last executing test programs:

6m32.533328632s ago: executing program 4 (id=514):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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")
syz_mount_image$ext4(&(0x7f0000001080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f0000000040)={[{@nogrpid}, {@discard}, {@user_xattr}]}, 0x1, 0x468, &(0x7f0000000840)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000050000000000000000000004006ee40002000000000000"], 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x64000600)
openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0xa82, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f00000006c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r2, 0x0, 0x0, 0x8001}])
io_pgetevents(r3, 0x4, 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000180), 0x0)

6m30.888520849s ago: executing program 4 (id=516):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = socket(0x1, 0x3, 0x0)
ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)=0x13)
ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f00000002c0)={0x0, "511299aa76a6d31300", 0x520, 0x6, 0x0, 0x4, 0x2})
socket$inet_tcp(0x2, 0x1, 0x0)
mlock2(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x5, 0x0)

6m29.734397319s ago: executing program 4 (id=519):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), 0x4)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff0000"], 0x48)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff, 0x4da844320aa5680a, r3}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0x4)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180))

6m25.656112768s ago: executing program 4 (id=525):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d0000000000000000"], 0x1, 0x17d, &(0x7f00000004c0)="$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")
syz_mount_image$ext4(&(0x7f0000001080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f0000000040)={[{@nogrpid}, {@discard}, {@user_xattr}]}, 0x1, 0x468, &(0x7f0000000840)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000050000000000000000000004006ee40002000000000000"], 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x64000600)
openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0xa82, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x3000080, &(0x7f0000000240)={[{@noblock_validity}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@nomblk_io_submit}, {@dax_always}, {@nomblk_io_submit}]}, 0x3, 0x574, &(0x7f00000003c0)="$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")
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f00000006c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r2, 0x0, 0x0, 0x8001}])
clock_gettime(0x0, &(0x7f0000000080)={<r4=>0x0, <r5=>0x0})
io_pgetevents(r3, 0x4, 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000180)={r4, r5+10000000}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)

6m24.467505518s ago: executing program 4 (id=527):
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00')
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
migrate_pages(0x0, 0x200, &(0x7f0000000000)=0xffffffff7fffffff, &(0x7f00000000c0)=0x3)

6m18.552965598s ago: executing program 4 (id=532):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
tgkill(0x0, 0x0, 0x1e)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc)
connect$bt_l2cap(r2, 0x0, 0x0)

6m1.928503539s ago: executing program 32 (id=532):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
tgkill(0x0, 0x0, 0x1e)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc)
connect$bt_l2cap(r2, 0x0, 0x0)

5m49.882730813s ago: executing program 0 (id=562):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000002000010100000000000000000200140000000000000000002a000200ac1414bb1400f4f3030070696d367265673000"], 0x38}}, 0x0)
timer_create(0x7, &(0x7f0000000040)={0x0, 0x35, 0x5, @tid=0xffffffffffffffff}, &(0x7f0000000080))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000000)='.\x02\x00', 0x4810, &(0x7f0000000180)=ANY=[], 0x3, 0x2e7, &(0x7f0000001900)="$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")
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x40)
r5 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200), 0x806000)
setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty=0x14, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1, 0x1000000}}}}}, 0x0)

5m45.93346355s ago: executing program 0 (id=576):
ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0x400, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400b881}, 0x3000c81c)
r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
write$binfmt_elf64(r3, 0x0, 0x76)

5m44.699225511s ago: executing program 0 (id=569):
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00')
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
migrate_pages(0x0, 0x200, &(0x7f0000000000)=0xffffffff7fffffff, &(0x7f00000000c0)=0x3)

5m43.53039962s ago: executing program 0 (id=570):
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000021c0)={0x18, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0)
r4 = syz_open_procfs(r1, &(0x7f0000000000)='net/udp\x00')
lseek(r4, 0x1000000, 0x0)

5m35.122637293s ago: executing program 0 (id=583):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f00000000c0)=0x46, 0x4)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)

5m34.145756959s ago: executing program 0 (id=585):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$eJzsmD9P6lAYxp/TciH35iY6u2giCTBY2qJGBgdmB038FzeJVIIWMdBB2PwUzn4CZ+JC4sfQQZ1ccHNyqGl7gAP+HdTE+PyG9zzv6dvTc94mT5OCEPJrub15uD5LJS90AP+RRELO3+mDGk2pb489Zi4ry+cn5v1Vu7OUH11PAPD9jz8/BqBT0OHJ3PeH707KcQ1aX69DQ0bqTQgYUm9Dw4bUDgS2pN5TdC2oN4zdiusYOzW3FAgzCFYQ7CDkRvfXPRYoKfsTyvVGs7VfdF2n/oXivf51CxoWlf2p76vXG1PpnwUNltQ5CKxKvYBErzdRS5TzT8QG6+vffH4KCoqfJgb+5J8KpBR/iin+kfWqh9lGszVTqRbLTtk5sO3cvDlrmnN2NjSiKL7hf39Df/qnrP/nldq4iOOo6Hl1K4r93I7iS44bD/1PQ3o6yoWcUwm/B+NiKhjSuswJIYQQQgghhBBCCCHk05mECP+CDpF/NmWvhNVPAQAA//94vnZt")
syz_mount_image$ext4(&(0x7f0000001080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f0000000040)={[{@nogrpid}, {@discard}, {@user_xattr}]}, 0x1, 0x468, &(0x7f0000000840)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000050000000000000000000004006ee40002000000000000"], 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x64000600)

5m18.73700415s ago: executing program 33 (id=585):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d0000000000000000"], 0x1, 0x17d, &(0x7f00000004c0)="$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")
syz_mount_image$ext4(&(0x7f0000001080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f0000000040)={[{@nogrpid}, {@discard}, {@user_xattr}]}, 0x1, 0x468, &(0x7f0000000840)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000050000000000000000000004006ee40002000000000000"], 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x64000600)

3m57.927046536s ago: executing program 6 (id=704):
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/netfilter\x00')
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r2 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2)
ftruncate(r2, 0xffff)
fcntl$addseals(r2, 0x409, 0x7)
r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x8000})
memfd_create(&(0x7f00000000c0)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x4)
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, 0x0)
link(&(0x7f0000000000)='./file0\x00', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xfe, 0x9a, 0x0, 0x10, 0xbb4, 0xa90, 0x773f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0xf0, 0x0, 0x0, 0xd3, 0x1f, 0x9c, 0x3}}]}}]}}, 0x0)

3m53.807304496s ago: executing program 6 (id=707):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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")
syz_mount_image$ext4(&(0x7f0000001080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f0000000040)={[{@nogrpid}, {@discard}, {@user_xattr}]}, 0x1, 0x468, &(0x7f0000000840)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000050000000000000000000004006ee40002000000000000"], 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x64000600)
openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0xa82, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x3000080, &(0x7f0000000240)={[{@noblock_validity}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@nomblk_io_submit}, {@dax_always}, {@nomblk_io_submit}]}, 0x3, 0x574, &(0x7f00000003c0)="$eJzs3U9rFOcfAPDvbBKNxt/PCCJtDyXgoRbrxiT9k0JBeyytVGjvdknGINm4kt2ISQX1UC+9FCmUUqH0BfTeo7QvoK9CaAUpEtpDLymzmTVrks3ftYmdzwdGn2eeSb7zzMz3yTM7u2wAhTWU/VOKeDkivkoijra19UbeOLS83eKTmxPZksTS0id/JJHk61rbJ/n/A3nlpYj4+YuI06W1cevzC9OVajWdzevDjZlrw/X5hTNXZipT6VR6dXRsbPytsdF333m7a319/eJf33784IPxL08ufvPjo2P3kjgfR/K2lX707ybE7fbKUAzlx6Qvzq/acGQ3UfahZK93gB3pyfO8L7Ix4Gj05FkP/PfdiogloKAS+Q8F1ZoHtO7t2+/ni+Dx+8s3QGv737v82kj0N++NDi8mz9wZZfe7g12In8X46ff797IlVr2estqtLsQDaLl9JyLO9vauHf+SfPzbubPNF483tjpG0f7+wF56kM1/3ljOu1/G2/Ov9HT+E+vMfwbWyd2d2Dz/S4+6EKajbP733rrz36dD12BPXvtfc87Xl1y+Uk3PRsT/I+JU9B3M6hs9zxlffLjUqa19/pctWfzWXDDfj0e9B5/9mclKo7KbPrd7fCfilZX5bxJrxv/+5lx39fnPjsfFLcY4kd5/tVPb5v1v1/0Z8NIPEa+te/5XnmglGz+fHG5eD8Otq2KtP++e+LVT/O31v/uy83944/4PJu3Pa+vbj/F9/99pp7adXv8Hkk+b5QP5uhuVRmN2JOJA8tHa9aMrP9uqt7bP+n/q5Pr5v9H1fygiPtti/+8ev9tx0/1w/ie3df63X3j44effdYq/tfP/ZrN0Kl+zlfFvqzu4m2MHAAAAAAAA+00pIo5EUio/LZdK5fLy+zuOx+FStVZvnL5cm7s6Gc3Pyg5GX6n1pPto2/shRvL3w7bqo6vqYxFxLCK+7jnUrJcnatXJve48AAAAAAAAAAAAAAAAAAAA7BMDHT7/n/mtZ6/3DnjufOU3FNem+d+Nb3oC9iV//6G45D8Ul/yH4pL/UFzyH4pL/kNxyX8oLvkPAAAAAAAAAAAAAAAAAAAAAAAAAAAAXXXxwoVsWVp8cnMiq09en5+brl0/M5nWp8szcxPlidrstfJUrTZVTcsTtZnNfl+1Vrs2MhpzN4Ybab0xXJ9fuDRTm7vauHRlpjKVXkr7/pVeAQAAAAAAAAAAAAAAAAAAwIulPr8wXalW01mFjoVzsU7TwItz6JLNdvVcfjHsKETv3ndQ4TkU9nhgAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA2/wQAAP//GSwxOw==")
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f00000006c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r2, 0x0, 0x0, 0x8001}])
io_pgetevents(r3, 0x4, 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000180), 0x0)

3m52.239012192s ago: executing program 6 (id=710):
openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fanotify_init(0x0, 0x80000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, 0x0, 0x0)
listen(r1, 0x9)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r2, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x6, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7}, 0x0, 0x0)

3m48.604872744s ago: executing program 6 (id=712):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000001c0)={0xef, 0xdddd1000})
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup3(r3, r4, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0)
socket$inet6(0xa, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000008000000010000"], 0x17)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000000)={0xd, 0x208, 0x6, 0xe211}, &(0x7f0000000180)=0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40)

3m46.828883124s ago: executing program 6 (id=715):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0)
io_submit(0x0, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r4, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0])

3m45.673302923s ago: executing program 6 (id=719):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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")
syz_mount_image$ext4(&(0x7f0000001080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f0000000040)={[{@nogrpid}, {@discard}, {@user_xattr}]}, 0x1, 0x468, &(0x7f0000000840)="$eJzs3M1vFVUfB/Dv3L7w+jzlecQ3BKmCUEVbWxQ1ISTsXBBd6MJtQ0tDKKC0JkKIgcSFWxP9A3Qvf4JRE19WrgxbNbpQEmKgCxbG1MztveW29PYF2l5sP59kyjkzU86ZOf3N3HvyywmwbnWXP4pka5Ifk3RNVWee0D31z8SNi8fLrcjk5Bt/FtXzbt64eLx+av33tpQ/KklPJal8UOSxOdodO3/h1ODo6PC5Wr1v/PTbfWPnLzx38vTgyPDI8Jn+g/2HDr304ssD/ct2ra/+MPHbZ+2vbUxy5taRgc1lf7fWjjVex3LpTvfMe9lg33I31mIPNpSL9oXPn2x2Y1hVbUnK4eqoxn9X2nJ78Lry3c8t7RywoiZLG5oevjQJrGFFZtYraVVPgNVVf9GX33/rW5p/HmCNub576gvgzdrczsT0PEh7KlOFd/Z989WM7/fLqTvJW8de31VuWaF5GAAAAID17MujSZ5NDnc1zP9VVfLQ9Fmd1fLDSR5J8miSHUk1r2dnkl1JHk+yu55PtLDp7I/Z5985/1O5dg+XxwKuH00ON+R2TTSMf822tlrtP2UlHcWJk6PDzyf5b5KedGwo682ztJom+mysF+rzf+VWtl+fC6z141r7rPnoocHxwbu+YGa4fjnZ0T7X+BfTmUDlCD6R5MnF/IffVjPqRrZf+Wt61ysfPnC12endC44/K2ny02T/nPF/O26L+fMz+6rPg776U+FO339y6PNm7Rv/1irjf/P847+taMzXHVt6G19v/+WnZscWHv+5n/+dxZvVDnbW9r03OD5+rj/pLI7duX9g6X1eq+r3o36/yvHv2TP3+///td8pb+ieJHuTPFXLXd5fffcnTyd5JsmBedq8NPLr382Oif/WKsd/aEnxv/TCH5c/2tus/cXF/wvVzvTU9vj8t7DFDlCr+wkAAAAAAADA8qhU18ArKr3T5Uqlt3dqDb/t2VwZPTs2fuDE2XfPDE2tlbctHZV6pldXQz5of7V8uz4wq34wyf+SfNy2qVrvPX52dKjVFw/r3JYm8V/6va3VvQNW3CLWa02yacX7Aay+xcV/I6s3w1qx9PgH1orFxb9VQWEt8v6H9Uv8w/ol/mH9Ev+wfs2O//evHjty64udV1rUHWC1dLS6A0CL3Mu6fgoKd1+o/wWeGpys5ZnfJx379xc2LeZmFsX8T4BWPZEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7i//BAAA//+sAMBz")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000050000000000000000000004006ee40002000000000000"], 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x64000600)
openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0xa82, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x3000080, &(0x7f0000000240)={[{@noblock_validity}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@nomblk_io_submit}, {@dax_always}, {@nomblk_io_submit}]}, 0x3, 0x574, &(0x7f00000003c0)="$eJzs3U9rFOcfAPDvbBKNxt/PCCJtDyXgoRbrxiT9k0JBeyytVGjvdknGINm4kt2ISQX1UC+9FCmUUqH0BfTeo7QvoK9CaAUpEtpDLymzmTVrks3ftYmdzwdGn2eeSb7zzMz3yTM7u2wAhTWU/VOKeDkivkoijra19UbeOLS83eKTmxPZksTS0id/JJHk61rbJ/n/A3nlpYj4+YuI06W1cevzC9OVajWdzevDjZlrw/X5hTNXZipT6VR6dXRsbPytsdF333m7a319/eJf33784IPxL08ufvPjo2P3kjgfR/K2lX707ybE7fbKUAzlx6Qvzq/acGQ3UfahZK93gB3pyfO8L7Ix4Gj05FkP/PfdiogloKAS+Q8F1ZoHtO7t2+/ni+Dx+8s3QGv737v82kj0N++NDi8mz9wZZfe7g12In8X46ff797IlVr2estqtLsQDaLl9JyLO9vauHf+SfPzbubPNF483tjpG0f7+wF56kM1/3ljOu1/G2/Ov9HT+E+vMfwbWyd2d2Dz/S4+6EKajbP733rrz36dD12BPXvtfc87Xl1y+Uk3PRsT/I+JU9B3M6hs9zxlffLjUqa19/pctWfzWXDDfj0e9B5/9mclKo7KbPrd7fCfilZX5bxJrxv/+5lx39fnPjsfFLcY4kd5/tVPb5v1v1/0Z8NIPEa+te/5XnmglGz+fHG5eD8Otq2KtP++e+LVT/O31v/uy83944/4PJu3Pa+vbj/F9/99pp7adXv8Hkk+b5QP5uhuVRmN2JOJA8tHa9aMrP9uqt7bP+n/q5Pr5v9H1fygiPtti/+8ev9tx0/1w/ie3df63X3j44effdYq/tfP/ZrN0Kl+zlfFvqzu4m2MHAAAAAAAA+00pIo5EUio/LZdK5fLy+zuOx+FStVZvnL5cm7s6Gc3Pyg5GX6n1pPto2/shRvL3w7bqo6vqYxFxLCK+7jnUrJcnatXJve48AAAAAAAAAAAAAAAAAAAA7BMDHT7/n/mtZ6/3DnjufOU3FNem+d+Nb3oC9iV//6G45D8Ul/yH4pL/UFzyH4pL/kNxyX8oLvkPAAAAAAAAAAAAAAAAAAAAAAAAAAAAXXXxwoVsWVp8cnMiq09en5+brl0/M5nWp8szcxPlidrstfJUrTZVTcsTtZnNfl+1Vrs2MhpzN4Ybab0xXJ9fuDRTm7vauHRlpjKVXkr7/pVeAQAAAAAAAAAAAAAAAAAAwIulPr8wXalW01mFjoVzsU7TwItz6JLNdvVcfjHsKETv3ndQ4TkU9nhgAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA2/wQAAP//GSwxOw==")
socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r2=>0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r3=>0x0, <r4=>0x0})
io_pgetevents(r2, 0x4, 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000180)={r3, r4+10000000}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
io_getevents(r2, 0x3, 0x3, &(0x7f00000000c0)=[{}, {}, {}], 0x0)

3m29.193646042s ago: executing program 34 (id=719):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d0000000000000000"], 0x1, 0x17d, &(0x7f00000004c0)="$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")
syz_mount_image$ext4(&(0x7f0000001080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f0000000040)={[{@nogrpid}, {@discard}, {@user_xattr}]}, 0x1, 0x468, &(0x7f0000000840)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000050000000000000000000004006ee40002000000000000"], 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x64000600)
openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0xa82, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x3000080, &(0x7f0000000240)={[{@noblock_validity}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@nomblk_io_submit}, {@dax_always}, {@nomblk_io_submit}]}, 0x3, 0x574, &(0x7f00000003c0)="$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")
socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r2=>0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r3=>0x0, <r4=>0x0})
io_pgetevents(r2, 0x4, 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000180)={r3, r4+10000000}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
io_getevents(r2, 0x3, 0x3, &(0x7f00000000c0)=[{}, {}, {}], 0x0)

22.525423129s ago: executing program 3 (id=940):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), 0x4)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff0000"], 0x48)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff, 0x4da844320aa5680a, r3}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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")
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$TCFLSH(r5, 0x400455c8, 0x4)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0x4)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000200)=0xfb)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180))

