201
[  118.035524][ T1766] binder: release 7530:7531 transaction 24 out, still active
[  118.035669][ T1766] binder: undelivered TRANSACTION_COMPLETE
[  118.066802][ T6540] binder: send failed reply for transaction 24, target dead
[  118.337807][ T7539] loop4: detected capacity change from 0 to 40427
[  118.571759][ T7539] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  118.571949][ T7539] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  118.691173][ T7539] F2FS-fs (loop4): invalid crc value
[  119.017499][ T7539] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  119.017680][ T7539] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  119.457020][ T7563] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  120.496528][ T7567] netlink: 24 bytes leftover after parsing attributes in process `syz.3.281'.
[  121.243787][ T7574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.284'.
[  121.260995][ T7574] bridge_slave_1: left allmulticast mode
[  121.262647][ T7574] bridge_slave_1: left promiscuous mode
[  121.265685][ T7574] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.283707][ T7574] bridge_slave_0: left allmulticast mode
[  121.285437][ T7574] bridge_slave_0: left promiscuous mode
[  121.287197][ T7574] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.309512][ T6491] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  124.309634][ T6491] CPU: 1 UID: 0 PID: 6491 Comm: kworker/u9:2 Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT 
[  124.309651][ T6491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  124.309659][ T6491] Workqueue: hci4 hci_rx_work
[  124.309679][ T6491] Call trace:
[  124.309683][ T6491]  show_stack+0x2c/0x3c (C)
[  124.309698][ T6491]  __dump_stack+0x30/0x40
[  124.309709][ T6491]  dump_stack_lvl+0xd8/0x12c
[  124.309720][ T6491]  dump_stack+0x1c/0x28
[  124.309730][ T6491]  sysfs_create_dir_ns+0x22c/0x24c
[  124.309746][ T6491]  kobject_add_internal+0x5a8/0xb20
[  124.309759][ T6491]  kobject_add+0x134/0x200
[  124.309770][ T6491]  device_add+0x394/0xa60
[  124.309782][ T6491]  hci_conn_add_sysfs+0xc0/0x1d0
[  124.309793][ T6491]  le_conn_complete_evt+0x98c/0xe84
[  124.309809][ T6491]  hci_le_conn_complete_evt+0x114/0x3f8
[  124.309823][ T6491]  hci_le_meta_evt+0x2bc/0x4a0
[  124.309834][ T6491]  hci_event_packet+0x5f8/0xe90
[  124.309846][ T6491]  hci_rx_work+0x320/0xb18
[  124.309858][ T6491]  process_one_work+0x7e8/0x156c
[  124.309870][ T6491]  worker_thread+0x958/0xed8
[  124.309881][ T6491]  kthread+0x5fc/0x75c
[  124.309895][ T6491]  ret_from_fork+0x10/0x20
[  124.310055][ T6491] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  124.310102][ T6491] Bluetooth: hci4: failed to register connection device
[  126.198108][ T2390] ieee802154 phy0 wpan0: encryption failed: -22
[  126.198196][ T2390] ieee802154 phy1 wpan1: encryption failed: -22
[  126.514994][ T7628] loop1: detected capacity change from 0 to 1024
[  129.549722][ T7654] usb usb1: usbfs: process 7654 (syz.0.306) did not claim interface 0 before use
[  129.555986][ T7654] usb usb1: usbfs: process 7654 (syz.0.306) did not claim interface 0 before use
[  131.814638][ T6500] Bluetooth: hci4: command 0x0405 tx timeout
[  132.392247][ T7680] loop4: detected capacity change from 0 to 32768
[  132.401082][ T7680] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.313 (7680)
[  132.527796][ T7680] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  132.527896][ T7680] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm
[  132.527954][ T7680] BTRFS info (device loop4): using free-space-tree
[  132.566656][ T7685] loop0: detected capacity change from 0 to 8192
[  132.573338][ T7685] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  132.854912][ T7676] BTRFS info (device loop4): setting incompat feature flag for SIMPLE_QUOTA (0x10000)
[  132.999898][ T6493] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  135.055930][   T31] audit: type=1326 audit(363.808:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7727 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f5a768 code=0x7ffc0000
[  135.067163][   T31] audit: type=1326 audit(363.818:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7727 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f5a768 code=0x7ffc0000
[  135.077797][   T31] audit: type=1326 audit(363.828:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7727 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffff85f5a768 code=0x7ffc0000
[  135.077866][   T31] audit: type=1326 audit(363.828:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7727 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f5a768 code=0x7ffc0000
[  135.077920][   T31] audit: type=1326 audit(363.828:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7727 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85f5a768 code=0x7ffc0000
[  135.103302][   T31] audit: type=1326 audit(363.848:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7727 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=110 compat=0 ip=0xffff85f5a768 code=0x7ffc0000
[  135.103379][   T31] audit: type=1326 audit(363.848:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7727 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff86d478bc code=0x7ffc0000
[  135.103556][   T31] audit: type=1326 audit(363.848:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7727 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff86d478bc code=0x7ffc0000
[  135.182526][   T31] audit: type=1326 audit(363.928:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7727 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff86d478bc code=0x7ffc0000
[  135.182606][   T31] audit: type=1326 audit(363.928:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7727 comm="syz.0.321" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff86d478bc code=0x7ffc0000
[  135.770089][ T7732] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.006777][ T7732] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.050901][ T7743] loop3: detected capacity change from 0 to 8
[  136.179465][ T7743] unable to read id index table
[  136.190905][ T7746] netlink: 56 bytes leftover after parsing attributes in process `syz.2.329'.
[  136.190974][ T7746] netlink: 28 bytes leftover after parsing attributes in process `syz.2.329'.
[  136.898457][ T7732] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.943964][ T7746] netlink: 56 bytes leftover after parsing attributes in process `syz.2.329'.
[  137.809928][ T7758] loop2: detected capacity change from 0 to 1024
[  137.818808][ T7732] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.836779][ T7758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.924891][ T6489] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.304574][ T7767] loop3: detected capacity change from 0 to 1024
[  138.712498][ T7732] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.720032][ T7732] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.725953][ T7732] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.730766][ T7732] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  139.051098][ T7773] loop1: detected capacity change from 0 to 40427
[  139.052068][ T7773] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  139.052131][ T7773] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  139.056687][ T7773] F2FS-fs (loop1): invalid crc value
[  139.112697][ T7773] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  139.112759][ T7773] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  140.648992][ T7796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  140.649489][ T7796] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  140.887195][ T7800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  140.887517][ T7800] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  140.911586][ T7804] loop2: detected capacity change from 0 to 512
[  140.953811][ T7804] ext2: Unknown parameter 'noacl'
[  140.970796][ T7806] loop0: detected capacity change from 0 to 1024
[  143.008305][ T7809] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  144.007022][ T7806] EXT4-fs: error -4 creating inode table initialization thread
[  144.007459][ T7806] EXT4-fs (loop0): mount failed
[  144.698717][ T7827] loop4: detected capacity change from 0 to 256
[  145.460553][ T7824] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  145.633209][ T3888] IPVS: starting estimator thread 0...
