last executing test programs:

18.581608408s ago: executing program 0 (id=1349):
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000340)='./file0\x00', 0x2000c12, &(0x7f0000000180)={[{@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@check_relaxed}, {@unhide}, {@overriderock}, {@overriderock}, {@check_strict}, {@check_relaxed}, {@cruft}, {@map_acorn}, {@unhide}, {@cruft}]}, 0x4, 0xa00, &(0x7f00000003c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)

17.445987491s ago: executing program 0 (id=1356):
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
r3 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x22020600)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x1, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r3], 0xfd, 0x5576, &(0x7f000000b000)="$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")
r4 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00')
setns(r4, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

14.539443161s ago: executing program 1 (id=1367):
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6(0xa, 0x1, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x2c}}, 0x0)

13.274683989s ago: executing program 1 (id=1368):
r0 = syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5ef4, &(0x7f000000e480)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x381ec1, 0x102)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="0f3800bbf540dceb260f015f009d0f6f140f20d86635080000000f22d867660f38022066b96c0800000f322e2e0f88070066b9800000c00f326635010000000f30", 0x41}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xa)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001cc0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb544c40677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83c6e613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435a1d0996048d9b50199cdcacc413038d0100a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b17680100969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06de269e97fbb0776bf56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105cfdf8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f01000080000000004febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60133641a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40f23b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d426452881cd7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2e9a20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1015ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846899c6b23c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33694f40000000000005d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b95bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca86f750189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc681b6c9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8504611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c01446234437b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c64cd14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e87973d574ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee438380536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7430100bf3825a1996c8997ce285edf1d277ed703f560460417bfe73b7cd93ccacbf302af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb150963b844703649d5848028f856cead864f5e38c83b9ed86cc5725a20299ce512b1650000000000004f7f3c81ddf20d74a518ccd580bdee18f16cafac0d6fbaae0ce42d903290cd4d1cfbfecf0e85546220f3b30837a2a22d6a4e084252cbd58f1c73c83a6085ebd92c2c537b34999e8b4ec0969e8930e00cb3186b750f1ed327edd93a5b2b9148677596913a6ef84039143af8af0ea0b6363b0d80dc3625def6255fbd7c6b80650bc5db726c58e036929dacce4e41d4cbf3e98c0055d7116a100285f7983f9e48a5842a9e42953f33a45ec36a253716e1"], &(0x7f0000000380)='GPL\x00', 0x0, 0x3d, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000800)='workqueue_activate_work\x00', r7}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006911510000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0)
setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080), 0x8)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000})
ioctl$KVM_NMI(r6, 0xae9a)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
close(0xffffffffffffffff)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x53}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80)
io_setup(0x1, &(0x7f00000004c0)=<r8=>0x0)
io_submit(r8, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])
ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f00000001c0)={0xdb, ""/219})

13.055001267s ago: executing program 0 (id=1369):
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6(0xa, 0x1, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x2c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, 0x0)
setuid(0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)

11.190797297s ago: executing program 1 (id=1374):
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
socket$inet6(0xa, 0x2, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
r0 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
socket(0x1e, 0x2, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'macvlan1\x00'}, 0x18)

10.353461599s ago: executing program 3 (id=1377):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000000)="82", 0x1}], 0x1}}], 0x1, 0x0)
preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa"], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
landlock_create_ruleset(&(0x7f00000000c0)={0x8018}, 0x10, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

9.955986834s ago: executing program 0 (id=1379):
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
r3 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x22020600)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x1, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r3], 0xfd, 0x5576, &(0x7f000000b000)="$eJzs3EtvG9UXAPA7TtJ3+6/+YsGuI1VIiVRbcR4V7AK04iFSRTwWrMCxHcut7YlixzFZFcESdcE3QVRixZLPwII1O8QCxA4J5JkxTdoGNYoT0+b3kybnzp3x8T0jK9aZiRKAU+tq/MdvUbgSzocQpkIIl6KQjqN8S61k4eUQwrUQQmHPFuXz/0ycCSFcCCFcGSbPckb5oa9v9K8v//ru79//eHb64jff/TS5qoFJeyWE0N7MxjvtLCaNLN7N5yv9ZhrbS/08Zgfa9/L9JIs79fU0w05ldF4ljYuN7Pxkc7s7jButSnUYG82NdH6zk71ht98Y5UlfcLeyle7X6utpbHaTNDZ2s3UNdrPfbbvdXpanluf7LE0fer1RzObrg3pWz+a9NFY7vXw+y5vU6oNh7Ocxf7tQTVq1dB3rR7nS/23vNTvbg7hf3+o2k068XCq/WirfLJa3klq9V18qVtq1m0vxbKPVHH0hrTSSpNGql6pJey6ebVSrxXI5nr1VX29WOnG5XFoszReX5/LRjfitOx/FrVo8O4xvNDvbZ5qtbryRbMXZK+bihdLia3Px9XL8wepavPb+7durax9+cuvjO6+vvvNmftITy4pnF+YXForl+eJCee4Y6j+XH9xbf2d7UOzVK+2n1T/83n3G+ntHqf/LfF2HqD862uWBf+cDBnBoT/T/Qf8PHL8x9P9nR7km0f+Hcfb/w5bq8f5/etj/f67/39v/Fg7ofw/R/x+p/z2p/v+g+g/q/5/j+uFI9P8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKfWzzPfvp0Ormb7F/P5y/nU//P9KIRQCCH89RRT4cy+nFN5npkDzp95bA0/RCHNMHyPs/l2IYSwkm9//u+4rwIAAAC8uB7ev/bgXDYctuyjWwCcDtlNm8KlT8eULwohzFz9ZUzZCsMfL40pWfr5ng6DMWVLb2CdG1Oy7Jbb9LiyPZOpUfji8qPJtKAoC4UTXQ4AAHAipvaFk+1CAAAAOElfTXoBTEYURo8yR8+C07+8f/Ro8/y+YwAAAMBzKJr0AgAAAIBjl/b//v8fAAAAvNge3r/2YNJrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+ZudubhMH4jiAjg0G9kuLVnvfVvYGZWwJe9zbBgpIE5RAWkgD1EBuKQHFEZ4RkhOQIjGOFes9yWPGRr+ZQVz+Y8kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADN1DtV3e3fy6vTanruv/9RXyrAYAAAA4Z19tl82Heex/Sde/pUs/Ur8IIZSxzn9lFCatzFHKqS58v3oxh/sQmoTjGNN0fA4h/E7H4XvXvwIAAAAM1269WcRqPTbzvifEe4qbNuXXP5nyihBCNX/MlFYem5+Zwpr/9zj8y5TWbGDNMoXFLbfx+XuTXIO0jVqntJLZKoRD2qIruxkXAADoU7sSuFCFAAAAMAB/+54A/ShOzek54zSe0gPBT60eAAAA8AEVfU8AAAAA6NSp9vf+PwAAABi2+P4/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAurSvtsvderO4dH/1xpyn+jr5VgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Mz+vKNACIRBGOxd35nM/Q8rDRoam1SB8PE3BgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw5nd/+T8xNc4kc6+NpeeRZO3U2Do19s6Noz+Mr18DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/vzkgIhEARRMGf876Tvf1hJ0DOIEAENjypq0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHzR7375PzE1ziRzp42l45Fk7aqxddXYe9A4ejDe/g0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzv3zxtHEQUA/O3en8QBhDHIhQEFiQIaYl9CQkooQBYFHwHJcs7BcCGQuCCRBbiBCrlOg6BECAlkunyH1LGUJnQpXBiJGrR3u844sYgVzO7F/v2kuXl7Hu282VtZfp61AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDK1jvxUl7GreJlchRX793eXl0s+s0H+sLN9TszRSvi7FETffv2wSc/3l5OD05OJwdf1Z8MAAAAR0Orqu8j4m5nY77o88lh/d+pxhQ1/w/PjOKqnn+w7t/cXj1efmmmqv9//+3eCzsTTY7mKU66tDzozz2cSvt/WuLYe/aRI9rDKz/83Utr+IHk7689v9UZXs/su1u33u0Ow2N1ZAsAPI5TVV8G1c9DRd9rMjEAjox2UnhX9X9rstmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwtRZPVXEWETPt+3Fhc3t1ca/+5vqdmaqdu3FjPT1ncYpORCwtD/qdGtcy7q5eu/7JwmDQv1J/cDIimpu9DD7cx5iIfx9T3p5xYIl9HQe2wKzZyzsWQV5+PuOSz0EG1b2315iJiP9wIzX0DQkAgEOrU7airr/b2Zgv3sumIv7+cXf9/1oSx666P991nNb/9z46dzudK63/e3Ut8Akwu3Lps9mr166/sXxp4WL/Yv/TN0/33uqdOX/27PnZ4lrNzS5F3p9rOk0AAACeYN2ypfV/PvXw/v+JJI597v9//n3vy3Sulvp/T/c3/ZrOBAAA4Cjq7kTPvfLXn9keI7JuN75YWFm50hu97hyfHr3Wmu5jOla2tP5vTTWdFQAAAFCHrbVs1/7/hSSOfe7/P/3Ti7+k52xFxETE5Yjon1q8PLhQ33LGWh1/qDycqNv0SgEAAGjKRNnS/f/O8Pn/fOeRhzwiXn91FFf/62o/9X/rvW9+TudKn/8/U98Sx1Ee06PrkRf9dER7uumUAAAAOMyOly3LIv7obMx//OuJD7qe/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACo2z8BAAD///6VMzo=")
r4 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00')
setns(r4, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

9.830524049s ago: executing program 3 (id=1380):
r0 = socket$alg(0x26, 0x5, 0x0)
accept$alg(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

8.894983254s ago: executing program 1 (id=1381):
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6(0xa, 0x1, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x2c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, 0x0)
setuid(0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
mknodat$null(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1, 0x103)

8.296676346s ago: executing program 4 (id=1382):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='nobarrier,mode=lfs,fsync_mode=strict\x00acl,\x00'], 0x1, 0x552d, &(0x7f000000d000)="$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")
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
syz_emit_ethernet(0xa3, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bind$inet6(0xffffffffffffffff, &(0x7f0000000840)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x32600)
pipe(&(0x7f00000000c0))

6.962224077s ago: executing program 2 (id=1383):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000380)=r2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)}, 0x0)

