last executing test programs:

2m40.466917884s ago: executing program 2 (id=90):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x600c000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0x12)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
r2 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg(r2, &(0x7f0000000240)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x800, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1], 0x108}}], 0x2, 0x800)

2m39.476256068s ago: executing program 2 (id=95):
syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000080)={[{@prjquota}, {@nodioread_nolock}, {@noquota}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
lseek(r1, 0x5960, 0x3)

2m38.150319284s ago: executing program 2 (id=98):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)={0x1, 0x0, [{0x0, 0xffb, &(0x7f0000001d80)=""/4091}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5})
syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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")

2m37.09702392s ago: executing program 2 (id=102):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200002, &(0x7f0000000080)={[{@block_validity}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xffff}}, {@jqfmt_vfsv1}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {}, {@nogrpid}, {@noauto_da_alloc}, {@nouid32}]}, 0x3, 0x572, &(0x7f0000000380)="$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")
r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0)
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000480)=ANY=[], 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noquota}, {@data_err_ignore}]}, 0xfe, 0x55b, &(0x7f0000000980)="$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")
rename(&(0x7f0000003400)='./file0\x00', &(0x7f0000003440)='./file1\x00')
syz_mount_image$exfat(0x0, &(0x7f00000000c0)='./file0\x00', 0xe1c00, 0x0, 0x4, 0x0, &(0x7f0000000000))
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15)
open(&(0x7f0000000280)='./file1\x00', 0x1cd142, 0x0)

2m35.759989317s ago: executing program 2 (id=104):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240), 0x1, 0x4ff, &(0x7f0000000ac0)="$eJzs3cFvG1kZAPDPTpw4aXaTXfYACHbL7kJBVZ3E3Y1We4DlhBBaCbFHkNqQuFEUO45ipzShh/TMFYlKnODIH8C5J+5cENy4lANSgQjUIHEwmvEkdVO7iZrEzsa/nzSa9+ZN/L3XdN6rvyZ+AQytqxGxGxFjEXE7Iqaz67nsiE/aR3Lf0737S/t795dy0Wp99s9c2p5ci46vSVzJXrMYET/6XsRPcy/GbWzvrC1Wq5XNrD7brG3MNrZ3bqzWFlcqK5X1cnlhfmHuo5sfls9srO/UxrLSVx//cfdbP0+6NZVd6RzHWWoPvXAYJzEaET84j2ADMJKNZ2zQHeGV5CPizYh4N33+p2Mk/W4CAJdZqzUdrenOOgBw2eXTHFguX8pyAVORz5dK7RzeWzGZr9Ybzet36lvry+1c2UwU8ndWq5W5LFc4E4VcUp9Py8/q5SP1mxHxRkT8cnwirZeW6tXlQf7DBwCG2JUj6/9/xtvrPwBwyRUH3QEAoO+s/wAwfKz/ADB8rP8AMHza6//EoLsBAPSR9/8AMHys/wAwVH746afJ0drPPv96+e721lr97o3lSmOtVNtaKi3VNzdKK/X6SvqZPbXjXq9ar2/MfxBb92a+vdFozja2d27V6lvrzVvp53rfqhTSu3b7MDIAoJc33nn0l1yyIn88kR7RsZdDYaA9A85bftAdAAZmZNAdAAbGbl8wvE7xHl96AD7vuuzN202x2y8ItVqt1jl0CeiPa1+S/4dh1ZH/91PAMGTk/2F4yf/D8Gq1cifd8z9OeiMAcLHJ8QM9fgzgzez8u+w/B36yfPSOh+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwWETNRyN1ZrVbmIuL1iPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3+1HNNb185LI5FxM9+/dmv7i02m5t/ihjL/Wv84HrzYXa93P/eAwDHO1in03PHG/mne/eXDo5+9ufJdyOi2I6/vzcW+4fxR2M0PRejEBGT/85l9bZcR+7iNHYfRMQXu40/F1NpDqS98+nR+Ens1/oaP/9c/Hza1j4nfxZfOIO+wLB5lMw/n3R7/vJxNT13f/6L6Qx1etn8l7zU0n46Bz6LfzD/jfSY/66eNMYHf/h+uzSRffGz3Z6fPIj48mjEQez9jvnnIH6uR/z3Txj/r195+91eba3fRFyL7vE7Y802axuzje2dG6u1xZXKSmW9XF6YX5j76OaH5dk0Rz3bezX4x8fXX+/Vlox/skf84jHj//oJx//b/93+8ddeEv+b73WLn4+3XhI/WRO/ccL4i5O/L/ZqS+Iv9xj/cd//6yeM//hvOy9sGw4ADE5je2dtsVqtbCooXPxC8lf2AnSja+E7/Yo1Ft2bfvFe+5k+0tRqvVKsXjPGWWTdgIvg8KGPiP8OujMAAAAAAAAAAAAAAEBX/fiNpUGPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMvr/wEAAP//M+fPJQ==")
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x18)
socket$inet6(0xa, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xa)
writev(r1, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x80)
r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000001c00), 0x12)
r8 = socket$inet6(0xa, 0x2, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
sendto$inet6(r8, &(0x7f00000000c0)="800034ca269bb23c", 0x8, 0x4004084, &(0x7f0000000040)={0xa, 0x4e26, 0x0, @mcast2}, 0x1c)
write$P9_RREADLINK(r0, &(0x7f0000000140)={0x10, 0x17, 0x2, {0x7, './file2'}}, 0xffffffac)

2m35.344684771s ago: executing program 2 (id=105):
syz_mount_image$fuse(0x0, 0x0, 0x12040d0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000001780)=""/4096}, 0x20)
ioctl$TIOCSSOFTCAR(r3, 0x5453, 0x0)
ioctl$TIOCMBIC(r3, 0x5415, 0x0)

2m34.857365728s ago: executing program 32 (id=105):
syz_mount_image$fuse(0x0, 0x0, 0x12040d0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000001780)=""/4096}, 0x20)
ioctl$TIOCSSOFTCAR(r3, 0x5453, 0x0)
ioctl$TIOCMBIC(r3, 0x5415, 0x0)

2m15.733528786s ago: executing program 0 (id=144):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000040)={[{@debug}, {@acl}, {@inlinecrypt}, {@test_dummy_encryption}, {@inlinecrypt}, {@errors_continue}, {@nodelalloc}, {@barrier}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodelalloc'}}]}, 0x21, 0xbd4, &(0x7f0000001500)="$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")
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, 0x0, 0x1, 0x0, 0x0)
r0 = syz_mount_image$fuse(0x0, 0x0, 0x12040d0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}, 0x28}}, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000001780)=""/4096}, 0x20)
ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000300)={0x0, 0x2763c19e, 0x1, [0xff, 0x6, 0x8a, 0x6, 0x1], [0x1000, 0x100000001, 0x3, 0x5, 0x5, 0x10, 0x2, 0x0, 0x4, 0x6ce3, 0xf, 0x7ff, 0x40000000000000b9, 0xe, 0xfff, 0x6, 0x9, 0x0, 0x5, 0x2f38206d, 0x0, 0x5, 0x7ff, 0x4, 0x7, 0x8, 0x7fffffffffffffff, 0x1, 0xffffffffffffff6c, 0xffffffffffffffff, 0xffffffffffffff86, 0x80, 0x4, 0x8, 0x1, 0x100, 0x1000, 0xc199, 0x9ec, 0xffffffffffffffff, 0x0, 0x100000001, 0x5, 0x100000000, 0xf, 0xf3, 0x4, 0x7, 0x8, 0xfffffffffffffff7, 0x6, 0x2, 0x7, 0x3, 0xfffffffffffffffc, 0xc35, 0x5, 0xffffffffffff6306, 0x1, 0x3, 0x1, 0x30dc, 0x62d, 0x8, 0x101, 0x3, 0x6, 0x8, 0x3b65, 0x6501, 0x0, 0x6, 0x4, 0x2, 0x80000001, 0xfffffffffffffbff, 0x4, 0x30000, 0x8005, 0x8, 0x9131, 0xf, 0xb7, 0x786f, 0xab, 0x66de, 0xdc, 0x81, 0x6, 0x10, 0x7, 0x6, 0xfffffffffffffffa, 0x3, 0x6, 0xfffffffffffffffa, 0x9, 0xfffffffffffffffb, 0x2, 0xfffffffffffff607, 0xfffffffffffffff9, 0x7ff, 0x7, 0x3c2, 0x7fff, 0x10, 0x1, 0x7, 0x0, 0xd, 0x10001, 0xe, 0x8, 0xf, 0xf17, 0x5, 0x2, 0x40000000000009, 0x4, 0xe, 0xffffffffffffffb1]})
prctl$PR_SET_SECUREBITS(0x1c, 0x0)

2m11.222269401s ago: executing program 0 (id=150):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x800714, &(0x7f0000000000), 0xf7, 0x485, &(0x7f0000001040)="$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")
r0 = open(&(0x7f0000000180)='./file1\x00', 0x64042, 0x0)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)

2m10.522331845s ago: executing program 0 (id=154):
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000100)=ANY=[@ANYBLOB='dmask=00000000000000000100001,dmask=00000000000000000000006,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',iocharset=iso8859-15,fmask=00000000000000000000001,namecase=1,diccard,namecase=1,errors=remount-ro,errors=continue,\x00'], 0x1, 0x1533, &(0x7f0000006800)="$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")
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000001ff0), 0x10)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x48)
splice(r0, 0x0, r2, 0x0, 0x3000, 0x100000000000000d)

2m10.245596655s ago: executing program 0 (id=156):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4008010)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

2m10.042129752s ago: executing program 0 (id=157):
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), 0xffffffffffffffff)
r3 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
utimensat(r5, 0x0, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_DISABLE(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4180}, 0x4000)
timer_gettime(0x0, 0x0)

2m9.707029323s ago: executing program 0 (id=158):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000040)={[{@debug}, {@acl}, {@inlinecrypt}, {@test_dummy_encryption}, {@inlinecrypt}, {@errors_continue}, {@nodelalloc}, {@barrier}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodelalloc'}}]}, 0x21, 0xbd4, &(0x7f0000001500)="$eJzs3M9rHNcdAPDvjLSSbMtduZRS92KVUmwoXcsuMrUp1C4uvfRQaK8FC3llhNY/kFRcyTqs2n+gJDkHcgkkMQk+xGdfEsg1l8S5xuQQMEGxEgghUZj9IcnSrn55pVGkzwee5r15M/O+X81K8x7sbgCH1mD2I404GRHXkohiY38aET21Wl9EtX7c4sLc6NcLc6NJLC3944skkoh4tjA32rxW0tgeazT6IuLDPyfx0/+tH3dqZnZipFIpTzbaZ6dv3jk7NTP7u/GbIzfKN8q3zl34w/D54QtDF4c7lus3n15++NWv/vpZ9ds3v7v/5cuvJ3E5+ht9q/NoZP3CBmNw+XeyWndEjHTg+vtBVyOf1Xkm3ZuclO5yUAAAtJWumsP9PIrRFSuTt2K891GuwQEAAAAdsdQVsQQAAAAccIn1PwAAABxwzfcBPFuYG22WfN+RsLeeXomIgXr+i41S7+mOam3bF4WIOPosidUfa03qp72wwYh48snFd7ISLT6HvNuq8xHxi1b3P6nlP9D4JPTa/NOIGOrA+INr2j+m/C93YPy88wfgcHp0pf4gW//8S5fnP9Hi+dfd4tm1E3k//5rzv8V187+V/LvazP/+vsUx7r3x6t12fVn+f3z4l7ebJRs/275QUtvwdD7il92t8k+W80/a5H9ti2MUv79bbteXd/5Lr0Wcjtb5NyUbfz/R2bHxSnmo/rPlGPMfDL/Vbvy888/u/9E2+W9w//uyfXeeu1L7L/X519WrD9r1bZ5/+nlP8s9araex5z8j09OT5yJ6kr+t339+43ybxzSvkeV/5tcb//23ev1n/xOqjddGlvl8Y5u1/7tmzD/dv/fuRvlna7887//17d//2r7/b3GM37z/0pl2favXv1nJxn+S1NfCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCURkR/JGkpIpJaPU1LpYhjEfGzOJpWbk9N/3bs9r9vXc/6IgaikI6NV8pDEVGst5Osfa5WX2mfX9P+fUSciIhXikdq7dLo7cr1vJMHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg2bGI6I8kLUVEGhGLxTQtlfKOCgAAAOi4gbwDAAAAAHad9T8AAAAcfNb/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LITpx49TiKieulIrWR6Gn2FXCMDdluadwBAbrryDgDITXfeAQC52eYa33QBDqBkk/6+tj29HY8FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP3r9MlHj5OIqF46UiuZnkZfoeUZp/YwOmA3pXkHAOSma6PO7r2LA9h7O/4TP97ZOIC913qNDxwmySb9fSvHVJ/v6d21mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYf/prJUlLEZHW6mlaKkUcj4iBKCRj45XyUET8JCI+LhZ6s3Zv3kEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQcVMzsxMjlUp5cieVZJPTCzu+ssrhrBQaL8v9Es/eVpL9EUa9kvM/JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcjE1MzsxUqmUJ6fyjgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI29TM7MRIpVKe3ELlwXYOXlXJO0cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzQwAAAP///KIJXQ==")
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, 0x0, 0x1, 0x0, 0x0)
r0 = syz_mount_image$fuse(0x0, 0x0, 0x12040d0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}, 0x28}}, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000001780)=""/4096}, 0x20)
ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000300)={0x0, 0x2763c19e, 0x1, [0xff, 0x6, 0x8a, 0x6, 0x1], [0x1000, 0x100000001, 0x3, 0x5, 0x5, 0x10, 0x2, 0x0, 0x4, 0x6ce3, 0xf, 0x7ff, 0x40000000000000b9, 0xe, 0xfff, 0x6, 0x9, 0x0, 0x5, 0x2f38206d, 0x0, 0x5, 0x7ff, 0x4, 0x7, 0x8, 0x7fffffffffffffff, 0x1, 0xffffffffffffff6c, 0xffffffffffffffff, 0xffffffffffffff86, 0x80, 0x4, 0x8, 0x1, 0x100, 0x1000, 0xc199, 0x9ec, 0xffffffffffffffff, 0x0, 0x100000001, 0x5, 0x100000000, 0xf, 0xf3, 0x4, 0x7, 0x8, 0xfffffffffffffff7, 0x6, 0x2, 0x7, 0x3, 0xfffffffffffffffc, 0xc35, 0x5, 0xffffffffffff6306, 0x1, 0x3, 0x1, 0x30dc, 0x62d, 0x8, 0x101, 0x3, 0x6, 0x8, 0x3b65, 0x6501, 0x0, 0x6, 0x4, 0x2, 0x80000001, 0xfffffffffffffbff, 0x4, 0x30000, 0x8005, 0x8, 0x9131, 0xf, 0xb7, 0x786f, 0xab, 0x66de, 0xdc, 0x81, 0x6, 0x10, 0x7, 0x6, 0xfffffffffffffffa, 0x3, 0x6, 0xfffffffffffffffa, 0x9, 0xfffffffffffffffb, 0x2, 0xfffffffffffff607, 0xfffffffffffffff9, 0x7ff, 0x7, 0x3c2, 0x7fff, 0x10, 0x1, 0x7, 0x0, 0xd, 0x10001, 0xe, 0x8, 0xf, 0xf17, 0x5, 0x2, 0x40000000000009, 0x4, 0xe, 0xffffffffffffffb1]})
prctl$PR_SET_SECUREBITS(0x1c, 0x0)