18.206680322s ago: executing program 3 (id=942):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close(0xffffffffffffffff)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0xc0844123, &(0x7f0000002fc0))

14.878241328s ago: executing program 3 (id=947):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000a00)={[{@nodatacow}, {@nobarrier}, {@nodiscard}, {@clear_cache}, {@ssd_spread}, {@clear_cache}, {@ref_verify}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@rescan_uuid_tree}, {@acl}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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")
r0 = socket(0x1, 0x3, 0x0)
ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file6\x00', 0x101442, 0xfb)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
getpeername$packet(r2, &(0x7f0000000040), &(0x7f0000000180)=0x13)
r7 = syz_open_dev$radio(0x0, 0x3, 0x2)
ioctl$VIDIOC_G_MODULATOR(r7, 0xc0445636, &(0x7f00000002c0)={0x0, "511299aa76a6d31300", 0x520, 0x6, 0x0, 0x4, 0x2})
socket$inet_tcp(0x2, 0x1, 0x0)
mlock2(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x5, 0x0)
recvmmsg(r2, &(0x7f00000037c0), 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7, 0x1, [0x180000, 0x4]})

14.078890362s ago: executing program 1 (id=948):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000002000010100000000000000000200140000000000000000002a000200ac1414bb1400f4f3030070696d367265673000"], 0x38}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()
syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000000)='.\x02\x00', 0x4810, &(0x7f0000000180)=ANY=[], 0x3, 0x2e7, &(0x7f0000001900)="$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")
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x40)
r5 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x2, 0x8000000000400})
setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty=0x14, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1, 0x1000000}}}}}, 0x0)

13.723175288s ago: executing program 2 (id=949):
syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000440)={0x1, 0x0, {0x0, 0x0, 0x4001, 0x6}})
r4 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r4, &(0x7f0000000080)={0x2, 0x0, @local, 0x2}, 0x10)
getsockname$l2tp(r4, 0x0, &(0x7f0000000040))
syz_open_dev$tty20(0xc, 0x4, 0x1)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2f, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x1000000000000000}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0)
io_uring_setup(0x1581, &(0x7f0000000a40)={0x0, 0x2000000, 0x20, 0x3, 0x138})
r6 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24)

12.349411751s ago: executing program 1 (id=950):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000001c0)={0x60, 0x2, &(0x7f0000d0e000/0x2000)=nil, &(0x7f0000f57000/0x1000)=nil, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x48, 0x55, 0xc00dff269cbb5477, 0x72})
sendfile(0xffffffffffffffff, r0, &(0x7f0000002080)=0x64, 0x23b)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000e, 0x5d031, 0xffffffffffffffff, 0x0)
userfaultfd(0x801)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x670, 0x5, 0x458, 0xe8, 0x180, 0xfeffffff, 0x2a0, 0x180, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @multicast1, @remote, @gre_key, @gre_key}}}}, {{@ip={@dev, @empty, 0x0, 0x0, 'vlan1\x00', 'veth0\x00'}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0x4}}, @common=@inet=@ecn={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_virt_wifi\x00'}}, @common=@addrtype={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8)

11.523253685s ago: executing program 3 (id=951):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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")
syz_mount_image$ext4(&(0x7f0000001080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f0000000040)={[{@nogrpid}, {@discard}, {@user_xattr}]}, 0x1, 0x468, &(0x7f0000000840)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000050000000000000000000004006ee40002000000000000"], 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x64000600)
openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0xa82, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x3000080, &(0x7f0000000240)={[{@noblock_validity}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@nomblk_io_submit}, {@dax_always}, {@nomblk_io_submit}]}, 0x3, 0x574, &(0x7f00000003c0)="$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")
io_setup(0x2, &(0x7f0000000200)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000006c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x8001}])
clock_gettime(0x0, &(0x7f0000000080)={<r3=>0x0, <r4=>0x0})
io_pgetevents(r2, 0x4, 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000180)={r3, r4+10000000}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
io_getevents(r2, 0x3, 0x3, &(0x7f00000000c0)=[{}, {}, {}], 0x0)

10.749761768s ago: executing program 2 (id=952):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040), 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x200008, @loopback, 0x39}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_connect(0x1, 0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902440001000000000904000003ff0169000524"], 0x0)

10.469176993s ago: executing program 1 (id=953):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000001c0)={0xef, 0xdddd1000})
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup3(r3, r4, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000000)={0xd, 0x208, 0x6, 0xe211}, &(0x7f0000000180)=0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40)

8.349758569s ago: executing program 1 (id=954):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
pread64(r0, &(0x7f0000003200)=""/4140, 0x102c, 0x7)

8.114764582s ago: executing program 1 (id=955):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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")
syz_mount_image$ext4(&(0x7f0000001080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f0000000040)={[{@nogrpid}, {@discard}, {@user_xattr}]}, 0x1, 0x468, &(0x7f0000000840)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000050000000000000000000004006ee40002000000000000"], 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x64000600)
openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0xa82, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x3000080, &(0x7f0000000240)={[{@noblock_validity}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@nomblk_io_submit}, {@dax_always}, {@nomblk_io_submit}]}, 0x3, 0x574, &(0x7f00000003c0)="$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")
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f00000006c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r2, 0x0, 0x0, 0x8001}])
clock_gettime(0x0, &(0x7f0000000080)={<r4=>0x0, <r5=>0x0})
io_pgetevents(r3, 0x4, 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000180)={r4, r5+10000000}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
io_getevents(r3, 0x3, 0x3, &(0x7f00000000c0)=[{}, {}, {}], 0x0)

7.204338038s ago: executing program 1 (id=956):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d0000000000000000"], 0x1, 0x17d, &(0x7f00000004c0)="$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")
syz_mount_image$ext4(&(0x7f0000001080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f0000000040)={[{@nogrpid}, {@discard}, {@user_xattr}]}, 0x1, 0x468, &(0x7f0000000840)="$eJzs3M1vFVUfB/Dv3L7w+jzlecQ3BKmCUEVbWxQ1ISTsXBBd6MJtQ0tDKKC0JkKIgcSFWxP9A3Qvf4JRE19WrgxbNbpQEmKgCxbG1MztveW29PYF2l5sP59kyjkzU86ZOf3N3HvyywmwbnWXP4pka5Ifk3RNVWee0D31z8SNi8fLrcjk5Bt/FtXzbt64eLx+av33tpQ/KklPJal8UOSxOdodO3/h1ODo6PC5Wr1v/PTbfWPnLzx38vTgyPDI8Jn+g/2HDr304ssD/ct2ra/+MPHbZ+2vbUxy5taRgc1lf7fWjjVex3LpTvfMe9lg33I31mIPNpSL9oXPn2x2Y1hVbUnK4eqoxn9X2nJ78Lry3c8t7RywoiZLG5oevjQJrGFFZtYraVVPgNVVf9GX33/rW5p/HmCNub576gvgzdrczsT0PEh7KlOFd/Z989WM7/fLqTvJW8de31VuWaF5GAAAAID17MujSZ5NDnc1zP9VVfLQ9Fmd1fLDSR5J8miSHUk1r2dnkl1JHk+yu55PtLDp7I/Z5985/1O5dg+XxwKuH00ON+R2TTSMf822tlrtP2UlHcWJk6PDzyf5b5KedGwo682ztJom+mysF+rzf+VWtl+fC6z141r7rPnoocHxwbu+YGa4fjnZ0T7X+BfTmUDlCD6R5MnF/IffVjPqRrZf+Wt61ysfPnC12endC44/K2ny02T/nPF/O26L+fMz+6rPg776U+FO339y6PNm7Rv/1irjf/P847+taMzXHVt6G19v/+WnZscWHv+5n/+dxZvVDnbW9r03OD5+rj/pLI7duX9g6X1eq+r3o36/yvHv2TP3+///td8pb+ieJHuTPFXLXd5fffcnTyd5JsmBedq8NPLr382Oif/WKsd/aEnxv/TCH5c/2tus/cXF/wvVzvTU9vj8t7DFDlCr+wkAAAAAAADA8qhU18ArKr3T5Uqlt3dqDb/t2VwZPTs2fuDE2XfPDE2tlbctHZV6pldXQz5of7V8uz4wq34wyf+SfNy2qVrvPX52dKjVFw/r3JYm8V/6va3VvQNW3CLWa02yacX7Aay+xcV/I6s3w1qx9PgH1orFxb9VQWEt8v6H9Uv8w/ol/mH9Ev+wfs2O//evHjty64udV1rUHWC1dLS6A0CL3Mu6fgoKd1+o/wWeGpys5ZnfJx379xc2LeZmFsX8T4BWPZEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7i//BAAA//+sAMBz")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000050000000000000000000004006ee40002000000000000"], 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x64000600)
openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0xa82, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f00000006c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r2, 0x0, 0x0, 0x8001}])
clock_gettime(0x0, &(0x7f0000000080)={<r4=>0x0, <r5=>0x0})
io_pgetevents(r3, 0x4, 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000180)={r4, r5+10000000}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
io_getevents(r3, 0x3, 0x3, &(0x7f00000000c0)=[{}, {}, {}], 0x0)

6.440141371s ago: executing program 2 (id=957):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mkdir(&(0x7f0000000280)='./bus\x00', 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@uuid_on}]})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x8042, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
unlink(&(0x7f0000000180)='./file1\x00')

4.71647293s ago: executing program 2 (id=958):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x10000000, {}, [{0x4}]}, 0x18}}, 0x0)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x4000000)
ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x2, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0xfffffffc})
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4048010)
openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = syz_io_uring_setup(0x6ac2, &(0x7f0000000080)={0x0, 0x3892, 0x2, 0x1, 0xa0}, &(0x7f0000000140), &(0x7f0000000180))
io_uring_enter(r3, 0x8ab, 0x1e09, 0x87, 0x0, 0x0)

