last executing test programs:

3.976315312s ago: executing program 4 (id=2312):
syz_emit_ethernet(0x66, &(0x7f0000000280)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x65, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1}}}}}}}}, 0x0)

3.928202453s ago: executing program 1 (id=2313):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000002000)='./file0\x00', 0x180c8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1, 0x292, &(0x7f0000000d80)="$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")

3.928050083s ago: executing program 1 (id=2314):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000740)='./file1\x00', 0xa00004, &(0x7f0000000340)={[{@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@longad}, {@dmode}, {}, {@nostrict}, {@utf8}, {@uid_ignore}, {}, {}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@anchor={'anchor', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@adinicb}, {@rootdir={'rootdir', 0x3d, 0x1}}]}, 0x5, 0xc87, &(0x7f0000000780)="$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")

3.913463224s ago: executing program 1 (id=2316):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mprotect(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0xc)
mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmmsg$sock(r0, &(0x7f00000002c0), 0x0, 0x0)
shutdown(r0, 0x1)

3.813095546s ago: executing program 4 (id=2318):
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x80b}}}, 0x7)

3.760066477s ago: executing program 3 (id=2320):
waitid(0x0, 0x0, 0x0, 0x61000006, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1000080, &(0x7f0000000180)=ANY=[@ANYBLOB="0017b0615ea1def37e0058855f3cbcb7a66a0c69522e8e82a984cc8a80b6acf8061b28d6a835c49830f08c01afd4327410bb11e0fa68993217daaba5c6a5dfb2fb0038a5da43b38209017d4610ade811c43f3b8f28fdcadcebba31dab440f05639"], 0x12, 0x32b, &(0x7f0000000840)="$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")
setuid(0x0)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0xa04080, &(0x7f0000000000)={[{@block_validity}, {@test_dummy_encryption_v1}]}, 0x4, 0xbac, &(0x7f00000017c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0xfffffffffffffffa, 0xde6115f5652a37ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0xffffffffffffffff}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
unshare(0x22020600)
r4 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
prctl$PR_CAPBSET_READ(0x17, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000005500)={0x2020}, 0x204e)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

3.568070772s ago: executing program 4 (id=2321):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$isdn_base(0x22, 0x3, 0x0)
bind$isdn_base(r1, &(0x7f0000000140)={0x22, 0x91, 0x3, 0x6, 0x81}, 0x6)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x2, 0x1}, {0x4, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x34)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(0x0, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080b1}, 0x8000)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x24}]}, @void}, 0x27)
setresuid(0x0, 0xee01, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200700, &(0x7f00000000c0)={[{@nolazytime}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@stripe={'stripe', 0x3d, 0x9}}, {@nombcache}, {@data_err_ignore}, {@debug}, {@data_writeback}]}, 0x1, 0x491, &(0x7f0000000680)="$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")

3.040179266s ago: executing program 0 (id=2330):
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xb}, @hci_ev_le_remote_conn_param_req={{}, {0xc9, 0x9645, 0x2, 0xd, 0xc43a}}}}, 0xe)

2.971440107s ago: executing program 0 (id=2332):
syz_mount_image$hfs(&(0x7f0000000280), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1210880, &(0x7f00000006c0)=ANY=[@ANYBLOB="636f6465706167653d757466382c747970653d70786f723d66f04f8e2c756d617359866b3d30303737373737373737373737373737373737373737372c696f636861727365743d63703836392c756d61736b3d30303030303030303030303030303030303030313333352c6769643deac468e2098c5383809a6569e53d2fa68cefc2592a111344a3795f9ac9dab0c719d11cf9acd07a46c475208b364f179945accfba0f64ab410a1634185ccd8263169bb4dfb1f9e86c389cb5c56b2d28", @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x41, 0x32e, &(0x7f0000000b00)="$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")

2.970989827s ago: executing program 0 (id=2334):
openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x240, 0x6c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000400)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xa7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r8=>0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
syz_ublk_setup_queues(r10, r8, &(0x7f0000000580)={0x0, 0x5d9d, 0x800, 0x2, 0x22d, 0x0, r3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad67, 0x200, 0x3, 0x8b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe04b, 0x400, 0x3, 0x251}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdc2b, 0x10, 0x0, 0x2f3, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1708, 0x4000, 0x0, 0x21}}], 0x4, &(0x7f0000002080)={0x2e, 0x81, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x94}, 0x0, 0x0, '\x00', {0x2, 0x54, 0x0, 0x0}}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

2.970623337s ago: executing program 1 (id=2335):
setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000180)={@loopback, @loopback, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0x0, 0x0, 0x9}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r3, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2)
shutdown(r3, 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r5, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)

2.526489358s ago: executing program 3 (id=2340):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000a0000000be00000000000000180000000000000000000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x8980, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0)
ppoll(&(0x7f0000000240), 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0, 0x0)
ioctl$BLKROGET(r1, 0x125e, &(0x7f00000000c0))
r2 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r3, 0x16, 0x0, @val=@tracing={0x0, 0x81}}, 0x20)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0xe)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0)
mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x90009427, &(0x7f0000000180))
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'})
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCGFLAGS1(r5, 0x40047452, &(0x7f0000000100))

2.500539149s ago: executing program 2 (id=2341):
syz_mount_image$jfs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0xc03, &(0x7f0000008040)=ANY=[], 0x2, 0x5fbf, &(0x7f0000002080)="$eJzs3VtvHGf9B/DfHrw+9N/U6kWVf8QhTTm0lCaNkzYtp6ZC4gIEVKpyn8i4VYQLKAkVrSzsKhL3SFyj8iK4BqHeIBWJl8AbiGT3hghEBo39PM54vPbaJN5Zez4fyZn97TPjfSZfj2fXc3gCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIjvf+/ti52IuP5+emI+4v+iF9GNmC3rs/HXiNX7ef5+RJyOzeZ4JiJOTUeUy2/+81TE5Yj49FTE+sbKYvn0wgH78cpb9/72w7d/tPbbL/7l7//+5Pd/qre/9cl3f/DH1Yj507/53X9WH8+6AwAAQFsURVF0Nj/mR5xJn++7TXcKABiLvP8vkvy8Wv0odT92aro/arVard6tGG61WkTEWnWZ8j2Dw/EAcMysxf2mu0CD5N9q/Yh4oulOABOt03QHOBLrGyuLnZRvp7o/OLvVns8F2ZH/Wmf7+o69pqPUzzEZ18/X3ejF03v0Z3ZMfZgkOf9uPf/rW+2DNN9R5z8ue+U/2Lr0qXVy/r16/jUnJ//u0PzbKuffP1T+PfkDAAAAAMAEy3//n2/4+O/0o6/Kgex3/PfsmPoAAAAAAAAAAI/bAcb/Kx9czfPXx//bZvw/AAAAmFjlZ/XSx6cePrfXvdjK5691Ip6szQ+0TLpYZq7pfgAAAAAAAAAAAABAm/S3zuG91omYiogn5+aKoii/qur1YT3q8sdd29cf2qzpX/IAALDl01O1a/k7ETMRcS3d629qbm6uKGZm54q5YnY6v58dTM8Us5XPtXlaPjc9OMAb4v6gKL/ZTGW5qlGfl0e1179f+VqDoneAjo1Hg4EDQERs7Y3W7ZFOmKJ4Kpp+l8PxYPs/eWz/HETTP6cAAADA0SuKouik23mfScf8u013CgAYi7z/rx8XUKvVarVaffLqqmK41WoREWvVZcr3DIbjB4BjZi3uN90FGiT/VutHxOmmOwFMtE7THeBIrG+sLHZSvp3q/iCN757PBdmR/1pnc7m8/LDpKPVzTMb183U3evH0Hv15Zkx9mCQ5/249/+tb7YM031HnPy575V+u53wD/Wlazr9Xz7/m5OTfHZp/W+X8+4fKvyd/AAAAAACYYPnv//OO/+ZVBgAAAAAAAIBjZ31jZTFf95qP/39uyHyu/zyZcv4d+bdSzr9bz792Qk6v8vjemw/z/2xjZfHj/7/yhTyd+PyneoPytac63V5/65yff+Zbmy7Fy7vmL+cppt6Jm7EcS3FxV/vUjvaFEe2XdrUPyvbZ3H4+FuPnsRw/2W6fHnFi1MyI9mJEe86/Z/tvpZx/v/JV5j+X2ju1aeneR91d2311Oux1rv74wZXdW9f43Y3e9rpVlet3roH+bP6fPDGIX95eunX+Vzfu3Ll1MdJkx7MLkSaPWc5/Kn3l/J9/bqs9/96vbq/3PhocOv9JcTf6e+b/XOVxub4vjLlvTcj5D9JXzj/vgYZv/8c5/723/xcb6A8AAAAAAAAAAAAAAADspyiKzUtEr0bEq+n6n6auzQQAxivv/4t8M4xErVar1Wr1yauriuHeqBYR8efqMuV7hl8P+2YAwCR7EBH/aLoTNEb+LZbv91dOv9R0Z4Cxuv3Bhz+9sby8dOv2/7J00Xv8PQIAAAAAAAAADiuP/3m2Mv7z5nlAtXGjd4z/+mac/WxjZfH9+X99/tiN/9kd9DbHOk8r9GxUx+fePULxudh//O/+iNebGtE+GNE+PaJ9ZkT70As9KnL+z6aMc/5n0ortN/5rzr8+HfGSjdpv/NfnG+hP03L+59JYzzn/r9bmq+Zf/OE4j//b3ZH/hTvv/eLC7Q8+fOnmezfeXXp36WeXLi+8fnHhyuXXXr7wzs3lpfRvgz0+Wjn/PPa180DbJeefM5d/u+T8v5xq+bdLzv8rqZZ/u+T88/s9+bdLzj9/9tnO/0Gz/WI8cv4vpNr23y45/6+lWv7tkvN/MdXyb5ec/9dTLf92yfm/lGr5t0vO/3yq5d8uOf8LqZZ/u+T88xEu+bdLzj+f2SD/dsn5L6Ra/u2S87+Uavm3S87/cqrl3y45/1dSLf92yfm/mupD5O/eXydAzv9Kqm3/7ZLzfy3V8m+XnP/rqZZ/u+T8v5Fq+bdLzv+bqZZ/u+T8v5Vq+bdLzv/bqZZ/u+T8vxMPLyaVf3vk/N9Ite2/XR7e/98DDzzwID9o+jcTAAAAAAAAAAAAAFA3jtOJm15HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKe3cXI1d53w/87Ju9NsTeJIbwYmBtDBhYvOsX/PL/18FASCm0DSGBvpEa116bTfxWr00AIbERNEUCqVxwQSslBYSqXKQKahM1SDSiUqU2vWmv2psqrdSoQlGonKg3jQquzpzneTwzOzuz6921Z875fBD+eWfOzDx75szsfsf6zgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQb8O9k3/Yl2VZ/n/tj5Esuzz/+6psX/7lzM5LvUIAAABgsT6s/fnttemEffO4UN02f3f9P3733Llz57LsT9Z96tV8BqNZtmZllhXnBcM/OdmwTfB8NtzXX/d1f4ebH+hw/mCH84c6nL+iw/krO5w/3OH8WTtgllXF6zG1K9tU++tIsUuzddlQ7bxNLS71fN/K/v74Wk5NX+0y54YOZ1PZ0Wwym5h1mb7af1n27ob8tu7P4m31193W+izLzv7s2YNxDX1hH2/KGm6spv6+++DubPTnP3v24JMjv7iu1ey4G2atNMs2b8zX+UKWnX+5KuvLVqZ9EtfZX7fO9S3WOdCwzr7a5fK/N6/z7DzXGb/v4bDOf2qzzvXhtKduzLJsJptzm2bPZ/3Z6qZbTft7uDgi8uvI78pPZIMLOk42zOM4yS/z4xsbj5PmYzLu/w1hnwzOsYb6u+ODr62Ytd8v9DjJv+tuOFbz634ov9Hh4fqXVhuO1XybZ2+a+xhoed+1OAbSsVx3DGzsdAz0rxioHQP959e8seEY2DrrMv1ZX+223r+p/TEwfvrYyfHpp5+5Y+rYgSOTRyaPb9+xbc/Wbbt27J4YPzx1dDL8ubBd2kNWZ/3pGNwYnmviMXhL07b1h+S5N4rHwetX77q+1VzIGoaX6HGwmDVk4Xj54s35gi7vz+Y4xvNtXti8+MdB+rlf9zgYrHsctHxObfE4GJzH4yDf5uzm+f3MHKz7v9UaWj0XLsUxMFJ3DCzm52H9Gi7k52F+m4/dOvdz4fqwrhdvW+jPw4FZx0D8tvrCYy8/Jf2+N7w77JfZx8U1+RmXrcjOTE+e2vLUgdOnT23NwrgoPll3XzUfL6vrvqds1vHSv+DjZd/nPtp1TYvTR8K+Gr69/X2Vb7NjrP19VXt2b70/G07dloWxxC72/mz10yzfnylLtNmf+TYv3LH43wVTLql7/hvq9Pw3MDRYPP8NpL0x1PD8N/uuGaitLMvO3jG/57+h8P/Ffv5b1yXPf/m+emxL+2Mg3+bF8YUeA4Ntn/9uDLMvrOfWkBiG63L/R7XzZ4rDtO6+7HjcDA4OheNmMN5i43GzfdZl8mvLb3vzxIUdN5tvbLyvGn5vKeFxk++rVyfaHzf5Nu9tXfxzx6r417rnjhWdjoGhgRX5eofSQVA8351bFY+BLdnB7ER2NDuULpPfy/ltjW2b3zGwIvx/sZ87ruqSYyDfV69ta38M5Nv87fal/d1pczglbVP3u1Pz6wtzZf5rBs9fX/NuW+rMn6/zMzvavzaUb/PTHQvNGe330+3hlMta7Kfmx89cx/ShrPN+WqpjOl/n0TvbvzaVb7Nu5zyPp31Zlr3z0lvF613F67t/ceafv9vwum+r15Tfeemtz1/9wx8uZP0AAFy4j2p/zqwoftes+xfr+fz7PwAAANATYu7vDzOR/wEAAKA0Yu4fCDOR/wEAAKA0Yu4fDDPZ1+nd8crhib6vv/rhc1l6N8BzQTw/vgzy0Mpiu9jxnglfj547Lz/9nreGHvzec/O77f4sy/73gWtbbv/Eyriuwsm4zoHG02e56oZ53f7jj5zfrv79E872F9cfv5/5vgwUu8rv/ts9tesdvbWY7z2Q1ebDMy8+X7v+PcXXcfv3/6PY7hvhTUv2He5ruPzmsJ5NYY6G95R5aNX5/ZDPeLnvvHvk7z/96Pnbi5fr27im9m2+tqW43vgeUa/8ZbF9/L7nWv9fv/St7+TbP3VT6/U/1996/e+H6/1xmP/zQXF6/T7/Xt36/yCsP95evNyWN3/Qcv1v/1Wx/dvhuHg9zOb13/1H133Y6v6Kt7NvsLhcvP2JP7uvdrl4ffH6m9c/PH5Pw/5ovv733iyuZ++T/z1Qv308Pd5O9Phg4/HdF+7fhh55lmXf+nrWsJ+zoeJy7zStP17fycHW67+9aZ0n33iidvnm7yf65iP3tvx+43r2/flIw/fzypqw//pX/UN+ve9fG47HcP4vZorra34v07fXND7fxO1fHyket/H6xpvW/0rT+mduyPdd5/Xf//Ni/W/ftbJh/fvWhuPp48XstP4jf7q24fJvfLZYz6mvjh0/MX1mKr7HwUjT43jl8KrVl13+sTVrw3Np89f7T5x+YvLU6MToRJaN9uBbBi73+t8M87+KMbP0t1D4l8HiuHv5weLn1i1DxdevhNMfD/dn/Pn4zT8eajhem+/3meFiLnb9t4V1zNf6TT/ZPa8N/3PH26/+68Nfav69IH4/J68Yrn1/r224snZe33vF+c3PV538+xWNj+sfrSvm98N+PRfemXnjlcXtNV9/fG+Sl79QPH7jb3Lx8lnT+4mMDDR+H4td/4/C7zE/uKrx+S8eH99/rundnEeyvnwJM+H5IZspzo9bxf398tkrW95efB+ebObqhSxzTtNPT48fnTp+5qnx05PTp8enn35m/7ETZ46f3l9779L9X+50+fOP79W1x/ehyZ07stqj/UQxltmlXv/JRw4e2jVx86HJwwfOHD79yMnJU0cOTk8fnDw0ffOBw4cnv9rp8lOH9m7dtmf7rm1jR6YO7d29Z8/2PWNTx0/kyygW1cHOia+MHT+1v3aR6b079my9884dE2PHThya3LtrYmLsTKfL1342jeWXfnLs1OTRA6enjk2OTU89M7l3656dO7d1fPfHYycPT4+OnzpzfPzM9OSp8eJ7GT1dOzn/2dfp8lTD9NrwfNekL/x2ft/tO9P74+be+tqcV1VsMtJ44k/De0F9Y3j77vl8HXP/UJiJf/8HAACA0oi5P3w+xfnX3eV/AAAAKI3wgX/hMyP9+z8AAACUUcz9w2EmFcn/+v/6/xfQ/091bf1//f9M/1//vwP9f/3/dvT/9f97ef36//r/dNZt/f+Y+1dlWSXzPwAAAFRBzP2rw0zkfwAAACiNmPsvCzOR/wEAAKA0Yu6/PMykIvlf/1//3+f/l6//35dlM/r/+v/dQv9f/78d/X/9/15ev/6//j+ddVv/P+b+j4WZVCT/AwAAQBXE3L8mzET+BwAAgNKIuX9tmIn8DwAAAKURc/9ImEmZ8v9dc5+l/1/1/v+A/n8J+/8+/7+g/98d9P/1/9vR/9f/7+X16//r/9NZt/X/Y+7/eJhJmfI/AAAAVFzM/Z8IM5H/AQAAoDRi7v9kmIn8DwAAAKURc/+6MJOK5H/9/6r3/33+f6b/v4z9/7il/r/+v/5/r/f/V4WT9f8b6f/r/+v/6//TXrf1/2PuvyLMpCL5HwAAAKog5v4rw0zkfwAAACiNmPs/FWYi/wMAAEBpxNx/VZhJRfK//r/+v/6//r/P/9f/X076/+Xo/8eT9f8b6f/r/+v/6//TXrf1/2PuvzrMpCL5HwAAAKog5v5rwkzkfwAAACiNmPuvDTOR/wEAAKA0Yu5fH2ZSkfyv/6//r/+v/6//r/+/nPT/9f/b0f/X/+/l9ev/6//TWbf1/2Puvy7MpCL5HwAAAKog5v7rw0zkfwAAACiNmPtvCDOR/wEAAKA0Yu4fDTOpSP7X/9f/1//X/9f/1/9fTvr/+v/t6P/r//fy+vX/9f/prNv6/zH3bwgzqUj+BwAAgCqIuX9jmIn8DwAAAKURc/+NYSbyPwAAAJRGzP2bwkwqkv/1//X/9f/L2v8f0P/X/+8K+v/6/+3o/+v/9/L69f/1/+ms2/r/MfffFGZSkfwPAAAAVRBz/81hJvI/AAAAlEbM/beEmcj/AAAAUBox928OM6lI/tf/1//X/y9r/9/n/+v/dwf9f/3/dvT/9f97ef36//r/dNZt/f+Y+28NM6lI/gcAAIAqiLn/tjAT+R8AAABKI+b+28NM5H8AAAAojZj7x8JMKpL/9f/1//X/9f/1//X/l5P+v/5/O/r/+v+9vH79f/1/Ouu2/n/M/XeEmVQk/wMAAEAVxNy/JcxE/gcAAIDSiLl/PMxE/gcAAIDSiLl/IsykIvlf/1//X/9f/1//X/9/Oen/6/+3o/+v/9/L69f/1/+ns27r/8fcvzXMpCL5HwAAAHrUdQvZOOb+bWEm8j8AAACURsz928NM5H8AAAAojZj7d4SZVCT/6//r/+v/6//r/+v/Lyf9f/3/dur7//kl9f+r0v+f6ydNr6y/oP+v/09n3db/j7n/zjCTiuR/AAAAqIKY+3eGmcj/AAAAUBox9+8KM5md///m4q0KAAAAWEox9+8OM+n5f/+fX6+qUv3/A/env+r/F/T/9f8z/X/9/2Wm/6//347P/69q/39pXOr16//r/9NZt/X/Y+7fE2bS8/kfAAAAiGLu/39hJvI/AAAAlEbM/f8/zET+BwAAgNKIuf+Xwkwqkv8r1f+vo/9f0P/X/8/0//X/l5n+v/5/O/r/+v+9vP7u7f9/e3WW6f/THbqt/x9z/94wk4rkfwAAAKiCmPs/HWYyd/4fXv5VAQAAAEsp5v67wkz8+z8AAACURsz9+8JMKpL/9f/1//X/9f/1//X/l5P+v/5/O4vr/4/q/y/Spe7P9/r6u7f/7/P/6R7d1v+Puf/uMJOK5H8AAACogpj77wkzkf8BAACgNGLuvzfMRP4HAACA0oi5/zNhJhXJ/xet/9+iUKz/r/+f6f/r/+v/6/8vkv5/lfv/Pv9/sS51f34J1p/f5fr/+v90sW7r/8fcf1+YSUXyPwAAAFRBzP2fDTOR/wEAAKA0Yu7/5TAT+R8AAABKI+b++8NMKpL/ff6//r/+v/6//r/+/3LS/9f/b0f/X/+/l9ev/6//T2fd1v+Puf9Xwkwqkv8BAACgCmLufyDMRP4HAACA0oi5/8EwE/kfAAAASiPm/l8NM6lI/tf/1//X/9f/1//X/19O+v/6/+3o/+v/9/L69f/1/+ms2/r/Mff/WphJRfI/AAAAlMLcrx/UxNz/62Em8j8AAACURsz9nwszkf8BAACgNGLufyjMpCL5X/9f/1//X/9f/1//fznp/+v/t6P/r//fy+vX/9f/p7Nu6//H3P/5MJOK5H8AAACogpj7Hw4zkf8BAACgNGLu/0KYifwPAAAAPeDsvLaKuf+LYSYVyf/6//r/+v/6/0vY/1+R6f8n+v+ran/q/+v/t9NL/f9W5+j/6//r/+v/01639f9j7n8kzKQi+R8AAACqIOb+R8NM5H8AAAAojZj7fyPMRP4HAACA0oi5/zfDTCqS//X/9f/1//X/ff6//v9y0v/X/2+nl/r/rej/6//r/+v/01639f9j7v+tMJOK5H8AAACogpj7fzvMRP4HAACA0oi5/3fCTOR/AAAAKI2Y+x8LM6lI/i/6/48e1P8v6P/r/+v/6/9H+v9LQ/9f/78d/X/9/15ev/6//j+ddVv/P+b+L4WZVCT/AwAAQBXE3P+7YSbyPwAAAJRGzP37w0zkfwAAACiNmPsfDzOpSP73+f/6//r/+v8L6f+vanG6/n9B/781/X/9/3b0/8vc/1+xJGu8dOuf6wlrMP1N/1//n866rf8fc/+BMJOK5H8AAACogpj7fy/MRP4HAACA0oi5/2CYifwPAAAApRFz/6Ewk4rkf/1//X/9f/3/Hvn8/6FsOfr/M/r/y60k/f/39P8L+v+N9P99/r/+v/4/7XVb/z/m/skwk4rkfwAAAOh183nX0Zj7D4eZyP8AAABQGjH3Hwkzkf8BAACgNGLufyLMpCL5vxv7/zfo/+v/6/+n69H/9/n/+v/t+fx//f9M//+CXer+fK+vX/9f/5/Ouq3/H3P/VJhJRfI/AAAAVEHM/V8OM5H/AQAAoDRi7v9KmIn8DwAAAD1n5Rynx9x/NMykIvm/G/v/mf6//r/+f7oe/X/9f/3/9vT/9f8z/f8Ldqn7872+/iXt/6/Q/6ecuq3/H3P/sTCTiuR/AAAAqIKY+4+Hmcj/AAAAUBox958IM5H/AQAAoDRi7j8ZZtKT+b9vzt7uXPT/9f+7rf9f37wsdf9/pf6//r/+/1LQ/9f/z/T/L9il7s/3+vp9/r/+P511W/8/5v7fDzPpyfwPAAAAtBJz/6kwE/kfAAAASiPm/ukwE/kfAAAASiPm/v9j7z539LirOI4/thI7kSC8R9wLiPvgNTdAL4npLfQamqmh995b6BB6773XUEKRgrR7zok3Xs/sPvjxzvzP5/PmsGTXO5GN0U+rr+YBccv0/j+926e6cvT/+v+l9f9t3/9/lf4/6f/1/8eh/9f/b/T/Wzvpfn7tz6//1/8zb2n9f+7+B8Ytfv4PAAAAw8jd/6C4xf4HAACAYeTuf3DcYv8DAADAMHL3PyRuabL/r2z/f98DH+n/9f+brfr/s/W1Q/X/3v9/5++r/l//fwxd+//8m1D/v0//v52T7ufX/vz6f/0/85bW/+fuf2jc0mT/AwAAQAe5+x8Wt9j/AAAAMIzc/Q+PW+x/AAAAGEbu/kfELU32v/f/6//X1/8P+v5//X/R/+v/j6Nr/5/0//v0/9s56X5+7c+v/9f/M29p/X/u/kfGLU32PwAAAHSQu//6uMX+BwAAgGHk7r8hbrH/AQAAYBi5+8/FLU32v/5f/6//1//r//X/u6T/1/9P0f8vt/+/Q/8/+/31//p/5i2t/z9342Zv9+9/m377HwAAADrI3f/ouMX+BwAAgGHk7n9M3GL/AwAAwDBy9z82bmmy//X/+n/9v/5f/6//3yX9v/5/iv5/uf2/9//r/+e+Xv/PUSyt/8/d/7i4pcn+BwAAgA5y9z8+brH/AQAAYBi5+58Qt9j/AAAAMIzc/U+MW5rsf/2//l//r//X/+v/d0n/r/+fspL+P36Ji3979P9D9//3v9fM11+y/z+10f/r/wlL6/9z9z8pbmmy/wEAAKCD3P1PjlvsfwAAABhG7v6nxC32PwAAAAwjd/+NcUuT/a//1//r//X/+n/9/y7p//X/U1bS/1+S/n/o/n/2+3v/v/6feUvr/3P3PzVuOTD8zh7z3xIAAABYktz9T4tbmvz8HwAAADrI3f/0uMX+BwAAgGHk7n9G3NJk/+v/5/v/6+8+/+vp/w9/fv2//l//r//X/6+g/7/5kE/U/x+J/r9R/3/txV+v/9f/M29p/X/u/mfGLU32PwAAAHSQu/9ZcYv9DwAAAMPI3f/suMX+BwAAgGHk7n9O3HKfzeaIGfuq6f+9/1//r//X/+v/d0n/v4L+/zD6/yPR/zfq/w+h/9f/M29p/X/u/ufGLX7+DwAAAMPI3f+8uMX+BwAAgGHk7n9+3GL/AwAAwDBy978gbmmy//X/6+n/r9L/j9D/3/OW8/fT/8c/1//r/y8H/b/+f6P/39pJ9/Nrf379v/6feUvr/3P33xS3NNn/AAAA0EHu/hfGLfY/AAAADCN3/4viFvsfAAAAhpG7/8VxS5P9r/9fT//v/f9D9P/e/7/g/v9R8ecx6f8vD/2//n/KZej/b7pO/7+1k+7nT+j5T1+u59f/6/+Zt7T+P3f/S+KWJvsfAAAAOsjd/9K4xf4HAACAYeTuPx+32P8AAAAwjNz9L4tbmux//b/+X/+v/9f/e///Lun/9f9TvP9f/7/m59f/6/+Zt7T+P3f/y+OWJvsfAAAAOsjd/4q4xf4HAACAYeTuf2XcYv8DAADAql3YgeXuf1Xc0mT/6//1//r/S/X/5/X/d6H/1/9vQ/+v/5+i/9f/r/n59f/6f+Ytrf/P3f/quKXJ/gcAAIAOcvffHLfY/wAAADCM3P2viVvsfwAAABhG7v7Xxi1N9r/+X/+v//f+f/2//n+X9P/6/yn6f/3/mp9f/6//Z97S+v/c/a+LW5rsfwAAAOggd//r4xb7HwAAAIaRu/8NcYv9DwAAAMPI3f/GuKXJ/tf/6//1//p//b/+f5f0//r/Kfp//f+an1//r/9n3tL6/9z9b4pbmux/AAAA6CB3/5vjFvsfAAAAhpG7/y1xi/0PAAAAw8jd/9a4pcn+1//r//X/+n/9v/5/l/T/+v8p+n/9/5qfX/+v/2fe0vr/3P1vi1ua7H8AAADoIHf/2+MW+x8AAACGkbv/HXGL/Q8AAADDyN3/zrilyf7X/+v/9f/6f/2//n+X9P/6/ynr6/+vPvCR/l//r//X/zNtaf1/7v53xS1N9j8AAAB0kLv/3XGL/Q8AAADDyN3/nrjF/gcAAIBh5O5/b9zSZP/r/zv3/6fObTb6/43+X/+v/98p/b/+f8r6+v+D9P/6f/2//p9pS+v/c/e/L25psv8BAACgg9z9749b7H8AAAAYRu7+D8Qt9j8AAAAMI3f/B+OWJvtf/9+5//f+f/3/wefU/+v/d0H/r/+fov/X/6/5+Zfc/5/W/7MQJ97/5yfGx7n7PxS3NNn/AAAA0EHu/g/HLfY/AAAADCN3/0fiFvsfAAAAhpG7/6NxS5P9r//X/+v/9f8X9v9nDv8jvkf/r//fhv5f/z9F/6//X/PzL7n/9/5/luLE+/+7fJy7/2NxS5P9DwAAAB3k7v943GL/AwAAwDBy938ibrH/AQAAYBi5+2+JW5rsf/2//l//r//3/n/9/y7p//X/U/T/q+v/r7rwA/2//l//z5yl9f+5+z8ZtzTZ/wAAALBy1x7lk3L3fypusf8BAABgGLn7Px232P8AAAAwjNz9n4lbmuz/bfr/s/r/i+j/D39+/b/+X/+v/19Y/3/Ntt9H/79P/39Qw/7/AP2//l//z5yl9f+5+z8btzTZ/wAAANBB7v7PxS32PwAAAAwjd//n4xb7HwAAAIaRu/8LcUuT/e/9//p//f+x+v8b9P/6f/3/8Sys/9+a/n/f7vr/e2969P9Xx3/Q/4/w/Pp//T/zltb/5+7/YtzSZP8DAABAB7n7b41b7H8AAAAYRu7+L8Ut9j8AAAAMI3f/l+OWJvtf/6//1/97/7/+X/+/S/r/4/b/Z471XOP0/97/v9H/r+759f/6f+Ytrf/P3f+VuKXJ/gcAAIAOcvd/NW6x/wEAAGAYufu/FrfY/wAAADCM3P1fj1ua7H/9v/5f/6//1//r/3dJ/+/9/1P0//r/NT+//l//z7yl9f+5+78RtzTZ/wAAANBB7v5vxi32PwAAAAwjd/+34hb7HwAAAIaRu//bcUuT/a//1//r//X/+v+F9P+nzun/t6D/1/9v9P9bO+l+fu3Pr//X/zNvaf1/7v7vxC1N9j8AAAB0kLv/u3GL/Q8AAADDyN3/vbjF/gcAAIBh5O7/ftzSZP/P9P/VwOn/p+n/N3v/+9H/H/z19f/6f+//1//r/6fp//X/a35+/b/+n3lL6/9z9/8gbrlz+J05/r8lAAAAsCS5+38YtzT5+T8AAAB0kLv/R3GL/Q8AAADDyN3/47ilyf73/n/9v/f/6//1//r/XdL/6/+n6P/1/2t+fv2//p95S+v/c/f/JG5psv8BAACgg9z9P41b7H8AAAAYRu7+n8Ut9j8AAAAMI3f/z+OWJvtf/z9q/3/b3fb/qf5f/6//n3t+/f9u6f/1/1P0//r/NT+//l//z7yl9f+5+38RtzTZ/wAAALB+p2c/I3f/L+MW+x8AAACGkbv/V3GL/Q8AAADDyN3/67ilyf7X/4/a/3v/v/5f/6//Xwb9v/5/iv5f/7/m59f/6/+Zt7T+P3f/b+KWJvsfAAAAOsjd/9u4xf4HAACAYeTu/13cYv8DAADAMHL3/z5uabL/9f+76P9v1f/r//fo//X/+v/19/+n4i8c/f8+/f9B+n/9v/5f/8+0pfX/ufv/ELc02f8AAADQQe7+P8Yt9j8AAAAMI3f/n+IW+x8AAACGkbv/z3FLk/0/Tv8fT7qI/t/7//X/+/T/+n/9//r7/6T/36f/P0j/r//X/+v/mba0/j93/1/ilib7HwAAADrI3f/XuMX+BwAAgGHk7r8tbrH/AQAAYBi5+/8WtzTZ/+P0/0H/r//X/+v/47/X/y+D/l//P0X/r/9f8/Pr//X/zFta/5+7/+9xS5P9DwAAAB3k7v9H3GL/AwAAwDBy9/8zbrH/AQAAYBi5+2+PWy7a/2eu4FNdOfp//f/u+v877rHZ6P/1//p//b/+X/9/afp//f+an1//r/9n3tL6/9v3/r/2ms2/9r7az/8BAABgRLn7/x232P8AAAAwjNz9/4lb7H8AAAAYRu7+/8YtTfa//l//7/3//1f/f93Unwf9v/5f/6//1/9P0//r/9f8/Pp//T/zltb/5+7/XwAAAP//RByXNg==")