2m9.368344655s ago: executing program 33 (id=158):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000040)={[{@debug}, {@acl}, {@inlinecrypt}, {@test_dummy_encryption}, {@inlinecrypt}, {@errors_continue}, {@nodelalloc}, {@barrier}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodelalloc'}}]}, 0x21, 0xbd4, &(0x7f0000001500)="$eJzs3M9rHNcdAPDvjLSSbMtduZRS92KVUmwoXcsuMrUp1C4uvfRQaK8FC3llhNY/kFRcyTqs2n+gJDkHcgkkMQk+xGdfEsg1l8S5xuQQMEGxEgghUZj9IcnSrn55pVGkzwee5r15M/O+X81K8x7sbgCH1mD2I404GRHXkohiY38aET21Wl9EtX7c4sLc6NcLc6NJLC3944skkoh4tjA32rxW0tgeazT6IuLDPyfx0/+tH3dqZnZipFIpTzbaZ6dv3jk7NTP7u/GbIzfKN8q3zl34w/D54QtDF4c7lus3n15++NWv/vpZ9ds3v7v/5cuvJ3E5+ht9q/NoZP3CBmNw+XeyWndEjHTg+vtBVyOf1Xkm3ZuclO5yUAAAtJWumsP9PIrRFSuTt2K891GuwQEAAAAdsdQVsQQAAAAccIn1PwAAABxwzfcBPFuYG22WfN+RsLeeXomIgXr+i41S7+mOam3bF4WIOPosidUfa03qp72wwYh48snFd7ISLT6HvNuq8xHxi1b3P6nlP9D4JPTa/NOIGOrA+INr2j+m/C93YPy88wfgcHp0pf4gW//8S5fnP9Hi+dfd4tm1E3k//5rzv8V187+V/LvazP/+vsUx7r3x6t12fVn+f3z4l7ebJRs/275QUtvwdD7il92t8k+W80/a5H9ti2MUv79bbteXd/5Lr0Wcjtb5NyUbfz/R2bHxSnmo/rPlGPMfDL/Vbvy888/u/9E2+W9w//uyfXeeu1L7L/X519WrD9r1bZ5/+nlP8s9araex5z8j09OT5yJ6kr+t339+43ybxzSvkeV/5tcb//23ev1n/xOqjddGlvl8Y5u1/7tmzD/dv/fuRvlna7887//17d//2r7/b3GM37z/0pl2favXv1nJxn+S1NfCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCURkR/JGkpIpJaPU1LpYhjEfGzOJpWbk9N/3bs9r9vXc/6IgaikI6NV8pDEVGst5Osfa5WX2mfX9P+fUSciIhXikdq7dLo7cr1vJMHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg2bGI6I8kLUVEGhGLxTQtlfKOCgAAAOi4gbwDAAAAAHad9T8AAAAcfNb/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LITpx49TiKieulIrWR6Gn2FXCMDdluadwBAbrryDgDITXfeAQC52eYa33QBDqBkk/6+tj29HY8FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP3r9MlHj5OIqF46UiuZnkZfoeUZp/YwOmA3pXkHAOSma6PO7r2LA9h7O/4TP97ZOIC913qNDxwmySb9fSvHVJ/v6d21mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYf/prJUlLEZHW6mlaKkUcj4iBKCRj45XyUET8JCI+LhZ6s3Zv3kEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQcVMzsxMjlUp5cieVZJPTCzu+ssrhrBQaL8v9Es/eVpL9EUa9kvM/JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcjE1MzsxUqmUJ6fyjgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI29TM7MRIpVKe3ELlwXYOXlXJO0cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzQwAAAP///KIJXQ==")
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, 0x0, 0x1, 0x0, 0x0)
r0 = syz_mount_image$fuse(0x0, 0x0, 0x12040d0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}, 0x28}}, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000001780)=""/4096}, 0x20)
ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000300)={0x0, 0x2763c19e, 0x1, [0xff, 0x6, 0x8a, 0x6, 0x1], [0x1000, 0x100000001, 0x3, 0x5, 0x5, 0x10, 0x2, 0x0, 0x4, 0x6ce3, 0xf, 0x7ff, 0x40000000000000b9, 0xe, 0xfff, 0x6, 0x9, 0x0, 0x5, 0x2f38206d, 0x0, 0x5, 0x7ff, 0x4, 0x7, 0x8, 0x7fffffffffffffff, 0x1, 0xffffffffffffff6c, 0xffffffffffffffff, 0xffffffffffffff86, 0x80, 0x4, 0x8, 0x1, 0x100, 0x1000, 0xc199, 0x9ec, 0xffffffffffffffff, 0x0, 0x100000001, 0x5, 0x100000000, 0xf, 0xf3, 0x4, 0x7, 0x8, 0xfffffffffffffff7, 0x6, 0x2, 0x7, 0x3, 0xfffffffffffffffc, 0xc35, 0x5, 0xffffffffffff6306, 0x1, 0x3, 0x1, 0x30dc, 0x62d, 0x8, 0x101, 0x3, 0x6, 0x8, 0x3b65, 0x6501, 0x0, 0x6, 0x4, 0x2, 0x80000001, 0xfffffffffffffbff, 0x4, 0x30000, 0x8005, 0x8, 0x9131, 0xf, 0xb7, 0x786f, 0xab, 0x66de, 0xdc, 0x81, 0x6, 0x10, 0x7, 0x6, 0xfffffffffffffffa, 0x3, 0x6, 0xfffffffffffffffa, 0x9, 0xfffffffffffffffb, 0x2, 0xfffffffffffff607, 0xfffffffffffffff9, 0x7ff, 0x7, 0x3c2, 0x7fff, 0x10, 0x1, 0x7, 0x0, 0xd, 0x10001, 0xe, 0x8, 0xf, 0xf17, 0x5, 0x2, 0x40000000000009, 0x4, 0xe, 0xffffffffffffffb1]})
prctl$PR_SET_SECUREBITS(0x1c, 0x0)

2m8.034251151s ago: executing program 1 (id=165):
bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83}, 0x1c)
r0 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, 0x0, &(0x7f0000000300))
accept4$tipc(r0, &(0x7f00000003c0), &(0x7f0000000400)=0x10, 0x800)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="060000000400000010100000890000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50)

2m6.862209002s ago: executing program 1 (id=168):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
timer_gettime(0x0, &(0x7f0000000000))
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
close_range(r0, r2, 0x0)

2m5.44125506s ago: executing program 1 (id=169):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0)

2m5.294340756s ago: executing program 1 (id=170):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200002, &(0x7f0000000080)={[{@block_validity}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xffff}}, {@jqfmt_vfsv1}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {}, {@nogrpid}, {@noauto_da_alloc}, {@nouid32}]}, 0x3, 0x572, &(0x7f0000000380)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000480)=ANY=[], 0x1, 0x0, 0x0)
creat(&(0x7f0000000e40)='./file1\x00', 0x18)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
rename(&(0x7f0000003400)='./file0\x00', &(0x7f0000003440)='./file1\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x4)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
r1 = open(&(0x7f0000000280)='./file1\x00', 0x1cd142, 0x0)
sendfile(r1, r1, 0x0, 0x800000020)

2m4.662477127s ago: executing program 1 (id=172):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)={0x20000001})
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
poll(&(0x7f0000000000)=[{r1, 0x15c0}], 0x1, 0x3c0)
poll(&(0x7f00000000c0), 0x0, 0xb0)

2m2.242084461s ago: executing program 1 (id=180):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f000000cf00)="$eJzs3M1rI2UYAPAn/djtfrgW8eBtBxahhU1o+rHoreoufmCXsurBk6ZJGrKbZEqTprUnDx7Fg/+JKHjy6N/gwbM38aB4E5TMTHXrBwhNm+3294PJM++bN888b1gWnpmSAC6s+eTXn0txI65ExHREXI/IzkvFkVnPwwsRcTMiph47SsX8nxOXIuJqRNwYJc9zloq3Pr89vLX201u/fPPd5ZlrX3z9/eR2DUzaixHR3cnP97t5TFt5fFjM14btLHZXh0XM3+g+KsZpHvebW1mG/drRuloWV1r5+nRnrz+K251afRRb7e1sfqeXX7A/bB3lyT7wsLabjRvNrSy2+2kWW4d5XQeH+f9th/1BnqdR5PsoSx+DwVHM55sHzXw/O4+yWO8Nivk8b9poHozisIjF5aKedhpZHVsn+aafbG+3e3sHybC522+nvWStUn2pUr1Tru6mjeaguVqudRt3VpOFVme0rDxo1rrrrTRtdZqVetpdTBZa9Xq5Wk0W7ja32rVeUq1WVipL5bXF4ux28vr995JOI1kYxVfbvb1Bu9NPttPdJP/EYrJcWXl5MblVTd7Z2Ew2H9y7t7H57gd337//ysabrxWL/lFWsrC8tLxcri6Vl6uLF2j/nxRFj3H/cCKlSRcAcP7o/4FJOL3+f/dBxOn3/6H/H4tz1f9e9P7/FPYPJ6L/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4sH6Y/fKN7GQ+H18r5p8ppp4rxqWImIqI3//FdFw6lnO6yDP7H+tn/1bDt6XIMoyucbk4rkbEenH89uxpfwsAAADw9Prq45uf5d16/jI/6YI4S/lNm6nrH44p31xEzM7/OKZsU6OX58eULPv3PRMHY8qW3cCaG1Oy/JbbzLiy/S/Tx8LcY6GUh6kzLQcAADgTxzuBs+1CAAAAOEufTroAJqMUR48yj54FZ395/9cDwSvHRgAAAMA5VJp0AQAAAMCpy/p/v/8HAAAAT7f89/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgD3bu5zZxIIoD8LPBC/tPi1Z731b2BmVsCXvcY0QBaYICciAtpAFqILeUEEGExyEQcYjksa1E3yc5k7HMjzcIDjMjDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KX7ar24vfp93TZnt28nz2gAAACAS7bVelH/M0v9r839782tn02/iIgyIi7N3Ufx6Sxz1ORUL8/fnD5fvarhLqJOOLzHpLm+RMSf5nr80fWnAAAAAB/XZrmap9l6+jMbuiD6lBZtym9/M+UVEVHNHjKllYe8X5nC6u/3OP5nSqsXsKaZwtKS2zhX2pvUP/fjqt30pClSU1582bHIbGMHAAB6NDpr+p2FAAAA0Kd/QxfAMIp43so8bgVOUtNs730+6wEAAADvUDF0AQAAAEDn6vl/T+f/7Z3/BwAAAMNI5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQpW21XmyWq3nbnN2+nTyjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCf25x0FQiAMwmDv+s5k7n9YadDU1KQKhI+/MRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjzu7/8n5gaZ5K518bS80iydmpsnRp758bRH8bXrwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNiflxQIgSCIgjnjfyd9/8NKgp5BhAhoeFRRiwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvuh3v/yfmBpnkrnTxtLxSLJ21di6auw9aBw9GG//BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNi5n9c4qjgA4G9mdra2Kq5R9hARBQ96sdttbe1NPCjBg3+CENJtjd36o83BliLm4k1y7kX0KCIo8db/IecEcom3HPYQwbMyszPZyQ9w/TWzST4fePO+Owzzvm8WQr7zXgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBp9PYkTrJDZxzHxbnNvYdLWb91qM88Xtuez1oWR3UmfTK8WP0QdZtLBAAAgLMjKev7EMJOur6Q9XEnr//T8pqs5v/26XFc1vOH6/6yL2v/rP3y8+7z+wN1xuNkN725PBxcOppK6/+b5Wx75i+vaOVPPn/3kuRfSPze6nOjNH+e0dcbG++08/BcHdkCAP/ExbIvgvL3oazvN5kYAGdGq1J4l/V/0mk2JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA6jFbDk2UchRDmW5M4s7X3cOm4/vHa9nzZrj16tBa+nNwzu0UaQri5PBxcqnU2s+3e/Qe3F4fDwd36g5dCCE2N/lYx/dsfTHFxCI08H8F/FMTFlz0r+ZyMoMEfSgAAnEpp0bK6fiddX8jORXMh/PHdwfr/1Uocpqz/dz+8tlkdq1r/92ub4ezrrdz5tHfv/oPXl+8s3hrcGnz8xuX+m/0r169evd7L35X0vDEBAADg32kXrVr/x3NH1/8vVOIwZf3/2Tf9L6pjJer/Y00W/ZrOBAAA4Gx79uXff4uOOR+12+HzxZWVu/3xcf/z5fGxgVT/tnNFq9b/yVzTWQEAAAB1GK1GB9b/b1TiMOX6/1Pfv/Bj9Z5JCOF8sf5/cemT4Y36pjPT6vhz4qbnCAAAQLPOF626/p/m+//j/S0PcQjhtVfGcfFvAKeq/5N3v/qhOlZ1//+V+qY4k+Lu+HnkfTeEVrfpjAAAADjNnihaVuz/mq4vfPTThffb9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O3PAAAA//9WwT6Z")
r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x183b41, 0x51)
ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000340)=0xfffffff9)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x800800})
creat(&(0x7f0000000040)='./file0\x00', 0x0)

2m0.772204691s ago: executing program 34 (id=180):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f000000cf00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x183b41, 0x51)
ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000340)=0xfffffff9)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x800800})
creat(&(0x7f0000000040)='./file0\x00', 0x0)

14.23152285s ago: executing program 5 (id=409):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x800000, &(0x7f0000000100)={[{@bh}, {@delalloc}, {@oldalloc}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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")
mkdir(&(0x7f0000000080)='./bus\x00', 0x3)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x40000, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)
madvise(&(0x7f000014b000/0xc00000)=nil, 0xc00000, 0x15)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x24, &(0x7f0000000000)={0x0, 0x1, 0x5, 0x1, 0xffffffffffffffff})
mkdirat(0xffffffffffffff9c, 0x0, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)
pidfd_send_signal(0xffffffffffffffff, 0x37, &(0x7f0000000280)={0xa, 0xfffffff5, 0xc000}, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/rt_cache\x00')
read$msr(r5, &(0x7f0000000a40)=""/37, 0x25)
lseek(r5, 0x48, 0x0)