6.939758757s ago: executing program 3 (id=1384):
r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r0, 0x0)
syz_emit_vhci(0x0, 0x7)
syz_emit_vhci(0x0, 0x0)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22)
syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804cb28bfd234bc17c03c983ecd866aa659974e06e87cfd89ae499a68eba63c37772f34b11415226ce21c40d85ba37c000093fe63906d699d195302ac6658c5e91d1da251d12fd2bc1c1c2dc21254e1441f3c72b62615f641fb5d2686cff1769d98d918d73ada11b3b58db24d4a83687e3b3800"/126], 0x7)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_emit_vhci(0x0, 0xf)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x38)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000600), 0xfec8)
recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000180)=""/209, 0xd1}], 0x2, 0x0, 0x0, 0x2000000}}], 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
sendmsg$nl_route_sched_retired(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000900)=@delchain={0x1958, 0x65, 0x20, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x8}, {0x3, 0xfff2}, {0xffff, 0xc}}, [@f_rsvp={{0x9}, {0x1928, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @loopback}, @TCA_RSVP_POLICE={0x24, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0xf8ff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x78}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}]}, @TCA_RSVP_POLICE={0x884, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x40, 0x6, 0x200, 0xff, 0x2, {0x8, 0x1, 0xf281, 0x20, 0x3ff, 0x1f}, {0x46, 0x0, 0xbbe3, 0x0, 0x33, 0xffffffff}, 0x5, 0x0, 0x1f}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x2, 0xffffffff, 0xff, 0x5, {0x7, 0x3, 0x3, 0x7, 0x4, 0x8}, {0x36, 0x2, 0x72f8, 0x1, 0x2, 0xffff}, 0x1, 0x6, 0x80000001}}, @TCA_POLICE_RATE={0x404, 0x2, [0xb5, 0x80000001, 0x8, 0x8, 0x0, 0x1000, 0x3, 0x6, 0x0, 0x8, 0x6, 0x101, 0x5, 0x1ff, 0x400, 0x0, 0xfffffff7, 0x7fffffff, 0x400, 0x5, 0x1f, 0x0, 0xfffffffc, 0x0, 0x40, 0x2, 0x1, 0x8, 0x6, 0x10000, 0x0, 0x8, 0x6, 0x0, 0x6cae5a37, 0x80000000, 0x0, 0x2, 0x7ff, 0x8, 0x9, 0xbef, 0x10000, 0x3be, 0x5, 0x40, 0x7, 0x1000, 0x1, 0xc, 0x619, 0x8, 0x1e, 0x0, 0x9, 0x1, 0x62f86346, 0x3472, 0x1ff, 0x81, 0x56f, 0x3ff, 0x7, 0x7, 0x3, 0x4, 0x203b, 0xfff, 0x7, 0xe85, 0x6, 0x80000001, 0x63c3, 0x3, 0x7, 0x8, 0x4, 0x0, 0x20, 0x6, 0x7, 0x2, 0x1a54, 0x7, 0x70000000, 0xfffff3b5, 0x9, 0x6, 0x0, 0x1, 0x7, 0xb42, 0x2, 0x415bc109, 0x101, 0x4530359f, 0x4, 0x0, 0x8, 0x8, 0x3, 0x70a, 0x8, 0x7fffffff, 0x5, 0x5b3b, 0x8fc, 0x61, 0x0, 0xfffffffa, 0x2a59, 0x4f75, 0x3, 0x8, 0xffff2db4, 0x1, 0xfff, 0x31, 0x0, 0xfffff801, 0x38000, 0x1f, 0x2, 0x8, 0x9, 0x9, 0x9, 0xfffffff9, 0x3, 0x8, 0x800, 0x80, 0x1f, 0x1ff, 0x2, 0x7, 0x8, 0x1ff, 0xffffcec4, 0x4, 0x4043, 0xd1, 0x1ff, 0x2e, 0x0, 0x3, 0x3741, 0x1f, 0x621, 0x3471, 0x401, 0x4d, 0x1, 0xffffffff, 0x4, 0x4, 0x0, 0x7, 0x858, 0x6ffa, 0x4, 0x0, 0x9, 0xfffffffe, 0x4, 0x0, 0x4, 0x9, 0x8, 0x81, 0x7, 0xff, 0x8, 0x1f, 0x10001, 0x20, 0x8001, 0x5, 0x73, 0x10001, 0x3d8, 0x99c, 0x800, 0x5, 0xfffffff7, 0x2, 0x0, 0xffff, 0x90, 0x3, 0x7ff, 0x8, 0x0, 0x8, 0x10001, 0x2, 0x5, 0x200, 0x1, 0x7, 0x6, 0xffff, 0x1, 0x5, 0xf61, 0x9, 0x20, 0x7, 0x1, 0x2, 0x80000001, 0x7a, 0x4, 0x26, 0x4, 0x5, 0x5, 0x3f, 0x53b2, 0xa4ce, 0x3, 0x80000001, 0x8, 0x8001, 0xba, 0x2, 0x6, 0x8, 0x50, 0x6, 0x8001, 0x4, 0x5, 0x6, 0x9, 0x80000000, 0x511, 0x0, 0x100, 0x80000001, 0x1000, 0x6, 0x80000001, 0x2, 0xc477, 0x4, 0x7fffffff, 0x80000000, 0x2, 0x8, 0x20, 0x100, 0x400, 0xd456, 0x7490, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x9, 0x5, 0x6, 0x3f, 0xffffffff, 0x7, 0xe65, 0x9, 0x8, 0x2, 0x2fe1, 0x81, 0x8000, 0xcf, 0x5, 0x2, 0x9, 0x2, 0x1, 0xffffffff, 0x8, 0x4, 0x8001, 0x1, 0xffff708e, 0x6, 0x3, 0x1000, 0x3, 0x0, 0x400, 0x8, 0x6, 0x2, 0x0, 0x20, 0x6, 0x1, 0x4, 0x5, 0x6, 0x7fff, 0x4, 0x20, 0x40, 0x818, 0x3, 0x8, 0xef8, 0x65, 0x6, 0x5, 0x3ff, 0x8, 0x7, 0x4, 0xfffffffa, 0x6, 0x7404, 0xa2, 0xfffffffc, 0xffff, 0x3, 0x80000001, 0x3, 0xff, 0x1, 0x0, 0xcfb, 0x1000, 0x81, 0x80000001, 0x8001, 0x2, 0x10001, 0x7f7, 0x401, 0x3ff, 0x5, 0x2, 0x7f7, 0x80000000, 0x8, 0x7, 0xfffff7a9, 0x7, 0x7fff, 0x8fe6, 0x4, 0x1ff, 0x3, 0x0, 0x1, 0x11, 0x3f, 0x1, 0x8000, 0x1000, 0x1, 0x46, 0xff, 0x2, 0xfae, 0x800, 0x5, 0xb90, 0x1, 0x7, 0x3d, 0xf6, 0x0, 0x79d7, 0x3, 0x8000, 0x9, 0xf3b0, 0x5, 0x101, 0x8000, 0x2, 0x0, 0x3, 0xff, 0x101, 0x7f, 0x7, 0x80000001, 0x5, 0xc12, 0x80000001, 0x7ff, 0x9, 0x7, 0x3, 0x7ff, 0x9, 0x10000, 0x101, 0x95, 0x6, 0x6, 0xc21, 0x6, 0x0, 0xcf, 0x9, 0x286, 0x4, 0x8001, 0x9, 0x2, 0x7, 0xff, 0x100, 0x80000000, 0x3000000, 0x1, 0xff, 0x8, 0x5, 0x101, 0x2, 0x101, 0x2, 0x7, 0x10001, 0x5, 0x440, 0x4, 0x6, 0x288, 0x8, 0x3, 0xffffffff, 0x9, 0x0, 0x4, 0x0, 0x9, 0x100, 0x1ff, 0x8, 0x1, 0xcf3, 0x5, 0x2, 0x1, 0x1, 0x100, 0x8b, 0x1000, 0x1, 0x370, 0x101, 0x5, 0xfffffffd, 0x6, 0x8000, 0xfff, 0x7f, 0x0, 0x6, 0x9, 0x0, 0x5, 0x55, 0x7, 0x9, 0x8001, 0x0, 0x6, 0x7d, 0x100, 0x9605, 0x8000, 0x7, 0x8, 0x3, 0x8, 0x9, 0x5, 0x100, 0x2, 0x40, 0x50c, 0x0, 0x7, 0x2, 0x7, 0x7ff, 0x10001, 0xa4ef, 0x8, 0x1, 0x8, 0x1, 0x400, 0xffffff00, 0x3, 0xc8, 0x7, 0x2, 0x5, 0x5, 0x3ff, 0x3f, 0x81, 0x7, 0x104, 0x1, 0x5, 0x5, 0x9]}]}, @TCA_RSVP_POLICE={0x444, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x3ff, 0x0, 0x1, 0x2, 0x4, 0x7, 0xc329, 0x1, 0x2d89, 0x9b85, 0x3, 0x7, 0x20, 0x101, 0x2, 0x101, 0x4, 0x5, 0x2, 0x538, 0x38, 0xd6, 0xc8, 0x216, 0x1, 0x200, 0x47, 0x2c7, 0x100, 0x2d4, 0x8001, 0x3ff, 0x6, 0xeacf, 0x0, 0x705, 0x6d6f, 0x9, 0x5, 0x0, 0xffffff80, 0x8, 0xfffffbff, 0x2, 0x8, 0xffffffff, 0x6, 0x8000, 0x9, 0x5, 0x2, 0x5, 0x75ab, 0xffff, 0x7ff, 0x8, 0x0, 0x7fff, 0x5, 0x70000000, 0x0, 0x1, 0x5, 0x3, 0x3ff, 0x57b0, 0x81, 0x80000001, 0x1, 0x9, 0xff, 0xfffffffb, 0x6, 0x338, 0x1f, 0xab74, 0x9, 0x1, 0x3, 0x4, 0x4, 0x97c, 0x101, 0x1, 0x19b5, 0x100, 0x93, 0x4, 0x8, 0x2, 0xfffffff8, 0x7, 0x3, 0x4, 0x8001, 0x4, 0x1f, 0x8, 0x2, 0x8001, 0x5, 0x3ff, 0x40, 0x5, 0x7, 0x8001, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x9, 0x1, 0x0, 0x49a6, 0xffff, 0x1, 0x0, 0x8, 0x2, 0x2, 0x2, 0x6, 0x40, 0x7, 0x13, 0x8, 0x0, 0x7, 0x4, 0x6, 0x4, 0x9, 0x81, 0x6, 0x8, 0x1, 0x2d8, 0xfff, 0x5, 0x6, 0x401, 0x2, 0x9, 0x4, 0x2, 0x10000, 0xb3, 0x8, 0x0, 0xde4c, 0x7fff, 0xd8, 0x7, 0xfffffff8, 0x1, 0x4, 0x1, 0x7ff, 0x7f, 0x5, 0x7, 0x7fff, 0x0, 0x1, 0xa4e0, 0x48, 0xfffffffe, 0x0, 0x12, 0xb26, 0x8, 0x4, 0x6, 0x38, 0x8, 0x479, 0x4, 0x7, 0x8001, 0x7ff, 0xffff065d, 0x5, 0x4, 0x3, 0x3, 0xfffffff7, 0x5, 0x3a5e7d0a, 0x1, 0x80000000, 0x8, 0x9, 0x1, 0x93b8, 0x8, 0xfffffffb, 0x1, 0x0, 0x5, 0x316, 0x9, 0x1, 0x8, 0x7, 0x7, 0x7, 0x6, 0x1ff, 0xfffffffb, 0x10000, 0x2, 0x1, 0x4, 0x10000, 0x3, 0x8000, 0xa8fe, 0x2c25, 0x0, 0x5, 0x9, 0x800, 0xa12b, 0x0, 0x6, 0x1000, 0x8000, 0x5, 0x4, 0x4b, 0x400, 0x6, 0x8, 0x3, 0x57cd985a, 0x8000, 0x6, 0x800, 0x3ff, 0x7, 0x2c, 0x4, 0x1, 0x1, 0x400, 0x4, 0xfff, 0x2, 0x2, 0x0, 0x5, 0x7, 0x6, 0x34940000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7e95, 0x20000000, 0x6, 0x2, 0x80000000, {0x4, 0x2, 0x2, 0x5, 0x2, 0x80000001}, {0x1, 0x2, 0x3, 0x7fff, 0x8, 0x4}, 0x6, 0x5, 0x5}}]}, @TCA_RSVP_DST={0x8, 0x2, @loopback}, @TCA_RSVP_POLICE={0xc28, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x7, 0x7f, 0x10001, 0x0, 0x5, 0xfffffffd, 0x1, 0x5, 0x0, 0x3, 0x8, 0xffffff87, 0x8000, 0x3ff, 0x38d7, 0x800, 0x20, 0xffffffff, 0x200, 0x40, 0x3ff, 0xfffffbff, 0x3ff, 0x2, 0x4, 0xffffffff, 0xffffffff, 0x3ff, 0x0, 0x10001, 0x4000000, 0x7ff, 0x7, 0x9, 0x1, 0x7f, 0x400, 0xe620, 0x7ff, 0x9, 0x480, 0x3, 0x8, 0x4, 0x4, 0x6, 0x9, 0x101, 0x2924, 0x3, 0x1f, 0xe2, 0x4, 0x4, 0x7, 0x20, 0xf848, 0x1, 0x9, 0x0, 0x5, 0xffff, 0x5, 0x7, 0x8, 0x9, 0x1ff, 0x9, 0x3ff, 0xfffffffc, 0xfff, 0x0, 0x0, 0x40, 0x0, 0x1, 0xb9, 0x8, 0x9, 0x8, 0x200, 0x8, 0x0, 0x7, 0x9, 0x4, 0x3, 0xdaf, 0x5, 0x0, 0x3, 0x8001, 0x3ff, 0x7ff, 0x8, 0x80, 0x0, 0x9, 0x0, 0x1f6, 0x3, 0x7, 0x8000, 0x5, 0x10000, 0xfffffffe, 0x38, 0xbb59, 0x8, 0x5, 0x1, 0x3f, 0x2, 0x5, 0xfffffffd, 0x9f6, 0x6, 0x7fff, 0x6, 0x8, 0xffffffff, 0x2, 0x3, 0x402, 0x80, 0x0, 0x0, 0x9, 0x6000, 0x10001, 0x100, 0x54a, 0x3, 0x0, 0x242d, 0x3ff, 0x797, 0xfffffff7, 0xc35, 0xc7f, 0xf2e, 0x3ff, 0x10001, 0x7fffffff, 0x5, 0x75480, 0xffffffff, 0x8001, 0xe8d, 0xffff, 0xfffffffd, 0xe51e, 0xb03, 0x7, 0x9, 0x8, 0xfffffffa, 0x2, 0x8, 0x3f, 0x8, 0x64a, 0x800, 0x3, 0x7, 0x335, 0x89000000, 0x4, 0x2, 0x401, 0x0, 0x7, 0x1, 0x0, 0x5, 0x9, 0xf7cc, 0x8001, 0x8, 0x8, 0x3ff, 0x0, 0x4, 0x80000000, 0x6, 0x400, 0x8, 0x4, 0x81, 0xfffffff9, 0x40, 0x3, 0x9, 0x9, 0x7, 0xbe, 0xffffffe0, 0x7, 0x0, 0x8000, 0xce, 0x0, 0xc1, 0x10000, 0xf8, 0x20, 0x8, 0x200, 0x100, 0x7, 0x4, 0x5, 0x5, 0x4, 0x3, 0x1ff, 0x689f, 0x8, 0xffffffc0, 0xe9b0106, 0xfff, 0x200, 0x5, 0x2, 0x3, 0x40, 0x1f, 0x48, 0x2, 0xffffffff, 0x8000, 0x8, 0x3, 0x4, 0x3ff, 0x7, 0x1000000, 0x100, 0xfff, 0x6, 0x5, 0x8, 0x0, 0x0, 0x200, 0x9, 0x3f, 0x5, 0x1, 0x7fff, 0x3ff, 0x1, 0x5, 0xffffff8f, 0x80000000]}, @TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x5, 0xffffffc0, 0x80, 0x0, 0x5, 0x7fff, 0x6, 0x4, 0x5, 0x7fffffff, 0x3, 0x3ff, 0x9, 0x5, 0x8, 0x8001, 0x80000000, 0x3, 0x1c08d7c4, 0x1, 0x3f, 0x2, 0x20bbc1fe, 0xa000000, 0x5, 0x0, 0x1, 0x3ff, 0x6, 0x7ff, 0x3, 0x80000000, 0x4, 0x6, 0x6, 0x400, 0x3, 0x115c0e08, 0x0, 0x200, 0x2, 0x3, 0x3, 0xe0, 0x9, 0x80000001, 0x7, 0x7, 0x7f, 0x4, 0x1, 0xffffff06, 0x80000000, 0x4, 0x81, 0x2, 0x9, 0x9, 0x6, 0x8, 0x1f, 0x80000001, 0x413, 0xffff, 0x0, 0x6, 0x6bc5, 0x76, 0x3, 0x5dd9, 0x4, 0x6, 0x6, 0x0, 0x3, 0x7, 0x9, 0xfffffff8, 0x763, 0x1, 0x8, 0x6, 0x7, 0xfff, 0x100, 0x5, 0x4, 0x6, 0x4, 0xfffff164, 0x80, 0x8, 0x1, 0x401, 0x7fffffff, 0x11, 0x1, 0xeab5, 0x80000000, 0x8001, 0x6, 0x6, 0x0, 0x2, 0x5, 0x1, 0x7, 0x3de5bc2b, 0x81, 0x9c6, 0x9, 0x4, 0xfffffff8, 0x5, 0x7, 0x0, 0x1000, 0x24e8, 0x8, 0x6, 0x6, 0x3, 0x3, 0x3ff, 0x3ff, 0x63b1054a, 0x8000, 0x2, 0x1ff, 0x1, 0x0, 0x5, 0x9, 0x3, 0x1, 0x3, 0x1, 0x6e80, 0x8000, 0x7, 0x8, 0x0, 0x2, 0x6, 0x1, 0x3ff, 0x8, 0x401, 0x100, 0x2, 0x6, 0x5, 0x2, 0xffff0000, 0xfffffff9, 0x1ff, 0x4, 0x2, 0x2, 0x7fffffff, 0x1000, 0x0, 0x0, 0x7, 0x7, 0x1, 0x4, 0x48, 0x1, 0x0, 0x3f, 0xfffffffb, 0x69f9, 0x1, 0x6, 0x8, 0x4, 0x2, 0x6, 0x7, 0x8000, 0x8, 0x5, 0x800, 0x5, 0x8001, 0x1, 0xffff, 0xc1, 0x3f, 0xbd78, 0x8, 0x4, 0x6, 0x1, 0x10001, 0x3ff, 0xa804, 0x9, 0x2, 0x0, 0x2, 0x3ff, 0x4, 0x6, 0x40, 0xffffffff, 0x3, 0x0, 0x5, 0x0, 0x6c000000, 0x8, 0x8, 0xfffffffe, 0xff4, 0x9, 0x5, 0x7, 0x40, 0x3ff, 0x1, 0x2, 0x9, 0xfffffbff, 0x2, 0x2, 0x7, 0x8, 0x3, 0x3, 0x400, 0x8, 0x4, 0x0, 0x4, 0x90d3, 0x2, 0x3, 0x3, 0x7, 0xffffffff, 0x4, 0x4, 0xff, 0xfff, 0x80, 0x5, 0xa60, 0x3, 0x0, 0x7, 0x10001, 0x1, 0x6ec]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xa0, 0x1ff, 0xfffffffb, 0x1f, 0x3, 0x5, 0x9, 0x8, 0x6, 0x47, 0x200, 0x56, 0x7, 0xffffffa2, 0x5, 0x1, 0x5, 0xfffffffa, 0x1, 0xba39, 0x8, 0x10000, 0x1000, 0xa1, 0x5, 0x824, 0x1, 0x148, 0x200, 0x3ff, 0xfa, 0x9, 0x0, 0x7, 0x1, 0x8, 0x47, 0x5, 0x80000000, 0x1, 0x87d0, 0x5, 0x54d, 0xe, 0x2, 0xfffff000, 0x8, 0x10001, 0x8, 0xffff8001, 0x7f0c, 0x6, 0x1, 0xff, 0xa2, 0x5f, 0x1, 0x8, 0x0, 0x8, 0x7, 0x1, 0x2, 0x65, 0x82, 0x0, 0x7fffffff, 0x9, 0x5c7, 0xe3d8, 0x9, 0x200, 0x1c94, 0x400, 0x0, 0xb64, 0x1ff, 0x8, 0x7, 0x6, 0x1, 0x5ee8, 0x25, 0xfffffffe, 0x8, 0x1, 0x6, 0x0, 0xfffffffe, 0x8000, 0x6, 0x10001, 0xa13, 0x1, 0xb41, 0x8000, 0x8001, 0xfff, 0x40, 0x9, 0x3, 0x5, 0x3ff, 0x0, 0x401, 0x7, 0x2, 0x5618, 0x7, 0x7, 0x3f, 0x1, 0xfffffff8, 0x25, 0x4, 0x7, 0x9, 0x7, 0x5, 0x200, 0x0, 0x7f, 0x1, 0xa421, 0x1, 0x9, 0x3, 0x100, 0x7, 0xffffffff, 0x8, 0xaed4, 0x6, 0x7, 0x8, 0x5a, 0xf64, 0x0, 0x3, 0x9, 0xfffffff9, 0x7fffffff, 0x7, 0x0, 0x8, 0x7, 0x3, 0x9, 0x0, 0x60, 0x40, 0x477, 0x1ff, 0x3, 0x0, 0x2, 0x10001, 0x3f, 0x7, 0x2, 0x6, 0x1, 0x2, 0x7fff, 0x7f, 0x727ac273, 0xfffffffd, 0x0, 0xfffffffa, 0x9, 0x1, 0x80000001, 0x4, 0xffffffe0, 0x7ff, 0x401, 0x8001, 0x2, 0x4, 0x5, 0x7, 0xffffffc0, 0x8001, 0x333, 0x7, 0x6, 0x6b4, 0x1, 0xa9d, 0x4, 0x101, 0x4, 0xa0, 0x3, 0x7ff, 0x7, 0x5, 0x0, 0x4, 0xbf4, 0x9, 0x2, 0x8e, 0x6, 0x5, 0x6, 0x97, 0x7, 0x7, 0x7f, 0xb47, 0x1, 0xffffbfe6, 0x8, 0x5, 0x0, 0x10000, 0x2, 0x3f, 0xfffffff8, 0x4, 0x6, 0xfffffffd, 0x2800000, 0x0, 0x5, 0x9, 0x7fff, 0x5, 0x8, 0x800, 0x4, 0x2, 0x3f, 0x8, 0x100, 0x179, 0x3, 0xe32, 0x3, 0x79, 0x34b, 0x1, 0x8, 0x5, 0x5769, 0x166, 0x2, 0xfffffffd, 0x80, 0x2, 0x7ff, 0xbe, 0x8fcf5dc]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x79d}]}]}}]}, 0x1958}}, 0x0)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008862, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2016}}}, 0x7)
r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
lseek(r3, 0x0, 0x3)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r4, 0x7fff)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000006100)=[0x0], 0x1})