3.845056995s ago: executing program 3 (id=959):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="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"], 0x1, 0x6214, &(0x7f0000006640)="$eJzs3c2OHFfZB/Cn+ms+8saxsojyWghNEgMJIf4MxhAgyQIWbFggb5GtySSycADZBjmRhSeaDQsuAoTEEhBLVlxAFmzZcQFYspGArFKoZs4Z1zTd7rGd6eqZ8/tJk6qnTtX0qfy7prtdVX0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIjvffcHZ6uIuPzztOB4xP9FP6IXsdLUaxGxsnY8rz+IiOdjuzmei4jhUkSVG5+JeD0iPj4Wce/+7fVm0bl99uM7f/zbb3/41Pf/+vvh6X//6Wb/jWnr3br1q3/9+c7j7y8AAACUqK7rukof80+kz/e9rjsFAMxFfv2vk7xcvXD15oL1R61Wq9WHsG6rJ7vTLiJis71N857B6XgAOGQ245Ouu0CH5F+0QUQ81XUngIVWdd0BDsS9+7fXq5Rv1X49WNtpz9eC7Ml/s9q9v2PadJbxa0zm9fzain48O6U/K3PqwyLJ+ffG87+80z5K6x10/vMyLf/Rzq1Pxcn598fzH3N08u9NzL9UOf/BI+Xflz8AAAAAACyw/O//xzs+/7v05LuyLw87/7s2pz4AAAAAAAAAwGftScf/21UZ/w8AAAAWVfNZvfHrYw+WTfsutmb5pSri6bH1gcKkm2VWu+4HAAAAAAAAAAAAAJRksHMN76UqYhgRT6+u1nXd/LSN14/qSbc/7ErffyhZ13/kAQBgx8fHxu7lryKWI+JS+q6/4erqal0vr6zWq/XKUn4/O1parldan2vztFm2NNrHG+LBqG5+2XJru7ZZn5dntY//vuaxRnV/Hx2bjw4DB4CI2Hk1uucV6Yip62ei63c5HA6O/6PH8c9+dP08BQAAAA5eXdd1lb7O+0Q659/rulMAwFzk1//x8wJqtVqtVquPXt1WT3anXUTEZnub5j2D4fgB4JDZjE+67gIdkn/RBhHxfNedABZa1XUHOBD37t9er1K+Vfv1II3vnq8F2ZP/ZrW9Xd5+0nSW8WtM5vX82op+PDulP8/NqQ+LJOffG8//8k77KK130PnPy7T8m/083kF/upbz74/nP+bo5N+bmH+pcv6DR8q/L38AAAAAAFhg+d//jy/U+d/R4+7OTA87/7t2YI8KAAAAAAAAAAfr3v3b6/m+13z+/3MT1nP/59GU86/kX6Scf7r/f/fCm5fH1uu35u++/SD/f96/vf67m//4/zzdb/5LeaZKz6wqPSOq9EjVIE0fc8em2Br2R80jDatef5Cu+amH78bVuBYbcWbPur10PDxoP7unvenpcLu97u+0n9vTPthtz9uf39M+TFc61Su5/VSsx0/iWryz3d60Lc3Y/+UZ7fWM9px/3/FfpJz/oPXT5L+a2quxaePuR73/Oe7b00mP89bVz//yzMHvzkxb0d/dt7Zm/17soD/b/0+eGsXPbmxcP3Xrys2b189GmuxZei7S5DOW8x+mn5z/yy/ttOe/++3j9e5Ho0fOf1FsxWBq/i+15pv9fWXOfetCzn+UfnL+76T2ycf/Yc5/+vH/agf9AQAAAAAAAAAAAAAAgIep63r7FtG3IuJCuv+nq3szAYD5yq//dZKXz6vuP+72f9i7H131X62ec10tWH/mWn9aL1Z/1AtZ/2fB+rNwdVs92ZvtIiL+0t6mec/wi0m/DABYZJ9GxN+77gSdkX/B8vf9NdOTXXcGmKsbH3z4oyvXrm1cv9F1TwAAAAAAAACAx5XH/1xrjf98sq7rO2Pr7Rn/9e1Ye9LxPwd5ZneA0SkDVfcffZ8eZqs36vdaw42/ENPG/x7uzj1s/O/BjMcbzmgfzWhfmtG+PKN94o0eLTn/F1rjnZ+MiBNjw6+XMP7r+Jj3Jcj5v9h6Pjf5f2lsvXb+9W8Oc/69Pfmfvvn+T0/f+ODD166+f+W9jfc2fnz+7Nkz5y9cuHjx4ul3r17bOLPz3w57fLBy/nnsa9eBliXnnzOXf1ly/l9ItfzLkvP/YqrlX5acf36/J/+y5PzzZx/5lyXn/0qq5V+WnP+XUy3/suT8X021/MuS8/9KquVflpz/a6mWf1ly/qdSLf+y5PxPp3qf+a8cdL+Yj5x/PsPl+C9Lzj9f2SD/suT8z6Va/mXJ+Z9PtfzLkvN/PdXyL0vO/6upln9Zcv4XUi3/suT8v5Zq+Zcl538x1fIvS87/66mWf1ly/t9ItfzLkvN/I9XyL0vO/5upln9Zcv7fSrX8y5Lz/3aq5V+WnP+bqZZ/WR58/78ZM2bM5Jmu/zIBAAAAAAAAAAAAAOPmcTlx1/sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB/2YEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUV9u4uRq6zPgP4mfXueuNAYiCkTmrCxjEhJE52bSf+oE0x4bPhqySEQj+wXe/aLPgLr10CjWpHgRIJo6KKtuGiLSDU5qbCqrigFaBcoFaVKkF7QW8QFSoXURVQQKpKK8hWc877vjszOzuz6x2vz5zz+0nJPztzZs6ZM+/M7mPn2QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABa3fqG2U81sixrNBrFBZuz7EXNec3k5vyS117d4wMAAADW7hf5v5+/Pl1wYAU3atnmn2759lcXFhYWsvdt+NOxzy0spCsms2xsY5bl10WXfvD+Rus2wRPZRGOk5euRPrvf0Of60T7Xj/W5frzP9Rv7XD/R5/olJ2CJa7JGurPt+X9uLk5pdkM2ll+3vcutnmhsHGmeu3TbrJHfZmHsaDaXHc9ms+m27YttG/n2X7+1ua+3ZnFfIy372tpcIT957Eg8hkY4x9vb9rV4n9GPXp9N/vQnjx3567PP3dRt9j0NbfdXHOcd25rH+YlwSXGsjWxjOifxOEdajnNrl+dkQ9txNvLbNf+78zifX+Fxblg8zHXV+ZxPZCP5f38nP0+jjazLedoaLvvZbVmWXVg87M5tluwrG8k2tV0ysvj8TBQrsnkfzaX00mx0Vev01hWs0+ac2d6+TjtfE/H5vzXcbnSZY2h9mn70+HjL8/7zhctZp1HzUS/3Wulcg4N+rZRlDcZ18Z38QT/ZdQ1uD4//sduXX4Nd106XNZged8sa3NZvDY6Mb8iPOT0Jjfw2i2twZ9v2G/I9NfL57O291+DU2ROnp+Y/9vG7504cPjZ7bPbk7p07p3fv2bNv376po3PHZ6eLf1/m2S6/TdlIeg1sC+cuvgZe3bFt61Jd+OL4kvffy30dTvR4HW7u2HbQr8PRzgfXWJ8X5NI1Xbw23tM86RMXR7JlXmP583Pn2l+H6XG3vA5HW16HXb+ndHkdjq7gddjc5vSdK/uZZbTln27HsPz3grWtwc0ta7Dz55HONTjon0fKsgYnwrr43p3Lfy/YGo73yR2r/Xlkw5I1mB5ueO9pXpJ+3p/Yl49u6/Lm5hXXjmfn5mfP3PPo4bNnz+zMwlgXL2tZK53rdVPLY8qWrNeRVa/XA3O3PHlzl8s3h3M1cXfzXxPLPlfNbe69p/dzlX93634+2y7dlYUxYOt9Prt9N2+ez/Es+/y3Hn/oG499/g3Lns9m3vzE1Np/Fk+5tOX9d2yZ99+Y+18o9pfu6okNY6PF63dDOjtjbe/H7U/VaP7e1cj3/fzUyt6Px8I/6/1+fEOP9+MtHdsO+v14rPPBxffjRr8/7VibzudzIqyT49O934+b22zZtdo1Odrz/fi2MBvh/L8mJIWUi1rWznLrNu1rdHQsPK7RuIf2dbq7bfuxkM2a+3p61+Wt0ztuK+5rQ3p0i9ZrnU52bDvodZr+7Gu5ddro96dvl6fz+ZwI6+KG3b3XaXObZ+5d+3vnNfE/W947x/utwbEN481jHkuLMH+/zxauiWvwnuxIdio7ns3k147n66mR72vHfStbg+Phn/V+r9zSYw3e0bHtoNdg+j623NprjC598APQ+XxOhHXx1H2912BzmzfuHezPrneES9I2LT+7dv752nJ/5nVzx2m6UmtlNBznt/b2/rPZ5jbH9602Z/Y+T3eFS67tcp46X7/LvaZmsvU5T1vCcT63b/nz1Dye5jaf27/C9XQgy7LzH3kg//Pe8Pcrf3fuu19t+3uXbn+nc/4jD/z4xUf/cTXHD8Dwe6EYm4rvdS1/M7WSv/8HAAAAhkLM/SNhJvI/AAAAVEbM/fH/Ck/kfwAAAKiMmPtHw0xqkv+3vPG5uRfOZ6mZvxDE69NpeLDYLnZcp8PXkwuLmpc/8OXZ//6H8yvb90iWZT9/8A+6br/lwXhchclwnJfe1H75El+9e0X7PvTI+bTf1v76F8L9x8ez0mXQrYI7nWXZ16//TL6fyfdfzOczDx7K50MXnnyiuc3z+4uv4+2ffVmx/V+E8u+Bo4fbbv9sOA8/DHP6bd3PR7zdVy6+Zuve9y7uL96use26/GE/9YHifuPvyfnsE8X28Twvd/zf+PTTX2lu/+iruh//+ZHux/90uN8vh/m/ryi2b30Oml/H230yHH/cX7zdPV/6Ztfjv/SpYvvTby62OxRm3P8d4evtb35urvV8Pdo43Pa4srcU28X9T3/3j/Pr4/3F++88/omDF9vOR+f6eObfivuZ6tg+Xh73E/19x/6b99O6PuP+n/6jQ23nud/+Lz307Cua99u5/7s6tjv9kTvz/S/eX/tvbPrLT36m6/7i8Rz429Ntj+fAu8PrOOz/qQ+E9Riu/79Lxf11/naFQ+9uf/+J239h8/m2xxO99afF/i+97lg+N05cs+naF734uguvbJ67LPvOxuL++u3/2F+dajv+L95YnI94fezod+5/OXH/Zz664+Sp+XNzM+msPnZ9/rtz3l4cTzze68N7a+fXB0+d/eDsmcnpyeksm6zur9C7bF8K88fFuNB764Ul76B3PhKez5v//Oubbv/XT8fL//09xeUX31Z833p12O6z4fLN4flb3f6XeurWG/PXd+OZcIQLS39f8Fps3f5f+1a0YXj8nT8XxPV++uUfzM9D87r8+0Z8Xa/x+L8/U9zP18J5XQi/mXnbjYv7a90+/m6Eiw8Xr/c1n7/wNhef178Jz/c7fljcfzyu+Hi/H36O+eaW9ve7uD6+dn6k8/7z3+JxIbyfZBeK6+NW8XxffP7GrocXfw9JduGm/Os/Sfdz06oe5nLmPzY/dXzu5LlHp87Ozp+dmv/Yxw+eOHXu5NmD+e/yPPihfrdffH/alL8/zczuuTfL361OFeMKu9rHf/qRIzN7p2+fmT16+NzRs4+cnj1z7Mj8/JHZmfnbDx89OvvRfrefm7l/5679u/fu2nFsbub+ffv3796/Y+7kqeZhFAfVx57pD+84eeZgfpP5++/dv/O+++6d3nHi1Mzs/Xunp3ec63f7/HvTjuatf3/Hmdnjh8/OnZjdMT/38dn7d+7fs2dX398GeOL00fnJqTPnTk6dm589M1U8lsmz+cXN7339bk81zf9H8fNsp0bxi/iyd921J/1+1qYvP77sXRWbdPwC0efC76L555ec3reSr2PuHwszqUn+BwAAgDqIuX88zET+BwAAgMqIuX9jmIn8DwAAAJURc/9EmElN8n/l+v9bzq9o//r/+v+t50v/v2b9/4fL1v8v3i/0/wdjrf17/f9A/1//X/9f/1//nwEoW/8/5v5rsqyW+R8AAADqIOb+TWEm8j8AAABURsz914aZyP8AAABQGTH3vyjMpCb5X/9f/1//X/9f/7/7/vX/h5P+f2/6/33o/09l9er/Xxjk8ev/6/+zVNn6/zH3vzjMpCb5HwAAAOog5v7rwkzkfwAAAKiMmPuvDzOR/wEAAKAyYu7fHGZSk/yv/6//r/+v/6//333/+v/DSf+/N/3/PvT/ff6//r/+PwNVtv5/zP0vCTOpSf4HAACAOoi5/6VhJvI/AAAAlM/o5d0s5v6XhZksyf+XuQMAAADgqou5/4asowhek7//1//X/y9//39juk7/X/8/K2X/f0Om/18e+v+96f/3of+v/6//r//PQJWt/5/n/mwie3mYSU3yPwAAANRBzP03hpnI/wAAAFAZMff/UpiJ/A8AAACVEXP/ljCTmuR//X/9//L3/33+v/5/2fv/Pv+/TPT/e9P/70P/X/9f/1//n4EqW/8/5v6bwkxqkv8BAACgDmLuvznMRP4HAACAyoi5/5fDTOR/AAAAqIyY+7eGmdQk/+v/l7z/H5uj+v/6//r/+v/6/yui/9+b/n8f+v/6//r/+v8MVNn6/zH3vyLMpCb5HwAAAOog5v5bwkzkfwAAAKiMmPtfGWYi/wMAAEBlxNw/GWZSk/yv/1/y/n/Rgx/3+f/6//r/+v/6/yuj/9+b/n8f+v/6/wPp/y+c1//X/6dQtv5/zP23hpnUJP8DAABAHcTcvy3MRP4HAACAyoi5/7YwE/kfAAAAKiPm/u1hJjXJ//r/Q9H/z/T/9f/1//X/9f9XRv+/N/3/PvT/9f99/r/+PwNVtv5/zP2vCjOpSf4HAACAOoi5//YwE/kfAAAAKiPm/leHmcj/AAAAUBkx998RZlKT/K//r/+v/6//r//fff/6/8NJ/783/f8+9P/1//X/9f8ZqLL1/2Puf02YSU3yPwAAANRBzP13hpnI/wAAAFAZMfffFWYi/wMAAEBlxNy/I8ykJvlf/1//X/9f/1//v/v+9f+Hk/5/b/r/fej/6//r/+v/M1Bl6//H3H93mElN8j8AAADUQcz994SZyP8AAABQGTH3T4WZyP8AAABQGTH3T4eZ1CT/6//r/+v/6/+vqv//ysX71f8v6P+Xi/5/b/r/fej/6/9f9f7/mP4/lVK2/n/M/TvDTGqS/wEAAKAOYu7fFWYi/wMAAEBlxNy/O8xE/gcAAIDKiLn/3jCTmuR//X/9f/1//X+f/999//r/w0n/v7fB9//jQ9T/1//X//f5//r/LFW2/n/M/feFmdQk/wMAAEAdxNy/J8xE/gcAAIDKiLl/b5iJ/A8AAACVEXP/vjCTmuR//X/9f/1//X/9/+771/8fTvr/vfn8/z70//X/9f/1/1mjh/+w9auy9f9j7t8fZlKT/A8AAAB1EHP/a8NM5H8AAACojJj7fyXMRP4HAACAyoi5/1fDTGqS//X/27rnzYer/6//r/+v/5/T/x9O+v+96f/3of+v/6//r//PQC3b/w/Re737/zH33x9mUpP8DwAAAHUQc/+vhZnI/wAAAFAZMfe/LsxE/gcAAIDKiLn/QJhJTfK//r/P/9f/1//X/+++//Xu/4/H+9X/XxP9/970//vQ/9f/1//X/2egyvb5/zH3vz7MpCb5HwAAAOog5v4HwkzkfwAAAKiMmPvfEGYi/wMAAEBlxNz/xjCTmuR//X/9f/1//X/9/+779/n/w0n/vzf9/z70//X/9f/1/xmosvX/Y+5/U5hJTfI/AAAA1EHM/W8OM5H/AQAAoDJi7n9LmIn8DwAAAJURc/9bw0xqkv/1//X/9f/1//X/u+9f/3846f/3pv/fh/6//r/+v/4/A1W2/n/M/b8eZlKT/A8AAAB1EHP/g2Em8j8AAABURsz9bwszkf8BAACgMmLuf3uYSU3y/9D2/5drQOn/t91O/1//v9v+9f/1/6tM/7+3Iev//+K6cLn+f0H/v9zHv9r+/2jH11ek//+D5fr/Cxs7b6//z5VQtv5/zP3vCDOpSf4HAACAOoi5/51hJvI/AAAAVEbM/e8KM5H/AQAAoDJi7v+NMJOa5P+h7f8v+4Aup/+/2F7W/79a/f/FBtyV6f+P6P/r/+v/14T+f29D1v/3+f8d9P/Lffw+/1//n6XK1v+Puf/dYSY1yf8AAABQBzH3PxRmIv8DAABAZcTc/3CYifwPAAAAlRFz/3vCTGqS/69U/39kBfsuT/9/kf6/z//PL9D/1//X/x9a+v+96f/3of+v/1+2/v9/6v8z3MrW/4+5/5Ewk5rkfwAAAKiDmPvfG2Yi/wMAAEBlxNz/m2Em8j8AAABURsz97wszqUn+9/n/w9L/nxzS/v/j+v9XsP9/y3XFdvr/+v8s0v/vTf+/D/1//f+y9f99/j9Drmz9/5j73x9msvL8P7HiLQEAAICrIub+3wozqcnf/wMAAEAdxNz/22Em8j8AAABURsz9vxNmUpP8r/8/LP1/n/+f6f/7/P+Ox6P/r//fzfr1/+M7j/6//r/+f6T/r/+v/0+nsvX/Y+7/3TCTmuR/AAAAqIOY+z8QZiL/AwAAwFDo9v9kd4q5/2CYifwPAAAAlRFz/6Ewk5rkf/1//X/9/5L2//9s279879vvPLRT/1//X/9/Vdb18/+bL36f/6//r/+f6P/r/+v/06ls/f+Y+w+HmdQk/wMAAEAdxNz/e2Em8j8AAABURsz9R8JM5H8AAACojJj7Z8JMapL/9f/1/8vQ/9/Ycuz6/4u3G9bP/4/nQ/+/3cD6//FNV/+/q6J/n1bRle3/v3exJ67/v9r+/3jXS/X/9f8HevwN/X/9f662svX/Y+6fDTOpSf4HAACAOgi5f+RoMRevkP8BAACgMmLuPxZmIv8DAABAZcTc/8Ewk5rkf/1//f8y9P99/n+1+v91+Pz/xqjP/y+r1L//Wf5C0f/vUJ7+f3f6//r/w3z8+v/6/yxVtv5/zP1zYSY1yf8AAABQBzH3fyjMRP4HAACAyoi5/8NhJvI/AAAAVEbM/cfDTGqS//X/9f/1//X/9f+777+0n/+v/9/TWvv3+v+B/n+9+///o/+v/6//z2CUrf8fc/+JMJOa5H8AAACog5j7/5+9O2myrC7zOH6zu+jKCnrRu164McKlL4GFrvUFuHDjxgjDBQ6oOFM4jygqzorgPOAAgogKzgM4oTiDivM84IQoUQaZz/PkdPLczMqbmef+/5/PgqdJSO5toiKLX2V9PefHLfY/AAAANCN3/2PiFvsfAAAAmpG7/7FxSyf7X/9/kP5/o1LW/299/5Po/x+k/9/t9fX/+v+W6f/H6f/n0P97/r/+X//PQk2t/8/d/7i4pZP9DwAAAD3I3f/4uMX+BwAAgGbk7r8gbrH/AQAAoBm5+58Qt3Sy/7f1/yuzPvv/zHg9/7+l/t/z/3d9ff2//r9lR9v/X3zfVz79v/5f/x/0/3vq/0/u9vn6f1o0tf4/d/8T45ZO9j8AAAD0IHf/k+IW+x8AAACakbv/wrjF/gcAAIBm5O5/ctzSyf5f3PP/T619fEn7/6L/1/+vfUD/v6/+f1vdqv/fhf7/aHj+/7ie+v8Lbjv3/Luuu9/1+3l9/b/+3/P/9f8s1tT6/9z9T4lbOtn/AAAA0IPc/U+NW+x/AAAAaEbu/qfFLfY/AAAANCN3/9Pjlk72/+L6/6V+/n/R/+v/1z6g//f8f/3/0tL/j+up/z+b19f/6//1//p/Fmtq/X/u/mfELZ3sfwAAAOhB7v5nxi32PwAAADQjd/9FcYv9DwAAAM3I3X86bulk/+v/D7//v1f/r/+Pq//X/+v/D5/+f5z+fw79v/5f/6//Z6Gm1v/n7r84bulk/wMAAEAPcvc/K26x/wEAAKAZufufHbfY/wAAANCM3P3PiVs62f/6f8//1//r//X/w6+v/19O+v9x+v859P8H7efP0f/r//X/bLbP/v+ekS/bC+n/c/c/N27pZP8DAABAD3L3Py9usf8BAACgGbn7nx+32P8AAADQjNz9L4hbOtn/+n/9f6f9/8nN/770/2fZ/+/8obdG/z9M/3809P/jJtP/r5wY/LD+f+n7f8//1//r/9lias//z93/wrilk/0PAAAAPcjd/6K4ZWT/7/sX8wEAAIBjlbv/xXGL7/8DAADA0svqLHf/S+KWTva//l//32n/7/n/nv9/oP7/+k3vT/8/Lfr/cZPp/3eh/9f/L/P71//r/9lpav1/7v6Xxi2d7H8AAADoQe7+S+IW+x8AAACakbv/ZXGL/Q8AAADNyN3/8rilk/0/3P9v/HX9/97o/7e+f/3/8I+PRfX/+U/U/4/2/w/2/P8+6f/HHX3/f1L/v/Wfr/8/RMf9/hvv/0/N+3z9P0Om1v/n7r80bulk/wMAAEAPcve/Im6x/wEAAKAZuftfGbfY/wAAANCM3P2vils62f+e/6//1/8vX//v+f/rjvP5/7Mj7/9P6P/3SP8/zvP/59D/6//1/57/z0JNrf/P3X9Z3NLJ/gcAAIAeXHb3bG33v3o2s/8BAABgGW3+vQPbf0NpyN3/mrjF/gcAAIBm5O5/bdzSyf7X/+v/9f/6f/3/8OtPq//3/P+90v+P0//Pof8/jH7+RGP9/+W7ff4U+v+L9P9MzJb+/8aNjx9X/5+7/3VxSyf7HwAAAHqQu//1cYv9DwAAAM3I3f+GuMX+BwAAgGbk7n9j3NLJ/j/0/v/U7q+t/9f/6//1//p//f+i6f/H6f/n0P97/r/n/+v/WaiN/n/r18Pj6v9z978pbulk/wMAAEAPYvefePP63fgL9j8AAAA0I3f/5XGL/Q8AAADNyN3/lrilk/3v+f/6f/2//l//P/z6+v/lpP8fp/+fQ/+v/9f/6/9ZqC3P/9/kuPr/3P1XxC2d7H8AAADoQe7+K+MW+x8AAACakbv/rXGL/Q8AAADNyN3/trilk/2v/z/c/j8/rv/X/8/0//p//f+R6Lb/Xxn6mWinXfr/Wx51+qFbP6L/1//r//X/+n8WYBL9/5mN/7rM3f/2uKWT/Q8AAAA9yN3/jrjF/gcAAIBm5O5/Z9xi/wMAAEAzcve/K27Z5/7/v4W+q6Oj//f8f/2//l//P/z6+v/l1G3/v0ee/z+H/l//r//X/7NQk+j/N/157v53xy2+/w8AAADNyN3/nrjF/gcAAIBm5O5/b9xi/wMAAEAzcve/L27pZP/r//X/+n/9v/5/+PXPtv9fnQ3T/x8N/f84/f8c+n/9v/5f/89CTa3/z91/VdzSyf4HAACAHuTuf3/cYv8DAABAM3L3fyBusf8BAACgGbn7Pxi3dLL/9f/6f/2//l//P/z6nv+/nPT/4/T/s9ns6pE3MNT/nzmp/9f/6//1/5ylqfX/ufs/FLd0sv8BAACgB7n7r45b7H8AAABoRu7+a+IW+x8AAACakbv/w3FLJ/tf/6//1//r//X/w6+v/19O+v9x+v85PP9f/6//1/+zUFPr/3P3Xxu3dLL/AQAAoAe5+6+LW+x/AAAAaEbu/o/ELfY/AAAANCN3//VxSyf7X/+v/9f/6/8Ppf8/rf/fTv9/NA6v/5/p//X/+v859P/6f/0/2x1V/39PfL2f1//n7v9o3NLJ/gcAAIAe5O6/IW6x/wEAAKAZufs/FrfY/wAAANCM3P0fj1s62f/6f/2//l//7/n/w6+v/19Onv8/Tv8/h/5f/6//1/+zUEfV/+/W+2//89z9n4hbOtn/AAAA0IPc/TfGLfY/AAAANCN3/01xi/0PAAAAzcjd/8m4pZP9r//X/2/t/2cz/b/+X/+/7gj6/9WZ/n/h9P/j9P9z6P/b7P//a9ZQ/39q18/X/zNFU+v/c/d/Km7pZP8DAABAD3L3fzpusf8BAACgGbn7PxO32P8AAADQjNz9n41bWtr/9+6evi1//39y2yfq/2ez2e0Xev6//n/k9fX/k+n/69+q/n9x9P/j9P9z6P/b7P89/1//z7GZWv+fu/9zcUtL+x8AAAA6l7v/83GL/Q8AAADNyN3/hbjF/gcAAIBm5O7/YtzSyf5f/v5/+yfq/2cHev6//n/tA/p//b/+f2kdtL+/YjV+TtP/6//1/4P9/Mou/90z0//r//X/DJha/5+7/0txSyf7HwAAAHqQu//muMX+BwAAgGbk7r8lbrH/AQAAoBm5+78ct3Sy//X/+v+W+v/73kcv/f+q/l//r/8fNJXn/5933kNu1f/r/1vs/8fo//X/+n+2m1r/n7v/K3FLJ/sfAAAAepC7/6txi/0PAAAAzcjd/7W4xf4HAACAZuTu/3rc0sn+39n/nzNbL1TXDfX/0ajp/zfR/299/57/P/zjw/P/9f/6/8M3lf7f8//P7v3r//X/y/z+99X/33/n5+v/adHU+v/c/bfGLZ3sfwAAAOhB7v5vxC32PwAAADQjd/834xb7HwAAAJqRu/+2uKWT/e/5//p//b/+X/8//Pr6/+Wk/x+n/59D/3/wfj6/qur/l/f5//+t/2dxptb/5+7/VtyyNvwe8L9n+f8mAAAAMCG5+78dt3Ty/X8AAADoQe7+78Qt9j8AAAA0I3f/d+OWTva//l//r//X/+v/h19f/7+c9P/j9P9z9NP/rw598Lj7+YM67vffTP/v+f8s0NT6/9z934tbOtn/AAAA0La71/6Yu//7cYv9DwAAAM3I3f+DuMX+BwAAgGbk7r89bulk/+v/9f/t9/+P0P9ve339v/6/Zfr//Bl9mP5/jn76/0HH3c8v+/vX/+v/2Wlq/X/u/jvilk72PwAAAPQgd/8P4xb7HwAAAJqRu/9HcYv9DwAAAM3I3f/juKWT/a//76v/X5n12P97/r/+X//fk+Xp/688MfRRz//X/+v/l/f96//1/+w0tf4/d/+dKye63P8AAACwrB72wEffsde/9861P67OfhK32P8AAADQjNz9P41b7H8AAABoRu7+n8Utnex//X9f/X+fz//X/+v/9f89WZ7+f5j+X/+v/1/e96//1/+z09T6/9z9P49bNg2/wf+BHgAAAOD4/M/+/vbc/b+IWzr5/j8AAAD0IHf/L+OWHfv/zB5/VzsAAAAwNbn7fxW3dPL9f/3/xPv/2SH1//H36f/X6f/1/0Ovv+/+f+gLwSb6/6Oh/x93wP7/zIr+X/8/Qv+v/9f/s93U+v/c/TdcO+ty/wMAAECjtvyKwq/X/rg6+03cYv8DAABAM3L3/zZusf8BAACgGbn7fxe3dLL/9f8T7//P6vn/p+r/8vz/zvv/S1YHX1//7/n/LdP/j/P8/zn0//p//b/+n4XaR/+/NkgPu//P3f/7uKWT/Q8AAAA9yN3/h7jF/gcAAIBm5O7/Y9xi/wMAAEAzcvf/KW7pZP/r/4+h/7/05Gx2qP3/Hp7/r//vo//f5fXb6f///9zTNz/8kddcpf9nw1H2//ljQf+v/9f/r9P/6//1/2w3tef/5+7/c9zSyf4HAACAHuTuvytusf8BAACgGbn7/xK33Lf/bzqudwUAAAAsUu7+v8YtnXz/X//f4vP/l7P/z3/Xx9D/n16+/j+b4t77f8//1//v5Pn/4/T/c+j/9f/6f/0/CzW1/j93/9/ilk72PwAAAPQgd//f45bc/yv7/qV7AAAAYGJy9/8jbvH9fwAAAGhG7v6745ZO9r/+X/8/lf4/ef7/xud5/v86/b/+fz/0/+P0/3Po//X/+n/9Pws1tf4/d/8/45ZO9j8AAAD0IHf/PXGL/Q8AAADNyN3/r7jF/gcAAIBm5O7/d9zSyf7X/+v/9f/6f/3/8Ovr/5eT/n+c/n8O/b/+X/+v/2ehptb/5+7/TwAAAP//urxvaQ==")