11.870253241s ago: executing program 5 (id=413):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'})
connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0xf, 0x2a4, &(0x7f0000000480)="$eJzs3T9rc2UUAPBzkzSNOqSIiyJ4QQen0rq6NEoFsZMSQR002BYkCYUWAlYwduoncPR7+BFcXPwGgqvg1g6VKzf33ia16R/65k3h7e83nd7nnvOc3KckU06+eXPY3z1I4uTsz2i1kqhtxVacJ7EWtaj8FI0AAF4c51kW/2QPyWzUFt8NALAMxed/4bF7AQCW47Mvvvyks7Oz/WmatuL19umom0TE8HTULdY7+/FdDGIvNqIdFxHZpSL+6OOd7WikubV4ZzgedfPM4de/l/U7f0dM8jejHWvz8zfTwmX+y1V3aXT2V6o/2vHa/Pz3/p8fw3F0m/Hu2zP9r0c7/vg2DmIQu5HnTvN/3EzTD7Ofz374Kt8mz09q0V2d3DeV1Zd0JAAAAAAAAAAAAAAAAAAAAAAAPAHraZoU43sm83vyS5P5OaNu/WKyvp5WZuf7jKv5QElVqJgPlEU5omecxS/VfJ2NNE2z8sZpfiPeaPhhAQAAAAAAAAAAAAAAAAAAAMgdfX/c7w0Ge4cLCappANXX+h9aZ2vmyltx3O/Vby64ev+9ZqcN5L3eenM0GrGgx3JX8FLez8Irr04P9/MogupgFrrXqx8URY/7vbRcqh5yv5fctVerOrhfZ5ea8ayNZZN/iYvs6pm2Llu9mtVc0NNovjJ36d8sy+5X5/2/ijMqrySTERv3232lDOa+wDxoXT+L324ueONbRn0hbzwAAAAAAAAAAAAAAAAAAMA10y/9zlk8uTW19tyaAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAlm/7+fxW0IuLqlWvBuEy+7Z4yaMbh0SO/RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ6A/wIAAP//4ipOSw==")
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)

6.762855278s ago: executing program 4 (id=431):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000980)=@framed, &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc)

6.40166291s ago: executing program 4 (id=434):
fsopen(0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)

3.524348759s ago: executing program 5 (id=448):
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711809000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.417110443s ago: executing program 3 (id=449):
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711815000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.258355448s ago: executing program 5 (id=451):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10)

3.235136769s ago: executing program 3 (id=452):
close(0x3)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff43, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

3.177570681s ago: executing program 4 (id=453):
syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==")
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r4, 0x29, 0x5, 0x0, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000340)={{0x8, 0xf, 0x3, 0xffa}, 'syz0\x00', 0x3e})
r6 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0xfffffffffffffffe, 0x0)
r7 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3a})
syz_open_procfs(r7, &(0x7f0000000100)='map_files\x00')
ioprio_set$pid(0x2, r7, 0x2004)

3.078143694s ago: executing program 5 (id=455):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5c}, 0x48)

2.987671637s ago: executing program 3 (id=456):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'})
connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0xf, 0x2a4, &(0x7f0000000480)="$eJzs3T9rc2UUAPBzkzSNOqSIiyJ4QQen0rq6NEoFsZMSQR002BYkCYUWAlYwduoncPR7+BFcXPwGgqvg1g6VKzf33ia16R/65k3h7e83nd7nnvOc3KckU06+eXPY3z1I4uTsz2i1kqhtxVacJ7EWtaj8FI0AAF4c51kW/2QPyWzUFt8NALAMxed/4bF7AQCW47Mvvvyks7Oz/WmatuL19umom0TE8HTULdY7+/FdDGIvNqIdFxHZpSL+6OOd7WikubV4ZzgedfPM4de/l/U7f0dM8jejHWvz8zfTwmX+y1V3aXT2V6o/2vHa/Pz3/p8fw3F0m/Hu2zP9r0c7/vg2DmIQu5HnTvN/3EzTD7Ofz374Kt8mz09q0V2d3DeV1Zd0JAAAAAAAAAAAAAAAAAAAAAAAPAHraZoU43sm83vyS5P5OaNu/WKyvp5WZuf7jKv5QElVqJgPlEU5omecxS/VfJ2NNE2z8sZpfiPeaPhhAQAAAAAAAAAAAAAAAAAAAMgdfX/c7w0Ge4cLCappANXX+h9aZ2vmyltx3O/Vby64ev+9ZqcN5L3eenM0GrGgx3JX8FLez8Irr04P9/MogupgFrrXqx8URY/7vbRcqh5yv5fctVerOrhfZ5ea8ayNZZN/iYvs6pm2Llu9mtVc0NNovjJ36d8sy+5X5/2/ijMqrySTERv3232lDOa+wDxoXT+L324ueONbRn0hbzwAAAAAAAAAAAAAAAAAAMA10y/9zlk8uTW19tyaAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAlm/7+fxW0IuLqlWvBuEy+7Z4yaMbh0SO/RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ6A/wIAAP//4ipOSw==")
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)

2.950542328s ago: executing program 5 (id=457):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x10001}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'})
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x340, 0x11, 0x148, 0x340, 0x0, 0x3e0, 0x2a8, 0x2a8, 0x3e0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x2, 0x3f, 0x0, 0x0, 0x3, 0x9}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0/../file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x8, 'syz0\x00', {0x80000001}}}}, {{@ip={@multicast2, @empty, 0x0, 0xffffff00, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x1d, 0x0, 0x44}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8)

2.200767515s ago: executing program 6 (id=459):
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x13, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000080850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.886898055s ago: executing program 6 (id=460):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711822000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.622416125s ago: executing program 6 (id=461):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000400000000000000000085000000bb00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

789.369733ms ago: executing program 6 (id=462):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0xfffffffffffffcd4, 0x2, 0x0, 0x0, {{0x7, 0x3, 0x67e4}, {0x9, 0x3, 0x5, 0x9}}}, @TCF_EM_NBYTE={0xfffffffffffffdd7, 0x2, 0x0, 0x0, {{0x24, 0x2, 0x3}, {0x7d, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x70}}, 0x0)

559.861511ms ago: executing program 4 (id=463):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000001c0), 0x12)

465.574674ms ago: executing program 6 (id=464):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="180000000000000000000000060000008500000061000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

407.411476ms ago: executing program 3 (id=465):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r0}, 0xc)

182.336064ms ago: executing program 3 (id=466):
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x3, 0x9, 0x0, 0x7fff}, 0x20)
r1 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)

182.185854ms ago: executing program 6 (id=467):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240), 0x1, 0x4ff, &(0x7f0000000ac0)="$eJzs3cFvG1kZAPDPTpw4aXaTXfYACHbL7kJBVZ3E3Y1We4DlhBBaCbFHkNqQuFEUO45ipzShh/TMFYlKnODIH8C5J+5cENy4lANSgQjUIHEwmvEkdVO7iZrEzsa/nzSa9+ZN/L3XdN6rvyZ+AQytqxGxGxFjEXE7Iqaz67nsiE/aR3Lf0737S/t795dy0Wp99s9c2p5ci46vSVzJXrMYET/6XsRPcy/GbWzvrC1Wq5XNrD7brG3MNrZ3bqzWFlcqK5X1cnlhfmHuo5sfls9srO/UxrLSVx//cfdbP0+6NZVd6RzHWWoPvXAYJzEaET84j2ADMJKNZ2zQHeGV5CPizYh4N33+p2Mk/W4CAJdZqzUdrenOOgBw2eXTHFguX8pyAVORz5dK7RzeWzGZr9Ybzet36lvry+1c2UwU8ndWq5W5LFc4E4VcUp9Py8/q5SP1mxHxRkT8cnwirZeW6tXlQf7DBwCG2JUj6/9/xtvrPwBwyRUH3QEAoO+s/wAwfKz/ADB8rP8AMHza6//EoLsBAPSR9/8AMHys/wAwVH746afJ0drPPv96+e721lr97o3lSmOtVNtaKi3VNzdKK/X6SvqZPbXjXq9ar2/MfxBb92a+vdFozja2d27V6lvrzVvp53rfqhTSu3b7MDIAoJc33nn0l1yyIn88kR7RsZdDYaA9A85bftAdAAZmZNAdAAbGbl8wvE7xHl96AD7vuuzN202x2y8ItVqt1jl0CeiPa1+S/4dh1ZH/91PAMGTk/2F4yf/D8Gq1cifd8z9OeiMAcLHJ8QM9fgzgzez8u+w/B36yfPSOh+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwWETNRyN1ZrVbmIuL1iPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3+1HNNb185LI5FxM9+/dmv7i02m5t/ihjL/Wv84HrzYXa93P/eAwDHO1in03PHG/mne/eXDo5+9ufJdyOi2I6/vzcW+4fxR2M0PRejEBGT/85l9bZcR+7iNHYfRMQXu40/F1NpDqS98+nR+Ens1/oaP/9c/Hza1j4nfxZfOIO+wLB5lMw/n3R7/vJxNT13f/6L6Qx1etn8l7zU0n46Bz6LfzD/jfSY/66eNMYHf/h+uzSRffGz3Z6fPIj48mjEQez9jvnnIH6uR/z3Txj/r195+91eba3fRFyL7vE7Y802axuzje2dG6u1xZXKSmW9XF6YX5j76OaH5dk0Rz3bezX4x8fXX+/Vlox/skf84jHj//oJx//b/93+8ddeEv+b73WLn4+3XhI/WRO/ccL4i5O/L/ZqS+Iv9xj/cd//6yeM//hvOy9sGw4ADE5je2dtsVqtbCooXPxC8lf2AnSja+E7/Yo1Ft2bfvFe+5k+0tRqvVKsXjPGWWTdgIvg8KGPiP8OujMAAAAAAAAAAAAAAEBX/fiNpUGPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMvr/wEAAP//M+fPJQ==")
creat(&(0x7f0000000040)='./file1\x00', 0x18)
socket$inet6(0xa, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xa)
writev(r0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x80)
r4 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000080)={@loopback}, 0x14)

182.051704ms ago: executing program 4 (id=468):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x82200}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

62.177208ms ago: executing program 3 (id=469):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240), 0x1, 0x4ff, &(0x7f0000000ac0)="$eJzs3cFvG1kZAPDPTpw4aXaTXfYACHbL7kJBVZ3E3Y1We4DlhBBaCbFHkNqQuFEUO45ipzShh/TMFYlKnODIH8C5J+5cENy4lANSgQjUIHEwmvEkdVO7iZrEzsa/nzSa9+ZN/L3XdN6rvyZ+AQytqxGxGxFjEXE7Iqaz67nsiE/aR3Lf0737S/t795dy0Wp99s9c2p5ci46vSVzJXrMYET/6XsRPcy/GbWzvrC1Wq5XNrD7brG3MNrZ3bqzWFlcqK5X1cnlhfmHuo5sfls9srO/UxrLSVx//cfdbP0+6NZVd6RzHWWoPvXAYJzEaET84j2ADMJKNZ2zQHeGV5CPizYh4N33+p2Mk/W4CAJdZqzUdrenOOgBw2eXTHFguX8pyAVORz5dK7RzeWzGZr9Ybzet36lvry+1c2UwU8ndWq5W5LFc4E4VcUp9Py8/q5SP1mxHxRkT8cnwirZeW6tXlQf7DBwCG2JUj6/9/xtvrPwBwyRUH3QEAoO+s/wAwfKz/ADB8rP8AMHza6//EoLsBAPSR9/8AMHys/wAwVH746afJ0drPPv96+e721lr97o3lSmOtVNtaKi3VNzdKK/X6SvqZPbXjXq9ar2/MfxBb92a+vdFozja2d27V6lvrzVvp53rfqhTSu3b7MDIAoJc33nn0l1yyIn88kR7RsZdDYaA9A85bftAdAAZmZNAdAAbGbl8wvE7xHl96AD7vuuzN202x2y8ItVqt1jl0CeiPa1+S/4dh1ZH/91PAMGTk/2F4yf/D8Gq1cifd8z9OeiMAcLHJ8QM9fgzgzez8u+w/B36yfPSOh+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwWETNRyN1ZrVbmIuL1iPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3+1HNNb185LI5FxM9+/dmv7i02m5t/ihjL/Wv84HrzYXa93P/eAwDHO1in03PHG/mne/eXDo5+9ufJdyOi2I6/vzcW+4fxR2M0PRejEBGT/85l9bZcR+7iNHYfRMQXu40/F1NpDqS98+nR+Ens1/oaP/9c/Hza1j4nfxZfOIO+wLB5lMw/n3R7/vJxNT13f/6L6Qx1etn8l7zU0n46Bz6LfzD/jfSY/66eNMYHf/h+uzSRffGz3Z6fPIj48mjEQez9jvnnIH6uR/z3Txj/r195+91eba3fRFyL7vE7Y802axuzje2dG6u1xZXKSmW9XF6YX5j76OaH5dk0Rz3bezX4x8fXX+/Vlox/skf84jHj//oJx//b/93+8ddeEv+b73WLn4+3XhI/WRO/ccL4i5O/L/ZqS+Iv9xj/cd//6yeM//hvOy9sGw4ADE5je2dtsVqtbCooXPxC8lf2AnSja+E7/Yo1Ft2bfvFe+5k+0tRqvVKsXjPGWWTdgIvg8KGPiP8OujMAAAAAAAAAAAAAAEBX/fiNpUGPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMvr/wEAAP//M+fPJQ==")
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x18)
socket$inet6(0xa, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xa)
writev(r1, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x80)
r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000001c00), 0x12)
accept4$nfc_llcp(r0, &(0x7f00000000c0), &(0x7f00000001c0)=0x60, 0x80800)
r6 = socket$inet6(0xa, 0x2, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
sendto$inet6(r6, &(0x7f00000000c0)="800034ca269bb23c", 0x8, 0x4004084, &(0x7f0000000040)={0xa, 0x4e26, 0x0, @mcast2}, 0x1c)
write$P9_RREADLINK(r0, &(0x7f0000000140)={0x10, 0x17, 0x2, {0x7, './file2'}}, 0xffffffac)

