last executing test programs:

37.277271089s ago: executing program 2 (id=233):
setns(0xc9, 0x0)
socket$packet(0x11, 0x2, 0x300)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)="e9fd0d", 0x16}, 0x1, 0x0, 0x0, 0x40000dc}, 0x24004014)

37.09237802s ago: executing program 2 (id=237):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040000000a"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000e8ff0000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

36.047660907s ago: executing program 1 (id=247):
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x1, 0xfffffffc, 0x6, 0x4, 0x0, "5debca561a5fbf61048955f6f876b2ff"})
r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}})

36.022147954s ago: executing program 2 (id=249):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@bridge_getneigh={0x44, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2000a}, [@IFLA_VFINFO_LIST={0x24, 0x16, 0x0, 0x1, [{0x4}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x14e, 0x80000001, 0x88a8}}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x6}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xff}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)

35.959892061s ago: executing program 1 (id=250):
unshare(0x60000600)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r0)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000008480)={&(0x7f00000082c0)={0x40, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x40}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000084}, 0x40080)

35.797061716s ago: executing program 2 (id=253):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0)
umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x8)

35.676153239s ago: executing program 2 (id=255):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x714, 0x4)
syz_emit_ethernet(0x5a, &(0x7f0000000180)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @void, {@ipv4={0x800, @icmp={{0xc, 0x4, 0x0, 0x0, 0x4c, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}, @remote, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x0, [{@dev}, {@empty}, {@private=0xa010101, 0xd}]}]}}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0x5, 0x4, 0x0, 0x1e, 0x16, 0x66, 0x9, 0x4, 0x5e, 0x2, @local, @rand_addr=0x64010101}}}}}}, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/92, 0x5c}], 0x1)

35.556115492s ago: executing program 1 (id=257):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$nl_netfilter(r1, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000000500)=ANY=[], 0x23a8}, 0x1, 0x0, 0x0, 0x40}, 0x40004)

35.428539137s ago: executing program 1 (id=260):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xd, 0x20e, &(0x7f0000000dc0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80)
getdents64(r0, &(0x7f0000000180)=""/42, 0x2a)

35.193069372s ago: executing program 2 (id=264):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x1}, 0x1c)
getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000380))

35.181007915s ago: executing program 1 (id=265):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000680)={0x4, 0x0, [{0xc0010117, 0x0, 0x6f662cb9}, {0x400, 0x0, 0x1}, {0xa99, 0x0, 0x9}, {0x907, 0x0, 0x350b}]})

34.806897778s ago: executing program 32 (id=264):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x1}, 0x1c)
getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000380))

34.702204077s ago: executing program 1 (id=269):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000d32000/0x3000)=nil, 0x3000}, 0x5})

34.341271546s ago: executing program 33 (id=269):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000d32000/0x3000)=nil, 0x3000}, 0x5})

7.17205586s ago: executing program 3 (id=457):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x200000c, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, 0x0, 0x0)

6.959188418s ago: executing program 3 (id=461):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)=')o', 0x2)

6.69705935s ago: executing program 3 (id=464):
r0 = socket(0x28, 0x805, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040), 0x10)

6.547441522s ago: executing program 3 (id=466):
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
readv(r0, &(0x7f0000001480)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1)

6.283543684s ago: executing program 3 (id=468):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000100)='~', 0x1)
setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000000000)="c1", 0x1)
getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000040)=""/19, &(0x7f0000000080)=0x13)

6.096797195s ago: executing program 3 (id=470):
r0 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7002}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8880}, 0x410)

4.388177845s ago: executing program 5 (id=483):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000140)={0x34, r1, 0x3, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x5}]}, 0x34}}, 0x0)

4.267607298s ago: executing program 5 (id=484):
unshare(0x4000400)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f00000108c0)="$eJzs3L9vG3UUAPDnpGnTH5QIMbD1pAopkWqrTpsKtgCt+CFSRQUGJnBsx3Jr+6LYcUImBkbEwH+CQGJi5G9gYGZDDCA2JJDvzqUpFCHFjZvk85HO7+7rr9+9rxWd9O4iB3BqLSS//1qKy3E+ImYj4lJEtl+KiLnxpNU8vBQRVyJi5pGtVIw/HDgbERci4vIoeZ6zVLz15bXh1ZVf3vntux/Onbn41bc/Tm/VwLS9HBHdrXx/t5vHtJXH+8V4bdjOYvfmsIj5G90HxXGax93mRpZhtzaeV8vijVY+P93a6Y/iZqdWH8VWezMb3+rlJ+wPW+M82Qfu17az40ZzI4vtfprF1n5e195+fm3b7w/yPI0i3ydZ+hgMxjEfb+418/VsPchivTcoxvO8aaO5N4rDIhani3raaWR1bBzmm362vdvu7ewlw+Z2v532kpVK9ZVK9Va5up02moPmzXKt27h1M1lsdUbTyoNmrbvaStNWp1mpp92lZLFVr5er1WTxdnOjXesl1WrlRuV6eWWp2LuWvHn3g6TTSBZH8fV2b2fQ7vSTzXQ7yT+xlCxXbry6lFytJu+trSfr9+7cWVt//6PbH959be3tN4pJ/ygrWVy+vrxcrl4vL1eXTtH6PyuKnuD64VBK0y4A4Pj5r/7/4WVV/w9M2BP7/9EF6FD9//a9iKff/4f+fyKOVf/7zPT/83FS1g+Hov8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi1fpr7+q1sZyE/vliMP1cMvVAclyJiJiL+/BezcfZAztkiz9wT5s89VsP3pcgyjM5xrtguRMRqsf3x/NP+FgAAAODk+ubTK1/k3Xr+sjDtgjhK+U2bmUsfTyjffETMLfw8oWwzo5cXJ5Qs+/s+E3sTypbdwJqfULL8ltuZSWX7X2YPhPlHQikPM0daDgAAcCQOdgJH24UAAABwlD6fdgFMRynGjzLHz4Kz/7z/+4Hg+QNHAAAAwDFUmnYBAAAAwMQ9/hw/6//9/h8AAACcbPnv/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8xc7946gNRHEAfjYYyD8FRelzlXRwjBwhZcqIA+QSHCAFuUK6VJyBdDlChCPsCQu7FKwY26vV90nGeGT/eIOgmBlpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADo0u9qs/zx9cO3W3P29bV+RcTD1jy9AQAAAC7ZVZtl82beXr9K7W9S07t0XUREeXHkXtejmJxljlJOdXf/99P7q3s1/IxoEg6fMU3Hy4j4mI6/b7v+FgAAAOD52q7Wi3a03r7Mhy6IPrWTNuXrT5nyioio5n8ypZWHvPc5kibp9z2OLzni0sRWzDKFtVNu41xpV2n+7sdZu9nJqWhP5cXHjkVm6zsAANCj0dmp31EIAAAAffo8dAHkdt3yXBH/lzKPS4HTs+dfPCYNAAAAeIqKoQsAAAAAOteM/3va/6+2/x8AAAAMo93/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC7tqs1yu1ovbs3Z17fJ0xsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjH/ryjQAiEQRjsXd+ZzP0PKw2amppUgfDxNwYDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb373l/8TU+NMMvfaWHoeSdZOja1TY+/cOPrD+Po1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf785ICIRAEUTBn/O+k739YSdAziBABDY8qatEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAX/e6X/xNT40wyd9pYOh5J1q4aW1eNvQeNowfj7d8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc79+8bNxUHAPzZPl9pAXEEdEMQAokBFnq9lpZuiAEUMfAnIEXptYRe+dFmoFWFuIUNZe6CYEQICRS2/g+dWylL2DLcECRmkM92zvkhcUBkX5LPR3p+Xzsnv++zpShfP+cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKI3fncZJtunkcVwce7xzfyXrn+zrMw/XNxezlsVRnUkfDy9Xd6Juc4kAAABwoo2qO0lZ34cQttKNpayPO5P6Py0/k9X83z+bx2U9v7/uL/uy9s/ab79uv7g7UCcfJzvp9dXh4MLBvFpHPtNj4rl/+Hl+YaL82UsyuSHxB6MXxunkekbfPnr0XnsSnqkjWwDgvzhf9kVQ/j2U9f0mEwPg1GhVCu+y/k86zeYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUIfxKDxdxlEIYbE1jTNPdu6vHNY/XN9cLNuVBw/Ww9fTc2anSEMI11eHgwu1zma+3bl77+bycDi4XX/wSgihqdHfKaZ/86MZPhxCI9dHcERBXNzsecnneAQN/lICAOBESouW1fVb6cZSdixaCOGvH/bW/69X4jBj/b/98ZXH1bGq9X+/thnOv97arc97d+7ee3P11vKNwY3Bp29d7L/dv3T18uWrvcmzkp4nJgAAAPw/7aJV6/944eD6/7lKHGas/7/4rv9VdaxE/X+o6aJf05kAAACcbs+/+ucf0SHHo3Y7fLm8tna7n2939y/m2wZS/dfOFK1a/ycLTWcFAAAA1GE8ivas/1+rxGHG9f9nfnzp5+o5kxDC2WL9//zKZ8Nr9U1nrtXx78RNzxEAAIBmnS1adf0/nbz/H+++8hCHEN54LY+LrwGcqf5P3v/mp+pY1ff/L9U3xbkUd/PrMem7IbS6TWcEAADASfZU0bJi//d0Y+mTX8592Pb+PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDd/g4AAP//MY062g==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
fadvise64(r0, 0xfffffffffffffffe, 0x5, 0x2)

3.836110367s ago: executing program 4 (id=488):
r0 = semget$private(0x0, 0x6, 0x0)
semtimedop(r0, &(0x7f00000003c0)=[{0x0, 0x1}], 0x1, 0x0)
semop(r0, &(0x7f0000001240)=[{}], 0x1f4)
semop(r0, &(0x7f00000005c0)=[{0x0, 0xffff, 0x1000}], 0x1f4)

3.614352117s ago: executing program 4 (id=490):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000440)={0x0, 0x8, 0x3, "b92906"}, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000000)=[{0xd0, 0x0, 0x0, 0x0}], 0x1})

2.956180568s ago: executing program 5 (id=492):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000007"], 0x50)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

2.211777663s ago: executing program 0 (id=495):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x80, 0x0, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000094}, 0x44)

1.909358246s ago: executing program 4 (id=496):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000400)={0x5, 0x2})
ppoll(&(0x7f0000002700)=[{r0, 0x8018}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2)

1.850017612s ago: executing program 0 (id=497):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0xfefffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000001}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c890}, 0x0)

1.613298337s ago: executing program 5 (id=498):
mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x100000000000600d, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803f5, 0x1, 0x800})