[  145.732208][ T7834] IPVS: using max 33 ests per chain, 79200 per kthread
[  148.284223][ T7865] loop4: detected capacity change from 0 to 4096
[  148.288839][ T7869] loop0: detected capacity change from 0 to 128
[  148.407323][ T7861] loop3: detected capacity change from 0 to 1024
[  148.570415][ T7865] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  148.621069][ T7869] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  148.985027][ T7873] binder: 7871:7873 BC_ACQUIRE_DONE node 25 has no pending acquire request
[  148.985269][ T7873] binder: 7871:7873 got reply transaction with no transaction stack
[  148.985607][ T7873] binder: 7871:7873 transaction reply to 0:0 failed 26/29201/-71, code 0 size 0-0 line 3051
[  148.992792][ T6282] binder: undelivered TRANSACTION_ERROR: 29201
[  149.006108][ T7861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.054202][ T7865] ntfs3(loop4): ino=19, mi_enum_attr
[  149.054456][ T7865] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  149.071058][ T7865] ntfs3: Unknown parameter '�
�?ݐ?ݐ?ݐ?ݐ?ݐ?ݐ?�2��r��:F�/�g�����������'
[  149.101781][ T6487] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.117358][ T7877] loop2: detected capacity change from 0 to 2048
[  149.162463][ T7881] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  149.285282][ T7878] sp0: Synchronizing with TNC
[  149.713176][ T7891] overlayfs: missing 'lowerdir'
[  150.149140][ T7886] sctp: failed to load transform for md5: -2
[  150.996233][ T7898] netlink: 28 bytes leftover after parsing attributes in process `syz.4.365'.
[  151.111938][ T7908] netlink: 28 bytes leftover after parsing attributes in process `syz.4.365'.
[  151.477946][ T7919] loop3: detected capacity change from 0 to 128
[  152.224273][ T7925] loop2: detected capacity change from 0 to 1024
[  152.396319][ T7925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.402085][ T7930] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  152.412449][ T7931] loop0: detected capacity change from 0 to 2048
[  152.435932][ T7931] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  153.312679][ T6489] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.996504][ T7955] process 'syz.0.381' launched '/dev/fd/5' with NULL argv: empty string added
[  154.561946][ T7959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  154.571943][ T7959] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  154.798845][ T7942] loop1: detected capacity change from 0 to 32768
[  154.858676][ T7942] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  155.089437][ T6490] ocfs2: Unmounting device (7,1) on (node local)
[  155.394294][ T7976] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  156.236472][ T7986] netlink: 24 bytes leftover after parsing attributes in process `syz.4.392'.
[  157.179956][ T7994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.395'.
[  157.572028][ T8007] loop0: detected capacity change from 0 to 128
[  157.596449][ T8007] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  158.148124][ T8012] binder: tried to use weak ref as strong ref
[  158.149902][ T8012] binder: 8010:8012 Acquire 1 refcount change on invalid ref 0 ret -22
[  158.152699][ T8012] binder: tried to use weak ref as strong ref
[  158.154487][ T8012] binder: 8010:8012 Acquire 1 refcount change on invalid ref 0 ret -22
[  158.165339][ T8012] binder: 8010:8012 unknown command 0
[  158.166977][ T8012] binder: 8010:8012 ioctl c0306201 200003c0 returned -22
[  160.033021][ T8044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.061501][ T8044] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.097373][ T8049] binder: BINDER_SET_CONTEXT_MGR already set
[  160.097429][ T8049] binder: 8047:8049 ioctl 4018620d 200000c0 returned -16
[  160.097981][ T8049] binder: 8047:8049 IncRefs 0 refcount change on invalid ref 0 ret -22
[  160.098990][ T8049] binder: 8047:8049 Acquire 1 refcount change on invalid ref 0 ret -22
[  160.099234][ T8049] binder: tried to use weak ref as strong ref
[  160.099258][ T8049] binder: 8047:8049 Acquire 1 refcount change on invalid ref 0 ret -22
[  160.099283][ T8049] binder: 8047:8049 unknown command 0
[  160.099305][ T8049] binder: 8047:8049 ioctl c0306201 200003c0 returned -22
[  160.189131][ T8056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.189462][ T8056] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.212504][ T8056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.212793][ T8056] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.297883][ T8044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.298224][ T8044] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.210278][ T8077] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11)
[  161.210322][ T8077] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  161.211777][ T8077] vhci_hcd vhci_hcd.0: Device attached
[  161.219713][ T8077] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(13)
[  161.219751][ T8077] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  161.219812][ T8077] vhci_hcd vhci_hcd.0: Device attached
[  161.226836][ T8077] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(15)
[  161.226870][ T8077] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  161.226936][ T8077] vhci_hcd vhci_hcd.0: Device attached
[  161.228245][ T8077] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  161.233765][ T8077] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(19)
[  161.233792][ T8077] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  161.233833][ T8077] vhci_hcd vhci_hcd.0: Device attached
[  161.243940][ T8077] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(21)
[  161.243975][ T8077] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  161.245066][ T8077] vhci_hcd vhci_hcd.0: Device attached
[  161.247914][ T8077] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  161.257010][ T8077] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  161.261971][ T8077] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  161.273081][ T8077] vhci_hcd vhci_hcd.0: port 0 already used
[  161.290012][ T3888] IPVS: starting estimator thread 0...
[  161.292416][ T8087] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  161.316501][ T8088] vhci_hcd: connection closed
[  161.316767][ T8090] vhci_hcd: connection closed
[  161.317372][ T3593] vhci_hcd: stop threads
[  161.317408][ T3593] vhci_hcd: release socket
[  161.345285][ T3593] vhci_hcd: disconnect device
[  161.375699][ T8082] vhci_hcd: connection closed
[  161.375875][ T8084] vhci_hcd: connection closed
[  161.376036][ T8079] vhci_hcd: connection closed
[  161.379441][ T3593] vhci_hcd: stop threads
[  161.379501][ T3593] vhci_hcd: release socket
[  161.383534][ T3593] vhci_hcd: disconnect device
[  161.386786][ T3593] vhci_hcd: stop threads
[  161.386832][ T3593] vhci_hcd: release socket
[  161.386891][ T3593] vhci_hcd: disconnect device
[  161.390793][ T3593] vhci_hcd: stop threads
[  161.390837][ T3593] vhci_hcd: release socket
[  161.390893][ T3593] vhci_hcd: disconnect device
[  161.398870][ T3593] vhci_hcd: stop threads
[  161.398919][ T3593] vhci_hcd: release socket
[  161.398975][ T3593] vhci_hcd: disconnect device
[  161.409129][ T8095] IPVS: using max 33 ests per chain, 79200 per kthread
[  161.446062][ T1766] usb 8-1: new low-speed USB device number 2 using vhci_hcd
[  161.446156][ T1766] usb 8-1: enqueue for inactive port 0
[  161.467727][ T8102] binder: 8099:8102 tried to acquire reference to desc 0, got 1 instead
[  161.469327][ T8102] binder: 8099:8102 tried to acquire reference to desc 0, got 1 instead
[  161.469364][ T8102] binder: 8099:8102 unknown command 0
[  161.469386][ T8102] binder: 8099:8102 ioctl c0306201 200003c0 returned -22
[  161.515396][ T1766] vhci_hcd: vhci_device speed not set
[  161.834085][ T8110] loop4: detected capacity change from 0 to 1024
[  161.875885][ T8110] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.904234][ T8110] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  161.911500][ T8110] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  161.911542][ T8110] EXT4-fs (loop4): This should not happen!! Data will be lost
[  161.911542][ T8110] 
[  161.911567][ T8110] EXT4-fs (loop4): Total free blocks count 0
[  161.911589][ T8110] EXT4-fs (loop4): Free/Dirty block details
[  161.911613][ T8110] EXT4-fs (loop4): free_blocks=4293918720
[  161.911638][ T8110] EXT4-fs (loop4): dirty_blocks=16
[  161.911660][ T8110] EXT4-fs (loop4): Block reservation details
[  161.911681][ T8110] EXT4-fs (loop4): i_reserved_data_blocks=1
[  161.937667][ T6611] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  162.014262][ T8123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  162.018121][ T8123] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  162.798986][ T6577] usb usb9-port1: attempt power cycle
[  162.975549][ T8133] binder: 8132:8133 unknown command 0
[  162.978269][ T8133] binder: 8132:8133 ioctl c0306201 200003c0 returned -22
[  163.488020][ T6577] usb usb9-port1: unable to enumerate USB device
[  163.693528][ T8142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.696757][ T8142] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.944251][ T8153] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  165.754382][ T8187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.463'.