0s ago: executing program 4 (id=470):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.174' (ED25519) to the list of known hosts.
syzkaller login: [   58.955380][ T5754] cgroup: Unknown subsys name 'net'
[   59.083285][ T5754] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   60.420192][ T5754] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   61.758390][ T5767] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.777752][ T5767] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.788295][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.797858][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.820455][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.839138][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.861706][ T5771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.866793][ T5774] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.877226][ T5774] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.877605][   T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   61.885654][ T5774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.899132][ T5774] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.899245][ T5771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.914413][ T5774] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   61.915075][ T5771] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.937714][ T5771] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.945357][ T5774] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   61.954012][ T5774] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.019603][ T5767] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   62.038023][ T5767] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   62.048482][ T5767] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   62.056738][ T5767] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   62.070026][ T5767] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   62.077791][ T5767] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   62.345273][ T5765] chnl_net:caif_netlink_parms(): no params data found
[   62.395008][ T5772] chnl_net:caif_netlink_parms(): no params data found
[   62.497158][ T5768] chnl_net:caif_netlink_parms(): no params data found
[   62.511944][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.519701][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.526928][ T5765] bridge_slave_0: entered allmulticast mode
[   62.533927][ T5765] bridge_slave_0: entered promiscuous mode
[   62.544295][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.551482][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.558933][ T5765] bridge_slave_1: entered allmulticast mode
[   62.565543][ T5765] bridge_slave_1: entered promiscuous mode
[   62.621577][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.629400][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.636516][ T5772] bridge_slave_0: entered allmulticast mode
[   62.643464][ T5772] bridge_slave_0: entered promiscuous mode
[   62.657725][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.664862][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.672147][ T5772] bridge_slave_1: entered allmulticast mode
[   62.679411][ T5772] bridge_slave_1: entered promiscuous mode
[   62.718450][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.731098][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.788448][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.800573][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.823530][ T5765] team0: Port device team_slave_0 added
[   62.830191][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.837752][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.844951][ T5768] bridge_slave_0: entered allmulticast mode
[   62.852382][ T5768] bridge_slave_0: entered promiscuous mode
[   62.861592][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.868798][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.876094][ T5768] bridge_slave_1: entered allmulticast mode
[   62.883553][ T5768] bridge_slave_1: entered promiscuous mode
[   62.911174][ T5765] team0: Port device team_slave_1 added
[   62.935222][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.942289][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.968357][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.996569][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.010817][ T5772] team0: Port device team_slave_0 added
[   63.016934][ T5776] chnl_net:caif_netlink_parms(): no params data found
[   63.034557][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.041677][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.067768][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.086754][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.098702][ T5772] team0: Port device team_slave_1 added
[   63.174307][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.181403][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.208056][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.220474][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.227675][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.253776][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.277319][ T5768] team0: Port device team_slave_0 added
[   63.287293][ T5765] hsr_slave_0: entered promiscuous mode
[   63.294319][ T5765] hsr_slave_1: entered promiscuous mode
[   63.331823][ T5768] team0: Port device team_slave_1 added
[   63.371343][ T5772] hsr_slave_0: entered promiscuous mode
[   63.378057][ T5772] hsr_slave_1: entered promiscuous mode
[   63.384082][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.392399][ T5772] Cannot create hsr debugfs directory
[   63.407147][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.414169][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.440171][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.475374][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.482591][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.494059][ T5776] bridge_slave_0: entered allmulticast mode
[   63.500923][ T5776] bridge_slave_0: entered promiscuous mode
[   63.508468][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.515436][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.541631][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.573443][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.581079][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.588823][ T5776] bridge_slave_1: entered allmulticast mode
[   63.595431][ T5776] bridge_slave_1: entered promiscuous mode
[   63.681329][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.703584][ T5768] hsr_slave_0: entered promiscuous mode
[   63.709874][ T5768] hsr_slave_1: entered promiscuous mode
[   63.715842][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.724244][ T5768] Cannot create hsr debugfs directory
[   63.756713][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.821336][ T5776] team0: Port device team_slave_0 added
[   63.865292][ T5776] team0: Port device team_slave_1 added
[   63.904625][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.911649][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.937965][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.950736][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.958541][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.984632][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.989973][ T5774] Bluetooth: hci1: command tx timeout
[   64.001094][ T5767] Bluetooth: hci0: command tx timeout
[   64.047816][ T5774] Bluetooth: hci2: command tx timeout
[   64.096150][ T5776] hsr_slave_0: entered promiscuous mode
[   64.103119][ T5776] hsr_slave_1: entered promiscuous mode
[   64.109515][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.117067][ T5776] Cannot create hsr debugfs directory
[   64.123797][ T5765] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.130958][ T5774] Bluetooth: hci3: command tx timeout
[   64.161161][ T5765] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.171204][ T5765] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.185216][ T5765] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.303645][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   64.313155][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   64.323923][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   64.334172][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   64.412660][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.450777][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.460975][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.486789][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.546606][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.556079][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.579743][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.589636][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.662210][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.692060][ T5765] 8021q: adding VLAN 0 to HW filter on device team0
[   64.737581][ T3006] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.744927][ T3006] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.754703][ T3006] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.761872][ T3006] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.792211][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.819410][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.865325][ T5772] 8021q: adding VLAN 0 to HW filter on device team0
[   64.876870][ T5768] 8021q: adding VLAN 0 to HW filter on device team0
[   64.894022][ T3006] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.901262][ T3006] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.923538][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.936317][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.943490][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.974461][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.981592][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.995890][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.003092][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.059378][ T5776] 8021q: adding VLAN 0 to HW filter on device team0
[   65.101115][  T147] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.108409][  T147] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.137320][  T147] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.144638][  T147] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.215529][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.275775][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.336261][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.465407][ T5765] veth0_vlan: entered promiscuous mode
[   65.499419][ T5765] veth1_vlan: entered promiscuous mode
[   65.586100][ T5765] veth0_macvtap: entered promiscuous mode
[   65.643293][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.657058][ T5765] veth1_macvtap: entered promiscuous mode
[   65.691401][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.724266][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.735095][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.765132][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.784654][ T5772] veth0_vlan: entered promiscuous mode
[   65.794615][ T5765] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.803959][ T5765] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.814497][ T5765] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.823390][ T5765] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.848647][ T5772] veth1_vlan: entered promiscuous mode
[   65.870694][ T5768] veth0_vlan: entered promiscuous mode
[   65.912186][ T5768] veth1_vlan: entered promiscuous mode
[   65.965446][ T5772] veth0_macvtap: entered promiscuous mode
[   65.981651][ T5776] veth0_vlan: entered promiscuous mode
[   66.000816][ T5768] veth0_macvtap: entered promiscuous mode
[   66.018777][ T5776] veth1_vlan: entered promiscuous mode
[   66.028605][ T5772] veth1_macvtap: entered promiscuous mode
[   66.048039][ T5774] Bluetooth: hci1: command tx timeout
[   66.048521][ T5767] Bluetooth: hci0: command tx timeout
[   66.064879][ T5768] veth1_macvtap: entered promiscuous mode
[   66.121748][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.135677][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.137741][ T5767] Bluetooth: hci2: command tx timeout
[   66.149203][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.161939][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.172888][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.183345][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.197168][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.207586][ T5767] Bluetooth: hci3: command tx timeout
[   66.210314][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.234147][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.244760][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.255869][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.266140][   T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.276716][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.277482][   T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.296645][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.306721][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.317469][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.331066][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.358388][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.367098][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.384192][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.393188][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.406592][ T5768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.416505][ T5768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.425253][ T5768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.434720][ T5768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.471670][ T5776] veth0_macvtap: entered promiscuous mode
[   66.482913][ T5776] veth1_macvtap: entered promiscuous mode
[   66.501098][ T2961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.516387][ T2961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.564102][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.578954][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.590060][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.600635][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.615228][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.626273][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.639446][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.683729][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.696335][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.709987][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.720531][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.730940][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.741971][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.753036][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.770348][  T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.781009][  T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.824354][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.843172][  T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.857758][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.866503][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.882414][  T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.891393][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.946702][ T3006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.957003][ T3006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.098303][  T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.110386][  T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.327651][ T5829] hub 9-0:1.0: USB hub found
[   67.335004][ T5829] hub 9-0:1.0: 1 port detected
[   68.128652][ T5767] Bluetooth: hci0: command tx timeout
[   68.134255][ T5774] Bluetooth: hci1: command tx timeout
[   68.208177][ T5774] Bluetooth: hci2: command tx timeout
[   68.291465][ T5774] Bluetooth: hci3: command tx timeout
[   68.326930][ T5837] syz.1.5[5837]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   68.362113][   T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.487709][   T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.579568][ T5837] loop1: detected capacity change from 0 to 1024
[   68.587053][ T5837] =======================================================
[   68.587053][ T5837] WARNING: The mand mount option has been deprecated and
[   68.587053][ T5837]          and is ignored by this kernel. Remove the mand
[   68.587053][ T5837]          option from the mount to silence this warning.
[   68.587053][ T5837] =======================================================
[   68.692941][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.718475][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.818670][ T5844] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   68.891753][ T5837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   68.912233][ T5837] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.706243][ T5837] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #15: comm syz.1.5: lblock 0 mapped to illegal pblock 0 (length 1)
[   69.753815][ T5837] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   69.776330][ T5837] EXT4-fs (loop1): This should not happen!! Data will be lost
[   69.776330][ T5837] 
[   69.819231][ T5855] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.904667][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   70.213069][ T5774] Bluetooth: hci1: command tx timeout
[   70.218735][ T5767] Bluetooth: hci0: command tx timeout
[   70.317888][ T5774] Bluetooth: hci2: command tx timeout
[   70.367696][ T5774] Bluetooth: hci3: command tx timeout
[   70.422002][ T5866] loop1: detected capacity change from 0 to 4096
[   70.468650][ T5866] EXT4-fs: inline encryption not supported
[   70.755507][ T5866] EXT4-fs: inline encryption not supported
[   70.839022][ T5880] hub 9-0:1.0: USB hub found
[   70.844735][ T5880] hub 9-0:1.0: 1 port detected
[   72.018981][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[   72.019136][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[   72.038869][ T5880] tty tty24: ldisc open failed (-12), clearing slot 23
[   72.139042][ T5866] ext4: Unknown parameter 'smackfstransmute'
[   72.382566][ T5889] loop0: detected capacity change from 0 to 256
[   73.454401][ T5895] loop0: detected capacity change from 0 to 1024
[   73.614856][ T5895] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   73.631608][ T5895] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   73.736425][ T5895] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #15: comm syz.0.17: lblock 0 mapped to illegal pblock 0 (length 1)
[   73.774840][ T5895] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   73.812308][ T5895] EXT4-fs (loop0): This should not happen!! Data will be lost
[   73.812308][ T5895] 
[   74.004638][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   74.518141][ T5913] hub 9-0:1.0: USB hub found
[   74.527789][ T5913] hub 9-0:1.0: 1 port detected
[   75.236832][ T5921] loop2: detected capacity change from 0 to 512
[   75.282043][ T5921] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.25: invalid indirect mapped block 256 (level 2)
[   75.316022][ T5921] EXT4-fs (loop2): 2 truncates cleaned up
[   75.323562][ T5921] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.388702][ T5921] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.25: bg 0: block 5: invalid block bitmap
[   75.469909][ T5921] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   75.538269][ T5921] EXT4-fs (loop2): This should not happen!! Data will be lost
[   75.538269][ T5921] 
[   75.568277][ T5921] EXT4-fs (loop2): Total free blocks count 0
[   75.574937][ T5921] EXT4-fs (loop2): Free/Dirty block details
[   75.588684][ T5921] EXT4-fs (loop2): free_blocks=0
[   75.600819][ T5921] EXT4-fs (loop2): dirty_blocks=2
[   75.605940][ T5921] EXT4-fs (loop2): Block reservation details
[   75.612301][ T5921] EXT4-fs (loop2): i_reserved_data_blocks=2
[   75.656495][ T1111] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28
[   75.808341][ T5934] loop2: detected capacity change from 0 to 4096
[   75.815649][ T5934] EXT4-fs: inline encryption not supported
[   75.844329][ T5934] EXT4-fs: inline encryption not supported
[   75.852206][ T5934] ext4: Unknown parameter 'smackfstransmute'
[   77.717699][ T5947] hub 9-0:1.0: USB hub found
[   77.817569][ T5947] hub 9-0:1.0: 1 port detected
[   77.850194][ T5937] sched: RT throttling activated
[   78.304670][ T5948] tty tty20: ldisc open failed (-12), clearing slot 19
[   79.093677][ T5959] loop3: detected capacity change from 0 to 512
[   79.155633][ T5959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.534448][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.700053][ T5951] loop0: detected capacity change from 0 to 40427
[   79.714085][ T5951] F2FS-fs (loop0): invalid crc value