6.629791s ago: executing program 0 (id=1385):
r0 = socket$inet6(0xa, 0x6, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

6.603417471s ago: executing program 2 (id=1386):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0104000000000000000002000000400004803c0001800c0001007061796c6f6164002c000280080004400000000008000540000000000800034000000000080002400000000008000840010000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0)

6.407026158s ago: executing program 2 (id=1387):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0))
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000008c0)={0x5})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfffffffffffffffc}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffd000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$video4linux(&(0x7f0000001e00), 0xffffffff, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3015})
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)={0x0, 0x0, 0x1})
memfd_create(&(0x7f0000000180)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82d\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\xb2&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81<z\xf2\xe8\xf4\x93\xe6h\x97\x7f\xaf\xc5\x06g\fI\xa58\xf5\x18x\xc9\xb9\x03\t\x06\x96gf5\xb0\xc8\x86\x14\xe2\x01\x1f\x80\xe7Ol\xba\x93\xaa\x15\x87I7W\x87\xc4;p\xc5\x1e\"K5r\xec6\xac\xf0;\xf8 \xad\xc9\xf0\x16\xce\x17\xa1%f\x12\x80\x03N[qz\xf0q\xbd\xb8s\xe5>N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\x80Iy4\xa9\xf88C\xe3', 0x0)
unshare(0x2c020400)
epoll_create(0x101)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000080)={0x10001, <r7=>r5})
syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000000)={0x80000004})
msgget$private(0x0, 0x0)

5.601957298s ago: executing program 3 (id=1388):
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008b000000ff07000052cc00000900000006000000955cc98c0422b7540ebaf9364c6fe2724c4ee30837a3625afef3cf5496b378164733b5130078f24e6f67b8fe0b433e3b6f282e9de25a0f34"], 0x1a3)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file2\x00', 0x2000, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x4}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x14, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYBLOB="635c6451080235b187c50078113a9e1b88310a0699fdadcbb52b98055423a1ef1b7bceaf4035159bed6bd6418d1cdbb0110154c47597f4f3f3238a48dc80669be3b67d04cdcfd4acc78eed2c66e4da3e8367d6f66fbfe19f6b6c5550a98a6667567af5c9f56e3fe787015da20a2bd469c4f305ef72763cefcf0b64e0241b5a33d8d908ce72e82bd9a7df393fc00ed4371086d9690c39e1839096f2cb7021a09b120fda28808de2285612922a6f23f6442776ddd74397073f263b94e44e87fc94525569ce2b96f13fce", @ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_ext_remove_space_done\x00', r4}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000440)=0x7f, 0xffffffffffffffd6)
mount$overlay(0x0, &(0x7f0000000380)='./file1/file4\x00', &(0x7f0000000000), 0x0, &(0x7f0000001180)={[], [{@euid_eq={'euid', 0x3d, 0xee01}}, {@subj_role={'subj_role', 0x3d, '\\!--{)@]&[(]$}}\\&$['}}, {@obj_type={'obj_type', 0x3d, '*{^'}}, {@pcr={'pcr', 0x3d, 0x22}}], 0x2c})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "00223c319ec7dcaf000000044000"})
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0xb80, 0x1c0, 0x111, 0x4b4, 0x9, 0xd4feffff, 0xab0, 0x20a, 0x278, 0xab0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@unspec=@string={{0xc0}, {0x2, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587"}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0x888, 0x8f0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xbe0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

5.342648058s ago: executing program 2 (id=1389):
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6(0xa, 0x1, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x2c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, 0x0)
setuid(0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
mknodat$null(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1, 0x103)

4.22287146s ago: executing program 4 (id=1390):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000000)="82", 0x1}], 0x1}}], 0x1, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
landlock_create_ruleset(&(0x7f00000000c0)={0x8018}, 0x10, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4.014046949s ago: executing program 1 (id=1391):
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
socket$inet6(0xa, 0x2, 0x0)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
r0 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'macvlan1\x00'}, 0x18)