[  165.777680][ T8187] batadv0: entered promiscuous mode
[  165.777913][ T8187] macvtap1: entered promiscuous mode
[  165.784384][ T8187] macvtap1: entered allmulticast mode
[  165.787282][ T8187] batadv0: entered allmulticast mode
[  165.787888][ T8187] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  165.871495][ T8187] batadv0: left allmulticast mode
[  165.871674][ T8187] batadv0: left promiscuous mode
[  166.811689][ T8202] team_slave_0: entered promiscuous mode
[  166.811879][ T8202] team_slave_1: entered promiscuous mode
[  166.811993][ T8202] vlan2: entered promiscuous mode
[  166.812017][ T8202] team0: entered promiscuous mode
[  169.208539][ T6502] Bluetooth: hci0: command 0x0406 tx timeout
[  169.208632][ T6502] Bluetooth: hci1: command 0x0406 tx timeout
[  169.208697][ T6502] Bluetooth: hci4: command 0x0405 tx timeout
[  169.208738][ T6502] Bluetooth: hci2: command 0x0406 tx timeout
[  169.208778][ T6502] Bluetooth: hci3: command 0x0406 tx timeout
[  170.291691][ T8246] loop3: detected capacity change from 0 to 1024
[  170.424570][ T8246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.493199][ T6487] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.590471][ T8261] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  171.844784][ T8281] netlink: 64 bytes leftover after parsing attributes in process `syz.4.479'.
[  171.877840][ T8277] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  171.878017][ T8277] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  172.745994][ T8287] netlink: 16 bytes leftover after parsing attributes in process `syz.3.494'.
[  172.899767][ T8289] loop3: detected capacity change from 0 to 1024
[  172.918029][ T8291] netlink: 'syz.0.495': attribute type 11 has an invalid length.
[  172.940769][ T8289] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  173.059948][ T6487] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.103421][ T8298] loop2: detected capacity change from 0 to 1024
[  173.179965][ T8298] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  173.227514][ T8303] binder_user_error: 1 callbacks suppressed
[  173.227577][ T8303] binder: 8300:8303 tried to acquire reference to desc 0, got 1 instead
[  173.227604][ T8303] binder: 8300:8303 unknown command 0
[  173.227626][ T8303] binder: 8300:8303 ioctl c0306201 200003c0 returned -22
[  173.244131][ T8298] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  173.244304][ T8298] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  173.244335][ T8298] EXT4-fs (loop2): This should not happen!! Data will be lost
[  173.244335][ T8298] 
[  173.244359][ T8298] EXT4-fs (loop2): Total free blocks count 0
[  173.244381][ T8298] EXT4-fs (loop2): Free/Dirty block details
[  173.244405][ T8298] EXT4-fs (loop2): free_blocks=4293918720
[  173.244430][ T8298] EXT4-fs (loop2): dirty_blocks=16
[  173.244452][ T8298] EXT4-fs (loop2): Block reservation details
[  173.244473][ T8298] EXT4-fs (loop2): i_reserved_data_blocks=1
[  173.456898][ T6611] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  174.928850][ T8326] loop2: detected capacity change from 0 to 32768
[  174.929519][ T8326] XFS: attr2 mount option is deprecated.
[  174.991472][ T8326] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  175.051946][ T8326] XFS (loop2): Ending clean mount
[  175.058653][ T8326] XFS (loop2): Quotacheck needed: Please wait.
[  175.092630][ T8326] XFS (loop2): Quotacheck: Done.
[  175.230274][ T8344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  175.233133][ T8344] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  175.331877][ T8349] binder: 8348:8349 tried to acquire reference to desc 0, got 1 instead
[  175.334638][ T8349] binder: 8348:8349 unknown command 0
[  175.336919][ T8349] binder: 8348:8349 ioctl c0306201 200003c0 returned -22
[  175.399437][ T8353] loop1: detected capacity change from 0 to 1024
[  175.422136][ T8353] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  175.454824][ T8353] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  175.461825][ T8353] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  175.466400][ T8353] EXT4-fs (loop1): This should not happen!! Data will be lost
[  175.466400][ T8353] 
[  175.469704][ T8353] EXT4-fs (loop1): Total free blocks count 0
[  175.469757][ T8353] EXT4-fs (loop1): Free/Dirty block details
[  175.469788][ T8353] EXT4-fs (loop1): free_blocks=4293918720
[  175.469826][ T8353] EXT4-fs (loop1): dirty_blocks=16
[  175.477854][ T8353] EXT4-fs (loop1): Block reservation details
[  175.477893][ T8353] EXT4-fs (loop1): i_reserved_data_blocks=1
[  175.508450][ T6931] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  175.592428][ T6489] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  176.489472][ T8376] binder: 8375:8376 tried to acquire reference to desc 0, got 1 instead
[  176.491980][ T8376] binder: 8375:8376 unknown command 0
[  176.492032][ T8376] binder: 8375:8376 ioctl c0306201 200003c0 returned -22
[  176.531085][ T8380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  176.533672][ T8380] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  176.621434][ T8384] loop2: detected capacity change from 0 to 1024
[  176.681806][ T8384] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  176.810092][ T8389] loop0: detected capacity change from 0 to 32768
[  176.810700][ T8389] XFS: attr2 mount option is deprecated.
[  176.856719][ T8384] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  176.856921][ T8384] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  176.856962][ T8384] EXT4-fs (loop2): This should not happen!! Data will be lost
[  176.856962][ T8384] 
[  176.856992][ T8384] EXT4-fs (loop2): Total free blocks count 0
[  176.857020][ T8384] EXT4-fs (loop2): Free/Dirty block details
[  176.857050][ T8384] EXT4-fs (loop2): free_blocks=4293918720
[  176.857080][ T8384] EXT4-fs (loop2): dirty_blocks=16
[  176.857107][ T8384] EXT4-fs (loop2): Block reservation details
[  176.857134][ T8384] EXT4-fs (loop2): i_reserved_data_blocks=1
[  176.938792][ T6931] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  176.952621][ T8389] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  176.998595][ T8389] XFS (loop0): Ending clean mount
[  176.999699][ T8389] XFS (loop0): Quotacheck needed: Please wait.
[  177.012582][ T8389] XFS (loop0): Quotacheck: Done.
[  177.263451][ T8417] binder: 8416:8417 tried to acquire reference to desc 0, got 1 instead
[  177.263516][ T8417] binder: 8416:8417 unknown command 0
[  177.268508][ T8417] binder: 8416:8417 ioctl c0306201 200003c0 returned -22
[  177.337930][ T8419] netlink: 'syz.3.536': attribute type 10 has an invalid length.
