last executing test programs:

1m18.224463016s ago: executing program 2 (id=1016):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c0000001200010329bd7000000000000007002d4e2310000000010000000000810000000000e7ff01000000fdffffff0000010000000000", @ANYRES32=0x0, @ANYBLOB="00000000ff7f000007"], 0x4c}, 0x1, 0x0, 0x0, 0x3dd66fec0ddfba6f}, 0x40000)

1m17.842140005s ago: executing program 2 (id=1018):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31ac", 0x25}], 0x1}, 0x0)

1m17.647186869s ago: executing program 2 (id=1020):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x0, 0x8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x12, 0x1f}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x0)

1m17.61642838s ago: executing program 2 (id=1021):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@errors_remount}, {@data_journal}, {@norecovery}]}, 0x3, 0x481, &(0x7f00000004c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})

1m17.480941803s ago: executing program 2 (id=1023):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x4, 0xfff1}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x429e01ac}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40010)

1m16.69072621s ago: executing program 2 (id=1032):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x0, 0x8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x12, 0x1f}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x0)

1m16.658212991s ago: executing program 32 (id=1032):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x0, 0x8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x12, 0x1f}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x0)

42.19880319s ago: executing program 0 (id=1224):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="90000000000201"], 0x90}, 0x1, 0x0, 0x0, 0x24000801}, 0x4)

42.150720091s ago: executing program 0 (id=1227):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="08010000190001000000000004000000ac1414bb000000000000000000000000fe8000000000000000000000000000a80000fffe00000084020000003b000000", @ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="0600000000000000070000000000000009000000000000000100010000000000000000000000000002000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000b96b6e"], 0x108}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

42.144694252s ago: executing program 0 (id=1228):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="b70000000000000007000000000000009500000000000000bdc5072e4c75223f007e6ca306000000000000009c91420b66f0980e90dc0a9900d145243692fe648adf4cbc1dc631c378820861eccfa60822e798d6526600eea6c33dd5b2a7762091bffe56a9440bf23deb4dc8947d2bafec88ae3708013fdc5b2a1dbc7d50fcb6d9a01d03491c35fee5ff00002e40db34dea1063eaf2e3d6959435775943a5a7090b1c08454a248811ed0850a0e16793732f7c9af95af00100000955133044fd041b55379c29cc8ca9e1e5223ceb6f2e4980e5be2d3f36ae968af01953b6e4b3aa3fe0c375b2e17019ccdf4b9b5caccc4722cf3e6cfa6567c5a8e01bf465f0a27e54911827c4fa432ca89bf5ac89effedbe12b66ce9643697ac0e12a966dcea592613f479d71eb2597dd9000000000000000000000000001d5bdafcd419016b45507fedc616a94a06268d9b21e956eabc"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000009000)=r1, 0x4)

42.114591482s ago: executing program 0 (id=1229):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020)

42.050839594s ago: executing program 0 (id=1231):
syz_clone(0x0, 0x0, 0xfc, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00')
pread64(r0, &(0x7f0000001300)=""/4103, 0x1007, 0x4)
ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0)

41.278472001s ago: executing program 0 (id=1238):
r0 = fanotify_init(0x40, 0x40000)
readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/152, 0x98}], 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x10b880, 0x97)
fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
getdents64(r1, &(0x7f00000000c0)=""/174, 0xae)

41.250256201s ago: executing program 33 (id=1238):
r0 = fanotify_init(0x40, 0x40000)
readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/152, 0x98}], 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x10b880, 0x97)
fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
getdents64(r1, &(0x7f00000000c0)=""/174, 0xae)

10.019224619s ago: executing program 1 (id=1518):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff})
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, 0xffffffffffffffff)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000006c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x138)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400))
unshare(0x6020400)
pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x80000000000, 0x5, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xfffffffffffffffd, 0x9, 0x0, 0x8000000000000f, 0x80000006}, 0x0, 0x0)
ioprio_get$pid(0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.627900869s ago: executing program 4 (id=1555):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0xc0844123, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000000))

3.957060783s ago: executing program 6 (id=1563):
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000000)='./file0\x00', 0x3010052, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x8, 0x4000040000ccaa, 0xfffffffffffffff9})

3.886389184s ago: executing program 6 (id=1566):
setresuid(0xee01, 0x0, 0x0)
pipe2$watch_queue(0x0, 0x80)
r0 = syz_open_dev$evdev(0x0, 0xe949, 0x593241)
ioctl$EVIOCGRAB(r0, 0x40044590, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0xffffffffffffff3c, &(0x7f0000000100)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='R', 0x1, 0x7ffffffe)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

2.632050442s ago: executing program 4 (id=1567):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbf, {0x0, 0x0, 0x0, r5, {0x5, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0x6}, {{0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0x1}, {0x8, 0x1, 0x7, 0x2, 0x5, 0x1, 0x1}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)="70b7", 0x2}], 0x1}, 0x0)

2.554709834s ago: executing program 6 (id=1569):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64asumCJWPBPEEisWPIbWMASdogFiB1SkWcm0KQNtI3jqO3zSDNn5vj1mXdGlqUzYzmAZ9ZC+sdvSZyIIxExFxHHk8i3k3KJuBNxsRj7QkScjIjKPUtS5v9OHIyIoxFxYlK8qJmUL31xenzq/K9v//7t94cOHPvymx/29cSBffViRPRXi+3b/SJmnSLeKPONcTeP/XPjMq5uqdHPivzt9kpe4XZjc1wjj2c7xfhs9dZwEq/3Gs1J7HSv5/nVQXHA4bizWWfyhvRGYy3fb7VX8tgdZnnsbBTHXd8ovts2hqOiTqus90lePkajzVjk2+vt4nxWb+axORiV+aJu1mqvT+K4jOXhopn1Wvk8Vh7zIj8B3ukObq2n4/basJsN0vO1+ku1+oVqfS1rtUftc9VGv3XhXLrY6U2GVUftRv9iJ8s6vXatmfWX0sVOs1mt19PFS+2VbmOQ1uu1s7Uz1fNL5dbp9I2rH6S9Vro4ia91B7dG3d4wvZ6tpcU7ltLl2tmXl9JT9fS9K9fSa+9evnzl2vsfXfrw6qtX3nq9HHTftNLF5TPLy9X6mepyfekZOv9Py0k/wvknD07/9OPuLhsUdviAAbCz+/r/2N7/h/4fmLrd9P/9m+X+3vT/8TD9f0yz/5+0VPr//+5/K4/U/56YSv87H/r/PTx/2JXH6/8PTn0eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADM3M/zX72ZbywU+8fK/P/K1HPlfhIRlYi4+wBzcXBLzbmyzvwO4+e3zeG7JPIKk2McKpejEXGxXP78/15fBQAAAHh6fX3n5OdFt16sFvZ7QsxScdOmcvzjKdVLImJ+4ZcpVatMVs9PqVj++T4Q61Oqlt/AOjylYsUttwPTqvZQ5raEw/eEpAiVmU4HAACYia2dwGy7EAAAAGbps3999ZWZzYMZS2LzUebms+D8l/f/PBA8Mlnd3fbjfgAAAOBJkuz3BAAAAIA9l/f//v8PAAAAnm7F//8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBf7NzPjdpAFAfgZ4OB/FNQlHtayQ3KSAk55hgoIE1QAmkhDVADkXJICStYYc8ieRek1TLGWvR9ku2d8ernGeDyxtIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXfpbree/f375dWnObn+ZPLMBAAAATtlW63n9x7Rpv0v9H1LXp9QuIqKMiFO1+yBGrcxByqnO/H/1aAx/IuqEQ/84HW8j4ms67j52/SkAAADA7dosV7OmWm9OaQngX7+j4kqaRZvy/bdMeUVEVNP/mdLKw+lzprD69z2MH5nS6gWsSaawZsltePreKNdD2gaty8NMFvWXWLfKbp4LAAD0qV0JnKlCAAAAuAHf+x4A1/C0tC+Op+N7xnFzSS8E37RaAAAAwCtU9D0AAAAAoHN1/d/N/n+TF+3/V9j/DwAAALJr9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS9tqPd8sV7Nz9xfPzNntL5NvRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9+zPOwqEQBiEwd71ncnc/7DSoKGxSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvfveX/xNT40wy99pYeh5J1k6NrVNj79w4+sP4+jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsT8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsW//vm1UcQDA3/lspylUhIAiEUAFdYCFpm5p6YoQKGLgT0CKUqcEXAptBlpFlCxsKHMXBAsSQkigsOV/6NxIXcrWIUOQmBiC7lf6nJgmpO05TT8f6fl9/Xx5P86Wla/fHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQWX83vNIo4zR7GCviqu32xuJsVq9tqzOry3cms5LFyUjVeuz1+mZ/oL0aPzk+MbyJAAAAcFgc2/WItMrvQwh3WyvTWd0Yy/P/VnVMlvP/UHaVlG3b8/61jcUj5UuTVf7/x+/3XtwaaCzNx8k6nZvvdU/tnEpz38t8wj236xHN/Mznv72k+RvS+HDphfVWfj6T727der+dhyN1zBYA2I+TVV0G1f9DWd0Z5sQAeGo0o8S7yv/TseHOCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAO60vhmSpOQgiTzftxZm1jcXZQ/c3yncnVspy7eXM57jProhVCmJvvdU/VuJaDqzqb1z+b6fW6V65eqzs4HkIY8NKNvf15Wk7/P49phxD6Wk68NKCfj/cw1rZ+dgTlxzPUew5Hs/XtenDS15LsOOHvbRaG8QGoK2iU78/jGGK09ve9P6g+e4++5//zXTLyaL6SAAA41FplyTLRu62V6awtGQ9h88f+/P+NKA59ef/mjaKleL4a5f/3Pjl3Ox4rzv87Na3vSTC1cOmLqavXrr81f2nmYvdi9/O3T3fe6Zw5f/bs+an8t5KpudDwiwkAAAAPoV2WOP8fHbD/fzSKwwP2/4st4SL///L7ztfxWKn8f6D7m37DngkAAMDTqL0VPf/a338lA45I2u3w1czCwpVO8bj1/HTxWOt092mkLHH+n44Pe1YAAABAHdaXkr79/wtRHB6w/x9f///szy//GveZFtcWXA4hdE/OXu5dqG85B1r/Tb8/pY/jRuV8oPawVwoAAMCwjJYl3v9vjWf5f2PrkodGCOHNEyH8U97DH/aY/6cffPtLPFZ8/f+ZWld58DQmivOR1xMhNCeGPSMAAAAOsyNlyZL9P1sr05/+dvSjtuv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr2bwAAAP//aR4tAA==")
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
syz_clone3(&(0x7f0000000000)={0x148005200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

2.511975625s ago: executing program 3 (id=1571):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000054000185a7bd70000300000007000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="000203000000000000000000000000000000000086dd"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x40084c0)

2.351038708s ago: executing program 1 (id=1573):
r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file1\x00', 0x2048c5, &(0x7f00000002c0)={[{@fat=@quiet}, {@fat=@flush}, {@fat=@sys_immutable}, {@numtail}, {@shortname_mixed}, {@shortname_mixed}, {@fat=@tz_utc}, {@shortname_mixed}, {@uni_xlate}, {@uni_xlate}, {@numtail}, {@rodir}, {@shortname_winnt}]}, 0x1, 0x2b4, &(0x7f0000000e40)="$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")
openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff)

2.350870698s ago: executing program 1 (id=1574):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x189802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x41)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0)

2.316892919s ago: executing program 3 (id=1576):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x58a, &(0x7f0000000680)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000002c80))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

2.303874689s ago: executing program 4 (id=1577):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0xc0844123, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000000))

2.257631221s ago: executing program 5 (id=1578):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f140000001100"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a0101000000000000e54b0a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010000000000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r2, 0xffffffffffffffff, 0x0)

2.215005462s ago: executing program 1 (id=1579):
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000000c0)={[{@umask={'umask', 0x3d, 0x6}}, {@discard}, {@fmask={'fmask', 0x3d, 0x3}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@gid}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@namecase}, {@errors_remount}, {@errors_continue}]}, 0x1, 0x1533, &(0x7f0000006800)="$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")
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

2.178234462s ago: executing program 1 (id=1580):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x800c4, 0xf7)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0xc2)
write$FUSE_IOCTL(r2, &(0x7f00000000c0)={0x20, 0xffffffffffffffda, 0x0, {0x5, 0x4, 0x408, 0xe3}}, 0x20)
sendfile(r2, r0, 0x0, 0x3ffff)
sendfile(r2, r0, 0x0, 0x7ffff000)

1.862525729s ago: executing program 3 (id=1581):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94)
r1 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$binfmt_register(r1, 0x0, 0x0)

1.775012211s ago: executing program 5 (id=1582):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x75, 0x140341)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0xfffffffffffffeb2)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

1.774728321s ago: executing program 3 (id=1583):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

1.716154992s ago: executing program 6 (id=1584):
syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="696f636861727365743d63703836322c757466383d302c696f636861727365743d63703934392c757466383d312c696f636861727365743d63703835372c757466383d302c757466383d302c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c636f6465706167653d3837342c696f636861727365743d63703836312c73686f72746e616d653d6c6f7765722c757466383d312c726f6469722c757466383d302c757466383d302c00c3e37a4e033e6d607e218c01b5b7ac5a5f7d1037c9e796494a0b2d1d97ae34b53df360c4d254040c"], 0xfd, 0x2b2, &(0x7f00000005c0)="$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")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c666c7573682c646d61736b3d30303030303030303030303030303030303137373737372c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c757466383d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d312c726f6469722c696f636861727365743d757466382c666d61736b3d30303030303030303030303030303030303030303030342c646d61736b3d30303030303030303030303030303030303030303030372c757466383d312c726f6469722c73686f72746e616d653d77696e39352c726f6469722c00743ccfec81d6c7d05b0f2a54ddce151ec4cbbaacb9552647fd950fedfdc024b3953e7669bc9d4f66e3beaecb80fe73633280b1d3e82023d4f5c7f5a4989406c0f0d0cf537f132dc1e63d84a17532cb78ae7a368bc0029207b9b166705972f4e8dad041e6be170bf43057b456d43f100c53b471aa6c8e3751", @ANYRESHEX], 0x1, 0x2c2, &(0x7f00000006c0)="$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")
keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000000)='id:cb2e')
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