1.471043616s ago: executing program 5 (id=499):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5e5c, &(0x7f0000005d80)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x2000, 0x8000})

1.416871121s ago: executing program 0 (id=500):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}]}, 0x24}}, 0x0)

1.149775185s ago: executing program 0 (id=501):
r0 = epoll_create1(0x80000)
syz_clone3(&(0x7f0000000540)={0x901400, &(0x7f0000000000)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58)
select(0x40, &(0x7f0000000040)={0x9, 0x8, 0xff, 0x1, 0x7, 0x1, 0x1, 0x2ec1}, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000003c0)={0x90000011})

798.953441ms ago: executing program 4 (id=502):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x1006, &(0x7f0000002080)=""/4102, 0x41000}, 0x94)

645.750253ms ago: executing program 4 (id=503):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, 0x0)

549.046899ms ago: executing program 0 (id=504):
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001200)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@private=0xa010101, 0x4e23, 0x0, 0x4e1d, 0x1003, 0x2, 0x20, 0x80, 0x11}, {0x80000000, 0x9, 0x8, 0x3, 0xf, 0x81, 0xff, 0x408}, {0x1, 0x4e, 0x3, 0x4}, 0x85, 0xfffffffc, 0x1, 0x0, 0x1, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d6, 0x3c}, 0x2, @in6=@mcast1, 0x0, 0x4, 0x0, 0x0, 0x4, 0x8, 0xc}}, 0xe8)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000001280), 0x6)

255.17466ms ago: executing program 0 (id=505):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0)

41.608209ms ago: executing program 5 (id=506):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, r0, 0x1, 0x70bd29, 0xffffffbe, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x20004056)