3.609903699s ago: executing program 2 (id=960):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000a00)={[{@nodatacow}, {@nobarrier}, {@nodiscard}, {@clear_cache}, {@ssd_spread}, {@clear_cache}, {@ref_verify}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@rescan_uuid_tree}, {@acl}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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")
r0 = socket(0x1, 0x3, 0x0)
ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file6\x00', 0x101442, 0xfb)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
getpeername$packet(r2, &(0x7f0000000040), &(0x7f0000000180)=0x13)
r7 = syz_open_dev$radio(0x0, 0x3, 0x2)
ioctl$VIDIOC_G_MODULATOR(r7, 0xc0445636, &(0x7f00000002c0)={0x0, "511299aa76a6d31300", 0x520, 0x6, 0x0, 0x4, 0x2})
socket$inet_tcp(0x2, 0x1, 0x0)
mlock2(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x5, 0x0)
recvmmsg(r2, &(0x7f00000037c0), 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7, 0x1, [0x180000, 0x4]})

156.476637ms ago: executing program 3 (id=961):
syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000440)={0x1, 0x0, {0x0, 0x0, 0x4001, 0x6}})
r4 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r4, &(0x7f0000000080)={0x2, 0x0, @local, 0x2}, 0x10)
getsockname$l2tp(r4, 0x0, &(0x7f0000000040))
syz_open_dev$tty20(0xc, 0x4, 0x1)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2f, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x1000000000000000}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0)
io_uring_setup(0x1581, &(0x7f0000000a40)={0x0, 0x2000000, 0x20, 0x3, 0x138})
r6 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24)

0s ago: executing program 2 (id=962):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f00000000c0)=0x46, 0x4)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa}}, './file0\x00'})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="c2", 0x1}], 0x1)

kernel console output (not intermixed with test programs):