1.667852263s ago: executing program 5 (id=1585):
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
read$eventfd(r0, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r1)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r1)
sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030f000000000000000008"], 0x2c}}, 0x0)

1.322820681s ago: executing program 3 (id=1586):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000054000185a7bd70000300000007000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="000203000000000000000000000000000000000086dd"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x40084c0)

1.322279451s ago: executing program 4 (id=1587):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbf, {0x0, 0x0, 0x0, r5, {0x5, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0x6}, {{0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0x1}, {0x8, 0x1, 0x7, 0x2, 0x5, 0x1, 0x1}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)="70b7", 0x2}], 0x1}, 0x0)

1.207006584s ago: executing program 6 (id=1588):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000040))
write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000001"], 0xc)

1.206770464s ago: executing program 5 (id=1589):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setreuid(0x0, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x11, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40000600}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20}, {}, {0x4}}, {}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x1}, 0x94)

1.205768964s ago: executing program 3 (id=1590):
syz_usb_connect$hid(0x1, 0x36, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$setown(r4, 0x8, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

1.197644084s ago: executing program 5 (id=1591):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000280)=[{{&(0x7f0000000240)={0x2, 0x4e01, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'], 0x38}}], 0x1, 0x46000)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00))
chdir(0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x3dd66fec0ddfba6f}, 0x40000)

1.092108456s ago: executing program 6 (id=1592):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', <r1=>0x0})
syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x6, 0x0, 0x1c, {0x8, 0xb, 0x0, 0x1, 0x1, 0x21}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0xa, 0xf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x3, 0x7, 0x5, {0xa, 0x25, 0x25, 0x9, 0x8, 0x25a}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xfb, 0x7, 0x8, {0xa, 0x25, 0x25, 0x6b, 0xfd, 0x7}}}}}}}}]}}, 0x0)
sendto$packet(r0, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14)

65.365119ms ago: executing program 1 (id=1593):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
exit(0x7)
tkill(r0, 0x12)
wait4(0x0, 0x0, 0x8, 0x0)

61.639419ms ago: executing program 5 (id=1594):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x80401c, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5531, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
lseek(r0, 0xffffffffffff7ffd, 0x1)

50.718109ms ago: executing program 4 (id=1595):
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000000)='./file0\x00', 0x3010052, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82)
ioctl$FITRIM(r0, 0xc0185879, 0x0)

0s ago: executing program 4 (id=1596):
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x20, 0x1a8, &(0x7f00000003c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40)
read$FUSE(r0, &(0x7f0000003fc0)={0x2020}, 0x2020)

kernel console output (not intermixed with test programs):