3.97460656s ago: executing program 2 (id=1392):
r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r0, 0x0)
syz_emit_vhci(0x0, 0x7)
syz_emit_vhci(0x0, 0x0)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22)
syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040804cb28bfd234bc17c03c983ecd866aa659974e06e87cfd89ae499a68eba63c37772f34b11415226ce21c40d85ba37c000093fe63906d699d195302ac6658c5e91d1da251d12fd2bc1c1c2dc21254e1441f3c72b62615f641fb5d2686cff1769d98d918d73ada11b3b58db24d4a83687e3b3800"/126], 0x7)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_emit_vhci(0x0, 0xf)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x38)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000600), 0xfec8)
recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000180)=""/209, 0xd1}], 0x2, 0x0, 0x0, 0x2000000}}], 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
sendmsg$nl_route_sched_retired(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000900)=@delchain={0x1958, 0x65, 0x20, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0x8}, {0x3, 0xfff2}, {0xffff, 0xc}}, [@f_rsvp={{0x9}, {0x1928, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @loopback}, @TCA_RSVP_POLICE={0x24, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0xf8ff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x78}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}]}, @TCA_RSVP_POLICE={0x884, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x40, 0x6, 0x200, 0xff, 0x2, {0x8, 0x1, 0xf281, 0x20, 0x3ff, 0x1f}, {0x46, 0x0, 0xbbe3, 0x0, 0x33, 0xffffffff}, 0x5, 0x0, 0x1f}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x2, 0xffffffff, 0xff, 0x5, {0x7, 0x3, 0x3, 0x7, 0x4, 0x8}, {0x36, 0x2, 0x72f8, 0x1, 0x2, 0xffff}, 0x1, 0x6, 0x80000001}}, @TCA_POLICE_RATE={0x404, 0x2, [0xb5, 0x80000001, 0x8, 0x8, 0x0, 0x1000, 0x3, 0x6, 0x0, 0x8, 0x6, 0x101, 0x5, 0x1ff, 0x400, 0x0, 0xfffffff7, 0x7fffffff, 0x400, 0x5, 0x1f, 0x0, 0xfffffffc, 0x0, 0x40, 0x2, 0x1, 0x8, 0x6, 0x10000, 0x0, 0x8, 0x6, 0x0, 0x6cae5a37, 0x80000000, 0x0, 0x2, 0x7ff, 0x8, 0x9, 0xbef, 0x10000, 0x3be, 0x5, 0x40, 0x7, 0x1000, 0x1, 0xc, 0x619, 0x8, 0x1e, 0x0, 0x9, 0x1, 0x62f86346, 0x3472, 0x1ff, 0x81, 0x56f, 0x3ff, 0x7, 0x7, 0x3, 0x4, 0x203b, 0xfff, 0x7, 0xe85, 0x6, 0x80000001, 0x63c3, 0x3, 0x7, 0x8, 0x4, 0x0, 0x20, 0x6, 0x7, 0x2, 0x1a54, 0x7, 0x70000000, 0xfffff3b5, 0x9, 0x6, 0x0, 0x1, 0x7, 0xb42, 0x2, 0x415bc109, 0x101, 0x4530359f, 0x4, 0x0, 0x8, 0x8, 0x3, 0x70a, 0x8, 0x7fffffff, 0x5, 0x5b3b, 0x8fc, 0x61, 0x0, 0xfffffffa, 0x2a59, 0x4f75, 0x3, 0x8, 0xffff2db4, 0x1, 0xfff, 0x31, 0x0, 0xfffff801, 0x38000, 0x1f, 0x2, 0x8, 0x9, 0x9, 0x9, 0xfffffff9, 0x3, 0x8, 0x800, 0x80, 0x1f, 0x1ff, 0x2, 0x7, 0x8, 0x1ff, 0xffffcec4, 0x4, 0x4043, 0xd1, 0x1ff, 0x2e, 0x0, 0x3, 0x3741, 0x1f, 0x621, 0x3471, 0x401, 0x4d, 0x1, 0xffffffff, 0x4, 0x4, 0x0, 0x7, 0x858, 0x6ffa, 0x4, 0x0, 0x9, 0xfffffffe, 0x4, 0x0, 0x4, 0x9, 0x8, 0x81, 0x7, 0xff, 0x8, 0x1f, 0x10001, 0x20, 0x8001, 0x5, 0x73, 0x10001, 0x3d8, 0x99c, 0x800, 0x5, 0xfffffff7, 0x2, 0x0, 0xffff, 0x90, 0x3, 0x7ff, 0x8, 0x0, 0x8, 0x10001, 0x2, 0x5, 0x200, 0x1, 0x7, 0x6, 0xffff, 0x1, 0x5, 0xf61, 0x9, 0x20, 0x7, 0x1, 0x2, 0x80000001, 0x7a, 0x4, 0x26, 0x4, 0x5, 0x5, 0x3f, 0x53b2, 0xa4ce, 0x3, 0x80000001, 0x8, 0x8001, 0xba, 0x2, 0x6, 0x8, 0x50, 0x6, 0x8001, 0x4, 0x5, 0x6, 0x9, 0x80000000, 0x511, 0x0, 0x100, 0x80000001, 0x1000, 0x6, 0x80000001, 0x2, 0xc477, 0x4, 0x7fffffff, 0x80000000, 0x2, 0x8, 0x20, 0x100, 0x400, 0xd456, 0x7490, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x9, 0x5, 0x6, 0x3f, 0xffffffff, 0x7, 0xe65, 0x9, 0x8, 0x2, 0x2fe1, 0x81, 0x8000, 0xcf, 0x5, 0x2, 0x9, 0x2, 0x1, 0xffffffff, 0x8, 0x4, 0x8001, 0x1, 0xffff708e, 0x6, 0x3, 0x1000, 0x3, 0x0, 0x400, 0x8, 0x6, 0x2, 0x0, 0x20, 0x6, 0x1, 0x4, 0x5, 0x6, 0x7fff, 0x4, 0x20, 0x40, 0x818, 0x3, 0x8, 0xef8, 0x65, 0x6, 0x5, 0x3ff, 0x8, 0x7, 0x4, 0xfffffffa, 0x6, 0x7404, 0xa2, 0xfffffffc, 0xffff, 0x3, 0x80000001, 0x3, 0xff, 0x1, 0x0, 0xcfb, 0x1000, 0x81, 0x80000001, 0x8001, 0x2, 0x10001, 0x7f7, 0x401, 0x3ff, 0x5, 0x2, 0x7f7, 0x80000000, 0x8, 0x7, 0xfffff7a9, 0x7, 0x7fff, 0x8fe6, 0x4, 0x1ff, 0x3, 0x0, 0x1, 0x11, 0x3f, 0x1, 0x8000, 0x1000, 0x1, 0x46, 0xff, 0x2, 0xfae, 0x800, 0x5, 0xb90, 0x1, 0x7, 0x3d, 0xf6, 0x0, 0x79d7, 0x3, 0x8000, 0x9, 0xf3b0, 0x5, 0x101, 0x8000, 0x2, 0x0, 0x3, 0xff, 0x101, 0x7f, 0x7, 0x80000001, 0x5, 0xc12, 0x80000001, 0x7ff, 0x9, 0x7, 0x3, 0x7ff, 0x9, 0x10000, 0x101, 0x95, 0x6, 0x6, 0xc21, 0x6, 0x0, 0xcf, 0x9, 0x286, 0x4, 0x8001, 0x9, 0x2, 0x7, 0xff, 0x100, 0x80000000, 0x3000000, 0x1, 0xff, 0x8, 0x5, 0x101, 0x2, 0x101, 0x2, 0x7, 0x10001, 0x5, 0x440, 0x4, 0x6, 0x288, 0x8, 0x3, 0xffffffff, 0x9, 0x0, 0x4, 0x0, 0x9, 0x100, 0x1ff, 0x8, 0x1, 0xcf3, 0x5, 0x2, 0x1, 0x1, 0x100, 0x8b, 0x1000, 0x1, 0x370, 0x101, 0x5, 0xfffffffd, 0x6, 0x8000, 0xfff, 0x7f, 0x0, 0x6, 0x9, 0x0, 0x5, 0x55, 0x7, 0x9, 0x8001, 0x0, 0x6, 0x7d, 0x100, 0x9605, 0x8000, 0x7, 0x8, 0x3, 0x8, 0x9, 0x5, 0x100, 0x2, 0x40, 0x50c, 0x0, 0x7, 0x2, 0x7, 0x7ff, 0x10001, 0xa4ef, 0x8, 0x1, 0x8, 0x1, 0x400, 0xffffff00, 0x3, 0xc8, 0x7, 0x2, 0x5, 0x5, 0x3ff, 0x3f, 0x81, 0x7, 0x104, 0x1, 0x5, 0x5, 0x9]}]}, @TCA_RSVP_POLICE={0x444, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x3ff, 0x0, 0x1, 0x2, 0x4, 0x7, 0xc329, 0x1, 0x2d89, 0x9b85, 0x3, 0x7, 0x20, 0x101, 0x2, 0x101, 0x4, 0x5, 0x2, 0x538, 0x38, 0xd6, 0xc8, 0x216, 0x1, 0x200, 0x47, 0x2c7, 0x100, 0x2d4, 0x8001, 0x3ff, 0x6, 0xeacf, 0x0, 0x705, 0x6d6f, 0x9, 0x5, 0x0, 0xffffff80, 0x8, 0xfffffbff, 0x2, 0x8, 0xffffffff, 0x6, 0x8000, 0x9, 0x5, 0x2, 0x5, 0x75ab, 0xffff, 0x7ff, 0x8, 0x0, 0x7fff, 0x5, 0x70000000, 0x0, 0x1, 0x5, 0x3, 0x3ff, 0x57b0, 0x81, 0x80000001, 0x1, 0x9, 0xff, 0xfffffffb, 0x6, 0x338, 0x1f, 0xab74, 0x9, 0x1, 0x3, 0x4, 0x4, 0x97c, 0x101, 0x1, 0x19b5, 0x100, 0x93, 0x4, 0x8, 0x2, 0xfffffff8, 0x7, 0x3, 0x4, 0x8001, 0x4, 0x1f, 0x8, 0x2, 0x8001, 0x5, 0x3ff, 0x40, 0x5, 0x7, 0x8001, 0x3ff, 0x1, 0x9, 0x7, 0x8, 0x9, 0x1, 0x0, 0x49a6, 0xffff, 0x1, 0x0, 0x8, 0x2, 0x2, 0x2, 0x6, 0x40, 0x7, 0x13, 0x8, 0x0, 0x7, 0x4, 0x6, 0x4, 0x9, 0x81, 0x6, 0x8, 0x1, 0x2d8, 0xfff, 0x5, 0x6, 0x401, 0x2, 0x9, 0x4, 0x2, 0x10000, 0xb3, 0x8, 0x0, 0xde4c, 0x7fff, 0xd8, 0x7, 0xfffffff8, 0x1, 0x4, 0x1, 0x7ff, 0x7f, 0x5, 0x7, 0x7fff, 0x0, 0x1, 0xa4e0, 0x48, 0xfffffffe, 0x0, 0x12, 0xb26, 0x8, 0x4, 0x6, 0x38, 0x8, 0x479, 0x4, 0x7, 0x8001, 