2.392136811s ago: executing program 3 (id=2342):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
lremovexattr(0x0, 0x0)
mprotect(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0xc)
mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000010000000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg$sock(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1}}], 0x3, 0x0)
shutdown(r0, 0x1)

2.338933543s ago: executing program 2 (id=2343):
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="041817aaaaaaaaaa106c"], 0x1a)

2.320270973s ago: executing program 2 (id=2344):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)={[{@nombcache}, {@usrquota}, {@jqfmt_vfsold}, {@nouid32}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@dioread_lock}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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")

1.990108561s ago: executing program 1 (id=2345):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mprotect(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0xc)
mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmmsg$sock(r0, &(0x7f00000002c0), 0x0, 0x0)
shutdown(r0, 0x1)

1.987034931s ago: executing program 0 (id=2346):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x200048, &(0x7f0000000100)={[{@fault_injection={'fault_injection', 0x3d, 0x65}}, {@io_bits={'io_bits', 0x3d, 0x15}}, {@checkpoint_diasble}, {@six_active_logs}, {@memory_normal}, {@nodiscard}, {@alloc_mode_reuse}, {@discard_unit_section}, {@heap}, {@atgc}, {@compress_chksum}, {@acl}, {@inline_xattr}, {@usrjquota={'usrjquota', 0x3d, '\x00'}}]}, 0x4, 0x5505, &(0x7f0000002480)="$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")

1.981804751s ago: executing program 4 (id=2347):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x8c6, &(0x7f0000000740)={[{@fat=@nfs_stale_rw}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@fat=@check_strict}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x80000000}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@utf8no}, {@utf8no}, {@shortname_lower}, {@shortname_win95}, {@rodir}, {@shortname_lower}], [{@hash}, {@pcr={'pcr', 0x3d, 0x4}}]}, 0x1, 0x35d, &(0x7f0000000c80)="$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")

1.868214684s ago: executing program 2 (id=2348):
syz_read_part_table(0x108d, &(0x7f00000008c0)="$eJzs0L1N9EAQBuDX3322lwiJjBZo4q4CmiClAyKKIKcBSqAIqiFBDNq9H+kkIoRE8jzJenc9844d/tTtQ+vLlGVsK62W9KOWiyR3yeO8ttTledmcedwneV6S+ne82FbV28txV1VTXz9rb0RtTl1qJCfTrnfMJss6zq+yvu/O8j6S/9kmY8xpvH2zHmbe9+jlB0+v33zocnrqGe06feT7H/wxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh9XwEAAP//Q9kciw==")

1.867929144s ago: executing program 4 (id=2349):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0)
sendto$inet6(r0, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
lremovexattr(0x0, 0x0)
mprotect(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0xc)
mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmmsg$sock(r0, &(0x7f00000002c0), 0x0, 0x0)

1.564437171s ago: executing program 2 (id=2350):
setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000180)={@loopback, @loopback, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0x0, 0x0, 0x9}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r3, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2)
shutdown(r3, 0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r5, 0x0, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08)
close_range(r6, 0xffffffffffffffff, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0)

1.496476373s ago: executing program 3 (id=2351):
bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0xfffffe6c)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x480, @broadcast}})
r4 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, 0x0, 0x0)
sendmmsg(r4, 0x0, 0x0, 0x4000000)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0)
syz_clone(0x801080, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)

1.392106716s ago: executing program 0 (id=2352):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
socket$kcm(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x800)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x5c, 0x160, 0x1a0, 0x3e0, 0x290, 0x228, 0x25a, 0x290, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @broadcast}, [0x0, 0x0, 0xffffffff], [0xff000000], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xa8, 0xe8, 0x52020000, {0x0, 0x6802000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xf9, 0x7, {0x6}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0xff, 0x7deb, 'netbios-ns\x00', {0x141a}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308)
socket$nl_rdma(0x10, 0x3, 0x14)
pipe2(&(0x7f0000000040), 0x800)
r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0)

548.663137ms ago: executing program 4 (id=2353):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000480)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x2}, 0x94)
eventfd2(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
syz_ublk_setup_io_uring(0x6593, 0x0, 0x0, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e05800720"], 0x8)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000240)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc)
r7 = socket$inet6(0xa, 0x3, 0x1)
r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000140)={0xa, @pix_mp={0x2, 0xb2dd, 0x3631564e, 0x2, 0x8, [{0x2, 0x7fc}, {0x20000, 0x3550}, {0x5, 0x95ea}, {0x1, 0x3}, {0xd, 0x4}, {0x7df, 0x6314}, {0xffffffe7}, {0x3, 0x9}], 0x0, 0x7, 0x4, 0x0, 0x5}})
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc}, {0x0, 0x0, 0x25}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xfffffff1, 0xfffffffe}}, 0xe8)
sendmmsg(r7, &(0x7f0000000480), 0x21, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf2508000100000000000ae38f64b47de72b79a6c275b37d6fca3ee44d9eeaeac267fbeb811dfcf3843f6d53ac128a28b3"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)

548.348197ms ago: executing program 1 (id=2354):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c)
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
lremovexattr(0x0, 0x0)
mprotect(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0xc)
mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmmsg$sock(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1}}], 0x3, 0x0)
shutdown(r0, 0x1)

533.419717ms ago: executing program 2 (id=2355):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400))
io_uring_setup(0x2e34, &(0x7f0000000180))
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file1\x00', 0x40, &(0x7f000001f500)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@space_cache_v1}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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")
gettid()
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6)
fchown(r4, 0xffffffffffffffff, 0xee01)
write$UHID_INPUT(r4, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
timer_create(0x7, 0x0, 0xffffffffffffffff)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r5, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000280)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r6)
connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x1, './file1\x00'}, 0x6e)
chdir(&(0x7f00000000c0)='./file1\x00')
openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x10)

82.501198ms ago: executing program 3 (id=2356):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r5, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc)
r7 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc)
r8 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfd, 0x8000}, 0xc)
r9 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r9, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x51ee2927639cc674}, 0xc)
r10 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r10, &(0x7f0000000300)={0x10, 0x0, 0xffffffff, 0x22ffffffff}, 0xc)
r11 = socket$netlink(0x10, 0x3, 0x8)
bind$netlink(r11, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r12 = socket$netlink(0x10, 0x3, 0x14)
bind$netlink(r12, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc)
r13 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r13, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc)
bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc)
r14 = socket$netlink(0x10, 0x3, 0x4)
writev(r14, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1)

47.912069ms ago: executing program 0 (id=2357):
r0 = socket(0xa, 0x3, 0xff)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
gettid()
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',gr', @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0)
capset(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
fchownat(0xffffffffffffff9c, 0x0, 0x0, 0xee01, 0x1000)
r5 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000), 0x0)
recvmsg(r5, 0x0, 0x0)
read$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4)
syz_emit_ethernet(0x6e, &(0x7f0000000380)={@empty, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4fe, {0x2, 0x6, '\x00', 0x3f6f, 0xff, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x44}, [], "5c75427c628d949b"}}}}}}}, 0x0)
ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, &(0x7f0000000080))
recvmsg$can_raw(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x12130)
syz_mount_image$hfs(&(0x7f0000020940), &(0x7f0000000000)='./file0\x00', 0x2000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x11, 0x2fe, &(0x7f0000001100)="$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")