02][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   35.216205][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   35.218071][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.224788][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   35.226658][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.228319][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   35.230528][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.232135][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   35.233794][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   35.247219][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1
[   35.251184][ T4412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'.
[   35.624198][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   35.626036][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   35.641102][ T4419] netlink: 'syz.3.4': attribute type 10 has an invalid length.
[   35.646768][ T4419] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   35.648512][ T4424] tap0: tun_chr_ioctl cmd 1074025677
[   35.649669][ T4424] tap0: linktype set to 776
[   35.658980][ T4326] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   35.661685][ T4326] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   35.663236][ T4326] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   35.664789][ T4326] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   35.731015][ T4390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.732767][ T4390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.734999][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   35.745569][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.747025][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.748760][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   35.786293][ T4435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   35.787812][ T4435] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   36.099414][   T47] Bluetooth: hci0: command 0x041b tx timeout
[   36.100593][   T47] Bluetooth: hci3: command 0x041b tx timeout
[   36.101648][   T47] Bluetooth: hci4: command 0x041b tx timeout
[   36.110916][ T4330] Bluetooth: hci1: command 0x041b tx timeout
[   36.111994][ T4330] Bluetooth: hci2: command 0x041b tx timeout
[   36.681606][ T4473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   36.682660][ T4472] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   36.683414][ T4473] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   36.729453][ T4478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   36.732259][ T4478] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   36.818232][ T4484] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   36.819750][ T4484] batman_adv: batadv0: Removing interface: batadv_slave_0
[   36.822169][ T4484] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   36.823310][ T4484] batman_adv: batadv0: Removing interface: batadv_slave_1
[   37.508312][ T4497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.33'.
[   37.509821][ T4497] tipc: Enabling of bearer <Vdp:s> rejected, media not registered
[   37.686995][ T4501] netlink: 16 bytes leftover after parsing attributes in process `syz.3.34'.
[   37.691049][ T4501] netlink: 16 bytes leftover after parsing attributes in process `syz.3.34'.
[   37.874671][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   37.876623][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   37.960345][ T4500] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   38.160456][   T47] Bluetooth: hci2: command 0x040f tx timeout
[   38.160457][ T4337] Bluetooth: hci4: command 0x040f tx timeout
[   38.160482][   T47] Bluetooth: hci3: command 0x040f tx timeout
[   38.161556][ T4337] Bluetooth: hci0: command 0x040f tx timeout
[   38.162626][ T4330] Bluetooth: hci1: command 0x040f tx timeout
[   38.941213][ T4538] device veth1_to_batadv entered promiscuous mode
[   38.942836][ T4538] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[   39.178753][ T4554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.54'.
[   39.182659][ T4554] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   39.184231][ T4554] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   39.185836][ T4554] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   39.187318][ T4554] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   39.189573][ T4554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.54'.
[   39.191892][ T4554] Zero length message leads to an empty skb
[   39.194969][ T4554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.54'.
[   39.540355][ T4373] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   39.602293][ T4575] raw_sendmsg: syz.3.63 forgot to set AF_INET. Fix it!
[   39.722575][ T4373] usb 1-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[   39.724432][ T4373] usb 1-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   39.728288][ T4373] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[   39.730167][ T4373] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[   39.732535][ T4373] usb 1-1: Manufacturer: syz
[   39.735936][ T4373] usb 1-1: SerialNumber: syz
[   40.153212][ T4373] usbhid 1-1:36.0: couldn't find an input interrupt endpoint
[   40.156932][ T4373] usb 1-1: USB disconnect, device number 2
[   40.174163][ T4594] loop7: detected capacity change from 0 to 16384
[   40.240607][ T4330] Bluetooth: hci0: command 0x0419 tx timeout
[   40.240853][ T4335] Bluetooth: hci1: command 0x0419 tx timeout
[   40.242271][   T47] Bluetooth: hci3: command 0x0419 tx timeout
[   40.242649][ T4335] Bluetooth: hci4: command 0x0419 tx timeout
[   40.243962][ T4337] Bluetooth: hci2: command 0x0419 tx timeout
[   40.305526][ T4594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   40.307626][ T4594] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   40.553089][ T4598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.70'.
[   41.298669][ T4625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.81'.
[   41.300393][ T4625] tipc: Enabling of bearer <Vdp:s> rejected, media not registered
[   41.406634][ T4611] fuse: Unknown parameter ''
[   42.219308][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   42.221524][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   42.312767][ T4635] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   42.378077][ T4647] netlink: 'syz.1.87': attribute type 4 has an invalid length.
[   42.667766][ T4661] block device autoloading is deprecated and will be removed.
[   43.614459][ T4684] netlink: 'syz.1.99': attribute type 4 has an invalid length.
[   44.232358][ T4715] Cannot find set identified by id 1 to match
[   44.232558][ T4726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.119'.
[   44.259100][ T4728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   44.261866][ T4728] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   44.547008][ T4733] netlink: 16 bytes leftover after parsing attributes in process `syz.4.122'.
[   44.870544][ T4735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   44.873355][ T4735] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   45.044275][ T4758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.133'.
[   45.094207][ T4764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.135'.
[   45.095880][ T4764] tipc: Enabling of bearer <Vdp:s> rejected, media not registered
[   45.142792][ T4765] netlink: 84 bytes leftover after parsing attributes in process `syz.3.131'.
[   45.330829][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   45.330997][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   45.360976][ T4776] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   46.384871][ T4841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.159'.
[   47.330386][ T4950] usb usb8: usbfs: process 4950 (syz.3.173) did not claim interface 0 before use
[   47.911542][  T112] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   47.915173][  T112] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   47.943848][ T4974] vxcan1: tx drop: invalid sa for name 0xffffffffffffffff
[   48.527958][ T4995] netlink: 40 bytes leftover after parsing attributes in process `syz.1.192'.
[   48.740017][ T5021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.202'.
[   48.861020][ T5024] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   48.866134][ T5024] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   48.884262][ T5024] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   48.886226][ T5024] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   49.050643][ T5024] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   49.064133][ T5023] netlink: 40 bytes leftover after parsing attributes in process `syz.0.203'.
[   49.158154][ T5038] vxcan1: tx drop: invalid sa for name 0xffffffffffffffff
[   49.180907][ T5037] tipc: Failed to remove unknown binding: 66,0,0/0:73669021/73669023
[   49.182554][ T5037] tipc: Failed to remove unknown binding: 66,0,0/0:73669021/73669022
[   49.285100][ T5052] netlink: 24 bytes leftover after parsing attributes in process `syz.2.215'.
[   49.381647][ T5066] vxcan1: tx drop: invalid sa for name 0xffffffffffffffff
[   49.532832][ T5083] netlink: 24 bytes leftover after parsing attributes in process `syz.4.229'.
[   49.989515][ T5096] vxcan1: tx drop: invalid sa for name 0xffffffffffffffff
[   50.198342][ T5114] 8021q: VLANs not supported on gre0
[   50.522693][ T5145] 8021q: VLANs not supported on gre0
[   50.552892][ T5149] bond0: option miimon: invalid value (18446744072118702920)
[   50.554393][ T5149] bond0: option miimon: allowed values 0 - 2147483647
[   50.943000][ T5160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.945544][ T5160] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   50.954078][ T5160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.956369][ T5160] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.051803][ T5172] netlink: 24 bytes leftover after parsing attributes in process `syz.3.266'.
[   51.155269][ T5180] netlink: 24 bytes leftover after parsing attributes in process `syz.3.271'.
[   51.296842][   T22] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   51.298853][   T22] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   51.493168][ T5199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.278'.
[   51.523971][ T5202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.279'.
[   51.758617][  T112] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   51.767642][  T112] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   52.195178][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   52.370303][ T5250] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   52.504019][  T112] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   52.506316][  T112] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   52.576764][ T5275] netlink: 24 bytes leftover after parsing attributes in process `syz.3.309'.
[   52.912979][ T4377] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   52.915718][ T4377] hid-generic 0000:0000:0000.0005: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   53.154560][ T5299] tipc: Started in network mode
[   53.158396][ T5299] tipc: Node identity 2a654fb8afd4, cluster identity 4711
[   53.159879][ T5299] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   53.165351][ T5299] device syzkaller0 entered promiscuous mode
[   53.178204][ T5299] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[   53.715360][ T5299] tipc: Resetting bearer <eth:syzkaller0>
[   53.731246][ T5297] tipc: Resetting bearer <eth:syzkaller0>
[   53.830863][ T5297] tipc: Disabling bearer <eth:syzkaller0>
[   53.948217][  T112] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   53.953210][  T112] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   53.958609][  T112] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[   53.966420][  T112] hid-generic 0000:0000:0000.0007: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   54.279666][ T5346] tipc: Started in network mode
[   54.286035][ T5346] tipc: Node identity 1e6925e8e3e, cluster identity 4711
[   54.288219][ T5346] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   54.289995][ T5346] device syzkaller0 entered promiscuous mode
[   54.297595][ T5346] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[   54.748325][ T5361] tipc: Resetting bearer <eth:syzkaller0>
[   54.766006][ T5345] tipc: Resetting bearer <eth:syzkaller0>
[   55.198436][ T5345] tipc: Disabling bearer <eth:syzkaller0>
[   55.248790][ T4371] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[   55.255708][ T4371] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   55.345107][ T5390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.350'.
[   55.348431][ T5390] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   55.350018][ T5390] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   55.351749][ T5390] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   55.353180][ T5390] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   55.355548][ T5390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.350'.
[   55.378029][ T5390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.350'.
[   55.398310][ T4373] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[   55.404375][ T4373] hid-generic 0000:0000:0000.0009: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   55.413901][ T5391] loop3: detected capacity change from 0 to 256
[   55.422946][ T5391] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   55.457299][ T5396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   55.459049][ T5396] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   55.609876][ T5406] netlink: 40 bytes leftover after parsing attributes in process `syz.1.355'.
[   55.756254][ T5408] netlink: 24 bytes leftover after parsing attributes in process `syz.4.357'.
[   55.872529][ T5420] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   55.874216][ T5420] device syzkaller0 entered promiscuous mode
[   55.877367][ T5420] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[   55.923975][ T1517] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[   55.926207][ T1517] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   55.955998][ T5430] fido_id[5430]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   56.011910][ T5420] tipc: Resetting bearer <eth:syzkaller0>
[   56.016234][ T5419] tipc: Resetting bearer <eth:syzkaller0>
[   56.130955][ T5419] tipc: Disabling bearer <eth:syzkaller0>
[   56.168655][ T5441] netlink: 24 bytes leftover after parsing attributes in process `syz.2.369'.
[   56.247180][ T5460] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[5461] was attempted by "ci2-linux-6-1-kasan-arm64/syz-executor exec"[5460]
[   56.433772][ T5482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.379'.
[   56.514795][ T5495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   56.516481][ T5495] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   56.642097][ T5499] mmap: syz.3.382 (5499) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   57.037955][ T5505] loop4: detected capacity change from 0 to 4096
[   57.056406][ T5505] EXT4-fs (loop4): Test dummy encryption mode enabled
[   57.059869][ T5505] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103]
[   57.063323][ T5505] System zones: 0-5
[   57.066189][ T5505] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   57.132623][ T4326] EXT4-fs (loop4): unmounting filesystem.
[   57.498630][ T5548] __nla_validate_parse: 2 callbacks suppressed
[   57.498642][ T5548] netlink: 24 bytes leftover after parsing attributes in process `syz.4.400'.
[   57.582034][ T5554] netlink: 990 bytes leftover after parsing attributes in process `syz.4.404'.
[   57.720015][ T5566] binder: 5565:5566 tried to acquire reference to desc 0, got 1 instead
[   57.725785][   T22] binder: release 5565:5566 transaction 5 out, still active
[   57.760815][   T22] binder: undelivered TRANSACTION_COMPLETE
[   57.780075][ T5570] device syzkaller0 entered promiscuous mode
[   57.785642][ T5569] tipc: Started in network mode
[   57.786528][ T5569] tipc: Node identity 2619b6bfea9a, cluster identity 4711
[   57.787882][ T5569] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   57.790506][ T5569] device syzkaller0 entered promiscuous mode
[   57.790663][   T22] binder: send failed reply for transaction 5, target dead
[   57.877584][ T5532] loop0: detected capacity change from 0 to 131072
[   57.883585][ T5532] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945)
[   57.885498][ T5532] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   57.887857][ T5532] F2FS-fs (loop0): invalid crc value
[   57.893635][ T5569] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[   57.907242][ T5532] F2FS-fs (loop0): Found nat_bits in checkpoint
[   57.938391][ T5532] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   57.939862][ T5532] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   57.972263][ T5575] tipc: Resetting bearer <eth:syzkaller0>
[   57.977308][ T5567] tipc: Resetting bearer <eth:syzkaller0>
[   57.981085][ T5532] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=60900, run fsck to fix.
[   58.110977][ T5567] tipc: Disabling bearer <eth:syzkaller0>
[   58.114084][ T5580] netlink: 24 bytes leftover after parsing attributes in process `syz.3.415'.
[   58.145654][ T5562] loop4: detected capacity change from 0 to 131072
[   58.147150][ T5562] =======================================================
[   58.147150][ T5562] WARNING: The mand mount option has been deprecated and
[   58.147150][ T5562]          and is ignored by this kernel. Remove the mand
[   58.147150][ T5562]          option from the mount to silence this warning.
[   58.147150][ T5562] =======================================================
[   58.168941][ T5562] F2FS-fs (loop4): invalid crc value
[   58.185226][ T5562] F2FS-fs (loop4): Found nat_bits in checkpoint
[   58.216418][ T5562] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   58.226117][ T5562] F2FS-fs (loop4): Corrupted max_depth of 3: 16842753
[   58.274440][ T5593] netlink: 990 bytes leftover after parsing attributes in process `syz.1.418'.
[   58.733556][ T5610] device syzkaller0 entered promiscuous mode
[   58.781007][ T5614] loop4: detected capacity change from 0 to 512
[   58.788779][ T5614] EXT4-fs: Ignoring removed oldalloc option
[   58.805896][ T5614] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   58.818801][ T5614] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[   58.821168][ T5614] EXT4-fs (loop4): orphan cleanup on readonly fs
[   58.822233][ T5614] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.426: bad orphan inode 267
[   58.828167][ T5614] EXT4-fs (loop4): Remounting filesystem read-only
[   58.829337][ T5614] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   58.839139][ T5614] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.426: dx entry: limit 0 != root limit 125
[   58.845002][ T5614] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.426: Corrupt directory, running e2fsck is recommended
[   58.862667][ T4326] EXT4-fs (loop4): unmounting filesystem.
[   59.367327][ T5633] netlink: 24 bytes leftover after parsing attributes in process `syz.0.433'.
[   59.642462][ T5651] device syzkaller0 entered promiscuous mode
[   59.763226][ T5654] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   59.765869][ T5654] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   59.890248][ T5654] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   60.195684][ T5663] loop2: detected capacity change from 0 to 128
[   60.197936][ T5663] EXT4-fs: quotafile must be on filesystem root
[   60.227211][ T4316] udevd[4316]: incorrect ext4 checksum on /dev/loop2