0s ago: executing program 4 (id=507):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)={0x4c, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac04}]}]}, 0x4c}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.80' (ED25519) to the list of known hosts.
[   66.577626][ T5767] cgroup: Unknown subsys name 'net'
[   66.711452][ T5767] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   68.097991][ T5767] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   70.088001][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.105873][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.113340][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   70.121770][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.129995][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   70.138027][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   70.143498][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.145461][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.159421][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.168013][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   70.176517][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.184850][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.186096][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.205560][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.213452][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.215985][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.221041][ T5796] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   70.235827][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   70.243190][ T5797] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   70.243259][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.254494][ T5794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   70.264236][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.265563][ T5794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.272588][ T5796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   70.650428][ T5782] chnl_net:caif_netlink_parms(): no params data found
[   70.799682][ T5779] chnl_net:caif_netlink_parms(): no params data found
[   70.849127][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.856640][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.864667][ T5782] bridge_slave_0: entered allmulticast mode
[   70.873218][ T5782] bridge_slave_0: entered promiscuous mode
[   70.881166][ T5778] chnl_net:caif_netlink_parms(): no params data found
[   70.892523][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.900700][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.908070][ T5782] bridge_slave_1: entered allmulticast mode
[   70.914732][ T5782] bridge_slave_1: entered promiscuous mode
[   70.966907][ T5787] chnl_net:caif_netlink_parms(): no params data found
[   71.010104][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.021622][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.111219][ T5782] team0: Port device team_slave_0 added
[   71.120668][ T5782] team0: Port device team_slave_1 added
[   71.140595][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.147809][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.155038][ T5779] bridge_slave_0: entered allmulticast mode
[   71.161715][ T5779] bridge_slave_0: entered promiscuous mode
[   71.170262][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.177599][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.184996][ T5779] bridge_slave_1: entered allmulticast mode
[   71.191681][ T5779] bridge_slave_1: entered promiscuous mode
[   71.213434][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.220685][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.228273][ T5778] bridge_slave_0: entered allmulticast mode
[   71.236168][ T5778] bridge_slave_0: entered promiscuous mode
[   71.265179][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.272319][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.279656][ T5778] bridge_slave_1: entered allmulticast mode
[   71.286486][ T5778] bridge_slave_1: entered promiscuous mode
[   71.314391][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.322126][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.348712][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.381735][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.391955][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.399774][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.425858][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.460856][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.473944][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.500298][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.509638][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.517567][ T5787] bridge_slave_0: entered allmulticast mode
[   71.524238][ T5787] bridge_slave_0: entered promiscuous mode
[   71.532859][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.540235][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.547532][ T5787] bridge_slave_1: entered allmulticast mode
[   71.554198][ T5787] bridge_slave_1: entered promiscuous mode
[   71.564148][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[   71.567892][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.574976][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[   71.602147][ T5782] hsr_slave_0: entered promiscuous mode
[   71.609190][ T5782] hsr_slave_1: entered promiscuous mode
[   71.638377][ T5779] team0: Port device team_slave_0 added
[   71.647244][ T5778] team0: Port device team_slave_0 added
[   71.673320][ T5778] team0: Port device team_slave_1 added
[   71.682847][ T5779] team0: Port device team_slave_1 added
[   71.701387][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.713137][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.776385][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.783364][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.815026][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.827458][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.834413][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.860887][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.890083][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.897111][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.923600][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.943977][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.950990][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.977201][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.990843][ T5787] team0: Port device team_slave_0 added
[   72.000510][ T5787] team0: Port device team_slave_1 added
[   72.100193][ T5778] hsr_slave_0: entered promiscuous mode
[   72.107053][ T5778] hsr_slave_1: entered promiscuous mode
[   72.113272][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.121154][ T5778] Cannot create hsr debugfs directory
[   72.127425][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.134390][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.161572][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.203941][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.214182][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.240520][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.255474][ T5779] hsr_slave_0: entered promiscuous mode
[   72.261665][ T5779] hsr_slave_1: entered promiscuous mode
[   72.268708][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.276666][ T5779] Cannot create hsr debugfs directory
[   72.355754][   T51] Bluetooth: hci0: command tx timeout
[   72.355766][ T5794] Bluetooth: hci3: command tx timeout
[   72.355961][ T5794] Bluetooth: hci1: command tx timeout
[   72.361410][   T51] Bluetooth: hci2: command tx timeout
[   72.416564][ T5787] hsr_slave_0: entered promiscuous mode
[   72.423117][ T5787] hsr_slave_1: entered promiscuous mode
[   72.429562][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.437548][ T5787] Cannot create hsr debugfs directory
[   72.619418][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   72.651211][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   72.660524][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   72.689973][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.792117][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.803831][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.832213][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.848143][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   72.906931][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   72.928784][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   72.942493][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   72.953271][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   73.040514][ T5787] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.052151][ T5787] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.073950][ T5787] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.086043][ T5787] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.140129][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.196588][ T5782] 8021q: adding VLAN 0 to HW filter on device team0
[   73.212900][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.220340][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.252059][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.264803][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.271980][ T2968] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.332747][ T5778] 8021q: adding VLAN 0 to HW filter on device team0
[   73.352711][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.368941][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.376095][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.407159][  T993] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.414291][  T993] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.439029][ T5779] 8021q: adding VLAN 0 to HW filter on device team0
[   73.482166][ T2954] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.489408][ T2954] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.523887][ T2895] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.531067][ T2895] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.545940][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.630759][ T5787] 8021q: adding VLAN 0 to HW filter on device team0
[   73.692605][  T993] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.699809][  T993] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.719190][  T993] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.726394][  T993] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.872465][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.000435][ T5782] veth0_vlan: entered promiscuous mode
[   74.047462][ T5782] veth1_vlan: entered promiscuous mode
[   74.128788][ T5782] veth0_macvtap: entered promiscuous mode
[   74.157716][ T5782] veth1_macvtap: entered promiscuous mode
[   74.170702][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.206390][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.238949][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.259366][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.277320][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.319857][ T5778] veth0_vlan: entered promiscuous mode
[   74.326840][ T5782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.338456][ T5782] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.347702][ T5782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.358847][ T5782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.404279][ T5778] veth1_vlan: entered promiscuous mode
[   74.420571][ T5787] veth0_vlan: entered promiscuous mode
[   74.436045][ T5785] Bluetooth: hci1: command tx timeout
[   74.437336][ T5794] Bluetooth: hci0: command tx timeout
[   74.441448][ T5785] Bluetooth: hci3: command tx timeout
[   74.453718][   T51] Bluetooth: hci2: command tx timeout
[   74.493290][ T5787] veth1_vlan: entered promiscuous mode
[   74.506818][ T5779] veth0_vlan: entered promiscuous mode
[   74.549933][ T5779] veth1_vlan: entered promiscuous mode
[   74.580080][ T5778] veth0_macvtap: entered promiscuous mode
[   74.600511][ T5778] veth1_macvtap: entered promiscuous mode
[   74.618159][ T3502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.624325][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.643374][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.643890][ T3502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.661849][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.702862][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.713672][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.728948][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.745242][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.753972][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.763817][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.772650][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.795483][ T5787] veth0_macvtap: entered promiscuous mode
[   74.819289][ T3502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.820116][ T5787] veth1_macvtap: entered promiscuous mode
[   74.839217][ T3502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.870018][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.881454][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.893837][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.904971][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.924578][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.936255][ T5779] veth0_macvtap: entered promiscuous mode
[   74.950942][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.971422][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.981700][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.992263][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.004033][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.019996][ T5779] veth1_macvtap: entered promiscuous mode