[   79.724688][ T5951] F2FS-fs (loop0): Found nat_bits in checkpoint
[   79.826099][ T5951] F2FS-fs (loop0): Start checkpoint disabled!
[   79.847263][ T5951] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   80.497727][ T5976] hub 9-0:1.0: USB hub found
[   80.527064][ T5976] hub 9-0:1.0: 1 port detected
[   81.143707][ T5982] loop2: detected capacity change from 0 to 1024
[   81.194608][ T5982] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal
[   81.196688][   T42] kworker/u4:2: attempt to access beyond end of device
[   81.196688][   T42] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[   81.280122][   T42] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   81.287175][   T42] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   81.307434][   T42] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   81.836412][    T8] cfg80211: failed to load regulatory.db
[   81.854183][ T5996] loop2: detected capacity change from 0 to 256
[   81.873506][ T5994] loop1: detected capacity change from 0 to 4096
[   81.893516][ T5994] EXT4-fs: inline encryption not supported
[   81.917824][ T5994] EXT4-fs: inline encryption not supported
[   81.923727][ T5994] ext4: Unknown parameter 'smackfstransmute'
[   82.161421][ T6000] loop2: detected capacity change from 0 to 512
[   82.184717][ T6000] EXT4-fs: Ignoring removed bh option
[   82.210267][ T6000] EXT4-fs: Ignoring removed nomblk_io_submit option
[   82.279774][ T6000] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   82.374039][ T6000] EXT4-fs (loop2): 1 truncate cleaned up
[   82.400353][ T6000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.647907][ T6015] hub 9-0:1.0: USB hub found
[   83.757540][ T6015] hub 9-0:1.0: 1 port detected
[   84.935541][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.313662][ T6025] loop2: detected capacity change from 0 to 256
[   86.268163][ T6030] loop3: detected capacity change from 0 to 1024
[   86.319249][ T6030] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal
[   87.310205][ T6045] loop0: detected capacity change from 0 to 4096
[   87.320137][ T6045] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   87.355963][ T6049] loop1: detected capacity change from 0 to 256
[   87.370265][ T6045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.443606][ T6036] loop2: detected capacity change from 0 to 40427
[   87.461402][ T6036] F2FS-fs (loop2): invalid crc value
[   87.500986][ T6036] F2FS-fs (loop2): Found nat_bits in checkpoint
[   87.663788][ T6056] hub 9-0:1.0: USB hub found
[   87.669661][ T6056] hub 9-0:1.0: 1 port detected
[   88.326461][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.335800][ T6036] F2FS-fs (loop2): Start checkpoint disabled!
[   88.349641][ T6058] loop1: detected capacity change from 0 to 1024
[   88.414666][ T6036] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   88.502644][ T5758] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   88.562102][ T6062] loop0: detected capacity change from 0 to 4096
[   88.575058][ T6062] EXT4-fs: inline encryption not supported
[   88.590613][ T6062] EXT4-fs: inline encryption not supported
[   88.616887][ T6062] ext4: Unknown parameter 'smackfstransmute'
[   88.761404][ T5756] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   88.913894][   T12] kworker/u4:1: attempt to access beyond end of device
[   88.913894][   T12] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[   88.955737][   T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   88.982026][   T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   89.000286][   T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   89.118399][ T6067] loop1: detected capacity change from 0 to 256
[   90.256977][ T6073] loop2: detected capacity change from 0 to 1024
[   90.352289][ T6073] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal
[   90.982820][ T6082] loop2: detected capacity change from 0 to 256
[   91.758116][    T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   91.987761][    T8] usb 3-1: Using ep0 maxpacket: 16
[   92.028596][    T8] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[   92.066059][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.094719][    T8] usb 3-1: Product: syz
[   92.109680][    T8] usb 3-1: Manufacturer: syz
[   92.114318][    T8] usb 3-1: SerialNumber: syz
[   92.642810][ T6096] loop1: detected capacity change from 0 to 512
[   92.649604][ T6089] loop3: detected capacity change from 0 to 40427
[   92.651056][ T6096] EXT4-fs: Ignoring removed bh option
[   92.665998][ T6096] EXT4-fs: Ignoring removed nomblk_io_submit option
[   92.675713][ T6089] F2FS-fs (loop3): invalid crc value
[   92.725053][ T6096] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   92.733832][ T6089] F2FS-fs (loop3): Found nat_bits in checkpoint
[   92.784209][ T6096] EXT4-fs (loop1): 1 truncate cleaned up
[   92.814821][ T6096] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.873300][ T6089] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   93.269855][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.408073][ T6105] loop1: detected capacity change from 0 to 256
[   93.431070][ T6105] exfat: Deprecated parameter 'utf8'
[   93.448667][ T6105] exfat: Deprecated parameter 'namecase'
[   93.454567][    T8] snd-usb-audio: probe of 3-1:1.0 failed with error -71
[   93.484527][    T8] usb 3-1: USB disconnect, device number 2
[   93.556604][ T6105] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   93.784170][ T6107] loop1: detected capacity change from 0 to 512
[   93.853183][ T6107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.916630][ T6107] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   94.256808][ T6115] loop2: detected capacity change from 0 to 1024
[   94.280555][ T6115] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal
[   95.050039][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.879921][ T6139] Zero length message leads to an empty skb
[   98.515395][ T6139] loop2: detected capacity change from 0 to 8192
[   98.697523][ T5802] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   98.732714][ T6146] loop3: detected capacity change from 0 to 40427
[   98.798639][ T6146] F2FS-fs (loop3): heap/no_heap options were deprecated
[   98.820988][ T6146] F2FS-fs (loop3): Unrecognized mount option "whint_mode=user-based" or missing value
[   98.897602][ T5802] usb 1-1: Using ep0 maxpacket: 32
[   98.921209][ T5802] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.955970][ T5802] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.997123][ T5802] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   99.021460][ T5802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.058338][ T5802] usb 1-1: config 0 descriptor??
[   99.091708][ T5802] hub 1-1:0.0: USB hub found
[   99.297585][ T5802] hub 1-1:0.0: 1 port detected
[   99.862318][ T6155] loop2: detected capacity change from 0 to 1024
[   99.902559][ T6155] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal
[   99.950718][ T5802] hub 1-1:0.0: activate --> -90
[  100.374122][ T5802] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[  100.389973][ T5802] usb 1-1-port1: connect-debounce failed
[  100.396199][ T5802] usb 1-1: USB disconnect, device number 2
[  100.565993][ T6166] loop1: detected capacity change from 0 to 4096
[  100.583155][ T6166] EXT4-fs: inline encryption not supported
[  100.603355][ T6166] EXT4-fs (loop1): Test dummy encryption mode enabled
[  100.617555][ T6166] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a042c018, mo2=0003]
[  100.626111][ T6166] System zones: 0-5
[  100.638394][ T6166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.784403][ T6166] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  100.812603][   T27] audit: type=1800 audit(1775063825.323:2): pid=6172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.93" name="file1" dev="loop1" ino=15 res=0 errno=0
[  100.942194][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.106899][ T6177] loop2: detected capacity change from 0 to 1024
[  101.155285][ T6179] xt_hashlimit: size too large, truncated to 1048576
[  101.179552][ T6177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  101.278948][ T6177] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  102.329040][  T147] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm kworker/u4:6: bg 0: block 112: padding at end of block bitmap is not set
[  102.359728][  T147] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 824 with error 117
[  102.387553][  T147] EXT4-fs (loop2): This should not happen!! Data will be lost
[  102.387553][  T147] 
[  102.485135][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  103.166231][ T6199] loop2: detected capacity change from 0 to 1024
[  103.236805][ T6199] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal
[  103.458824][ T6209] loop2: detected capacity change from 0 to 1024
[  103.587458][ T6209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.647469][   T27] audit: type=1800 audit(1775063829.113:3): pid=6209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.102" name="file1" dev="loop2" ino=15 res=0 errno=0
[  105.050021][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.143066][  T147] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.284532][  T147] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.390737][  T147] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.550485][  T147] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.021402][ T6229] loop0: detected capacity change from 0 to 512
[  106.100963][ T6229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.231870][ T6229] ext4 filesystem being mounted at /25/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  106.817657][ T5767] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  106.832738][ T5767] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  107.159971][ T6229] syz.0.109 (6229) used greatest stack depth: 19920 bytes left
[  107.191233][ T5767] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  107.199610][ T5767] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  107.211732][ T5767] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  107.231532][ T5767] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  107.349092][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.678543][ T6258] loop0: detected capacity change from 0 to 512
[  107.773712][ T6258] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.822742][ T6258] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  108.801711][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.883659][ T6241] chnl_net:caif_netlink_parms(): no params data found
[  108.912807][ T6270] loop0: detected capacity change from 0 to 512
[  108.920953][ T6270] EXT4-fs: Ignoring removed bh option
[  108.926367][ T6270] EXT4-fs: Ignoring removed nomblk_io_submit option
[  108.983112][ T6270] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  109.038240][ T6270] EXT4-fs (loop0): 1 truncate cleaned up
[  109.056890][ T6270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.218088][   T23] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  109.305834][  T147] hsr_slave_0: left promiscuous mode
[  109.329825][ T5767] Bluetooth: hci3: command tx timeout
[  109.336877][  T147] hsr_slave_1: left promiscuous mode
[  109.372831][  T147] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  109.400091][  T147] batman_adv: batadv0: Removing interface: batadv_slave_0
[  109.423887][  T147] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  109.442107][  T147] batman_adv: batadv0: Removing interface: batadv_slave_1
[  109.603835][   T23] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  109.614102][  T147] bridge_slave_1: left allmulticast mode
[  109.632430][  T147] bridge_slave_1: left promiscuous mode
[  109.653170][  T147] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.693811][  T147] bridge_slave_0: left allmulticast mode
[  109.713055][   T23] usb 4-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40
[  109.722466][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.733689][  T147] bridge_slave_0: left promiscuous mode
[  109.749617][   T23] usb 4-1: Product: syz
[  109.753821][   T23] usb 4-1: Manufacturer: syz
[  109.767459][   T23] usb 4-1: SerialNumber: syz
[  109.773697][  T147] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.852720][  T147] veth1_macvtap: left promiscuous mode
[  109.865231][  T147] veth0_macvtap: left promiscuous mode
[  110.000764][ T6299] hub 9-0:1.0: USB hub found
[  110.006591][ T6299] hub 9-0:1.0: 1 port detected
[  110.143213][  T147] veth1_vlan: left promiscuous mode
[  110.143833][  T147] veth0_vlan: left promiscuous mode
[  110.519692][   T23] usb 4-1: 1:1 : sample bitwidth 248 in over sample bytes 3
[  110.543305][   T23] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  110.564178][   T23] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[  110.595801][   T23] snd-usb-audio: probe of 4-1:1.0 failed with error -2
[  110.702964][   T23] usb 4-1: 1:1 : sample bitwidth 248 in over sample bytes 3
[  110.724677][   T23] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  110.732489][   T23] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[  110.745812][   T23] snd-usb-audio: probe of 4-1:1.1 failed with error -2
[  110.763303][   T23] usb 4-1: 1:1 : sample bitwidth 248 in over sample bytes 3
[  110.787677][   T23] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  110.800086][   T23] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[  110.882550][   T23] snd-usb-audio: probe of 4-1:1.2 failed with error -2
[  110.911101][   T23] usb 4-1: USB disconnect, device number 2
[  111.008996][ T5756] udevd[5756]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  111.286657][ T6306] loop3: detected capacity change from 0 to 4096
[  111.305842][ T6306] EXT4-fs: inline encryption not supported
[  111.328144][ T6306] EXT4-fs: inline encryption not supported
[  111.347176][ T6306] ext4: Unknown parameter 'smackfstransmute'
[  111.408108][ T5767] Bluetooth: hci3: command tx timeout
[  111.752705][ T6304] loop1: detected capacity change from 0 to 40427
[  111.801169][ T6304] F2FS-fs (loop1): Image doesn't support compression
[  111.822815][ T6304] F2FS-fs (loop1): Unrecognized mount option "whint_mode=fs-based" or missing value
[  112.116619][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.480867][  T147] team0 (unregistering): Port device team_slave_1 removed
[  112.709100][  T147] team0 (unregistering): Port device team_slave_0 removed
[  112.806779][ T6318] netlink: 44 bytes leftover after parsing attributes in process `syz.1.121'.
[  113.411449][  T147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  113.500938][ T5767] Bluetooth: hci3: command tx timeout
[  113.591277][  T147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  114.011870][ T6316] loop0: detected capacity change from 0 to 40427
[  114.022005][ T6316] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  114.047634][ T6316] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  114.064394][ T6316] F2FS-fs (loop0): invalid crc value
[  114.102187][ T6316] F2FS-fs (loop0): Found nat_bits in checkpoint
[  114.181886][  T147] bond0 (unregistering): Released all slaves
[  114.253781][ T6316] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  114.262964][ T6316] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  114.357273][ T6241] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.366264][ T6241] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.373803][ T6241] bridge_slave_0: entered allmulticast mode
[  114.381195][ T6241] bridge_slave_0: entered promiscuous mode
[  114.434879][ T6241] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.462807][ T6241] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.483900][ T6241] bridge_slave_1: entered allmulticast mode
[  114.504643][ T6241] bridge_slave_1: entered promiscuous mode
[  114.552806][ T6330] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only
[  114.611494][ T6241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  114.648387][ T6241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  114.754010][ T1111] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  114.775858][ T6241] team0: Port device team_slave_0 added
[  114.789439][ T1111] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  114.838528][ T6241] team0: Port device team_slave_1 added
[  114.968372][ T6241] batman_adv: batadv0: Adding interface: batadv_slave_0
[  114.975369][ T6241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.044339][ T6241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  115.087194][ T6241] batman_adv: batadv0: Adding interface: batadv_slave_1
[  115.177555][ T6241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.297045][ T6241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  115.578592][ T5767] Bluetooth: hci3: command tx timeout
[  116.138787][ T6241] hsr_slave_0: entered promiscuous mode
[  116.178072][ T6241] hsr_slave_1: entered promiscuous mode
[  116.192991][ T6241] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  116.207713][ T6241] Cannot create hsr debugfs directory
[  116.356208][ T6350] loop1: detected capacity change from 0 to 8192
[  116.786449][ T6357] loop1: detected capacity change from 0 to 512
[  116.811292][ T6241] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  116.828475][ T6357] EXT4-fs: Ignoring removed nobh option
[  116.854910][ T6241] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  116.869617][ T6357] fscrypt (loop1, inode 2): Error -61 getting encryption context
[  116.878818][ T6357] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61
[  116.897541][ T6357] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #13: comm syz.1.129: inode has both inline data and extents flags
[  116.931829][ T6241] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  116.953822][ T6241] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  116.975598][ T6359] loop0: detected capacity change from 0 to 4096
[  116.987619][ T6357] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.129: couldn't read orphan inode 13 (err -117)
[  117.032471][ T6359] EXT4-fs: inline encryption not supported
[  117.069235][ T6357] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.088071][ T6359] EXT4-fs: inline encryption not supported
[  117.098099][ T6359] ext4: Unknown parameter 'smackfstransmute'
[  117.217996][ T6357] fscrypt (loop1, inode 2): Error -61 getting encryption context
[  117.260953][ T6241] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.335988][ T6241] 8021q: adding VLAN 0 to HW filter on device team0
[  117.374559][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.420465][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.427648][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.468831][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.475995][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.063949][ T6241] 8021q: adding VLAN 0 to HW filter on device batadv0
[  118.137087][ T6385] loop1: detected capacity change from 0 to 512
[  118.222274][ T6385] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.332101][ T6385] ext4 filesystem being mounted at /37/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.469189][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.602488][ T6241] veth0_vlan: entered promiscuous mode
[  119.646784][ T6241] veth1_vlan: entered promiscuous mode
[  119.685372][ T6402] loop1: detected capacity change from 0 to 512
[  119.698559][ T6402] EXT4-fs: Ignoring removed bh option
[  119.703988][ T6402] EXT4-fs: Ignoring removed nomblk_io_submit option
[  119.786285][ T6241] veth0_macvtap: entered promiscuous mode
[  119.797504][ T6402] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  119.829751][ T6241] veth1_macvtap: entered promiscuous mode
[  119.860355][ T6241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  119.869423][ T6402] EXT4-fs (loop1): 1 truncate cleaned up
[  119.878364][ T6402] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.883500][ T6241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.957465][ T6241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  119.968492][ T6241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.980338][ T6241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  119.990977][ T6241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.002689][ T6241] batman_adv: batadv0: Interface activated: batadv_slave_0
[  120.013418][ T6241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.025216][ T6241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.080826][ T6241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.173226][ T6241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.183698][ T6241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.845503][ T6241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.176197][ T6241] batman_adv: batadv0: Interface activated: batadv_slave_1
[  121.386677][ T6241] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.428378][ T6241] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.437124][ T6241] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.490602][ T6241] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.658349][ T6420] loop0: detected capacity change from 0 to 512