[  177.338086][ T8419] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  177.359576][ T8421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  177.359867][ T8421] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.381887][ T8419] batman_adv: batadv0: Removing interface: batadv_slave_0
[  177.924217][ T6488] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  177.925962][ T8419] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  178.219151][ T8435] loop3: detected capacity change from 0 to 1024
[  178.246758][ T8435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.312943][ T8435] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  178.313098][ T8435] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  178.313136][ T8435] EXT4-fs (loop3): This should not happen!! Data will be lost
[  178.313136][ T8435] 
[  178.313167][ T8435] EXT4-fs (loop3): Total free blocks count 0
[  178.313204][ T8435] EXT4-fs (loop3): Free/Dirty block details
[  178.313234][ T8435] EXT4-fs (loop3): free_blocks=4293918720
[  178.313271][ T8435] EXT4-fs (loop3): dirty_blocks=16
[  178.313298][ T8435] EXT4-fs (loop3): Block reservation details
[  178.313325][ T8435] EXT4-fs (loop3): i_reserved_data_blocks=1
[  178.460810][  T318] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  178.874677][ T8450] binder: 8449:8450 Acquire 1 refcount change on invalid ref 0 ret -22
[  178.875017][ T8450] binder: tried to use weak ref as strong ref
[  178.875041][ T8450] binder: 8449:8450 Acquire 1 refcount change on invalid ref 0 ret -22
[  178.875067][ T8450] binder: 8449:8450 unknown command 0
[  178.875088][ T8450] binder: 8449:8450 ioctl c0306201 200003c0 returned -22
[  179.082617][ T8463] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  179.231416][ T8469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  179.241700][ T8469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  179.242962][ T8469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  179.275927][ T8469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  179.324974][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.555'.
[  179.350003][ T8478] netlink: 20 bytes leftover after parsing attributes in process `syz.0.557'.
[  179.540919][ T8485] binder: 8483:8485 Acquire 1 refcount change on invalid ref 0 ret -22
[  179.542908][ T8485] binder: tried to use weak ref as strong ref
[  179.542937][ T8485] binder: 8483:8485 Acquire 1 refcount change on invalid ref 0 ret -22
[  179.542964][ T8485] binder: 8483:8485 unknown command 0
[  179.542986][ T8485] binder: 8483:8485 ioctl c0306201 200003c0 returned -22
[  179.545147][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.561'.
[  179.569837][ T8486] erspan0: entered promiscuous mode
[  179.571602][ T8486] macvtap1: entered promiscuous mode
[  179.577647][ T8486] macvtap1: entered allmulticast mode
[  179.577700][ T8486] erspan0: entered allmulticast mode
[  179.636851][ T8486] erspan0: left allmulticast mode
[  179.637062][ T8486] erspan0: left promiscuous mode
[  179.947287][ T8489] netlink: 'syz.4.563': attribute type 4 has an invalid length.
[  180.023956][ T8497] netlink: 24 bytes leftover after parsing attributes in process `syz.0.566'.
[  180.266412][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.566'.
[  180.375725][   T45] bond1: (slave ip6gretap1): link status up again after 0 ms
[  180.375902][   T45] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  180.486177][   T42] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  180.527371][ T8516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.573'.
[  180.532738][ T8516] erspan0: entered promiscuous mode
[  180.532872][ T8516] macvtap2: entered promiscuous mode
[  180.532952][ T8516] macvtap2: entered allmulticast mode
[  180.532973][ T8516] erspan0: entered allmulticast mode
[  180.596859][ T8516] erspan0: left allmulticast mode
[  180.597022][ T8516] erspan0: left promiscuous mode
[  180.636401][  T318] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  180.746391][  T318] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  180.865417][ T6931] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  180.975417][   T45] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  181.089735][ T6931] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  181.137468][ T8530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.576'.
[  181.138871][ T8530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  181.139127][ T8530] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  181.302261][ T6931] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  181.462599][  T318] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  181.925374][   T55] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  181.925532][   T55] CPU: 0 UID: 0 PID: 55 Comm: kworker/u9:0 Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT 
[  181.925551][   T55] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  181.925560][   T55] Workqueue: hci0 hci_rx_work
[  181.925580][   T55] Call trace:
[  181.925584][   T55]  show_stack+0x2c/0x3c (C)
[  181.925599][   T55]  __dump_stack+0x30/0x40
[  181.925611][   T55]  dump_stack_lvl+0xd8/0x12c
[  181.925622][   T55]  dump_stack+0x1c/0x28
[  181.925632][   T55]  sysfs_create_dir_ns+0x22c/0x24c
[  181.925648][   T55]  kobject_add_internal+0x5a8/0xb20
[  181.925661][   T55]  kobject_add+0x134/0x200
[  181.925672][   T55]  device_add+0x394/0xa60
[  181.925684][   T55]  hci_conn_add_sysfs+0xc0/0x1d0
[  181.925695][   T55]  le_conn_complete_evt+0x98c/0xe84
[  181.925710][   T55]  hci_le_conn_complete_evt+0x114/0x3f8
[  181.925724][   T55]  hci_le_meta_evt+0x2bc/0x4a0
[  181.925736][   T55]  hci_event_packet+0x5f8/0xe90
[  181.925747][   T55]  hci_rx_work+0x320/0xb18
[  181.925760][   T55]  process_one_work+0x7e8/0x156c
[  181.925771][   T55]  worker_thread+0x958/0xed8
[  181.925783][   T55]  kthread+0x5fc/0x75c
[  181.925796][   T55]  ret_from_fork+0x10/0x20
[  181.925938][   T55] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  181.925980][   T55] Bluetooth: hci0: failed to register connection device
[  182.909112][ T8552] 8021q: VLANs not supported on gre0
[  184.777833][ T6501] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  184.779244][ T6501] CPU: 1 UID: 0 PID: 6501 Comm: kworker/u9:5 Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT 
[  184.779264][ T6501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  184.779272][ T6501] Workqueue: hci3 hci_rx_work
[  184.779292][ T6501] Call trace:
[  184.779297][ T6501]  show_stack+0x2c/0x3c (C)
[  184.779311][ T6501]  __dump_stack+0x30/0x40
[  184.779323][ T6501]  dump_stack_lvl+0xd8/0x12c
[  184.779334][ T6501]  dump_stack+0x1c/0x28
[  184.779344][ T6501]  sysfs_create_dir_ns+0x22c/0x24c
[  184.779360][ T6501]  kobject_add_internal+0x5a8/0xb20
[  184.779374][ T6501]  kobject_add+0x134/0x200
[  184.779384][ T6501]  device_add+0x394/0xa60
[  184.779396][ T6501]  hci_conn_add_sysfs+0xc0/0x1d0
[  184.779408][ T6501]  le_conn_complete_evt+0x98c/0xe84
[  184.779422][ T6501]  hci_le_conn_complete_evt+0x114/0x3f8
[  184.779437][ T6501]  hci_le_meta_evt+0x2bc/0x4a0
[  184.779448][ T6501]  hci_event_packet+0x5f8/0xe90
[  184.779459][ T6501]  hci_rx_work+0x320/0xb18
[  184.779472][ T6501]  process_one_work+0x7e8/0x156c
[  184.779484][ T6501]  worker_thread+0x958/0xed8
[  184.779495][ T6501]  kthread+0x5fc/0x75c
[  184.779509][ T6501]  ret_from_fork+0x10/0x20
[  184.780554][ T6501] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  184.780816][ T6501] Bluetooth: hci3: failed to register connection device
[  185.111130][ T8581] netlink: 64 bytes leftover after parsing attributes in process `syz.4.588'.