0s ago: executing program 3 (id=2358):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$isdn_base(0x22, 0x3, 0x0)
bind$isdn_base(r1, &(0x7f0000000140)={0x22, 0x91, 0x3, 0x6, 0x81}, 0x6)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r2, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x2, 0x1}, {0x4, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x34)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(0x0, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080b1}, 0x8000)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x24}]}, @void}, 0x27)
setresuid(0x0, 0xee01, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200700, &(0x7f00000000c0)={[{@nolazytime}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@stripe={'stripe', 0x3d, 0x9}}, {@nombcache}, {@data_err_ignore}, {@debug}, {@data_writeback}]}, 0x1, 0x491, &(0x7f0000000680)="$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")

kernel console output (not intermixed with test programs):

s mode
[  189.849354][ T6498] 8021q: adding VLAN 0 to HW filter on device bond6
[  189.855648][ T6498] netlink: 28 bytes leftover after parsing attributes in process `syz.2.477'.
[  190.652897][ T6510] loop3: detected capacity change from 0 to 2048
[  191.082237][ T6510] NILFS (loop3): unrecognized mount option "ÈÍÜÊûä¬V°l
[  191.082237][ T6510] ´šnorecovery"
[  191.125050][ T6521] loop2: detected capacity change from 0 to 8192
[  191.143406][ T6521] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  191.503575][ T6516] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  191.504861][ T6516] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  191.507363][ T6516] vhci_hcd vhci_hcd.0: Device attached
[  191.621151][ T6517] vhci_hcd: connection closed
[  191.652497][ T4492] vhci_hcd: stop threads
[  191.655318][ T4492] vhci_hcd: release socket
[  191.656329][ T4492] vhci_hcd: disconnect device
[  191.916225][   T24] libceph: connect (1)[c::]:6789 error -101
[  191.917346][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  191.918552][   T24] libceph: connect (1)[c::]:6789 error -101
[  191.919695][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  192.352549][   T27] audit: type=1326 audit(181.959:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.0.483" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb357a168 code=0x7ffc0000
[  192.620583][ T4381] libceph: connect (1)[c::]:6789 error -101
[  192.675874][ T4381] libceph: mon0 (1)[c::]:6789 connect error
[  192.779992][   T27] audit: type=1326 audit(181.959:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.0.483" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb357a168 code=0x7ffc0000
[  192.812449][ T6526] ceph: No mds server is up or the cluster is laggy
[  192.880706][   T27] audit: type=1326 audit(181.959:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.0.483" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=23 compat=0 ip=0xffffb357a168 code=0x7ffc0000
[  192.964805][   T27] audit: type=1326 audit(181.959:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.0.483" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb357a168 code=0x7ffc0000
[  192.968711][   T27] audit: type=1326 audit(181.959:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.0.483" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb357a168 code=0x7ffc0000
[  192.972505][   T27] audit: type=1326 audit(181.959:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.0.483" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb357a168 code=0x7ffc0000
[  192.986206][   T27] audit: type=1326 audit(181.959:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.0.483" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb357a168 code=0x7ffc0000
[  192.990113][   T27] audit: type=1326 audit(181.959:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.0.483" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb357a168 code=0x7ffc0000
[  193.204354][ T6548] loop1: detected capacity change from 0 to 32768
[  195.709976][ T6548] XFS (loop1): Mounting V5 Filesystem
[  195.729080][ T6548] XFS (loop1): Ending clean mount
[  195.730828][ T6548] XFS (loop1): Quotacheck needed: Please wait.
[  195.752228][ T6548] XFS (loop1): Quotacheck: Done.
[  196.222643][ T4329] XFS (loop1): Unmounting Filesystem
[  196.288850][ T6595] loop2: detected capacity change from 0 to 2048
[  196.291067][ T6595] NILFS (loop2): unrecognized mount option "ÈÍÜÊûä¬V°l
[  196.291067][ T6595] ´šnorecovery"
[  196.766308][   T27] audit: type=1326 audit(186.012:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.3.496" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb537a168 code=0x7ffc0000
[  196.799093][   T27] audit: type=1326 audit(186.012:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6590 comm="syz.3.496" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb537a168 code=0x7ffc0000
[  196.859595][ T4322] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  197.969403][ T4340] Bluetooth: hci3: failed to read key size for handle 200
[  198.183141][ T2066] ieee802154 phy0 wpan0: encryption failed: -22
[  198.195983][ T2066] ieee802154 phy1 wpan1: encryption failed: -22
[  199.063772][ T6642] loop2: detected capacity change from 0 to 2048
[  199.360501][ T6642] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  199.395164][ T4340] Bluetooth: hci3: failed to read key size for handle 200
[  201.045689][ T4340] Bluetooth: hci0: failed to read key size for handle 200
[  201.617727][ T6691] loop2: detected capacity change from 0 to 512
[  201.629174][ T6691] EXT2-fs (loop2): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  201.682079][ T6691] EXT2-fs (loop2): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  202.233108][ T6703] xt_CT: You must specify a L4 protocol and not use inversions on it
[  203.425669][ T6716] block nbd1: NBD_DISCONNECT
[  203.528309][ T6723] loop3: detected capacity change from 0 to 512
[  203.546940][ T6723] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  203.550601][ T6723] EXT2-fs (loop3): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  203.731637][ T6727] xt_CT: You must specify a L4 protocol and not use inversions on it
[  204.284744][ T4340] Bluetooth: hci4: failed to read key size for handle 200
[  204.750260][ T4340] Bluetooth: hci3: failed to read key size for handle 200
[  205.047679][ T6745] futex_wake_op: syz.0.527 tries to shift op by 144; fix this program
[  205.436792][ T6759] loop2: detected capacity change from 0 to 512
[  205.451873][ T6759] EXT2-fs (loop2): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  205.463149][ T6759] EXT2-fs (loop2): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  205.464246][ T6760] loop3: detected capacity change from 0 to 512
[  205.478092][ T6760] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  205.511490][ T6760] EXT2-fs (loop3): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  205.588064][ T6761] xt_CT: You must specify a L4 protocol and not use inversions on it
[  205.703755][ T6763] xt_CT: You must specify a L4 protocol and not use inversions on it
[  206.112613][ T6767] netlink: 'syz.4.533': attribute type 1 has an invalid length.
[  206.130637][ T6767] device bond2 entered promiscuous mode
[  206.135148][ T6767] 8021q: adding VLAN 0 to HW filter on device bond2
[  206.150697][ T6767] netlink: 28 bytes leftover after parsing attributes in process `syz.4.533'.
[  206.160388][ T6767] netlink: 28 bytes leftover after parsing attributes in process `syz.4.533'.
[  207.573161][ T6795] futex_wake_op: syz.0.544 tries to shift op by 144; fix this program
[  207.601105][ T6791] loop2: detected capacity change from 0 to 32768
[  207.608248][ T6794] loop3: detected capacity change from 0 to 2048
[  207.649834][ T6794] NILFS (loop3): unrecognized mount option "ÈÍÜÊûä¬V°l
[  207.649834][ T6794] ´šnorecovery"
[  208.142274][ T6791] XFS (loop2): Mounting V5 Filesystem
[  208.326630][ T6791] XFS (loop2): Ending clean mount
[  208.331324][ T6791] XFS (loop2): Quotacheck needed: Please wait.
[  208.632631][ T6791] XFS (loop2): Quotacheck: Done.
[  208.965092][ T4338] XFS (loop2): Unmounting Filesystem
[  209.472902][ T6837] xt_CT: You must specify a L4 protocol and not use inversions on it
[  211.736033][ T4340] Bluetooth: hci1: failed to read key size for handle 200
[  212.514904][ T6868] loop1: detected capacity change from 0 to 512
[  212.533448][ T6868] EXT2-fs (loop1): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  212.541224][ T6868] EXT2-fs (loop1): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  212.642618][ T6870] loop3: detected capacity change from 0 to 32768
[  212.659614][ T6870] XFS (loop3): Mounting V5 Filesystem
[  212.665501][ T6880] xt_CT: You must specify a L4 protocol and not use inversions on it
[  212.703672][ T6870] XFS (loop3): Ending clean mount
[  212.705920][ T6870] XFS (loop3): Quotacheck needed: Please wait.
[  212.729942][ T6870] XFS (loop3): Quotacheck: Done.
[  212.956873][ T6893] xt_CT: You must specify a L4 protocol and not use inversions on it
[  213.156521][ T6899] xt_CT: You must specify a L4 protocol and not use inversions on it
[  213.625213][ T4330] XFS (loop3): Unmounting Filesystem
[  215.004485][ T6927] netlink: 'syz.0.567': attribute type 1 has an invalid length.
[  215.014929][ T6927] device bond4 entered promiscuous mode
[  215.016097][ T6927] 8021q: adding VLAN 0 to HW filter on device bond4
[  215.025560][ T6927] netlink: 28 bytes leftover after parsing attributes in process `syz.0.567'.
[  215.029387][ T6927] netlink: 28 bytes leftover after parsing attributes in process `syz.0.567'.
[  215.185623][ T6940] netlink: 'syz.3.561': attribute type 1 has an invalid length.
[  215.191485][ T6940] device bond4 entered promiscuous mode
[  215.195145][ T6940] 8021q: adding VLAN 0 to HW filter on device bond4
[  215.201178][ T6940] netlink: 28 bytes leftover after parsing attributes in process `syz.3.561'.
[  215.209850][ T6940] netlink: 28 bytes leftover after parsing attributes in process `syz.3.561'.
[  215.285942][ T6947] loop3: detected capacity change from 0 to 2048
[  215.303906][ T6947] NILFS (loop3): unrecognized mount option "ÈÍÜÊûä¬V°l
[  215.303906][ T6947] ´šnorecovery"
[  216.518441][ T6962] loop3: detected capacity change from 0 to 8192
[  216.525179][ T6962] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  216.909992][ T6959] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  216.911172][ T6959] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  216.912612][ T6959] vhci_hcd vhci_hcd.0: Device attached
[  217.222357][ T6960] vhci_hcd: connection closed
[  217.231371][ T4556] vhci_hcd: stop threads
[  217.233202][ T4556] vhci_hcd: release socket
[  217.237494][ T4556] vhci_hcd: disconnect device
[  217.698079][ T6964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  217.810391][ T6964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  217.848373][ T6966] loop3: detected capacity change from 0 to 512
[  217.883887][ T6966] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  217.886108][ T6966] EXT2-fs (loop3): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  218.070484][ T6968] xt_CT: You must specify a L4 protocol and not use inversions on it
[  218.527610][ T6973] xt_CT: You must specify a L4 protocol and not use inversions on it
[  218.564951][ T6972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  218.601667][ T6975] loop1: detected capacity change from 0 to 512
[  218.612463][ T6975] EXT2-fs (loop1): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  218.618875][ T6975] EXT2-fs (loop1): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  218.624749][ T6972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  218.689327][ T6972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  218.798341][ T6978] xt_CT: You must specify a L4 protocol and not use inversions on it
[  220.232605][ T7002] loop2: detected capacity change from 0 to 32768
[  220.537488][ T4340] Bluetooth: hci3: failed to read key size for handle 200
[  220.581619][ T7002] XFS (loop2): Mounting V5 Filesystem
[  220.596525][ T7002] XFS (loop2): Ending clean mount
[  220.609188][ T7002] XFS (loop2): Quotacheck needed: Please wait.
[  220.627243][ T7002] XFS (loop2): Quotacheck: Done.
[  221.156583][ T4338] XFS (loop2): Unmounting Filesystem
[  221.786889][ T7040] xt_CT: You must specify a L4 protocol and not use inversions on it
[  224.305247][ T7062] netlink: 'syz.3.596': attribute type 1 has an invalid length.
[  224.335009][ T7062] device bond5 entered promiscuous mode
[  224.338735][ T7062] 8021q: adding VLAN 0 to HW filter on device bond5
[  224.353164][ T7063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  224.371840][ T7062] netlink: 28 bytes leftover after parsing attributes in process `syz.3.596'.
[  224.396001][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.596'.
[  224.404283][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.596'.
[  224.411983][ T7063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  224.469484][ T7063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  224.477973][ T7067] loop3: detected capacity change from 0 to 512
[  224.585114][ T7067] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  224.592273][ T7067] EXT2-fs (loop3): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  225.323086][ T4340] Bluetooth: hci1: failed to read key size for handle 200
[  225.568772][ T7081] netlink: 'syz.1.602': attribute type 1 has an invalid length.
[  225.579895][ T7081] device bond10 entered promiscuous mode
[  225.581178][ T7081] 8021q: adding VLAN 0 to HW filter on device bond10
[  225.948283][ T7081] netlink: 28 bytes leftover after parsing attributes in process `syz.1.602'.
[  225.952867][ T7081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.602'.
[  225.954712][ T7081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'.
[  225.998809][ T7087] xt_CT: You must specify a L4 protocol and not use inversions on it
[  226.478893][ T7098] loop3: detected capacity change from 0 to 2048
[  226.489078][ T7098] NILFS (loop3): unrecognized mount option "ÈÍÜÊûä¬V°l
[  226.489078][ T7098] ´šnorecovery"
[  226.582886][ T7101] futex_wake_op: syz.2.606 tries to shift op by 144; fix this program
[  226.614252][ T7101] loop2: detected capacity change from 0 to 2048
[  226.678230][ T7101]  loop2: p3 < > p4 < >
[  226.679153][ T7101] loop2: partition table partially beyond EOD, truncated
[  226.681308][ T7101] loop2: p3 start 4284289 is beyond EOD, truncated
[  226.889878][ T4340] Bluetooth: hci2: failed to read key size for handle 200
[  227.032525][ T7111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.039238][ T7111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.461993][ T7109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.594298][ T7116] loop2: detected capacity change from 0 to 512
[  227.608651][ T7116] EXT2-fs (loop2): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  227.611210][ T7116] EXT2-fs (loop2): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  227.689125][ T7116] xt_CT: You must specify a L4 protocol and not use inversions on it
[  228.246053][ T7126] netlink: 'syz.4.615': attribute type 1 has an invalid length.
[  228.257239][ T7126] device bond3 entered promiscuous mode
[  228.258338][ T7126] 8021q: adding VLAN 0 to HW filter on device bond3
[  228.260336][ T7125] loop3: detected capacity change from 0 to 2048
[  228.263721][ T7126] netlink: 28 bytes leftover after parsing attributes in process `syz.4.615'.
[  228.272524][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.615'.
[  228.273973][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.615'.
[  228.277368][ T7125] NILFS (loop3): unrecognized mount option "ÈÍÜÊûä¬V°l
[  228.277368][ T7125] ´šnorecovery"
[  228.558251][ T4340] Bluetooth: hci0: failed to read key size for handle 200
[  228.826197][ T7138] xt_CT: You must specify a L4 protocol and not use inversions on it
[  229.947314][ T4340] Bluetooth: hci0: failed to read key size for handle 200
[  230.064038][ T7144] xt_CT: You must specify a L4 protocol and not use inversions on it
[  230.270398][ T7151] loop2: detected capacity change from 0 to 2048
[  230.280198][ T7151] NILFS (loop2): unrecognized mount option "ÈÍÜÊûä¬V°l
[  230.280198][ T7151] ´šnorecovery"
[  230.491907][ T7159] futex_wake_op: syz.3.623 tries to shift op by 144; fix this program
[  230.500855][ T7159] loop3: detected capacity change from 0 to 2048
[  230.532593][ T7159]  loop3: p3 < > p4 < >
[  230.533414][ T7159] loop3: partition table partially beyond EOD, truncated
[  230.534753][ T7159] loop3: p3 start 4284289 is beyond EOD, truncated
[  230.590116][ T4340] Bluetooth: hci1: failed to read key size for handle 200
[  231.175368][ T7175] loop2: detected capacity change from 0 to 512
[  231.200807][ T7175] EXT2-fs (loop2): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  231.207735][ T7175] EXT2-fs (loop2): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  231.389436][ T7178] xt_CT: You must specify a L4 protocol and not use inversions on it
[  231.844428][ T4340] Bluetooth: hci1: failed to read key size for handle 200
[  232.275634][ T7190] netlink: 'syz.4.632': attribute type 1 has an invalid length.
[  232.281514][ T7190] device bond4 entered promiscuous mode
[  232.282781][ T7190] 8021q: adding VLAN 0 to HW filter on device bond4
[  232.291681][ T7190] netlink: 28 bytes leftover after parsing attributes in process `syz.4.632'.
[  232.299130][ T7193] loop2: detected capacity change from 0 to 512
[  232.299408][ T7190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.632'.
[  232.301920][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.632'.
[  232.323014][ T7193] EXT2-fs (loop2): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  232.327351][ T7193] EXT2-fs (loop2): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  232.446833][ T7194] xt_CT: You must specify a L4 protocol and not use inversions on it
[  232.727042][ T7196] netlink: 'syz.4.634': attribute type 1 has an invalid length.
[  232.734131][ T7196] device bond5 entered promiscuous mode
[  232.735474][ T7196] 8021q: adding VLAN 0 to HW filter on device bond5
[  232.742241][ T7196] netlink: 28 bytes leftover after parsing attributes in process `syz.4.634'.
[  232.747167][ T7196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.634'.
[  232.748808][ T7196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.634'.
[  232.948124][ T7204] xt_CT: You must specify a L4 protocol and not use inversions on it
[  233.778929][ T7207] loop3: detected capacity change from 0 to 512
[  234.136266][ T7207] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  234.143057][ T7207] EXT2-fs (loop3): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  234.180198][ T7217] futex_wake_op: syz.4.639 tries to shift op by 144; fix this program
[  234.366042][ T7221] xt_CT: You must specify a L4 protocol and not use inversions on it
[  234.439773][ T7220] loop2: detected capacity change from 0 to 32768
[  234.526638][ T4340] Bluetooth: hci0: failed to read key size for handle 200
[  234.586031][ T7220] XFS (loop2): Mounting V5 Filesystem
[  234.603770][ T7220] XFS (loop2): Ending clean mount
[  234.605821][ T7220] XFS (loop2): Quotacheck needed: Please wait.
[  234.958525][ T7220] XFS (loop2): Quotacheck: Done.
[  234.979662][ T4338] XFS (loop2): Unmounting Filesystem
[  235.579171][ T7252] loop3: detected capacity change from 0 to 512
[  235.596533][ T7252] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  235.604905][ T7252] EXT2-fs (loop3): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  237.018416][ T4340] Bluetooth: hci2: failed to read key size for handle 200
[  237.132745][ T7275] netlink: 'syz.2.645': attribute type 1 has an invalid length.
[  237.155262][ T7275] device bond7 entered promiscuous mode
[  237.156500][ T7275] 8021q: adding VLAN 0 to HW filter on device bond7
[  237.165730][ T7275] netlink: 28 bytes leftover after parsing attributes in process `syz.2.645'.
[  237.178376][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.645'.
[  237.344078][ T7278] loop2: detected capacity change from 0 to 32768
[  237.369676][ T7280] xt_CT: You must specify a L4 protocol and not use inversions on it
[  237.606962][ T7289] futex_wake_op: syz.1.654 tries to shift op by 144; fix this program
[  237.639991][ T7289] loop1: detected capacity change from 0 to 2048
[  238.054630][ T7289]  loop1: p3 < > p4 < >
[  238.055483][ T7289] loop1: partition table partially beyond EOD, truncated
[  238.056943][ T7289] loop1: p3 start 4284289 is beyond EOD, truncated
[  238.077020][ T7278] XFS (loop2): Mounting V5 Filesystem
[  238.109035][ T7278] XFS (loop2): Ending clean mount
[  238.112193][ T7278] XFS (loop2): Quotacheck needed: Please wait.
[  238.152438][ T7278] XFS (loop2): Quotacheck: Done.
[  238.177265][ T4338] XFS (loop2): Unmounting Filesystem
[  239.105023][ T4340] Bluetooth: hci1: failed to read key size for handle 200
[  239.151385][ T7313] loop1: detected capacity change from 0 to 512
[  239.208774][ T7313] EXT2-fs (loop1): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  239.220910][ T7313] EXT2-fs (loop1): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  239.700999][ T4340] Bluetooth: hci3: failed to read key size for handle 200
[  240.498002][ T7328] netlink: 'syz.3.663': attribute type 1 has an invalid length.
[  240.663051][ T7328] device bond6 entered promiscuous mode
[  240.664185][ T7328] 8021q: adding VLAN 0 to HW filter on device bond6
[  240.666094][ T7333] netlink: 28 bytes leftover after parsing attributes in process `syz.3.663'.
[  240.675407][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.663'.
[  241.030589][ T7339] loop3: detected capacity change from 0 to 512
[  241.126181][ T7339] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  241.134722][ T7339] EXT2-fs (loop3): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  241.814004][ T7349] loop1: detected capacity change from 0 to 512
[  242.081358][ T7349] EXT2-fs (loop1): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  242.083583][ T7349] EXT2-fs (loop1): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  242.183249][ T7349] xt_CT: You must specify a L4 protocol and not use inversions on it
[  242.395770][ T7357] xt_CT: You must specify a L4 protocol and not use inversions on it
[  242.538659][ T4340] Bluetooth: hci0: failed to read key size for handle 200
[  244.697830][ T4340] Bluetooth: hci3: failed to read key size for handle 200