0x7ff, 0xffff065d, 0x5, 0x4, 0x3, 0x3, 0xfffffff7, 0x5, 0x3a5e7d0a, 0x1, 0x80000000, 0x8, 0x9, 0x1, 0x93b8, 0x8, 0xfffffffb, 0x1, 0x0, 0x5, 0x316, 0x9, 0x1, 0x8, 0x7, 0x7, 0x7, 0x6, 0x1ff, 0xfffffffb, 0x10000, 0x2, 0x1, 0x4, 0x10000, 0x3, 0x8000, 0xa8fe, 0x2c25, 0x0, 0x5, 0x9, 0x800, 0xa12b, 0x0, 0x6, 0x1000, 0x8000, 0x5, 0x4, 0x4b, 0x400, 0x6, 0x8, 0x3, 0x57cd985a, 0x8000, 0x6, 0x800, 0x3ff, 0x7, 0x2c, 0x4, 0x1, 0x1, 0x400, 0x4, 0xfff, 0x2, 0x2, 0x0, 0x5, 0x7, 0x6, 0x34940000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7e95, 0x20000000, 0x6, 0x2, 0x80000000, {0x4, 0x2, 0x2, 0x5, 0x2, 0x80000001}, {0x1, 0x2, 0x3, 0x7fff, 0x8, 0x4}, 0x6, 0x5, 0x5}}]}, @TCA_RSVP_DST={0x8, 0x2, @loopback}, @TCA_RSVP_POLICE={0xc28, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x7, 0x7f, 0x10001, 0x0, 0x5, 0xfffffffd, 0x1, 0x5, 0x0, 0x3, 0x8, 0xffffff87, 0x8000, 0x3ff, 0x38d7, 0x800, 0x20, 0xffffffff, 0x200, 0x40, 0x3ff, 0xfffffbff, 0x3ff, 0x2, 0x4, 0xffffffff, 0xffffffff, 0x3ff, 0x0, 0x10001, 0x4000000, 0x7ff, 0x7, 0x9, 0x1, 0x7f, 0x400, 0xe620, 0x7ff, 0x9, 0x480, 0x3, 0x8, 0x4, 0x4, 0x6, 0x9, 0x101, 0x2924, 0x3, 0x1f, 0xe2, 0x4, 0x4, 0x7, 0x20, 0xf848, 0x1, 0x9, 0x0, 0x5, 0xffff, 0x5, 0x7, 0x8, 0x9, 0x1ff, 0x9, 0x3ff, 0xfffffffc, 0xfff, 0x0, 0x0, 0x40, 0x0, 0x1, 0xb9, 0x8, 0x9, 0x8, 0x200, 0x8, 0x0, 0x7, 0x9, 0x4, 0x3, 0xdaf, 0x5, 0x0, 0x3, 0x8001, 0x3ff, 0x7ff, 0x8, 0x80, 0x0, 0x9, 0x0, 0x1f6, 0x3, 0x7, 0x8000, 0x5, 0x10000, 0xfffffffe, 0x38, 0xbb59, 0x8, 0x5, 0x1, 0x3f, 0x2, 0x5, 0xfffffffd, 0x9f6, 0x6, 0x7fff, 0x6, 0x8, 0xffffffff, 0x2, 0x3, 0x402, 0x80, 0x0, 0x0, 0x9, 0x6000, 0x10001, 0x100, 0x54a, 0x3, 0x0, 0x242d, 0x3ff, 0x797, 0xfffffff7, 0xc35, 0xc7f, 0xf2e, 0x3ff, 0x10001, 0x7fffffff, 0x5, 0x75480, 0xffffffff, 0x8001, 0xe8d, 0xffff, 0xfffffffd, 0xe51e, 0xb03, 0x7, 0x9, 0x8, 0xfffffffa, 0x2, 0x8, 0x3f, 0x8, 0x64a, 0x800, 0x3, 0x7, 0x335, 0x89000000, 0x4, 0x2, 0x401, 0x0, 0x7, 0x1, 0x0, 0x5, 0x9, 0xf7cc, 0x8001, 0x8, 0x8, 0x3ff, 0x0, 0x4, 0x80000000, 0x6, 0x400, 0x8, 0x4, 0x81, 0xfffffff9, 0x40, 0x3, 0x9, 0x9, 0x7, 0xbe, 0xffffffe0, 0x7, 0x0, 0x8000, 0xce, 0x0, 0xc1, 0x10000, 0xf8, 0x20, 0x8, 0x200, 0x100, 0x7, 0x4, 0x5, 0x5, 0x4, 0x3, 0x1ff, 0x689f, 0x8, 0xffffffc0, 0xe9b0106, 0xfff, 0x200, 0x5, 0x2, 0x3, 0x40, 0x1f, 0x48, 0x2, 0xffffffff, 0x8000, 0x8, 0x3, 0x4, 0x3ff, 0x7, 0x1000000, 0x100, 0xfff, 0x6, 0x5, 0x8, 0x0, 0x0, 0x200, 0x9, 0x3f, 0x5, 0x1, 0x7fff, 0x3ff, 0x1, 0x5, 0xffffff8f, 0x80000000]}, @TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x5, 0xffffffc0, 0x80, 0x0, 0x5, 0x7fff, 0x6, 0x4, 0x5, 0x7fffffff, 0x3, 0x3ff, 0x9, 0x5, 0x8, 0x8001, 0x80000000, 0x3, 0x1c08d7c4, 0x1, 0x3f, 0x2, 0x20bbc1fe, 0xa000000, 0x5, 0x0, 0x1, 0x3ff, 0x6, 0x7ff, 0x3, 0x80000000, 0x4, 0x6, 0x6, 0x400, 0x3, 0x115c0e08, 0x0, 0x200, 0x2, 0x3, 0x3, 0xe0, 0x9, 0x80000001, 0x7, 0x7, 0x7f, 0x4, 0x1, 0xffffff06, 0x80000000, 0x4, 0x81, 0x2, 0x9, 0x9, 0x6, 0x8, 0x1f, 0x80000001, 0x413, 0xffff, 0x0, 0x6, 0x6bc5, 0x76, 0x3, 0x5dd9, 0x4, 0x6, 0x6, 0x0, 0x3, 0x7, 0x9, 0xfffffff8, 0x763, 0x1, 0x8, 0x6, 0x7, 0xfff, 0x100, 0x5, 0x4, 0x6, 0x4, 0xfffff164, 0x80, 0x8, 0x1, 0x401, 0x7fffffff, 0x11, 0x1, 0xeab5, 0x80000000, 0x8001, 0x6, 0x6, 0x0, 0x2, 0x5, 0x1, 0x7, 0x3de5bc2b, 0x81, 0x9c6, 0x9, 0x4, 0xfffffff8, 0x5, 0x7, 0x0, 0x1000, 0x24e8, 0x8, 0x6, 0x6, 0x3, 0x3, 0x3ff, 0x3ff, 0x63b1054a, 0x8000, 0x2, 0x1ff, 0x1, 0x0, 0x5, 0x9, 0x3, 0x1, 0x3, 0x1, 0x6e80, 0x8000, 0x7, 0x8, 0x0, 0x2, 0x6, 0x1, 0x3ff, 0x8, 0x401, 0x100, 0x2, 0x6, 0x5, 0x2, 0xffff0000, 0xfffffff9, 0x1ff, 0x4, 0x2, 0x2, 0x7fffffff, 0x1000, 0x0, 0x0, 0x7, 0x7, 0x1, 0x4, 0x48, 0x1, 0x0, 0x3f, 0xfffffffb, 0x69f9, 0x1, 0x6, 0x8, 0x4, 0x2, 0x6, 0x7, 0x8000, 0x8, 0x5, 0x800, 0x5, 0x8001, 0x1, 0xffff, 0xc1, 0x3f, 0xbd78, 0x8, 0x4, 0x6, 0x1, 0x10001, 0x3ff, 0xa804, 0x9, 0x2, 0x0, 0x2, 0x3ff, 0x4, 0x6, 0x40, 0xffffffff, 0x3, 0x0, 0x5, 0x0, 0x6c000000, 0x8, 0x8, 0xfffffffe, 0xff4, 0x9, 0x5, 0x7, 0x40, 0x3ff, 0x1, 0x2, 0x9, 0xfffffbff, 0x2, 0x2, 0x7, 0x8, 0x3, 0x3, 0x400, 0x8, 0x4, 0x0, 0x4, 0x90d3, 0x2, 0x3, 0x3, 0x7, 0xffffffff, 0x4, 0x4, 0xff, 0xfff, 0x80, 0x5, 0xa60, 0x3, 0x0, 0x7, 0x10001, 0x1, 0x6ec]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xa0, 0x1ff, 0xfffffffb, 0x1f, 0x3, 0x5, 0x9, 0x8, 0x6, 0x47, 0x200, 0x56, 0x7, 0xffffffa2, 0x5, 0x1, 0x5, 0xfffffffa, 0x1, 0xba39, 0x8, 0x10000, 0x1000, 0xa1, 0x5, 0x824, 0x1, 0x148, 0x200, 0x3ff, 0xfa, 0x9, 0x0, 0x7, 0x1, 0x8, 0x47, 0x5, 0x80000000, 0x1, 0x87d0, 0x5, 0x54d, 0xe, 0x2, 0xfffff000, 0x8, 0x10001, 0x8, 0xffff8001, 0x7f0c, 0x6, 0x1, 0xff, 0xa2, 0x5f, 0x1, 0x8, 0x0, 0x8, 0x7, 0x1, 0x2, 0x65, 0x82, 0x0, 0x7fffffff, 0x9, 0x5c7, 0xe3d8, 0x9, 0x200, 0x1c94, 0x400, 0x0, 0xb64, 0x1ff, 0x8, 0x7, 0x6, 0x1, 0x5ee8, 0x25, 0xfffffffe, 0x8, 0x1, 0x6, 0x0, 0xfffffffe, 0x8000, 0x6, 0x10001, 0xa13, 0x1, 0xb41, 0x8000, 0x8001, 0xfff, 0x40, 0x9, 0x3, 0x5, 0x3ff, 0x0, 0x401, 0x7, 0x2, 0x5618, 0x7, 0x7, 0x3f, 0x1, 0xfffffff8, 0x25, 0x4, 0x7, 0x9, 0x7, 0x5, 0x200, 0x0, 0x7f, 0x1, 0xa421, 0x1, 0x9, 0x3, 0x100, 0x7, 0xffffffff, 0x8, 0xaed4, 0x6, 0x7, 0x8, 0x5a, 0xf64, 0x0, 0x3, 0x9, 0xfffffff9, 0x7fffffff, 0x7, 0x0, 0x8, 0x7, 0x3, 0x9, 0x0, 0x60, 0x40, 0x477, 0x1ff, 0x3, 0x0, 0x2, 0x10001, 0x3f, 0x7, 0x2, 0x6, 0x1, 0x2, 0x7fff, 0x7f, 0x727ac273, 0xfffffffd, 0x0, 0xfffffffa, 0x9, 0x1, 0x80000001, 0x4, 0xffffffe0, 0x7ff, 0x401, 0x8001, 0x2, 0x4, 0x5, 0x7, 0xffffffc0, 0x8001, 0x333, 0x7, 0x6, 0x6b4, 0x1, 0xa9d, 0x4, 0x101, 0x4, 0xa0, 0x3, 0x7ff, 0x7, 0x5, 0x0, 0x4, 0xbf4, 0x9, 0x2, 0x8e, 0x6, 0x5, 0x6, 0x97, 0x7, 0x7, 0x7f, 0xb47, 0x1, 0xffffbfe6, 0x8, 0x5, 0x0, 0x10000, 0x2, 0x3f, 0xfffffff8, 0x4, 0x6, 0xfffffffd, 0x2800000, 0x0, 0x5, 0x9, 0x7fff, 0x5, 0x8, 0x800, 0x4, 0x2, 0x3f, 0x8, 0x100, 0x179, 0x3, 0xe32, 0x3, 0x79, 0x34b, 0x1, 0x8, 0x5, 0x5769, 0x166, 0x2, 0xfffffffd, 0x80, 0x2, 0x7ff, 0xbe, 0x8fcf5dc]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x79d}]}]}}]}, 0x1958}}, 0x0)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil)
timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008862, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev}, 0x1c)
syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2016}}}, 0x7)
r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
lseek(r3, 0x0, 0x3)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000006100)=[0x0], 0x1})