[  121.659138][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.733635][ T6420] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.762385][  T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.781950][ T6423] overlayfs: failed to get inode (-116)
[  121.807808][ T6420] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  121.808057][  T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.826393][ T6423] overlayfs: failed to get inode (-116)
[  121.925135][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.941010][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.197928][ T6433] loop3: detected capacity change from 0 to 512
[  122.212146][ T6428] loop1: detected capacity change from 0 to 8192
[  122.816220][ T6433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.918896][ T6433] ext4 filesystem being mounted at /34/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.942490][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.341212][ T6444] input: syz0 as /devices/virtual/input/input5
[  124.327570][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.953406][ T6467] loop0: detected capacity change from 0 to 4096
[  124.995610][ T6467] EXT4-fs: inline encryption not supported
[  125.045655][ T6467] EXT4-fs: inline encryption not supported
[  125.081310][ T6467] ext4: Unknown parameter 'smackfstransmute'
[  129.042991][ T6485] loop4: detected capacity change from 0 to 256
[  129.256135][ T6485] FAT-fs (loop4): Directory bread(block 64) failed
[  129.287784][ T6485] FAT-fs (loop4): Directory bread(block 65) failed
[  129.304619][ T6485] FAT-fs (loop4): Directory bread(block 66) failed
[  129.342477][ T6485] FAT-fs (loop4): Directory bread(block 67) failed
[  129.352690][ T6485] FAT-fs (loop4): Directory bread(block 68) failed
[  129.367547][ T6485] FAT-fs (loop4): Directory bread(block 69) failed
[  129.381968][ T6490] loop3: detected capacity change from 0 to 8192
[  129.390929][ T6493] loop0: detected capacity change from 0 to 512
[  129.397835][ T6485] FAT-fs (loop4): Directory bread(block 70) failed
[  129.404398][ T6485] FAT-fs (loop4): Directory bread(block 71) failed
[  129.415945][ T6485] FAT-fs (loop4): Directory bread(block 72) failed
[  129.422809][ T6485] FAT-fs (loop4): Directory bread(block 73) failed
[  129.487010][ T6493] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.150: inode has both inline data and extents flags
[  129.570128][ T6493] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.150: couldn't read orphan inode 15 (err -117)
[  129.595698][ T6493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.637494][   T27] audit: type=1800 audit(1775063854.143:4): pid=6493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.150" name="file1" dev="loop0" ino=18 res=0 errno=0
[  129.837509][   T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  129.915093][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.058957][   T23] usb 5-1: unable to get BOS descriptor or descriptor too short
[  130.066426][ T6515] loop0: detected capacity change from 0 to 256
[  130.076849][   T23] usb 5-1: config 1 has an invalid descriptor of length 170, skipping remainder of the config
[  130.092018][ T6515] exfat: Deprecated parameter 'namecase'
[  130.097541][   T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  130.104928][ T6515] exfat: Unknown parameter 'diccard'
[  130.114189][   T23] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  130.127527][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.155881][   T23] usb 5-1: Product: syz
[  130.160583][   T23] usb 5-1: Manufacturer: syz
[  130.165201][   T23] usb 5-1: SerialNumber: syz
[  130.196574][   T23] usb 5-1: selecting invalid altsetting 1
[  130.210934][   T23] usb 5-1: unit 6 not found!
[  130.276824][   T23] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  130.357870][ T5802] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  130.363080][ T5756] udevd[5756]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  130.476357][    T9] usb 5-1: USB disconnect, device number 2
[  130.547512][ T5802] usb 4-1: Using ep0 maxpacket: 8
[  130.554437][ T5802] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  130.565670][ T5802] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  130.576167][ T5802] usb 4-1: config 0 has no interface number 0
[  130.583198][ T5802] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e
[  130.594194][ T5802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.604809][ T5802] usb 4-1: config 0 descriptor??
[  130.614834][ T5802] usb 4-1: bad CDC descriptors
[  130.631324][ T5802] usb 4-1: bad CDC descriptors
[  130.636610][ T5802] cdc_acm 4-1:0.1: Zero length descriptor references
[  130.643938][ T5802] cdc_acm: probe of 4-1:0.1 failed with error -22
[  130.826092][   T79] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.837062][ T5802] usb 4-1: USB disconnect, device number 3
[  130.977071][   T79] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.110940][   T79] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.278342][   T79] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.540438][ T6543] loop3: detected capacity change from 0 to 128
[  131.607938][ T6543] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  131.684068][ T5770] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  131.694518][ T5770] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  131.706489][ T5770] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  131.720393][ T5770] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  131.730528][ T5770] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  131.738195][ T5770] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  131.756892][ T6543] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  131.809909][ T5767] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  131.816594][ T5774] Bluetooth: hci4: command 0x1003 tx timeout
[  131.910791][ T5772] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  132.215791][ T6553] loop3: detected capacity change from 0 to 8192
[  133.018992][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  133.025760][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  133.747000][ T6546] chnl_net:caif_netlink_parms(): no params data found
[  133.808161][ T5767] Bluetooth: hci1: command tx timeout
[  133.945459][ T6584] tipc: Started in network mode
[  133.950900][ T6584] tipc: Node identity 3e86ea48ac7f, cluster identity 4711
[  133.978490][ T6584] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.172735][ T6546] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.182055][ T6546] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.190605][ T6546] bridge_slave_0: entered allmulticast mode
[  134.200250][ T6546] bridge_slave_0: entered promiscuous mode
[  134.321789][ T6546] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.321890][ T6546] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.322067][ T6546] bridge_slave_1: entered allmulticast mode
[  134.323391][ T6546] bridge_slave_1: entered promiscuous mode
[  134.524023][ T6595] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  134.540211][ T6546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  134.588890][ T6546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  134.674549][ T6596] tipc: Disabling bearer <eth:syzkaller0>
[  134.867732][   T79] hsr_slave_0: left promiscuous mode
[  134.880441][   T79] hsr_slave_1: left promiscuous mode
[  134.907627][   T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  134.915093][   T79] batman_adv: batadv0: Removing interface: batadv_slave_0
[  134.966894][   T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  134.985180][   T79] batman_adv: batadv0: Removing interface: batadv_slave_1
[  135.006155][   T79] bridge_slave_1: left allmulticast mode
[  135.027537][   T79] bridge_slave_1: left promiscuous mode
[  135.034175][   T79] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.089834][   T79] bridge_slave_0: left allmulticast mode
[  135.095970][   T79] bridge_slave_0: left promiscuous mode
[  135.137676][   T79] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.259653][   T79] veth1_macvtap: left promiscuous mode
[  135.265257][   T79] veth0_macvtap: left promiscuous mode
[  135.295675][   T79] veth1_vlan: left promiscuous mode
[  135.302650][   T79] veth0_vlan: left promiscuous mode
[  135.306548][ T6612] loop1: detected capacity change from 0 to 1024
[  135.363238][ T6612] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.595231][   T27] audit: type=1800 audit(1775063860.093:5): pid=6620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.170" name="file1" dev="overlay" ino=13 res=0 errno=0
[  135.888503][ T5767] Bluetooth: hci1: command tx timeout
[  136.005584][ T6622] loop3: detected capacity change from 0 to 8192
[  136.405756][   T79] team0 (unregistering): Port device team_slave_1 removed
[  136.483084][   T79] team0 (unregistering): Port device team_slave_0 removed
[  136.540965][   T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  136.717725][   T27] audit: type=1326 audit(1775063861.143:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6625 comm="syz.3.175" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea6a99c819 code=0x0
[  136.739225][    C1] vkms_vblank_simulate: vblank timer overrun
[  137.296870][   T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  137.376501][ T6631] Invalid ELF header magic: != ELF
[  137.708164][   T79] bond0 (unregistering): Released all slaves
[  137.969824][ T5767] Bluetooth: hci1: command tx timeout
[  137.974579][ T6546] team0: Port device team_slave_0 added
[  138.001669][ T6546] team0: Port device team_slave_1 added
[  138.107613][ T6546] batman_adv: batadv0: Adding interface: batadv_slave_0
[  138.137530][ T6546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.172860][ T6194] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.213433][ T6637] loop4: detected capacity change from 0 to 512
[  138.237530][ T6546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  138.270145][ T6546] batman_adv: batadv0: Adding interface: batadv_slave_1
[  138.288587][ T6546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.337261][ T6637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.372136][ T6637] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  138.430382][ T6546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  139.328864][ T6546] hsr_slave_0: entered promiscuous mode
[  139.458020][ T6546] hsr_slave_1: entered promiscuous mode
[  139.473858][ T6241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.489038][ T6546] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  139.517628][ T6546] Cannot create hsr debugfs directory
[  140.049478][ T5774] Bluetooth: hci1: command tx timeout
[  140.058841][   T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  140.230819][   T79] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.319570][   T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.357448][   T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  140.369204][   T23] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  140.386203][   T79] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.407615][   T23] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  140.417098][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.460501][   T23] usb 5-1: config 0 descriptor??
[  140.468819][ T5767] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  140.481847][ T5767] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  140.493103][ T5767] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  140.515021][ T5767] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  140.525102][ T5767] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  140.534608][ T5767] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  140.573001][   T79] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.596444][ T6546] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  140.607859][ T6546] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  140.720827][   T79] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.763529][ T6546] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  140.790617][ T6546] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  140.933319][   T23] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[  141.023568][   T23] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  141.210554][   T79] tipc: Left network mode
[  141.466156][ T6546] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.553087][ T6546] 8021q: adding VLAN 0 to HW filter on device team0
[  141.562683][ T6660] chnl_net:caif_netlink_parms(): no params data found
[  141.625808][ T2961] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.633034][ T2961] bridge0: port 1(bridge_slave_0) entered forwarding state
[  141.707217][ T2961] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.714434][ T2961] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.921963][ T6660] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.929926][ T6660] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.939588][ T6660] bridge_slave_0: entered allmulticast mode
[  141.946905][ T6660] bridge_slave_0: entered promiscuous mode
[  141.961851][ T6660] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.983094][ T6660] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.993087][ T6660] bridge_slave_1: entered allmulticast mode
[  142.000341][ T6660] bridge_slave_1: entered promiscuous mode
[  142.168822][ T6660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  142.193081][ T6660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  142.271210][ T6660] team0: Port device team_slave_0 added
[  142.303781][ T6660] team0: Port device team_slave_1 added
[  142.474758][ T6660] batman_adv: batadv0: Adding interface: batadv_slave_0
[  142.481912][ T6660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.517700][ T6660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  142.558153][ T6660] batman_adv: batadv0: Adding interface: batadv_slave_1
[  142.580233][ T6660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.627963][ T5823] usb 5-1: reset high-speed USB device number 3 using dummy_hcd
[  142.634073][ T5767] Bluetooth: hci0: command tx timeout
[  142.651593][ T6660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  142.790081][ T5823] usb 5-1: device descriptor read/64, error -32
[  143.228284][ T5823] usb 5-1: reset high-speed USB device number 3 using dummy_hcd
[  143.315928][ T6660] hsr_slave_0: entered promiscuous mode
[  143.322793][ T6660] hsr_slave_1: entered promiscuous mode
[  143.329388][ T6660] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  143.336969][ T6660] Cannot create hsr debugfs directory
[  143.374615][   T79] hsr_slave_0: left promiscuous mode
[  143.386616][   T79] hsr_slave_1: left promiscuous mode
[  143.394262][   T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.418484][   T79] batman_adv: batadv0: Removing interface: batadv_slave_0
[  143.434310][   T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  143.443075][   T79] batman_adv: batadv0: Removing interface: batadv_slave_1
[  143.452784][   T79] bridge_slave_1: left allmulticast mode
[  143.460435][   T79] bridge_slave_1: left promiscuous mode
[  143.466283][   T79] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.490176][   T79] bridge_slave_0: left allmulticast mode
[  143.496125][   T79] bridge_slave_0: left promiscuous mode
[  143.502041][   T79] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.530773][   T79] veth1_macvtap: left promiscuous mode
[  143.536325][   T79] veth0_macvtap: left promiscuous mode
[  143.542053][   T79] veth1_vlan: left promiscuous mode
[  143.549411][   T79] veth0_vlan: left promiscuous mode
[  144.268115][   T79] team0 (unregistering): Port device team_slave_1 removed
[  144.897545][ T5767] Bluetooth: hci0: command tx timeout
[  144.945521][   T28] usb 5-1: USB disconnect, device number 3
[  144.952370][ T6715] hub 9-0:1.0: USB hub found
[  144.957992][ T6715] hub 9-0:1.0: 1 port detected
[  145.006382][   T79] team0 (unregistering): Port device team_slave_0 removed
[  145.086409][   T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  145.134013][   T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  145.340324][ T6725] loop4: detected capacity change from 0 to 512
[  145.596933][ T6725] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.613050][ T6725] ext4 filesystem being mounted at /11/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  146.925435][   T79] bond0 (unregistering): Released all slaves
[  146.969741][ T5767] Bluetooth: hci0: command tx timeout
[  147.288390][ T6241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.309019][ T6546] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.664749][ T6753] loop4: detected capacity change from 0 to 256
[  147.810751][ T6753] FAT-fs (loop4): IO charset ko not found
[  147.822238][ T6660] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  147.838877][ T6660] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  147.914786][ T6660] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  147.964395][ T6660] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  148.212890][ T6660] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.282031][ T6660] 8021q: adding VLAN 0 to HW filter on device team0
[  148.324712][ T6546] veth0_vlan: entered promiscuous mode
[  148.351833][ T3006] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.359056][ T3006] bridge0: port 1(bridge_slave_0) entered forwarding state
[  148.507234][ T6546] veth1_vlan: entered promiscuous mode
[  148.576614][   T79] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.583857][   T79] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.675719][   T27] audit: type=1326 audit(1775063873.183:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6770 comm="syz.4.201" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd40c59c819 code=0x0
[  149.008344][ T5767] Bluetooth: hci0: command tx timeout
[  149.324536][ T6660] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  149.366428][ T6660] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  149.834779][ T6660] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.083689][ T6789] loop4: detected capacity change from 0 to 512
[  151.155427][ T6546] veth0_macvtap: entered promiscuous mode
[  151.246426][ T6546] veth1_macvtap: entered promiscuous mode
[  151.265317][ T6789] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.283879][ T6546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.309821][ T6546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.344804][ T6546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.344900][ T6789] ext4 filesystem being mounted at /16/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  151.378195][ T6546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.389754][ T6546] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.400672][ T6546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.412415][ T6546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.424578][ T6546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.435489][ T6546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.447665][ T6546] batman_adv: batadv0: Interface activated: batadv_slave_1
[  151.562265][ T6546] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.580221][ T6546] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.595146][ T6546] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.608426][ T6546] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.100169][ T6660] veth0_vlan: entered promiscuous mode
[  152.168504][ T6660] veth1_vlan: entered promiscuous mode
[  152.187671][ T2986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.231724][ T2986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.243412][ T6241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.374836][ T6660] veth0_macvtap: entered promiscuous mode
[  152.434038][ T6660] veth1_macvtap: entered promiscuous mode
[  152.583807][ T2986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.639742][ T2986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.661593][ T6660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.716070][ T6660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.751511][ T6660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.767778][ T6660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.778140][ T6660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.788852][ T6660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.817632][ T6660] batman_adv: batadv0: Interface activated: batadv_slave_0
[  152.852022][ T6660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.885442][ T6660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.917549][ T6660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.935796][ T6660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.949655][ T6660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.964884][ T6660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.983102][ T6660] batman_adv: batadv0: Interface activated: batadv_slave_1