[  185.246662][ T8586] geneve0: entered promiscuous mode
[  185.249939][ T8586] geneve0: left promiscuous mode
[  185.465771][  T318] net_ratelimit: 20 callbacks suppressed
[  185.465852][  T318] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  185.576119][   T45] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  185.689709][  T213] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  186.484570][ T6886] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  186.596874][ T8610] loop3: detected capacity change from 0 to 1024
[  186.635506][ T6886] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  186.747437][  T213] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  186.748632][ T8610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  186.791005][ T8610] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  186.791548][ T8610] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  186.791594][ T8610] EXT4-fs (loop3): This should not happen!! Data will be lost
[  186.791594][ T8610] 
[  186.791625][ T8610] EXT4-fs (loop3): Total free blocks count 0
[  186.791653][ T8610] EXT4-fs (loop3): Free/Dirty block details
[  186.791682][ T8610] EXT4-fs (loop3): free_blocks=4293918720
[  186.791713][ T8610] EXT4-fs (loop3): dirty_blocks=16
[  186.791740][ T8610] EXT4-fs (loop3): Block reservation details
[  186.791767][ T8610] EXT4-fs (loop3): i_reserved_data_blocks=1
[  186.865427][   T45] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  186.901330][   T45] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  186.977001][ T6611] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  187.613889][ T2390] ieee802154 phy0 wpan0: encryption failed: -22
[  187.615902][ T2390] ieee802154 phy1 wpan1: encryption failed: -22
[  187.656187][ T6886] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  187.766938][ T6886] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  187.822411][ T8637] @: renamed from vlan0 (while UP)
[  187.976128][ T8637] capability: warning: `syz.1.610' uses deprecated v2 capabilities in a way that may be insecure
[  188.225747][ T6501] Bluetooth: hci0: command 0x0406 tx timeout
[  189.220711][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.624'.
[  189.220779][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.624'.
[  189.268147][ T8681] netlink: 'syz.4.628': attribute type 9 has an invalid length.
[  189.362392][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.630'.
[  190.566331][  T213] net_ratelimit: 16 callbacks suppressed
[  190.570277][  T213] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  190.677019][   T45] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  190.778881][ T8733] bridge_slave_0: left allmulticast mode
[  190.781781][ T8733] bridge_slave_0: left promiscuous mode
[  190.785145][ T8733] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.811256][ T8733] bridge_slave_1: left allmulticast mode
[  190.813038][ T8733] bridge_slave_1: left promiscuous mode
[  190.817818][ T8733] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.842400][ T8733] bond0: (slave bond_slave_0): Releasing backup interface
[  190.881285][ T8733] bond0: (slave bond_slave_1): Releasing backup interface
[  190.949038][ T8733] team0: Port device team_slave_0 removed
[  190.970268][ T8733] team0: Port device team_slave_1 removed
[  190.978324][ T8733] bond0: (slave batadv_slave_0): Releasing backup interface
[  191.008729][ T8733] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  191.015539][ T8733] batman_adv: batadv0: Removing interface: batadv_slave_1
[  191.116923][ T6886] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  191.227819][ T6886] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  191.340897][ T6886] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  191.360266][ T8765] netlink: 'syz.2.661': attribute type 10 has an invalid length.
[  191.362702][ T8765] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  191.494496][ T8765] batman_adv: batadv0: Removing interface: batadv_slave_0
[  191.521702][ T8765] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  191.535404][  T213] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  191.645725][  T213] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  191.755787][ T6886] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  191.877629][ T6931] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  192.000418][   T42] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  192.171754][ T8800] netlink: 'syz.0.674': attribute type 10 has an invalid length.
[  192.171910][ T8800] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.186123][ T8800] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.200588][ T8800] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  192.361767][ T8804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.676'.
[  192.366638][ T8804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.676'.
[  192.369485][ T8804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.676'.
[  192.376208][ T8804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.676'.
[  192.376269][ T8804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.676'.
[  194.040783][ T8848] netlink: 24 bytes leftover after parsing attributes in process `syz.3.695'.
[  194.174136][ T8853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.177526][ T8853] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.592229][ T8862] batman_adv: batadv0: Adding interface: ip6gretap2
[  194.594312][ T8862] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500.
[  194.601570][ T8862] batman_adv: batadv0: Interface activated: ip6gretap2
[  195.504160][ T8871] binder: 8870:8871 Acquire 1 refcount change on invalid ref 0 ret -22
[  195.504581][ T8871] binder: 8870:8871 Acquire 1 refcount change on invalid ref 0 ret -22
[  195.504632][ T8871] binder: 8870:8871 unknown command 0
[  195.504660][ T8871] binder: 8870:8871 ioctl c0306201 200003c0 returned -22
[  195.699027][ T8879] netlink: 24 bytes leftover after parsing attributes in process `syz.4.706'.
[  195.942481][  T213] net_ratelimit: 21 callbacks suppressed
[  195.942557][  T213] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  196.045673][  T318] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  196.155639][   T45] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  196.266016][  T213] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  196.375824][ T7644] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  196.495277][ T7644] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  196.606543][   T45] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  196.789710][   T42] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  196.906093][   T42] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  196.962735][ T8911] binder: 8910:8911 Acquire 1 refcount change on invalid ref 0 ret -22
[  196.965967][ T8911] binder: 8910:8911 Acquire 1 refcount change on invalid ref 0 ret -22
[  196.968708][ T8911] binder: 8910:8911 unknown command 0
[  196.970748][ T8911] binder: 8910:8911 ioctl c0306201 200003c0 returned -22
[  197.012679][ T8916] netlink: 24 bytes leftover after parsing attributes in process `syz.0.718'.
[  197.086130][  T213] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  197.130871][ T8919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  197.135535][ T8919] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.763393][ T8943] binder: 8942:8943 Acquire 1 refcount change on invalid ref 0 ret -22
[  197.769379][ T8943] binder: 8942:8943 Acquire 1 refcount change on invalid ref 0 ret -22
[  197.771819][ T8943] binder: 8942:8943 unknown command 0
[  197.773552][ T8943] binder: 8942:8943 ioctl c0306201 200003c0 returned -22
[  197.783489][ T8944] netlink: 24 bytes leftover after parsing attributes in process `syz.4.729'.
[  198.926347][ T8983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  198.926852][ T8983] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  200.003266][ T8990] netlink: 24 bytes leftover after parsing attributes in process `syz.1.744'.
[  201.027107][   T42] net_ratelimit: 29 callbacks suppressed
[  201.029434][   T42] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  201.136308][ T6931] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  201.260999][  T318] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  201.274930][ T9008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.751'.
[  201.370535][ T6886] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  201.466767][ T9020] netlink: 24 bytes leftover after parsing attributes in process `syz.0.757'.
[  201.501726][  T318] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  201.616807][  T213] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  201.726322][  T318] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  201.836814][   T42] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  201.997557][ T6886] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  202.116977][ T6886] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  202.935699][ T9048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  202.938733][ T9048] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  203.027458][ T9057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.771'.
[  205.064232][ T9090] netlink: 24 bytes leftover after parsing attributes in process `syz.2.782'.
[  205.217897][ T9102] batman_adv: batadv0: Adding interface: ip6gretap1
[  205.217962][ T9102] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.218021][ T9102] batman_adv: batadv0: Interface activated: ip6gretap1
[  205.397294][ T9110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.790'.
[  206.141100][   T42] net_ratelimit: 21 callbacks suppressed
[  206.205079][ T9122] netlink: 'syz.4.791': attribute type 10 has an invalid length.
[  206.205146][ T9122] netlink: 40 bytes leftover after parsing attributes in process `syz.4.791'.