5096][ T4257] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  534.911713][ T6672] Bluetooth: hci5: command 0x1003 tx timeout
[  535.050143][ T7462] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff
[  536.587146][ T7462] F2FS-fs (loop2): invalid crc value
[  536.592594][ T7462] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12)
[  537.216448][ T7047] device veth1_vlan entered promiscuous mode
[  537.409259][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  537.435667][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  537.496681][ T7047] device veth0_macvtap entered promiscuous mode
[  537.561893][ T7047] device veth1_macvtap entered promiscuous mode
[  538.435578][ T7047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.446239][ T7047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.456647][ T7047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.468267][ T7047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.478319][ T7047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.522937][ T7047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.574012][ T7047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.612476][ T7047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.644175][ T7047] batman_adv: batadv0: Interface activated: batadv_slave_0
[  538.673513][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  538.746610][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  539.198951][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  539.318342][ T7047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  539.438543][ T7047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  540.061076][ T7047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  540.142736][ T7047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  540.228089][ T7047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  540.325308][ T7047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  540.482987][ T7047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  540.594522][ T7047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  540.823133][ T7047] batman_adv: batadv0: Interface activated: batadv_slave_1
[  541.015707][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  541.156624][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  541.868997][ T7495] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  542.663105][ T7498] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  544.518980][ T4294] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  544.808414][ T4294] usb 7-1: Using ep0 maxpacket: 16
[  544.821264][ T4294] usb 7-1: config 0 has an invalid interface number: 240 but max is 0
[  544.980063][ T4294] usb 7-1: config 0 has no interface number 0
[  545.158181][ T4294] usb 7-1: New USB device found, idVendor=0bb4, idProduct=0a90, bcdDevice=77.3f
[  545.350024][ T4294] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  545.489387][ T4294] usb 7-1: Product: syz
[  545.572753][ T4294] usb 7-1: Manufacturer: syz
[  545.650885][ T4294] usb 7-1: SerialNumber: syz
[  545.887912][ T4294] usb 7-1: config 0 descriptor??
[  545.930554][ T6672] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  545.941917][ T6672] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  545.956257][ T6672] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  545.964955][ T6672] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  545.976292][ T6672] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  546.000885][ T6672] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  546.279955][ T7517] loop3: detected capacity change from 0 to 16
[  546.613142][ T7517] erofs: (device loop3): mounted with root inode @ nid 36.
[  547.260420][ T7518] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  547.450742][ T7520] loop2: detected capacity change from 0 to 16
[  547.515232][ T7520] erofs: (device loop2): mounted with root inode @ nid 36.
[  547.562349][ T4294] usb 7-1: USB disconnect, device number 3
[  547.656895][ T4257] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  547.669300][ T7522] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  547.682156][   T27] audit: type=1800 audit(1745113110.529:61): pid=7522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.705" name="file2" dev="loop3" ino=89 res=0 errno=0
[  548.156457][ T4257] Bluetooth: hci5: command 0x0409 tx timeout
[  548.163541][ T6672] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  548.180894][ T7524] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  548.197050][   T27] audit: type=1800 audit(1745113111.039:62): pid=7524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.703" name="file2" dev="loop2" ino=89 res=0 errno=0
[  548.502540][ T7529] loop6: detected capacity change from 0 to 16
[  548.565967][ T7529] erofs: (device loop6): mounted with root inode @ nid 36.
[  550.246977][ T6672] Bluetooth: hci5: command 0x041b tx timeout
[  551.799661][ T7548] loop3: detected capacity change from 0 to 40427
[  551.849482][ T7548] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff
[  551.864802][ T7548] F2FS-fs (loop3): invalid crc value
[  551.989221][ T7548] F2FS-fs (loop3): Found nat_bits in checkpoint
[  552.386903][ T6672] Bluetooth: hci5: command 0x040f tx timeout
[  552.503072][ T7548] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  553.353085][ T7510] chnl_net:caif_netlink_parms(): no params data found
[  554.516574][ T4257] Bluetooth: hci5: command 0x0419 tx timeout
[  554.527402][ T7561] vivid-006: kernel_thread() failed
[  554.767089][ T7510] bridge0: port 1(bridge_slave_0) entered blocking state
[  554.788851][ T7510] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.851527][ T7510] device bridge_slave_0 entered promiscuous mode
[  555.020758][ T7510] bridge0: port 2(bridge_slave_1) entered blocking state
[  555.033800][ T7510] bridge0: port 2(bridge_slave_1) entered disabled state
[  555.077261][ T7510] device bridge_slave_1 entered promiscuous mode
[  555.400062][ T7510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  555.484217][ T7510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  556.313286][ T7510] team0: Port device team_slave_0 added
[  556.378955][ T7593] loop6: detected capacity change from 0 to 16
[  556.407258][ T7593] erofs: (device loop6): mounted with root inode @ nid 36.
[  556.478544][ T7510] team0: Port device team_slave_1 added
[  556.599719][ T6672] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  556.612417][ T7596] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  556.628249][   T27] audit: type=1800 audit(1745113119.469:63): pid=7596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.719" name="file2" dev="loop6" ino=89 res=0 errno=0
[  557.072661][ T7510] batman_adv: batadv0: Adding interface: batadv_slave_0
[  557.151706][ T7510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  558.721159][ T7602] loop2: detected capacity change from 0 to 40427
[  558.760045][ T7602] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff
[  558.776001][ T7602] F2FS-fs (loop2): invalid crc value
[  559.492992][ T7602] F2FS-fs (loop2): Found nat_bits in checkpoint
[  559.594810][ T7602] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  560.557129][ T7609] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  560.947090][ T7510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  561.187968][ T7510] batman_adv: batadv0: Adding interface: batadv_slave_1
[  561.237170][ T7510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  561.317030][ T7510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  561.489524][ T7510] device hsr_slave_0 entered promiscuous mode
[  561.527938][ T7510] device hsr_slave_1 entered promiscuous mode
[  561.531476][ T7620] loop1: detected capacity change from 0 to 64
[  561.541541][ T7510] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  561.557191][ T7510] Cannot create hsr debugfs directory
[  561.718888][   T51] device hsr_slave_0 left promiscuous mode
[  561.838305][   T51] device hsr_slave_1 left promiscuous mode
[  561.847992][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  561.861292][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[  561.880487][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  562.696893][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[  562.747934][   T51] device bridge_slave_1 left promiscuous mode
[  562.754270][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[  562.802641][   T51] device bridge_slave_0 left promiscuous mode
[  562.830782][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[  562.909883][   T51] device veth1_macvtap left promiscuous mode
[  562.927120][   T51] device veth0_macvtap left promiscuous mode
[  562.944103][   T51] device veth1_vlan left promiscuous mode
[  562.954603][   T51] device veth0_vlan left promiscuous mode
[  562.979638][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  562.985996][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  564.363298][ T7640] loop3: detected capacity change from 0 to 40427
[  564.417593][ T7640] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff
[  564.434448][ T7640] F2FS-fs (loop3): invalid crc value
[  564.687371][ T7640] F2FS-fs (loop3): Found nat_bits in checkpoint
[  564.854692][ T7640] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  565.067586][ T4745] Bluetooth: hci1: Frame reassembly failed (-84)
[  567.047270][ T6672] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  567.382553][   T51] team0 (unregistering): Port device team_slave_1 removed
[  567.482183][   T51] team0 (unregistering): Port device team_slave_0 removed
[  567.552942][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  567.622872][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  567.961978][ T7652] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  569.049490][   T51] bond0 (unregistering): Released all slaves
[  570.834167][ T7667] loop1: detected capacity change from 0 to 40427
[  570.884227][ T7667] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff
[  570.906854][ T7667] F2FS-fs (loop1): invalid crc value
[  571.100511][ T7667] F2FS-fs (loop1): Found nat_bits in checkpoint
[  571.260398][ T7667] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  573.398066][ T4257] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  573.410714][ T4257] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  573.421368][ T4257] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  573.432902][ T4257] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  573.452908][ T4257] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  573.462065][ T4257] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  574.770940][ T7690] loop2: detected capacity change from 0 to 40427
[  574.847436][ T7690] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff
[  574.864373][ T7690] F2FS-fs (loop2): invalid crc value
[  575.894285][ T7690] F2FS-fs (loop2): Found nat_bits in checkpoint
[  576.027724][ T7690] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  576.216323][    T9] Bluetooth: hci1: Frame reassembly failed (-84)
[  576.230251][    T9] Bluetooth: hci1: Frame reassembly failed (-84)
[  576.491129][ T6672] Bluetooth: hci0: command 0x0409 tx timeout
[  578.211635][   T51] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.351959][ T4257] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  578.627457][ T7510] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  579.238636][ T6672] Bluetooth: hci0: command 0x041b tx timeout
[  579.446305][   T51] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.499636][ T7510] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  579.552749][ T7510] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  579.584983][ T7683] chnl_net:caif_netlink_parms(): no params data found
[  579.652571][ T7510] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  580.276476][   T51] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.288114][ T4409] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  580.627006][ T4409] usb 4-1: Using ep0 maxpacket: 16
[  580.645763][ T4409] usb 4-1: config 0 has an invalid interface number: 240 but max is 0
[  580.828223][ T4409] usb 4-1: config 0 has no interface number 0
[  580.935413][ T4409] usb 4-1: New USB device found, idVendor=0bb4, idProduct=0a90, bcdDevice=77.3f
[  581.048873][ T4409] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  581.139338][ T4409] usb 4-1: Product: syz
[  581.171908][ T4409] usb 4-1: Manufacturer: syz
[  581.221392][ T4409] usb 4-1: SerialNumber: syz
[  581.287238][ T4257] Bluetooth: hci0: command 0x040f tx timeout
[  581.445453][ T4409] usb 4-1: config 0 descriptor??
[  582.541455][   T51] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  582.892746][ T4409] usb 4-1: USB disconnect, device number 2
[  583.043842][ T7683] bridge0: port 1(bridge_slave_0) entered blocking state
[  583.084343][ T7683] bridge0: port 1(bridge_slave_0) entered disabled state
[  583.094948][ T7683] device bridge_slave_0 entered promiscuous mode
[  583.112771][ T7734] loop3: detected capacity change from 0 to 16
[  583.161659][ T7683] bridge0: port 2(bridge_slave_1) entered blocking state
[  583.180516][ T7734] erofs: (device loop3): mounted with root inode @ nid 36.
[  583.190482][ T7683] bridge0: port 2(bridge_slave_1) entered disabled state
[  583.235628][ T7683] device bridge_slave_1 entered promiscuous mode
[  583.338734][ T4257] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  583.351290][ T7736] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  583.368184][   T27] audit: type=1800 audit(1745113146.209:64): pid=7736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.745" name="file2" dev="loop3" ino=89 res=0 errno=0
[  583.368954][ T4257] Bluetooth: hci0: command 0x0419 tx timeout
[  583.923271][ T7683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  584.013755][ T7683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  584.042022][ T7742] loop3: detected capacity change from 0 to 16
[  584.087282][ T7742] erofs: (device loop3): mounted with root inode @ nid 36.
[  584.251002][ T7683] team0: Port device team_slave_0 added
[  584.313511][ T7510] 8021q: adding VLAN 0 to HW filter on device bond0
[  584.487213][ T4257] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  584.499144][ T7748] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  584.658962][ T7750] netlink: 88 bytes leftover after parsing attributes in process `syz.1.747'.
[  584.706822][   T27] audit: type=1800 audit(1745113147.359:65): pid=7748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.746" name="file2" dev="loop3" ino=89 res=0 errno=0
[  586.593958][ T7683] team0: Port device team_slave_1 added
[  588.242400][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  588.311918][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  588.679145][ T7770] loop2: detected capacity change from 0 to 32768
[  589.265239][ T7770] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.751 (7770)
[  589.337197][ T7770] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  589.348023][ T7770] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  589.357362][ T7770] BTRFS info (device loop2): setting nodatacow, compression disabled
[  589.365482][ T7770] BTRFS info (device loop2): turning off barriers
[  589.372043][ T7770] BTRFS info (device loop2): force clearing of disk cache
[  589.378891][ T7683] batman_adv: batadv0: Adding interface: batadv_slave_0
[  589.379291][ T7770] BTRFS info (device loop2): enabling ssd optimizations
[  589.386242][ T7683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  589.393260][ T7770] BTRFS info (device loop2): using spread ssd allocation scheme
[  589.393293][ T7770] BTRFS info (device loop2): doing ref verification
[  589.434273][ T7770] BTRFS info (device loop2): not using ssd optimizations
[  589.442313][ T7770] BTRFS info (device loop2): not using spread ssd allocation scheme
[  589.450404][ T7770] BTRFS info (device loop2): using free space tree
[  589.462673][ T7683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  589.541011][ T7776] loop1: detected capacity change from 0 to 64
[  589.890883][ T7770] BTRFS info (device loop2): rebuilding free space tree
[  589.993110][ T7770] BTRFS info (device loop2): checking UUID tree
[  590.782152][ T7510] 8021q: adding VLAN 0 to HW filter on device team0
[  590.796456][ T7683] batman_adv: batadv0: Adding interface: batadv_slave_1
[  590.805183][ T7683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  590.831589][ T7683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  591.346172][ T4260] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  591.475087][ T7683] device hsr_slave_0 entered promiscuous mode
[  591.634668][ T7683] device hsr_slave_1 entered promiscuous mode
[  591.657916][ T7683] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  591.665734][ T7683] Cannot create hsr debugfs directory
[  591.814949][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  591.834865][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  591.858787][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  591.865991][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  591.902581][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  591.925944][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  591.943083][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  591.950339][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  591.970563][ T7807] loop2: detected capacity change from 0 to 64
[  592.259198][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  592.271586][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  592.286322][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  593.187389][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  593.212455][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  593.254999][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  593.279043][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  593.289090][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  593.297845][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  593.311998][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  593.336394][ T7811] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[  593.342989][ T7811] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  593.426135][ T7811] vhci_hcd vhci_hcd.0: Device attached
[  594.409132][ T7510] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  594.531044][ T7510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  594.544059][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  594.559236][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  594.998279][ T4298] usb 36-1: SetAddress Request (2) to port 0
[  595.004504][ T4298] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd
[  595.069570][ T7828] loop2: detected capacity change from 0 to 16
[  595.118209][ T7828] erofs: (device loop2): mounted with root inode @ nid 36.
[  595.937977][ T4257] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  595.949347][ T7828] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  596.038978][   T27] audit: type=1800 audit(1745113158.809:66): pid=7828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.759" name="file2" dev="loop2" ino=89 res=0 errno=0
[  597.706101][ T7846] Invalid ELF header magic: != ELF
[  597.996517][ T7683] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  598.075018][ T7683] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  598.551647][ T7855] loop3: detected capacity change from 0 to 32768
[  598.606423][ T7855] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.762 (7855)
[  598.625308][ T7855] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  598.635735][ T7855] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  598.645708][ T7855] BTRFS info (device loop3): setting nodatacow, compression disabled
[  598.654157][ T7855] BTRFS info (device loop3): turning off barriers
[  598.660727][ T7855] BTRFS info (device loop3): force clearing of disk cache
[  598.668234][ T7855] BTRFS info (device loop3): enabling ssd optimizations
[  598.675796][ T7855] BTRFS info (device loop3): using spread ssd allocation scheme
[  598.683557][ T7855] BTRFS info (device loop3): doing ref verification
[  598.690350][ T7855] BTRFS info (device loop3): not using ssd optimizations
[  598.697575][ T7855] BTRFS info (device loop3): not using spread ssd allocation scheme
[  598.701978][ T7683] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  598.705656][ T7855] BTRFS info (device loop3): using free space tree
[  598.750326][ T7683] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  598.810691][ T7813] vhci_hcd: connection reset by peer
[  598.817199][ T4416] vhci_hcd: stop threads
[  598.821608][ T4416] vhci_hcd: release socket
[  598.857951][ T4416] vhci_hcd: disconnect device
[  598.937255][ T7510] 8021q: adding VLAN 0 to HW filter on device batadv0
[  598.982077][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  598.990026][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  599.097184][ T7855] BTRFS info (device loop3): rebuilding free space tree
[  599.123589][ T7855] BTRFS info (device loop3): checking UUID tree
[  599.495226][   T51] device hsr_slave_0 left promiscuous mode
[  599.501940][   T51] device hsr_slave_1 left promiscuous mode
[  599.508649][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  599.516568][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[  599.524869][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  599.533449][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[  599.547483][   T51] device bridge_slave_1 left promiscuous mode
[  599.553789][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[  599.750841][   T51] device bridge_slave_0 left promiscuous mode
[  599.838314][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[  600.007997][   T51] device veth1_macvtap left promiscuous mode
[  600.014110][   T51] device veth0_macvtap left promiscuous mode
[  600.048074][   T51] device veth1_vlan left promiscuous mode
[  600.064350][   T51] device veth0_vlan left promiscuous mode
[  600.136587][ T4298] usb 36-1: device descriptor read/8, error -110
[  600.172797][ T4250] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  600.560617][ T4298] usb usb36-port1: attempt power cycle
[  600.741695][ T7895] loop3: detected capacity change from 0 to 64
[  601.327445][ T4298] usb usb36-port1: unable to enumerate USB device
[  602.081766][ T7902] loop2: detected capacity change from 0 to 64
[  602.691369][ T6672] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  602.704275][ T6672] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  602.717560][ T6672] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  602.732099][ T6672] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  602.742530][ T6672] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  602.753387][ T6672] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  603.351298][   T51] team0 (unregistering): Port device team_slave_1 removed
[  603.406058][   T51] team0 (unregistering): Port device team_slave_0 removed
[  603.456652][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  603.508089][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  604.080476][   T51] bond0 (unregistering): Released all slaves
[  604.977334][ T7918] loop1: detected capacity change from 0 to 40427
[  605.927005][ T7917] loop3: detected capacity change from 0 to 64
[  606.457858][ T6672] Bluetooth: hci1: command 0x0409 tx timeout
[  608.487142][ T6672] Bluetooth: hci1: command 0x041b tx timeout
[  608.549401][ T7917] hfs: unable to open extent tree
[  608.559441][ T7918] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff
[  608.851034][ T7918] F2FS-fs (loop1): invalid crc value
[  608.856570][ T7918] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12)
[  608.877065][ T7683] 8021q: adding VLAN 0 to HW filter on device bond0
[  608.928496][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  608.937270][ T7917] hfs: can't find a HFS filesystem on dev loop3
[  608.980793][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  609.024168][ T7683] 8021q: adding VLAN 0 to HW filter on device team0
[  609.044865][ T7472] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  610.287301][ T7933] loop3: detected capacity change from 0 to 40427
[  610.702848][ T6672] Bluetooth: hci1: command 0x040f tx timeout
[  612.163852][ T7933] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff
[  612.457035][ T4293] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  613.477023][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  613.499025][ T6672] Bluetooth: hci1: command 0x0419 tx timeout
[  613.517014][ T7933] F2FS-fs (loop3): invalid crc value
[  613.522601][ T7933] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-12)
[  614.290836][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  614.327725][ T5207] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  614.389531][ T7939] loop1: detected capacity change from 0 to 16
[  614.390139][ T4293] usb 3-1: Using ep0 maxpacket: 16
[  614.397999][ T4558] bridge0: port 1(bridge_slave_0) entered blocking state
[  614.403084][ T7939] erofs: (device loop1): mounted with root inode @ nid 36.
[  614.408183][ T4558] bridge0: port 1(bridge_slave_0) entered forwarding state
[  614.527480][ T4293] usb 3-1: device descriptor read/all, error -71
[  614.571373][ T4257] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  614.582820][ T7939] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  614.588605][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  614.594873][   T27] audit: type=1800 audit(1745113177.439:67): pid=7939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.773" name="file2" dev="loop1" ino=89 res=0 errno=0
[  614.669606][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  614.772525][ T4558] bridge0: port 2(bridge_slave_1) entered blocking state
[  614.779982][ T4558] bridge0: port 2(bridge_slave_1) entered forwarding state
[  614.863654][ T7944] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  614.870869][ T7944] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  614.879607][ T7944] vhci_hcd vhci_hcd.0: Device attached
[  615.052667][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  615.166932][ T4412] usb 37-1: new low-speed USB device number 4 using vhci_hcd
[  615.197411][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  615.635607][ T7945] vhci_hcd: connection reset by peer
[  615.642037][ T4914] vhci_hcd: stop threads
[  615.649138][ T4914] vhci_hcd: release socket
[  615.714798][ T4914] vhci_hcd: disconnect device
[  616.177819][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  616.201166][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  616.232560][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  616.253447][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  616.275410][ T7907] chnl_net:caif_netlink_parms(): no params data found
[  616.410428][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  616.435496][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  617.235774][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  617.260393][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  617.280839][ T7958] loop3: detected capacity change from 0 to 16
[  617.305395][ T7683] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  617.340320][ T7958] erofs: (device loop3): mounted with root inode @ nid 36.
[  617.347660][ T7959] loop2: detected capacity change from 0 to 16
[  617.367092][ T7959] erofs: (device loop2): mounted with root inode @ nid 36.
[  617.369565][ T7683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  617.495483][ T4257] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  617.508210][ T7962] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  617.521567][   T27] audit: type=1800 audit(1745113180.369:68): pid=7962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.777" name="file2" dev="loop3" ino=89 res=0 errno=0