[   75.064386][  T993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.074633][ T5787] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.093884][  T993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.104523][ T5787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.114392][ T5787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.123171][ T5787] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.123878][ T5845] syz.1.2[5845]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   75.210117][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.213735][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.232151][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.246128][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.248322][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.258961][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.274153][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.289176][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.301090][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.373792][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.391612][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.402585][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.414359][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.424749][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.435760][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.447397][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.458909][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.468435][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.477669][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.487030][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.520769][  T993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.551232][  T993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.617076][ T5847] Zero length message leads to an empty skb
[   75.656612][ T3522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.675745][ T3522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.722177][ T5845] loop1: detected capacity change from 0 to 32768
[   75.773061][ T5849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5'.
[   75.783100][ T5849] netlink: 'syz.0.5': attribute type 20 has an invalid length.
[   75.792975][ T5849] netlink: 'syz.0.5': attribute type 21 has an invalid length.
[   75.848874][ T5845] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   75.861159][ T3502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.891830][ T3502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.964189][ T3502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.020233][ T3502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.216429][ T5845] XFS (loop1): Ending clean mount
[   76.250452][ T5845] XFS (loop1): Quotacheck needed: Please wait.
[   76.252512][ T5868] Illegal XDP return value 4294967274 on prog  (id 2) dev N/A, expect packet loss!
[   76.316241][ T5845] XFS (loop1): Quotacheck: Done.
[   76.433155][ T5870] netlink: 'syz.3.9': attribute type 7 has an invalid length.
[   76.519085][   T51] Bluetooth: hci2: command tx timeout
[   76.524636][ T5785] Bluetooth: hci3: command tx timeout
[   76.530190][ T5089] Bluetooth: hci0: command tx timeout
[   76.530214][ T5794] Bluetooth: hci1: command tx timeout
[   76.567991][ T5782] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   76.721151][ T5867] loop0: detected capacity change from 0 to 32768
[   76.768998][ T5867] =======================================================
[   76.768998][ T5867] WARNING: The mand mount option has been deprecated and
[   76.768998][ T5867]          and is ignored by this kernel. Remove the mand
[   76.768998][ T5867]          option from the mount to silence this warning.
[   76.768998][ T5867] =======================================================
[   76.868224][ T5874] i2c i2c-0: new_device: Invalid device name
[   76.923977][ T5867] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   77.158931][ T5882] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   77.327651][ T5778] ocfs2: Unmounting device (7,0) on (node local)
[   77.479132][ T5880] loop3: detected capacity change from 0 to 32768
[   77.526412][ T5880] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.13 (5880)
[   77.586994][ T5880] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   77.600965][ T5880] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[   77.618199][ T5880] BTRFS info (device loop3): use zlib compression, level 3
[   77.626592][ T5880] BTRFS info (device loop3): using free space tree
[   77.669042][ T5888] loop2: detected capacity change from 0 to 1024
[   77.789203][ T5880] BTRFS info (device loop3): enabling ssd optimizations
[   77.806442][ T5824] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   77.820822][ T5880] BTRFS info (device loop3): auto enabling async discard
[   78.011764][ T5824] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   78.040715][ T5824] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[   78.067921][ T5824] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   78.072027][ T5912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19'.
[   78.084931][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.101056][ T5824] usb 2-1: Product: syz
[   78.105632][ T5824] usb 2-1: Manufacturer: syz
[   78.110290][ T5824] usb 2-1: SerialNumber: syz
[   78.132391][ T5908] BTRFS error (device loop3): target device  is invalid!
[   78.169972][ T5824] usb 2-1: selecting invalid altsetting 1
[   78.310868][ T5779] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   78.595498][ T5794] Bluetooth: hci1: command tx timeout
[   78.595655][ T5785] Bluetooth: hci3: command tx timeout
[   78.600983][ T5794] Bluetooth: hci2: command tx timeout
[   78.606484][   T51] Bluetooth: hci0: command tx timeout
[   78.678502][ T5930] loop3: detected capacity change from 0 to 128
[   78.726365][ T5930] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   78.738834][ T5930] hpfs: filesystem error: improperly stopped
[   78.744972][ T5930] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   78.752891][ T5930] hpfs: You really don't want any checks? You are crazy...
[   78.760292][ T5930] hpfs: Code page directory magic doesn't match (magic = 7b3184b5)
[   78.768730][ T5930] hpfs: code page support is disabled
[   78.778544][ T5930] hpfs: hpfs_map_4sectors(): unaligned read
[   78.788118][ T5930] hpfs: hpfs_map_4sectors(): unaligned read
[   78.797941][ T5930] hpfs: filesystem error: unable to find root dir
[   78.864237][ T5930] hpfs: hpfs_map_4sectors(): unaligned read
[   78.962884][ T5932] loop0: detected capacity change from 0 to 8192
[   79.000391][ T5824] cdc_ncm 2-1:1.0: SET_NTB_FORMAT failed
[   79.026513][ T5824] usb 2-1: selecting invalid altsetting 1
[   79.046547][ T5824] cdc_ncm 2-1:1.0: bind() failure
[   79.079317][ T5824] usb 2-1: USB disconnect, device number 2
[   79.596190][ T5953] netlink: 40 bytes leftover after parsing attributes in process `syz.0.33'.
[   79.688844][ T5956] ieee802154 phy0 wpan0: encryption failed: -22
[   79.718875][ T5958] loop3: detected capacity change from 0 to 2048
[   79.771536][ T5960] loop0: detected capacity change from 0 to 512
[   79.789101][ T5958]  loop3: p1 p2 p3 < > p4 < p5 p6 >
[   79.794528][ T5958] loop3: partition table partially beyond EOD, truncated
[   79.819183][ T5958] loop3: p1 start 3405774849 is beyond EOD, truncated
[   79.847009][ T5958] loop3: p2 start 53543428 is beyond EOD, truncated
[   79.873019][ T5958] loop3: p3 start 4284289 is beyond EOD, truncated
[   79.895185][ T5960] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.950066][ T5958] loop3: p5 start 3405774849 is beyond EOD, truncated
[   79.960480][ T5960] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.995097][ T5958] loop3: p6 start 53543428 is beyond EOD, truncated
[   80.070924][ T5974] loop2: detected capacity change from 0 to 256
[   80.082374][ T5974] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   80.148512][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.204976][  T787] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   80.414955][  T787] usb 4-1: Using ep0 maxpacket: 32
[   80.425795][  T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 88, changing to 10
[   80.440912][  T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9056, setting to 1024
[   80.462590][  T787] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   80.482336][  T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.505175][  T787] usb 4-1: config 0 descriptor??
[   80.534738][  T787] hub 4-1:0.0: USB hub found
[   80.602027][ T5984] capability: warning: `syz.2.44' uses 32-bit capabilities (legacy support in use)
[   80.643621][ T5984] program syz.2.44 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   80.762176][  T787] hub 4-1:0.0: 26 ports detected
[   80.785587][  T787] hub 4-1:0.0: insufficient power available to use all downstream ports
[   80.794645][ T5992] loop2: detected capacity change from 0 to 512
[   80.822398][ T5992] EXT4-fs: Ignoring removed oldalloc option
[   80.840674][ T5992] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   80.860364][ T5992] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   80.886243][ T5992] EXT4-fs (loop2): 1 truncate cleaned up
[   80.894195][ T5992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.896775][ T5996] loop1: detected capacity change from 0 to 2048
[   80.940750][ T5996] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.967437][  T787] hub 4-1:0.0: hub_hub_status failed (err = -71)
[   80.984960][  T787] hub 4-1:0.0: config failed, can't get hub status (err -71)
[   81.002336][   T28] audit: type=1800 audit(1790864891.507:2): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.50" name="file1" dev="loop1" ino=15 res=0 errno=0
[   81.029015][ T5996] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   81.033674][ T5992] overlayfs: invalid origin (0000007900ecdbcb6f1b451800f06fd7494a5fc494f2e803081444c42369d2023d700181c401242438946348d2aad46d5013245a55b420548ea81277c4810312)
[   81.049793][  T787] usbhid 4-1:0.0: can't add hid device: -71
[   81.066823][ T5996] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[   81.083247][  T787] usbhid: probe of 4-1:0.0 failed with error -71
[   81.095070][ T5996] EXT4-fs (loop1): This should not happen!! Data will be lost
[   81.095070][ T5996] 
[   81.104757][ T5996] EXT4-fs (loop1): Total free blocks count 0
[   81.111087][ T5996] EXT4-fs (loop1): Free/Dirty block details
[   81.114957][   T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   81.117222][ T5996] EXT4-fs (loop1): free_blocks=2415919104
[   81.130459][ T5996] EXT4-fs (loop1): dirty_blocks=64
[   81.135831][ T5996] EXT4-fs (loop1): Block reservation details
[   81.143450][ T6000] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   81.154551][  T787] usb 4-1: USB disconnect, device number 2
[   81.157575][ T5996] EXT4-fs (loop1): i_reserved_data_blocks=4
[   81.278921][ T5787] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 11. Delete some EAs or run e2fsck.
[   81.334262][ T5787] EXT4-fs error (device loop2): mb_free_blocks:1970: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt.
[   81.354797][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.360503][   T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   81.399813][   T23] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   81.428452][   T23] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00
[   81.440723][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.459494][   T23] usb 1-1: Product: syz
[   81.463716][   T23] usb 1-1: Manufacturer: syz
[   81.476521][   T23] usb 1-1: SerialNumber: syz
[   81.544758][ T6008] netlink: 'syz.2.54': attribute type 21 has an invalid length.
[   81.552903][ T6008] netlink: 128 bytes leftover after parsing attributes in process `syz.2.54'.
[   81.761741][ T6015] usb usb5: usbfs: interface 0 claimed by hub while 'syz.1.58' sets config #1
[   81.905791][ T6021] netlink: 'syz.1.60': attribute type 11 has an invalid length.
[   82.117935][   T23] speedtch 1-1:1.0: usbatm_usb_probe: invalid endpoint 07!
[   82.340200][   T23] speedtch: probe of 1-1:1.0 failed with error -22
[   82.365734][   T23] usbtest: probe of 1-1:1.1 failed with error -71
[   82.388590][   T23] speedtch: probe of 1-1:1.1 failed with error -71
[   82.417395][   T23] usb 1-1: USB disconnect, device number 2
[   82.647507][ T6036] erspan0: entered promiscuous mode
[   82.843732][ T6044] loop1: detected capacity change from 0 to 2048
[   82.892978][ T6044] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.938618][   T28] audit: type=1800 audit(1790864893.437:3): pid=6044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.71" name="file2" dev="loop1" ino=16 res=0 errno=0
[   83.083424][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.102970][ T6058] loop0: detected capacity change from 0 to 128
[   83.148869][ T6061] loop3: detected capacity change from 0 to 128
[   83.181793][ T6061] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[   83.185698][ T6058] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[   83.324457][ T6058] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1)
[   83.345371][ T6061] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[   83.365006][ T6058] FAT-fs (loop0): Filesystem has been set read-only
[   83.447604][ T6066] Failed to get privilege flags for destination (handle=0x2:0x0)
[   83.461644][ T5778] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[   83.585412][ T6071] netlink: 56 bytes leftover after parsing attributes in process `syz.0.82'.
[   83.843107][ T6088] loop2: detected capacity change from 0 to 1024
[   83.912376][ T6088] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.086263][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.540272][ T6089] loop0: detected capacity change from 0 to 40427
[   84.571827][ T6089] F2FS-fs (loop0): heap/no_heap options were deprecated
[   84.607055][ T6089] F2FS-fs (loop0): Found nat_bits in checkpoint
[   84.619661][ T5823] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   84.712690][ T6116] MTRR 1 not used
[   84.746478][ T6089] F2FS-fs (loop0): Start checkpoint disabled!
[   84.799850][ T6089] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   84.846972][ T5823] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[   84.863089][ T5823] usb 2-1: config 0 has no interface number 0
[   84.875055][ T5823] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[   84.890153][ T6089] syz.0.89: attempt to access beyond end of device
[   84.890153][ T6089] loop0: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[   84.904700][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.913600][ T5823] usb 2-1: Product: syz
[   84.918988][ T5823] usb 2-1: Manufacturer: syz
[   84.923619][ T5823] usb 2-1: SerialNumber: syz
[   84.937923][ T5823] usb 2-1: config 0 descriptor??
[   85.090080][  T993] kworker/u4:5: attempt to access beyond end of device
[   85.090080][  T993] loop0: rw=2049, sector=40960, nr_sectors = 40 limit=40427
[   85.122147][  T993] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   85.145063][  T993] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   85.152304][  T993] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   85.166025][  T993] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   85.172978][  T993] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   85.195032][ T5823] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[   85.223333][ T5823] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   85.239389][ T5823] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[   85.249966][ T5823] usb 2-1: media controller created
[   85.286797][ T5823] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   85.426594][ T6129] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   85.438349][   T28] audit: type=1326 audit(1790864895.947:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.3.108" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9559e159 code=0x7ffc0000