[  206.206493][   T42] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  206.212236][ T9122] batadv0: entered promiscuous mode
[  206.213905][ T9122] batadv0: entered allmulticast mode
[  206.217441][ T9122] bridge0: port 3(batadv0) entered blocking state
[  206.222456][ T9122] bridge0: port 3(batadv0) entered disabled state
[  206.228304][ T9122] bridge0: port 3(batadv0) entered blocking state
[  206.228398][ T9122] bridge0: port 3(batadv0) entered forwarding state
[  206.260531][ T9127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.794'.
[  206.376534][  T318] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  206.491804][   T42] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  206.602617][   T42] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  206.639914][ T9145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.802'.
[  206.648062][   T42] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  206.648201][   T42] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  206.817818][ T9153] loop1: detected capacity change from 0 to 128
[  206.828754][  T213] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  207.630114][   T45] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  207.736495][ T6931] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  207.796408][ T9165] 8021q: VLANs not supported on vcan0
[  207.856166][ T6931] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  207.967377][   T42] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  208.257659][   T45] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  208.888427][ T9190] loop0: detected capacity change from 0 to 1024
[  209.002068][ T9190] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  209.916291][ T6488] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.049431][ T9212] loop3: detected capacity change from 0 to 24
[  210.050011][ T9212] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  210.070771][ T9212] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  210.147522][ T9214] loop0: detected capacity change from 0 to 2048
[  210.148748][ T9214] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  210.317174][ T9220] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  210.368075][ T9218] loop4: detected capacity change from 0 to 8192
[  210.501037][ T9218] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  211.321665][ T6931] net_ratelimit: 13 callbacks suppressed
[  211.321728][ T6931] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  211.458202][ T9228] tipc: Started in network mode
[  211.460207][ T9228] tipc: Node identity 4, cluster identity 4711
[  211.461947][ T9228] tipc: Node number set to 4
[  211.465377][ T6931] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  211.597778][   T42] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  211.809644][   T42] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  212.527216][ T6931] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  212.644817][  T213] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  212.708555][ T9254] 8021q: VLANs not supported on vcan0
[  212.778138][  T318] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  212.888255][ T6886] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  212.896499][ T9258] sctp: [Deprecated]: syz.3.833 (pid 9258) Use of int in maxseg socket option.
[  212.896499][ T9258] Use struct sctp_assoc_value instead
[  212.996460][ T6886] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  213.108006][ T6886] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  215.605507][ T9290] 8021q: VLANs not supported on vcan0
[  216.886053][ T7644] net_ratelimit: 16 callbacks suppressed
[  216.895214][ T7644] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  217.055433][ T6886] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  217.217383][ T7644] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  217.326027][  T318] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  217.459581][ T6931] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  217.567928][  T213] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  217.692168][ T6611] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  217.846143][ T6886] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  218.078404][  T462] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  218.202346][ T6886] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  218.950658][ T9349] binder: 9349:9348 cannot find target node
[  218.950721][ T9349] binder: 9348:9349 transaction async to 0:0 failed 71/29189/-22, code 0 size 0-0 line 3150
[  218.974237][ T9349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.868'.
[  219.734984][ T6282] binder: undelivered TRANSACTION_ERROR: 29189
[  220.998572][ T9389] tipc: Started in network mode
[  220.998892][ T9389] tipc: Node identity ac1414aa, cluster identity 4711
[  221.001978][ T9389] tipc: Enabled bearer <udp:syz2>, priority 10
[  221.325318][ T9390] sctp: [Deprecated]: syz.0.876 (pid 9390) Use of int in max_burst socket option deprecated.
[  221.325318][ T9390] Use struct sctp_assoc_value instead
[  221.925139][ T9387] loop2: detected capacity change from 0 to 4096
[  222.090611][  T462] net_ratelimit: 17 callbacks suppressed
[  222.095478][  T462] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  222.177831][ T1766] tipc: Node number set to 2886997162
[  222.208429][ T6611] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  222.329611][  T462] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  222.446428][  T213] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  222.566453][ T6611] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  222.682906][  T213] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  222.796429][ T7644] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  222.917367][  T213] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  223.035500][  T462] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  223.141528][ T9423] netlink: 32 bytes leftover after parsing attributes in process `syz.0.891'.
[  223.157837][ T6611] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  223.513876][ T9434] cgroup: fork rejected by pids controller in /syz4
[  226.219646][ T9495] netlink: 32 bytes leftover after parsing attributes in process `syz.3.905'.
[  227.232641][ T6931] net_ratelimit: 17 callbacks suppressed
[  227.234927][ T6931] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  227.344061][ T9503] fuse: Bad value for 'fd'
[  227.349589][   T45] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  227.357908][ T9505] loop3: detected capacity change from 0 to 128
[  227.399870][ T9505] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  227.499946][  T462] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  227.605924][ T6611] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  227.679485][ T9518] loop4: detected capacity change from 0 to 1024
[  228.146171][ T9516] cgroup: fork rejected by pids controller in /syz0
[  228.157061][  T213] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  228.161272][ T6487] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  228.239913][ T9518] hfsplus: request for non-existent node 33423360 in B*Tree
[  228.240049][ T9518] hfsplus: request for non-existent node 33423360 in B*Tree
[  228.262711][ T9518] hfsplus: request for non-existent node 33423360 in B*Tree
[  228.262842][ T9518] hfsplus: request for non-existent node 33423360 in B*Tree
[  228.266969][   T45] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  228.285496][ T9518] hfsplus: request for non-existent node 33423360 in B*Tree
[  228.285538][ T9518] hfsplus: request for non-existent node 33423360 in B*Tree
[  228.306871][ T9518] hfsplus: request for non-existent node 33423360 in B*Tree
[  228.306900][ T9518] hfsplus: request for non-existent node 33423360 in B*Tree
[  228.328805][ T9518] hfsplus: request for non-existent node 33423360 in B*Tree
[  228.328833][ T9518] hfsplus: request for non-existent node 33423360 in B*Tree
[  228.368090][ T9518] hfsplus: request for non-existent node 33423360 in B*Tree
[  228.368144][ T9518] hfsplus: request for non-existent node 33423360 in B*Tree
[  228.369451][ T9518] hfsplus: request for non-existent node 33423360 in B*Tree
[  228.369481][ T9518] hfsplus: request for non-existent node 33423360 in B*Tree
[  228.380007][  T213] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  228.385300][ T9518] hfsplus: request for non-existent node 33423360 in B*Tree
[  228.385346][ T9518] hfsplus: request for non-existent node 33423360 in B*Tree
[  228.396107][ T9518] hfsplus: request for non-existent node 33423360 in B*Tree
[  228.396160][ T9518] hfsplus: request for non-existent node 33423360 in B*Tree
[  228.397913][ T9518] hfsplus: request for non-existent node 33423360 in B*Tree
[  228.397945][ T9518] hfsplus: request for non-existent node 33423360 in B*Tree
[  228.426057][ T9518] hfsplus: request for non-existent node 33423360 in B*Tree
[  228.426211][ T9518] hfsplus: request for non-existent node 33423360 in B*Tree
[  228.541938][  T462] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  228.655372][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  229.338635][  T213] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  229.428831][ T9565] netlink: 32 bytes leftover after parsing attributes in process `syz.0.918'.
[  230.964106][ T9582] cgroup: fork rejected by pids controller in /syz3
[  232.617992][ T6886] net_ratelimit: 13 callbacks suppressed
[  232.618060][ T6886] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  232.728632][ T6611] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  232.838429][ T6931] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  233.075122][ T6886] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  233.186145][  T318] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  233.265147][ T9650] netlink: 'syz.1.937': attribute type 10 has an invalid length.