3.891604602s ago: executing program 3 (id=1393):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[@ANYBLOB="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"/4281], &(0x7f0000000100)='GPL\x00'}, 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x34)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = dup(r1)
ioctl$PTP_EXTTS_REQUEST2(r2, 0x43403d05, &(0x7f0000000040))
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
syz_usb_connect(0x0, 0xf5, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x52, 0x62, 0xf, 0x40, 0x15e8, 0x9110, 0x2310, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe3, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x50, 0x0, 0x3, 0xd, 0x14, 0x78, 0x0, [], [{{0x9, 0x5, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xb5fdb4307799ef8e, 0x0, 0x1}]}}, {{0x9, 0x5, 0x81, 0x2}}, {{0x9, 0x5, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0xaf, 0x2, "5657f3888679ae71c58f91635f23704b713bf514de294e880c02c197ef46e0a85c2f4a8e045ed3e843a70a74b2947dc7bfae96cb6adaeb1b20d5e8fa0d2a1bccc0608ec802ca8acf9345390adb3fbccdf184701251d657420b75f99155d6403cd509a3f771ae7c323051f3852e2d7117ed43078ebf48b0a6be8b471b21346a8720c9fd6707ec50ed78163c4072eae28a88c61c6fe5d1f673c4523488efd08e2ca01aa94b98baae69ab611e0d30"}]}}]}}]}}]}}, 0x0)
r3 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\xb7AJ\n\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8\x1cXVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x62, 0x0, 0x0)
fcntl$setlease(r3, 0x400, 0x1)
ftruncate(r3, 0x0)
r4 = openat$cgroup_pressure(r0, &(0x7f0000000200)='memory.pressure\x00', 0x2, 0x0)
r5 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0)
splice(r4, &(0x7f0000000240)=0x2, r0, &(0x7f0000000280)=0x2, 0x7fffffff, 0x6)

2.847046342s ago: executing program 1 (id=1394):
r0 = socket$alg(0x26, 0x5, 0x0)
accept$alg(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

2.742514316s ago: executing program 2 (id=1395):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[@ANYBLOB="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"/4281], &(0x7f0000000100)='GPL\x00'}, 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x34)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = dup(r1)
ioctl$PTP_EXTTS_REQUEST2(r2, 0x43403d05, &(0x7f0000000040))
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
syz_usb_connect(0x0, 0xf5, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x52, 0x62, 0xf, 0x40, 0x15e8, 0x9110, 0x2310, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe3, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x50, 0x0, 0x3, 0xd, 0x14, 0x78, 0x0, [], [{{0x9, 0x5, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x1}]}}, {{0x9, 0x5, 0x81, 0x2}}, {{0x9, 0x5, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0xaf, 0x2, "5657f3888679ae71c58f91635f23704b713bf514de294e880c02c197ef46e0a85c2f4a8e045ed3e843a70a74b2947dc7bfae96cb6adaeb1b20d5e8fa0d2a1bccc0608ec802ca8acf9345390adb3fbccdf184701251d657420b75f99155d6403cd509a3f771ae7c323051f3852e2d7117ed43078ebf48b0a6be8b471b21346a8720c9fd6707ec50ed78163c4072eae28a88c61c6fe5d1f673c4523488efd08e2ca01aa94b98baae69ab611e0d30"}]}}]}}]}}]}}, 0x0)
r3 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\xb7AJ\n\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8\x1cXVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x62, 0x0, 0x0)
fcntl$setlease(r3, 0x400, 0x1)
ftruncate(r3, 0x0)
r4 = openat$cgroup_pressure(r0, &(0x7f0000000200)='memory.pressure\x00', 0x2, 0x0)
r5 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0)
splice(r4, &(0x7f0000000240)=0x2, r0, &(0x7f0000000280)=0x2, 0x7fffffff, 0x6)

2.11018014s ago: executing program 0 (id=1396):
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137)
r3 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x22020600)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x1, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r3], 0xfd, 0x5576, &(0x7f000000b000)="$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")
r4 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00')
setns(r4, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

1.753046423s ago: executing program 4 (id=1397):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0104000000000000000002000000400004803c0001800c0001007061796c6f6164002c000280080004400000000008000540000000000800034000000000080002400000000008000840010000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0)

1.488307954s ago: executing program 4 (id=1398):
listen(0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f80000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