[  245.026246][ T7389] futex_wake_op: syz.0.678 tries to shift op by 144; fix this program
[  245.571535][ T7391] device syzkaller0 entered promiscuous mode
[  245.696280][ T4340] Bluetooth: hci3: failed to read key size for handle 200
[  245.733334][ T7398] loop3: detected capacity change from 0 to 512
[  246.047653][ T7398] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  246.075425][ T7398] EXT2-fs (loop3): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  246.081875][ T7401] netlink: 'syz.1.683': attribute type 1 has an invalid length.
[  246.099736][ T7401] device bond11 entered promiscuous mode
[  246.103258][ T7401] 8021q: adding VLAN 0 to HW filter on device bond11
[  246.115198][ T7401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.683'.
[  246.189099][ T7404] loop1: detected capacity change from 0 to 512
[  246.196007][ T7404] EXT2-fs (loop1): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  246.204334][ T7404] EXT2-fs (loop1): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  246.415474][ T7406] xt_CT: You must specify a L4 protocol and not use inversions on it
[  246.631998][ T7411] xt_CT: You must specify a L4 protocol and not use inversions on it
[  246.673481][ T4340] Bluetooth: hci4: failed to read key size for handle 200
[  248.202992][ T7433] futex_wake_op: syz.4.690 tries to shift op by 144; fix this program
[  248.594483][ T7435] loop3: detected capacity change from 0 to 512
[  248.609554][ T7435] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  248.615273][ T7435] EXT2-fs (loop3): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  248.788231][ T7444] netlink: 'syz.1.695': attribute type 1 has an invalid length.
[  248.808378][ T7444] device bond12 entered promiscuous mode
[  248.809557][ T7444] 8021q: adding VLAN 0 to HW filter on device bond12
[  248.825727][ T7446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  248.846795][ T7444] netlink: 28 bytes leftover after parsing attributes in process `syz.1.695'.
[  248.920383][ T7448] xt_CT: You must specify a L4 protocol and not use inversions on it
[  248.958863][ T4494] wlan1: authenticate with 08:02:11:00:00:00
[  248.960478][ T4494] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  249.325135][ T4464] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[  249.362592][ T7438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  249.394667][ T4340] Bluetooth: hci4: failed to read key size for handle 200
[  249.454469][ T4464] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[  249.599617][ T4464] wlan1: authentication with 08:02:11:00:00:00 timed out
[  251.488579][ T7489] loop2: detected capacity change from 0 to 512
[  251.492001][ T7489] EXT2-fs (loop2): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  251.494409][ T7489] EXT2-fs (loop2): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  251.701562][ T7494] loop2: detected capacity change from 0 to 2048
[  251.719402][ T7494] NILFS (loop2): unrecognized mount option "ÈÍÜÊûä¬V°l
[  251.719402][ T7494] ´šnorecovery"
[  251.773613][ T7496] futex_wake_op: syz.1.706 tries to shift op by 144; fix this program
[  251.822139][ T7496] loop1: detected capacity change from 0 to 2048
[  251.880654][ T7496]  loop1: p3 < > p4 < >
[  251.881425][ T7496] loop1: partition table partially beyond EOD, truncated
[  251.883093][ T7496] loop1: p3 start 4284289 is beyond EOD, truncated
[  252.917559][ T7509] device syzkaller0 entered promiscuous mode
[  253.672787][ T4340] Bluetooth: hci3: failed to read key size for handle 200
[  253.870639][ T7521] xt_CT: You must specify a L4 protocol and not use inversions on it
[  253.880920][ T7511] loop1: detected capacity change from 0 to 65536
[  254.395560][ T7511] XFS (loop1): Mounting V5 Filesystem
[  254.420376][ T7511] XFS (loop1): Ending clean mount
[  255.186950][ T4329] XFS (loop1): Unmounting Filesystem
[  255.933414][ T7563] futex_wake_op: syz.3.721 tries to shift op by 144; fix this program
[  255.949665][ T7563] loop3: detected capacity change from 0 to 2048
[  256.869195][ T7563]  loop3: p3 < > p4 < >
[  256.871180][ T7563] loop3: partition table partially beyond EOD, truncated
[  256.889528][ T7563] loop3: p3 start 4284289 is beyond EOD, truncated
[  257.293251][ T7573] loop2: detected capacity change from 0 to 512
[  257.300563][ T7573] EXT2-fs (loop2): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  257.310044][ T7573] EXT2-fs (loop2): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  257.319366][ T7573] xt_CT: You must specify a L4 protocol and not use inversions on it
[  257.384076][ T7577] xt_CT: You must specify a L4 protocol and not use inversions on it
[  257.401678][ T7576] loop2: detected capacity change from 0 to 2048
[  257.411890][ T7576] NILFS (loop2): unrecognized mount option "ÈÍÜÊûä¬V°l
[  257.411890][ T7576] ´šnorecovery"
[  257.464976][ T7579] loop1: detected capacity change from 0 to 2048
[  257.477220][ T7579] NILFS (loop1): unrecognized mount option "ÈÍÜÊûä¬V°l
[  257.477220][ T7579] ´šnorecovery"
[  259.430846][ T7608] loop2: detected capacity change from 0 to 2048
[  259.432936][ T7608] NILFS (loop2): unrecognized mount option "ÈÍÜÊûä¬V°l
[  259.432936][ T7608] ´šnorecovery"
[  259.561380][ T4322] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  260.041498][ T7617] netlink: 'syz.4.736': attribute type 1 has an invalid length.
[  260.065408][ T7617] device bond6 entered promiscuous mode
[  260.074602][ T7617] 8021q: adding VLAN 0 to HW filter on device bond6
[  260.120271][ T7618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  260.234488][ T7618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  260.235944][ T7617] netlink: 28 bytes leftover after parsing attributes in process `syz.4.736'.
[  260.299863][ T7618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  262.562826][ T7645] loop2: detected capacity change from 0 to 512
[  262.587649][ T7645] EXT2-fs (loop2): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  262.592190][ T7645] EXT2-fs (loop2): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  262.883810][ T7650] loop1: detected capacity change from 0 to 2048
[  262.884590][ T7651] xt_CT: You must specify a L4 protocol and not use inversions on it
[  263.038893][ T7650] NILFS (loop1): unrecognized mount option "ÈÍÜÊûä¬V°l
[  263.038893][ T7650] ´šnorecovery"
[  263.244160][ T4322] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  264.290485][ T7670] netlink: 'syz.0.749': attribute type 1 has an invalid length.
[  264.312037][ T7670] device bond5 entered promiscuous mode
[  264.318001][ T7670] 8021q: adding VLAN 0 to HW filter on device bond5
[  264.331966][ T7670] netlink: 28 bytes leftover after parsing attributes in process `syz.0.749'.
[  264.787226][ T2066] ieee802154 phy0 wpan0: encryption failed: -22
[  264.788458][ T2066] ieee802154 phy1 wpan1: encryption failed: -22
[  264.829814][ T7682] loop2: detected capacity change from 0 to 512
[  264.837987][ T7682] EXT2-fs (loop2): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  264.842508][ T7682] EXT2-fs (loop2): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  264.977668][ T7686] futex_wake_op: syz.1.754 tries to shift op by 144; fix this program
[  264.986738][ T7686] loop1: detected capacity change from 0 to 2048
[  265.042471][ T7686]  loop1: p3 < > p4 < >
[  265.043209][ T7686] loop1: partition table partially beyond EOD, truncated
[  265.044338][ T7686] loop1: p3 start 4284289 is beyond EOD, truncated
[  265.065090][ T7689] xt_CT: You must specify a L4 protocol and not use inversions on it
[  265.096332][ T4322] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  265.626555][ T4322] udevd[4322]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  266.127258][ T7699] loop1: detected capacity change from 0 to 512
[  266.138146][ T7699] EXT2-fs (loop1): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  266.144875][ T7699] EXT2-fs (loop1): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  266.151281][ T7699] xt_CT: You must specify a L4 protocol and not use inversions on it
[  266.793152][ T7709] loop2: detected capacity change from 0 to 512
[  266.959004][ T7709] EXT2-fs (loop2): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  266.999781][ T7709] EXT2-fs (loop2): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  267.770535][ T7725] loop3: detected capacity change from 0 to 2048
[  267.780064][ T7725] NILFS (loop3): unrecognized mount option "ÈÍÜÊûä¬V°l
[  267.780064][ T7725] ´šnorecovery"
[  269.881703][ T7745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  269.962389][ T7745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  270.021749][ T7749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  270.726725][ T4340] Bluetooth: hci1: failed to read key size for handle 200
[  271.708468][ T7779] loop1: detected capacity change from 0 to 32768
[  271.933963][ T7779] XFS (loop1): Mounting V5 Filesystem
[  271.982967][ T7779] XFS (loop1): Ending clean mount
[  271.985573][ T7779] XFS (loop1): Quotacheck needed: Please wait.
[  272.022723][ T7779] XFS (loop1): Quotacheck: Done.
[  272.611809][ T7803] loop2: detected capacity change from 0 to 256
[  272.624101][ T7803] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  272.649228][ T7803] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779264)
[  272.650763][ T7803] FAT-fs (loop2): Filesystem has been set read-only
[  273.209080][ T4340] Bluetooth: hci3: failed to read key size for handle 200
[  273.589491][ T7815] futex_wake_op: syz.2.785 tries to shift op by 144; fix this program
[  273.598316][ T7815] loop2: detected capacity change from 0 to 2048
[  273.718001][ T7815]  loop2: p3 < > p4 < >
[  273.718932][ T7815] loop2: partition table partially beyond EOD, truncated
[  273.720183][ T7815] loop2: p3 start 4284289 is beyond EOD, truncated
[  273.795979][ T7819] netlink: 'syz.0.789': attribute type 1 has an invalid length.
[  273.807351][ T4329] XFS (loop1): Unmounting Filesystem
[  273.829054][ T7819] device bond6 entered promiscuous mode
[  273.830409][ T7819] 8021q: adding VLAN 0 to HW filter on device bond6
[  273.839516][ T7819] netlink: 28 bytes leftover after parsing attributes in process `syz.0.789'.
[  274.378144][ T4340] Bluetooth: hci1: failed to read key size for handle 200
[  274.546923][ T7834] loop1: detected capacity change from 0 to 512
[  274.553077][ T7834] EXT2-fs (loop1): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  274.649445][ T7834] EXT2-fs (loop1): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  274.913627][ T7840] xt_CT: You must specify a L4 protocol and not use inversions on it
[  277.160073][ T7864] netlink: 'syz.1.800': attribute type 1 has an invalid length.
[  277.224069][ T7864] device bond13 entered promiscuous mode
[  277.225284][ T7864] 8021q: adding VLAN 0 to HW filter on device bond13
[  277.261456][ T7865] loop3: detected capacity change from 0 to 32768
[  277.277687][ T7870] netlink: 28 bytes leftover after parsing attributes in process `syz.1.800'.
[  277.287562][ T7869] netlink: 'syz.4.801': attribute type 1 has an invalid length.
[  277.293418][ T7869] device bond7 entered promiscuous mode
[  277.294569][ T7869] 8021q: adding VLAN 0 to HW filter on device bond7
[  277.319717][ T7869] netlink: 28 bytes leftover after parsing attributes in process `syz.4.801'.
[  277.340495][ T7865] XFS (loop3): Mounting V5 Filesystem
[  277.398244][ T7865] XFS (loop3): Ending clean mount
[  277.408655][ T7865] XFS (loop3): Quotacheck needed: Please wait.
[  277.434526][ T7865] XFS (loop3): Quotacheck: Done.
[  277.529990][ T4340] Bluetooth: hci4: failed to read key size for handle 200
[  277.645867][ T7893] futex_wake_op: syz.4.803 tries to shift op by 144; fix this program
[  278.580052][ T4340] Bluetooth: hci1: failed to read key size for handle 200
[  278.815431][ T7908] loop2: detected capacity change from 0 to 512
[  278.832070][ T7908] EXT2-fs (loop2): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  278.837607][ T7908] EXT2-fs (loop2): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  278.865072][ T4330] XFS (loop3): Unmounting Filesystem
[  279.046770][ T7911] xt_CT: You must specify a L4 protocol and not use inversions on it
[  280.817314][ T7935] xt_CT: You must specify a L4 protocol and not use inversions on it
[  281.426223][ T7948] futex_wake_op: syz.3.817 tries to shift op by 144; fix this program
[  281.435056][ T7948] loop3: detected capacity change from 0 to 2048
[  281.575666][ T7948]  loop3: p3 < > p4 < >
[  281.576386][ T7948] loop3: partition table partially beyond EOD, truncated
[  281.577612][ T7948] loop3: p3 start 4284289 is beyond EOD, truncated
[  282.623734][ T4340] Bluetooth: hci0: failed to read key size for handle 200
[  282.673178][ T7967] loop3: detected capacity change from 0 to 512
[  282.696258][ T7967] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  282.698432][ T7967] EXT2-fs (loop3): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  283.195786][ T7973] xt_CT: You must specify a L4 protocol and not use inversions on it
[  283.236284][ T7975] loop1: detected capacity change from 0 to 2048
[  283.250428][ T7975] NILFS (loop1): unrecognized mount option "ÈÍÜÊûä¬V°l
[  283.250428][ T7975] ´šnorecovery"
[  284.268518][ T7991] loop3: detected capacity change from 0 to 512
[  284.274285][ T7991] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  284.280726][ T7991] EXT2-fs (loop3): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  284.612783][ T7998] xt_CT: You must specify a L4 protocol and not use inversions on it
[  284.866558][ T8003] xt_CT: You must specify a L4 protocol and not use inversions on it
[  285.686452][ T8014] futex_wake_op: syz.0.832 tries to shift op by 144; fix this program
[  289.765815][ T8060] loop3: detected capacity change from 0 to 512
[  289.775891][ T8060] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  289.783550][ T8060] EXT2-fs (loop3): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  289.889822][ T8062] netlink: 'syz.2.845': attribute type 1 has an invalid length.
[  289.909345][ T8062] device bond8 entered promiscuous mode
[  289.916152][ T8062] 8021q: adding VLAN 0 to HW filter on device bond8
[  289.927098][ T8062] netlink: 28 bytes leftover after parsing attributes in process `syz.2.845'.
[  290.089013][ T8069] xt_CT: You must specify a L4 protocol and not use inversions on it
[  292.691500][ T8105] netlink: 'syz.4.856': attribute type 1 has an invalid length.
[  292.710273][ T8105] device bond8 entered promiscuous mode
[  292.715061][ T8105] 8021q: adding VLAN 0 to HW filter on device bond8
[  292.913559][ T8105] netlink: 28 bytes leftover after parsing attributes in process `syz.4.856'.
[  292.925732][ T8105] netlink: 28 bytes leftover after parsing attributes in process `syz.4.856'.
[  293.084537][ T8116] loop2: detected capacity change from 0 to 512
[  293.126101][ T8116] EXT2-fs (loop2): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  293.132241][ T8117] futex_wake_op: syz.3.859 tries to shift op by 144; fix this program
[  293.140861][ T8117] loop3: detected capacity change from 0 to 2048
[  293.144112][ T8116] EXT2-fs (loop2): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  293.483082][ T8117]  loop3: p3 < > p4 < >
[  293.484510][ T8117] loop3: partition table partially beyond EOD, truncated
[  293.489430][ T8117] loop3: p3 start 4284289 is beyond EOD, truncated
[  293.671524][ T8125] xt_CT: You must specify a L4 protocol and not use inversions on it
[  294.252018][ T4340] Bluetooth: hci3: failed to read key size for handle 200
[  294.617029][ T8133] loop1: detected capacity change from 0 to 2048
[  295.442769][ T8133] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  295.943783][ T8145] netlink: 'syz.2.867': attribute type 1 has an invalid length.
[  295.951105][ T8145] device bond9 entered promiscuous mode
[  295.952274][ T8145] 8021q: adding VLAN 0 to HW filter on device bond9
[  295.962086][ T8145] netlink: 28 bytes leftover after parsing attributes in process `syz.2.867'.
[  295.966294][ T8145] netlink: 28 bytes leftover after parsing attributes in process `syz.2.867'.
[  296.643416][ T8152] netlink: 'syz.2.868': attribute type 1 has an invalid length.
[  296.656030][ T8152] device bond10 entered promiscuous mode
[  296.658482][ T8152] 8021q: adding VLAN 0 to HW filter on device bond10
[  296.664263][ T8152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.868'.
[  296.679697][ T8152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.868'.
[  297.009345][ T8159] loop2: detected capacity change from 0 to 2048
[  297.028333][ T8159] NILFS (loop2): unrecognized mount option "ÈÍÜÊûä¬V°l
[  297.028333][ T8159] ´šnorecovery"
[  297.031864][ T4329] EXT4-fs (loop1): unmounting filesystem.
[  297.053828][ T8163] loop3: detected capacity change from 0 to 512
[  297.407127][ T8163] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  297.468773][ T8163] EXT2-fs (loop3): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  298.768060][ T8181] futex_wake_op: syz.0.874 tries to shift op by 144; fix this program
[  298.985313][ T4340] Bluetooth: hci4: failed to read key size for handle 200
[  299.054424][ T8184] xt_CT: You must specify a L4 protocol and not use inversions on it
[  299.427014][ T4340] Bluetooth: hci2: failed to read key size for handle 200
[  300.338859][ T8205] netlink: 'syz.0.881': attribute type 1 has an invalid length.
[  300.350575][ T8204] loop1: detected capacity change from 0 to 2048
[  300.357949][ T8205] device bond7 entered promiscuous mode
[  300.359105][ T8205] 8021q: adding VLAN 0 to HW filter on device bond7
[  300.379650][ T8205] netlink: 28 bytes leftover after parsing attributes in process `syz.0.881'.
[  300.383150][ T8204] NILFS (loop1): unrecognized mount option "ÈÍÜÊûä¬V°l
[  300.383150][ T8204] ´šnorecovery"
[  300.456659][ T8205] netlink: 28 bytes leftover after parsing attributes in process `syz.0.881'.
[  300.853930][ T8216] loop2: detected capacity change from 0 to 2048
[  300.855828][ T8216] NILFS (loop2): unrecognized mount option "ÈÍÜÊûä¬V°l
[  300.855828][ T8216] ´šnorecovery"
[  302.127439][ T4322] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  302.158030][ T8229] netlink: 'syz.4.888': attribute type 1 has an invalid length.
[  302.421705][ T8229] device bond9 entered promiscuous mode
[  302.421853][ T8226] loop1: detected capacity change from 0 to 2048
[  302.422879][ T8229] 8021q: adding VLAN 0 to HW filter on device bond9
[  302.427919][ T8226] NILFS (loop1): unrecognized mount option "ÈÍÜÊûä¬V°l
[  302.427919][ T8226] ´šnorecovery"
[  302.432214][ T8231] netlink: 28 bytes leftover after parsing attributes in process `syz.4.888'.
[  302.446341][ T4321] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  302.591317][ T8229] netlink: 28 bytes leftover after parsing attributes in process `syz.4.888'.
[  303.231436][ T8248] netlink: 'syz.1.894': attribute type 1 has an invalid length.
[  303.237852][ T8248] device bond14 entered promiscuous mode
[  303.239204][ T8248] 8021q: adding VLAN 0 to HW filter on device bond14
[  303.244912][ T8248] netlink: 28 bytes leftover after parsing attributes in process `syz.1.894'.
[  303.249243][ T8248] netlink: 28 bytes leftover after parsing attributes in process `syz.1.894'.
[  303.574391][ T8258] loop3: detected capacity change from 0 to 2048
[  305.606796][ T4340] Bluetooth: hci4: failed to read key size for handle 200
[  305.614584][ T8258] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  306.127196][ T8278] loop3: detected capacity change from 0 to 512
[  306.129921][ T8278] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  306.132417][ T8278] EXT2-fs (loop3): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  306.811750][ T8291] xt_CT: You must specify a L4 protocol and not use inversions on it
[  306.916336][ T8294] xt_CT: You must specify a L4 protocol and not use inversions on it
[  307.726343][ T8300] netlink: 'syz.1.906': attribute type 1 has an invalid length.
[  307.813113][ T8300] device bond15 entered promiscuous mode
[  307.816768][ T8300] 8021q: adding VLAN 0 to HW filter on device bond15
[  308.077301][ T8305] netlink: 28 bytes leftover after parsing attributes in process `syz.1.906'.
[  308.095489][ T8300] netlink: 28 bytes leftover after parsing attributes in process `syz.1.906'.
[  308.368004][ T4340] Bluetooth: hci0: failed to read key size for handle 200
[  309.012782][ T8322] loop2: detected capacity change from 0 to 256
[  309.024258][ T8322] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d)
[  309.536548][ T8334] loop1: detected capacity change from 0 to 32768
[  309.594920][ T8334] XFS (loop1): Mounting V5 Filesystem
[  309.638099][ T8334] XFS (loop1): Ending clean mount
[  309.639765][ T8334] XFS (loop1): Quotacheck needed: Please wait.
[  309.659504][ T8334] XFS (loop1): Quotacheck: Done.
[  309.738207][ T8347] xt_CT: You must specify a L4 protocol and not use inversions on it
[  310.131458][ T8351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  310.158829][ T4340] Bluetooth: hci3: failed to read key size for handle 200
[  310.471084][ T8355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  310.496382][ T4329] XFS (loop1): Unmounting Filesystem
[  310.531101][ T8351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  310.755351][ T8362] loop3: detected capacity change from 0 to 512
[  310.757467][ T8362] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  310.760031][ T8362] EXT2-fs (loop3): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  310.905702][ T8365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  310.963558][ T8365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  311.007884][ T8367] xt_CT: You must specify a L4 protocol and not use inversions on it
[  311.060227][ T8365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  314.046395][ T8411] xt_CT: You must specify a L4 protocol and not use inversions on it
[  314.960194][ T8427] loop1: detected capacity change from 0 to 32768
[  314.985997][ T8427] read_mapping_page failed!
[  314.987055][ T8427] ERROR: (device loop1): txAbort: 
[  314.987055][ T8427] 
[  315.210537][ T8434] jfs_strtoUCS: char2uni returned -22.
[  315.211790][ T8434] charset = iso8859-3, char = 0xbe
[  315.458299][ T8435] xt_CT: You must specify a L4 protocol and not use inversions on it
[  315.794683][ T8443] IPv6: NLM_F_CREATE should be specified when creating new route
[  316.638747][ T8453] loop3: detected capacity change from 0 to 512
[  316.642892][ T8453] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  316.654515][ T4340] Bluetooth: hci0: failed to read key size for handle 200