[   85.476354][   T28] audit: type=1326 audit(1790864895.947:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.3.108" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9559e159 code=0x7ffc0000
[   85.545116][   T28] audit: type=1326 audit(1790864895.977:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.3.108" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9559e159 code=0x7ffc0000
[   85.610787][   T28] audit: type=1326 audit(1790864895.977:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.3.108" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9559e159 code=0x7ffc0000
[   85.638278][   T28] audit: type=1326 audit(1790864895.977:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.3.108" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f1d9559e159 code=0x7ffc0000
[   85.663274][   T28] audit: type=1326 audit(1790864895.977:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.3.108" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9559e159 code=0x7ffc0000
[   85.688476][   T28] audit: type=1326 audit(1790864895.977:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.3.108" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9559e159 code=0x7ffc0000
[   85.727320][ T6135] rnbd_client L213: map_device: Parameters missing
[   85.773575][   T28] audit: type=1326 audit(1790864895.977:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.3.108" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9559e159 code=0x7ffc0000
[   85.920294][ T6145] loop3: detected capacity change from 0 to 16
[   85.964095][ T6145] erofs: (device loop3): mounted with root inode @ nid 36.
[   86.445915][ T5823] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[   86.557382][ T5823] usb 2-1: USB disconnect, device number 3
[   86.685063][ T6157] loop0: detected capacity change from 0 to 40427
[   86.700626][ T6157] F2FS-fs (loop0): Corrupted extension count (327717 + 1 > 64)
[   86.718581][ T6157] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   86.736746][ T6157] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff
[   86.756989][ T6157] F2FS-fs (loop0): invalid crc value
[   86.782949][ T6157] F2FS-fs (loop0): Found nat_bits in checkpoint
[   86.849361][ T6157] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[   86.861330][ T6157] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   86.937721][ T1198] cfg80211: failed to load regulatory.db
[   86.973918][   T28] kauditd_printk_skb: 11 callbacks suppressed
[   86.973932][   T28] audit: type=1800 audit(1790864897.477:23): pid=6157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.118" name="file1" dev="loop0" ino=10 res=0 errno=0
[   87.049347][ T5778] syz-executor: attempt to access beyond end of device
[   87.049347][ T5778] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   87.077804][ T5778] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   87.454519][ T6183] process 'syz.2.129' launched './file0' with NULL argv: empty string added
[   87.757556][ T6196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.133'.
[   87.768023][ T6196] netlink: 16 bytes leftover after parsing attributes in process `syz.2.133'.
[   88.131468][ T6190] loop1: detected capacity change from 0 to 32768
[   88.208173][ T6190] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   88.289551][ T6190] XFS (loop1): Ending clean mount
[   88.384765][   T28] audit: type=1800 audit(1790864898.887:24): pid=6190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.131" name="file1" dev="loop1" ino=6150 res=0 errno=0
[   88.438069][ T6194] loop3: detected capacity change from 0 to 40427
[   88.477373][ T6194] F2FS-fs (loop3): invalid crc value
[   88.488117][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'.
[   88.497997][ T6218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.140'.
[   88.506913][ T6194] F2FS-fs (loop3): Found nat_bits in checkpoint
[   88.539888][ T6218] netlink: 'syz.2.140': attribute type 6 has an invalid length.
[   88.544446][ T5782] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   88.645763][ T6194] F2FS-fs (loop3): Start checkpoint disabled!
[   88.681492][ T6194] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   88.789659][ T6194] F2FS-fs (loop3): Skipping Checkpoint. Checkpoints currently disabled.
[   88.981333][ T2968] kworker/u4:9: attempt to access beyond end of device
[   88.981333][ T2968] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   89.017398][ T2968] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[   89.027386][ T2968] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[   89.047444][ T6230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.146'.
[   89.484754][ T6226] loop2: detected capacity change from 0 to 32768
[   89.532042][ T6226] JBD2: Ignoring recovery information on journal
[   89.652315][ T6226] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   89.685066][ T1198] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   89.781463][ T6254] loop3: detected capacity change from 0 to 1024
[   89.827553][ T6226] overlayfs: upper fs does not support tmpfile.
[   89.844806][ T6226] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   89.868263][ T6226] overlayfs: failed to set xattr on upper
[   89.874465][ T6226] overlayfs: ...falling back to redirect_dir=nofollow.
[   89.888979][ T1198] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   89.891283][ T6226] overlayfs: ...falling back to index=off.
[   89.908976][ T6226] overlayfs: ...falling back to uuid=null.
[   89.914820][ T6226] overlayfs: upper fs missing required features.
[   89.931310][ T1198] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   89.959502][ T1198] usb 1-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00
[   89.969540][ T1198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.028045][ T1198] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx
[   90.029249][ T6256] loop1: detected capacity change from 0 to 1024
[   90.081133][ T6256] EXT4-fs: Ignoring removed orlov option
[   90.133902][ T6256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.173141][ T5787] ocfs2: Unmounting device (7,2) on (node local)
[   90.180188][   T28] audit: type=1800 audit(1790864900.677:25): pid=6256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.157" name="file1" dev="loop1" ino=15 res=0 errno=0
[   90.332665][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.472839][ T1198] usb 1-1: USB disconnect, device number 3
[   90.496047][ T6269] loop1: detected capacity change from 0 to 256
[   90.510810][ T2322] usb 1-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2
[   90.544148][ T2322] usb 1-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw
[   91.242685][ T6279] loop1: detected capacity change from 0 to 40427
[   91.276589][ T6279] F2FS-fs (loop1): invalid crc value
[   91.337419][ T6279] F2FS-fs (loop1): Found nat_bits in checkpoint
[   91.525395][ T6279] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   91.640173][ T6300] sctp: [Deprecated]: syz.0.174 (pid 6300) Use of struct sctp_assoc_value in delayed_ack socket option.
[   91.640173][ T6300] Use struct sctp_sack_info instead
[   91.662845][ T6279] F2FS-fs (loop1): access invalid blkaddr:3
[   91.671715][ T6279] CPU: 1 PID: 6279 Comm: syz.1.166 Not tainted syzkaller #0
[   91.679033][ T6279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   91.689106][ T6279] Call Trace:
[   91.692384][ T6279]  <TASK>
[   91.695310][ T6279]  dump_stack_lvl+0x18c/0x250
[   91.700005][ T6279]  ? show_regs_print_info+0x20/0x20
[   91.705206][ T6279]  ? __lock_acquire+0x1336/0x7d80
[   91.710245][ T6279]  f2fs_is_valid_blkaddr+0xe6c/0x15c0
[   91.715627][ T6279]  f2fs_map_blocks+0xc20/0x4080
[   91.720485][ T6279]  ? verify_lock_unused+0x140/0x140
[   91.725709][ T6279]  ? f2fs_get_block_locked+0xe0/0xe0
[   91.731006][ T6279]  ? __might_sleep+0xe0/0xe0
[   91.735610][ T6279]  ? read_lock_is_recursive+0x20/0x20
[   91.740989][ T6279]  ? f2fs_precache_extents+0x19f/0x260
[   91.746456][ T6279]  ? down_write+0x16e/0x200
[   91.750953][ T6279]  ? down_read_killable+0x340/0x340
[   91.756150][ T6279]  ? up_write+0x1be/0x410
[   91.760475][ T6279]  ? max_file_blocks+0xb0/0x1b0
[   91.765347][ T6279]  f2fs_precache_extents+0x194/0x260
[   91.770629][ T6279]  ? f2fs_pin_file_control+0x1a0/0x1a0
[   91.776090][ T6279]  ? stack_trace_save+0xaa/0x100
[   91.781032][ T6279]  ? stack_trace_snprint+0xf0/0xf0
[   91.786142][ T6279]  ? __stack_depot_save+0x1f/0x660
[   91.791311][ T6279]  f2fs_fiemap+0x13b/0x15b0
[   91.795838][ T6279]  ? f2fs_overwrite_io+0x200/0x200
[   91.800951][ T6279]  ? __might_fault+0xaa/0x120
[   91.805627][ T6279]  ? __lock_acquire+0x7d80/0x7d80
[   91.810655][ T6279]  ? __might_fault+0xaa/0x120
[   91.815328][ T6279]  ? __might_fault+0xc6/0x120
[   91.819999][ T6279]  ? __might_fault+0xaa/0x120
[   91.824677][ T6279]  do_vfs_ioctl+0x14fe/0x1cc0
[   91.829362][ T6279]  ? __ia32_compat_sys_ioctl+0x8a0/0x8a0
[   91.835012][ T6279]  ? tomoyo_path_number_perm+0x217/0x5e0
[   91.840666][ T6279]  ? __lock_acquire+0x7d80/0x7d80
[   91.845696][ T6279]  ? slab_free_freelist_hook+0x130/0x1a0
[   91.851332][ T6279]  ? tomoyo_path_number_perm+0x4b7/0x5e0
[   91.856970][ T6279]  ? __kmem_cache_free+0xba/0x1f0
[   91.862003][ T6279]  ? tomoyo_path_number_perm+0x56b/0x5e0
[   91.867635][ T6279]  ? tomoyo_path_number_perm+0x217/0x5e0
[   91.873267][ T6279]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[   91.878758][ T6279]  ? __fget_files+0x28/0x460
[   91.883360][ T6279]  ? bpf_lsm_file_ioctl+0x9/0x10
[   91.888293][ T6279]  ? security_file_ioctl+0x80/0xa0
[   91.893413][ T6279]  __se_sys_ioctl+0x83/0x170
[   91.898010][ T6279]  do_syscall_64+0x55/0xb0
[   91.902427][ T6279]  ? clear_bhb_loop+0x40/0x90
[   91.907104][ T6279]  ? clear_bhb_loop+0x40/0x90
[   91.911788][ T6279]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   91.917683][ T6279] RIP: 0033:0x7f4fa359e159
[   91.922113][ T6279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   91.941730][ T6279] RSP: 002b:00007f4fa43a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   91.950153][ T6279] RAX: ffffffffffffffda RBX: 00007f4fa3825fa0 RCX: 00007f4fa359e159
[   91.958127][ T6279] RDX: 0000200000005880 RSI: 00000000c020660b RDI: 0000000000000004
[   91.966099][ T6279] RBP: 00007f4fa363506b R08: 0000000000000000 R09: 0000000000000000
[   91.974065][ T6279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   91.982033][ T6279] R13: 00007f4fa3826038 R14: 00007f4fa3825fa0 R15: 00007ffe89d09338
[   91.990015][ T6279]  </TASK>
[   92.070265][ T5782] syz-executor: attempt to access beyond end of device
[   92.070265][ T5782] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   92.104014][ T5782] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   92.450530][ T6314] loop0: detected capacity change from 0 to 512
[   92.513602][ T6295] loop3: detected capacity change from 0 to 32768
[   92.575423][ T6295] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   92.587777][ T6314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.683609][ T6314] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   92.711416][ T6323] loop1: detected capacity change from 0 to 1756
[   92.739930][ T6314] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096)
[   92.753995][    T9] logitech-hidpp-device 0005:046D:B012.0001: Device not connected
[   92.771885][ T6323] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[   92.782215][ T6323] UDF-fs: Scanning with blocksize 512 failed
[   92.863273][ T6295] syz.3.172 (6295) used greatest stack depth: 18776 bytes left
[   92.872828][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.896907][ T6323] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[   92.930880][ T6323] UDF-fs: Scanning with blocksize 1024 failed
[   92.965725][ T5779] ocfs2: Unmounting device (7,3) on (node local)
[   93.024094][ T6323] UDF-fs: warning (device loop1): udf_verify_domain_identifier: Descriptor for logical volume marked write protected. Forcing read only mount.
[   93.387537][ T5823] IPVS: starting estimator thread 0...
[   93.420201][  T787] IPVS: starting estimator thread 0...
[   93.485780][ T6345] warning: `syz.2.192' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   93.505337][ T6340] IPVS: using max 22 ests per chain, 52800 per kthread
[   93.526610][ T6343] IPVS: using max 21 ests per chain, 50400 per kthread
[   93.879252][ T6369] program syz.2.204 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   94.216524][ T6387] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   94.256474][ T6389] loop3: detected capacity change from 0 to 64
[   94.312742][ T6389] hfs: get root inode failed
[   94.688545][ T6403] iommufd_mock iommufd_mock1: Adding to iommu group 0
[   94.864087][ T6407] netlink: 'syz.2.222': attribute type 1 has an invalid length.
[   94.889869][ T6407] netlink: 24 bytes leftover after parsing attributes in process `syz.2.222'.
[   95.458134][ T6430] ieee802154 phy0 wpan0: encryption failed: -22
[   95.482016][ T6432] loop0: detected capacity change from 0 to 256
[   95.568075][ T6436] syz.3.236 uses obsolete (PF_INET,SOCK_PACKET)
[   96.716758][ T6462] netlink: 'syz.2.249': attribute type 12 has an invalid length.
[   96.740021][ T6462] netlink: 24 bytes leftover after parsing attributes in process `syz.2.249'.
[   97.255980][ T6485] loop1: detected capacity change from 0 to 8
[   97.329432][ T6487] ip6_tables: ip6tables: counters copy to user failed while replacing table
[   97.442354][ T5782] SQUASHFS error: Unable to read directory block [631:72]
[   97.463550][ T6491] loop0: detected capacity change from 0 to 256
[   97.471531][ T5782] SQUASHFS error: Unable to read inode 0x0
[   97.480535][ T5782] SQUASHFS error: Unable to read inode 0x0
[   97.490506][ T6491] exfat: Deprecated parameter 'utf8'
[   97.507536][ T6491] exfat: Deprecated parameter 'utf8'
[   97.525151][ T6491] exfat: Deprecated parameter 'namecase'
[   97.536731][ T6491] exfat: Deprecated parameter 'namecase'
[   97.652446][ T6491] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   97.862133][   T28] audit: type=1800 audit(1790864908.367:26): pid=6494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.268" name="protocol" dev="configfs" ino=9451 res=0 errno=0
[   98.333452][ T3522] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.348092][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   98.359088][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   98.367261][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   98.385404][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   98.394395][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   98.401900][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   98.518737][ T3522] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.627170][ T3522] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.676483][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   98.692076][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   98.704226][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   98.720763][ T5089] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   98.728636][ T5089] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   98.736239][ T5089] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   98.745362][ T3522] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.775845][ T6511] loop3: detected capacity change from 0 to 64