[  617.642903][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  617.683564][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  617.948753][ T4257] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  617.961109][ T7965] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  617.973870][   T27] audit: type=1800 audit(1745113180.819:69): pid=7965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.776" name="file2" dev="loop2" ino=89 res=0 errno=0
[  618.435730][ T7972] loop2: detected capacity change from 0 to 16
[  618.443859][ T7972] erofs: (device loop2): mounted with root inode @ nid 36.
[  618.606550][ T4257] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  618.619525][ T7974] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  618.631706][   T27] audit: type=1800 audit(1745113181.479:70): pid=7974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.778" name="file2" dev="loop2" ino=89 res=0 errno=0
[  619.022122][ T7907] bridge0: port 1(bridge_slave_0) entered blocking state
[  619.037227][ T7907] bridge0: port 1(bridge_slave_0) entered disabled state
[  619.056558][ T7907] device bridge_slave_0 entered promiscuous mode
[  619.159149][ T7907] bridge0: port 2(bridge_slave_1) entered blocking state
[  619.178440][ T7907] bridge0: port 2(bridge_slave_1) entered disabled state
[  619.246011][ T7907] device bridge_slave_1 entered promiscuous mode
[  619.261796][ T7979] loop3: detected capacity change from 0 to 256
[  619.274924][ T7979] exfat: Deprecated parameter 'namecase'
[  619.281192][ T7979] exfat: Unknown parameter 'namebase'
[  620.003868][ T7982] loop2: detected capacity change from 0 to 64
[  620.347549][ T4412] vhci_hcd: vhci_device speed not set
[  620.898914][ T7907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  620.911100][ T7907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  620.970428][ T7989] loop3: detected capacity change from 0 to 64
[  622.199995][ T7907] team0: Port device team_slave_0 added
[  622.239378][ T7907] team0: Port device team_slave_1 added
[  622.376842][ T6076] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  623.161155][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  623.173813][ T8015] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  623.180487][ T8015] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  623.188596][ T8015] vhci_hcd vhci_hcd.0: Device attached
[  623.199899][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  623.200159][ T6076] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  623.221587][ T6076] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  623.236052][ T7907] batman_adv: batadv0: Adding interface: batadv_slave_0
[  623.243379][ T7907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  623.270574][ T6076] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  623.284624][ T6076] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  623.285866][ T7907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  623.301530][ T6076] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  623.336912][ T8020] vhci_hcd: connection closed
[  623.339834][ T6076] usb 2-1: config 0 descriptor??
[  623.363156][ T7907] batman_adv: batadv0: Adding interface: batadv_slave_1
[  623.392569][ T7907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  623.427630][ T4835] vhci_hcd: stop threads
[  623.434116][ T4835] vhci_hcd: release socket
[  623.446277][ T4835] vhci_hcd: disconnect device
[  623.454191][ T7907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  623.519111][ T7683] 8021q: adding VLAN 0 to HW filter on device batadv0
[  623.543034][ T8026] loop3: detected capacity change from 0 to 64
[  623.589012][ T7907] device hsr_slave_0 entered promiscuous mode
[  623.624738][ T7907] device hsr_slave_1 entered promiscuous mode
[  623.632018][ T7907] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  623.652647][ T7907] Cannot create hsr debugfs directory
[  623.814303][ T6076] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[  624.438575][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  624.445175][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  624.532676][ T6076] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  624.629437][ T6076] usb 2-1: USB disconnect, device number 6
[  625.646841][ T8044] loop3: detected capacity change from 0 to 16
[  625.664817][ T8044] erofs: (device loop3): mounted with root inode @ nid 36.
[  625.839451][ T4257] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  625.851781][ T8049] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  625.866918][   T27] audit: type=1800 audit(1745113188.709:71): pid=8049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.788" name="file2" dev="loop3" ino=89 res=0 errno=0
[  626.369885][ T8052] loop2: detected capacity change from 0 to 256
[  626.403013][ T8052] exfat: Deprecated parameter 'namecase'
[  626.535950][ T8052] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  627.225992][ T7683] device veth0_vlan entered promiscuous mode
[  627.276578][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  627.570932][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  627.843997][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  628.086979][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  628.952532][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  628.963505][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  628.978802][ T7683] device veth1_vlan entered promiscuous mode
[  629.097198][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  629.106146][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  629.140114][ T8077] loop1: detected capacity change from 0 to 64
[  630.092627][ T7683] device veth0_macvtap entered promiscuous mode
[  630.133637][ T7683] device veth1_macvtap entered promiscuous mode
[  630.152607][ T7683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  630.163251][ T7683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  630.176614][ T7683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  630.187426][ T7683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  630.198020][ T7683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  630.209420][ T7683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  630.221164][ T7683] batman_adv: batadv0: Interface activated: batadv_slave_0
[  630.239806][ T7683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  630.240177][ T8088] loop2: detected capacity change from 0 to 64
[  630.251034][ T7683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  630.267908][ T7683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  630.280286][ T7683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  630.292622][ T7683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  630.327402][ T7683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  630.354829][ T7683] batman_adv: batadv0: Interface activated: batadv_slave_1
[  630.642831][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  630.661520][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  630.674015][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  630.692311][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  630.740674][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  631.244637][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  631.479877][ T7683] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  631.504741][ T7683] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  631.543758][ T7683] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  631.583737][ T7683] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  632.759051][ T8110] loop2: detected capacity change from 0 to 16
[  632.784967][ T8110] erofs: (device loop2): mounted with root inode @ nid 36.
[  632.976771][ T4257] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  632.989087][ T8111] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  633.001959][   T27] audit: type=1800 audit(1745113195.849:72): pid=8111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.800" name="file2" dev="loop2" ino=89 res=0 errno=0
[  633.497627][ T7907] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  633.753828][ T7907] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  635.064018][ T8122] loop2: detected capacity change from 0 to 40427
[  635.160568][ T8122] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff
[  635.180087][ T8122] F2FS-fs (loop2): invalid crc value
[  635.297987][ T8122] F2FS-fs (loop2): Found nat_bits in checkpoint
[  635.445229][ T8122] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  637.208369][ T4259] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  637.220608][ T4259] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  637.237333][ T4259] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  637.245426][ T4259] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  637.254055][ T4259] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  637.262987][ T7907] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  637.264348][ T4259] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  637.287521][ T7907] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  637.527030][ T4257] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  637.583783][ T5283] device hsr_slave_0 left promiscuous mode
[  637.598100][ T5283] device hsr_slave_1 left promiscuous mode
[  637.639422][ T5283] batman_adv: batadv0: Removing interface: batadv_slave_0
[  637.659868][ T5283] batman_adv: batadv0: Removing interface: batadv_slave_1
[  638.338624][ T8139] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  638.346014][ T8139] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  638.354863][ T8139] vhci_hcd vhci_hcd.0: Device attached
[  638.615439][ T8140] vhci_hcd: connection closed
[  638.617376][    T9] vhci_hcd: stop threads
[  638.667120][ T4298] usb 39-1: new low-speed USB device number 3 using vhci_hcd
[  639.131055][    T9] vhci_hcd: release socket
[  639.136258][ T5283] device bridge_slave_1 left promiscuous mode
[  639.142672][    T9] vhci_hcd: disconnect device
[  639.147914][ T5283] bridge0: port 2(bridge_slave_1) entered disabled state
[  639.270290][ T8143] loop1: detected capacity change from 0 to 256
[  639.279319][ T8143] exfat: Deprecated parameter 'namecase'
[  639.285215][ T8143] exfat: Unknown parameter 'namebase'
[  639.291117][ T4259] Bluetooth: hci5: command 0x0409 tx timeout
[  640.830986][ T5283] device bridge_slave_0 left promiscuous mode
[  640.880894][ T5283] bridge0: port 1(bridge_slave_0) entered disabled state
[  641.172653][ T4298] usb 39-1: enqueue for inactive port 0
[  641.257018][ T4298] vhci_hcd: vhci_device speed not set
[  641.366955][ T4259] Bluetooth: hci5: command 0x041b tx timeout
[  641.388068][ T8147] loop3: detected capacity change from 0 to 64
[  642.509277][ T8149] loop1: detected capacity change from 0 to 32768
[  642.538069][ T8149] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.807 (8149)
[  642.696279][ T5283] team0 (unregistering): Port device team_slave_1 removed
[  642.776359][ T8157] loop2: detected capacity change from 0 to 40427
[  642.789192][ T8157] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff
[  642.808912][ T8149] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  642.810074][ T8157] F2FS-fs (loop2): invalid crc value
[  642.835235][ T8149] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  642.846284][ T5283] team0 (unregistering): Port device team_slave_0 removed
[  642.857676][ T8149] BTRFS info (device loop1): setting nodatacow, compression disabled
[  642.865935][ T8157] F2FS-fs (loop2): Found nat_bits in checkpoint
[  642.896886][ T8149] BTRFS info (device loop1): setting datacow
[  642.916556][ T8149] BTRFS info (device loop1): doing ref verification
[  642.930533][ T8149] BTRFS info (device loop1): force clearing of disk cache
[  642.945973][ T8157] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  642.945994][ T8149] BTRFS info (device loop1): turning off barriers
[  642.946021][ T8149] BTRFS info (device loop1): enabling ssd optimizations
[  643.007062][ T8149] BTRFS info (device loop1): using spread ssd allocation scheme
[  643.015497][ T8149] BTRFS info (device loop1): using free space tree
[  643.044831][ T5283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  643.114199][ T5283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  643.174047][ T8149] BTRFS info (device loop1): rebuilding free space tree
[  643.322967][   T27] audit: type=1800 audit(1745113206.169:73): pid=8149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.807" name="bus" dev="loop1" ino=263 res=0 errno=0
[  643.414279][ T4258] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  643.446818][ T4259] Bluetooth: hci5: command 0x040f tx timeout
[  643.704875][ T8182] loop2: detected capacity change from 0 to 64
[  645.530925][ T4259] Bluetooth: hci5: command 0x0419 tx timeout
[  646.935212][ T8195] loop1: detected capacity change from 0 to 16
[  646.970332][ T8195] erofs: (device loop1): mounted with root inode @ nid 36.
[  647.085097][ T4259] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  647.097628][ T8196] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  647.110126][   T27] audit: type=1800 audit(1745113209.959:74): pid=8196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.810" name="file2" dev="loop1" ino=89 res=0 errno=0
[  647.717127][ T5283] bond0 (unregistering): Released all slaves
[  648.062034][ T7907] 8021q: adding VLAN 0 to HW filter on device bond0
[  648.251733][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  648.355895][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  648.412816][ T8214] loop2: detected capacity change from 0 to 16
[  648.462427][ T8214] erofs: (device loop2): mounted with root inode @ nid 36.
[  648.656491][ T7907] 8021q: adding VLAN 0 to HW filter on device team0
[  648.699489][ T7907] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  648.728643][ T7907] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  648.772571][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  648.787287][ T4259] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  648.792578][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  648.808960][ T8216] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  648.821129][   T27] audit: type=1800 audit(1745113211.669:75): pid=8216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.813" name="file2" dev="loop2" ino=89 res=0 errno=0
[  648.823165][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state
[  648.848185][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state
[  648.915881][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  649.100649][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  649.150682][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state
[  649.158148][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state
[  649.316237][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  649.335255][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  649.351658][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  649.365548][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  649.397938][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  649.419844][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  649.437599][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  649.454601][ T8219] loop3: detected capacity change from 0 to 256
[  649.462533][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  649.472292][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  649.481362][ T8219] exfat: Deprecated parameter 'namecase'
[  649.490700][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  649.511399][ T8219] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  649.562433][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  649.570982][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  649.626629][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  651.894438][ T8233] loop3: detected capacity change from 0 to 40427
[  651.947610][ T8233] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff
[  651.966754][ T8233] F2FS-fs (loop3): invalid crc value
[  651.988711][ T8233] F2FS-fs (loop3): Found nat_bits in checkpoint
[  652.026804][ T8128] chnl_net:caif_netlink_parms(): no params data found
[  652.116835][ T8233] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  652.343063][ T7907] 8021q: adding VLAN 0 to HW filter on device batadv0
[  652.389112][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  652.414726][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  652.438892][ T8253] loop2: detected capacity change from 0 to 512
[  652.502862][ T8253] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  652.597109][ T8253] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  652.868872][ T8253] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  652.938156][ T8252] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  652.972186][ T8253] EXT4-fs (loop2): 1 truncate cleaned up
[  652.987513][ T8253] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  653.057896][ T8128] bridge0: port 1(bridge_slave_0) entered blocking state
[  653.067012][ T8128] bridge0: port 1(bridge_slave_0) entered disabled state
[  653.135436][ T8128] device bridge_slave_0 entered promiscuous mode
[  654.297405][ T8128] bridge0: port 2(bridge_slave_1) entered blocking state
[  654.341085][ T8128] bridge0: port 2(bridge_slave_1) entered disabled state
[  654.520689][ T8128] device bridge_slave_1 entered promiscuous mode
[  654.819654][ T5283] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  654.902761][ T8128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  654.917135][ T8128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  654.969400][ T4260] EXT4-fs (loop2): unmounting filesystem.
[  654.977881][ T5283] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  655.078748][ T8128] team0: Port device team_slave_0 added
[  655.376481][ T5283] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  655.421387][ T8128] team0: Port device team_slave_1 added
[  656.056952][ T8128] batman_adv: batadv0: Adding interface: batadv_slave_0
[  656.087015][ T8128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  656.129317][ T8286] loop3: detected capacity change from 0 to 16
[  656.156203][ T8128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  656.176359][ T8128] batman_adv: batadv0: Adding interface: batadv_slave_1
[  656.183827][ T8128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  656.210933][ T8128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  656.220435][ T8286] erofs: (device loop3): mounted with root inode @ nid 36.
[  656.373225][ T5283] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  656.659335][ T4259] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  656.672325][ T8290] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  656.686080][   T27] audit: type=1800 audit(1745113219.529:76): pid=8290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.824" name="file2" dev="loop3" ino=89 res=0 errno=0
[  657.418497][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  657.458688][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  657.622605][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  657.649739][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  657.668573][ T8128] device hsr_slave_0 entered promiscuous mode
[  657.678100][ T8128] device hsr_slave_1 entered promiscuous mode
[  657.685766][ T8128] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  657.694593][ T8128] Cannot create hsr debugfs directory
[  657.708069][ T7907] device veth0_vlan entered promiscuous mode
[  657.715181][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  657.725184][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  657.811289][ T7907] device veth1_vlan entered promiscuous mode
[  658.163003][ T8297] loop2: detected capacity change from 0 to 40427
[  658.173991][ T8297] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff
[  658.191497][ T8297] F2FS-fs (loop2): invalid crc value
[  658.293460][ T8297] F2FS-fs (loop2): Found nat_bits in checkpoint
[  658.447074][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  658.467306][ T8297] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  658.514127][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  658.576371][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  658.621911][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  658.705534][ T7907] device veth0_macvtap entered promiscuous mode
[  659.091438][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  659.581986][ T7907] device veth1_macvtap entered promiscuous mode
[  661.204312][ T8330] loop1: detected capacity change from 0 to 16
[  661.277632][ T8330] erofs: (device loop1): mounted with root inode @ nid 36.
[  661.309417][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  661.382182][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  661.788988][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  661.810398][ T4259] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  661.826864][ T8334] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  661.858048][   T27] audit: type=1800 audit(1745113224.689:77): pid=8334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.831" name="file2" dev="loop1" ino=89 res=0 errno=0
[  661.897545][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  661.934038][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  661.944750][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  661.956188][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  661.967201][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  661.979562][ T7907] batman_adv: batadv0: Interface activated: batadv_slave_0
[  662.029450][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  662.062532][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  662.074029][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  662.098111][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  662.113757][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  662.127385][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  662.138013][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  662.149390][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  662.161004][ T7907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  662.188398][ T7907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  662.220833][ T7907] batman_adv: batadv0: Interface activated: batadv_slave_1
[  662.397981][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  662.434933][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  662.924515][ T8344] loop3: detected capacity change from 0 to 64
[  663.018826][ T8128] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  663.060084][ T8128] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  663.804324][ T8128] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  663.916416][ T8349] loop1: detected capacity change from 0 to 16
[  663.970525][ T8349] erofs: (device loop1): mounted with root inode @ nid 36.
[  664.005474][ T8128] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  664.136491][ T4259] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  664.149208][ T8350] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  664.161622][   T27] audit: type=1800 audit(1745113227.009:78): pid=8350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.835" name="file2" dev="loop1" ino=89 res=0 errno=0
[  664.597798][ T4257] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  664.611827][ T4257] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  664.622319][ T4257] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  664.632550][ T4257] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  664.727698][ T4257] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  664.736067][ T4257] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  666.234289][ T8359] loop1: detected capacity change from 0 to 40427
[  666.268154][ T8359] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff
[  666.283453][ T8359] F2FS-fs (loop1): invalid crc value
[  666.483898][ T8359] F2FS-fs (loop1): Found nat_bits in checkpoint
[  666.603777][ T8359] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  666.831612][ T4257] Bluetooth: hci0: command 0x0409 tx timeout
[  666.844586][   T52] Bluetooth: hci1: Frame reassembly failed (-84)
[  667.595770][ T8128] 8021q: adding VLAN 0 to HW filter on device bond0
[  668.185902][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  668.198482][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  668.233301][ T8128] 8021q: adding VLAN 0 to HW filter on device team0
[  668.329748][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  668.369043][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  668.388583][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[  668.395766][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[  668.722029][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  668.768896][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  668.817151][ T4259] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  669.333519][ T4259] Bluetooth: hci0: command 0x041b tx timeout
[  669.436738][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  669.491655][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[  669.499483][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[  669.617218][ T5283] device hsr_slave_0 left promiscuous mode
[  669.658383][ T5283] device hsr_slave_1 left promiscuous mode
[  669.758079][ T5283] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  669.768337][ T5283] batman_adv: batadv0: Removing interface: batadv_slave_0
[  669.778369][ T5283] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  669.786063][ T5283] batman_adv: batadv0: Removing interface: batadv_slave_1
[  669.797094][ T5283] device bridge_slave_1 left promiscuous mode
[  669.803646][ T5283] bridge0: port 2(bridge_slave_1) entered disabled state
[  669.828537][ T5283] device bridge_slave_0 left promiscuous mode
[  669.835323][ T5283] bridge0: port 1(bridge_slave_0) entered disabled state
[  669.910852][ T8373] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  670.620665][ T5283] device veth1_macvtap left promiscuous mode
[  670.685069][ T5283] device veth0_macvtap left promiscuous mode
[  670.737797][ T5283] device veth1_vlan left promiscuous mode
[  670.770592][ T5283] device veth0_vlan left promiscuous mode
[  671.308594][ T8379] Invalid ELF header magic: != ELF
[  671.377048][ T4259] Bluetooth: hci0: command 0x040f tx timeout
[  672.807791][ T8387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.842'.
[  675.292625][ T8385] loop1: detected capacity change from 0 to 40427
[  675.339147][ T8385] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff
[  675.349755][ T8385] F2FS-fs (loop1): invalid crc value
[  675.383246][ T4259] Bluetooth: hci0: command 0x0419 tx timeout
[  675.497304][ T8385] F2FS-fs (loop1): Found nat_bits in checkpoint
[  675.643937][ T8385] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  675.849054][ T4749] Bluetooth: hci1: Frame reassembly failed (-84)
[  675.895889][ T4749] Bluetooth: hci1: Frame reassembly failed (-84)
[  676.525419][   T22] usb 3-1: new low-speed USB device number 11 using dummy_hcd
[  676.604606][ T5283] team0 (unregistering): Port device team_slave_1 removed
[  676.729086][ T5283] team0 (unregistering): Port device team_slave_0 removed
[  676.843635][ T5283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  676.965593][ T5283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  678.165069][ T4259] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  678.165385][ T4257] Bluetooth: hci1: command 0x1003 tx timeout
[  678.369378][ T5283] bond0 (unregistering): Released all slaves