[  153.031165][ T6660] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.052726][ T6660] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.065717][ T6660] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.077087][ T6660] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  153.145431][ T6822] loop4: detected capacity change from 0 to 4096
[  153.174430][ T6822] EXT4-fs: inline encryption not supported
[  153.227530][ T6822] EXT4-fs (loop4): Test dummy encryption mode enabled
[  153.262524][ T6822] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  153.287680][ T6822] System zones: 0-5
[  153.354646][ T6822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.986890][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.204624][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.279584][ T6241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.415005][   T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.539214][   T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.967897][ T5823] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  155.073562][ T6848] loop5: detected capacity change from 0 to 512
[  155.332749][ T6848] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.387147][ T6848] ext4 filesystem being mounted at /2/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.388804][ T5823] usb 5-1: config 4 has an invalid interface number: 121 but max is 0
[  155.410556][ T5823] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  155.437516][ T5823] usb 5-1: config 4 has no interface number 0
[  155.443684][ T5823] usb 5-1: config 4 interface 121 has no altsetting 0
[  155.484591][ T5823] usb 5-1: New USB device found, idVendor=6b86, idProduct=c211, bcdDevice=25.ca
[  155.499797][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.625874][ T6861] loop6: detected capacity change from 0 to 512
[  155.683583][ T6861] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  155.688481][ T5823] usb 5-1: Product: syz
[  155.699780][ T5823] usb 5-1: Manufacturer: syz
[  155.704410][ T5823] usb 5-1: SerialNumber: syz
[  155.743528][ T6861] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  156.395901][ T6861] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.443108][ T5823] usb 5-1: USB disconnect, device number 4
[  156.492482][ T6861] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.645047][ T6660] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.398327][ T6886] loop4: detected capacity change from 0 to 512
[  157.551820][ T6886] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.634411][ T6886] ext4 filesystem being mounted at /21/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  158.508283][ T6546] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.628760][ T6241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.940891][ T6882] loop6: detected capacity change from 0 to 40427
[  159.007669][ T6882] F2FS-fs (loop6): invalid crc value
[  159.039683][ T6882] F2FS-fs (loop6): Found nat_bits in checkpoint
[  159.198662][ T1190] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  159.206882][ T6882] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  159.436536][ T6902] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.444149][ T1190] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  159.445151][ T6902] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.464053][ T1190] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  159.491847][ T6660] syz-executor: attempt to access beyond end of device
[  159.491847][ T6660] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  159.523775][ T1190] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  159.552294][ T6660] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  159.557502][ T1190] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  159.577454][ T1190] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.591400][ T1190] usb 6-1: config 0 descriptor??
[  159.913365][ T6906] loop4: detected capacity change from 0 to 40427
[  159.986066][ T6906] F2FS-fs (loop4): invalid crc value
[  160.021099][ T6906] F2FS-fs (loop4): Found nat_bits in checkpoint
[  160.057698][ T1190] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x4
[  160.078201][ T1190] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[  160.123173][ T1190] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  160.187350][ T6906] F2FS-fs (loop4): Start checkpoint disabled!
[  160.211400][ T6906] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  160.514018][ T6926] loop6: detected capacity change from 0 to 512
[  160.563170][ T1111] kworker/u4:7: attempt to access beyond end of device
[  160.563170][ T1111] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  160.578799][ T1111] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  160.586304][ T1111] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  160.600688][ T1111] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  160.607323][ T6926] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.631746][ T6926] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  160.935017][ T6902] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  161.003139][ T6902] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  161.724162][ T6660] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.749375][ T6933] loop4: detected capacity change from 0 to 256
[  162.035054][ T6939] hub 9-0:1.0: USB hub found
[  162.040615][ T6939] hub 9-0:1.0: 1 port detected
[  162.476109][ T6937] loop4: detected capacity change from 0 to 512
[  162.619801][ T6937] EXT4-fs: Ignoring removed bh option
[  162.648072][ T6937] EXT4-fs: Ignoring removed nomblk_io_submit option
[  162.659446][ T6937] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  162.671076][ T6937] EXT4-fs (loop4): 1 truncate cleaned up
[  162.678187][ T6937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  162.881523][    T8] usb 6-1: USB disconnect, device number 2
[  162.933105][ T6945] loop5: detected capacity change from 0 to 512
[  163.540415][ T6945] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.682800][ T6945] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  164.063298][ T6902] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.073092][ T6902] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.082571][ T6902] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.091789][ T6902] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.232340][ T6241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.447799][ T6546] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.478431][ T6955] loop4: detected capacity change from 0 to 512
[  164.524122][ T6955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.536852][ T6955] ext4 filesystem being mounted at /25/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  166.336574][ T6241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.402117][ T6972] loop5: detected capacity change from 0 to 512
[  166.488811][ T6972] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.522269][ T6972] ext4 filesystem being mounted at /5/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  166.867340][ T6988] loop6: detected capacity change from 0 to 256
[  168.252643][ T6546] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.502182][ T7000] loop5: detected capacity change from 0 to 256
[  168.866420][ T7010] loop4: detected capacity change from 0 to 128
[  169.215620][ T7021] loop4: detected capacity change from 0 to 512
[  169.289152][ T7021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.369632][ T7021] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  169.863055][ T6241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.998971][ T7043] loop5: detected capacity change from 0 to 512
[  170.088297][ T7043] EXT4-fs: Ignoring removed mblk_io_submit option
[  170.254044][ T7043] EXT4-fs: inline encryption not supported
[  170.487699][ T7043] EXT4-fs: Ignoring removed mblk_io_submit option
[  170.529096][ T7043] EXT4-fs (loop5): Test dummy encryption mode enabled
[  170.535923][ T7043] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  170.611309][ T7043] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  170.705849][ T7043] EXT4-fs (loop5): 1 truncate cleaned up
[  170.756208][ T7043] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.824107][ T7054] loop4: detected capacity change from 0 to 512
[  170.955831][ T7054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.968562][ T7054] ext4 filesystem being mounted at /30/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.867958][ T6546] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.891551][ T6241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.042385][ T7078] loop5: detected capacity change from 0 to 512
[  172.108520][ T7078] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.248: invalid indirect mapped block 4294967295 (level 1)
[  172.223200][ T7078] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.248: invalid indirect mapped block 4294967295 (level 1)
[  172.265997][ T7078] EXT4-fs (loop5): 2 truncates cleaned up
[  172.276619][ T7078] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.385726][ T7078] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm syz.5.248: bg 0: block 5: invalid block bitmap
[  172.620129][ T6546] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.014507][ T7096] loop5: detected capacity change from 0 to 512
[  173.108594][ T7096] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.191553][ T7096] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  173.316662][ T7080] loop4: detected capacity change from 0 to 40427
[  173.440543][ T7080] F2FS-fs (loop4): invalid crc value
[  173.494610][ T7080] F2FS-fs (loop4): Found nat_bits in checkpoint
[  173.608892][ T6546] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.785505][ T7108] loop5: detected capacity change from 0 to 1024
[  173.811462][ T7108] EXT4-fs: Ignoring removed i_version option
[  173.848659][ T7080] F2FS-fs (loop4): Start checkpoint disabled!
[  173.857229][ T7108] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  173.896149][ T7080] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  175.018729][ T3006] kworker/u4:12: attempt to access beyond end of device
[  175.018729][ T3006] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  175.080744][ T3006] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  175.123479][ T3006] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  175.161766][ T3006] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  175.251844][ T6546] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.757711][    T8] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  175.940545][ T7133] loop4: detected capacity change from 0 to 512
[  175.987482][    T8] usb 6-1: Using ep0 maxpacket: 32
[  176.007029][    T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  176.038861][ T7137] tmpfs: Bad value for 'huge'
[  176.047803][    T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  176.061152][ T7133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.095716][    T8] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  176.100790][ T7133] ext4 filesystem being mounted at /32/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  176.120602][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.158213][    T8] usb 6-1: config 0 descriptor??
[  176.190888][    T8] hub 6-1:0.0: USB hub found
[  176.406550][    T8] hub 6-1:0.0: 1 port detected
[  177.060684][ T6241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.226995][ T5155] hub 6-1:0.0: activate --> -90
[  177.576627][ T7160] loop4: detected capacity change from 0 to 512
[  177.644800][ T5823] usb 6-1: USB disconnect, device number 3
[  177.780977][ T7160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  177.794435][ T7160] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  179.381057][ T6241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.586347][ T7186] loop4: detected capacity change from 0 to 512
[  179.608849][ T7186] EXT4-fs: Ignoring removed orlov option
[  179.621265][ T7186] EXT4-fs: Ignoring removed orlov option
[  179.647657][ T7186] EXT4-fs: Ignoring removed mblk_io_submit option
[  179.673058][ T7186] EXT4-fs error (device loop4): ext4_iget_extra_inode:4732: inode #15: comm syz.4.262: corrupted in-inode xattr: e_value size too large
[  179.705079][ T7186] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.262: couldn't read orphan inode 15 (err -117)
[  179.730932][ T7191] tmpfs: Bad value for 'huge'
[  179.795371][ T7186] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  184.328130][ T7140] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 392: padding at end of block bitmap is not set
[  184.514423][ T6241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.826457][ T7204] loop4: detected capacity change from 0 to 512
[  184.843904][ T7207] loop6: detected capacity change from 0 to 512
[  184.885697][ T7207] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.961802][ T7204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  185.020354][ T7207] ext4 filesystem being mounted at /12/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  185.047361][ T7204] ext4 filesystem being mounted at /35/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  185.230436][ T7216] 9pnet_fd: Insufficient options for proto=fd
[  185.733648][ T7222] loop5: detected capacity change from 0 to 256
[  185.798514][ T7222] exfat: Deprecated parameter 'namecase'
[  185.804309][ T7222] exfat: Deprecated parameter 'namecase'
[  185.907737][ T7222] exFAT-fs (loop5): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d)
[  185.959222][ T6660] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.457828][ T5774] Bluetooth: hci2: command 0x0406 tx timeout
[  186.845066][ T6241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.040208][ T7246] tmpfs: Bad value for 'huge'
[  189.000073][ T7257] xt_hashlimit: size too large, truncated to 1048576
[  189.605323][ T7269] loop5: detected capacity change from 0 to 512
[  189.691890][ T7269] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.778709][ T7269] ext4 filesystem being mounted at /19/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  190.725891][ T6546] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.965314][ T7262] loop6: detected capacity change from 0 to 40427
[  191.155740][ T7262] F2FS-fs (loop6): invalid crc value
[  191.212890][ T7262] F2FS-fs (loop6): Found nat_bits in checkpoint
[  192.118928][ T7262] F2FS-fs (loop6): Start checkpoint disabled!
[  192.216251][ T7262] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  192.388705][ T7297] hub 9-0:1.0: USB hub found
[  192.394615][ T7297] hub 9-0:1.0: 1 port detected
[  193.557281][ T7310] tmpfs: Bad value for 'huge'
[  193.583839][ T7311] loop6: detected capacity change from 0 to 512
[  193.657170][ T7311] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.747622][ T7311] ext4 filesystem being mounted at /17/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  194.454081][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  194.463888][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  194.902537][ T7326] loop5: detected capacity change from 0 to 512
[  195.038557][ T7326] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.118169][ T7326] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  195.239296][ T6546] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.417105][ T7339] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  195.950925][ T7350] hub 9-0:1.0: USB hub found
[  195.956959][ T7350] hub 9-0:1.0: 1 port detected
[  196.544257][ T7352] netlink: 40 bytes leftover after parsing attributes in process `syz.3.292'.
[  196.723954][ T7357] tmpfs: Bad value for 'huge'
[  196.816469][ T7361] loop4: detected capacity change from 0 to 512
[  196.823916][ T7361] EXT4-fs: Ignoring removed nomblk_io_submit option
[  196.891325][ T7361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.903964][ T7361] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  196.949678][ T7361] overlayfs: missing 'lowerdir'
[  198.203763][ T6660] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.224057][ T7373] loop5: detected capacity change from 0 to 512
[  198.356176][ T7373] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.432612][ T7373] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  199.171115][ T6241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.323294][ T7397] loop4: detected capacity change from 0 to 512
[  199.334131][ T7397] EXT4-fs: Ignoring removed mblk_io_submit option
[  199.354157][ T7397] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  199.371829][ T7397] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.299: invalid indirect mapped block 33554432 (level 0)
[  199.406688][ T7397] EXT4-fs (loop4): Remounting filesystem read-only
[  199.431755][ T7397] EXT4-fs (loop4): 1 truncate cleaned up
[  199.459525][ T7397] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.638976][ T6241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.547743][ T6546] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.470267][ T7428] hub 9-0:1.0: USB hub found
[  201.476509][ T7428] hub 9-0:1.0: 1 port detected
[  202.273637][ T7434] loop5: detected capacity change from 0 to 512
[  202.334273][ T7434] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.413011][ T7434] ext4 filesystem being mounted at /34/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  203.440376][ T6546] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.867580][   T23] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  204.013865][ T7461] loop6: detected capacity change from 0 to 512
[  204.064502][ T7461] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002]
[  204.073068][ T7461] System zones: 1-12
[  204.175306][ T7461] EXT4-fs error (device loop6): ext4_iget_extra_inode:4732: inode #15: comm syz.6.308: corrupted in-inode xattr: e_value size too large
[  204.193155][ T7461] EXT4-fs error (device loop6): ext4_orphan_get:1403: comm syz.6.308: couldn't read orphan inode 15 (err -117)
[  204.212551][ T7461] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  206.109305][   T23] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  206.117657][   T23] usb 6-1: config 0 has no interface number 0
[  206.123976][   T23] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  206.155900][   T23] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  206.177464][   T23] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  206.197685][ T6660] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.367480][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.388660][   T23] usb 6-1: config 0 descriptor??
[  206.513300][ T7482] loop6: detected capacity change from 0 to 256
[  206.607187][ T7482] FAT-fs (loop6): Directory bread(block 64) failed
[  206.639690][ T7482] FAT-fs (loop6): Directory bread(block 65) failed
[  206.649959][   T23] usbhid 6-1:0.1: can't add hid device: -71
[  206.655969][   T23] usbhid: probe of 6-1:0.1 failed with error -71
[  206.677880][ T7482] FAT-fs (loop6): Directory bread(block 66) failed
[  206.684447][ T7482] FAT-fs (loop6): Directory bread(block 67) failed
[  206.730507][   T23] usb 6-1: USB disconnect, device number 4
[  206.739745][ T7482] FAT-fs (loop6): Directory bread(block 68) failed
[  206.746311][ T7482] FAT-fs (loop6): Directory bread(block 69) failed
[  206.807819][ T7482] FAT-fs (loop6): Directory bread(block 70) failed
[  206.817717][ T7482] FAT-fs (loop6): Directory bread(block 71) failed
[  206.846023][ T7482] FAT-fs (loop6): Directory bread(block 72) failed
[  206.864999][ T7482] FAT-fs (loop6): Directory bread(block 73) failed
[  207.876370][ T7503] loop6: detected capacity change from 0 to 512
[  207.945925][ T7503] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.997711][ T7503] ext4 filesystem being mounted at /23/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  209.033063][ T6660] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.490770][ T7529] loop5: detected capacity change from 0 to 256
[  210.384563][ T7533] loop6: detected capacity change from 0 to 512
[  210.585481][ T7533] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  210.668690][ T7533] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  211.819937][ T6660] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.042422][ T7552] loop4: detected capacity change from 0 to 512
[  212.169582][ T7557] loop5: detected capacity change from 0 to 512
[  212.211591][ T7552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.242959][ T7552] ext4 filesystem being mounted at /48/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  212.608198][ T7557] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.782073][ T7557] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  213.819457][ T6241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.172548][ T7587] loop4: detected capacity change from 0 to 256
[  214.282013][ T7587] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011bf5, chksum : 0x4ea91ace, utbl_chksum : 0xe619d30d)
[  214.327328][ T7587] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  214.653745][ T7598] loop4: detected capacity change from 0 to 512