1.223069374s ago: executing program 4 (id=1399):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0))
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000008c0)={0x5})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfffffffffffffffc}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffd000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$video4linux(&(0x7f0000001e00), 0xffffffff, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3015})
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)={0x0, 0x0, 0x1})
memfd_create(&(0x7f0000000180)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82d\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\xb2&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81<z\xf2\xe8\xf4\x93\xe6h\x97\x7f\xaf\xc5\x06g\fI\xa58\xf5\x18x\xc9\xb9\x03\t\x06\x96gf5\xb0\xc8\x86\x14\xe2\x01\x1f\x80\xe7Ol\xba\x93\xaa\x15\x87I7W\x87\xc4;p\xc5\x1e\"K5r\xec6\xac\xf0;\xf8 \xad\xc9\xf0\x16\xce\x17\xa1%f\x12\x80\x03N[qz\xf0q\xbd\xb8s\xe5>N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\x80Iy4\xa9\xf88C\xe3', 0x0)
unshare(0x2c020400)
epoll_create(0x101)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000080)={0x10001, <r7=>r5})
syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000000)={0x80000004})
msgget$private(0x0, 0x0)

29.643999ms ago: executing program 4 (id=1400):
r0 = socket$alg(0x26, 0x5, 0x0)
accept$alg(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

0s ago: executing program 3 (id=1401):
r0 = socket$alg(0x26, 0x5, 0x0)
accept$alg(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

kernel console output (not intermixed with test programs):