[  316.657894][ T8453] EXT2-fs (loop3): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  316.831774][ T8456] xt_CT: You must specify a L4 protocol and not use inversions on it
[  317.710381][ T8464] rdma_rxe: rxe_register_device failed with error -23
[  317.711977][ T8464] rdma_rxe: failed to add ipvlan0
[  318.192511][ T4340] Bluetooth: hci3: command 0x0405 tx timeout
[  319.796327][ T8484] loop1: detected capacity change from 0 to 256
[  320.039591][ T8484] exFAT-fs (loop1): Invalid exboot-signature(sector = 2): 0x1119abd0
[  320.043371][ T8484] exFAT-fs (loop1): Invalid exboot-signature(sector = 5): 0x1119abd0
[  320.045115][ T8484] exFAT-fs (loop1): Invalid exboot-signature(sector = 6): 0x00000000
[  320.046767][ T8484] exFAT-fs (loop1): Invalid exboot-signature(sector = 7): 0x00000000
[  320.049826][ T8484] exFAT-fs (loop1): Invalid exboot-signature(sector = 8): 0x00000000
[  320.053519][ T8484] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x00000000, checksum : 0x13a8bc6e)
[  320.055361][ T8484] exFAT-fs (loop1): invalid boot region
[  320.056252][ T8484] exFAT-fs (loop1): failed to recognize exfat type
[  321.311718][ T4322] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  321.535889][ T8495] loop3: detected capacity change from 0 to 512
[  321.540970][ T8495] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  321.546548][ T8495] EXT2-fs (loop3): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  321.935033][ T8501] futex_wake_op: syz.1.954 tries to shift op by 144; fix this program
[  321.944956][ T8501] loop1: detected capacity change from 0 to 2048
[  322.103389][ T8501]  loop1: p3 < > p4 < >
[  322.104268][ T8501] loop1: partition table partially beyond EOD, truncated
[  322.106901][ T8501] loop1: p3 start 4284289 is beyond EOD, truncated
[  322.282104][ T3940]  loop1: p3 < > p4 < >
[  322.283062][ T3940] loop1: partition table partially beyond EOD, truncated
[  322.291335][ T3940] loop1: p3 start 4284289 is beyond EOD, truncated
[  322.600985][ T8514] xt_CT: You must specify a L4 protocol and not use inversions on it
[  323.078781][ T8527] Set syz1 is full, maxelem 65536 reached
[  323.835507][ T4347] Bluetooth: hci1: failed to read key size for handle 200
[  323.967761][ T8534] loop2: detected capacity change from 0 to 32768
[  324.054089][ T8534] XFS (loop2): Mounting V5 Filesystem
[  324.235828][ T8545] loop3: detected capacity change from 0 to 256
[  324.267431][ T8545] exFAT-fs (loop3): Invalid exboot-signature(sector = 2): 0x1119abd0
[  324.271889][ T8545] exFAT-fs (loop3): Invalid exboot-signature(sector = 5): 0x1119abd0
[  324.274628][ T8545] exFAT-fs (loop3): Invalid exboot-signature(sector = 6): 0x00000000
[  324.277056][ T8545] exFAT-fs (loop3): Invalid exboot-signature(sector = 7): 0x00000000
[  324.279854][ T8545] exFAT-fs (loop3): Invalid exboot-signature(sector = 8): 0x00000000
[  324.284027][ T8545] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x00000000, checksum : 0x13a8bc6e)
[  324.285809][ T8545] exFAT-fs (loop3): invalid boot region
[  324.286954][ T8545] exFAT-fs (loop3): failed to recognize exfat type
[  324.969639][ T8534] XFS (loop2): Ending clean mount
[  324.971376][ T8534] XFS (loop2): Quotacheck needed: Please wait.
[  324.990069][ T8534] XFS (loop2): Quotacheck: Done.
[  325.397573][ T4338] XFS (loop2): Unmounting Filesystem
[  325.425037][ T8558] netlink: 'syz.3.970': attribute type 1 has an invalid length.
[  325.493056][ T8558] device bond7 entered promiscuous mode
[  325.494224][ T8558] 8021q: adding VLAN 0 to HW filter on device bond7
[  325.519275][ T8558] netlink: 28 bytes leftover after parsing attributes in process `syz.3.970'.
[  325.534851][ T8558] netlink: 28 bytes leftover after parsing attributes in process `syz.3.970'.
[  325.657338][ T8563] loop3: detected capacity change from 0 to 2048
[  325.664818][ T8563] NILFS (loop3): unrecognized mount option "ÈÍÜÊûä¬V°l
[  325.664818][ T8563] ´šnorecovery"
[  326.198156][ T8570] loop2: detected capacity change from 0 to 512
[  326.271779][ T8572] futex_wake_op: syz.0.974 tries to shift op by 144; fix this program
[  326.595861][ T8570] EXT2-fs (loop2): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  326.601400][ T8570] EXT2-fs (loop2): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  327.188596][ T8583] futex_wake_op: syz.0.986 tries to shift op by 144; fix this program
[  327.826981][ T8587] loop2: detected capacity change from 0 to 512
[  327.847674][ T8587] EXT2-fs (loop2): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  327.852145][ T8587] EXT2-fs (loop2): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  328.036667][ T8589] xt_CT: You must specify a L4 protocol and not use inversions on it
[  328.800684][ T8601] loop3: detected capacity change from 0 to 256
[  330.073014][ T8606] loop2: detected capacity change from 0 to 32768
[  330.128243][ T8606] read_mapping_page failed!
[  330.129149][ T8606] ERROR: (device loop2): txAbort: 
[  330.129149][ T8606] 
[  330.622992][ T8619] loop3: detected capacity change from 0 to 2048
[  331.136178][ T8617] jfs_strtoUCS: char2uni returned -22.
[  331.137123][ T8617] charset = iso8859-3, char = 0xbe
[  331.413465][ T2066] ieee802154 phy0 wpan0: encryption failed: -22
[  331.414931][ T2066] ieee802154 phy1 wpan1: encryption failed: -22
[  331.594347][ T8619] NILFS (loop3): unrecognized mount option "ÈÍÜÊûä¬V°l
[  331.594347][ T8619] ´šnorecovery"
[  332.403714][ T4347] Bluetooth: hci2: failed to read key size for handle 200
[  333.667212][ T8643] loop1: detected capacity change from 0 to 32768
[  333.673495][ T8641] loop3: detected capacity change from 0 to 32768
[  333.749458][ T8643] read_mapping_page failed!
[  333.750355][ T8643] ERROR: (device loop1): txAbort: 
[  333.750355][ T8643] 
[  333.851553][ T8641] XFS (loop3): Mounting V5 Filesystem
[  334.983149][ T8659] jfs_strtoUCS: char2uni returned -22.
[  334.984320][ T8659] charset = iso8859-3, char = 0xbe
[  335.016737][ T8641] XFS (loop3): Ending clean mount
[  335.018664][ T8641] XFS (loop3): Quotacheck needed: Please wait.
[  335.044087][ T8641] XFS (loop3): Quotacheck: Done.
[  335.710890][ T4330] XFS (loop3): Unmounting Filesystem
[  338.702454][ T8720] Invalid ELF header magic: != ELF
[  339.267285][ T8727] loop3: detected capacity change from 0 to 8
[  339.480546][ T8727] SQUASHFS error: xz decompression failed, data probably corrupt
[  339.482040][ T8727] SQUASHFS error: Failed to read block 0x108: -5
[  339.483109][ T8727] SQUASHFS error: Unable to read metadata cache entry [106]
[  339.484421][ T8727] SQUASHFS error: Unable to read inode 0x11f
[  340.111159][ T4347] Bluetooth: hci4: failed to read key size for handle 200
[  340.236364][ T8742] loop3: detected capacity change from 0 to 32768
[  340.822162][ T8742] read_mapping_page failed!
[  340.823021][ T8742] ERROR: (device loop3): txAbort: 
[  340.823021][ T8742] 
[  341.308859][ T8750] jfs_strtoUCS: char2uni returned -22.
[  341.309932][ T8750] charset = iso8859-3, char = 0xbe
[  341.927741][ T8759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  341.990757][ T8764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  343.235591][   T27] kauditd_printk_skb: 6 callbacks suppressed
[  343.235762][   T27] audit: type=1107 audit(321.242:838): pid=8761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  343.379039][ T8768] device veth1_macvtap left promiscuous mode
[  343.414887][ T8759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  343.532132][ T8770] loop2: detected capacity change from 0 to 32768
[  343.568972][ T8770] XFS (loop2): Mounting V5 Filesystem
[  343.637612][ T8770] XFS (loop2): Ending clean mount
[  343.639417][ T8770] XFS (loop2): Quotacheck needed: Please wait.
[  343.655934][ T8770] XFS (loop2): Quotacheck: Done.
[  344.059243][ T8784] loop3: detected capacity change from 0 to 2048
[  344.239857][ T8784] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  344.663878][ T4338] XFS (loop2): Unmounting Filesystem
[  345.887187][ T4330] EXT4-fs (loop3): unmounting filesystem.
[  345.903000][ T8804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  346.183504][ T8811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  346.241606][ T8804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  347.848096][ T8836] loop3: detected capacity change from 0 to 32768
[  347.983685][ T8836] XFS (loop3): Mounting V5 Filesystem
[  348.017589][ T8836] XFS (loop3): Ending clean mount
[  348.020463][ T8836] XFS (loop3): Quotacheck needed: Please wait.
[  348.345669][ T8836] XFS (loop3): Quotacheck: Done.
[  348.733826][ T4330] XFS (loop3): Unmounting Filesystem
[  348.825716][ T8857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  349.163178][ T8860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  349.222347][ T8857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  349.369855][ T8862] loop3: detected capacity change from 0 to 2048
[  349.397562][ T8862] NILFS (loop3): unrecognized mount option "ÈÍÜÊûä¬V°l
[  349.397562][ T8862] ´šnorecovery"
[  351.990379][ T8897] xt_CT: You must specify a L4 protocol and not use inversions on it
[  358.776055][ T8972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  358.834631][ T8975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  358.866271][    T7] wlan1: authenticate with 08:02:11:00:00:00
[  358.868815][    T7] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  358.897653][ T8972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  359.007456][ T4492] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[  359.170500][ T1583] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[  359.288783][ T4492] wlan1: authentication with 08:02:11:00:00:00 timed out
[  359.398664][ T4347] Bluetooth: hci1: failed to read key size for handle 200
[  359.515290][ T4347] Bluetooth: hci0: failed to read key size for handle 200
[  360.198057][ T8994] xt_CT: You must specify a L4 protocol and not use inversions on it
[  361.665582][ T4347] Bluetooth: hci0: failed to read key size for handle 200
[  361.966540][ T9016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  362.024236][ T9016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  362.045500][ T4494] wlan1: authenticate with 08:02:11:00:00:00
[  362.048319][ T4494] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  362.088839][ T9016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  362.092826][ T4347] Bluetooth: hci2: failed to read key size for handle 200
[  362.194973][   T11] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[  362.309905][ T9023] xt_CT: You must specify a L4 protocol and not use inversions on it
[  362.379916][ T4686] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[  362.495661][ T4686] wlan1: authentication with 08:02:11:00:00:00 timed out
[  363.262107][ T4347] Bluetooth: hci2: failed to read key size for handle 200
[  363.674676][ T4347] Bluetooth: hci4: failed to read key size for handle 200
[  363.835086][ T9054] xt_CT: You must specify a L4 protocol and not use inversions on it
[  365.856842][ T4347] Bluetooth: hci0: failed to read key size for handle 200
[  366.175676][ T4347] Bluetooth: hci2: failed to read key size for handle 200
[  366.959604][ T9095] xt_CT: You must specify a L4 protocol and not use inversions on it
[  367.470386][ T4347] Bluetooth: hci2: failed to read key size for handle 200
[  368.201472][ T4347] Bluetooth: hci1: failed to read key size for handle 200
[  368.299536][ T9121] xt_CT: You must specify a L4 protocol and not use inversions on it
[  368.505676][ T9122] xt_CT: You must specify a L4 protocol and not use inversions on it
[  368.837675][ T9132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  368.895440][ T9132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  368.955780][ T9132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  370.659802][ T9152] xt_CT: You must specify a L4 protocol and not use inversions on it
[  370.986797][ T4347] Bluetooth: hci2: failed to read key size for handle 200
[  371.610652][ T4347] Bluetooth: hci3: failed to read key size for handle 200
[  372.164034][ T4347] Bluetooth: hci2: failed to read key size for handle 200
[  372.766394][ T9194] xt_CT: You must specify a L4 protocol and not use inversions on it
[  376.114663][ T4347] Bluetooth: hci3: failed to read key size for handle 200
[  376.565259][ T4347] Bluetooth: hci1: failed to read key size for handle 200
[  376.843160][ T9248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  376.900644][ T9248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  376.958536][ T9248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  377.230417][ T9256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  377.288330][ T9256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  377.364456][ T9256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  380.477668][ T4347] Bluetooth: hci4: failed to read key size for handle 200
[  380.754216][ T4347] Bluetooth: hci1: failed to read key size for handle 200
[  380.872374][ T4347] Bluetooth: hci2: failed to read key size for handle 200
[  381.988498][ T9319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  382.303724][ T4347] Bluetooth: hci1: failed to read key size for handle 200
[  382.435694][ T9320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  382.531477][ T9319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  382.657849][ T9334] xt_CT: You must specify a L4 protocol and not use inversions on it
[  383.383483][ T9341] xt_CT: You must specify a L4 protocol and not use inversions on it
[  384.387305][ T4347] Bluetooth: hci4: failed to read key size for handle 200
[  384.608791][ T4347] Bluetooth: hci4: failed to read key size for handle 200
[  385.050864][ T4347] Bluetooth: hci0: failed to read key size for handle 200
[  386.628838][ T4347] Bluetooth: hci2: failed to read key size for handle 200
[  387.741782][ T9399] xt_CT: You must specify a L4 protocol and not use inversions on it
[  388.056401][ T4347] Bluetooth: hci4: failed to read key size for handle 200
[  389.498700][ T4347] Bluetooth: hci2: failed to read key size for handle 200
[  391.041395][ T9435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  391.100136][ T9439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  391.130576][ T9441] xt_CT: You must specify a L4 protocol and not use inversions on it
[  391.159512][ T9435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  391.599753][ T4347] Bluetooth: hci0: failed to read key size for handle 200
[  392.100804][ T9450] xt_CT: You must specify a L4 protocol and not use inversions on it
[  392.590319][ T9460] xt_CT: You must specify a L4 protocol and not use inversions on it
[  392.872281][ T9465] xt_CT: You must specify a L4 protocol and not use inversions on it
[  393.128540][ T4347] Bluetooth: hci4: failed to read key size for handle 200
[  394.428734][ T4347] Bluetooth: hci0: failed to read key size for handle 200
[  395.903560][ T9494] xt_CT: You must specify a L4 protocol and not use inversions on it
[  396.403553][ T4347] Bluetooth: hci1: failed to read key size for handle 200
[  396.527030][ T9505] xt_CT: You must specify a L4 protocol and not use inversions on it
[  396.888721][ T9511] xt_CT: You must specify a L4 protocol and not use inversions on it
[  397.679554][ T4347] Bluetooth: hci1: failed to read key size for handle 200
[  397.828652][ T2066] ieee802154 phy0 wpan0: encryption failed: -22
[  397.830088][ T2066] ieee802154 phy1 wpan1: encryption failed: -22
[  397.921668][ T9524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  397.979446][ T9524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  398.038198][ T9524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  398.561381][ T4347] Bluetooth: hci1: failed to read key size for handle 200
[  400.183080][ T9546] xt_CT: You must specify a L4 protocol and not use inversions on it
[  400.317803][ T9550] xt_CT: You must specify a L4 protocol and not use inversions on it
[  400.795351][ T9562] xt_CT: You must specify a L4 protocol and not use inversions on it
[  400.799237][ T4347] Bluetooth: hci4: failed to read key size for handle 200
[  404.458654][ T9609] xt_CT: You must specify a L4 protocol and not use inversions on it
[  404.985663][ T9614] xt_CT: You must specify a L4 protocol and not use inversions on it
[  405.575847][ T9627] xt_CT: You must specify a L4 protocol and not use inversions on it
[  405.704720][ T4347] Bluetooth: hci1: failed to read key size for handle 200
[  405.955172][ T9636] xt_CT: You must specify a L4 protocol and not use inversions on it
[  406.195091][ T9638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  406.254857][ T9638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  406.312840][ T9638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  408.608847][ T9689] xt_CT: You must specify a L4 protocol and not use inversions on it
[  409.187003][ T4347] Bluetooth: hci1: failed to read key size for handle 200
[  409.310794][ T9701] xt_CT: You must specify a L4 protocol and not use inversions on it
[  413.776048][ T9755] xt_CT: You must specify a L4 protocol and not use inversions on it
[  414.071080][ T4347] Bluetooth: hci1: failed to read key size for handle 200
[  415.768895][ T9778] xt_CT: You must specify a L4 protocol and not use inversions on it
[  416.870604][ T4347] Bluetooth: hci1: failed to read key size for handle 200
[  417.354997][ T4347] Bluetooth: hci2: failed to read key size for handle 200
[  417.984206][ T4347] Bluetooth: hci2: failed to read key size for handle 200
[  420.429936][ T9849] xt_CT: You must specify a L4 protocol and not use inversions on it
[  420.607635][ T4347] Bluetooth: hci1: failed to read key size for handle 200
[  420.901596][ T9862] xt_CT: You must specify a L4 protocol and not use inversions on it
[  421.712837][ T4347] Bluetooth: hci0: failed to read key size for handle 200
[  422.315441][ T4347] Bluetooth: hci3: failed to read key size for handle 200
[  423.371512][ T9906] xt_CT: You must specify a L4 protocol and not use inversions on it
[  424.812825][ T9917] xt_CT: You must specify a L4 protocol and not use inversions on it
[  425.472074][ T9925] xt_CT: You must specify a L4 protocol and not use inversions on it
[  426.323832][ T4347] Bluetooth: hci2: failed to read key size for handle 200
[  426.327728][ T4347] Bluetooth: hci4: failed to read key size for handle 200
[  426.337872][ T9942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  426.447832][ T9938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  426.506362][ T9938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  427.459259][ T9961] xt_CT: You must specify a L4 protocol and not use inversions on it
[  428.521654][ T9970] xt_CT: You must specify a L4 protocol and not use inversions on it
[  428.652731][ T9972] xt_CT: You must specify a L4 protocol and not use inversions on it
[  429.517623][ T4347] Bluetooth: hci4: failed to read key size for handle 200
[  430.466558][ T4347] Bluetooth: hci2: failed to read key size for handle 200
[  430.772734][T10004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  431.112166][T10000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  431.203055][T10000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  431.268182][T10013] xt_CT: You must specify a L4 protocol and not use inversions on it
[  432.383851][ T4347] Bluetooth: hci4: failed to read key size for handle 200
[  432.927013][T10029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  432.984948][T10029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  433.148706][T10031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  433.981856][T10048] xt_CT: You must specify a L4 protocol and not use inversions on it
[  435.535528][T10062] xt_CT: You must specify a L4 protocol and not use inversions on it
[  435.664754][ T4347] Bluetooth: hci1: failed to read key size for handle 200
[  435.981543][ T4347] Bluetooth: hci1: failed to read key size for handle 200
[  436.267819][T10087] xt_CT: You must specify a L4 protocol and not use inversions on it
[  439.038392][ T4347] Bluetooth: hci4: failed to read key size for handle 200
[  439.555160][T10133] xt_CT: You must specify a L4 protocol and not use inversions on it
[  440.641680][T10150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  440.700366][T10153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  440.759174][T10150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  440.878602][T10155] xt_CT: You must specify a L4 protocol and not use inversions on it
[  441.943735][T10169] xt_CT: You must specify a L4 protocol and not use inversions on it
[  443.166414][ T4347] Bluetooth: hci1: failed to read key size for handle 200
[  443.643663][T10206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  443.710772][T10208] xt_CT: You must specify a L4 protocol and not use inversions on it
[  443.718325][T10206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  443.777540][T10206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  445.201754][T10224] xt_CT: You must specify a L4 protocol and not use inversions on it
[  446.084220][ T4347] Bluetooth: hci3: failed to read key size for handle 200
[  446.710624][T10259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  446.837623][T10259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  447.518795][T10254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  447.969172][T10275] xt_CT: You must specify a L4 protocol and not use inversions on it
[  447.991508][T10276] xt_CT: You must specify a L4 protocol and not use inversions on it
[  450.269644][T10299] IPv6: NLM_F_CREATE should be specified when creating new route
[  451.324714][ T4347] Bluetooth: hci4: failed to read key size for handle 200
[  452.175114][T10338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  452.232951][T10338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  452.291091][T10338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  453.885616][ T4347] Bluetooth: hci2: failed to read key size for handle 200
[  453.966261][T10362] netlink: 'syz.4.1393': attribute type 10 has an invalid length.
[  453.991941][T10362] capability: warning: `syz.4.1393' uses 32-bit capabilities (legacy support in use)
[  454.800939][T10373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  454.866477][T10378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  454.924732][T10373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  455.000832][T10386] xt_CT: You must specify a L4 protocol and not use inversions on it