[  233.271187][ T9650] bond0: (slave batadv0): Error -22 calling dev_set_mtu
[  233.297638][   T42] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  233.407561][   T42] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  233.516230][   T45] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  233.632249][   T45] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  233.840144][   T42] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  233.847745][ T9641] loop0: detected capacity change from 0 to 32768
[  234.530271][ T9641] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.934 (9641)
[  234.545376][ T9641] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  234.545477][ T9641] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm
[  234.545534][ T9641] BTRFS info (device loop0): using free-space-tree
[  234.618920][ T9694] netlink: 'syz.1.940': attribute type 9 has an invalid length.
[  235.001519][ T9700] loop3: detected capacity change from 0 to 40427
[  235.039683][ T9700] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3fffff
[  235.052210][ T9641] BTRFS info (device loop0): rebuilding free space tree
[  235.060728][ T9700] F2FS-fs (loop3): invalid crc value
[  235.169186][ T9700] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  235.326493][ T9704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  235.330648][ T9704] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  235.874185][ T6488] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  236.624111][ T9723] loop3: detected capacity change from 0 to 512
[  237.008216][ T9723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.053929][ T9723] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.948: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1
[  237.058328][ T9723] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 12: comm syz.3.948: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[  237.058736][ T9723] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 13: comm syz.3.948: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[  237.059638][ T9723] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 14: comm syz.3.948: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  237.060821][ T9723] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 15: comm syz.3.948: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  237.061853][ T9723] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 16: comm syz.3.948: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[  237.062123][ T9723] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 17: comm syz.3.948: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  237.062916][ T9723] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #2: block 18: comm syz.3.948: lblock 23 mapped to illegal pblock 18 (length 1)
[  237.063239][ T9723] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 19: comm syz.3.948: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  237.064461][ T9723] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 20: comm syz.3.948: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0
[  237.330260][ T9762] netlink: 'syz.2.952': attribute type 9 has an invalid length.
[  237.667309][  T318] net_ratelimit: 26 callbacks suppressed
[  237.669928][  T318] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  237.785539][   T42] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  237.925153][   T42] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  238.168147][ T6611] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  238.253118][ T9759] loop4: detected capacity change from 0 to 32768
[  238.273379][ T9759] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  238.277876][ T6931] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  238.320349][ T9759] 
[  238.321012][ T9759] ======================================================
[  238.322879][ T9759] WARNING: possible circular locking dependency detected
[  238.324747][ T9759] 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 Not tainted
[  238.326488][ T9759] ------------------------------------------------------
[  238.328369][ T9759] syz.4.951/9759 is trying to acquire lock:
[  238.329907][ T9759] ffff0000f2cfa610 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_write_begin_nolock+0x8e4/0x3864
[  238.332590][ T9759] 
[  238.332590][ T9759] but task is already holding lock:
[  238.334563][ T9759] ffff0000f3f03f60 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_write_begin+0x190/0x30c
[  238.337342][ T9759] 
[  238.337342][ T9759] which lock already depends on the new lock.
[  238.337342][ T9759] 
[  238.340085][ T9759] 
[  238.340085][ T9759] the existing dependency chain (in reverse order) is:
[  238.342438][ T9759] 
[  238.342438][ T9759] -> #4 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}:
[  238.344753][ T9759]        down_write+0x50/0xc0
[  238.345966][ T9759]        ocfs2_try_remove_refcount_tree+0xb4/0x2d8
[  238.347759][ T9759]        ocfs2_xattr_set+0x460/0xe9c
[  238.349151][ T9759]        ocfs2_set_acl+0x574/0x628
[  238.350486][ T9759]        ocfs2_iop_set_acl+0x190/0x25c
[  238.351935][ T9759]        vfs_set_acl+0x70c/0x974
[  238.353319][ T9759]        do_set_acl+0xc8/0x1a8
[  238.354548][ T9759]        filename_setxattr+0x268/0x4f8
[  238.356029][ T9759]        path_setxattrat+0x2e8/0x320
[  238.357395][ T9759]        __arm64_sys_setxattr+0xc0/0xdc
[  238.358888][ T9759]        invoke_syscall+0x98/0x2b8
[  238.360201][ T9759]        el0_svc_common+0x130/0x23c
[  238.361559][ T9759]        do_el0_svc+0x48/0x58
[  238.362764][ T9759]        el0_svc+0x58/0x17c
[  238.363900][ T9759]        el0t_64_sync_handler+0x78/0x108
[  238.365445][ T9759]        el0t_64_sync+0x198/0x19c
[  238.366785][ T9759] 
[  238.366785][ T9759] -> #3 (&oi->ip_xattr_sem){++++}-{4:4}:
[  238.368851][ T9759]        down_read+0x58/0x2f8
[  238.370100][ T9759]        ocfs2_xattr_get+0xe8/0x220
[  238.371478][ T9759]        ocfs2_xattr_security_get+0x40/0x54
[  238.373076][ T9759]        __vfs_getxattr+0x394/0x3c0
[  238.374461][ T9759]        smk_fetch+0xc4/0x150
[  238.375692][ T9759]        smack_d_instantiate+0x53c/0x7a4
[  238.377201][ T9759]        security_d_instantiate+0x100/0x204
[  238.378826][ T9759]        d_instantiate+0x5c/0x9c
[  238.380138][ T9759]        ocfs2_mknod+0x151c/0x1cf0
[  238.381456][ T9759]        ocfs2_create+0x190/0x474
[  238.382749][ T9759]        path_openat+0x12d8/0x2c40
[  238.384071][ T9759]        do_filp_open+0x18c/0x36c
[  238.385403][ T9759]        do_sys_openat2+0x11c/0x1b4
[  238.386751][ T9759]        __arm64_sys_openat+0x120/0x158
[  238.388270][ T9759]        invoke_syscall+0x98/0x2b8
[  238.389635][ T9759]        el0_svc_common+0x130/0x23c
[  238.390987][ T9759]        do_el0_svc+0x48/0x58
[  238.392217][ T9759]        el0_svc+0x58/0x17c
[  238.393494][ T9759]        el0t_64_sync_handler+0x78/0x108
[  238.394941][ T9759]        el0t_64_sync+0x198/0x19c
[  238.396272][ T9759] 
[  238.396272][ T9759] -> #2 (jbd2_handle){++++}-{0:0}:
[  238.398178][ T9759]        start_this_handle+0xe74/0x10dc
[  238.399633][ T9759]        jbd2__journal_start+0x288/0x51c
[  238.400906][ T9759]        jbd2_journal_start+0x3c/0x4c
[  238.402126][ T9759]        ocfs2_start_trans+0x368/0x6ac