[  678.808435][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  678.832073][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  678.849141][ T8399] loop2: detected capacity change from 0 to 128
[  678.915782][ T8397] loop1: detected capacity change from 0 to 32768
[  678.942111][ T8397] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.843 (8397)
[  679.009985][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  679.018675][ T8397] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  679.029041][ T8397] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  679.038991][ T8397] BTRFS info (device loop1): setting nodatacow, compression disabled
[  679.042791][ T8399] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  679.047338][ T8397] BTRFS info (device loop1): turning off barriers
[  679.047367][ T8397] BTRFS info (device loop1): force clearing of disk cache
[  679.047390][ T8397] BTRFS info (device loop1): enabling ssd optimizations
[  679.047405][ T8397] BTRFS info (device loop1): using spread ssd allocation scheme
[  679.047429][ T8397] BTRFS info (device loop1): doing ref verification
[  679.047489][ T8397] BTRFS info (device loop1): not using ssd optimizations
[  679.098757][ T8397] BTRFS info (device loop1): not using spread ssd allocation scheme
[  679.106918][ T8397] BTRFS info (device loop1): using free space tree
[  679.115369][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  679.138229][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  679.147259][ T8399] ext4 filesystem being mounted at /205/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  679.188035][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  679.205171][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  679.404519][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  679.493276][ T8397] BTRFS info (device loop1): rebuilding free space tree
[  679.519334][ T8397] BTRFS info (device loop1): checking UUID tree
[  679.608178][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  679.800184][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  679.943425][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  680.269215][ T4260] EXT4-fs (loop2): unmounting filesystem.
[  681.071027][ T8434] loop2: detected capacity change from 0 to 16
[  681.116137][ T8434] erofs: (device loop2): mounted with root inode @ nid 36.
[  681.260516][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  681.302357][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  681.336103][ T4259] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  681.349161][ T8439] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  681.362755][   T27] audit: type=1800 audit(1745113244.209:79): pid=8439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.848" name="file2" dev="loop2" ino=89 res=0 errno=0
[  681.753514][ T4258] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  681.886188][ T8437] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  682.276245][ T8128] 8021q: adding VLAN 0 to HW filter on device batadv0
[  682.511178][ T8444] loop3: detected capacity change from 0 to 16
[  682.550330][ T8444] erofs: (device loop3): mounted with root inode @ nid 36.
[  682.750751][ T4259] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  682.762419][ T8445] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  682.774798][   T27] audit: type=1800 audit(1745113245.619:80): pid=8445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.853" name="file2" dev="loop3" ino=89 res=0 errno=0
[  683.128900][ T8353] chnl_net:caif_netlink_parms(): no params data found
[  683.151689][ T8449] loop1: detected capacity change from 0 to 16
[  683.195915][ T8449] erofs: (device loop1): mounted with root inode @ nid 36.
[  683.398129][ T4259] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  683.410232][ T8451] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  683.429239][   T27] audit: type=1800 audit(1745113246.269:81): pid=8451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.852" name="file2" dev="loop1" ino=89 res=0 errno=0
[  685.850670][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  685.858102][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  685.934400][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  685.988150][ T4490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  686.004828][ T8467] loop1: detected capacity change from 0 to 64
[  686.330890][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  686.340104][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  686.355193][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  686.398894][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  688.140278][ T8128] device veth0_vlan entered promiscuous mode
[  688.164887][ T8128] device veth1_vlan entered promiscuous mode
[  688.224955][ T8128] device veth0_macvtap entered promiscuous mode
[  688.241434][ T8128] device veth1_macvtap entered promiscuous mode
[  688.371295][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  688.427698][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  688.444323][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  688.452964][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  688.471944][ T8353] bridge0: port 1(bridge_slave_0) entered blocking state
[  688.491781][ T8353] bridge0: port 1(bridge_slave_0) entered disabled state
[  688.505889][ T8353] device bridge_slave_0 entered promiscuous mode
[  688.522447][ T8353] bridge0: port 2(bridge_slave_1) entered blocking state
[  688.533869][ T8353] bridge0: port 2(bridge_slave_1) entered disabled state
[  688.545901][ T8353] device bridge_slave_1 entered promiscuous mode
[  688.677483][ T8128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  688.911573][ T8128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  689.118840][ T8128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  689.435844][ T8128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  689.445953][ T8128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  689.456511][ T8128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  689.466456][ T8128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  689.476955][ T8128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  689.488666][ T8128] batman_adv: batadv0: Interface activated: batadv_slave_0
[  689.607702][ T8128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  689.618411][ T8128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  689.628576][ T8128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  689.653180][ T8128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  689.705556][ T8128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  689.716221][ T8128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  689.726210][ T8128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  689.743034][ T8128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  689.778795][ T8128] batman_adv: batadv0: Interface activated: batadv_slave_1
[  691.117882][ T8353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  691.147301][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  691.165768][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  691.175100][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  691.184486][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  691.234736][ T8353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  691.264899][ T8128] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  691.294985][ T8495] loop2: detected capacity change from 0 to 16
[  691.336380][ T8496] netlink: 88 bytes leftover after parsing attributes in process `syz.3.861'.
[  691.421800][ T8498] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  691.790237][ T8128] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  691.900486][ T8495] erofs: (device loop2): mounted with root inode @ nid 36.
[  691.910381][ T8128] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  691.971143][ T8128] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  692.426060][ T4259] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  692.438157][ T8500] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  692.449878][   T27] audit: type=1800 audit(1745113255.299:82): pid=8500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.863" name="file2" dev="loop2" ino=89 res=0 errno=0
[  693.045749][ T8353] team0: Port device team_slave_0 added
[  693.105410][ T8353] team0: Port device team_slave_1 added
[  693.191765][ T8504] loop3: detected capacity change from 0 to 64
[  693.258939][ T8504] hfs: unable to parse mount options
[  694.479243][ T8353] batman_adv: batadv0: Adding interface: batadv_slave_0
[  694.565295][ T8353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  694.800441][ T8353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  695.127612][ T8353] batman_adv: batadv0: Adding interface: batadv_slave_1
[  695.139345][ T8353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  695.242898][ T8353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  696.062278][ T8521] loop2: detected capacity change from 0 to 16
[  696.108009][ T8521] erofs: (device loop2): mounted with root inode @ nid 36.
[  696.312402][ T4259] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  696.325248][ T8522] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  696.338836][   T27] audit: type=1800 audit(1745113259.189:83): pid=8522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.868" name="file2" dev="loop2" ino=89 res=0 errno=0
[  696.681729][ T4257] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  696.694874][ T4257] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  696.706935][ T4257] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  696.723858][ T4257] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  696.735520][ T4257] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  696.756314][ T4257] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  696.878245][ T8353] device hsr_slave_0 entered promiscuous mode
[  696.907278][ T8353] device hsr_slave_1 entered promiscuous mode
[  696.927906][ T8353] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  696.972510][ T8353] Cannot create hsr debugfs directory
[  697.875317][ T5283] device hsr_slave_0 left promiscuous mode
[  697.890072][ T5283] device hsr_slave_1 left promiscuous mode
[  697.900041][ T8531] loop1: detected capacity change from 0 to 512
[  697.908626][ T5283] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  697.916599][ T8531] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  697.919342][ T5283] batman_adv: batadv0: Removing interface: batadv_slave_0
[  697.939862][ T5283] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  697.947862][ T5283] batman_adv: batadv0: Removing interface: batadv_slave_1
[  697.957894][ T5283] device bridge_slave_1 left promiscuous mode
[  697.964284][ T5283] bridge0: port 2(bridge_slave_1) entered disabled state
[  697.964922][ T8531] EXT4-fs (loop1): 1 truncate cleaned up
[  697.979696][ T8531] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  697.989974][ T5283] device bridge_slave_0 left promiscuous mode
[  697.996396][ T5283] bridge0: port 1(bridge_slave_0) entered disabled state
[  698.060351][ T5283] device veth1_macvtap left promiscuous mode
[  698.068099][ T5283] device veth0_macvtap left promiscuous mode
[  698.088091][ T5283] device veth1_vlan left promiscuous mode
[  698.095384][ T5283] device veth0_vlan left promiscuous mode
[  698.807100][ T4259] Bluetooth: hci1: command 0x0409 tx timeout
[  699.139647][ T4258] EXT4-fs (loop1): unmounting filesystem.
[  699.407121][ T5846] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  699.617205][ T5846] usb 4-1: Using ep0 maxpacket: 16
[  699.625348][ T5846] usb 4-1: config 0 has an invalid interface number: 240 but max is 0
[  699.711680][ T5846] usb 4-1: config 0 has no interface number 0
[  699.784089][ T5846] usb 4-1: New USB device found, idVendor=0bb4, idProduct=0a90, bcdDevice=77.3f
[  699.855570][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  699.903685][ T5846] usb 4-1: Product: syz
[  699.935851][ T5846] usb 4-1: Manufacturer: syz
[  699.969098][ T5846] usb 4-1: SerialNumber: syz
[  700.069674][ T5846] usb 4-1: config 0 descriptor??
[  700.886969][ T4259] Bluetooth: hci1: command 0x041b tx timeout
[  702.059785][ T5846] usb 4-1: can't set config #0, error -71
[  702.083854][ T5846] usb 4-1: USB disconnect, device number 3
[  702.215862][ T8548] loop1: detected capacity change from 0 to 256
[  702.233932][ T8548] exfat: Deprecated parameter 'namecase'
[  702.246594][ T8548] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  702.988363][ T4259] Bluetooth: hci1: command 0x040f tx timeout
[  703.476553][ T5283] team0 (unregistering): Port device team_slave_1 removed
[  703.542618][ T8554] loop3: detected capacity change from 0 to 512
[  703.592626][ T5283] team0 (unregistering): Port device team_slave_0 removed
[  703.595054][ T8554] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.875: bg 0: block 393: padding at end of block bitmap is not set
[  703.659858][ T8554] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  703.662558][ T5283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  703.675634][ T8554] EXT4-fs (loop3): 2 truncates cleaned up
[  703.683334][ T8554] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  703.774085][ T5283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  705.047001][ T4259] Bluetooth: hci1: command 0x0419 tx timeout
[  705.236232][ T4250] EXT4-fs (loop3): unmounting filesystem.
[  705.327685][ T5283] bond0 (unregistering): Released all slaves
[  705.484086][ T8562] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  706.391554][ T8524] chnl_net:caif_netlink_parms(): no params data found
[  706.419035][ T8567] loop2: detected capacity change from 0 to 16
[  706.477213][ T8567] erofs: (device loop2): mounted with root inode @ nid 36.
[  707.244320][ T4259] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  707.261361][ T8574] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  707.289966][   T27] audit: type=1800 audit(1745113270.119:84): pid=8574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.877" name="file2" dev="loop2" ino=89 res=0 errno=0
[  708.150675][ T8524] bridge0: port 1(bridge_slave_0) entered blocking state
[  708.186997][ T8524] bridge0: port 1(bridge_slave_0) entered disabled state
[  708.195365][ T8524] device bridge_slave_0 entered promiscuous mode
[  708.203315][ T8579] loop2: detected capacity change from 0 to 16
[  708.254295][ T8579] erofs: (device loop2): mounted with root inode @ nid 36.
[  708.296386][ T8524] bridge0: port 2(bridge_slave_1) entered blocking state
[  708.310773][ T8524] bridge0: port 2(bridge_slave_1) entered disabled state
[  708.326363][ T8582] loop1: detected capacity change from 0 to 64
[  708.345389][ T8524] device bridge_slave_1 entered promiscuous mode
[  708.428416][ T4259] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  708.440730][ T8584] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  708.453209][   T27] audit: type=1800 audit(1745113271.299:85): pid=8584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.880" name="file2" dev="loop2" ino=89 res=0 errno=0
[  709.002061][ T8524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  709.043940][ T8353] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  709.121977][ T8524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  709.157928][ T8353] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  709.257113][ T8353] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  709.295506][ T8524] team0: Port device team_slave_0 added
[  709.317811][ T8353] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  709.352101][ T8524] team0: Port device team_slave_1 added
[  709.513108][ T8524] batman_adv: batadv0: Adding interface: batadv_slave_0
[  709.530149][ T8524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  709.560837][ T8524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  709.606201][ T8524] batman_adv: batadv0: Adding interface: batadv_slave_1
[  709.623764][ T8524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  709.709194][ T8524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  709.923296][ T4475] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  710.234251][ T4475] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  710.315479][ T8524] device hsr_slave_0 entered promiscuous mode
[  710.351921][ T8524] device hsr_slave_1 entered promiscuous mode
[  710.369233][ T8524] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  710.411249][ T8524] Cannot create hsr debugfs directory
[  710.542970][ T4475] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  710.856261][ T8353] 8021q: adding VLAN 0 to HW filter on device bond0
[  710.963013][ T8601] netlink: 88 bytes leftover after parsing attributes in process `syz.2.883'.
[  713.693958][ T4475] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  713.736866][ T4299] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  713.762982][ T8353] 8021q: adding VLAN 0 to HW filter on device team0
[  713.775582][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  713.792864][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  713.880527][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  713.919615][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  713.949397][ T8613] loop2: detected capacity change from 0 to 64
[  713.967455][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  713.974636][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  713.996407][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  714.102926][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  714.117446][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  714.124778][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  714.196846][ T4299] usb 4-1: device not accepting address 4, error -71
[  714.214119][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  714.292937][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  714.694536][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  715.226539][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  715.246442][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  715.301393][ T8353] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  715.312803][ T8353] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  715.493967][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  715.522334][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  715.581761][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  715.612001][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  715.627789][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  715.655027][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  715.750227][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  715.759054][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  717.535099][ T8639] loop2: detected capacity change from 0 to 40427
[  717.574586][ T8639] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff
[  718.230643][ T8639] F2FS-fs (loop2): invalid crc value
[  718.758236][ T8639] F2FS-fs (loop2): Found nat_bits in checkpoint
[  718.858740][ T8639] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  719.095187][ T4418] Bluetooth: hci5: Frame reassembly failed (-84)
[  720.470787][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  720.483411][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  720.803610][ T8353] 8021q: adding VLAN 0 to HW filter on device batadv0
[  721.057179][ T4259] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  723.015291][ T8524] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  723.045554][ T8524] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  723.142319][ T8672] netlink: 88 bytes leftover after parsing attributes in process `syz.3.895'.
[  724.093533][ T8670] loop2: detected capacity change from 0 to 512
[  724.229193][ T8670] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.893: bg 0: block 393: padding at end of block bitmap is not set
[  724.265568][ T8524] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  724.265611][ T8670] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  724.301462][ T8524] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  724.309559][ T8670] EXT4-fs (loop2): 2 truncates cleaned up
[  724.316026][ T8670] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  725.404063][ T4260] EXT4-fs (loop2): unmounting filesystem.
[  725.487753][ T8685] loop3: detected capacity change from 0 to 16
[  725.638746][ T8685] erofs: (device loop3): mounted with root inode @ nid 36.
[  725.798892][ T4475] device hsr_slave_0 left promiscuous mode
[  725.883531][ T4475] device hsr_slave_1 left promiscuous mode
[  726.052097][ T4475] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  726.240422][ T4475] batman_adv: batadv0: Removing interface: batadv_slave_0
[  726.457167][ T4259] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  726.472982][ T8695] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  726.631477][   T27] audit: type=1800 audit(1745113289.329:86): pid=8695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.897" name="file2" dev="loop3" ino=89 res=0 errno=0
[  726.724135][ T4475] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  726.762714][ T4475] batman_adv: batadv0: Removing interface: batadv_slave_1
[  726.791882][ T4475] device bridge_slave_1 left promiscuous mode
[  726.806715][ T4475] bridge0: port 2(bridge_slave_1) entered disabled state
[  726.902938][ T4475] device bridge_slave_0 left promiscuous mode
[  726.913649][ T4475] bridge0: port 1(bridge_slave_0) entered disabled state
[  726.944266][ T4475] device veth1_macvtap left promiscuous mode
[  726.950583][ T4475] device veth0_macvtap left promiscuous mode
[  726.956971][ T4475] device veth1_vlan left promiscuous mode
[  726.962846][ T4475] device veth0_vlan left promiscuous mode
[  726.977041][ T8698] loop2: detected capacity change from 0 to 512
[  727.035540][ T4257] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  727.046402][ T4257] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  727.056733][ T4257] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  727.164375][ T4257] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  727.173146][ T4257] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  727.183039][ T4257] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  727.252769][ T8698] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.898: bg 0: block 393: padding at end of block bitmap is not set
[  727.296888][ T8698] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  727.342961][ T8698] EXT4-fs (loop2): 2 truncates cleaned up
[  727.355122][ T8698] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  728.678635][ T8716] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  728.822343][ T4260] EXT4-fs (loop2): unmounting filesystem.
[  729.010559][ T8721] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  729.368998][ T4257] Bluetooth: hci0: command 0x0409 tx timeout
[  730.451828][ T4475] team0 (unregistering): Port device team_slave_1 removed
[  730.557363][ T4475] team0 (unregistering): Port device team_slave_0 removed
[  730.648498][ T4475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  730.770233][ T4475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  731.446977][ T4257] Bluetooth: hci0: command 0x041b tx timeout
[  733.290218][ T4475] bond0 (unregistering): Released all slaves
[  733.618223][ T4257] Bluetooth: hci0: command 0x040f tx timeout
[  733.806076][ T8739] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  733.813016][ T8739] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  733.821300][ T8739] vhci_hcd vhci_hcd.0: Device attached
[  733.926198][ T8740] vhci_hcd: connection closed
[  733.928562][ T5283] vhci_hcd: stop threads
[  733.939157][ T5283] vhci_hcd: release socket
[  733.944450][ T5283] vhci_hcd: disconnect device
[  733.984769][ T8524] 8021q: adding VLAN 0 to HW filter on device bond0
[  734.156460][ T8524] 8021q: adding VLAN 0 to HW filter on device team0
[  734.178801][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  734.215350][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  734.283967][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  734.344254][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  734.356593][ T4417] bridge0: port 1(bridge_slave_0) entered blocking state
[  734.364959][ T4417] bridge0: port 1(bridge_slave_0) entered forwarding state
[  734.375266][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  734.385274][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  734.395024][ T4417] bridge0: port 2(bridge_slave_1) entered blocking state
[  734.404344][ T4417] bridge0: port 2(bridge_slave_1) entered forwarding state
[  734.510715][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  734.535769][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  734.615537][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  734.647989][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  734.673397][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  734.687973][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  734.699531][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  734.709011][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  734.749820][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  734.779667][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  734.841174][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  734.908527][   T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  734.950538][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  735.121113][ T8755] netlink: 88 bytes leftover after parsing attributes in process `syz.2.908'.
[  735.920713][ T6672] Bluetooth: hci0: command 0x0419 tx timeout
[  736.480442][ T8699] chnl_net:caif_netlink_parms(): no params data found
[  736.800633][ T8766] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  736.807335][ T8766] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  736.816163][ T8766] vhci_hcd vhci_hcd.0: Device attached
[  737.154413][ T8767] vhci_hcd: connection closed
[  737.164506][ T4420] vhci_hcd: stop threads
[  737.239724][ T4420] vhci_hcd: release socket
[  737.257413][ T4569] usb 38-1: SetAddress Request (3) to port 0
[  737.285184][ T4569] usb 38-1: new SuperSpeed USB device number 3 using vhci_hcd
[  737.329215][ T4420] vhci_hcd: disconnect device
[  737.915792][ T8524] 8021q: adding VLAN 0 to HW filter on device batadv0
[  737.957026][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  737.964718][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  737.992005][ T8784] loop2: detected capacity change from 0 to 16
[  738.116536][ T8784] erofs: (device loop2): mounted with root inode @ nid 36.
[  738.481856][ T6672] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  738.496941][ T8791] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  738.509429][   T27] audit: type=1800 audit(1745113301.359:87): pid=8791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.911" name="file2" dev="loop2" ino=89 res=0 errno=0
[  738.857588][ T8699] bridge0: port 1(bridge_slave_0) entered blocking state
[  739.002054][ T8699] bridge0: port 1(bridge_slave_0) entered disabled state
[  739.059117][ T8699] device bridge_slave_0 entered promiscuous mode
[  739.098724][ T8795] loop3: detected capacity change from 0 to 16
[  739.143910][ T8699] bridge0: port 2(bridge_slave_1) entered blocking state
[  739.197245][ T8795] erofs: (device loop3): mounted with root inode @ nid 36.
[  739.246960][ T8699] bridge0: port 2(bridge_slave_1) entered disabled state
[  739.255419][ T8699] device bridge_slave_1 entered promiscuous mode
[  739.474008][ T6672] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  739.486922][ T8797] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  739.499647][   T27] audit: type=1800 audit(1745113302.349:88): pid=8797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.913" name="file2" dev="loop3" ino=89 res=0 errno=0