[   60.270541][ T5667] xt_hashlimit: size too large, truncated to 1048576
[   60.271563][ T5663] loop2: detected capacity change from 0 to 4096
[   60.274890][ T5663] EXT4-fs: inline encryption not supported
[   60.292197][ T5663] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   60.304931][ T5663] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802e018, mo2=0002]
[   60.306646][ T5663] System zones: 0-5
[   60.323364][ T5663] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   60.335105][ T5637] loop0: detected capacity change from 0 to 131072
[   60.436885][ T5637] F2FS-fs (loop0): invalid crc value
[   60.450615][ T5675] netlink: 990 bytes leftover after parsing attributes in process `syz.3.446'.
[   60.475461][ T5637] F2FS-fs (loop0): Found nat_bits in checkpoint
[   60.497301][ T5637] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   60.513892][ T5680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   60.515636][ T5680] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   60.522427][ T5637] F2FS-fs (loop0): Corrupted max_depth of 3: 16842753
[   60.992987][ T5694] netlink: 56 bytes leftover after parsing attributes in process `syz.0.453'.
[   61.056213][ T4334] EXT4-fs (loop2): unmounting filesystem.
[   61.140240][ T5704] netlink: 990 bytes leftover after parsing attributes in process `syz.3.458'.
[   61.199320][ T5707] loop3: detected capacity change from 0 to 256
[   62.271886][ T5730] loop2: detected capacity change from 0 to 256
[   62.876356][ T5730] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   62.956166][ T5732] capability: warning: `syz.2.466' uses deprecated v2 capabilities in a way that may be insecure
[   63.317978][ T5745] device syzkaller0 entered promiscuous mode
[   64.531209][ T2063] ieee802154 phy0 wpan0: encryption failed: -22
[   64.544690][ T2063] ieee802154 phy1 wpan1: encryption failed: -22
[   64.691569][ T5778] netlink: 32 bytes leftover after parsing attributes in process `syz.1.485'.
[   64.834522][ T5786] device syzkaller0 entered promiscuous mode
[   64.835723][ T5785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.489'.
[   64.910860][ T5774] loop0: detected capacity change from 0 to 40427
[   64.924529][ T5774] F2FS-fs (loop0): invalid crc value
[   64.930565][ T5774] F2FS-fs (loop0): Found nat_bits in checkpoint
[   64.945367][ T5774] F2FS-fs (loop0): Start checkpoint disabled!
[   64.957006][ T5774] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   65.065281][    T9] kworker/u4:0: attempt to access beyond end of device
[   65.065281][    T9] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[   65.139547][ T5803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.494'.
[   65.285403][ T5813] loop3: detected capacity change from 0 to 512
[   65.287063][ T5813] EXT4-fs: Ignoring removed nobh option
[   65.295178][ T5813] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   65.314595][ T5813] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #2: comm syz.3.497: corrupted inode contents
[   65.317926][ T5813] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #2: comm syz.3.497: mark_inode_dirty error
[   65.321654][ T5813] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #2: comm syz.3.497: corrupted inode contents
[   65.324123][ T5813] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.497: mark_inode_dirty error
[   65.349730][ T4338] EXT4-fs (loop3): unmounting filesystem.
[   65.600288][ T5826] loop3: detected capacity change from 0 to 256
[   65.827806][ T5826] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   69.614343][   T14] cfg80211: failed to load regulatory.db
[   76.605801][ T5820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.496'.
[   76.637094][ T5842] loop4: detected capacity change from 0 to 128
[   76.674987][ T5842] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   76.717605][ T5842] syz.4.501 (pid 5842) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[   76.731679][ T5855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.507'.
[   76.739740][ T4326] EXT4-fs (loop4): unmounting filesystem.
[   76.772686][ T5861] netlink: 48 bytes leftover after parsing attributes in process `syz.0.510'.
[   76.774241][ T5861] netlink: 48 bytes leftover after parsing attributes in process `syz.0.510'.
[   76.815627][ T5868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.511'.
[   76.823131][ T5870] netlink: 'syz.0.512': attribute type 4 has an invalid length.
[   76.903420][ T5879] device syzkaller0 entered promiscuous mode
[   77.045924][ T5899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.525'.
[   87.762039][ T5895] netlink: 48 bytes leftover after parsing attributes in process `syz.3.523'.
[   87.763754][ T5901] netlink: 'syz.0.526': attribute type 4 has an invalid length.
[   87.776037][ T5895] netlink: 48 bytes leftover after parsing attributes in process `syz.3.523'.
[   87.958156][ T5944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.959747][ T5944] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.380010][ T5957] device syzkaller0 entered promiscuous mode
[   88.643214][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   88.670478][ T5959] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   88.822126][ T5962] loop7: detected capacity change from 0 to 16384
[   88.877655][ T5969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.879424][ T5969] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.291323][ T5975] netlink: 48 bytes leftover after parsing attributes in process `syz.4.549'.
[   89.293475][ T5975] netlink: 48 bytes leftover after parsing attributes in process `syz.4.549'.
[   89.800252][ T5983] device syzkaller0 entered promiscuous mode
[   89.811195][ T5985] netlink: 'syz.1.553': attribute type 4 has an invalid length.
[  101.109219][ T6025] netlink: 48 bytes leftover after parsing attributes in process `syz.2.561'.
[  101.111080][ T6025] netlink: 48 bytes leftover after parsing attributes in process `syz.2.561'.
[  102.374433][ T6064] device syzkaller0 entered promiscuous mode
[  113.284402][ T6089] device syzkaller0 entered promiscuous mode
[  113.287798][ T6092] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  113.320420][ T6092] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  114.743611][ T6111] bond0: option arp_validate: invalid value (8)
[  114.895735][ T6127] device syzkaller0 entered promiscuous mode
[  125.920620][ T2063] ieee802154 phy0 wpan0: encryption failed: -22
[  125.921751][ T2063] ieee802154 phy1 wpan1: encryption failed: -22
[  126.149384][ T6145] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  126.151671][ T6145] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  126.156530][ T6145] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  126.157931][ T6145] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  126.190245][ T6145] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  126.303824][ T6188] netlink: 16 bytes leftover after parsing attributes in process `syz.3.609'.
[  126.956905][ T6213] device syzkaller0 entered promiscuous mode
[  138.088784][ T6216] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  138.140231][ T6216] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  138.204098][ T6260] netlink: 16 bytes leftover after parsing attributes in process `syz.3.630'.
[  138.816701][ T6288] device syzkaller0 entered promiscuous mode
[  149.688899][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  149.692687][ T6299] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  149.731500][ T6299] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  149.745526][ T6308] device syzkaller0 entered promiscuous mode
[  150.310499][ T6343] device syzkaller0 entered promiscuous mode
[  158.720203][ T4337] Bluetooth: hci0: command 0x0406 tx timeout
[  158.721201][ T4337] Bluetooth: hci3: command 0x0406 tx timeout
[  158.722212][ T4337] Bluetooth: hci1: command 0x0406 tx timeout
[  158.723169][ T4337] Bluetooth: hci4: command 0x0406 tx timeout
[  158.724136][ T4337] Bluetooth: hci2: command 0x0406 tx timeout
[  161.215865][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  161.252080][ T6367] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  161.263455][ T6374] device syzkaller0 entered promiscuous mode
[  161.859523][ T6411] device syzkaller0 entered promiscuous mode
[  162.132184][ T6429] device syzkaller0 entered promiscuous mode
[  162.265668][ T6436] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  162.274241][ T6436] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  162.374221][ T6436] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  162.588105][ T6449] device syzkaller0 entered promiscuous mode
[  162.875563][ T6468] device syzkaller0 entered promiscuous mode
[  163.445937][ T6491] device syzkaller0 entered promiscuous mode
[  163.688494][ T6502] device syzkaller0 entered promiscuous mode
[  164.034217][ T6523] device syzkaller0 entered promiscuous mode
[  164.146368][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.729'.
[  164.601720][ T6554] device syzkaller0 entered promiscuous mode
[  164.712059][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.742'.
[  164.765795][ T6569] device syzkaller0 entered promiscuous mode
[  164.990821][ T6578] netlink: 48 bytes leftover after parsing attributes in process `syz.4.748'.
[  165.089161][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.754'.
[  165.112825][ T6592] device syzkaller0 entered promiscuous mode
[  165.266398][ T6600] device syzkaller0 entered promiscuous mode
[  165.617042][ T6608] netlink: 48 bytes leftover after parsing attributes in process `syz.0.761'.
[  166.131625][ T6626] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  166.133550][ T6626] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  166.137025][ T6626] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  166.171007][ T6626] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  166.271180][ T6644] netlink: 48 bytes leftover after parsing attributes in process `syz.3.775'.
[  166.273279][ T6643] device syzkaller0 entered promiscuous mode
[  166.399143][ T6654] device syzkaller0 entered promiscuous mode
[  167.089878][ T6673] netlink: 48 bytes leftover after parsing attributes in process `syz.2.787'.
[  167.158670][ T6683] device syzkaller0 entered promiscuous mode
[  167.191770][ T6685] device syzkaller0 entered promiscuous mode
[  167.525656][ T6709] netlink: 48 bytes leftover after parsing attributes in process `syz.3.799'.
[  167.644985][ T6719] device syzkaller0 entered promiscuous mode
[  167.670603][ T6723] device syzkaller0 entered promiscuous mode
[  168.357269][ T6741] netlink: 48 bytes leftover after parsing attributes in process `syz.0.814'.
[  168.434420][ T6752] device syzkaller0 entered promiscuous mode
[  168.604485][ T6757] device syzkaller0 entered promiscuous mode
[  168.821294][ T6779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.827'.
[  168.912926][ T6790] device syzkaller0 entered promiscuous mode
[  169.472495][ T6802] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  169.505158][ T6802] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  169.622869][ T6802] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  169.857112][ T6812] __nla_validate_parse: 2 callbacks suppressed
[  169.857121][ T6812] netlink: 24 bytes leftover after parsing attributes in process `syz.2.838'.
[  169.867910][ T6816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.839'.
[  169.873340][ T6815] device syzkaller0 entered promiscuous mode
[  169.992865][ T6818] netlink: 16 bytes leftover after parsing attributes in process `syz.1.841'.
[  170.002471][ T6826] netlink: 56 bytes leftover after parsing attributes in process `syz.4.845'.
[  170.051704][ T6831] device syzkaller0 entered promiscuous mode
[  170.860290][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.853'.
[  170.904423][ T6857] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  170.907076][ T6857] device syzkaller0 entered promiscuous mode
[  170.908967][ T6859] netlink: 24 bytes leftover after parsing attributes in process `syz.4.854'.
[  170.914430][ T6857] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  170.973958][ T6857] tipc: Resetting bearer <eth:syzkaller0>
[  170.976382][ T6856] tipc: Resetting bearer <eth:syzkaller0>
[  171.110787][ T6856] tipc: Disabling bearer <eth:syzkaller0>
[  171.114102][ T6869] netlink: 16 bytes leftover after parsing attributes in process `syz.2.860'.
[  171.121382][ T6867] device syzkaller0 entered promiscuous mode
[  171.158819][ T6876] device syzkaller0 entered promiscuous mode
[  171.373064][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.865'.
[  171.500420][ T6899] netlink: 24 bytes leftover after parsing attributes in process `syz.1.869'.
[  171.847300][ T6907] netlink: 16 bytes leftover after parsing attributes in process `syz.1.873'.
[  171.887602][ T6913] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  171.889354][ T6913] device syzkaller0 entered promiscuous mode
[  171.892838][ T6913] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  172.269218][ T6913] tipc: Resetting bearer <eth:syzkaller0>
[  172.273796][ T6917] device syzkaller0 entered promiscuous mode
[  172.275732][ T6912] tipc: Resetting bearer <eth:syzkaller0>
[  172.370718][ T6912] tipc: Disabling bearer <eth:syzkaller0>
[  172.491749][ T6925] device syzkaller0 entered promiscuous mode
[  172.643535][ T6951] bond0: option arp_validate: invalid value (8)
[  172.936386][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  173.009914][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  173.450320][ T6964] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  173.670332][ T6969] tipc: Started in network mode
[  173.671437][ T6969] tipc: Node identity 423e04c1d858, cluster identity 4711
[  173.677135][ T6969] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.685821][ T6969] device syzkaller0 entered promiscuous mode
[  173.690927][ T6970] device syzkaller0 entered promiscuous mode
[  173.695014][ T6969] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  173.747095][ T6969] tipc: Resetting bearer <eth:syzkaller0>
[  173.843117][ T6968] tipc: Resetting bearer <eth:syzkaller0>
[  173.921285][ T6968] tipc: Disabling bearer <eth:syzkaller0>
[  173.924270][ T6988] device syzkaller0 entered promiscuous mode
[  174.004602][ T6996] bond0: option arp_validate: invalid value (8)
[  174.997475][ T7026] device syzkaller0 entered promiscuous mode
[  175.102266][ T7030] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.147377][ T7028] device syzkaller0 entered promiscuous mode
[  175.150362][ T7028] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  175.190973][ T7032] __nla_validate_parse: 7 callbacks suppressed
[  175.190991][ T7032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.912'.
[  175.198809][ T7028] tipc: Resetting bearer <eth:syzkaller0>
[  175.210356][ T7027] tipc: Resetting bearer <eth:syzkaller0>
[  175.300672][ T7027] tipc: Disabling bearer <eth:syzkaller0>
[  175.348437][ T7043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.915'.
[  175.352220][ T7043] bond0: option arp_validate: invalid value (8)
[  175.385986][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.916'.
[  175.388482][ T7047] device syzkaller0 entered promiscuous mode
[  176.339313][ T7071] netlink: 24 bytes leftover after parsing attributes in process `syz.4.925'.
[  176.399278][ T7067] device syzkaller0 entered promiscuous mode
[  176.534299][ T7081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.930'.
[  176.538418][ T7087] bond0: option arp_validate: invalid value (8)
[  176.544289][ T7085] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  176.545859][ T7085] device syzkaller0 entered promiscuous mode
[  176.558426][ T7085] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  176.649254][ T7085] tipc: Resetting bearer <eth:syzkaller0>
[  176.668978][ T7084] tipc: Resetting bearer <eth:syzkaller0>
[  177.852219][ T7084] tipc: Disabling bearer <eth:syzkaller0>
[  177.854899][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  177.859278][ T7106] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  177.890230][ T7106] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  177.893014][ T4376] tipc: Node number set to 3431184063
[  177.901436][ T7113] device syzkaller0 entered promiscuous mode
[  177.943795][ T7118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.938'.
[  177.965336][ T7121] loop3: detected capacity change from 0 to 512
[  177.969058][ T7121] EXT4-fs: Ignoring removed oldalloc option
[  177.971721][ T7121] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  177.984187][ T7121] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  178.044723][ T4338] EXT4-fs (loop3): unmounting filesystem.
[  178.114141][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.942'.
[  178.117758][ T7130] loop3: detected capacity change from 0 to 256
[  178.122579][ T7130] exfat: Deprecated parameter 'namecase'
[  178.123870][ T7130] exfat: Deprecated parameter 'namecase'
[  178.125065][ T7130] exfat: Deprecated parameter 'namecase'
[  178.154237][ T7130] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  178.154677][ T7132] device syzkaller0 entered promiscuous mode
[  178.184103][ T7134] bond0: option arp_validate: invalid value (8)
[  179.196586][ T7156] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  179.212032][ T7156] device syzkaller0 entered promiscuous mode
[  179.230480][ T7156] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  179.264694][ T7156] tipc: Resetting bearer <eth:syzkaller0>
[  179.270659][ T7154] tipc: Resetting bearer <eth:syzkaller0>
[  179.361164][ T7154] tipc: Disabling bearer <eth:syzkaller0>
[  179.363295][ T7163] device syzkaller0 entered promiscuous mode
[  179.482602][ T7170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.954'.
[  179.504256][ T7173] netlink: 24 bytes leftover after parsing attributes in process `syz.3.955'.
[  179.544275][ T7175] bond0: option arp_validate: invalid value (8)
[  179.556087][ T7177] loop3: detected capacity change from 0 to 1024
[  179.607895][ T7177] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  179.682758][ T4338] EXT4-fs (loop3): unmounting filesystem.
[  179.733696][ T7186] netlink: 16 bytes leftover after parsing attributes in process `syz.3.960'.
[  180.105724][ T7195] device syzkaller0 entered promiscuous mode
[  180.565956][ T7203] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  180.567419][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.966'.
[  180.572662][ T7203] device syzkaller0 entered promiscuous mode
[  180.575116][ T7203] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  180.622190][ T7207] device syzkaller0 entered promiscuous mode
[  180.624571][ T7209] netlink: 24 bytes leftover after parsing attributes in process `syz.2.968'.
[  180.744876][ T7215] tipc: Resetting bearer <eth:syzkaller0>
[  180.748836][ T7202] tipc: Resetting bearer <eth:syzkaller0>
[  181.097762][ T7202] tipc: Disabling bearer <eth:syzkaller0>
[  181.100026][ T7219] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  181.103994][ T7219] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  181.130390][ T7219] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  181.678176][ T7251] device syzkaller0 entered promiscuous mode
[  181.707510][ T7255] netlink: 24 bytes leftover after parsing attributes in process `syz.0.982'.
[  181.796704][ T7257] device syzkaller0 entered promiscuous mode
[  182.275186][ T7266] tipc: Started in network mode
[  182.276205][ T7266] tipc: Node identity 3e815ca2655e, cluster identity 4711
[  182.277562][ T7266] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.279555][ T7266] device syzkaller0 entered promiscuous mode