[  215.147186][ T7598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.328756][ T7598] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  216.255155][ T6241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.300753][ T6546] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.395027][ T7621] loop6: detected capacity change from 0 to 512
[  216.484085][ T7626] loop4: detected capacity change from 0 to 512
[  216.558730][ T7626] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  216.593270][ T7621] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  216.696718][ T7621] ext4 filesystem being mounted at /29/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  216.927162][ T6241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.379912][ T6660] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.555327][ T7642] hub 9-0:1.0: USB hub found
[  217.561329][ T7642] hub 9-0:1.0: 1 port detected
[  220.343165][ T7687] loop4: detected capacity change from 0 to 512
[  220.354325][ T7687] EXT4-fs: Ignoring removed bh option
[  220.373429][ T7687] EXT4-fs: Ignoring removed nomblk_io_submit option
[  220.382036][ T7688] loop6: detected capacity change from 0 to 512
[  220.396960][ T7687] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  220.456884][ T7687] EXT4-fs (loop4): 1 truncate cleaned up
[  220.474105][ T7687] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  220.560327][ T7688] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.736555][ T7688] ext4 filesystem being mounted at /31/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  221.075782][ T6241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.365165][ T6660] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.344988][ T7722] loop4: detected capacity change from 0 to 512
[  222.472595][ T7722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  222.555788][ T7722] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  222.719687][ T7729] hub 9-0:1.0: USB hub found
[  222.724677][ T7729] hub 9-0:1.0: 1 port detected
[  223.281619][ T6241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.565597][ T7749] loop5: detected capacity change from 0 to 512
[  223.588376][ T7749] EXT4-fs: Ignoring removed bh option
[  223.607497][ T7749] EXT4-fs: Ignoring removed nomblk_io_submit option
[  223.651065][ T7749] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  223.706152][ T7749] EXT4-fs (loop5): 1 truncate cleaned up
[  223.715981][ T7749] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.752195][ T6546] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.843507][ T7772] loop6: detected capacity change from 0 to 256
[  224.941135][ T7772] FAT-fs (loop6): Directory bread(block 64) failed
[  224.985026][ T7772] FAT-fs (loop6): Directory bread(block 65) failed
[  225.029210][ T7772] FAT-fs (loop6): Directory bread(block 66) failed
[  225.067049][ T7772] FAT-fs (loop6): Directory bread(block 67) failed
[  225.084246][ T7772] FAT-fs (loop6): Directory bread(block 68) failed
[  225.201353][ T7775] loop5: detected capacity change from 0 to 512
[  225.360386][ T7772] FAT-fs (loop6): Directory bread(block 69) failed
[  225.573896][ T7772] FAT-fs (loop6): Directory bread(block 70) failed
[  225.725519][ T7772] FAT-fs (loop6): Directory bread(block 71) failed
[  225.767564][ T7772] FAT-fs (loop6): Directory bread(block 72) failed
[  225.794745][ T7772] FAT-fs (loop6): Directory bread(block 73) failed
[  225.818384][ T7775] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  225.866936][ T7775] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  226.172577][ T7772] syz.6.366: attempt to access beyond end of device
[  226.172577][ T7772] loop6: rw=0, sector=1192, nr_sectors = 4 limit=256
[  228.022950][ T6546] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.688956][ T7807] loop4: detected capacity change from 0 to 512
[  228.709561][ T7807] EXT4-fs: Ignoring removed bh option
[  228.734113][ T7807] EXT4-fs: Ignoring removed nomblk_io_submit option
[  228.778767][ T7807] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  228.826065][ T7807] EXT4-fs (loop4): 1 truncate cleaned up
[  228.856696][ T7807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.720676][ T6241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.385115][ T7795] loop6: detected capacity change from 0 to 40427
[  230.461284][ T7795] F2FS-fs (loop6): invalid crc value
[  230.495811][ T7795] F2FS-fs (loop6): Found nat_bits in checkpoint
[  230.626054][ T7795] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  230.692737][ T7826] f2fs_ckpt-7:6: attempt to access beyond end of device
[  230.692737][ T7826] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  231.026221][ T7840] hub 9-0:1.0: USB hub found
[  231.032210][ T7840] hub 9-0:1.0: 1 port detected
[  231.392364][ T7826] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  231.611822][ T7846] loop5: detected capacity change from 0 to 512
[  231.675446][ T7851] loop4: detected capacity change from 0 to 512
[  231.708895][ T7846] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  231.746043][ T7846] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  231.801086][ T7851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  231.844447][ T7851] ext4 filesystem being mounted at /63/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  232.182170][ T7859] input: syz0 as /devices/virtual/input/input6
[  232.373130][ T5767] Bluetooth: hci3: command 0x0406 tx timeout
[  232.898641][ T6546] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.909466][ T6241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.260789][ T7869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.383'.
[  233.289870][ T7869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.383'.
[  233.325340][ T7869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.383'.
[  233.331114][ T7873] Bluetooth: hci4: Frame reassembly failed (-84)
[  233.473769][ T7878] loop5: detected capacity change from 0 to 256
[  235.593556][ T5774] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  235.600159][ T5767] Bluetooth: hci4: command 0x1003 tx timeout
[  236.470553][  T789] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  236.827565][  T789] usb 6-1: Using ep0 maxpacket: 16
[  236.856018][  T789] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  236.901821][  T789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  236.956080][  T789] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  236.975757][ T7904] loop6: detected capacity change from 0 to 512
[  236.984796][  T789] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  237.005486][  T789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.051767][  T789] usb 6-1: config 0 descriptor??
[  237.089748][ T7904] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.112647][ T7904] ext4 filesystem being mounted at /38/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  237.547249][ T7923] input: syz0 as /devices/virtual/input/input7
[  237.881189][  T789] hid-picolcd 0003:04D8:F002.0003: item fetching failed at offset 1/5
[  237.934999][  T789] hid-picolcd 0003:04D8:F002.0003: device report parse failed
[  237.999216][  T789] hid-picolcd: probe of 0003:04D8:F002.0003 failed with error -22
[  238.039312][ T6660] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.080644][  T789] usb 6-1: USB disconnect, device number 5
[  239.871938][ T7939] hub 9-0:1.0: USB hub found
[  239.887796][ T7939] hub 9-0:1.0: 1 port detected
[  240.524180][ T7939] tty tty30: ldisc open failed (-12), clearing slot 29
[  242.244190][ T7955] loop5: detected capacity change from 0 to 256
[  242.397680][ T1190] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  242.609555][ T7959] loop4: detected capacity change from 0 to 256
[  242.773450][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  242.797532][ T7959] FAT-fs (loop4): Filesystem has been set read-only
[  242.804271][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  242.837716][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  242.846289][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  243.774483][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  243.837973][ T1190] usb 7-1: unable to get BOS descriptor or descriptor too short
[  243.849136][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  243.881198][ T1190] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  243.944431][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  243.962781][ T1190] usb 7-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40
[  244.009012][ T1190] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.017067][ T1190] usb 7-1: Product: syz
[  244.036735][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  244.086079][ T1190] usb 7-1: Manufacturer: syz
[  244.097691][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  244.122413][ T1190] usb 7-1: SerialNumber: syz
[  244.128954][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  244.137726][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  244.146866][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  244.155810][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  244.164625][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  244.173332][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  244.182015][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  244.190843][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  244.199531][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  244.208204][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  244.216944][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  244.225594][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  244.234490][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  244.243203][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  244.252400][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  244.262623][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  244.467658][ T1190] usb 7-1: can't set config #1, error -71
[  244.487745][ T1190] usb 7-1: USB disconnect, device number 2
[  244.600615][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  244.984653][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  245.030974][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  245.079561][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  245.129877][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  245.182304][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  245.212600][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  245.257517][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  245.290576][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  245.306169][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  245.315350][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  245.324207][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  245.376796][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  245.403034][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  245.447472][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  245.471077][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  245.486503][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  245.506253][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  245.515952][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  245.526233][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  245.573973][ T7989] loop5: detected capacity change from 0 to 256
[  245.613134][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  245.866894][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  246.074297][ T1190] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  246.083346][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  246.094816][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  246.114200][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  246.144466][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  246.195349][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  246.241028][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  246.249722][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  246.268153][ T1190] usb 7-1: Using ep0 maxpacket: 16
[  246.270943][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  246.296151][ T1190] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  246.327490][ T1190] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  246.328119][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  246.374859][ T1190] usb 7-1: config 0 interface 0 has no altsetting 0
[  246.386364][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  246.407603][ T1190] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  246.424172][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  246.433394][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  246.458309][ T1190] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.550463][ T8004] loop5: detected capacity change from 0 to 1024
[  246.561215][ T8004] EXT4-fs: Ignoring removed bh option
[  246.566759][ T8004] EXT4-fs: Ignoring removed oldalloc option
[  246.572853][ T8004] EXT4-fs: Ignoring removed nomblk_io_submit option
[  246.647302][ T1190] usb 7-1: config 0 descriptor??
[  246.669085][ T8004] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  246.716829][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  246.751214][ T8004] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003]
[  246.759962][ T8004] System zones: 0-1, 3-36
[  246.802936][ T8004] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  246.899028][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  246.907891][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  247.455561][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  247.521105][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  247.599423][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  247.661166][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  247.680568][ T7977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.717000][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  247.757254][ T7977] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.784852][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  247.835571][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  247.846821][ T1190] hid (null): unknown global tag 0xc
[  247.888406][ T1190] hid (null): invalid report_size -246142364
[  247.898183][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  247.933335][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  247.987037][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  248.057816][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  248.086873][ T7959] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  248.127550][   T27] audit: type=1800 audit(1775063972.633:8): pid=7959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.401" name="file1" dev="loop4" ino=1048625 res=0 errno=0
[  248.184022][ T1190] usb 7-1: USB disconnect, device number 3
[  248.364669][ T8020] loop4: detected capacity change from 0 to 512
[  248.426484][ T8020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.480170][ T8020] ext4 filesystem being mounted at /70/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  248.565067][ T6546] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.771958][ T6241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.897827][ T8039] loop5: detected capacity change from 0 to 256
[  250.631768][ T8047] loop4: detected capacity change from 0 to 512
[  250.664299][ T8047] EXT4-fs: Ignoring removed nobh option
[  250.764836][ T8047] EXT4-fs (loop4): Test dummy encryption mode enabled
[  250.871200][ T8047] EXT4-fs error (device loop4): __ext4_iget:5071: inode #11: block 1: comm syz.4.417: invalid block
[  250.923770][ T8047] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.417: couldn't read orphan inode 11 (err -117)
[  250.994768][ T8047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  251.226993][ T6241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.570464][ T8087] loop4: detected capacity change from 0 to 512
[  252.625151][ T8087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  252.688067][ T8087] ext4 filesystem being mounted at /78/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  253.774723][ T6241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.913875][ T8110] loop6: detected capacity change from 0 to 512
[  254.012417][ T8110] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  254.037811][ T8110] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  254.882556][ T6660] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.384226][ T8144] loop6: detected capacity change from 0 to 512
[  255.472525][ T8144] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  255.507949][ T8144] ext4 filesystem being mounted at /48/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  255.896911][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  255.903842][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  256.468394][ T6660] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.893988][ T8175] Illegal XDP return value 4294967274 on prog  (id 23) dev N/A, expect packet loss!
[  257.447094][ T8199] loop4: detected capacity change from 0 to 512
[  257.556972][ T8199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  257.593525][ T8199] ext4 filesystem being mounted at /81/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  258.147468][ T5767] Bluetooth: hci1: command 0x0406 tx timeout
[  259.905934][ T6241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.444374][ T8253] loop6: detected capacity change from 0 to 512
[  260.551966][ T8253] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  260.629258][ T8253] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  260.666125][ T8262] 
[  260.669020][ T8262] =============================
[  260.673948][ T8262] WARNING: suspicious RCU usage
[  260.678996][ T8262] syzkaller #0 Not tainted
[  260.683570][ T8262] -----------------------------
[  260.688663][ T8262] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage!
[  260.697187][ T8262] 
[  260.697187][ T8262] other info that might help us debug this:
[  260.697187][ T8262] 
[  260.707785][ T8262] 
[  260.707785][ T8262] rcu_scheduler_active = 2, debug_locks = 1
[  260.715870][ T8262] 1 lock held by syz.4.470/8262:
[  260.720937][ T8262]  #0: ffffffff8d132280 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70
[  260.731606][ T8262] 
[  260.731606][ T8262] stack backtrace:
[  260.738335][ T8262] CPU: 0 PID: 8262 Comm: syz.4.470 Not tainted syzkaller #0
[  260.745741][ T8262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  260.755830][ T8262] Call Trace:
[  260.759224][ T8262]  <TASK>
[  260.762180][ T8262]  dump_stack_lvl+0x18c/0x250
[  260.766884][ T8262]  ? show_regs_print_info+0x20/0x20
[  260.772135][ T8262]  ? load_image+0x400/0x400
[  260.776669][ T8262]  lockdep_rcu_suspicious+0x1e1/0x300
[  260.782070][ T8262]  get_callchain_entry+0x2a9/0x3c0
[  260.787216][ T8262]  get_perf_callchain+0xc6/0x510
[  260.792180][ T8262]  ? put_callchain_entry+0xb0/0xb0
[  260.797309][ T8262]  ? preempt_schedule_common+0x82/0xc0
[  260.802942][ T8262]  ? preempt_schedule+0xc0/0xd0
[  260.807789][ T8262]  ? schedule_preempt_disabled+0x20/0x20
[  260.813422][ T8262]  __bpf_get_stack+0x2e4/0x540
[  260.818205][ T8262]  ? stack_map_get_build_id_offset+0x720/0x720
[  260.824390][ T8262]  ? __cant_sleep+0x220/0x220
[  260.829538][ T8262]  ? bpf_prog_b8a90dd1efcc4ad9+0x45/0x49
[  260.835177][ T8262]  bpf_get_stack_raw_tp+0x1a9/0x210
[  260.840380][ T8262]  bpf_prog_b8a90dd1efcc4ad9+0x45/0x49
[  260.845836][ T8262]  bpf_prog_run_pin_on_cpu+0xaa/0x150
[  260.851208][ T8262]  bpf_prog_test_run_syscall+0x317/0x4a0
[  260.856852][ T8262]  ? sock_gen_cookie+0x60/0x60
[  260.861707][ T8262]  ? sock_gen_cookie+0x60/0x60
[  260.866462][ T8262]  bpf_prog_test_run+0x321/0x390
[  260.871396][ T8262]  __sys_bpf+0x49d/0x890
[  260.875634][ T8262]  ? bpf_link_show_fdinfo+0x390/0x390
[  260.881188][ T8262]  ? lock_chain_count+0x20/0x20
[  260.886130][ T8262]  __x64_sys_bpf+0x7c/0x90
[  260.890625][ T8262]  do_syscall_64+0x55/0xa0
[  260.895051][ T8262]  ? clear_bhb_loop+0x40/0x90
[  260.899723][ T8262]  ? clear_bhb_loop+0x40/0x90
[  260.904392][ T8262]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  260.910283][ T8262] RIP: 0033:0x7fd40c59c819
[  260.914690][ T8262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  260.934376][ T8262] RSP: 002b:00007fd40d3c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  260.942793][ T8262] RAX: ffffffffffffffda RBX: 00007fd40c815fa0 RCX: 00007fd40c59c819
[  260.950756][ T8262] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a
[  260.958806][ T8262] RBP: 00007fd40c632c91 R08: 0000000000000000 R09: 0000000000000000
[  260.966766][ T8262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  260.974729][ T8262] R13: 00007fd40c816038 R14: 00007fd40c815fa0 R15: 00007ffca57a1cf8
[  260.982799][ T8262]  </TASK>
[  262.431742][ T6660] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.266632][ T5774] Bluetooth: hci0: command 0x0406 tx timeout