[   99.131497][ T6500] chnl_net:caif_netlink_parms(): no params data found
[   99.174499][ T3522] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.244587][ T6507] chnl_net:caif_netlink_parms(): no params data found
[   99.358977][ T3522] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.541335][ T3522] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.629539][ T3522] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.678201][ T6500] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.691791][ T6500] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.699354][ T6500] bridge_slave_0: entered allmulticast mode
[   99.712789][ T6500] bridge_slave_0: entered promiscuous mode
[   99.724272][ T6500] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.732018][ T6500] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.739341][ T6500] bridge_slave_1: entered allmulticast mode
[   99.747545][ T6500] bridge_slave_1: entered promiscuous mode
[   99.767478][ T6507] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.774688][ T6507] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.782134][ T6507] bridge_slave_0: entered allmulticast mode
[   99.789580][ T6507] bridge_slave_0: entered promiscuous mode
[   99.799082][ T6507] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.806474][ T6507] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.813758][ T6507] bridge_slave_1: entered allmulticast mode
[   99.821651][ T6507] bridge_slave_1: entered promiscuous mode
[   99.901332][ T6500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.914098][ T6507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.932070][ T6500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.967020][ T6507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.991599][ T6500] team0: Port device team_slave_0 added
[  100.023307][ T6500] team0: Port device team_slave_1 added
[  100.059001][ T6507] team0: Port device team_slave_0 added
[  100.097498][ T6507] team0: Port device team_slave_1 added
[  100.114253][ T6500] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.121706][ T6500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.150440][ T6500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.194649][ T6500] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.207871][ T6500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.236801][ T6500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.263037][ T6507] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.281521][ T6507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.334937][ T6507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.435338][ T5089] Bluetooth: hci2: command tx timeout
[  100.564119][ T6507] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.571741][ T6507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.604364][ T6507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.660711][ T6500] hsr_slave_0: entered promiscuous mode
[  100.673070][ T6500] hsr_slave_1: entered promiscuous mode
[  100.679699][ T6500] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  100.694034][ T6500] Cannot create hsr debugfs directory
[  100.764962][   T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  100.836643][ T5089] Bluetooth: hci3: command tx timeout
[  100.922596][ T6507] hsr_slave_0: entered promiscuous mode
[  100.930484][ T6507] hsr_slave_1: entered promiscuous mode
[  100.938902][ T6507] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  100.947629][ T6507] Cannot create hsr debugfs directory
[  100.958456][   T23] usb 4-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00
[  100.967693][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  100.976144][   T23] usb 4-1: Product: syz
[  100.980333][   T23] usb 4-1: Manufacturer: syz
[  101.012198][   T23] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input5
[  101.251564][   T23] usb 4-1: USB disconnect, device number 3
[  101.770613][ T6500] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  101.811814][ T6500] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  101.895604][ T6500] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  101.923789][ T6500] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  102.095556][ T6507] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  102.134667][ T6507] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  102.202854][ T6507] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  102.218797][ T6507] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  102.226052][    T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  102.430596][    T9] usb 4-1: Using ep0 maxpacket: 32
[  102.449595][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  102.471671][ T3522] hsr_slave_0: left promiscuous mode
[  102.471920][    T9] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  102.488445][ T3522] hsr_slave_1: left promiscuous mode
[  102.496121][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.503611][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_0
[  102.507781][    T9] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  102.516124][ T5089] Bluetooth: hci2: command tx timeout
[  102.530814][    T9] usb 4-1: Product: syz
[  102.531449][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  102.542688][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_1
[  102.549444][    T9] usb 4-1: Manufacturer: syz
[  102.555249][ T3522] bridge_slave_1: left allmulticast mode
[  102.560923][ T3522] bridge_slave_1: left promiscuous mode
[  102.568999][    T9] usb 4-1: SerialNumber: syz
[  102.569279][ T3522] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.589349][ T3522] bridge_slave_0: left allmulticast mode
[  102.590527][    T9] usb 4-1: config 0 descriptor??
[  102.595445][ T3522] bridge_slave_0: left promiscuous mode
[  102.609941][ T3522] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.621014][ T6577] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  102.636249][    T9] hub 4-1:0.0: bad descriptor, ignoring hub
[  102.643733][    T9] hub: probe of 4-1:0.0 failed with error -5
[  102.650239][ T3522] hsr_slave_0: left promiscuous mode
[  102.658149][ T3522] hsr_slave_1: left promiscuous mode
[  102.687264][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.694765][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_0
[  102.711885][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  102.719568][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_1
[  102.729843][ T3522] bridge_slave_1: left allmulticast mode
[  102.735766][ T3522] bridge_slave_1: left promiscuous mode
[  102.745551][ T3522] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.763160][ T3522] bridge_slave_0: left allmulticast mode
[  102.769922][ T3522] bridge_slave_0: left promiscuous mode
[  102.776999][ T3522] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.855808][ T3522] veth1_macvtap: left promiscuous mode
[  102.862050][ T3522] veth0_macvtap: left promiscuous mode
[  102.873671][ T3522] veth1_vlan: left promiscuous mode
[  102.879411][ T3522] veth0_vlan: left promiscuous mode
[  102.897872][ T3522] veth1_macvtap: left promiscuous mode
[  102.911000][ T3522] veth0_macvtap: left promiscuous mode
[  102.916714][ T5089] Bluetooth: hci3: command tx timeout
[  102.925657][ T3522] veth1_vlan: left promiscuous mode
[  102.933400][ T3522] veth0_vlan: left promiscuous mode
[  103.048736][ T5825] usb 4-1: USB disconnect, device number 4
[  103.416303][ T6599] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  103.619737][ T6599] usb 4-1: Using ep0 maxpacket: 32
[  103.643921][ T6599] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  103.676437][ T6599] usb 4-1: language id specifier not provided by device, defaulting to English
[  103.700160][ T6599] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  103.715085][ T6599] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  103.723313][ T6599] usb 4-1: Product: syz
[  103.744611][ T6599] usb 4-1: config 0 descriptor??
[  103.754563][ T6577] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  103.789477][ T6599] hub 4-1:0.0: bad descriptor, ignoring hub
[  103.802857][ T6599] hub: probe of 4-1:0.0 failed with error -5
[  104.101969][ T3522] team0 (unregistering): Port device team_slave_1 removed
[  104.125420][ T6599] usb 4-1: USB disconnect, device number 5
[  104.158354][ T3522] team0 (unregistering): Port device team_slave_0 removed
[  104.208207][ T3522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  104.251956][ T3522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  104.543948][ T3522] bond0 (unregistering): Released all slaves
[  104.595197][   T51] Bluetooth: hci2: command tx timeout
[  104.995108][   T51] Bluetooth: hci3: command tx timeout
[  105.158856][ T3522] team0 (unregistering): Port device team_slave_1 removed
[  105.228932][ T3522] team0 (unregistering): Port device team_slave_0 removed
[  105.297882][ T3522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  105.367679][ T3522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  105.619078][ T6628] loop3: detected capacity change from 0 to 2048
[  105.665938][ T6628] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  106.137417][ T3522] bond0 (unregistering): Released all slaves
[  106.176355][ T6632] loop3: detected capacity change from 0 to 2048
[  106.303072][ T6500] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.383932][ T6634] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  106.387668][ T6500] 8021q: adding VLAN 0 to HW filter on device team0
[  106.461237][  T993] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.468432][  T993] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.550152][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.557295][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.672132][ T6507] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.679223][   T51] Bluetooth: hci2: command tx timeout
[  106.825890][ T6507] 8021q: adding VLAN 0 to HW filter on device team0
[  106.862420][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.869690][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.920378][  T993] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.927556][  T993] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.047974][ T5779] cgroup: fork rejected by pids controller in /syz3
[  107.081115][   T51] Bluetooth: hci3: command tx timeout
[  107.153773][ T6507] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  107.253557][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.300'.
[  107.339982][ T3522] IPVS: stop unused estimator thread 0...
[  107.486167][ T6657] syz_tun: entered promiscuous mode
[  107.506794][ T6656] syz_tun: left promiscuous mode
[  107.553977][ T6500] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.740560][ T6507] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.176765][ T2895] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.324632][ T2895] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.359529][ T6500] veth0_vlan: entered promiscuous mode
[  108.451404][ T2895] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.481651][ T6500] veth1_vlan: entered promiscuous mode
[  108.534585][ T6507] veth0_vlan: entered promiscuous mode
[  108.610194][ T2895] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.689898][ T6500] veth0_macvtap: entered promiscuous mode
[  108.720974][ T6507] veth1_vlan: entered promiscuous mode
[  108.772886][ T6500] veth1_macvtap: entered promiscuous mode
[  108.847575][ T6500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.862159][ T6500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.874155][ T6500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.885168][ T6500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.902154][ T6500] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.913605][ T6507] veth0_macvtap: entered promiscuous mode
[  108.933677][ T6507] veth1_macvtap: entered promiscuous mode
[  108.972274][ T6500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.990724][ T6500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.002893][ T6500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  109.018786][ T6500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.038221][ T6500] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.073777][ T6500] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.105158][ T6500] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.113914][ T6500] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.135149][ T6500] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.221135][ T5089] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  109.241019][ T5089] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  109.252534][ T5089] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  109.257719][ T6507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.261963][ T5089] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  109.279998][ T5089] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  109.280807][ T6507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.287440][ T5089] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  109.299153][ T6507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.325754][ T6507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.336563][ T6507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.350184][ T6507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.361563][ T6507] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.373785][ T6507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  109.384706][ T6507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.395775][ T6507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  109.406460][ T6507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.416386][ T6507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  109.426899][ T6507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.438371][ T6507] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.464298][ T6507] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.476410][ T6507] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.485825][ T6507] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.494567][ T6507] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.759078][ T2993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.767606][ T2993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.857676][  T993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.869905][  T993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.015551][ T3502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.023428][ T3502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.165379][ T2954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.201214][ T2954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.398698][ T6694] chnl_net:caif_netlink_parms(): no params data found