[  182.289360][ T7266] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  182.348231][ T7266] tipc: Resetting bearer <eth:syzkaller0>
[  182.351498][ T7265] tipc: Resetting bearer <eth:syzkaller0>
[  182.506216][ T7275] loop0: detected capacity change from 0 to 256
[  182.664191][ T7275] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  183.383262][ T7265] tipc: Disabling bearer <eth:syzkaller0>
[  183.456432][ T7280] netlink: 56 bytes leftover after parsing attributes in process `syz.2.988'.
[  183.594870][ T3899] tipc: Node number set to 1541364898
[  183.637744][ T7291] netlink: 24 bytes leftover after parsing attributes in process `syz.0.994'.
[  183.706626][ T5333] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  183.734363][ T7296] device syzkaller0 entered promiscuous mode
[  183.772666][ T5333] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  184.804231][ T7317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1000'.
[  184.869938][ T7321] fido_id[7321]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  184.923067][ T7318] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1001'.
[  184.936386][ T7330] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.938924][ T7320] device syzkaller0 entered promiscuous mode
[  184.949269][ T7320] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  185.073600][ T7330] tipc: Resetting bearer <eth:syzkaller0>
[  185.077722][ T7319] tipc: Resetting bearer <eth:syzkaller0>
[  185.584571][ T7319] tipc: Disabling bearer <eth:syzkaller0>
[  185.792256][ T7349] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  185.796072][ T7349] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  185.801034][ T7335] loop2: detected capacity change from 0 to 40427
[  185.813129][ T7335] F2FS-fs (loop2): invalid crc value
[  185.814984][ T7335] F2FS-fs (loop2): Found nat_bits in checkpoint
[  185.824864][ T7335] F2FS-fs (loop2): Start checkpoint disabled!
[  185.828352][ T7335] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  185.840360][ T7349] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  185.885277][ T7360] binder: 7359:7360 unknown command 0
[  185.886489][ T7360] binder: 7359:7360 ioctl c0306201 20000100 returned -22
[  185.931489][  T112] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  185.933139][  T112] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  185.979978][ T4918] kworker/u4:12: attempt to access beyond end of device
[  185.979978][ T4918] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  185.988580][ T7369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  186.001528][ T7369] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.381938][ T7375] device syzkaller0 entered promiscuous mode
[  186.569323][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1020'.
[  186.602072][ T7382] loop2: detected capacity change from 0 to 512
[  186.608867][ T7382] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  186.667843][ T7382] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  186.674464][ T7382] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.1021: bad orphan inode 131072
[  186.677181][ T7382] EXT4-fs (loop2): Remounting filesystem read-only
[  186.678628][ T7382] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  186.693690][ T7382] overlayfs: upper fs needs to support d_type.
[  186.715636][ T4334] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /206/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  187.062773][ T4334] EXT4-fs (loop2): Remounting filesystem read-only
[  187.109531][ T7396] loop0: detected capacity change from 0 to 1024
[  187.111748][ T7396] ext4: Unknown parameter 'noacl'
[  187.133534][ T6373] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  187.204743][ T7398] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1
[  187.239814][ T7400] input: syz1 as /devices/virtual/input/input2
[  187.361014][ T2063] ieee802154 phy0 wpan0: encryption failed: -22
[  187.363475][ T2063] ieee802154 phy1 wpan1: encryption failed: -22
[  187.404261][ T7402] loop0: detected capacity change from 0 to 40427
[  187.418368][ T7402] F2FS-fs (loop0): invalid crc value
[  187.426938][ T7402] F2FS-fs (loop0): Found nat_bits in checkpoint
[  187.442453][ T7402] F2FS-fs (loop0): Start checkpoint disabled!
[  187.482355][ T4334] EXT4-fs (loop2): unmounting filesystem.
[  187.515438][ T7402] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  187.533580][ T7406] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.535472][ T7406] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.599931][ T4337] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  187.602817][ T4337] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  187.604644][ T4337] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  187.606819][ T4337] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  187.609004][ T4337] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  187.613390][ T4337] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  187.626227][  T192] kworker/u4:3: attempt to access beyond end of device
[  187.626227][  T192] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  187.911550][ T7406] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  187.925312][ T7406] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  188.100253][ T5333] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  188.146344][ T7406] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  188.148012][ T7406] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  188.149580][ T7406] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  188.151313][ T7406] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  188.290180][ T5333] usb 1-1: Using ep0 maxpacket: 32
[  188.298202][ T5333] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  188.300287][ T5333] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  188.301879][ T5333] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  188.303470][ T5333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.307492][ T5333] usb 1-1: config 0 descriptor??
[  188.310705][ T5333] hub 1-1:0.0: USB hub found
[  188.513958][ T5333] hub 1-1:0.0: 1 port detected
[  188.590878][ T7436] loop3: detected capacity change from 0 to 256
[  188.924150][ T7436] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  189.682203][ T4337] Bluetooth: hci3: command 0x0409 tx timeout
[  189.742237][ T4923] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  189.744322][ T4923] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.758374][ T7432] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1036'.
[  189.934998][ T4923] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  189.936833][ T4923] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.269254][  T192] hub 1-1:0.0: activate --> -90
[  190.275026][ T4923] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  190.277457][ T4923] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.288184][ T7445] loop1: detected capacity change from 0 to 40427
[  190.294149][ T7445] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64)
[  190.299792][ T7445] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  190.304504][ T7445] F2FS-fs (loop1): invalid crc value
[  190.306573][ T7445] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  190.345850][ T7445] F2FS-fs (loop1): Start checkpoint disabled!
[  190.351916][ T7439] loop3: detected capacity change from 0 to 131072
[  190.359838][ T7439] F2FS-fs (loop3): Test dummy encryption mode enabled
[  190.360012][ T7445] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  190.362958][ T7445] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  190.373752][ T4923] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  190.375943][ T7439] F2FS-fs (loop3): invalid crc value
[  190.377196][ T4923] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.383079][ T7414] chnl_net:caif_netlink_parms(): no params data found
[  190.408572][ T7439] F2FS-fs (loop3): Found nat_bits in checkpoint
[  190.425585][ T7439] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  190.450729][ T7351] kworker/u4:22: attempt to access beyond end of device
[  190.450729][ T7351] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  190.468307][ T7414] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.476102][ T7414] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.477728][ T7414] device bridge_slave_0 entered promiscuous mode
[  190.498867][ T7414] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.500257][ T7414] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.501817][ T7414] device bridge_slave_1 entered promiscuous mode
[  190.509943][ T7414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  190.515909][ T7414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  190.523428][ T7414] team0: Port device team_slave_0 added
[  190.525666][ T7414] team0: Port device team_slave_1 added
[  190.533888][ T7414] batman_adv: batadv0: Adding interface: batadv_slave_0
[  190.535032][ T7414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.539419][ T7414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  190.544443][ T7414] batman_adv: batadv0: Adding interface: batadv_slave_1
[  190.546076][ T7414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.554369][ T7414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.602219][ T7414] device hsr_slave_0 entered promiscuous mode
[  190.647716][ T7439] fscrypt: AES-256-XTS using implementation "xts-aes-ce"
[  190.650467][ T7414] device hsr_slave_1 entered promiscuous mode
[  190.670560][ T7414] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  190.706882][ T7414] Cannot create hsr debugfs directory
[  190.707420][ T7439] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce"
[  190.719586][ T3899] usb 1-1: USB disconnect, device number 3
[  190.720960][   T14] usb 1-1: Failed to suspend device, error -19
[  191.584931][ T4923] tipc: Left network mode
[  191.633002][ T7414] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  191.653109][ T7481] loop1: detected capacity change from 0 to 256
[  191.690491][ T7481] FAT-fs (loop1): Directory bread(block 64) failed
[  191.691659][ T7481] FAT-fs (loop1): Directory bread(block 65) failed
[  191.692815][ T7481] FAT-fs (loop1): Directory bread(block 66) failed
[  191.693871][ T7481] FAT-fs (loop1): Directory bread(block 67) failed
[  191.695048][ T7481] FAT-fs (loop1): Directory bread(block 68) failed
[  191.714918][ T7481] FAT-fs (loop1): Directory bread(block 69) failed
[  191.716158][ T7481] FAT-fs (loop1): Directory bread(block 70) failed
[  191.718834][ T7481] FAT-fs (loop1): Directory bread(block 71) failed
[  191.727644][ T7481] FAT-fs (loop1): Directory bread(block 72) failed
[  191.728807][ T7481] FAT-fs (loop1): Directory bread(block 73) failed
[  191.760176][ T4337] Bluetooth: hci3: command 0x041b tx timeout
[  191.860054][ T7489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  191.861841][ T7489] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  191.898413][ T7414] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  191.931780][ T7414] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  192.178395][ T7498] loop0: detected capacity change from 0 to 256
[  193.509117][ T7498] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  193.840171][ T4330] Bluetooth: hci3: command 0x040f tx timeout
[  193.895242][ T7414] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  193.999138][ T7507] device syzkaller0 entered promiscuous mode
[  194.069294][ T7414] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.489387][ T7523] loop3: detected capacity change from 0 to 256
[  194.536427][ T7012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  194.538353][ T7012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  194.545058][ T7414] 8021q: adding VLAN 0 to HW filter on device team0
[  194.638447][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  194.640676][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  194.642645][ T4906] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.644040][ T4906] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.646130][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  194.655599][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  194.657564][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  194.659330][ T4906] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.660562][ T4906] bridge0: port 2(bridge_slave_1) entered forwarding state
[  194.744562][ T7500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  194.750048][ T7500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  194.758319][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  194.761400][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  194.765496][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  194.767293][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  194.770196][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  194.778258][ T7414] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  194.785783][ T7414] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  194.833303][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  194.835345][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  194.837404][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  194.839193][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  194.843311][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  194.967196][  T112] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  194.979411][  T112] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  195.024581][ T7564] loop4: detected capacity change from 0 to 512
[  195.049289][ T7564] FAT-fs (loop4): Directory bread(block 199916) failed
[  195.062438][ T7564] FAT-fs (loop4): Directory bread(block 199917) failed
[  195.064064][ T7564] FAT-fs (loop4): Directory bread(block 199918) failed
[  195.073273][ T7564] FAT-fs (loop4): Directory bread(block 199919) failed
[  195.074489][ T7564] FAT-fs (loop4): Directory bread(block 199920) failed
[  195.075658][ T7564] FAT-fs (loop4): Directory bread(block 199921) failed
[  195.076788][ T7564] FAT-fs (loop4): Directory bread(block 199922) failed
[  195.077956][ T7564] FAT-fs (loop4): Directory bread(block 199923) failed
[  195.083842][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  195.085229][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  195.088270][ T7414] 8021q: adding VLAN 0 to HW filter on device batadv0
[  195.125110][ T7564] FAT-fs (loop4): FAT read failed (blocknr 128)
[  195.643022][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  195.654778][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  195.665637][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  195.672817][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  195.698561][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.702781][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.706774][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.708556][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.725604][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.731974][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.735256][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  195.737245][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.920212][ T4337] Bluetooth: hci3: command 0x0419 tx timeout
[  196.590446][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  196.592304][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  196.607273][ T7500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  196.609165][ T7500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  196.614311][ T7500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  196.618279][ T7500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  196.634047][ T7414] device veth0_vlan entered promiscuous mode
[  196.679872][ T7414] device veth1_vlan entered promiscuous mode
[  196.715568][ T4376] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  196.717904][ T4376] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  196.772933][ T7622] loop1: detected capacity change from 0 to 8192
[  196.814280][ T7622]  loop1: p1 p2 p3
[  196.815149][ T7622] loop1: partition table partially beyond EOD, truncated
[  196.817528][ T7622] loop1: p1 start 51379968 is beyond EOD, truncated
[  196.822403][ T7622] loop1: p3 size 100663552 extends beyond EOD, truncated
[  196.843265][ T7622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.847778][ T7622] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.867912][ T7644] loop0: detected capacity change from 0 to 512
[  196.881717][ T7644] EXT4-fs (loop0): Test dummy encryption mode enabled
[  196.895407][ T7644] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.0.1075: corrupted xattr block 95
[  196.898639][ T7644] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2802: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  196.904256][ T7644] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.1075: bg 0: block 7: invalid block bitmap
[  196.909972][ T7644] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  196.915674][ T7644] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2918: inode #11: comm syz.0.1075: corrupted xattr block 95
[  196.921104][ T7644] EXT4-fs warning (device loop0): ext4_evict_inode:301: xattr delete (err -117)
[  196.923828][ T7644] EXT4-fs (loop0): 1 orphan inode deleted
[  196.926654][ T7644] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  197.331185][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1074'.
[  197.428693][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  197.430934][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  197.435060][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  197.436806][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  197.439745][ T7414] device veth0_macvtap entered promiscuous mode
[  197.481740][ T7414] device veth1_macvtap entered promiscuous mode
[  197.491267][ T4923] device hsr_slave_0 left promiscuous mode
[  197.510765][ T4923] device hsr_slave_1 left promiscuous mode
[  197.590821][ T4923] device bridge_slave_1 left promiscuous mode
[  197.594761][ T4923] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.621591][ T4923] device bridge_slave_0 left promiscuous mode
[  197.622843][ T4923] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.733368][ T4333] EXT4-fs (loop0): unmounting filesystem.
[  197.742027][ T4923] device veth1_macvtap left promiscuous mode
[  197.748068][ T4923] device veth0_macvtap left promiscuous mode
[  197.749944][ T4923] device veth1_vlan left promiscuous mode
[  197.755065][ T4923] device veth0_vlan left promiscuous mode
[  199.664610][ T4371] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  199.666361][ T4371] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  200.442108][ T4923] team0 (unregistering): Port device team_slave_1 removed
[  200.611346][ T4923] team0 (unregistering): Port device team_slave_0 removed
[  200.770590][ T4923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  200.961402][ T4923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  202.402003][ T4923] bond0 (unregistering): Released all slaves
[  202.685776][ T7414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  202.690260][ T7414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.691987][ T7414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  202.693852][ T7414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.695477][ T7414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  202.697287][ T7414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.703007][ T7414] batman_adv: batadv0: Interface activated: batadv_slave_0