[  455.458500][ T4347] Bluetooth: hci0: failed to read key size for handle 200
[  456.042293][ T4347] Bluetooth: hci1: failed to read key size for handle 200
[  457.876627][T10421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  458.160188][T10425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  458.237771][T10421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  458.849362][T10452] fuse: Unknown parameter '00000000000000000000'
[  458.936458][ T4381] libceph: connect (1)[c::]:6789 error -101
[  458.937985][ T4381] libceph: mon0 (1)[c::]:6789 connect error
[  459.215399][ T4381] libceph: connect (1)[c::]:6789 error -101
[  459.217118][ T4381] libceph: mon0 (1)[c::]:6789 connect error
[  459.747997][T10460] xt_CT: You must specify a L4 protocol and not use inversions on it
[  459.942641][T10449] ceph: No mds server is up or the cluster is laggy
[  459.944224][ T4381] libceph: connect (1)[c::]:6789 error -101
[  459.945335][ T4381] libceph: mon0 (1)[c::]:6789 connect error
[  460.621434][ T4347] Bluetooth: hci0: failed to read key size for handle 200
[  462.219581][T10504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  462.445175][T10504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  462.722371][T10504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  462.768204][T10511] xt_CT: You must specify a L4 protocol and not use inversions on it
[  463.506501][ T4347] Bluetooth: hci2: failed to read key size for handle 200
[  464.853881][ T2066] ieee802154 phy0 wpan0: encryption failed: -22
[  464.854976][ T2066] ieee802154 phy1 wpan1: encryption failed: -22
[  466.048374][T10540] xt_CT: You must specify a L4 protocol and not use inversions on it
[  466.413911][T10547] xt_CT: You must specify a L4 protocol and not use inversions on it
[  467.088250][T10565] device gretap0 entered promiscuous mode
[  468.931389][T10589] xt_CT: You must specify a L4 protocol and not use inversions on it
[  469.206534][T10586] xt_CT: You must specify a L4 protocol and not use inversions on it
[  471.057223][ T4347] Bluetooth: hci0: failed to read key size for handle 200
[  471.521539][T10623] xt_CT: You must specify a L4 protocol and not use inversions on it
[  471.835071][T10630] overlayfs: failed to clone upperpath
[  474.332955][T10662] xt_CT: You must specify a L4 protocol and not use inversions on it
[  474.868989][T10670] xt_CT: You must specify a L4 protocol and not use inversions on it
[  474.886162][ T4347] Bluetooth: hci4: failed to read key size for handle 200
[  478.798439][T10737] device veth1_macvtap left promiscuous mode
[  479.589750][T10753] fuse: Unknown parameter '00000000000000000000'
[  479.984438][T10749] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4)
[  480.824416][T10778] futex_wake_op: syz.0.1493 tries to shift op by 144; fix this program
[  482.896020][ T4347] Bluetooth: hci4: failed to read key size for handle 200
[  484.769615][T10832] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1511'.
[  484.888207][ T4347] Bluetooth: hci4: failed to read key size for handle 200
[  485.351692][T10838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  485.410847][T10842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  485.469226][T10838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  485.494206][ T4381] wlan1: authenticate with 08:02:11:00:00:00
[  485.495812][ T4381] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  485.664432][    T9] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[  485.871490][    T9] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[  486.477929][ T4664] wlan1: authentication with 08:02:11:00:00:00 timed out
[  487.266932][T10875] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4)
[  487.524687][T10877] kAFS: unable to lookup cell '.yz1'
[  487.546395][ T4347] Bluetooth: hci1: failed to read key size for handle 200
[  489.206701][ T4347] Bluetooth: hci0: failed to read key size for handle 200
[  489.233807][T10907] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  489.236698][T10907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  489.238281][T10907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  490.853711][T10903] device gretap0 entered promiscuous mode
[  490.990732][T10928] xt_CT: You must specify a L4 protocol and not use inversions on it
[  491.828755][T10936] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4)
[  493.052635][ T4347] Bluetooth: hci2: failed to read key size for handle 200
[  493.482269][T10980] fuse: Unknown parameter '00000000000000000000'
[  493.599704][   T22] libceph: connect (1)[c::]:6789 error -101
[  493.601268][   T22] libceph: mon0 (1)[c::]:6789 connect error
[  493.874661][   T22] libceph: connect (1)[c::]:6789 error -101
[  493.899305][T10978] ceph: No mds server is up or the cluster is laggy
[  493.907244][   T22] libceph: mon0 (1)[c::]:6789 connect error
[  493.989798][T10992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  494.099130][T10995] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1549'.
[  494.232103][T10997] xt_CT: You must specify a L4 protocol and not use inversions on it
[  494.455391][T11001] overlayfs: failed to clone upperpath
[  494.812725][T10988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  495.024097][T10988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  497.297684][ T4347] Bluetooth: hci1: failed to read key size for handle 200
[  497.668525][T11053] xt_CT: You must specify a L4 protocol and not use inversions on it
[  497.966749][T11054] overlayfs: failed to clone upperpath
[  500.685244][T11088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  501.282158][T11088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  501.364952][T11086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  501.742434][T11103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  502.096120][T11105] Invalid ELF header magic: != ELF
[  502.272947][ T4347] Bluetooth: hci4: failed to read key size for handle 200
[  502.397561][T11107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  502.460541][T11100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  502.557717][ T4347] Bluetooth: hci0: failed to read key size for handle 200
[  502.784138][T11117] kAFS: unable to lookup cell '.yz1'
[  502.877181][T11119] fuse: Unknown parameter '00000000000000000000'
[  503.205094][ T4381] libceph: connect (1)[c::]:6789 error -101
[  503.206674][ T4381] libceph: mon0 (1)[c::]:6789 connect error
[  503.467222][T11118] ceph: No mds server is up or the cluster is laggy
[  503.548202][   T22] libceph: connect (1)[c::]:6789 error -101
[  503.549388][   T22] libceph: mon0 (1)[c::]:6789 connect error
[  507.625412][ T4347] Bluetooth: hci1: failed to read key size for handle 200
[  508.775737][T11182] kAFS: unable to lookup cell '.yz1'
[  509.281873][ T4347] Bluetooth: hci1: failed to read key size for handle 200
[  510.309566][T11204] fuse: Unknown parameter '00000000000000000000'
[  510.346643][ T4381] libceph: connect (1)[c::]:6789 error -101
[  510.348718][ T4381] libceph: mon0 (1)[c::]:6789 connect error
[  510.515027][T11202] ceph: No mds server is up or the cluster is laggy
[  510.886056][T10470] libceph: connect (1)[c::]:6789 error -101
[  510.893040][T10470] libceph: mon0 (1)[c::]:6789 connect error
[  511.233356][ T4347] Bluetooth: hci1: failed to read key size for handle 200
[  511.750137][T11236] xt_CT: You must specify a L4 protocol and not use inversions on it
[  512.832957][T11246] xt_CT: You must specify a L4 protocol and not use inversions on it
[  516.522327][ T4347] Bluetooth: hci2: failed to read key size for handle 200
[  517.320976][T11294] xt_CT: You must specify a L4 protocol and not use inversions on it
[  518.630374][T11295] overlayfs: failed to clone upperpath
[  518.932950][T11298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  519.047558][T11309] xt_CT: You must specify a L4 protocol and not use inversions on it
[  519.323789][T11312] Invalid ELF header magic: != ELF
[  520.225799][T11322] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1627'.
[  522.851584][T11365] xt_CT: You must specify a L4 protocol and not use inversions on it
[  522.869060][T11362] xt_CT: You must specify a L4 protocol and not use inversions on it
[  525.626052][ T4347] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  525.628375][ T4347] CPU: 0 PID: 4347 Comm: kworker/u5:8 Not tainted syzkaller #0
[  525.629707][ T4347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[  525.631274][ T4347] Workqueue: hci3 hci_rx_work
[  525.632016][ T4347] Call trace:
[  525.632494][ T4347]  dump_backtrace+0x1c4/0x1f0
[  525.633257][ T4347]  show_stack+0x2c/0x3c
[  525.633913][ T4347]  __dump_stack+0x30/0x40
[  525.634616][ T4347]  dump_stack_lvl+0xf4/0x15c
[  525.635362][ T4347]  dump_stack+0x1c/0x5c
[  525.636084][ T4347]  sysfs_create_dir_ns+0x244/0x264
[  525.636922][ T4347]  kobject_add_internal+0x5a8/0xb18
[  525.637772][ T4347]  kobject_add+0x144/0x20c
[  525.638524][ T4347]  device_add+0x3dc/0xe4c
[  525.639257][ T4347]  hci_conn_add_sysfs+0xb8/0x1bc
[  525.640062][ T4347]  le_conn_complete_evt+0xd3c/0x1300
[  525.640908][ T4347]  hci_le_conn_complete_evt+0x114/0x3b8
[  525.641844][ T4347]  hci_le_meta_evt+0x2c0/0x4a8
[  525.642620][ T4347]  hci_event_packet+0x64c/0xe60
[  525.643389][ T4347]  hci_rx_work+0x320/0xa94
[  525.644076][ T4347]  process_one_work+0x7e4/0x13bc
[  525.644885][ T4347]  worker_thread+0x8cc/0xfe8
[  525.645602][ T4347]  kthread+0x254/0x2e0
[  525.646258][ T4347]  ret_from_fork+0x10/0x20
[  525.647367][ T4347] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  525.649581][ T4347] Bluetooth: hci3: failed to register connection device
[  527.445106][T11424] xt_CT: You must specify a L4 protocol and not use inversions on it
[  527.839730][T11433] xt_CT: You must specify a L4 protocol and not use inversions on it
[  527.951589][T11398] Bluetooth: hci3: command 0x2016 tx timeout
[  529.553575][T11452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  529.615239][T11456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  529.674744][T11452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  531.226906][ T2066] ieee802154 phy0 wpan0: encryption failed: -22
[  531.232313][ T2066] ieee802154 phy1 wpan1: encryption failed: -22
[  533.474219][T11516] xt_CT: You must specify a L4 protocol and not use inversions on it
[  533.731767][T11519] tmpfs: Bad value for 'nr_inodes'
[  533.880007][T11524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  534.157913][T11523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  534.231687][T11523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  534.436592][T11532] overlayfs: failed to clone upperpath
[  534.828564][ T4340] Bluetooth: hci3: failed to read key size for handle 200
[  537.418722][ T4340] Bluetooth: hci2: failed to read key size for handle 200
[  538.206949][T11586] xt_CT: You must specify a L4 protocol and not use inversions on it
[  539.379496][ T4340] Bluetooth: hci0: failed to read key size for handle 200
[  546.356236][T11670] xt_CT: You must specify a L4 protocol and not use inversions on it
[  546.625442][ T4340] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  546.636783][ T4340] CPU: 1 PID: 4340 Comm: kworker/u5:4 Not tainted syzkaller #0
[  546.638226][ T4340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[  546.640108][ T4340] Workqueue: hci2 hci_rx_work
[  546.640945][ T4340] Call trace:
[  546.641532][ T4340]  dump_backtrace+0x1c4/0x1f0
[  546.642303][ T4340]  show_stack+0x2c/0x3c
[  546.643020][ T4340]  __dump_stack+0x30/0x40
[  546.643777][ T4340]  dump_stack_lvl+0xf4/0x15c
[  546.644593][ T4340]  dump_stack+0x1c/0x5c
[  546.645323][ T4340]  sysfs_create_dir_ns+0x244/0x264
[  546.646300][ T4340]  kobject_add_internal+0x5a8/0xb18
[  546.647159][ T4340]  kobject_add+0x144/0x20c
[  546.647902][ T4340]  device_add+0x3dc/0xe4c
[  546.648627][ T4340]  hci_conn_add_sysfs+0xb8/0x1bc
[  546.649444][ T4340]  le_conn_complete_evt+0xd3c/0x1300
[  546.650326][ T4340]  hci_le_conn_complete_evt+0x114/0x3b8
[  546.651271][ T4340]  hci_le_meta_evt+0x2c0/0x4a8
[  546.652113][ T4340]  hci_event_packet+0x64c/0xe60
[  546.653000][ T4340]  hci_rx_work+0x320/0xa94
[  546.653778][ T4340]  process_one_work+0x7e4/0x13bc
[  546.654651][ T4340]  worker_thread+0x8cc/0xfe8
[  546.655471][ T4340]  kthread+0x254/0x2e0
[  546.656205][ T4340]  ret_from_fork+0x10/0x20
[  546.671508][ T4340] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  546.673753][ T4340] Bluetooth: hci2: failed to register connection device
[  549.311994][T11398] Bluetooth: hci2: command 0x2016 tx timeout
[  549.435683][T11707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1722'.
[  549.782842][T11713] virt_wifi0 speed is unknown, defaulting to 1000
[  549.784120][T11713] virt_wifi0 speed is unknown, defaulting to 1000
[  549.785769][T11713] virt_wifi0 speed is unknown, defaulting to 1000
[  549.788895][T11713] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  549.792601][T11713] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  549.802259][T11713] virt_wifi0 speed is unknown, defaulting to 1000
[  549.804169][T11713] virt_wifi0 speed is unknown, defaulting to 1000
[  549.805572][T11713] virt_wifi0 speed is unknown, defaulting to 1000
[  549.806935][T11713] virt_wifi0 speed is unknown, defaulting to 1000
[  549.808331][T11713] virt_wifi0 speed is unknown, defaulting to 1000
[  549.870142][T11707] bridge6: port 1(erspan0) entered blocking state
[  549.871459][T11707] bridge6: port 1(erspan0) entered disabled state
[  549.873062][T11707] device erspan0 entered promiscuous mode
[  549.874958][T11707] bridge6: port 1(erspan0) entered blocking state
[  549.877154][T11707] bridge6: port 1(erspan0) entered forwarding state
[  550.393439][ T4340] Bluetooth: hci1: failed to read key size for handle 200
[  550.431279][T11707] bridge6: port 1(erspan0) entered disabled state
[  550.435984][T11707] bridge0: port 3(team0) entered disabled state
[  550.442861][T11707] bridge0: port 1(bridge_slave_0) entered disabled state
[  550.445130][T11707] bridge0: port 2(bridge_slave_1) entered disabled state
[  550.464618][T11720] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1724'.
[  550.930499][T11736] xt_CT: You must specify a L4 protocol and not use inversions on it
[  554.723856][ T4340] Bluetooth: hci2: failed to read key size for handle 200
[  556.229146][ T4340] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  556.230768][ T4340] CPU: 1 PID: 4340 Comm: kworker/u5:4 Not tainted syzkaller #0
[  556.232039][ T4340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[  556.233792][ T4340] Workqueue: hci0 hci_rx_work
[  556.234636][ T4340] Call trace:
[  556.235182][ T4340]  dump_backtrace+0x1c4/0x1f0
[  556.235997][ T4340]  show_stack+0x2c/0x3c
[  556.236726][ T4340]  __dump_stack+0x30/0x40
[  556.237474][ T4340]  dump_stack_lvl+0xf4/0x15c
[  556.238244][ T4340]  dump_stack+0x1c/0x5c
[  556.238985][ T4340]  sysfs_create_dir_ns+0x244/0x264
[  556.239957][ T4340]  kobject_add_internal+0x5a8/0xb18
[  556.240880][ T4340]  kobject_add+0x144/0x20c
[  556.241630][ T4340]  device_add+0x3dc/0xe4c
[  556.242383][ T4340]  hci_conn_add_sysfs+0xb8/0x1bc
[  556.243296][ T4340]  le_conn_complete_evt+0xd3c/0x1300
[  556.244256][ T4340]  hci_le_conn_complete_evt+0x114/0x3b8
[  556.245299][ T4340]  hci_le_meta_evt+0x2c0/0x4a8
[  556.246120][ T4340]  hci_event_packet+0x64c/0xe60
[  556.246979][ T4340]  hci_rx_work+0x320/0xa94
[  556.247762][ T4340]  process_one_work+0x7e4/0x13bc
[  556.248640][ T4340]  worker_thread+0x8cc/0xfe8
[  556.249435][ T4340]  kthread+0x254/0x2e0
[  556.250166][ T4340]  ret_from_fork+0x10/0x20
[  556.264785][ T4340] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  556.267611][ T4340] Bluetooth: hci0: failed to register connection device
[  556.586579][T11827] overlayfs: failed to clone upperpath
[  556.959746][T11398] Bluetooth: hci1: failed to read key size for handle 200
[  558.652244][T11398] Bluetooth: hci0: command 0x2016 tx timeout
[  560.422141][ T4340] Bluetooth: hci2: failed to read key size for handle 200
[  560.891893][ T4340] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  560.894335][ T4340] CPU: 1 PID: 4340 Comm: kworker/u5:4 Not tainted syzkaller #0
[  560.895600][ T4340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[  560.897288][ T4340] Workqueue: hci1 hci_rx_work
[  560.898082][ T4340] Call trace:
[  560.898649][ T4340]  dump_backtrace+0x1c4/0x1f0
[  560.899414][ T4340]  show_stack+0x2c/0x3c
[  560.900109][ T4340]  __dump_stack+0x30/0x40
[  560.900870][ T4340]  dump_stack_lvl+0xf4/0x15c
[  560.901635][ T4340]  dump_stack+0x1c/0x5c
[  560.902346][ T4340]  sysfs_create_dir_ns+0x244/0x264
[  560.903209][ T4340]  kobject_add_internal+0x5a8/0xb18
[  560.904108][ T4340]  kobject_add+0x144/0x20c
[  560.904882][ T4340]  device_add+0x3dc/0xe4c
[  560.905648][ T4340]  hci_conn_add_sysfs+0xb8/0x1bc
[  560.906452][ T4340]  le_conn_complete_evt+0xd3c/0x1300
[  560.907314][ T4340]  hci_le_conn_complete_evt+0x114/0x3b8
[  560.908277][ T4340]  hci_le_meta_evt+0x2c0/0x4a8
[  560.909050][ T4340]  hci_event_packet+0x64c/0xe60
[  560.909840][ T4340]  hci_rx_work+0x320/0xa94
[  560.910551][ T4340]  process_one_work+0x7e4/0x13bc
[  560.911392][ T4340]  worker_thread+0x8cc/0xfe8
[  560.912181][ T4340]  kthread+0x254/0x2e0
[  560.912879][ T4340]  ret_from_fork+0x10/0x20
[  560.942391][ T4340] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  560.952031][ T4340] Bluetooth: hci1: failed to register connection device
[  562.076293][T11917] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma?
[  563.463302][ T4340] Bluetooth: hci1: command 0x2016 tx timeout
[  564.666618][T11950] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1771'.
[  565.018325][T11398] Bluetooth: hci1: failed to read key size for handle 200
[  565.239111][T11956] Invalid ELF header magic: != ELF
[  566.665485][T11980] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1779'.
[  567.953607][T12001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  568.334633][T11999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  568.423152][T11999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  569.151798][T12015] overlayfs: failed to clone upperpath
[  569.185425][T11398] Bluetooth: hci0: failed to read key size for handle 200
[  572.760547][T11398] Bluetooth: hci0: failed to read key size for handle 200
[  572.778092][T11398] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  572.780064][T11398] CPU: 1 PID: 11398 Comm: kworker/u5:0 Not tainted syzkaller #0
[  572.781522][T11398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[  572.783310][T11398] Workqueue: hci4 hci_rx_work
[  572.784158][T11398] Call trace:
[  572.784729][T11398]  dump_backtrace+0x1c4/0x1f0
[  572.785514][T11398]  show_stack+0x2c/0x3c
[  572.786248][T11398]  __dump_stack+0x30/0x40
[  572.787003][T11398]  dump_stack_lvl+0xf4/0x15c
[  572.787797][T11398]  dump_stack+0x1c/0x5c
[  572.788516][T11398]  sysfs_create_dir_ns+0x244/0x264
[  572.789408][T11398]  kobject_add_internal+0x5a8/0xb18
[  572.790341][T11398]  kobject_add+0x144/0x20c
[  572.791117][T11398]  device_add+0x3dc/0xe4c
[  572.791885][T11398]  hci_conn_add_sysfs+0xb8/0x1bc
[  572.792775][T11398]  le_conn_complete_evt+0xd3c/0x1300
[  572.793709][T11398]  hci_le_conn_complete_evt+0x114/0x3b8
[  572.794649][T11398]  hci_le_meta_evt+0x2c0/0x4a8
[  572.795473][T11398]  hci_event_packet+0x64c/0xe60
[  572.796281][T11398]  hci_rx_work+0x320/0xa94
[  572.797033][T11398]  process_one_work+0x7e4/0x13bc
[  572.797920][T11398]  worker_thread+0x8cc/0xfe8
[  572.798736][T11398]  kthread+0x254/0x2e0
[  572.799434][T11398]  ret_from_fork+0x10/0x20
[  572.806186][T11398] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  572.809653][T11398] Bluetooth: hci4: failed to register connection device
[  575.140467][T11398] Bluetooth: hci4: command 0x2016 tx timeout
[  577.938773][T11398] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  577.940780][T11398] CPU: 1 PID: 11398 Comm: kworker/u5:0 Not tainted syzkaller #0
[  577.942041][T11398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[  577.943911][T11398] Workqueue: hci1 hci_rx_work
[  577.944914][T11398] Call trace:
[  577.945517][T11398]  dump_backtrace+0x1c4/0x1f0
[  577.946396][T11398]  show_stack+0x2c/0x3c
[  577.947169][T11398]  __dump_stack+0x30/0x40
[  577.947980][T11398]  dump_stack_lvl+0xf4/0x15c
[  577.948779][T11398]  dump_stack+0x1c/0x5c
[  577.949515][T11398]  sysfs_create_dir_ns+0x244/0x264
[  577.950396][T11398]  kobject_add_internal+0x5a8/0xb18
[  577.951295][T11398]  kobject_add+0x144/0x20c
[  577.952067][T11398]  device_add+0x3dc/0xe4c
[  577.952812][T11398]  hci_conn_add_sysfs+0xb8/0x1bc
[  577.953658][T11398]  le_conn_complete_evt+0xd3c/0x1300
[  577.954600][T11398]  hci_le_conn_complete_evt+0x114/0x3b8
[  577.955569][T11398]  hci_le_meta_evt+0x2c0/0x4a8
[  577.956342][T11398]  hci_event_packet+0x64c/0xe60
[  577.957184][T11398]  hci_rx_work+0x320/0xa94
[  577.957969][T11398]  process_one_work+0x7e4/0x13bc
[  577.958929][T11398]  worker_thread+0x8cc/0xfe8
[  577.959706][T11398]  kthread+0x254/0x2e0
[  577.960422][T11398]  ret_from_fork+0x10/0x20
[  577.962586][T11398] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  577.965163][T11398] Bluetooth: hci1: failed to register connection device
[  579.872667][T12168] overlayfs: failed to clone upperpath
[  580.161560][T11398] Bluetooth: hci1: command 0x2016 tx timeout
[  581.931546][T12185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  582.134689][T12155] Set syz1 is full, maxelem 65536 reached
[  582.732504][T12184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  583.018842][T12200] futex_wake_op: syz.1.1831 tries to shift op by 144; fix this program
[  583.358707][T12185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  585.837437][T12238] xt_CT: You must specify a L4 protocol and not use inversions on it
[  586.125570][T12240] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  586.128945][T12240] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  586.237027][T12245] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma?
[  586.447615][T12240] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  587.259130][T12255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  587.317560][T12251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  587.724231][T12255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  592.583999][T12329] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  593.238906][   T22] wlan1: authenticate with 08:02:11:00:00:00