[  740.271772][ T8699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  740.506606][ T8699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  741.573876][ T8699] team0: Port device team_slave_0 added
[  741.639077][ T8817] loop2: detected capacity change from 0 to 16
[  741.805105][ T8817] erofs: (device loop2): mounted with root inode @ nid 36.
[  741.989606][ T8699] team0: Port device team_slave_1 added
[  742.407032][ T4569] usb 38-1: device descriptor read/8, error -110
[  742.601747][ T6672] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  742.614446][ T8819] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  742.629987][   T27] audit: type=1800 audit(1745113305.479:89): pid=8819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.916" name="file2" dev="loop2" ino=89 res=0 errno=0
[  743.375383][ T8699] batman_adv: batadv0: Adding interface: batadv_slave_0
[  743.395896][ T8699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  743.444030][ T8699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  743.464341][ T4569] usb usb38-port1: attempt power cycle
[  743.554395][ T8699] batman_adv: batadv0: Adding interface: batadv_slave_1
[  743.576014][ T8699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  743.659614][ T8699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  743.979067][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  744.004224][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  744.073460][ T8699] device hsr_slave_0 entered promiscuous mode
[  744.096533][ T8699] device hsr_slave_1 entered promiscuous mode
[  744.124678][ T8699] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  744.173724][ T8699] Cannot create hsr debugfs directory
[  744.206554][ T4569] usb usb38-port1: unable to enumerate USB device
[  744.297437][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  744.307291][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  744.318541][ T8524] device veth0_vlan entered promiscuous mode
[  744.331184][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  744.358690][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  744.452752][ T8524] device veth1_vlan entered promiscuous mode
[  744.510330][ T4475] device hsr_slave_0 left promiscuous mode
[  744.525588][ T4475] device hsr_slave_1 left promiscuous mode
[  744.533333][ T4475] batman_adv: batadv0: Removing interface: batadv_slave_0
[  744.548365][ T4475] batman_adv: batadv0: Removing interface: batadv_slave_1
[  744.564651][ T4475] device bridge_slave_1 left promiscuous mode
[  744.581796][ T4475] bridge0: port 2(bridge_slave_1) entered disabled state
[  744.611301][ T4475] device bridge_slave_0 left promiscuous mode
[  744.629722][ T4475] bridge0: port 1(bridge_slave_0) entered disabled state
[  745.291922][ T4475] team0 (unregistering): Port device team_slave_1 removed
[  745.422544][ T4475] team0 (unregistering): Port device team_slave_0 removed
[  745.507523][ T4475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  745.576404][ T4475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  745.664785][ T8867] loop1: detected capacity change from 0 to 16
[  745.702552][ T8867] erofs: (device loop1): mounted with root inode @ nid 36.
[  745.756224][ T8864] loop3: detected capacity change from 0 to 512
[  745.836860][ T8864] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.923: bg 0: block 393: padding at end of block bitmap is not set
[  745.852406][ T8864] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  745.862509][ T8864] EXT4-fs (loop3): 2 truncates cleaned up
[  745.870521][ T8864] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  745.892565][ T6672] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  745.904181][ T8870] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  745.916316][   T27] audit: type=1800 audit(1745113308.759:90): pid=8870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.921" name="file2" dev="loop1" ino=89 res=0 errno=0
[  747.192814][ T4250] EXT4-fs (loop3): unmounting filesystem.
[  747.301095][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  747.307632][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  747.574497][ T8874] loop3: detected capacity change from 0 to 32768
[  747.582519][ T8874] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.924 (8874)
[  747.605015][ T8874] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  747.615802][ T8874] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  747.624963][ T8874] BTRFS info (device loop3): setting nodatacow, compression disabled
[  747.633194][ T8874] BTRFS info (device loop3): turning off barriers
[  747.640498][ T8874] BTRFS info (device loop3): force clearing of disk cache
[  747.645231][ T4475] bond0 (unregistering): Released all slaves
[  747.647705][ T8874] BTRFS info (device loop3): enabling ssd optimizations
[  747.647728][ T8874] BTRFS info (device loop3): using spread ssd allocation scheme
[  747.647754][ T8874] BTRFS info (device loop3): doing ref verification
[  747.647818][ T8874] BTRFS info (device loop3): not using ssd optimizations
[  747.647836][ T8874] BTRFS info (device loop3): not using spread ssd allocation scheme
[  747.647855][ T8874] BTRFS info (device loop3): using free space tree
[  747.765261][ T8874] BTRFS info (device loop3): rebuilding free space tree
[  747.793135][ T8874] BTRFS info (device loop3): checking UUID tree
[  747.814191][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  747.827693][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  748.017233][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  748.035869][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  748.138037][ T8524] device veth0_macvtap entered promiscuous mode
[  748.821048][ T8524] device veth1_macvtap entered promiscuous mode
[  748.871843][ T4250] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  748.942727][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  748.990649][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  749.215024][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  749.279431][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  749.289802][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  749.301915][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  749.312121][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  749.323366][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  749.335164][ T8524] batman_adv: batadv0: Interface activated: batadv_slave_0
[  749.425724][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  749.439754][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  749.455963][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  749.505788][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  749.516445][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  749.528342][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  749.541126][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  749.553843][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  749.582134][ T8524] batman_adv: batadv0: Interface activated: batadv_slave_1
[  749.822007][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  749.872510][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  750.511985][ T8524] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  750.540156][ T8524] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  750.563292][ T8524] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  750.587327][ T8524] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  750.988369][ T4835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  751.063819][ T4835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  751.076317][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  751.229292][ T4835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  751.339388][ T8930] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  751.392361][ T4835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  752.055589][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  753.445721][ T8944] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[  753.452407][ T8944] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  753.460323][ T8944] vhci_hcd vhci_hcd.0: Device attached
[  753.482288][ T8946] vhci_hcd: connection closed
[  753.487653][ T4420] vhci_hcd: stop threads
[  753.504292][ T8699] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  753.554308][ T4420] vhci_hcd: release socket
[  753.558995][ T4420] vhci_hcd: disconnect device
[  753.587752][ T8951] loop2: detected capacity change from 0 to 16
[  753.631601][ T8951] erofs: (device loop2): mounted with root inode @ nid 36.
[  753.664550][ T8699] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  753.926194][ T6672] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  753.940980][ T8957] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  753.954094][   T27] audit: type=1800 audit(1745113316.799:91): pid=8957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.932" name="file2" dev="loop2" ino=89 res=0 errno=0
[  754.156837][ T4487] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  754.458634][ T8960] loop1: detected capacity change from 0 to 16
[  754.496590][ T8699] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  754.526835][ T8960] erofs: (device loop1): mounted with root inode @ nid 36.
[  754.559504][ T8699] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  754.957477][ T6672] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  754.972183][ T8964] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  755.105836][   T27] audit: type=1800 audit(1745113317.829:92): pid=8964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.934" name="file2" dev="loop1" ino=89 res=0 errno=0
[  755.126952][ T8963] loop2: detected capacity change from 0 to 32768
[  755.142579][ T8963] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.935 (8963)
[  755.171532][ T8963] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  755.198195][ T8963] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  755.213940][ T8963] BTRFS info (device loop2): setting nodatacow, compression disabled
[  755.222129][ T8963] BTRFS info (device loop2): turning off barriers
[  755.229290][ T8963] BTRFS info (device loop2): force clearing of disk cache
[  755.237484][ T8963] BTRFS info (device loop2): enabling ssd optimizations
[  755.244744][ T8963] BTRFS info (device loop2): using spread ssd allocation scheme
[  755.252909][ T8963] BTRFS info (device loop2): doing ref verification
[  755.259700][ T8963] BTRFS info (device loop2): not using ssd optimizations
[  755.266920][ T8963] BTRFS info (device loop2): not using spread ssd allocation scheme
[  755.275297][ T8963] BTRFS info (device loop2): using free space tree
[  755.291648][ T4487] usb 4-1: Using ep0 maxpacket: 16
[  755.317023][ T4487] usb 4-1: config 0 has an invalid interface number: 240 but max is 0
[  755.353006][ T4487] usb 4-1: config 0 has no interface number 0
[  755.430078][ T4487] usb 4-1: New USB device found, idVendor=0bb4, idProduct=0a90, bcdDevice=77.3f
[  755.466797][ T4487] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  755.475615][ T4487] usb 4-1: Product: syz
[  755.481375][ T4487] usb 4-1: Manufacturer: syz
[  755.486125][ T4487] usb 4-1: SerialNumber: syz
[  755.493559][ T4487] usb 4-1: config 0 descriptor??
[  755.672382][ T4257] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  755.683912][ T4257] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  755.693053][ T4257] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  755.711285][ T4257] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  755.719672][ T8963] BTRFS info (device loop2): rebuilding free space tree
[  755.730628][ T4257] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  755.739643][ T8963] BTRFS info (device loop2): checking UUID tree
[  755.746491][ T4257] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  755.791420][ T4487] usb 4-1: USB disconnect, device number 6
[  756.627907][ T4260] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  756.650493][ T8699] 8021q: adding VLAN 0 to HW filter on device bond0
[  757.387555][ T8699] 8021q: adding VLAN 0 to HW filter on device team0
[  757.425416][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  757.437910][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  757.805493][ T9021] netlink: 88 bytes leftover after parsing attributes in process `syz.3.938'.
[  757.837736][ T6672] Bluetooth: hci1: command 0x0409 tx timeout
[  758.599297][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  758.637623][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  758.657655][ T4311] bridge0: port 1(bridge_slave_0) entered blocking state
[  758.665046][ T4311] bridge0: port 1(bridge_slave_0) entered forwarding state
[  758.837345][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  758.846393][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  758.862134][ T4311] bridge0: port 2(bridge_slave_1) entered blocking state
[  758.869460][ T4311] bridge0: port 2(bridge_slave_1) entered forwarding state
[  758.878444][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  758.890244][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  759.026529][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  759.053509][ T9029] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  759.116412][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  760.266040][ T4257] Bluetooth: hci1: command 0x041b tx timeout
[  760.290038][ T9031] loop3: detected capacity change from 0 to 40427
[  760.362180][ T9031] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff
[  760.378425][ T9031] F2FS-fs (loop3): invalid crc value
[  760.729790][ T9031] F2FS-fs (loop3): Found nat_bits in checkpoint
[  760.864021][ T9031] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  761.060310][ T4835] Bluetooth: hci5: Frame reassembly failed (-84)
[  761.099859][ T4835] Bluetooth: hci5: Frame reassembly failed (-84)
[  761.441613][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  762.327198][ T4257] Bluetooth: hci1: command 0x040f tx timeout
[  762.733471][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  762.937812][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  763.048051][ T6672] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  763.054604][ T4257] Bluetooth: hci5: command 0x1003 tx timeout
[  763.699729][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  763.724092][ T8699] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  763.776265][ T8699] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  763.800580][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  763.834729][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  763.924261][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  763.990236][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  764.017930][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  764.054395][ T8985] chnl_net:caif_netlink_parms(): no params data found
[  764.406815][ T6672] Bluetooth: hci1: command 0x0419 tx timeout
[  765.046278][ T9059] loop2: detected capacity change from 0 to 512
[  765.162555][ T9059] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  765.214412][ T9059] EXT4-fs (loop2): 1 truncate cleaned up
[  765.239257][ T4475] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  765.256819][ T9059] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  766.351274][ T4475] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  766.428225][ T4260] EXT4-fs (loop2): unmounting filesystem.
[  766.850898][ T9089] loop3: detected capacity change from 0 to 32768
[  766.864993][ T9090] Invalid ELF header magic: != ELF
[  766.917397][ T9089] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.947 (9089)
[  767.038464][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  767.091327][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  767.245872][ T4475] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  767.274009][ T9089] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  767.284657][ T9089] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  767.293468][ T9089] BTRFS info (device loop3): setting nodatacow, compression disabled
[  767.301680][ T9089] BTRFS info (device loop3): turning off barriers
[  767.308195][ T9089] BTRFS info (device loop3): force clearing of disk cache
[  767.315360][ T9089] BTRFS info (device loop3): enabling ssd optimizations
[  767.323116][ T9089] BTRFS info (device loop3): using spread ssd allocation scheme
[  767.330858][ T9089] BTRFS info (device loop3): doing ref verification
[  767.337677][ T9089] BTRFS info (device loop3): not using ssd optimizations
[  767.344926][ T9089] BTRFS info (device loop3): not using spread ssd allocation scheme
[  767.353044][ T9089] BTRFS info (device loop3): using free space tree
[  767.514259][ T9097] loop1: detected capacity change from 0 to 64
[  767.614462][ T8699] 8021q: adding VLAN 0 to HW filter on device batadv0
[  768.788248][ T4475] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  768.868274][ T9089] BTRFS info (device loop3): rebuilding free space tree
[  768.885002][ T9089] BTRFS info (device loop3): checking UUID tree
[  769.191815][ T8985] bridge0: port 1(bridge_slave_0) entered blocking state
[  769.233107][ T8985] bridge0: port 1(bridge_slave_0) entered disabled state
[  769.336868][ T8985] device bridge_slave_0 entered promiscuous mode
[  770.047561][ T8985] bridge0: port 2(bridge_slave_1) entered blocking state
[  770.070275][ T8985] bridge0: port 2(bridge_slave_1) entered disabled state
[  770.089679][ T4250] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  770.166950][ T8985] device bridge_slave_1 entered promiscuous mode
[  770.213476][ T9136] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  771.002182][ T8985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  771.107291][ T9156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.952'.
[  771.775147][ T8985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  771.842253][ T9162] loop3: detected capacity change from 0 to 16
[  771.899954][ T9162] erofs: (device loop3): mounted with root inode @ nid 36.
[  771.974924][ T8985] team0: Port device team_slave_0 added
[  772.089411][ T8985] team0: Port device team_slave_1 added
[  772.096889][ T4294] usb 3-1: new low-speed USB device number 12 using dummy_hcd
[  772.788253][ T4294] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  772.799830][ T4257] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  772.811403][ T9162] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  772.834897][   T27] audit: type=1800 audit(1745113335.669:93): pid=9162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.951" name="file2" dev="loop3" ino=89 res=0 errno=0
[  772.953167][ T4294] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  773.057333][ T4294] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[  773.077245][ T4294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  773.136248][ T4294] usb 3-1: config 0 descriptor??
[  773.152450][ T4294] qmi_wwan: probe of 3-1:0.0 failed with error -22
[  773.198126][ T8985] batman_adv: batadv0: Adding interface: batadv_slave_0
[  773.205115][ T8985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  773.268462][ T8985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  773.331588][ T9179] loop1: detected capacity change from 0 to 16
[  773.390141][ T9179] erofs: (device loop1): mounted with root inode @ nid 36.
[  773.395316][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  773.412472][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  773.434281][ T8985] batman_adv: batadv0: Adding interface: batadv_slave_1
[  773.451022][ T8985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  773.482287][ T8985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  773.591424][ T4257] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  773.607095][ T9182] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  773.619567][   T27] audit: type=1800 audit(1745113336.469:94): pid=9182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.955" name="file2" dev="loop1" ino=89 res=0 errno=0
[  774.224496][ T9187] loop1: detected capacity change from 0 to 16
[  774.243687][ T9187] erofs: (device loop1): mounted with root inode @ nid 36.
[  774.282441][ T8985] device hsr_slave_0 entered promiscuous mode
[  774.316140][ T8985] device hsr_slave_1 entered promiscuous mode
[  774.324933][ T8985] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  774.362112][ T8985] Cannot create hsr debugfs directory
[  774.461320][ T4257] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  774.474555][ T9190] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  774.587467][   T27] audit: type=1800 audit(1745113337.339:95): pid=9190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.956" name="file2" dev="loop1" ino=89 res=0 errno=0
[  774.588900][ T4409] usb 3-1: USB disconnect, device number 12
[  774.916022][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  774.950660][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  775.084543][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  775.092911][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  775.102716][ T9198] loop2: detected capacity change from 0 to 512
[  775.135111][ T9198] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  775.167526][ T8699] device veth0_vlan entered promiscuous mode
[  775.243796][ T9198] EXT4-fs (loop2): 1 truncate cleaned up
[  775.257722][ T9198] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  775.596684][ T8699] device veth1_vlan entered promiscuous mode
[  776.634212][ T4260] EXT4-fs (loop2): unmounting filesystem.
[  778.027703][ T9221] loop2: detected capacity change from 0 to 32768
[  778.067306][ T9221] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.960 (9221)
[  778.087349][ T9221] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  778.098067][ T9221] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  778.107017][ T9221] BTRFS info (device loop2): setting nodatacow, compression disabled
[  778.115315][ T9221] BTRFS info (device loop2): turning off barriers
[  778.121970][ T9221] BTRFS info (device loop2): force clearing of disk cache
[  778.129195][ T9221] BTRFS info (device loop2): enabling ssd optimizations
[  778.136186][ T9221] BTRFS info (device loop2): using spread ssd allocation scheme
[  778.143933][ T9221] BTRFS info (device loop2): doing ref verification
[  778.150851][ T9221] BTRFS info (device loop2): not using ssd optimizations
[  778.158533][ T9221] BTRFS info (device loop2): not using spread ssd allocation scheme
[  778.166567][ T9221] BTRFS info (device loop2): using free space tree
[  779.454191][ T9228] loop3: detected capacity change from 0 to 32768
[  779.669261][ T9228] 
[  779.669261][ T9228]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  779.669261][ T9228] 
[  780.234625][ T4475] device hsr_slave_0 left promiscuous mode
[  780.262368][ T4475] device hsr_slave_1 left promiscuous mode
[  780.364418][ T9221] BTRFS info (device loop2): rebuilding free space tree
[  780.383643][ T9221] BTRFS info (device loop2): checking UUID tree
[  780.405212][ T4475] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  780.456029][ T4475] batman_adv: batadv0: Removing interface: batadv_slave_0
[  781.245320][ T4250] 
[  781.245320][ T4250]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  781.245320][ T4250] 
[  781.301364][ T4475] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  781.311657][ T4250] 
[  781.311657][ T4250]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  781.311657][ T4250] 
[  781.335337][ T4475] batman_adv: batadv0: Removing interface: batadv_slave_1
[  781.372893][ T4260] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  781.384691][    C1] BUG at fs/jfs/jfs_logmgr.c:2298 assert(bp->l_flag & lbmRELEASE)
[  781.393697][    C1] ------------[ cut here ]------------
[  781.399291][    C1] kernel BUG at fs/jfs/jfs_logmgr.c:2298!
[  781.405178][    C1] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  781.411330][    C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted 6.1.134-syzkaller #0
[  781.419336][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  781.430306][    C1] RIP: 0010:lbmIODone+0x16f4/0x1750
[  781.436070][    C1] Code: 82 22 9b 07 0f 0b e8 6b a7 76 fe 48 c7 c7 60 76 46 8b 48 c7 c6 60 71 46 8b ba fa 08 00 00 48 c7 c1 e0 7f 46 8b e8 5c 22 9b 07 <0f> 0b e8 45 a7 76 fe 48 c7 c7 60 76 46 8b 48 c7 c6 60 71 46 8b ba
[  781.456034][    C1] RSP: 0018:ffffc900001b7ae0 EFLAGS: 00010046
[  781.462239][    C1] RAX: 000000000000003f RBX: 0000000000000020 RCX: 19fd28c6f8f93b00
[  781.470360][    C1] RDX: 0000000000000100 RSI: 0000000080000101 RDI: 0000000000000000
[  781.478346][    C1] RBP: ffff8880275b9a08 R08: ffffffff816e30dc R09: fffff52000036efd
[  781.486610][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  781.496019][    C1] R13: ffff8880275b9a00 R14: ffff88801fe7c278 R15: 0000000000000246
[  781.504214][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  781.513434][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  781.520485][    C1] CR2: 00007fa01a400218 CR3: 000000007e50e000 CR4: 00000000003506e0
[  781.528526][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  781.536784][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  781.544933][    C1] Call Trace:
[  781.549292][    C1]  <TASK>
[  781.552553][    C1]  ? bio_uninit+0x52/0x3b0
[  781.557106][    C1]  ? bio_uninit+0x2ac/0x3b0
[  781.561639][    C1]  ? bio_uninit+0x52/0x3b0
[  781.566179][    C1]  ? bio_endio+0x789/0x7d0
[  781.570781][    C1]  blk_update_request+0x53b/0x1010
[  781.575910][    C1]  blk_mq_end_request+0x3a/0x70
[  781.580862][    C1]  blk_done_softirq+0xf8/0x140
[  781.585654][    C1]  handle_softirqs+0x2ee/0xa40
[  781.590564][    C1]  ? run_ksoftirqd+0xc6/0x120
[  781.595624][    C1]  ? do_softirq+0x240/0x240
[  781.601562][    C1]  ? run_ksoftirqd+0xa3/0x120
[  781.606442][    C1]  run_ksoftirqd+0xc6/0x120
[  781.611304][    C1]  ? ksoftirqd_should_run+0x20/0x20
[  781.616749][    C1]  ? ksoftirqd_should_run+0x20/0x20
[  781.622067][    C1]  smpboot_thread_fn+0x52c/0xa30
[  781.627029][    C1]  ? smpboot_thread_fn+0x4a/0xa30
[  781.632958][    C1]  kthread+0x28d/0x320
[  781.637508][    C1]  ? cpu_report_death+0x2b0/0x2b0
[  781.642673][    C1]  ? kthread_blkcg+0xd0/0xd0
[  781.647804][    C1]  ret_from_fork+0x1f/0x30
[  781.652366][    C1]  </TASK>
[  781.656638][    C1] Modules linked in:
[  781.662368][    C1] ---[ end trace 0000000000000000 ]---
[  781.668266][    C1] RIP: 0010:lbmIODone+0x16f4/0x1750
[  781.673657][    C1] Code: 82 22 9b 07 0f 0b e8 6b a7 76 fe 48 c7 c7 60 76 46 8b 48 c7 c6 60 71 46 8b ba fa 08 00 00 48 c7 c1 e0 7f 46 8b e8 5c 22 9b 07 <0f> 0b e8 45 a7 76 fe 48 c7 c7 60 76 46 8b 48 c7 c6 60 71 46 8b ba
[  781.695030][    C1] RSP: 0018:ffffc900001b7ae0 EFLAGS: 00010046
[  781.701295][    C1] RAX: 000000000000003f RBX: 0000000000000020 RCX: 19fd28c6f8f93b00
[  781.710429][    C1] RDX: 0000000000000100 RSI: 0000000080000101 RDI: 0000000000000000
[  781.718511][    C1] RBP: ffff8880275b9a08 R08: ffffffff816e30dc R09: fffff52000036efd
[  781.728352][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  781.738095][    C1] R13: ffff8880275b9a00 R14: ffff88801fe7c278 R15: 0000000000000246
[  781.746078][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  781.755102][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  781.761744][    C1] CR2: 00007fa01a400218 CR3: 000000007e50e000 CR4: 00000000003506e0
[  781.769722][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  781.777814][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  781.785937][    C1] Kernel panic - not syncing: Fatal exception in interrupt
[  781.793620][    C1] Kernel Offset: disabled
[  781.798001][    C1] Rebooting in 86400 seconds..