[  202.707522][ T7500] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  202.709225][ T7500] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  202.711505][ T7500] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  202.713188][ T7500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  202.725438][ T7662] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  202.727007][ T7663] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1079'.
[  202.753938][ T7414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  202.755838][ T7414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.760807][ T7414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  202.762840][ T7414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.764383][ T7414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  202.766163][ T7414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.776813][ T7414] batman_adv: batadv0: Interface activated: batadv_slave_1
[  202.783433][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  202.785381][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  202.792343][ T7705] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  202.794695][ T7414] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  202.796231][ T7414] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  202.797830][ T7414] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  202.811892][ T7414] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  202.826494][ T7705] device syzkaller0 entered promiscuous mode
[  202.827805][ T7705] tipc: Resetting bearer <eth:syzkaller0>
[  202.876765][ T7713] device syzkaller0 entered promiscuous mode
[  202.894367][ T4933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  202.895936][ T4933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.897396][ T4933] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  202.899718][ T7704] tipc: Resetting bearer <eth:syzkaller0>
[  213.985003][ T7704] tipc: Disabling bearer <eth:syzkaller0>
[  214.105685][ T4376] tipc: Node number set to 4253623784
[  214.111481][ T4913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.112836][ T4913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.114882][ T7500] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  214.128021][   T24] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  214.134838][   T24] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  214.279263][ T7759] fido_id[7759]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  215.088372][ T7771] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1095'.
[  215.102247][ T7772] loop5: detected capacity change from 0 to 1024
[  215.103775][ T7772] EXT4-fs: Ignoring removed bh option
[  215.198111][ T7772] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  215.249538][ T7783] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  215.268607][ T7783] device syzkaller0 entered promiscuous mode
[  215.305498][ T7772] EXT4-fs error (device loop5): swap_inode_boot_loader:378: comm syz.5.1033: inode #5: comm syz.5.1033: iget: illegal inode #
[  215.314384][ T7783] tipc: Resetting bearer <eth:syzkaller0>
[  215.334325][ T7772] EXT4-fs (loop5): Remounting filesystem read-only
[  215.593891][ T7779] tipc: Resetting bearer <eth:syzkaller0>
[  215.603175][ T7414] EXT4-fs (loop5): unmounting filesystem.
[  215.624983][ T7779] tipc: Disabling bearer <eth:syzkaller0>
[  216.699663][ T7811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  216.723086][ T7811] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  217.162721][ T7832] loop1: detected capacity change from 0 to 16
[  217.184760][ T7832] erofs: (device loop1): mounted with root inode @ nid 36.
[  217.278975][ T7842] loop5: detected capacity change from 0 to 8
[  217.319800][ T7842] SQUASHFS error: Unable to read directory block [1d0:26]
[  217.577694][ T7851] loop1: detected capacity change from 0 to 512
[  217.582993][ T7851] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  217.678586][ T7812] loop0: detected capacity change from 0 to 131072
[  217.689987][ T7856] loop5: detected capacity change from 0 to 256
[  217.709098][ T7856] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  217.711901][ T7812] F2FS-fs (loop0): invalid crc value
[  217.728166][ T7805] loop3: detected capacity change from 0 to 131072
[  217.738238][ T7812] F2FS-fs (loop0): Found nat_bits in checkpoint
[  217.739911][ T7805] F2FS-fs (loop3): invalid crc value
[  217.752086][ T7812] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2
[  217.763015][ T7812] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  217.779995][   T27] audit: type=1326 audit(217.760:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.5.1120" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89777fe8 code=0x7ffc0000
[  217.785627][ T7805] F2FS-fs (loop3): Found nat_bits in checkpoint
[  217.800467][   T27] audit: type=1326 audit(217.790:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.5.1120" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=233 compat=0 ip=0xffff89777fe8 code=0x7ffc0000
[  217.804757][   T27] audit: type=1326 audit(217.790:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.5.1120" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89777fe8 code=0x7ffc0000
[  217.808918][   T27] audit: type=1326 audit(217.790:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.5.1120" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89777fe8 code=0x7ffc0000
[  217.841689][ T7805] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  217.878192][ T7805] F2FS-fs (loop3): Corrupted max_depth of 3: 16842753
[  217.915577][ T7884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  217.917027][ T7884] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  218.035912][ T7898] loop1: detected capacity change from 0 to 1024
[  218.088578][ T7898] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  218.105844][ T7902] process 'syz.0.1130' launched './file1' with NULL argv: empty string added
[  218.114160][ T7898] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.1129: missing EA_INODE flag
[  218.142687][ T7898] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1129: error while reading EA inode 11 err=-117
[  218.153354][ T7898] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.1129: missing EA_INODE flag
[  218.180718][ T7898] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1129: error while reading EA inode 11 err=-117
[  218.249853][ T4327] EXT4-fs (loop1): unmounting filesystem.
[  218.313081][ T7922] tmpfs: Bad value for 'size'
[  218.512271][ T7940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  218.518306][ T7940] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  218.883833][ T7952] binfmt_misc: register: failed to install interpreter file ./file0
[  219.140758][ T7955] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1146'.
[  219.177059][ T7957] loop5: detected capacity change from 0 to 1024
[  219.376590][ T7971] loop5: detected capacity change from 0 to 512
[  219.414003][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1156'.
[  219.465299][ T7971] EXT4-fs (loop5): 1 orphan inode deleted
[  219.472283][ T7971] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  219.480744][ T4370] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  219.482625][ T4370] EXT4-fs error (device loop5): ext4_release_dquot:6877: comm kworker/u4:5: Failed to release dquot type 1
[  219.531383][ T4370] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  219.533120][ T4370] EXT4-fs error (device loop5): ext4_release_dquot:6877: comm kworker/u4:5: Failed to release dquot type 1
[  219.539207][ T7971] Bluetooth: MGMT ver 1.22
[  219.597977][ T7414] EXT4-fs (loop5): unmounting filesystem.
[  219.653352][ T7985] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  219.721915][ T7985] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.1160: Invalid block bitmap block 12475157480410487928 in block_group 0
[  219.736900][ T4333] EXT4-fs (loop0): unmounting filesystem.
[  219.791583][ T8004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  219.797606][ T8004] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  219.822416][ T8008] syz.0.1169 uses obsolete (PF_INET,SOCK_PACKET)
[  219.896208][ T8016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1171'.
[  219.907670][ T8014] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  219.947434][ T4326] EXT4-fs (loop4): unmounting filesystem.
[  220.228841][ T8036] set_capacity_and_notify: 4 callbacks suppressed
[  220.228851][ T8036] loop0: detected capacity change from 0 to 128
[  220.236678][ T8036] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  220.255933][ T8036] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1)
[  220.260774][ T8036] FAT-fs (loop0): Filesystem has been set read-only
[  220.289454][ T4333] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  220.325302][ T8042] loop0: detected capacity change from 0 to 512
[  220.369188][ T8042] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  220.473903][ T4333] EXT4-fs (loop0): unmounting filesystem.
[  221.441452][ T4337] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  221.441622][ T8119] loop3: detected capacity change from 0 to 128
[  221.444628][ T4337] Bluetooth: hci3: Injecting HCI hardware error event
[  221.446867][ T4337] Bluetooth: hci3: hardware error 0x00
[  221.778947][ T8129] loop3: detected capacity change from 0 to 8
[  221.988932][ T8151] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1224'.
[  222.036652][ T8157] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1227'.
[  222.958261][ T8188] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1241'.
[  222.966109][ T8188] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1241'.
[  223.070252][   T47] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  223.073076][   T47] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  223.076670][   T47] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  223.078594][   T47] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  223.083779][   T47] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  223.085416][   T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  223.166932][ T8197] Driver unsupported XDP return value 0 on prog  (id 31) dev N/A, expect packet loss!
[  223.484069][ T4906] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  223.547915][ T4906] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.600223][ T4337] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  223.665368][ T4906] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  223.673879][ T4906] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.676988][ T8218] loop1: detected capacity change from 0 to 256
[  223.705541][ T8220] loop3: detected capacity change from 0 to 128
[  223.714715][ T8192] chnl_net:caif_netlink_parms(): no params data found
[  223.783262][ T4906] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  223.785499][ T4906] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.825965][ T8192] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.828422][ T8192] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.838228][ T8192] device bridge_slave_0 entered promiscuous mode
[  223.843677][ T8192] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.846148][ T8192] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.849701][ T8192] device bridge_slave_1 entered promiscuous mode
[  223.903099][ T4906] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  223.905074][ T4906] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.937182][ T8192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  223.954637][ T8192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  223.965334][ T8192] team0: Port device team_slave_0 added
[  223.967728][ T8192] team0: Port device team_slave_1 added
[  223.974176][ T8192] batman_adv: batadv0: Adding interface: batadv_slave_0
[  223.975416][ T8192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.979995][ T8192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  223.982738][ T8192] batman_adv: batadv0: Adding interface: batadv_slave_1
[  223.984062][ T8192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.988513][ T8192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  224.063686][ T8192] device hsr_slave_0 entered promiscuous mode
[  224.160472][ T8192] device hsr_slave_1 entered promiscuous mode
[  224.489732][ T8262] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  224.491678][ T8262] 8021q: adding VLAN 0 to HW filter on device bond0
[  224.493375][ T8262] 8021q: adding VLAN 0 to HW filter on device team0
[  224.530688][ T8262] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  224.920411][ T4906] tipc: Left network mode
[  224.945828][ T8192] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  225.013330][ T8192] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  225.037081][ T8284] loop4: detected capacity change from 0 to 512
[  225.039105][ T8284] EXT4-fs (loop4): Test dummy encryption mode enabled
[  225.040802][ T8284] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  225.171817][ T4337] Bluetooth: hci2: command 0x0409 tx timeout
[  225.355306][ T8284] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.1268: bad orphan inode 131083
[  225.357611][ T8284] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  225.419282][ T8296] loop5: detected capacity change from 0 to 8
[  225.421150][ T4326] EXT4-fs (loop4): unmounting filesystem.
[  225.504207][ T8192] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  225.531805][ T8192] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  225.556466][ T8308] loop5: detected capacity change from 0 to 256
[  225.561755][ T8308] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  225.564249][ T8308] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  225.566808][ T8308] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  225.568428][ T8308] UDF-fs: Scanning with blocksize 512 failed
[  225.596553][ T8308] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  225.600021][ T8308] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  225.631533][ T8314] loop4: detected capacity change from 0 to 256
[  225.656375][ T8314] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  225.672660][   T27] audit: type=1326 audit(225.650:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.5.1275" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89777fe8 code=0x7ffc0000
[  225.678413][   T27] audit: type=1326 audit(225.660:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.5.1275" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89777fe8 code=0x7ffc0000
[  225.682337][ T8314] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  225.692949][   T27] audit: type=1326 audit(225.660:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.5.1275" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89777fe8 code=0x7ffc0000
[  225.699593][ T8314] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  225.701045][   T27] audit: type=1326 audit(225.660:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.5.1275" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=210 compat=0 ip=0xffff89777fe8 code=0x7ffc0000
[  225.701073][   T27] audit: type=1326 audit(225.660:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.5.1275" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89777fe8 code=0x7ffc0000
[  225.701091][   T27] audit: type=1326 audit(225.670:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.5.1275" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89777fe8 code=0x7ffc0000
[  225.701104][   T27] audit: type=1326 audit(225.670:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.5.1275" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89777fe8 code=0x7ffc0000
[  225.701119][   T27] audit: type=1326 audit(225.670:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.5.1275" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8975aeac code=0x7ffc0000
[  225.701131][   T27] audit: type=1326 audit(225.670:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.5.1275" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffff8977968c code=0x7ffc0000
[  225.701144][   T27] audit: type=1326 audit(225.670:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.5.1275" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff89777fe8 code=0x7ffc0000
[  225.734526][ T8314] UDF-fs: Scanning with blocksize 512 failed
[  225.736644][ T8314] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  225.739348][ T8314] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  225.805545][ T8192] 8021q: adding VLAN 0 to HW filter on device bond0
[  225.864861][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  225.867741][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  225.873484][ T8192] 8021q: adding VLAN 0 to HW filter on device team0
[  225.876344][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  225.878595][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  225.883893][ T4918] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.885116][ T4918] bridge0: port 1(bridge_slave_0) entered forwarding state
[  225.887905][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  225.895209][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  225.905369][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  225.909422][ T4918] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.910990][ T4918] bridge0: port 2(bridge_slave_1) entered forwarding state
[  226.004268][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  226.009919][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  226.016166][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  226.018455][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  226.023352][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  226.041117][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  226.043274][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  226.048080][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  226.050000][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  226.084311][ T8192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  226.087639][ T8192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  226.089741][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  226.092868][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  226.213334][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  226.215169][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  226.278484][ T8192] 8021q: adding VLAN 0 to HW filter on device batadv0
[  226.317835][ T8370] loop4: detected capacity change from 0 to 512
[  226.344162][ T8370] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  226.386532][ T4326] EXT4-fs (loop4): unmounting filesystem.
[  226.531477][ T8317] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  227.136670][ T8424] loop1: detected capacity change from 0 to 512
[  227.145421][ T8424] EXT4-fs (loop1): Test dummy encryption mode enabled
[  227.180615][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  227.183630][ T8424] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.1292: inode has both inline data and extents flags
[  227.186566][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  227.188342][ T8424] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.1292: couldn't read orphan inode 15 (err -117)
[  227.191185][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  227.196957][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  227.198614][ T8424] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  227.200186][ T4330] Bluetooth: hci2: command 0x041b tx timeout
[  227.204136][ T8192] device veth0_vlan entered promiscuous mode
[  227.222574][ T8433] loop3: detected capacity change from 0 to 256