[  238.403384][ T9759]        ocfs2_mknod+0xc50/0x1cf0
[  238.404545][ T9759]        ocfs2_create+0x190/0x474
[  238.405910][ T9759]        path_openat+0x12d8/0x2c40
[  238.407337][ T9759]        do_filp_open+0x18c/0x36c
[  238.408674][ T9759]        do_sys_openat2+0x11c/0x1b4
[  238.410051][ T9759]        __arm64_sys_openat+0x120/0x158
[  238.411499][ T9759]        invoke_syscall+0x98/0x2b8
[  238.412839][ T9759]        el0_svc_common+0x130/0x23c
[  238.414211][ T9759]        do_el0_svc+0x48/0x58
[  238.415410][ T9759]        el0_svc+0x58/0x17c
[  238.416565][ T9759]        el0t_64_sync_handler+0x78/0x108
[  238.418053][ T9759]        el0t_64_sync+0x198/0x19c
[  238.419389][ T9759] 
[  238.419389][ T9759] -> #1 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  238.421697][ T9759]        down_read+0x58/0x2f8
[  238.422906][ T9759]        ocfs2_start_trans+0x35c/0x6ac
[  238.424415][ T9759]        ocfs2_mknod+0xc50/0x1cf0
[  238.425791][ T9759]        ocfs2_create+0x190/0x474
** replaying previous printk message **
[  238.426509][ T6611] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  238.430019][ T9759]        path_openat+0x12d8/0x2c40
[  238.431431][ T9759]        do_filp_open+0x18c/0x36c
[  238.432738][ T9759]        do_sys_openat2+0x11c/0x1b4
[  238.434138][ T9759]        __arm64_sys_openat+0x120/0x158
[  238.435620][ T9759]        invoke_syscall+0x98/0x2b8
[  238.436920][ T9759]        el0_svc_common+0x130/0x23c
[  238.438296][ T9759]        do_el0_svc+0x48/0x58
[  238.439597][ T9759]        el0_svc+0x58/0x17c
[  238.440805][ T9759]        el0t_64_sync_handler+0x78/0x108
[  238.442342][ T9759]        el0t_64_sync+0x198/0x19c
[  238.443683][ T9759] 
[  238.443683][ T9759] -> #0 (sb_internal#2){.+.+}-{0:0}:
[  238.445717][ T9759]        __lock_acquire+0x1728/0x3058
[  238.447157][ T9759]        lock_acquire+0x14c/0x2e0
[  238.448532][ T9759]        ocfs2_start_trans+0x1f4/0x6ac
[  238.449949][ T9759]        ocfs2_write_begin_nolock+0x8e4/0x3864
[  238.451654][ T9759]        ocfs2_write_begin+0x1b4/0x30c
[  238.452968][ T9759]        generic_perform_write+0x23c/0x79c
[  238.454519][ T9759]        __generic_file_write_iter+0xfc/0x204
[  238.456075][ T9759]        ocfs2_file_write_iter+0x1328/0x1b84
[  238.457705][ T9759]        vfs_write+0x62c/0x97c
[  238.458952][ T9759]        ksys_write+0x120/0x210
[  238.460214][ T9759]        __arm64_sys_write+0x7c/0x90
[  238.461592][ T9759]        invoke_syscall+0x98/0x2b8
[  238.462909][ T9759]        el0_svc_common+0x130/0x23c
[  238.464298][ T9759]        do_el0_svc+0x48/0x58
[  238.465539][ T9759]        el0_svc+0x58/0x17c
[  238.466745][ T9759]        el0t_64_sync_handler+0x78/0x108
[  238.468274][ T9759]        el0t_64_sync+0x198/0x19c
[  238.469639][ T9759] 
[  238.469639][ T9759] other info that might help us debug this:
[  238.469639][ T9759] 
[  238.472324][ T9759] Chain exists of:
[  238.472324][ T9759]   sb_internal#2 --> &oi->ip_xattr_sem --> &ocfs2_file_ip_alloc_sem_key
[  238.472324][ T9759] 
[  238.476129][ T9759]  Possible unsafe locking scenario:
[  238.476129][ T9759] 
[  238.478107][ T9759]        CPU0                    CPU1
[  238.479514][ T9759]        ----                    ----
[  238.480962][ T9759]   lock(&ocfs2_file_ip_alloc_sem_key);
[  238.482426][ T9759]                                lock(&oi->ip_xattr_sem);
[  238.484290][ T9759]                                lock(&ocfs2_file_ip_alloc_sem_key);
[  238.486391][ T9759]   rlock(sb_internal#2);
[  238.487529][ T9759] 
[  238.487529][ T9759]  *** DEADLOCK ***
[  238.487529][ T9759] 
[  238.489624][ T9759] 4 locks held by syz.4.951/9759:
[  238.490919][ T9759]  #0: ffff0000d4ecbeb8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x1fc/0x2a0
[  238.493299][ T9759]  #1: ffff0000f2cfa420 (sb_writers#11){.+.+}-{0:0}, at: vfs_write+0x244/0x97c
[  238.495746][ T9759]  #2: ffff0000f3f042c0 (&sb->s_type->i_mutex_key#20){+.+.}-{4:4}, at: ocfs2_file_write_iter+0x3a0/0x1b84
[  238.498705][ T9759]  #3: ffff0000f3f03f60 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_write_begin+0x190/0x30c
[  238.501639][ T9759] 
[  238.501639][ T9759] stack backtrace:
[  238.503167][ T9759] CPU: 1 UID: 0 PID: 9759 Comm: syz.4.951 Not tainted 6.15.0-rc7-syzkaller-gd7fa1af5b33e #0 PREEMPT 
[  238.506030][ T9759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  238.508710][ T9759] Call trace:
[  238.509564][ T9759]  show_stack+0x2c/0x3c (C)
[  238.510778][ T9759]  __dump_stack+0x30/0x40
[  238.511960][ T9759]  dump_stack_lvl+0xd8/0x12c
[  238.513240][ T9759]  dump_stack+0x1c/0x28
[  238.514355][ T9759]  print_circular_bug+0x324/0x32c
[  238.515693][ T9759]  check_noncircular+0x154/0x174
[  238.516941][ T9759]  __lock_acquire+0x1728/0x3058
[  238.518227][ T9759]  lock_acquire+0x14c/0x2e0
[  238.519407][ T9759]  ocfs2_start_trans+0x1f4/0x6ac
[  238.520741][ T9759]  ocfs2_write_begin_nolock+0x8e4/0x3864
[  238.522201][ T9759]  ocfs2_write_begin+0x1b4/0x30c
[  238.523481][ T9759]  generic_perform_write+0x23c/0x79c
[  238.524829][ T9759]  __generic_file_write_iter+0xfc/0x204
[  238.526300][ T9759]  ocfs2_file_write_iter+0x1328/0x1b84
[  238.527744][ T9759]  vfs_write+0x62c/0x97c
[  238.528870][ T9759]  ksys_write+0x120/0x210
[  238.530003][ T9759]  __arm64_sys_write+0x7c/0x90
[  238.531283][ T9759]  invoke_syscall+0x98/0x2b8
[  238.532500][ T9759]  el0_svc_common+0x130/0x23c
[  238.533728][ T9759]  do_el0_svc+0x48/0x58
[  238.534817][ T9759]  el0_svc+0x58/0x17c
[  238.535887][ T9759]  el0t_64_sync_handler+0x78/0x108
[  238.537234][ T9759]  el0t_64_sync+0x198/0x19c
[  238.545391][   T45] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  238.684261][   T42] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  238.802634][   T45] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  238.858245][ T6493] ocfs2: Unmounting device (7,4) on (node local)
[  238.905804][ T6611] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  239.614624][ T6487] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.735421][   T45] net_ratelimit: 33 callbacks suppressed
[  242.735479][   T45] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  242.845332][ T6886] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  242.955345][ T6611] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  243.065266][ T6611] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  243.175284][ T6886] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  243.285921][ T6886] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  243.395348][ T6886] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  243.505756][   T45] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  243.625321][ T6611] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  243.745261][ T6931] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  247.795373][   T45] net_ratelimit: 35 callbacks suppressed
[  247.795434][   T45] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  247.905292][ T6886] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  248.015265][ T6931] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  248.125332][ T6886] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  248.235333][ T6886] bond1: (slave ip6gretap1): failed to get link speed/duplex