[  593.252623][   T22] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  593.256354][ T4661] wlan1: authenticated
[  593.262899][   T22] mac80211_hwsim hwsim11 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[  593.289725][ T4661] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[  593.420749][ T4661] wlan1: associate with 08:02:11:00:00:00 (try 2/3)
[  593.588563][ T1583] wlan1: associate with 08:02:11:00:00:00 (try 3/3)
[  593.631366][T12346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  593.811085][ T4661] wlan1: association with 08:02:11:00:00:00 timed out
[  593.820647][T12340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  594.798200][T12340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  594.885913][T12358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  595.023442][T12362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  595.395216][T12358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  596.311581][ T4340] Bluetooth: hci2: failed to read key size for handle 200
[  597.600452][ T2066] ieee802154 phy0 wpan0: encryption failed: -22
[  597.603535][ T2066] ieee802154 phy1 wpan1: encryption failed: -22
[  598.554309][   T27] audit: type=1326 audit(556.926:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.2.1880" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85b7a168 code=0x7ffc0000
[  598.694851][   T27] audit: type=1326 audit(556.926:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.2.1880" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85b7a168 code=0x7ffc0000
[  599.176652][   T27] audit: type=1326 audit(556.935:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.2.1880" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffff85b7a168 code=0x7ffc0000
[  599.186174][   T27] audit: type=1326 audit(556.935:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.2.1880" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85b7a168 code=0x7ffc0000
[  599.190085][   T27] audit: type=1326 audit(556.935:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.2.1880" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85b7a168 code=0x7ffc0000
[  599.203890][   T27] audit: type=1326 audit(556.935:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.2.1880" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff85b7a168 code=0x7ffc0000
[  599.207743][   T27] audit: type=1326 audit(556.944:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.2.1880" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85b7a168 code=0x7ffc0000
[  599.211292][   T27] audit: type=1326 audit(556.944:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.2.1880" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85b7a168 code=0x7ffc0000
[  599.225485][   T27] audit: type=1326 audit(556.954:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.2.1880" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff85b7a168 code=0x7ffc0000
[  599.229248][   T27] audit: type=1326 audit(556.954:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12395 comm="syz.2.1880" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85b7a168 code=0x7ffc0000
[  599.802717][T12420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  600.001087][T12417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  600.186893][T12417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  602.490690][T12452] tipc: Can't bind to reserved service type 0
[  604.189450][T12487] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  605.389355][T12497] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  605.818893][T12507] virt_wifi0 speed is unknown, defaulting to 1000
[  608.937222][T12544] xt_CT: You must specify a L4 protocol and not use inversions on it
[  609.343457][T12557] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  610.359629][T12571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1919'.
[  610.361320][T12571] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1919'.
[  610.612036][T12572] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  610.613447][T12572] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  610.870131][T12572] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  611.038567][T12567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  611.134283][T12567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  611.491971][T12567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  611.495114][   T22] wlan1: authenticate with 08:02:11:00:00:00
[  611.496638][   T22] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  612.105943][T12596] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma?
[  612.191283][ T4340] Bluetooth: hci2: unexpected subevent 0x0e length: 32 > 15
[  612.723883][  T248] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[  612.910454][ T1590] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[  613.075315][ T4661] wlan1: authentication with 08:02:11:00:00:00 timed out
[  613.210566][T12612] xt_CT: You must specify a L4 protocol and not use inversions on it
[  616.469793][   T27] kauditd_printk_skb: 8 callbacks suppressed
[  616.469804][   T27] audit: type=1326 audit(572.768:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12615 comm="syz.1.1933" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87f7a168 code=0x7ffc0000
[  616.480795][   T27] audit: type=1326 audit(572.768:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12615 comm="syz.1.1933" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87f7a168 code=0x7ffc0000
[  616.484538][   T27] audit: type=1326 audit(572.934:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12615 comm="syz.1.1933" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffff87f7a168 code=0x7ffc0000
[  616.490548][   T27] audit: type=1326 audit(572.934:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12615 comm="syz.1.1933" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87f7a168 code=0x7ffc0000
[  616.494845][   T27] audit: type=1326 audit(572.934:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12615 comm="syz.1.1933" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87f7a168 code=0x7ffc0000
[  616.499053][   T27] audit: type=1326 audit(573.146:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12615 comm="syz.1.1933" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff87f7a168 code=0x7ffc0000
[  616.503514][   T27] audit: type=1326 audit(573.146:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12615 comm="syz.1.1933" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87f7a168 code=0x7ffc0000
[  616.507351][   T27] audit: type=1326 audit(573.146:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12615 comm="syz.1.1933" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87f7a168 code=0x7ffc0000
[  616.511414][   T27] audit: type=1326 audit(573.340:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12615 comm="syz.1.1933" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff87f7a168 code=0x7ffc0000
[  616.517498][   T27] audit: type=1326 audit(573.340:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12615 comm="syz.1.1933" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87f7a168 code=0x7ffc0000
[  617.444469][ T4340] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  619.704079][T12675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  619.767881][T12677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  619.826032][T12675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  623.216206][T12704] virt_wifi0 speed is unknown, defaulting to 1000
[  623.249883][T12702] overlayfs: failed to clone upperpath
[  624.239382][T12722] xt_CT: You must specify a L4 protocol and not use inversions on it
[  626.322179][T12747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  626.979368][ T1517] wlan1: authenticate with 08:02:11:00:00:00
[  626.980908][ T1517] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  627.010019][T12747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  627.012427][   T11] wlan1: authenticated
[  627.027837][ T1517] mac80211_hwsim hwsim11 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP
[  627.031184][ T4686] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[  627.033180][T12762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  627.402572][T12754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  627.412808][ T1590] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[  627.414574][ T1590] wlan1: associated
[  627.419728][T12752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  628.115505][T12754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  628.462788][T11398] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  628.464646][T11398] CPU: 1 PID: 11398 Comm: kworker/u5:0 Not tainted syzkaller #0
[  628.466039][T11398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[  628.467839][T11398] Workqueue: hci1 hci_rx_work
[  628.468734][T11398] Call trace:
[  628.469346][T11398]  dump_backtrace+0x1c4/0x1f0
[  628.470208][T11398]  show_stack+0x2c/0x3c
[  628.470954][T11398]  __dump_stack+0x30/0x40
[  628.471724][T11398]  dump_stack_lvl+0xf4/0x15c
[  628.472517][T11398]  dump_stack+0x1c/0x5c
[  628.473262][T11398]  sysfs_create_dir_ns+0x244/0x264
[  628.474223][T11398]  kobject_add_internal+0x5a8/0xb18
[  628.475208][T11398]  kobject_add+0x144/0x20c
[  628.475949][T11398]  device_add+0x3dc/0xe4c
[  628.476722][T11398]  hci_conn_add_sysfs+0xb8/0x1bc
[  628.477547][T11398]  le_conn_complete_evt+0xd3c/0x1300
[  628.478448][T11398]  hci_le_conn_complete_evt+0x114/0x3b8
[  628.479427][T11398]  hci_le_meta_evt+0x2c0/0x4a8
[  628.480288][T11398]  hci_event_packet+0x64c/0xe60
[  628.481105][T11398]  hci_rx_work+0x320/0xa94
[  628.481896][T11398]  process_one_work+0x7e4/0x13bc
[  628.482787][T11398]  worker_thread+0x8cc/0xfe8
[  628.483599][T11398]  kthread+0x254/0x2e0
[  628.484297][T11398]  ret_from_fork+0x10/0x20
[  628.494925][T11398] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  628.497410][T11398] Bluetooth: hci1: failed to register connection device
[  629.579961][T12790] xt_CT: You must specify a L4 protocol and not use inversions on it
[  632.787574][T12832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  633.136333][T12829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  633.195678][T12832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  633.479091][T12840] netlink: 'syz.2.1987': attribute type 4 has an invalid length.
[  633.730452][T12846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  633.840013][T12848] xt_CT: You must specify a L4 protocol and not use inversions on it
[  634.065060][T12845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  634.132767][T12845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  635.432292][T12864] xt_connbytes: Forcing CT accounting to be enabled
[  635.433555][T12864] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  635.435485][T12864] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING
[  638.481487][T12900] xt_CT: You must specify a L4 protocol and not use inversions on it
[  638.504953][   T27] kauditd_printk_skb: 8 callbacks suppressed
[  638.508277][   T27] audit: type=1326 audit(593.835:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.4.2002" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ef7a168 code=0x7ffc0000
[  638.538131][   T27] audit: type=1326 audit(593.835:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.4.2002" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ef7a168 code=0x7ffc0000
[  638.542099][   T27] audit: type=1326 audit(593.835:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.4.2002" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff7ef7a168 code=0x7ffc0000
[  638.606361][   T27] audit: type=1326 audit(593.835:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.4.2002" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ef7a168 code=0x7ffc0000
[  638.688711][   T27] audit: type=1326 audit(593.835:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.4.2002" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ef7a168 code=0x7ffc0000
[  638.692591][   T27] audit: type=1326 audit(593.835:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.4.2002" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=23 compat=0 ip=0xffff7ef7a168 code=0x7ffc0000
[  638.696591][   T27] audit: type=1326 audit(593.835:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.4.2002" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ef7a168 code=0x7ffc0000
[  639.039857][   T27] audit: type=1326 audit(593.835:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.4.2002" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ef7a168 code=0x7ffc0000
[  639.065719][   T27] audit: type=1326 audit(593.835:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.4.2002" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff7ef7a168 code=0x7ffc0000
[  639.084340][   T27] audit: type=1326 audit(593.835:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.4.2002" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ef7a168 code=0x7ffc0000
[  639.404395][T12921] xt_CT: You must specify a L4 protocol and not use inversions on it
[  641.453986][T12938] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  641.456293][T12938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  641.458557][T12938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  642.933778][T12941] virt_wifi0 speed is unknown, defaulting to 1000
[  643.004933][T12950] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2011'.
[  643.012983][T12950] device lo entered promiscuous mode
[  644.697410][T12976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  644.797193][T12983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  645.002849][T12989] netlink: 'syz.4.2024': attribute type 4 has an invalid length.
[  645.264555][T12976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  646.756180][T13004] overlayfs: failed to clone upperpath
[  646.948679][T13006] virt_wifi0 speed is unknown, defaulting to 1000
[  648.243671][T13027] virt_wifi0 speed is unknown, defaulting to 1000
[  650.279311][T13059] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  650.285873][T13059] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  650.296297][T13059] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  650.483320][T13059] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  650.722765][T13068] xt_CT: You must specify a L4 protocol and not use inversions on it
[  654.100631][T13098] overlayfs: failed to clone upperpath
[  654.914140][T13132] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  654.915753][T13132] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  655.366503][T13143] xt_CT: You must specify a L4 protocol and not use inversions on it
[  656.080412][T13158] xt_TPROXY: Can be used only with -p tcp or -p udp
[  657.653733][T13171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  657.697595][T13168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  657.700734][T13179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  658.194095][T13184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  658.246791][T13168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  658.258577][T13179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  659.966786][T13212] xt_CT: You must specify a L4 protocol and not use inversions on it
[  660.937992][T13219] syz.3.2079 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  662.830379][T13235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  664.171202][ T2066] ieee802154 phy0 wpan0: encryption failed: -22
[  664.185023][ T2066] ieee802154 phy1 wpan1: encryption failed: -22
[  665.450701][T13271] xt_CT: You must specify a L4 protocol and not use inversions on it
[  667.057892][T13292] bridge0: port 3(erspan0) entered blocking state
[  667.059025][T13292] bridge0: port 3(erspan0) entered disabled state
[  667.060611][T13292] device erspan0 entered promiscuous mode
[  667.061735][T13292] bridge0: port 3(erspan0) entered blocking state
[  667.062773][T13292] bridge0: port 3(erspan0) entered forwarding state
[  667.065389][T13292] device erspan0 left promiscuous mode
[  667.066695][T13292] bridge0: port 3(erspan0) entered disabled state
[  667.070718][T11398] Bluetooth: Frame is too long (len 12, expected len 4)
[  668.142244][T13294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  669.054364][T13317] xt_CT: You must specify a L4 protocol and not use inversions on it
[  669.430019][T13323] ipt_CLUSTERIP: bad num_local_nodes 2052
[  669.706090][   T27] kauditd_printk_skb: 1 callbacks suppressed
[  669.706108][   T27] audit: type=1326 audit(622.658:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13326 comm="syz.2.2107" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85b7a168 code=0x7ffc0000
[  669.718329][   T27] audit: type=1326 audit(622.658:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13326 comm="syz.2.2107" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85b7a168 code=0x7ffc0000
[  669.786752][   T27] audit: type=1326 audit(622.658:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13326 comm="syz.2.2107" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff85b7a168 code=0x7ffc0000
[  669.811841][   T27] audit: type=1326 audit(622.658:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13326 comm="syz.2.2107" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85b7a168 code=0x7ffc0000
[  669.816379][   T27] audit: type=1326 audit(622.658:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13326 comm="syz.2.2107" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85b7a168 code=0x7ffc0000
[  670.090745][   T27] audit: type=1326 audit(622.658:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13326 comm="syz.2.2107" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=141 compat=0 ip=0xffff85b7a168 code=0x7ffc0000
[  670.095271][   T27] audit: type=1326 audit(622.658:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13326 comm="syz.2.2107" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85b7a168 code=0x7ffc0000
[  670.105649][   T27] audit: type=1326 audit(622.658:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13326 comm="syz.2.2107" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85b7a168 code=0x7ffc0000
[  670.116872][   T27] audit: type=1326 audit(622.658:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13326 comm="syz.2.2107" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=141 compat=0 ip=0xffff85b7a168 code=0x7ffc0000
[  670.134014][   T27] audit: type=1326 audit(622.658:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13326 comm="syz.2.2107" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85b7a168 code=0x7ffc0000
[  672.971408][T13363] xt_CT: You must specify a L4 protocol and not use inversions on it
[  673.976701][T13373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  674.035361][T13373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  674.094693][T13378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  674.124416][T13374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  677.049359][T13424] virt_wifi0 speed is unknown, defaulting to 1000
[  678.110594][T13438] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  678.112214][T13438] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  679.104137][T13457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  679.166632][T13456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  680.049014][T13456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  680.196715][T13470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  680.404430][T13475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  680.467705][T13470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  685.895977][T13531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  686.361450][T13533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  686.770889][T13531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  687.860453][T13559] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[  691.414419][T13573] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  692.291401][T13591] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  692.384529][T13596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.387639][T13596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  692.507493][T13596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  695.917597][T13668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  695.923363][T13668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.199326][T13670] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  696.211350][T13666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  696.758960][T13682] virt_wifi0 speed is unknown, defaulting to 1000
[  696.790622][T11398] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  696.792646][T11398] Bluetooth: hci3: Injecting HCI hardware error event
[  696.797090][T11398] Bluetooth: hci3: hardware error 0x00
[  697.438915][T13700] virt_wifi0 speed is unknown, defaulting to 1000
[  698.753470][T13709] bridge0: port 3(erspan0) entered blocking state
[  698.754693][T13709] bridge0: port 3(erspan0) entered disabled state
[  698.756141][T13709] device erspan0 entered promiscuous mode
[  698.757151][T13709] bridge0: port 3(erspan0) entered blocking state
[  698.758184][T13709] bridge0: port 3(erspan0) entered forwarding state
[  698.760506][T13709] device erspan0 left promiscuous mode
[  698.761410][T13709] bridge0: port 3(erspan0) entered disabled state
[  700.985890][T11398] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  702.231893][T13754] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2214'.
[  704.682105][T13794] tipc: Started in network mode
[  704.683101][T13794] tipc: Node identity 4, cluster identity 4711
[  704.684001][T13794] tipc: Node number set to 4
[  708.003712][T13832] tipc: Started in network mode
[  708.004770][T13832] tipc: Node identity 4, cluster identity 4711
[  708.005893][T13832] tipc: Node number set to 4
[  710.162182][T13871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  710.265288][T13873] raw_sendmsg: syz.0.2239 forgot to set AF_INET. Fix it!
[  710.334873][T13874] device lo left promiscuous mode
[  710.349021][T13874] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  710.350653][T13874] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  710.404132][T13874] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  710.568215][T13866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  710.585001][T13873] ceph: No mds server is up or the cluster is laggy