[  110.521290][ T6721] loop4: detected capacity change from 0 to 8
[  110.545889][ T6721] Filesystem uses "unknown" compression. This is not supported
[  110.589069][ T5783] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  110.866030][   T27] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  111.022051][ T2895] hsr_slave_0: left promiscuous mode
[  111.037286][ T2895] hsr_slave_1: left promiscuous mode
[  111.053637][ T2895] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.060980][   T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 82, changing to 10
[  111.070119][ T2895] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.091309][ T2895] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.092589][   T27] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  111.100255][ T2895] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.132195][   T27] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  111.142076][ T2895] bridge_slave_1: left allmulticast mode
[  111.150348][   T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.161299][ T2895] bridge_slave_1: left promiscuous mode
[  111.172324][   T27] usb 5-1: config 0 descriptor??
[  111.181796][ T2895] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.208700][ T6723] loop5: detected capacity change from 0 to 32768
[  111.220510][ T2895] bridge_slave_0: left allmulticast mode
[  111.237250][ T2895] bridge_slave_0: left promiscuous mode
[  111.243061][ T2895] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.301731][ T2895] veth1_macvtap: left promiscuous mode
[  111.309545][ T2895] veth0_macvtap: left promiscuous mode
[  111.316172][ T5089] Bluetooth: hci0: command tx timeout
[  111.316706][ T2895] veth1_vlan: left promiscuous mode
[  111.327882][ T2895] veth0_vlan: left promiscuous mode
[  111.642086][   T27] plantronics 0003:047F:FFFF.0002: unbalanced delimiter at end of report description
[  111.668482][   T27] plantronics 0003:047F:FFFF.0002: parse failed
[  111.680438][   T27] plantronics: probe of 0003:047F:FFFF.0002 failed with error -22
[  111.882143][    T9] usb 5-1: USB disconnect, device number 2
[  111.956856][ T6747] loop5: detected capacity change from 0 to 4096
[  111.972117][ T6747] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  112.000004][ T6747] ntfs: (device loop5): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  112.044656][ T6747] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  112.053788][ T6747] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  112.090374][ T6747] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  112.109287][ T6747] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  112.163543][ T6747] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  112.188455][ T6747] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  112.217604][ T6747] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  112.233118][ T6747] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  112.258224][ T6747] ntfs: volume version 3.1.
[  112.544596][ T2895] team0 (unregistering): Port device team_slave_1 removed
[  112.613612][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.311'.
[  112.631966][ T2895] team0 (unregistering): Port device team_slave_0 removed
[  112.691441][ T2895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  112.743885][ T2895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  113.042834][ T2895] bond0 (unregistering): Released all slaves
[  113.139780][ T6694] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.147451][ T6694] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.154633][ T6694] bridge_slave_0: entered allmulticast mode
[  113.165921][ T6694] bridge_slave_0: entered promiscuous mode
[  113.210614][ T6694] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.220562][ T6694] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.233363][ T6694] bridge_slave_1: entered allmulticast mode
[  113.250459][ T6694] bridge_slave_1: entered promiscuous mode
[  113.394960][ T5089] Bluetooth: hci0: command tx timeout
[  113.403328][ T6694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  113.485669][ T6694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  113.501650][ T6768] i2c i2c-0: Invalid 7-bit I2C address 0x00
[  113.629734][ T6694] team0: Port device team_slave_0 added
[  113.696193][ T6694] team0: Port device team_slave_1 added
[  113.835332][ T6694] batman_adv: batadv0: Adding interface: batadv_slave_0
[  113.860511][ T6694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.935088][ T6694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  113.980077][ T6694] batman_adv: batadv0: Adding interface: batadv_slave_1
[  113.998941][ T6694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.042499][ T6694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  114.109053][ T6786] loop4: detected capacity change from 0 to 1024
[  114.190047][ T6694] hsr_slave_0: entered promiscuous mode
[  114.220963][ T6694] hsr_slave_1: entered promiscuous mode
[  114.223942][ T6786] hfsplus: walked past end of dir
[  114.304611][ T2993] hfsplus: bad catalog file entry
[  114.598288][ T6776] loop0: detected capacity change from 0 to 40427
[  114.668152][ T6776] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  114.677027][ T6776] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  114.722050][ T6776] F2FS-fs (loop0): invalid crc value
[  114.968669][ T6776] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  114.984006][ T6776] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  115.137250][ T6815] program syz.5.329 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  115.154827][ T5778] syz-executor: attempt to access beyond end of device
[  115.154827][ T5778] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  115.188295][ T5778] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  115.429447][ T6694] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  115.453828][ T6694] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  115.475339][ T5089] Bluetooth: hci0: command tx timeout
[  115.487376][ T6694] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  115.498360][ T6694] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  115.640454][ T6694] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.699683][ T6694] 8021q: adding VLAN 0 to HW filter on device team0
[  115.743896][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.751109][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.803839][ T3522] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.811118][ T3522] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.313579][ T6694] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.449729][ T6694] veth0_vlan: entered promiscuous mode
[  116.487469][ T6694] veth1_vlan: entered promiscuous mode
[  116.565861][ T6694] veth0_macvtap: entered promiscuous mode
[  116.590904][ T6694] veth1_macvtap: entered promiscuous mode
[  116.620109][ T6861] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6
[  116.659466][ T6694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.670490][ T6694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.696173][ T6694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.710373][ T6694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.722153][ T6694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  116.732994][ T6694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.764610][ T6694] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.792725][ T6863] use of bytesused == 0 is deprecated and will be removed in the future,
[  116.804013][ T6863] use the actual size instead.
[  116.821408][ T6694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.852719][ T6694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.864313][ T6694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.875008][ T6694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.884829][ T6694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  116.895541][ T6694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  116.909269][ T6694] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.960034][ T6694] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.971379][ T6694] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.985606][ T6694] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.994345][ T6694] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.017753][ T6871] loop5: detected capacity change from 0 to 512
[  117.050069][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.343'.
[  117.094343][ T6870] netlink: 'syz.4.343': attribute type 20 has an invalid length.
[  117.106076][ T6871] EXT4-fs error (device loop5): ext4_do_update_inode:5268: inode #15: comm syz.5.344: corrupted inode contents
[  117.121136][ T6870] netlink: 'syz.4.343': attribute type 21 has an invalid length.
[  117.148100][ T6871] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[  117.234333][ T6871] EXT4-fs error (device loop5): ext4_do_update_inode:5268: inode #15: comm syz.5.344: corrupted inode contents
[  117.259552][ T3502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.269065][ T6871] EXT4-fs error (device loop5): ext4_evict_inode:302: inode #15: comm syz.5.344: mark_inode_dirty error
[  117.297493][ T6871] EXT4-fs (loop5): 1 orphan inode deleted
[  117.304669][ T6871] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.335620][ T3502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.407614][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.427607][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.491962][ T6507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.555054][ T5089] Bluetooth: hci0: command tx timeout
[  117.725449][ T6894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.303'.
[  117.849507][ T6903] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  117.950322][ T6909] Bluetooth: MGMT ver 1.22
[  118.060306][ T6913] sd 0:0:1:0: PR command failed: 1026
[  118.067551][ T6913] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  118.074304][ T6913] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  118.452106][ T6930] loop4: detected capacity change from 0 to 2048
[  118.547200][ T5793] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  118.586721][ T6935] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.365'.
[  118.921682][ T6947] i2c i2c-0: delete_device: Can't parse I2C address
[  119.054999][ T5823] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  119.183727][ T6963] loop3: detected capacity change from 0 to 24
[  119.221768][ T6963] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  119.265907][ T5823] usb 5-1: unable to get BOS descriptor or descriptor too short
[  119.288567][ T5823] usb 5-1: config 1 has an invalid descriptor of length 231, skipping remainder of the config
[  119.303137][ T6963] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  119.329939][ T5823] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  119.360198][ T5823] usb 5-1: New USB device found, idVendor=1235, idProduct=0401, bcdDevice= 0.40
[  119.385594][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.393656][ T5823] usb 5-1: Product: syz
[  119.424972][ T5823] usb 5-1: Manufacturer: syz
[  119.429638][ T5823] usb 5-1: SerialNumber: syz
[  119.707632][ T5823] usb 5-1: Quirk or no altest; falling back to MIDI 1.0
[  119.730747][ T5823] usb 5-1: MIDIStreaming interface descriptor not found
[  119.810634][ T6982] loop5: detected capacity change from 0 to 1024
[  119.858133][ T6982] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  119.871407][ T5823] usb 5-1: USB disconnect, device number 3
[  119.915004][ T6982] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  119.983711][ T6982] EXT4-fs (loop5): can't mount with journal_async_commit, fs mounted w/o journal
[  120.001155][ T6990] udevd[6990]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  120.067491][ T5783] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  120.244183][ T6996] loop0: detected capacity change from 0 to 2048
[  120.315949][ T6996] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  120.351298][ T7003] mmap: syz.3.385 (7003) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  120.729287][ T7018] 9p: Unknown access argument 18446744073709551615: -34
[  121.522343][ T7052] loop4: detected capacity change from 0 to 256
[  121.580939][ T7052] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  121.694983][   T28] kauditd_printk_skb: 9 callbacks suppressed
[  121.694998][   T28] audit: type=1400 audit(1790864932.197:27): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=7053 comm="syz.3.404" name="unknown" offset=16
[  121.974487][ T7062] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  122.038569][ T7062] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  122.525286][    T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  122.711031][ T7103] loop0: detected capacity change from 0 to 64
[  122.737003][    T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  122.790536][    T9] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  122.815709][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.840978][    T9] usb 4-1: Product: syz
[  122.851452][   T28] audit: type=1800 audit(1790864933.357:28): pid=7103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.418" name="file1" dev="loop0" ino=21 res=0 errno=0
[  122.858515][    T9] usb 4-1: Manufacturer: syz
[  122.888695][ T7106] loop4: detected capacity change from 0 to 512
[  122.908526][    T9] usb 4-1: SerialNumber: syz
[  122.958988][    T9] sisusb 4-1:1.0: Invalid USB2VGA device
[  122.985457][    T9] sisusb: probe of 4-1:1.0 failed with error -22
[  123.530147][ T7133] netlink: 12 bytes leftover after parsing attributes in process `syz.5.428'.
[  123.556416][ T7133] netlink: 84 bytes leftover after parsing attributes in process `syz.5.428'.
[  124.010523][ T7155] netlink: 16 bytes leftover after parsing attributes in process `syz.5.435'.
[  124.603615][ T7179] loop5: detected capacity change from 0 to 4096
[  124.685114][ T7187] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  124.791943][   T28] audit: type=1800 audit(1790864935.297:29): pid=7179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.442" name="file1" dev="loop5" ino=15 res=0 errno=0
[  124.854201][   T28] audit: type=1800 audit(1790864935.357:30): pid=7179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.442" name="file1" dev="loop5" ino=15 res=0 errno=0
[  125.312988][ T6599] usb 4-1: USB disconnect, device number 6
[  125.896368][   T28] audit: type=1326 audit(1790864936.407:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7239 comm="syz.0.463" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa21639e159 code=0x0