[  227.224167][ T8433] exfat: Deprecated parameter 'utf8'
[  227.225152][ T8433] exfat: Deprecated parameter 'utf8'
[  227.226089][ T8433] exfat: Deprecated parameter 'namecase'
[  227.227275][ T8433] exfat: Deprecated parameter 'namecase'
[  227.232247][ T8433] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  227.257410][ T8192] device veth1_vlan entered promiscuous mode
[  227.259385][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  227.261000][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  227.262491][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  227.274497][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  227.276097][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  227.278160][ T4918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  227.362553][ T4327] EXT4-fs (loop1): unmounting filesystem.
[  227.478542][ T8453] loop4: detected capacity change from 0 to 128
[  227.519502][ T8453] syz.4.1303: attempt to access beyond end of device
[  227.519502][ T8453] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128
[  227.533959][ T8452] syz.4.1303: attempt to access beyond end of device
[  227.533959][ T8452] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128
[  227.537438][ T8453] syz.4.1303: attempt to access beyond end of device
[  227.537438][ T8453] loop4: rw=0, sector=150, nr_sectors = 1 limit=128
[  227.584354][ T8192] device veth0_macvtap entered promiscuous mode
[  227.589497][ T8192] device veth1_macvtap entered promiscuous mode
[  227.617820][ T8192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  227.619642][ T8192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.627846][ T8192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  227.629651][ T8192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.639155][ T8192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  227.648975][ T8192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.653631][ T8192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  227.655443][ T8192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.663670][ T8192] batman_adv: batadv0: Interface activated: batadv_slave_0
[  227.719021][ T4906] device hsr_slave_0 left promiscuous mode
[  227.769127][ T4906] device hsr_slave_1 left promiscuous mode
[  227.786633][ T8487] loop3: detected capacity change from 0 to 16
[  227.795147][ T8487] erofs: (device loop3): mounted with root inode @ nid 36.
[  227.803914][ T8487] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535
[  227.808289][ T8487] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535
[  227.813003][ T8487] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117]
[  227.850659][ T4906] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  227.852196][ T4906] batman_adv: batadv0: Removing interface: batadv_slave_0
[  227.856459][ T4906] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  227.858569][ T4906] batman_adv: batadv0: Removing interface: batadv_slave_1
[  227.863046][ T4906] device bridge_slave_1 left promiscuous mode
[  227.865398][ T4906] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.879161][ T8493] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1312'.
[  227.928756][ T4906] device bridge_slave_0 left promiscuous mode
[  227.930045][ T4906] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.006468][ T8509] loop1: detected capacity change from 0 to 1024
[  228.029643][   T11] hfsplus: b-tree write err: -5, ino 25
[  228.030370][ T4906] device veth1_macvtap left promiscuous mode
[  228.031037][   T11] hfsplus: b-tree write err: -5, ino 4
[  228.031811][ T4906] device veth0_macvtap left promiscuous mode
[  228.032790][   T11] hfsplus: b-tree write err: -5, ino 2
[  228.033733][ T4906] device veth1_vlan left promiscuous mode
[  228.035131][   T11] hfsplus: b-tree write err: -5, ino 26
[  228.035921][ T4906] device veth0_vlan left promiscuous mode
[  229.280233][ T4337] Bluetooth: hci2: command 0x040f tx timeout
[  230.112227][ T4906] team0 (unregistering): Port device team_slave_1 removed
[  230.272519][ T4906] team0 (unregistering): Port device team_slave_0 removed
[  230.440645][ T4906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  230.643246][ T4906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  231.360196][ T4330] Bluetooth: hci2: command 0x0419 tx timeout
[  232.109093][ T4906] bond0 (unregistering): Released all slaves
[  232.412110][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  232.413826][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  232.415279][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  232.416909][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  232.419702][ T8192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.421957][ T8192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.423607][ T8192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.425374][ T8192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.427147][ T8192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.428876][ T8192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.431591][ T8192] batman_adv: batadv0: Interface activated: batadv_slave_1
[  232.453623][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  232.455379][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  232.466668][ T8192] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  232.468268][ T8192] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  232.469804][ T8192] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  232.486820][ T8192] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  232.588979][ T7311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.590710][ T7311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.605707][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  232.607626][ T7311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.608973][ T7311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.612519][ T7311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  232.685720][ T8558] loop6: detected capacity change from 0 to 128
[  232.716403][ T8558] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  232.764925][ T8192] EXT4-fs (loop6): unmounting filesystem.
[  232.823319][ T8573] loop5: detected capacity change from 0 to 512
[  232.832050][ T8573] ext3: Bad value for 'stripe'
[  232.871850][ T8548] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  233.555590][ T8619] loop5: detected capacity change from 0 to 512
[  233.605285][ T8619] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  233.655800][ T7414] EXT4-fs (loop5): unmounting filesystem.
[  233.798582][ T8646] loop5: detected capacity change from 0 to 1764
[  233.954679][ T8667] loop1: detected capacity change from 0 to 256
[  234.019828][ T8675] loop6: detected capacity change from 0 to 256
[  234.030490][ T8675] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  235.212113][ T8707] loop5: detected capacity change from 0 to 16
[  235.224489][ T8707] erofs: (device loop5): mounted with root inode @ nid 36.
[  235.269054][ T8710] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1368'.
[  235.639817][ T8736] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  235.642753][ T8736] device syzkaller0 entered promiscuous mode
[  235.663666][ T8736] tipc: Resetting bearer <eth:syzkaller0>
[  235.669311][ T8735] tipc: Resetting bearer <eth:syzkaller0>
[  235.714049][ T8735] tipc: Disabling bearer <eth:syzkaller0>
[  235.810175][ T8746] loop3: detected capacity change from 0 to 16
[  235.834187][ T8746] erofs: (device loop3): mounted with root inode @ nid 36.
[  235.908351][ T8749] binfmt_misc: register: failed to install interpreter file ./file0
[  236.147503][ T8746] syz.3.1378: attempt to access beyond end of device
[  236.147503][ T8746] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16
[  236.152765][ T8746] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -41 in[61, 4035] out[9000]
[  236.155033][ T8746] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -41 in[61, 4035] out[8192]
[  236.202606][ T8756] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1381'.
[  236.844728][ T8786] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  236.850525][ T8786] device syzkaller0 entered promiscuous mode
[  236.876861][ T8786] tipc: Resetting bearer <eth:syzkaller0>
[  236.881077][ T8785] tipc: Resetting bearer <eth:syzkaller0>
[  236.941552][ T8785] tipc: Disabling bearer <eth:syzkaller0>
[  237.026730][ T8806] loop1: detected capacity change from 0 to 256
[  237.094826][ T8806] FAT-fs (loop1): Directory bread(block 64) failed
[  237.107959][ T8806] FAT-fs (loop1): Directory bread(block 65) failed
[  237.115779][ T8806] FAT-fs (loop1): Directory bread(block 66) failed
[  237.123766][ T8806] FAT-fs (loop1): Directory bread(block 67) failed
[  237.134337][ T8806] FAT-fs (loop1): Directory bread(block 68) failed
[  237.142131][ T8806] FAT-fs (loop1): Directory bread(block 69) failed
[  237.147776][ T8806] FAT-fs (loop1): Directory bread(block 70) failed
[  237.151208][ T8806] FAT-fs (loop1): Directory bread(block 71) failed
[  237.158207][ T8806] FAT-fs (loop1): Directory bread(block 72) failed
[  237.163872][ T8806] FAT-fs (loop1): Directory bread(block 73) failed
[  237.251453][ T8813] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1393'.
[  237.602893][ T8838] binfmt_misc: register: failed to install interpreter file ./file0
[  237.856262][ T8824] loop1: detected capacity change from 0 to 40427
[  237.862034][ T8824] F2FS-fs (loop1): Invalid log_blocksize (2060), supports only 12
[  237.865864][ T8824] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  237.870671][ T8824] F2FS-fs (loop1): invalid crc value
[  237.872830][ T8824] F2FS-fs (loop1): invalid crc value
[  237.873654][ T8824] F2FS-fs (loop1): Failed to get valid F2FS checkpoint
[  237.937664][ T8752] loop5: detected capacity change from 0 to 131072
[  237.949420][ T8752] F2FS-fs (loop5): invalid crc value
[  237.987552][ T8752] F2FS-fs (loop5): Found nat_bits in checkpoint
[  237.997048][ T8752] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  238.011720][ T8853] device syzkaller0 entered promiscuous mode
[  238.016934][ T8752] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  238.199440][ T8862] loop1: detected capacity change from 0 to 4096
[  238.216363][ T8864] tipc: Started in network mode
[  238.218074][ T8864] tipc: Node identity c229c7498e07, cluster identity 4711
[  238.220296][ T8864] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  238.224106][ T8864] device syzkaller0 entered promiscuous mode
[  238.227112][ T8862] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  238.228346][ T8864] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  238.310800][ T4327] EXT4-fs (loop1): unmounting filesystem.
[  238.340495][ T8864] tipc: Resetting bearer <eth:syzkaller0>
[  238.353969][ T8863] tipc: Resetting bearer <eth:syzkaller0>
[  238.452575][ T8871] loop4: detected capacity change from 0 to 40427
[  238.460451][ T8871] F2FS-fs (loop4): Unrecognized mount option "age_extent_cache" or missing value
[  238.484095][ T8863] tipc: Disabling bearer <eth:syzkaller0>
[  239.872140][ T8915] binfmt_misc: register: failed to install interpreter file ./file0
[  240.050274][ T8913] loop1: detected capacity change from 0 to 2048
[  240.133279][ T8923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  240.135852][ T8923] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.153103][ T8923] loop6: detected capacity change from 0 to 16
[  240.166620][ T8923] erofs: (device loop6): mounted with root inode @ nid 36.
[  240.872260][ T8894] loop3: detected capacity change from 0 to 131072
[  240.894867][ T8894] F2FS-fs (loop3): inline encryption not supported
[  240.896220][ T8894] F2FS-fs (loop3): Test dummy encryption mode enabled
[  240.899756][ T8894] F2FS-fs (loop3): invalid crc value
[  240.915198][ T8894] F2FS-fs (loop3): Found nat_bits in checkpoint
[  240.961320][ T8894] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  241.070054][ T8962] loop4: detected capacity change from 0 to 256
[  241.095516][ T8962] exfat: Deprecated parameter 'utf8'
[  241.096466][ T8962] exfat: Deprecated parameter 'utf8'
[  241.115561][ T8962] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  241.550237][ T8972] loop4: detected capacity change from 0 to 1024
[  241.606056][ T8972] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  241.643404][ T8927] loop1: detected capacity change from 0 to 131072
[  241.663023][ T8927] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[  241.664552][ T8927] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  241.675617][ T8927] F2FS-fs (loop1): invalid crc value
[  241.714525][ T8943] F2FS-fs (loop5): Unrecognized mount option "00000000000000000000" or missing value
[  241.714721][ T4326] EXT4-fs (loop4): unmounting filesystem.
[  241.730968][ T8927] F2FS-fs (loop1): Found nat_bits in checkpoint
[  241.820341][ T8927] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  241.823893][ T8927] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  241.928021][ T8989] binfmt_misc: register: failed to install interpreter file ./file0
[  242.303890][ T8993] Bluetooth: hci5: Frame reassembly failed (-84)
[  242.359597][ T8943] F2FS-fs (loop5): invalid crc value
[  242.386411][ T8943] F2FS-fs (loop5): Found nat_bits in checkpoint
[  242.399542][ T8943] F2FS-fs (loop5): Start checkpoint disabled!
[  242.476254][ T8943] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  242.756085][ T9015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  242.757598][ T9015] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  242.928994][ T9017] binder: 9016:9017 tried to acquire reference to desc 0, got 1 instead
[  242.930775][ T9017] binder: 9016:9017 unknown command 1074553619
[  242.932021][ T9017] binder: 9016:9017 ioctl c0306201 20000c00 returned -22
[  243.057562][   T11] kworker/u4:1: attempt to access beyond end of device
[  243.057562][   T11] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  243.060079][   T11] kworker/u4:1: attempt to access beyond end of device
[  243.060079][   T11] loop5: rw=2049, sector=40976, nr_sectors = 8 limit=40427
[  243.158516][ T9023] set_capacity_and_notify: 5 callbacks suppressed
[  243.158538][ T9023] loop4: detected capacity change from 0 to 256
[  243.372421][ T9023] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  244.304146][ T9037] Soft offlining pfn 0x1451b8 at process virtual address 0x20000000
[  244.312562][ T9037] Soft offlining pfn 0x145f13 at process virtual address 0x20001000
[  244.314201][ T9037] Soft offlining pfn 0x1412ee at process virtual address 0x20002000
[  244.315938][ T9037] Soft offlining pfn 0x14a417 at process virtual address 0x20003000
[  244.317719][ T9037] Soft offlining pfn 0x150699 at process virtual address 0x20004000
[  244.319387][ T9037] Soft offlining pfn 0x13a827 at process virtual address 0x20005000
[  244.321019][ T9037] Soft offlining pfn 0x154736 at process virtual address 0x20006000
[  244.322663][ T9037] Soft offlining pfn 0x154402 at process virtual address 0x20007000
[  244.324477][ T9037] Soft offlining pfn 0x154307 at process virtual address 0x20008000
[  244.326107][ T9037] Soft offlining pfn 0x15410f at process virtual address 0x20009000
[  244.327778][ T9037] Soft offlining pfn 0x151cf8 at process virtual address 0x2000a000
[  244.329709][ T9037] Soft offlining pfn 0x153ba5 at process virtual address 0x2000b000
[  244.331399][ T9037] Soft offlining pfn 0x1548ee at process virtual address 0x2000c000
[  244.333030][ T9037] Soft offlining pfn 0x15478f at process virtual address 0x2000d000
[  244.334790][ T9037] Soft offlining pfn 0x15476e at process virtual address 0x2000e000
[  244.336519][ T9037] Soft offlining pfn 0x141189 at process virtual address 0x2000f000
[  244.338122][ T9037] Soft offlining pfn 0x15673b at process virtual address 0x20010000
[  244.339863][ T9037] Soft offlining pfn 0x15671e at process virtual address 0x20011000
[  244.500189][ T4330] Bluetooth: hci5: command 0x1003 tx timeout
[  244.500215][ T4337] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  244.628892][ T9040] loop3: detected capacity change from 0 to 4096
[  244.685610][ T9040] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  244.691273][ T9049] loop4: detected capacity change from 0 to 2048
[  244.962679][ T9049] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  244.988969][ T4338] EXT4-fs (loop3): unmounting filesystem.
[  244.996257][ T9049] fs-verity: sha256 using implementation "sha256-ce"
[  245.042518][ T4326] EXT4-fs (loop4): unmounting filesystem.
[  245.079697][ T9057] loop4: detected capacity change from 0 to 256
[  245.176157][ T9062] loop3: detected capacity change from 0 to 4096
[  245.185802][ T9062] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  245.187386][ T9062] EXT4-fs (loop3): Test dummy encryption mode enabled
[  245.197530][ T9062] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[  245.198823][ T9062] System zones: 0-5
[  245.200197][ T9062] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  245.224850][ T9064] loop1: detected capacity change from 0 to 16
[  245.231955][ T9066] loop5: detected capacity change from 0 to 512
[  245.234272][ T9064] erofs: (device loop1): mounted with root inode @ nid 36.
[  245.255785][ T9066] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  245.257522][ T9066] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  245.261939][ T9060] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36
[  245.287181][ T9066] EXT4-fs (loop5): 1 truncate cleaned up
[  245.295223][ T9066] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  245.340092][ T9066] EXT4-fs: group quota file already specified
[  245.353705][ T7414] EXT4-fs (loop5): unmounting filesystem.
[  245.467910][ T9072] loop4: detected capacity change from 0 to 256
[  245.866048][ T9072] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  246.538537][ T9086] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  246.540289][ T9086] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  246.701983][ T4338] EXT4-fs (loop3): unmounting filesystem.
[  246.706904][ T9086] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  246.851059][ T9107] loop3: detected capacity change from 0 to 128
[  246.864259][ T9107] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  246.903313][ T4338] EXT4-fs (loop3): unmounting filesystem.
[  246.952399][ T9114] loop3: detected capacity change from 0 to 128
[  246.967450][ T9114] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  246.990199][ T9082] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  246.994161][ T9082] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  246.999058][ T9082] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7
[  247.004103][ T9082] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff
[  247.007993][ T9082] F2FS-fs (loop1): invalid crc value
[  247.025287][ T9082] F2FS-fs (loop1): Found nat_bits in checkpoint
[  247.038770][ T9082] F2FS-fs (loop1): Start checkpoint disabled!
[  247.056131][ T9082] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  247.057825][ T4920] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  247.060152][ T9082] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  247.070034][ T9082] F2FS-fs (loop1) : inject no more block in inc_valid_block_count of __allocate_data_block+0x3a8/0x8a4
[  247.130189][ T4923] kworker/u4:14: attempt to access beyond end of device
[  247.130189][ T4923] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  247.287050][ T9135] overlayfs: failed to get inode (-116)
[  247.293020][ T9135] overlayfs: failed to get inode (-116)