[  710.587729][ T4381] libceph: connect (1)[c::]:6789 error -101
[  710.590236][ T4381] libceph: mon0 (1)[c::]:6789 connect error
[  710.643625][T13866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  711.463246][T13897] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2244'.
[  715.053860][T13931] overlayfs: failed to clone upperpath
[  715.807678][T13941] tmpfs: Bad value for 'mpol'
[  717.004514][T13961] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  719.136372][T13990] lo speed is unknown, defaulting to 1000
[  719.137540][T13990] lo speed is unknown, defaulting to 1000
[  719.138883][T13990] lo speed is unknown, defaulting to 1000
[  719.142282][T13990] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  719.676735][T13990] lo speed is unknown, defaulting to 1000
[  719.678049][T13990] lo speed is unknown, defaulting to 1000
[  719.679195][T13990] lo speed is unknown, defaulting to 1000
[  719.680426][T13990] lo speed is unknown, defaulting to 1000
[  719.681657][T13990] lo speed is unknown, defaulting to 1000
[  719.851919][T13989] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2266'.
[  722.880443][T14019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2272'.
[  723.596192][T14050] virt_wifi0 speed is unknown, defaulting to 1000
[  723.600163][T14050] lo speed is unknown, defaulting to 1000
[  724.768689][T14057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  725.285611][T11398] Bluetooth: Frame is too long (len 12, expected len 4)
[  725.402004][T14056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  725.454453][T14056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  726.507830][T14090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2293'.
[  726.509490][T14090] device bridge_slave_1 left promiscuous mode
[  726.511030][T14090] bridge0: port 2(bridge_slave_1) entered disabled state
[  726.547876][T14090] device bridge_slave_0 left promiscuous mode
[  726.549189][T14090] bridge0: port 1(bridge_slave_0) entered disabled state
[  726.794588][T14095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  727.249351][T14091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  728.912821][T11398] Bluetooth: hci1: unexpected cc 0x0809 length: 68 > 4
[  728.996661][T14165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  729.298984][T14159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  729.430227][T11398] Bluetooth: min 38469 > max 2
[  729.948809][T11398] Bluetooth: unknown link type 4
[  730.584618][ T2066] ieee802154 phy0 wpan0: encryption failed: -22
[  730.585936][ T2066] ieee802154 phy1 wpan1: encryption failed: -22
[  731.623904][ T4340] Bluetooth: hci1: command 0x2021 tx timeout
[  732.315316][T14252] smc: removing ib device syz2
[  732.349391][T11398] Bluetooth: hci4: command 0x0409 tx timeout
[  732.463434][T14258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  733.075761][T14252] ------------[ cut here ]------------
[  733.076735][T14252] WARNING: CPU: 0 PID: 14252 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x58/0x60
[  733.078387][T14252] Modules linked in:
[  733.079039][T14252] CPU: 0 PID: 14252 Comm: syz.4.2353 Not tainted syzkaller #0
[  733.080178][T14252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[  733.081784][T14252] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
[  733.082984][T14252] pc : rxe_pool_cleanup+0x58/0x60
[  733.083771][T14252] lr : rxe_pool_cleanup+0x58/0x60
[  733.084579][T14252] sp : ffff800021587130
[  733.085248][T14252] x29: ffff800021587130 x28: dfff800000000000 x27: ffff0000cc44ec06
[  733.086552][T14252] x26: 1fffe00019889d80 x25: ffff800021587200 x24: dfff800000000000
[  733.087835][T14252] x23: 0000000000000018 x22: ffff0000dcdf2798 x21: dfff800000000000
[  733.089157][T14252] x20: dfff800000000000 x19: ffff0000dc1e92b8 x18: 1fffe00033e7277e
[  733.090456][T14252] x17: 4d45545359534255 x16: ffff800011b90080 x15: 0000000000000000
[  733.091852][T14252] x14: 0000000000000001 x13: 1fffe0001b83d0e8 x12: 0000000000080000
[  733.093190][T14252] x11: 000000000007ffff x10: ffff80002deed000 x9 : ffff80000f1cdfdc
[  733.094523][T14252] x8 : 0000000000080000 x7 : ffff8000082b3714 x6 : 0000000000000000
[  733.095850][T14252] x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff80000efd52dc
[  733.097156][T14252] x2 : 0000000000000000 x1 : 0000000000000002 x0 : ffff0000dc1e9238
[  733.098391][T14252] Call trace:
[  733.098967][T14252]  rxe_pool_cleanup+0x58/0x60
[  733.099854][T14252]  rxe_dealloc+0x3c/0x114
[  733.100686][T14252]  ib_dealloc_device+0x50/0x1dc
[  733.101636][T14252]  __ib_unregister_device+0x100/0x170
[  733.102517][T14252]  ib_unregister_device_and_put+0xb4/0x110
[  733.103474][T14252]  nldev_dellink+0x224/0x2c0
[  733.104260][T14252]  rdma_nl_rcv+0x4fc/0x828
[  733.105036][T14252]  netlink_unicast+0x5fc/0x80c
[  733.105866][T14252]  netlink_sendmsg+0x6f0/0x9d8
[  733.106660][T14252]  ____sys_sendmsg+0x588/0x90c
[  733.107476][T14252]  __sys_sendmsg+0x288/0x374
[  733.108233][T14252]  __arm64_sys_sendmsg+0x80/0x94
[  733.109010][T14252]  invoke_syscall+0x98/0x290
[  733.109773][T14252]  el0_svc_common+0x13c/0x258
[  733.110589][T14252]  do_el0_svc+0x5c/0x134
[  733.111266][T14252]  el0_svc+0x58/0x128
[  733.111899][T14252]  el0t_64_sync_handler+0x84/0xf0
[  733.112708][T14252]  el0t_64_sync+0x18c/0x190
[  733.113468][T14252] irq event stamp: 164042
[  733.114169][T14252] hardirqs last  enabled at (164041): [<ffff800011c77b24>] _raw_spin_unlock_irqrestore+0x48/0xac
[  733.115917][T14252] hardirqs last disabled at (164042): [<ffff800011b8c2bc>] el1_dbg+0x24/0x80
[  733.117382][T14252] softirqs last  enabled at (163982): [<ffff8000081ae3bc>] handle_softirqs+0xb1c/0xc90
[  733.119020][T14252] softirqs last disabled at (163967): [<ffff800008020e6c>] __do_softirq+0x14/0x20
[  733.120410][T14252] ---[ end trace 0000000000000000 ]---
[  733.121588][T14252] ------------[ cut here ]------------
[  733.122433][T14252] WARNING: CPU: 0 PID: 14252 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x58/0x60
[  733.124022][T14252] Modules linked in:
[  733.124616][T14252] CPU: 0 PID: 14252 Comm: syz.4.2353 Tainted: G        W          syzkaller #0
[  733.125967][T14252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[  733.127453][T14252] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
[  733.128569][T14252] pc : rxe_pool_cleanup+0x58/0x60
[  733.129409][T14252] lr : rxe_pool_cleanup+0x58/0x60
[  733.130218][T14252] sp : ffff800021587130
[  733.130922][T14252] x29: ffff800021587130 x28: dfff800000000000 x27: ffff0000cc44ec06
[  733.132213][T14252] x26: 1fffe00019889d80 x25: ffff800021587200 x24: dfff800000000000
[  733.133550][T14252] x23: 0000000000000018 x22: ffff0000dcdf2798 x21: dfff800000000000
[  733.134846][T14252] x20: dfff800000000000 x19: ffff0000dc1e95b0 x18: 1fffe00033e7277e
[  733.135980][T14252] x17: 4d45545359534255 x16: ffff800011b90080 x15: 0000000000000000
[  733.137224][T14252] x14: 0000000000000001 x13: 1fffe0001b83d0e8 x12: 0000000000080000
[  733.138494][T14252] x11: 000000000007ffff x10: ffff80002deed000 x9 : ffff80000f1cdfdc
[  733.139761][T14252] x8 : 0000000000080000 x7 : ffff8000082b3714 x6 : 0000000000000000
[  733.141070][T14252] x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff80000efd52dc
[  733.142401][T14252] x2 : 0000000000000000 x1 : 0000000000000002 x0 : ffff0000dc1e9530
[  733.143666][T14252] Call trace:
[  733.144171][T14252]  rxe_pool_cleanup+0x58/0x60
[  733.144927][T14252]  rxe_dealloc+0x78/0x114
[  733.145658][T14252]  ib_dealloc_device+0x50/0x1dc
[  733.146397][T14252]  __ib_unregister_device+0x100/0x170
[  733.147213][T14252]  ib_unregister_device_and_put+0xb4/0x110
[  733.148134][T14252]  nldev_dellink+0x224/0x2c0
[  733.148819][T14252]  rdma_nl_rcv+0x4fc/0x828
[  733.149456][T14252]  netlink_unicast+0x5fc/0x80c
[  733.150197][T14252]  netlink_sendmsg+0x6f0/0x9d8
[  733.150946][T14252]  ____sys_sendmsg+0x588/0x90c
[  733.151705][T14252]  __sys_sendmsg+0x288/0x374
[  733.152442][T14252]  __arm64_sys_sendmsg+0x80/0x94
[  733.153214][T14252]  invoke_syscall+0x98/0x290
[  733.153945][T14252]  el0_svc_common+0x13c/0x258
[  733.154682][T14252]  do_el0_svc+0x5c/0x134
[  733.155319][T14252]  el0_svc+0x58/0x128
[  733.155996][T14252]  el0t_64_sync_handler+0x84/0xf0
[  733.156863][T14252]  el0t_64_sync+0x18c/0x190
[  733.157672][T14252] irq event stamp: 164112
[  733.158402][T14252] hardirqs last  enabled at (164111): [<ffff800011b8e264>] exit_to_kernel_mode+0xcc/0xfc
[  733.160013][T14252] hardirqs last disabled at (164112): [<ffff800011b8c2bc>] el1_dbg+0x24/0x80
[  733.161450][T14252] softirqs last  enabled at (164110): [<ffff8000081ae3bc>] handle_softirqs+0xb1c/0xc90
[  733.163054][T14252] softirqs last disabled at (164045): [<ffff800008020e6c>] __do_softirq+0x14/0x20
[  733.164617][T14252] ---[ end trace 0000000000000000 ]---
[  733.165767][T14252] ------------[ cut here ]------------
[  733.166523][T14252] WARNING: CPU: 0 PID: 14252 at drivers/infiniband/core/restrack.c:52 rdma_restrack_clean+0x254/0x2b0
[  733.168182][T14252] Modules linked in:
[  733.168771][T14252] CPU: 0 PID: 14252 Comm: syz.4.2353 Tainted: G        W          syzkaller #0
[  733.170138][T14252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[  733.171673][T14252] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
[  733.172914][T14252] pc : rdma_restrack_clean+0x254/0x2b0
[  733.173785][T14252] lr : rdma_restrack_clean+0x254/0x2b0
[  733.174658][T14252] sp : ffff800021587140
[  733.175326][T14252] x29: ffff800021587140 x28: dfff800000000000 x27: ffff0000cc44ec06
[  733.176635][T14252] x26: 1fffe00019889d80 x25: ffff800021587200 x24: dfff800000000000
[  733.177911][T14252] x23: ffff0000cb9ce048 x22: 1fffe0001b83d1c3 x21: dfff800000000000
[  733.179216][T14252] x20: ffff0000dc1e8e18 x19: ffff0000cb9ce000 x18: 1fffe00033e7277e
[  733.180524][T14252] x17: 4d45545359534255 x16: ffff8000082dd248 x15: 0000000000000002
[  733.181803][T14252] x14: 0000000000000001 x13: 1fffe0001b83d1c5 x12: 0000000000080000
[  733.183105][T14252] x11: 000000000007ffff x10: ffff80002deed000 x9 : ffff80000f033e44
[  733.184392][T14252] x8 : 0000000000080000 x7 : ffff80000efd3498 x6 : 0000000000000000
[  733.185700][T14252] x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff80000efd3294
[  733.187030][T14252] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000dc1e8000
[  733.188346][T14252] Call trace:
[  733.188872][T14252]  rdma_restrack_clean+0x254/0x2b0
[  733.189724][T14252]  ib_dealloc_device+0x148/0x1dc
[  733.190525][T14252]  __ib_unregister_device+0x100/0x170
[  733.191434][T14252]  ib_unregister_device_and_put+0xb4/0x110
[  733.192362][T14252]  nldev_dellink+0x224/0x2c0
[  733.193117][T14252]  rdma_nl_rcv+0x4fc/0x828
[  733.193840][T14252]  netlink_unicast+0x5fc/0x80c
[  733.194621][T14252]  netlink_sendmsg+0x6f0/0x9d8
[  733.195386][T14252]  ____sys_sendmsg+0x588/0x90c
[  733.196206][T14252]  __sys_sendmsg+0x288/0x374
[  733.196977][T14252]  __arm64_sys_sendmsg+0x80/0x94
[  733.197769][T14252]  invoke_syscall+0x98/0x290
[  733.198505][T14252]  el0_svc_common+0x13c/0x258
[  733.199277][T14252]  do_el0_svc+0x5c/0x134
[  733.199943][T14252]  el0_svc+0x58/0x128
[  733.200557][T14252]  el0t_64_sync_handler+0x84/0xf0
[  733.201338][T14252]  el0t_64_sync+0x18c/0x190
[  733.202023][T14252] irq event stamp: 164172
[  733.202733][T14252] hardirqs last  enabled at (164171): [<ffff800011c77b24>] _raw_spin_unlock_irqrestore+0x48/0xac
[  733.204384][T14252] hardirqs last disabled at (164172): [<ffff800011b8c2bc>] el1_dbg+0x24/0x80
[  733.205803][T14252] softirqs last  enabled at (164162): [<ffff8000081ae3bc>] handle_softirqs+0xb1c/0xc90
[  733.207342][T14252] softirqs last disabled at (164115): [<ffff800008020e6c>] __do_softirq+0x14/0x20
[  733.208790][T14252] ---[ end trace 0000000000000000 ]---
[  733.240931][   T39] ==================================================================
[  733.242326][   T39] BUG: KASAN: use-after-free in __lock_acquire+0x104/0x6634
[  733.243566][   T39] Read of size 8 at addr ffff0000cb9ce018 by task kworker/u4:2/39
[  733.244786][   T39] 
[  733.245163][   T39] CPU: 0 PID: 39 Comm: kworker/u4:2 Tainted: G        W          syzkaller #0
[  733.246567][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[  733.248253][   T39] Workqueue: krdsd rds_ib_dev_free
[  733.249122][   T39] Call trace:
[  733.249713][   T39]  dump_backtrace+0x1c4/0x1f0
[  733.250500][   T39]  show_stack+0x2c/0x3c
[  733.251152][   T39]  __dump_stack+0x30/0x40
[  733.251874][   T39]  dump_stack_lvl+0xf4/0x15c
[  733.252578][   T39]  print_address_description+0x88/0x218
[  733.253488][   T39]  print_report+0x50/0x68
[  733.254199][   T39]  kasan_report+0xa8/0xfc
[  733.254929][   T39]  __asan_report_load8_noabort+0x2c/0x38
[  733.255775][   T39]  __lock_acquire+0x104/0x6634
[  733.256618][   T39]  lock_acquire+0x20c/0x638
[  733.257369][   T39]  _raw_spin_lock+0x54/0x6c
[  733.258087][   T39]  xa_erase+0x38/0xec
[  733.258710][   T39]  rdma_restrack_del+0x114/0x350
[  733.259454][   T39]  ib_dealloc_pd_user+0x134/0x170
[  733.260200][   T39]  rds_ib_dev_free+0xc0/0x284
[  733.260913][   T39]  process_one_work+0x7e4/0x13bc
[  733.261694][   T39]  worker_thread+0x8cc/0xfe8
[  733.262447][   T39]  kthread+0x254/0x2e0
[  733.263096][   T39]  ret_from_fork+0x10/0x20
[  733.263822][   T39] 
[  733.264194][   T39] Allocated by task 4902:
[  733.264901][   T39]  kasan_set_track+0x4c/0x80
[  733.265644][   T39]  kasan_save_alloc_info+0x24/0x30
[  733.266461][   T39]  __kasan_kmalloc+0xa0/0xb8
[  733.267180][   T39]  kmalloc_trace+0x7c/0x94
[  733.267896][   T39]  rdma_restrack_init+0x58/0x3ec
[  733.268664][   T39]  _ib_alloc_device+0x4c/0x4f4
[  733.269384][   T39]  rxe_net_add+0x2c/0xf0
[  733.270047][   T39]  rxe_newlink+0x70/0xfc
[  733.270732][   T39]  nldev_newlink+0x424/0x500
[  733.271462][   T39]  rdma_nl_rcv+0x4fc/0x828
[  733.272195][   T39]  netlink_unicast+0x5fc/0x80c
[  733.272968][   T39]  netlink_sendmsg+0x6f0/0x9d8
[  733.273725][   T39]  ____sys_sendmsg+0x588/0x90c
[  733.274506][   T39]  __sys_sendmsg+0x288/0x374
[  733.275224][   T39]  __arm64_sys_sendmsg+0x80/0x94
[  733.276007][   T39]  invoke_syscall+0x98/0x290
[  733.276704][   T39]  el0_svc_common+0x13c/0x258
[  733.277448][   T39]  do_el0_svc+0x5c/0x134
[  733.278138][   T39]  el0_svc+0x58/0x128
[  733.278773][   T39]  el0t_64_sync_handler+0x84/0xf0
[  733.279529][   T39]  el0t_64_sync+0x18c/0x190
[  733.280268][   T39] 
[  733.280639][   T39] Freed by task 14252:
[  733.281310][   T39]  kasan_set_track+0x4c/0x80
[  733.282108][   T39]  kasan_save_free_info+0x38/0x5c
[  733.282951][   T39]  ____kasan_slab_free+0x148/0x1b0
[  733.283801][   T39]  __kasan_slab_free+0x18/0x28
[  733.284603][   T39]  slab_free_freelist_hook+0x16c/0x1e8
[  733.285471][   T39]  __kmem_cache_free+0xbc/0x21c
[  733.286277][   T39]  kfree+0xd0/0x1a8
[  733.286911][   T39]  rdma_restrack_clean+0x238/0x2b0
[  733.287764][   T39]  ib_dealloc_device+0x148/0x1dc
[  733.288574][   T39]  __ib_unregister_device+0x100/0x170
[  733.289422][   T39]  ib_unregister_device_and_put+0xb4/0x110
[  733.290342][   T39]  nldev_dellink+0x224/0x2c0
[  733.291106][   T39]  rdma_nl_rcv+0x4fc/0x828
[  733.291854][   T39]  netlink_unicast+0x5fc/0x80c
[  733.292632][   T39]  netlink_sendmsg+0x6f0/0x9d8
[  733.293452][   T39]  ____sys_sendmsg+0x588/0x90c
[  733.294257][   T39]  __sys_sendmsg+0x288/0x374
[  733.294992][   T39]  __arm64_sys_sendmsg+0x80/0x94
[  733.295786][   T39]  invoke_syscall+0x98/0x290
[  733.296473][   T39]  el0_svc_common+0x13c/0x258
[  733.297236][   T39]  do_el0_svc+0x5c/0x134
[  733.297909][   T39]  el0_svc+0x58/0x128
[  733.298559][   T39]  el0t_64_sync_handler+0x84/0xf0
[  733.299401][   T39]  el0t_64_sync+0x18c/0x190
[  733.300128][   T39] 
[  733.300500][   T39] The buggy address belongs to the object at ffff0000cb9ce000
[  733.300500][   T39]  which belongs to the cache kmalloc-1k of size 1024
[  733.302683][   T39] The buggy address is located 24 bytes inside of
[  733.302683][   T39]  1024-byte region [ffff0000cb9ce000, ffff0000cb9ce400)
[  733.304715][   T39] 
[  733.305084][   T39] The buggy address belongs to the physical page:
[  733.306075][   T39] page:00000000ba4a4754 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10b9c8
[  733.307709][   T39] head:00000000ba4a4754 order:3 compound_mapcount:0 compound_pincount:0
[  733.309086][   T39] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff)
[  733.310324][   T39] raw: 05ffc00000010200 dead000000000100 dead000000000122 ffff0000c0002780
[  733.311622][   T39] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  733.312887][   T39] page dumped because: kasan: bad access detected
[  733.313907][   T39] 
[  733.314308][   T39] Memory state around the buggy address:
[  733.315208][   T39]  ffff0000cb9cdf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  733.316455][   T39]  ffff0000cb9cdf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  733.317777][   T39] >ffff0000cb9ce000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  733.319073][   T39]                             ^
[  733.319788][   T39]  ffff0000cb9ce080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  733.321015][   T39]  ffff0000cb9ce100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  733.322291][   T39] ==================================================================
[  733.323575][   T39] Disabling lock debugging due to kernel taint
[  733.324844][   T39] ================================================================================
[  733.326310][   T39] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.c:131:9
[  733.327618][   T39] index 15624 is out of range for type 'unsigned long[8]'
[  733.328734][   T39] CPU: 0 PID: 39 Comm: kworker/u4:2 Tainted: G    B   W          syzkaller #0
[  733.330016][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[  733.331514][   T39] Workqueue: krdsd rds_ib_dev_free
[  733.332314][   T39] Call trace:
[  733.332796][   T39]  dump_backtrace+0x1c4/0x1f0
[  733.333433][   T39]  show_stack+0x2c/0x3c
[  733.334035][   T39]  __dump_stack+0x30/0x40
[  733.334706][   T39]  dump_stack_lvl+0xf4/0x15c
[  733.335395][   T39]  dump_stack+0x1c/0x5c
[  733.336075][   T39]  ubsan_epilogue+0x14/0x48
[  733.336793][   T39]  __ubsan_handle_out_of_bounds+0xd0/0xf8
[  733.337670][   T39]  queued_spin_lock_slowpath+0x8a8/0xc14
[  733.338598][   T39]  do_raw_spin_lock+0x2f4/0x2f8
[  733.339372][   T39]  _raw_spin_lock+0x5c/0x6c
[  733.340099][   T39]  xa_erase+0x38/0xec
[  733.340744][   T39]  rdma_restrack_del+0x114/0x350
[  733.341559][   T39]  ib_dealloc_pd_user+0x134/0x170
[  733.342374][   T39]  rds_ib_dev_free+0xc0/0x284
[  733.343139][   T39]  process_one_work+0x7e4/0x13bc
[  733.343961][   T39]  worker_thread+0x8cc/0xfe8
[  733.344653][   T39]  kthread+0x254/0x2e0
[  733.345323][   T39]  ret_from_fork+0x10/0x20
[  733.346133][   T39] ================================================================================
[  733.347493][   T39] Unable to handle kernel paging request at virtual address ffff8000152eb180
[  733.348821][   T39] KASAN: probably user-memory-access in range [0x00000000a9758c00-0x00000000a9758c07]
[  733.350307][   T39] Mem abort info:
[  733.350862][   T39]   ESR = 0x0000000096000047
[  733.351625][   T39]   EC = 0x25: DABT (current EL), IL = 32 bits
[  733.352575][   T39]   SET = 0, FnV = 0
[  733.353175][   T39]   EA = 0, S1PTW = 0
[  733.353802][   T39]   FSC = 0x07: level 3 translation fault
[  733.354649][   T39] Data abort info:
[  733.355242][   T39]   ISV = 0, ISS = 0x00000047
[  733.355972][   T39]   CM = 0, WnR = 1
[  733.356585][   T39] swapper pgtable: 4k pages, 48-bit VAs, pgdp=000000020dd2e000
[  733.357772][   T39] [ffff8000152eb180] pgd=100000023ffff003, p4d=100000023ffff003, pud=100000023fffe003, pmd=100000023fff9003, pte=0000000000000000
[  733.359802][   T39] Internal error: Oops: 0000000096000047 [#1] PREEMPT SMP
[  733.360857][   T39] Modules linked in:
[  733.361387][   T39] CPU: 0 PID: 39 Comm: kworker/u4:2 Tainted: G    B   W          syzkaller #0
[  733.362608][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[  733.364072][   T39] Workqueue: krdsd rds_ib_dev_free
[  733.364859][   T39] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
[  733.366037][   T39] pc : queued_spin_lock_slowpath+0x598/0xc14
[  733.366975][   T39] lr : queued_spin_lock_slowpath+0x8a8/0xc14
[  733.367967][   T39] sp : ffff80001dfc7840
[  733.368638][   T39] x29: ffff80001dfc78e0 x28: 1fffe00033e75030 x27: ffff8000152eb180
[  733.369895][   T39] x26: ffff00019f3a8188 x25: ffff80001dfc7860 x24: 1fffe00019739c00
[  733.371172][   T39] x23: dfff800000000000 x22: ffff700003bf8f0c x21: ffff8000152eb180
[  733.372467][   T39] x20: ffff00019f3a8180 x19: ffff0000cb9ce000 x18: 1fffe00033e7277e
[  733.373779][   T39] x17: 3d3d3d3d3d3d3d3d x16: ffff800008195560 x15: 3d3d3d3d3d3d3d3d
[  733.375072][   T39] x14: ffff700002ff00bc x13: 1ffff00002ff00bc x12: 0000000000000004
[  733.376353][   T39] x11: ff008000081955e4 x10: ffff8000152eb180 x9 : 0000000000000000
[  733.377654][   T39] x8 : 0000000000000000 x7 : 0000000000000001 x6 : 0000000000000001
[  733.378964][   T39] x5 : ffff80001dfc7298 x4 : ffff800015464e80 x3 : ffff8000081955ac
[  733.380295][   T39] x2 : 0000000000000001 x1 : 0000000000000004 x0 : ffff00019f3a8188
[  733.381599][   T39] Call trace:
[  733.382152][   T39]  queued_spin_lock_slowpath+0x598/0xc14
[  733.383090][   T39]  do_raw_spin_lock+0x2f4/0x2f8
[  733.383903][   T39]  _raw_spin_lock+0x5c/0x6c
[  733.384632][   T39]  xa_erase+0x38/0xec
[  733.385277][   T39]  rdma_restrack_del+0x114/0x350
[  733.386075][   T39]  ib_dealloc_pd_user+0x134/0x170
[  733.386867][   T39]  rds_ib_dev_free+0xc0/0x284
[  733.387620][   T39]  process_one_work+0x7e4/0x13bc
[  733.388391][   T39]  worker_thread+0x8cc/0xfe8
[  733.389117][   T39]  kthread+0x254/0x2e0
[  733.389766][   T39]  ret_from_fork+0x10/0x20
[  733.390466][   T39] Code: aa1503e0 978df35e 91002280 52800081 (f90002b4) 
[  733.391505][   T39] ---[ end trace 0000000000000000 ]---
[  733.652622][   T39] Kernel panic - not syncing: Oops: Fatal exception
[  733.653676][   T39] SMP: stopping secondary CPUs
[  733.654420][   T39] Kernel Offset: disabled
[  733.655073][   T39] CPU features: 0x0a0000,000f0097,a65bfea7
[  733.655961][   T39] Memory Limit: none
[  733.916048][   T39] Rebooting in 86400 seconds..