[  126.065284][ T7247] loop4: detected capacity change from 0 to 256
[  126.567569][ T7232] loop5: detected capacity change from 0 to 40427
[  126.603378][ T7232] F2FS-fs (loop5): Invalid SB checksum offset: 0
[  126.619479][ T7232] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  126.635451][ T7262] xt_hashlimit: size too large, truncated to 1048576
[  126.642760][ T7232] F2FS-fs (loop5): invalid crc value
[  126.916900][ T7232] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  126.923997][ T7232] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  127.162933][ T7282] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  127.396272][ T7286] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  128.002342][ T7303] kvm: kvm [7300]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0x1
[  128.991678][ T7330] loop0: detected capacity change from 0 to 256
[  129.138123][ T7330] FAT-fs (loop0): Directory bread(block 64) failed
[  129.147681][ T7330] FAT-fs (loop0): Directory bread(block 65) failed
[  129.154354][ T7330] FAT-fs (loop0): Directory bread(block 66) failed
[  129.172582][ T7330] FAT-fs (loop0): Directory bread(block 67) failed
[  129.179325][ T7330] FAT-fs (loop0): Directory bread(block 68) failed
[  129.187157][ T7330] FAT-fs (loop0): Directory bread(block 69) failed
[  129.194351][ T7330] FAT-fs (loop0): Directory bread(block 70) failed
[  129.204262][ T7330] FAT-fs (loop0): Directory bread(block 71) failed
[  129.220282][ T7330] FAT-fs (loop0): Directory bread(block 72) failed
[  129.228208][ T7330] FAT-fs (loop0): Directory bread(block 73) failed
[  129.260675][ T7319] loop5: detected capacity change from 0 to 40427
[  129.286390][ T7319] F2FS-fs (loop5): invalid crc value
[  129.304152][ T7319] F2FS-fs (loop5): Found nat_bits in checkpoint
[  129.367932][ T5824] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  129.440176][ T7319] F2FS-fs (loop5): Start checkpoint disabled!
[  129.485038][ T7319] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  129.605073][ T5824] usb 5-1: Using ep0 maxpacket: 32
[  129.612610][ T5824] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  129.644163][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.670214][ T5824] usb 5-1: config 0 descriptor??
[  129.792975][ T7341] netlink: 284 bytes leftover after parsing attributes in process `syz.0.493'.
[  129.865887][ T2895] kworker/u4:7: attempt to access beyond end of device
[  129.865887][ T2895] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  129.909222][ T2895] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  129.915532][ T5824] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  129.931304][ T2895] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  129.941485][ T5824] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  130.005494][ T5824] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  130.033237][ T5824] usb 5-1: media controller created
[  130.131614][ T5780] smpboot: CPU 1 is now offline
[  130.153681][ T5824] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  130.311365][ T5824] az6027: usb out operation failed. (-71)
[  130.378533][ T5824] az6027: usb out operation failed. (-71)
[  130.425006][ T5824] stb0899_attach: Driver disabled by Kconfig
[  130.449310][ T5824] az6027: no front-end attached
[  130.449310][ T5824] 
[  130.496764][ T5824] az6027: usb out operation failed. (-71)
[  130.523424][ T5824] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  130.573571][ T5824] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7
[  130.682586][ T5824] dvb-usb: schedule remote query interval to 400 msecs.
[  130.712547][ T5824] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  130.798299][ T5824] usb 5-1: USB disconnect, device number 4
[  130.846801][ T7360] Bluetooth: MGMT ver 1.22
[  130.886050][ T7360] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes
[  130.941697][ T5824] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  130.982250][ T7362] erspan0: entered promiscuous mode
[  131.640758][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  131.648817][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  131.903642][ T7371] loop5: detected capacity change from 0 to 32768
[  132.141903][ T7371] ERROR: (device loop5): dbAdjCtl: the maximum free buddy is not the old root
[  132.141903][ T7371] 
[  132.483062][ T7386] capability: warning: `syz.4.503' uses deprecated v2 capabilities in a way that may be insecure
[  132.570399][ T7397] netlink: 'syz.0.505': attribute type 10 has an invalid length.
[  132.596430][ T6507] BUG: Bad page state in process syz-executor  pfn:4a5e7
[  132.636956][ T6507] page:ffffea00012979c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x4a5e7
[  132.655016][ T7397] syz_tun: entered promiscuous mode
[  132.684660][ T6507] flags: 0xfff1800000820c(referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff)
[  132.751875][ T7397] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  132.764477][ T6507] page_type: 0xffffffff()
[  132.783293][ T6507] raw: 00fff1800000820c ffffea0001297988 ffffc90003267940 0000000000000000
[  132.808798][ T6507] raw: 0000000000000004 ffff88805fb4e000 00000000ffffffff 0000000000000000
[  132.857255][ T6507] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
[  132.890938][ T6507] page_owner tracks the page as allocated
[  132.921104][ T6507] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 7371, tgid 7369 (syz.5.499), ts 132138860831, free_ts 132074554550
[  132.976292][ T6507]  post_alloc_hook+0x1c1/0x200
[  132.991443][ T6507]  get_page_from_freelist+0x2181/0x22a0
[  133.018814][ T6507]  __alloc_pages+0x1f0/0x460
[  133.031344][ T6507]  folio_alloc+0x1e/0x30
[  133.041140][ T6507]  filemap_alloc_folio+0xdf/0x490
[  133.059664][ T6507]  do_read_cache_folio+0x381/0x7f0
[  133.076428][ T6507]  do_read_cache_page+0x32/0x260
[  133.089146][ T6507]  __get_metapage+0x31d/0xfa0
[  133.101924][ T6507]  dbAllocCtl+0xd2/0x980
[  133.110824][ T6507]  dbAllocAG+0xc46/0x1000
[  133.127789][ T6507]  dbDiscardAG+0x2c5/0x8e0
[  133.132327][ T6507]  jfs_ioc_trim+0x42c/0x670
[  133.143617][ T6507]  jfs_ioctl+0x292/0x3b0
[  133.154528][ T6507]  __se_sys_ioctl+0xfd/0x170
[  133.167628][ T6507]  do_syscall_64+0x55/0xb0
[  133.177694][ T6507]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  133.197923][ T6507] page last free stack trace:
[  133.225476][ T6507]  free_unref_page_prepare+0x7d7/0x8f0
[  133.234324][ T6507]  free_unref_page_list+0xbe/0x860
[  133.253696][ T6507]  release_pages+0x208a/0x2300
[  133.272495][ T6507]  __folio_batch_release+0x71/0xe0
[  133.305043][ T6507]  mapping_try_invalidate+0x46f/0x570
[  133.314520][ T6507]  reconfigure_super+0x45b/0x8e0
[  133.337069][ T6507]  path_mount+0xcfe/0xfa0
[  133.353628][ T6507]  __se_sys_mount+0x2e7/0x3d0
[  133.371845][ T6507]  do_syscall_64+0x55/0xb0
[  133.395879][ T6507]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  133.416233][ T6507] Modules linked in:
[  133.436908][ T6507] CPU: 0 PID: 6507 Comm: syz-executor Not tainted syzkaller #0
[  133.444526][ T6507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  133.454597][ T6507] Call Trace:
[  133.457866][ T6507]  <TASK>
[  133.460786][ T6507]  dump_stack_lvl+0x18c/0x250
[  133.465485][ T6507]  ? show_regs_print_info+0x20/0x20
[  133.470676][ T6507]  ? swiotlb_print_info+0x70/0x70
[  133.475704][ T6507]  bad_page+0x14b/0x170
[  133.479849][ T6507]  free_unref_page_prepare+0x884/0x8f0
[  133.485411][ T6507]  free_unref_page_list+0xbe/0x860
[  133.490508][ T6507]  ? __folio_memcg+0x63/0x170
[  133.495175][ T6507]  ? folio_memcg+0x127/0x4a0
[  133.499758][ T6507]  release_pages+0x208a/0x2300
[  133.504512][ T6507]  ? lru_cache_disable+0x30/0x30
[  133.509456][ T6507]  ? mlock_drain_local+0x79/0x490
[  133.514468][ T6507]  ? mlock_drain_local+0x79/0x490
[  133.519480][ T6507]  ? mlock_drain_local+0x28d/0x490
[  133.524581][ T6507]  __folio_batch_release+0x71/0xe0
[  133.529685][ T6507]  truncate_inode_pages_range+0x381/0xea0
[  133.535401][ T6507]  ? mapping_evict_folio+0x530/0x530
[  133.540686][ T6507]  ? do_raw_spin_unlock+0x121/0x230
[  133.545884][ T6507]  dbUnmount+0x109/0x180
[  133.550117][ T6507]  jfs_umount+0x235/0x3a0
[  133.554435][ T6507]  jfs_put_super+0x8c/0x190
[  133.558926][ T6507]  ? jfs_free_inode+0x30/0x30
[  133.563686][ T6507]  generic_shutdown_super+0x134/0x2b0
[  133.569068][ T6507]  kill_block_super+0x44/0x90
[  133.573730][ T6507]  deactivate_locked_super+0x97/0x100
[  133.579086][ T6507]  cleanup_mnt+0x3d7/0x460
[  133.583492][ T6507]  task_work_run+0x1d4/0x260
[  133.588072][ T6507]  ? task_work_cancel+0x220/0x220
[  133.593086][ T6507]  ? exit_to_user_mode_loop+0x3b/0x110
[  133.598545][ T6507]  exit_to_user_mode_loop+0xe6/0x110
[  133.603817][ T6507]  exit_to_user_mode_prepare+0xee/0x180
[  133.609350][ T6507]  syscall_exit_to_user_mode+0x1a/0x50
[  133.614796][ T6507]  do_syscall_64+0x61/0xb0
[  133.619201][ T6507]  ? clear_bhb_loop+0x40/0x90
[  133.623875][ T6507]  ? clear_bhb_loop+0x40/0x90
[  133.628566][ T6507]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  133.634450][ T6507] RIP: 0033:0x7f057079f397
[  133.638875][ T6507] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  133.658466][ T6507] RSP: 002b:00007ffc9db642f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  133.666865][ T6507] RAX: 0000000000000000 RBX: 00007f05708344bb RCX: 00007f057079f397
[  133.674821][ T6507] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc9db643b0
[  133.682799][ T6507] RBP: 00007ffc9db643b0 R08: 00007ffc9db653b0 R09: 00000000ffffffff
[  133.690777][ T6507] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc9db65440
[  133.698735][ T6507] R13: 00007f05708344bb R14: 00000000000204c7 R15: 00007ffc9db65480
[  133.706704][ T6507]  </TASK>
[  133.848663][ T6507] Disabling lock debugging due to kernel taint
[  133.862830][ T6507] BUG: Bad page state in process syz-executor  pfn:4a5e6
[  133.896812][ T6507] page:ffffea0001297980 refcount:0 mapcount:0 mapping:0000000000000000 index:0x3 pfn:0x4a5e6
[  133.919479][ T6507] flags: 0xfff1800000820c(referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff)
[  133.941128][ T6507] page_type: 0xffffffff()
[  133.950049][ T6507] raw: 00fff1800000820c ffffea0001299e88 ffffc90003267940 0000000000000000
[  133.972287][ T6507] raw: 0000000000000003 ffff88805fb4e3e0 00000000ffffffff 0000000000000000
[  133.992252][ T6507] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
[  134.012984][ T6507] page_owner tracks the page as allocated
[  134.030333][ T6507] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 7371, tgid 7369 (syz.5.499), ts 132134330633, free_ts 132074561391
[  134.051535][ T6507]  post_alloc_hook+0x1c1/0x200
[  134.056485][ T6507]  get_page_from_freelist+0x2181/0x22a0
[  134.062056][ T6507]  __alloc_pages+0x1f0/0x460
[  134.067544][ T6507]  folio_alloc+0x1e/0x30
[  134.071818][ T6507]  filemap_alloc_folio+0xdf/0x490
[  134.077023][ T6507]  do_read_cache_folio+0x381/0x7f0
[  134.082158][ T6507]  do_read_cache_page+0x32/0x260
[  134.088093][ T6507]  __get_metapage+0x31d/0xfa0
[  134.092812][ T6507]  dbAllocAG+0x3fa/0x1000
[  134.098389][ T6507]  dbDiscardAG+0x2c5/0x8e0
[  134.102837][ T6507]  jfs_ioc_trim+0x42c/0x670
[  134.110623][ T6507]  jfs_ioctl+0x292/0x3b0
[  134.115361][ T6507]  __se_sys_ioctl+0xfd/0x170
[  134.119988][ T6507]  do_syscall_64+0x55/0xb0
[  134.126761][ T6507]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  134.132714][ T6507] page last free stack trace:
[  134.137610][ T6507]  free_unref_page_prepare+0x7d7/0x8f0
[  134.143096][ T6507]  free_unref_page_list+0xbe/0x860
[  134.149109][ T6507]  release_pages+0x208a/0x2300
[  134.153989][ T6507]  __folio_batch_release+0x71/0xe0
[  134.159518][ T6507]  mapping_try_invalidate+0x46f/0x570
[  134.165697][ T6507]  reconfigure_super+0x45b/0x8e0
[  134.170663][ T6507]  path_mount+0xcfe/0xfa0
[  134.175210][ T6507]  __se_sys_mount+0x2e7/0x3d0
[  134.179948][ T6507]  do_syscall_64+0x55/0xb0
[  134.184382][ T6507]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  134.193864][ T6507] Modules linked in:
[  134.199066][ T6507] CPU: 0 PID: 6507 Comm: syz-executor Tainted: G    B              syzkaller #0
[  134.208081][ T6507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  134.218118][ T6507] Call Trace:
[  134.221380][ T6507]  <TASK>
[  134.224295][ T6507]  dump_stack_lvl+0x18c/0x250
[  134.228961][ T6507]  ? show_regs_print_info+0x20/0x20
[  134.234141][ T6507]  ? swiotlb_print_info+0x70/0x70
[  134.239151][ T6507]  bad_page+0x14b/0x170
[  134.243316][ T6507]  free_unref_page_prepare+0x884/0x8f0
[  134.248770][ T6507]  free_unref_page_list+0xbe/0x860
[  134.253864][ T6507]  ? __folio_memcg+0x63/0x170
[  134.258526][ T6507]  ? folio_memcg+0x127/0x4a0
[  134.263104][ T6507]  release_pages+0x208a/0x2300
[  134.267851][ T6507]  ? lru_cache_disable+0x30/0x30
[  134.272794][ T6507]  ? mlock_drain_local+0x79/0x490
[  134.277891][ T6507]  ? mlock_drain_local+0x79/0x490
[  134.282909][ T6507]  ? mlock_drain_local+0x28d/0x490
[  134.288005][ T6507]  __folio_batch_release+0x71/0xe0
[  134.293101][ T6507]  truncate_inode_pages_range+0x381/0xea0
[  134.298807][ T6507]  ? mapping_evict_folio+0x530/0x530
[  134.304079][ T6507]  ? do_raw_spin_unlock+0x121/0x230
[  134.309291][ T6507]  dbUnmount+0x109/0x180
[  134.313523][ T6507]  jfs_umount+0x235/0x3a0
[  134.317855][ T6507]  jfs_put_super+0x8c/0x190
[  134.322343][ T6507]  ? jfs_free_inode+0x30/0x30
[  134.327060][ T6507]  generic_shutdown_super+0x134/0x2b0
[  134.332438][ T6507]  kill_block_super+0x44/0x90
[  134.337096][ T6507]  deactivate_locked_super+0x97/0x100
[  134.342450][ T6507]  cleanup_mnt+0x3d7/0x460
[  134.346854][ T6507]  task_work_run+0x1d4/0x260
[  134.351453][ T6507]  ? task_work_cancel+0x220/0x220
[  134.356469][ T6507]  ? exit_to_user_mode_loop+0x3b/0x110
[  134.361939][ T6507]  exit_to_user_mode_loop+0xe6/0x110
[  134.367209][ T6507]  exit_to_user_mode_prepare+0xee/0x180
[  134.372743][ T6507]  syscall_exit_to_user_mode+0x1a/0x50
[  134.378185][ T6507]  do_syscall_64+0x61/0xb0
[  134.382585][ T6507]  ? clear_bhb_loop+0x40/0x90
[  134.387254][ T6507]  ? clear_bhb_loop+0x40/0x90
[  134.391915][ T6507]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  134.397796][ T6507] RIP: 0033:0x7f057079f397
[  134.402193][ T6507] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  134.421933][ T6507] RSP: 002b:00007ffc9db642f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  134.430428][ T6507] RAX: 0000000000000000 RBX: 00007f05708344bb RCX: 00007f057079f397
[  134.438384][ T6507] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc9db643b0
[  134.446338][ T6507] RBP: 00007ffc9db643b0 R08: 00007ffc9db653b0 R09: 00000000ffffffff
[  134.454313][ T6507] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc9db65440
[  134.462365][ T6507] R13: 00007f05708344bb R14: 00000000000204c7 R15: 00007ffc9db65480
[  134.470337][ T6507]  </TASK>