[  247.353226][ T9137] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[  248.924587][ T9149] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  249.030258][ T9158] binder: 9157:9158 tried to acquire reference to desc 0, got 1 instead
[  249.049956][ T9158] binder: 9158:9157 failed to get security context
[  249.051078][ T9158] binder: 9157:9158 transaction async to 9157:0 failed 15/29201/-22, size 0-88 line 3197
[  249.064010][   T14] binder: undelivered TRANSACTION_ERROR: 29201
[  249.104142][ T9164] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  249.105919][ T9164] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  249.146266][ T9170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  249.147927][ T9170] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  249.177449][ T9164] tipc: Resetting bearer <eth:syzkaller0>
[  249.315551][ T9161] tipc: Disabling bearer <eth:syzkaller0>
[  249.405718][ T2063] ieee802154 phy0 wpan0: encryption failed: -22
[  249.406968][ T2063] ieee802154 phy1 wpan1: encryption failed: -22
[  249.532948][ T9188] set_capacity_and_notify: 3 callbacks suppressed
[  249.532957][ T9188] loop3: detected capacity change from 0 to 256
[  249.539201][ T9188] FAT-fs (loop3): Directory bread(block 1285) failed
[  249.544945][ T9188] FAT-fs (loop3): Directory bread(block 1286) failed
[  249.546363][ T9188] FAT-fs (loop3): Directory bread(block 1287) failed
[  249.547705][ T9188] FAT-fs (loop3): Directory bread(block 1288) failed
[  249.551349][ T9188] FAT-fs (loop3): Directory bread(block 1285) failed
[  249.553608][ T9188] FAT-fs (loop3): Directory bread(block 1286) failed
[  249.554930][ T9188] FAT-fs (loop3): Directory bread(block 1287) failed
[  249.556438][ T9188] FAT-fs (loop3): Directory bread(block 1288) failed
[  249.558842][ T9188] FAT-fs (loop3): Directory bread(block 1285) failed
[  249.565215][ T9188] FAT-fs (loop3): Directory bread(block 1286) failed
[  249.589149][ T9192] loop3: detected capacity change from 0 to 256
[  249.590999][ T9192] exfat: Deprecated parameter 'utf8'
[  249.599300][ T9192] exfat: Deprecated parameter 'namecase'
[  249.600300][ T9192] exfat: Deprecated parameter 'namecase'
[  249.606715][ T9192] exfat: Deprecated parameter 'utf8'
[  249.620215][ T9192] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d)
[  249.752087][ T9205] loop4: detected capacity change from 0 to 512
[  249.757090][ T9207] loop6: detected capacity change from 0 to 512
[  249.761007][ T9205] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)!
[  249.857876][ T9208] loop3: detected capacity change from 0 to 256
[  250.305234][ T9205] EXT4-fs (loop4): group descriptors corrupted!
[  250.821184][ T9208] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  250.833693][ T9207] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  250.866331][ T8192] EXT4-fs (loop6): unmounting filesystem.
[  251.220211][ T9217] loop6: detected capacity change from 0 to 40427
[  251.290405][ T9227] loop3: detected capacity change from 0 to 40427
[  251.306463][ T9217] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  251.307768][ T9217] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  251.324788][ T9217] F2FS-fs (loop6): invalid crc value
[  251.326615][ T9227] F2FS-fs (loop3): Wrong SIT boundary, start(1536) end(150997504) blocks(1024)
[  251.328443][ T9227] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  251.341989][ T9217] F2FS-fs (loop6): Found nat_bits in checkpoint
[  251.347477][ T9242] loop4: detected capacity change from 0 to 1024
[  251.349061][ T9227] F2FS-fs (loop3): invalid crc value
[  251.354078][ T9242] ext4: Unknown parameter 'subj_user'
[  251.632835][ T9217] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  251.634378][ T9217] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  251.698196][ T9227] F2FS-fs (loop3): Found nat_bits in checkpoint
[  251.723142][ T9217] syz.6.1496: attempt to access beyond end of device
[  251.723142][ T9217] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  251.739085][ T9217] syz.6.1496: attempt to access beyond end of device
[  251.739085][ T9217] loop6: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  251.744249][ T9227] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  251.745472][ T9227] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  251.877529][ T9259] loop4: detected capacity change from 0 to 128
[  252.872274][ T9259] FAT-fs (loop4): Directory bread(block 162) failed
[  252.873451][ T9259] FAT-fs (loop4): Directory bread(block 163) failed
[  252.874576][ T9259] FAT-fs (loop4): Directory bread(block 164) failed
[  252.875728][ T9259] FAT-fs (loop4): Directory bread(block 165) failed
[  252.876894][ T9259] FAT-fs (loop4): Directory bread(block 166) failed
[  252.878462][ T9259] FAT-fs (loop4): Directory bread(block 167) failed
[  252.879595][ T9259] FAT-fs (loop4): Directory bread(block 168) failed
[  252.880878][ T9259] FAT-fs (loop4): Directory bread(block 169) failed
[  252.882023][ T9259] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  252.897531][ T9254] FAT-fs (loop4): Directory bread(block 162) failed
[  252.898954][ T9254] FAT-fs (loop4): Directory bread(block 163) failed
[  252.901374][ T9254] syz.4.1507: attempt to access beyond end of device
[  252.901374][ T9254] loop4: rw=3, sector=226, nr_sectors = 6 limit=128
[  252.904061][ T9254] syz.4.1507: attempt to access beyond end of device
[  252.904061][ T9254] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128
[  252.911248][ T4923] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  252.915599][ T4923] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  253.078576][ T4338] syz-executor: attempt to access beyond end of device
[  253.078576][ T4338] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  253.124686][ T9274] loop5: detected capacity change from 0 to 512
[  253.137046][ T9274] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  253.417138][ T9283] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  253.956953][ T9274] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  254.023715][ T7414] EXT4-fs (loop5): unmounting filesystem.
[  254.216240][ T9302] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1513'.
[  254.298835][ T9315] exfat: Deprecated parameter 'namecase'
[  254.319786][ T9315] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf168f48e, utbl_chksum : 0xe619d30d)
[  254.589198][ T9316] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  254.596237][ T9316] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  254.602446][ T9316] F2FS-fs (loop6): invalid crc value
[  254.623860][ T9316] F2FS-fs (loop6): Found nat_bits in checkpoint
[  254.651984][ T9319] F2FS-fs (loop4): Unrecognized mount option "age_extent_cache" or missing value
[  254.654071][ T9316] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  254.655535][ T9316] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  255.112157][ T9362] set_capacity_and_notify: 4 callbacks suppressed
[  255.112176][ T9362] loop6: detected capacity change from 0 to 256
[  255.234437][ T9362] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  255.873305][ T9363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  255.874762][ T9363] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  256.110732][ T9371] xt_l2tp: v2 tid > 0xffff: 117440512
[  256.703723][    C0] sched: RT throttling activated
[  257.629527][ T9405] loop6: detected capacity change from 0 to 256
[  257.698727][ T9344] loop5: detected capacity change from 0 to 131072
[  257.738822][ T9344] F2FS-fs (loop5): invalid crc value
[  258.836797][ T9344] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-4)
[  259.150589][ T9438] loop6: detected capacity change from 0 to 512
[  259.167229][ T9438] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: comm syz.6.1550: inode #5: comm syz.6.1550: iget: illegal inode #
[  259.171780][ T9438] EXT4-fs (loop6): Remounting filesystem read-only
[  259.172951][ T9438] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1550: error while reading EA inode 5 err=-117
[  259.181946][ T9438] EXT4-fs (loop6): Remounting filesystem read-only
[  259.183479][ T9438] EXT4-fs (loop6): 1 truncate cleaned up
[  259.184494][ T9438] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  259.200641][ T8192] EXT4-fs (loop6): unmounting filesystem.
[  259.254875][ T9445] loop6: detected capacity change from 0 to 512
[  259.276532][ T9445] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[  259.277987][ T9445] System zones: 1-12
[  259.280497][ T9445] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1551: invalid indirect mapped block 1819239214 (level 1)
[  259.313927][ T9445] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1551: bg 0: block 361: padding at end of block bitmap is not set
[  259.319438][ T9445] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  259.327772][ T9445] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.1551: attempt to clear invalid blocks 33619980 len 1
[  259.336020][ T9445] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1551: invalid indirect mapped block 1819239214 (level 0)
[  259.347147][ T9445] EXT4-fs (loop6): 1 truncate cleaned up
[  259.348126][ T9445] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  259.394072][ T8192] EXT4-fs (loop6): unmounting filesystem.
[  259.989325][ T9476] binder: 9475:9476 ioctl c00c620f 0 returned -14
[  260.081259][ T9481] loop6: detected capacity change from 0 to 256
[  260.095795][   T14] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  260.097441][   T14] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  260.112193][ T9481] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  260.159277][ T9485] fido_id[9485]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  260.229275][ T9499] loop6: detected capacity change from 0 to 256
[  260.246561][ T9499] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  260.252948][ T9499] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  260.273833][ T9499] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  260.403839][ T9514] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  260.405650][ T9514] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  261.596931][ T9517] device syzkaller0 entered promiscuous mode
[  261.645626][ T9520] loop5: detected capacity change from 0 to 256
[  261.649609][ T9520] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  261.756538][ T4376] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  261.758506][ T4376] hid-generic 0000:0000:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  261.814787][ T9530] loop1: detected capacity change from 0 to 128
[  261.880814][ T9521] loop6: detected capacity change from 0 to 40427
[  261.899165][ T9535] loop3: detected capacity change from 0 to 1024
[  261.900881][ T9521] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  261.902113][ T9521] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  261.908879][ T9521] F2FS-fs (loop6): invalid crc value
[  261.970264][ T9543] loop1: detected capacity change from 0 to 256
[  261.974072][ T9543] exfat: Deprecated parameter 'namecase'
[  261.976446][ T9543] exfat: Deprecated parameter 'namecase'
[  261.985376][ T9543] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  261.992190][ T9535] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  262.010160][ T9521] F2FS-fs (loop6): Found nat_bits in checkpoint
[  262.307872][ T9521] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  262.311924][ T9521] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  262.340992][ T4338] EXT4-fs (loop3): unmounting filesystem.
[  262.885159][ T9570] loop6: detected capacity change from 0 to 256
[  262.919025][ T9572] device syzkaller0 entered promiscuous mode
[  262.922664][ T9574] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1585'.
[  262.996393][    T7] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  262.999212][    T7] hid-generic 0000:0000:0000.0013: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  263.097798][ T9582] binder: 9580:9582 tried to acquire reference to desc 0, got 1 instead
[  263.099626][ T9582] binder: 9580:9582 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  263.101742][ T9582] binder: 9582 RLIMIT_NICE not set
[  263.125688][ T9587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  263.940950][ T9585] fido_id[9585]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  263.944135][ T9587] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  263.947926][ T4376] binder: release 9580:9589 transaction 20 out, still active
[  263.949157][ T4376] binder: undelivered TRANSACTION_COMPLETE
[  264.160610][ T9597] loop4: detected capacity change from 0 to 256
[  264.166914][ T9597] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  264.171721][ T9597] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  264.175288][ T9597] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  264.218771][ T9599] loop4: detected capacity change from 0 to 16
[  264.220678][ T9599] erofs: (device loop4): mounted with root inode @ nid 36.
[  264.233050][ T9599] syz.4.1596: attempt to access beyond end of device
[  264.233050][ T9599] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16
[  264.241187][ T9599] syz.4.1596: attempt to access beyond end of device
[  264.241187][ T9599] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16
[  264.251924][ T9599] ==================================================================
[  264.253219][ T9599] BUG: KASAN: use-after-free in z_erofs_transform_plain+0x39c/0x494
[  264.254641][ T9599] Read of size 4096 at addr ffff0000f8f67000 by task syz.4.1596/9599
[  264.255969][ T9599] 
[  264.256344][ T9599] CPU: 1 PID: 9599 Comm: syz.4.1596 Not tainted syzkaller #0
[  264.257604][ T9599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[  264.259422][ T9599] Call trace:
[  264.260021][ T9599]  dump_backtrace+0x1c4/0x1f0
[  264.260877][ T9599]  show_stack+0x2c/0x3c
[  264.261651][ T9599]  __dump_stack+0x30/0x40
[  264.262455][ T9599]  dump_stack_lvl+0xf4/0x15c
[  264.263259][ T9599]  print_address_description+0x88/0x218
[  264.264249][ T9599]  print_report+0x50/0x68
[  264.265035][ T9599]  kasan_report+0xa8/0xfc
[  264.265824][ T9599]  kasan_check_range+0x258/0x290
[  264.266753][ T9599]  memcpy+0x48/0x90
[  264.267451][ T9599]  z_erofs_transform_plain+0x39c/0x494
[  264.268459][ T9599]  z_erofs_decompress+0x9c/0xd4
[  264.269356][ T9599]  z_erofs_decompress_queue+0x103c/0x1bf4
[  264.270335][ T9599]  z_erofs_runqueue+0x1508/0x16a8
[  264.271189][ T9599]  z_erofs_read_folio+0x2dc/0x5cc
[  264.272057][ T9599]  filemap_read_folio+0x134/0x384
[  264.272885][ T9599]  filemap_read+0x1290/0x20dc
[  264.273681][ T9599]  generic_file_read_iter+0xf8/0x5ac
[  264.274590][ T9599]  vfs_read+0x3cc/0x7b8
[  264.275313][ T9599]  ksys_read+0x12c/0x228
[  264.276066][ T9599]  __arm64_sys_read+0x7c/0x90
[  264.276899][ T9599]  invoke_syscall+0x98/0x290
[  264.277734][ T9599]  el0_svc_common+0x13c/0x258
[  264.278559][ T9599]  do_el0_svc+0x5c/0x134
[  264.279325][ T9599]  el0_svc+0x58/0x128
[  264.280026][ T9599]  el0t_64_sync_handler+0x84/0xf0
[  264.280928][ T9599]  el0t_64_sync+0x18c/0x190
[  264.281751][ T9599] 
[  264.282179][ T9599] Allocated by task 9411:
[  264.282920][ T9599]  kasan_set_track+0x4c/0x80
[  264.283720][ T9599]  kasan_save_alloc_info+0x24/0x30
[  264.284585][ T9599]  __kasan_slab_alloc+0x70/0x88
[  264.285206][ T9596] loop5: detected capacity change from 0 to 40427
[  264.285396][ T9599]  slab_post_alloc_hook+0x74/0x430
[  264.287366][ T9599]  kmem_cache_alloc+0x234/0x310
[  264.288203][ T9599]  vm_area_dup+0x30/0x1c4
[  264.288975][ T9599]  __split_vma+0xc8/0x44c
[  264.289751][ T9599]  do_mas_align_munmap+0x5f4/0xf28
[  264.290605][ T9599]  mmap_region+0x6a0/0x1860
[  264.291335][ T9599]  do_mmap+0xa64/0x1210
[  264.292042][ T9599]  vm_mmap_pgoff+0x194/0x298
[  264.292840][ T9599]  ksys_mmap_pgoff+0x364/0x5a0
[  264.292896][ T9596] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64)
[  264.293675][ T9599]  __arm64_sys_mmap+0x108/0x120
[  264.293693][ T9599]  invoke_syscall+0x98/0x290
[  264.295650][ T9596] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  264.295742][ T9599]  el0_svc_common+0x13c/0x258
[  264.297417][ T9596] F2FS-fs (loop5): invalid crc value
[  264.297922][ T9599]  do_el0_svc+0x5c/0x134
[  264.300523][ T9599]  el0_svc+0x58/0x128
[  264.301214][ T9596] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  264.301246][ T9599]  el0t_64_sync_handler+0x84/0xf0
[  264.304032][ T9599]  el0t_64_sync+0x18c/0x190
[  264.304829][ T9599] 
[  264.305245][ T9599] Freed by task 9411:
[  264.305973][ T9599]  kasan_set_track+0x4c/0x80
[  264.306775][ T9599]  kasan_save_free_info+0x38/0x5c
[  264.307660][ T9599]  ____kasan_slab_free+0x148/0x1b0
[  264.308493][ T9599]  __kasan_slab_free+0x18/0x28
[  264.309320][ T9599]  slab_free_freelist_hook+0x16c/0x1e8
[  264.310261][ T9599]  kmem_cache_free+0x118/0x318
[  264.311096][ T9599]  vm_area_free+0x58/0x128
[  264.311871][ T9599]  do_mas_align_munmap+0xc68/0xf28
[  264.312728][ T9599]  mmap_region+0x6a0/0x1860
[  264.313525][ T9599]  do_mmap+0xa64/0x1210
[  264.314245][ T9599]  vm_mmap_pgoff+0x194/0x298
[  264.315066][ T9599]  ksys_mmap_pgoff+0x364/0x5a0
[  264.315966][ T9599]  __arm64_sys_mmap+0x108/0x120
[  264.316885][ T9599]  invoke_syscall+0x98/0x290
[  264.317751][ T9599]  el0_svc_common+0x13c/0x258
[  264.318628][ T9599]  do_el0_svc+0x5c/0x134
[  264.319387][ T9599]  el0_svc+0x58/0x128
[  264.320130][ T9599]  el0t_64_sync_handler+0x84/0xf0
[  264.321078][ T9599]  el0t_64_sync+0x18c/0x190
[  264.321928][ T9599] 
[  264.322359][ T9599] The buggy address belongs to the object at ffff0000f8f67000
[  264.322359][ T9599]  which belongs to the cache vm_area_struct of size 152
[  264.322647][ T9596] F2FS-fs (loop5): Start checkpoint disabled!
[  264.324730][ T9599] The buggy address is located 0 bytes inside of
[  264.324730][ T9599]  152-byte region [ffff0000f8f67000, ffff0000f8f67098)
[  264.324751][ T9599] 
[  264.324753][ T9599] The buggy address belongs to the physical page:
[  264.324757][ T9599] page:00000000d89ba344 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x138f67
[  264.331327][ T9599] memcg:ffff0000d5bf2001
[  264.332112][ T9599] flags: 0x5ffc00000000200(slab|node=0|zone=2|lastcpupid=0x7ff)
[  264.333503][ T9599] raw: 05ffc00000000200 0000000000000000 dead000000000122 ffff0000c03df680
[  264.335075][ T9599] raw: 0000000000000000 0000000000120012 00000001ffffffff ffff0000d5bf2001
[  264.336655][ T9599] page dumped because: kasan: bad access detected
[  264.337861][ T9599] 
[  264.338311][ T9599] Memory state around the buggy address:
[  264.339377][ T9599]  ffff0000f8f66f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  264.340888][ T9599]  ffff0000f8f66f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  264.342383][ T9599] >ffff0000f8f67000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  264.343797][ T9599]                    ^
[  264.344499][ T9599]  ffff0000f8f67080: fb fb fb fc fc fc fc fc fc fc fc fa fb fb fb fb
[  264.345844][ T9599]  ffff0000f8f67100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc
[  264.347255][ T9599] ==================================================================
[  264.355185][ T9596] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  264.356535][ T9596] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  264.358180][ T9599] Disabling lock debugging due to kernel taint
[  264.359434][ T9599] syz.4.1596: attempt to access beyond end of device
[  264.359434][ T9599] loop4: rw=0, sector=1056, nr_sectors = 8 limit=16
[  264.370067][ T4933] kworker/u4:16: attempt to access beyond end of device
[  264.370067][ T4933] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  264.570829][ T4376] binder: send failed reply for transaction 20, target dead