 T4239] usb 5-1: config 0 descriptor??
[  298.319871][ T6610] loop0: detected capacity change from 0 to 40427
[  298.355089][ T3637] device hsr_slave_0 left promiscuous mode
[  298.361415][ T6610] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  298.375290][ T3637] device hsr_slave_1 left promiscuous mode
[  298.385907][ T6610] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  298.396352][ T3595] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  298.402363][ T3637] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  298.428719][ T3637] batman_adv: batadv0: Removing interface: batadv_slave_0
[  298.435092][ T6610] F2FS-fs (loop0): invalid crc value
[  298.447110][ T3637] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  298.454579][ T3637] batman_adv: batadv0: Removing interface: batadv_slave_1
[  298.483262][ T3637] device bridge_slave_1 left promiscuous mode
[  298.505421][ T6610] F2FS-fs (loop0): Found nat_bits in checkpoint
[  298.512126][ T3637] bridge0: port 2(bridge_slave_1) entered disabled state
[  298.546593][ T4239] pegasus: probe of 5-1:0.80 failed with error -71
[  298.558983][ T3637] device bridge_slave_0 left promiscuous mode
[  298.566873][ T3637] bridge0: port 1(bridge_slave_0) entered disabled state
[  298.575117][ T4239] usb 5-1: USB disconnect, device number 12
[  298.689677][ T6610] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  298.698751][ T3637] device veth1_macvtap left promiscuous mode
[  298.705053][ T6610] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  298.713632][ T3637] device veth0_macvtap left promiscuous mode
[  298.739813][ T3637] device veth1_vlan left promiscuous mode
[  298.748881][ T3637] device veth0_vlan left promiscuous mode
[  298.766281][ T3564] Bluetooth: hci1: command tx timeout
[  298.945248][ T3595] usb 2-1: config 0 interface 0 has no altsetting 0
[  299.109184][ T6653] syz.0.598: attempt to access beyond end of device
[  299.109184][ T6653] loop0: rw=2049, sector=53248, nr_sectors = 408 limit=40427
[  299.693491][ T3560] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  300.333583][ T3547] syz-executor: attempt to access beyond end of device
[  300.333583][ T3547] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  300.680931][ T3758] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  300.736205][ T3595] usb 2-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=fe.99
[  300.745327][ T3595] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.753556][ T3595] usb 2-1: Product: syz
[  300.758652][ T3595] usb 2-1: Manufacturer: syz
[  300.791775][ T3637] bond1 (unregistering): Released all slaves
[  300.854661][ T3560] Bluetooth: hci1: command tx timeout
[  300.856313][ T3595] usb 2-1: config 0 descriptor??
[  300.893763][ T6666] loop4: detected capacity change from 0 to 1024
[  300.905174][ T3595] usb 2-1: can't set config #0, error -71
[  300.947600][ T3595] usb 2-1: USB disconnect, device number 7
[  301.043100][ T6666] hfsplus: cannot replace xattr
[  301.614956][ T3637] team0 (unregistering): Port device team_slave_1 removed
[  301.707973][ T3637] team0 (unregistering): Port device team_slave_0 removed
[  301.735623][ T6669] loop0: detected capacity change from 0 to 40427
[  301.743992][ T6669] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  301.752156][ T6669] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  301.773712][ T6669] F2FS-fs (loop0): invalid crc value
[  301.788691][ T6669] F2FS-fs (loop0): Found nat_bits in checkpoint
[  301.812895][ T3637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  301.840371][ T6669] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  301.853739][ T6669] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  301.895362][ T3637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  302.307551][ T6676] syz.0.602: attempt to access beyond end of device
[  302.307551][ T6676] loop0: rw=2049, sector=53248, nr_sectors = 408 limit=40427
[  302.580378][ T3637] bond0 (unregistering): Released all slaves
[  302.804572][ T3547] syz-executor: attempt to access beyond end of device
[  302.804572][ T3547] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  302.853294][   T33] hfsplus: b-tree write err: -5, ino 4
[  303.154265][ T6678] kvm [6677]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xa2
[  303.197669][ T6678] kvm [6677]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4081
[  303.244989][ T6678] kvm [6677]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4001
[  304.198492][ T6538] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  304.255049][ T6538] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  304.296799][ T6538] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  304.329192][ T6538] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  304.557671][   T22] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  304.575241][ T6681] loop4: detected capacity change from 0 to 40427
[  304.586930][ T6538] 8021q: adding VLAN 0 to HW filter on device bond0
[  304.610808][ T6681] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  304.640154][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  304.655872][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  304.666280][ T6681] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  304.675343][ T3564] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  304.687403][ T3564] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  304.696288][ T3559] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  304.698327][ T6681] F2FS-fs (loop4): invalid crc value
[  304.708274][ T6538] 8021q: adding VLAN 0 to HW filter on device team0
[  304.716308][ T3564] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  304.725279][ T3564] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  304.733057][ T3559] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  304.758182][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  304.788441][ T6681] F2FS-fs (loop4): Found nat_bits in checkpoint
[  304.797616][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  304.810758][ T3595] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.818069][ T3595] bridge0: port 1(bridge_slave_0) entered forwarding state
[  304.896401][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  304.929928][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  304.956479][   T22] usb 4-1: config 0 has an invalid interface number: 80 but max is 0
[  304.965379][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  304.973539][   T22] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  304.993726][ T3595] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.000970][ T3595] bridge0: port 2(bridge_slave_1) entered forwarding state
[  305.009541][   T22] usb 4-1: config 0 has no interface number 0
[  305.015676][ T6681] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  305.023314][   T22] usb 4-1: config 0 interface 80 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  305.043433][   T22] usb 4-1: config 0 interface 80 altsetting 0 has a duplicate endpoint with address 0x81, skipping
[  305.054637][ T6681] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  305.063376][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  305.086165][   T22] usb 4-1: config 0 interface 80 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  305.369844][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  305.379132][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  305.390408][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  305.400588][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  305.477028][   T22] usb 4-1: New USB device found, idVendor=15e8, idProduct=9110, bcdDevice=23.10
[  305.560681][ T6714] syz.4.607: attempt to access beyond end of device
[  305.560681][ T6714] loop4: rw=2049, sector=53248, nr_sectors = 408 limit=40427
[  305.655355][   T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.938108][ T6538] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  305.956550][   T22] usb 4-1: Product: syz
[  305.971177][   T22] usb 4-1: Manufacturer: syz
[  305.975823][   T22] usb 4-1: SerialNumber: syz
[  306.006182][ T6538] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  306.049333][   T22] usb 4-1: config 0 descriptor??
[  306.081508][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  306.107387][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  306.148742][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  306.155235][ T6703] loop0: detected capacity change from 0 to 40427
[  306.170886][ T6703] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  306.179585][ T6703] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  306.187036][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  306.204701][ T6703] F2FS-fs (loop0): invalid crc value
[  306.227394][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  306.244545][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  306.254171][ T6703] F2FS-fs (loop0): Found nat_bits in checkpoint
[  306.281997][ T3561] syz-executor: attempt to access beyond end of device
[  306.281997][ T3561] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  306.369633][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  306.378817][   T22] pegasus: probe of 4-1:0.80 failed with error -71
[  306.429813][   T22] usb 4-1: USB disconnect, device number 7
[  306.446923][ T6703] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  306.454040][ T6703] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  306.755002][ T6706] chnl_net:caif_netlink_parms(): no params data found
[  306.766557][ T3564] Bluetooth: hci3: command tx timeout
[  306.882482][ T6728] syz.0.611: attempt to access beyond end of device
[  306.882482][ T6728] loop0: rw=2049, sector=53248, nr_sectors = 408 limit=40427
[  307.299519][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  307.326621][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  307.370259][ T6538] 8021q: adding VLAN 0 to HW filter on device batadv0
[  307.405491][ T3547] syz-executor: attempt to access beyond end of device
[  307.405491][ T3547] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  307.636298][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  307.645262][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  307.677128][ T6706] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.684303][ T6706] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.716458][ T6706] device bridge_slave_0 entered promiscuous mode
[  307.741145][ T6706] bridge0: port 2(bridge_slave_1) entered blocking state
[  307.767529][ T6706] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.796879][ T6706] device bridge_slave_1 entered promiscuous mode
[  307.821508][ T6538] device veth0_vlan entered promiscuous mode
[  307.878547][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  307.888418][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  307.927050][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  307.935646][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  307.964804][ T6538] device veth1_vlan entered promiscuous mode
[  308.089547][ T6706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  308.150833][ T6706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  308.846425][ T3564] Bluetooth: hci3: command tx timeout
[  308.970688][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  308.979227][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  309.150914][ T6738] loop3: detected capacity change from 0 to 32768
[  309.152288][ T6706] team0: Port device team_slave_0 added
[  309.186378][ T6738] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.615 (6738)
[  309.218326][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  309.234155][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  309.258125][ T6538] device veth0_macvtap entered promiscuous mode
[  309.284507][ T6738] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  309.309803][ T6706] team0: Port device team_slave_1 added
[  309.326853][ T6538] device veth1_macvtap entered promiscuous mode
[  309.335096][ T6738] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  309.383385][ T6738] BTRFS info (device loop3): using free space tree
[  309.445745][ T6706] batman_adv: batadv0: Adding interface: batadv_slave_0
[  309.453554][ T6706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  309.483089][ T6706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  309.593247][ T6706] batman_adv: batadv0: Adding interface: batadv_slave_1
[  309.645609][ T6706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  309.671817][    C0] vkms_vblank_simulate: vblank timer overrun
[  310.007829][ T6738] BTRFS info (device loop3): enabling ssd optimizations
[  310.259782][ T6706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  310.351883][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  310.383259][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.426179][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  310.454260][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.475098][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  310.490801][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.506302][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  310.517404][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.535607][ T6778] overlayfs: unrecognized mount option "euid=00000000000000060929" or missing value
[  310.547413][ T6538] batman_adv: batadv0: Interface activated: batadv_slave_0
[  310.561458][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  310.576944][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  310.585549][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  310.595925][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  310.627255][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  310.647622][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.664010][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  310.675927][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.697931][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  310.708856][   T14] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  310.722460][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.732616][ T6538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  310.750268][ T6538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  310.764742][ T6538] batman_adv: batadv0: Interface activated: batadv_slave_1
[  310.802867][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  310.822400][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  310.852227][ T6538] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  310.873104][ T6538] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  310.892521][ T6538] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  310.919128][ T6538] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  310.936175][ T3564] Bluetooth: hci3: command tx timeout
[  310.954251][ T6751] loop4: detected capacity change from 0 to 40427
[  310.958773][ T6706] device hsr_slave_0 entered promiscuous mode
[  310.974565][ T6706] device hsr_slave_1 entered promiscuous mode
[  310.998610][ T6706] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  311.017735][ T6706] Cannot create hsr debugfs directory
[  311.046134][ T6751] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  311.053845][ T6751] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  311.088287][   T14] usb 4-1: config 0 interface 0 has no altsetting 0
[  311.094891][ T6751] F2FS-fs (loop4): invalid crc value
[  311.169924][ T6751] F2FS-fs (loop4): Found nat_bits in checkpoint
[  311.243328][ T3637] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.266403][   T14] usb 4-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=fe.99
[  311.288655][   T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.306181][   T14] usb 4-1: Product: syz
[  311.310558][   T14] usb 4-1: Manufacturer: syz
[  311.315237][   T14] usb 4-1: SerialNumber: syz
[  311.341614][   T14] usb 4-1: config 0 descriptor??
[  311.346195][ T6751] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  311.360994][ T6751] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  311.489656][   T14] usb 4-1: can't set config #0, error -71
[  311.512508][ T3637] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.533587][   T14] usb 4-1: USB disconnect, device number 8
[  311.597498][ T5727] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  311.624549][ T6799] netlink: 28 bytes leftover after parsing attributes in process `syz.0.618'.
[  311.842885][ T3637] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.891363][ T3657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  311.904376][ T3657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  311.989623][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  312.073051][ T6806] syz.4.616: attempt to access beyond end of device
[  312.073051][ T6806] loop4: rw=2049, sector=53248, nr_sectors = 408 limit=40427
[  312.268545][ T3637] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.363672][ T6811] loop0: detected capacity change from 0 to 1024
[  312.408391][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  312.429858][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  312.472653][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  312.500663][ T6811] hfsplus: cannot replace xattr
[  313.006270][ T3564] Bluetooth: hci3: command tx timeout
[  313.096948][ T3659] hfsplus: b-tree write err: -5, ino 4
[  313.801406][ T6818] loop2: detected capacity change from 0 to 32768
[  313.815624][ T6706] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  313.874670][ T6706] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  313.888890][ T3560] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  313.899183][ T3560] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  313.907398][ T3560] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  313.918221][ T3560] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  313.925849][ T3560] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  313.935416][ T3560] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  314.214445][ T6706] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  314.250591][ T6706] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  314.434228][ T3561] syz-executor: attempt to access beyond end of device
[  314.434228][ T3561] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  314.812629][ T3637] device hsr_slave_0 left promiscuous mode
[  314.867101][ T3637] device hsr_slave_1 left promiscuous mode
[  314.924803][ T3637] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  314.944049][ T3637] batman_adv: batadv0: Removing interface: batadv_slave_0
[  315.026967][ T3637] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  315.034457][ T3637] batman_adv: batadv0: Removing interface: batadv_slave_1
[  315.059936][ T3637] device bridge_slave_1 left promiscuous mode
[  315.096283][ T3637] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.127714][ T3637] device bridge_slave_0 left promiscuous mode
[  315.134557][ T3637] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.730567][ T3637] device veth1_macvtap left promiscuous mode
[  315.799458][ T3637] device veth0_macvtap left promiscuous mode
[  315.873096][ T3637] device veth1_vlan left promiscuous mode
[  315.965659][ T3637] device veth0_vlan left promiscuous mode
[  315.972167][ T3564] Bluetooth: hci5: command tx timeout
[  316.158317][ T6853] overlayfs: unrecognized mount option "euid=00000000000000060929" or missing value
[  316.191314][ T3637] bond1 (unregistering): Released all slaves
[  316.956543][ T3637] team0 (unregistering): Port device team_slave_1 removed
[  316.997736][ T3637] team0 (unregistering): Port device team_slave_0 removed
[  317.042725][ T3637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  317.084390][ T3637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  317.097768][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  317.104568][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  317.496379][ T3637] bond0 (unregistering): Released all slaves
[  317.902239][ T6706] 8021q: adding VLAN 0 to HW filter on device bond0
[  317.959686][ T5366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  317.969246][ T5366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  317.981184][ T6706] 8021q: adding VLAN 0 to HW filter on device team0
[  318.032639][ T5366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  318.044624][ T5366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  318.056512][ T3564] Bluetooth: hci5: command tx timeout
[  318.063638][ T5366] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.070854][ T5366] bridge0: port 1(bridge_slave_0) entered forwarding state
[  318.090797][ T5366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  318.102398][ T5366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  318.115771][ T5366] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.122996][ T5366] bridge0: port 2(bridge_slave_1) entered forwarding state
[  318.142184][ T5366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  318.150402][   T14] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  318.201764][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  318.210795][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  318.231925][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  318.248352][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  318.296999][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  318.343186][ T6832] chnl_net:caif_netlink_parms(): no params data found
[  318.385582][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  318.400351][ T5685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  318.521913][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  318.526612][   T14] usb 5-1: config 0 has an invalid interface number: 80 but max is 0
[  318.538880][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  318.552120][ T6706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  318.565049][   T14] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  318.565781][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  318.583715][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  318.592946][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  318.634938][   T14] usb 5-1: config 0 has no interface number 0
[  318.665281][   T14] usb 5-1: config 0 interface 80 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  318.695855][   T14] usb 5-1: config 0 interface 80 altsetting 0 has a duplicate endpoint with address 0x81, skipping
[  318.753054][   T14] usb 5-1: config 0 interface 80 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  318.767934][ T6880] loop0: detected capacity change from 0 to 40427
[  318.828634][ T6880] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  318.873340][ T6832] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.892970][ T6832] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.934382][ T6832] device bridge_slave_0 entered promiscuous mode
[  318.941161][ T6880] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  318.949932][   T14] usb 5-1: New USB device found, idVendor=15e8, idProduct=9110, bcdDevice=23.10
[  318.969054][ T6832] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.976362][   T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.984922][   T14] usb 5-1: Product: syz
[  318.992942][ T6832] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.000661][   T14] usb 5-1: Manufacturer: syz
[  319.005607][   T14] usb 5-1: SerialNumber: syz
[  319.012599][ T6832] device bridge_slave_1 entered promiscuous mode
[  319.019822][ T6880] F2FS-fs (loop0): invalid crc value
[  319.032475][   T14] usb 5-1: config 0 descriptor??
[  319.054406][ T6880] F2FS-fs (loop0): Found nat_bits in checkpoint
[  319.104144][ T6832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  319.131087][ T6832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  319.199700][ T6880] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  319.212364][ T6880] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  319.325620][ T6832] team0: Port device team_slave_0 added
[  319.354003][ T6832] team0: Port device team_slave_1 added
[  319.376476][   T14] pegasus: probe of 5-1:0.80 failed with error -71
[  319.427545][   T14] usb 5-1: USB disconnect, device number 13
[  319.722405][ T6903] syz.0.629: attempt to access beyond end of device
[  319.722405][ T6903] loop0: rw=2049, sector=53248, nr_sectors = 408 limit=40427
[  320.136658][ T3564] Bluetooth: hci5: command tx timeout
[  320.318377][ T3547] syz-executor: attempt to access beyond end of device
[  320.318377][ T3547] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  320.333733][ T6890] loop2: detected capacity change from 0 to 40427
[  320.346585][ T6890] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  320.359945][ T5366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  320.368903][ T6890] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  320.386539][ T5366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  320.394712][ T6832] batman_adv: batadv0: Adding interface: batadv_slave_0
[  320.412895][ T6832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  320.443195][ T6890] F2FS-fs (loop2): invalid crc value
[  320.470587][ T6832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  320.519167][ T6706] 8021q: adding VLAN 0 to HW filter on device batadv0
[  320.528068][ T6890] F2FS-fs (loop2): Found nat_bits in checkpoint
[  320.550086][ T6832] batman_adv: batadv0: Adding interface: batadv_slave_1
[  320.567091][ T6832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  320.616212][ T6832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  320.740300][ T5366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  320.750082][ T5366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  320.753475][ T6890] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  320.779489][ T6890] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  320.831725][ T6832] device hsr_slave_0 entered promiscuous mode
[  320.876750][ T6832] device hsr_slave_1 entered promiscuous mode
[  320.899095][ T6832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  320.969164][ T6832] Cannot create hsr debugfs directory
[  321.002500][ T6706] device veth0_vlan entered promiscuous mode
[  321.030784][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  321.062321][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  321.289464][ T6911] syz.2.632: attempt to access beyond end of device
[  321.289464][ T6911] loop2: rw=2049, sector=53248, nr_sectors = 408 limit=40427
[  321.640711][ T6706] device veth1_vlan entered promiscuous mode
[  321.780675][ T6706] device veth0_macvtap entered promiscuous mode
[  321.837818][ T6706] device veth1_macvtap entered promiscuous mode
[  321.903711][ T6538] syz-executor: attempt to access beyond end of device
[  321.903711][ T6538] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  321.929797][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  321.947108][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  321.955605][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  321.987195][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  321.995541][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  322.039218][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  322.060382][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  322.127596][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  322.138469][ T6706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  322.169921][ T6706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.196828][ T6905] loop4: detected capacity change from 0 to 40427
[  322.219252][ T3560] Bluetooth: hci5: command tx timeout
[  322.226279][ T6905] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  322.234149][ T6905] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  322.261242][ T6706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  322.272604][ T6706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.282709][ T6706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  322.293534][ T6706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.313690][ T6917] overlayfs: unrecognized mount option "euid=00000000000000060929" or missing value
[  322.322976][ T6706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  322.347947][ T6905] F2FS-fs (loop4): invalid crc value
[  322.354359][ T6706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.374524][ T6905] F2FS-fs (loop4): Found nat_bits in checkpoint
[  322.382822][ T6706] batman_adv: batadv0: Interface activated: batadv_slave_0
[  322.414086][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  322.451518][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  322.567675][ T6706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  322.589550][ T6905] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  322.590966][ T6706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.614325][ T6706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  322.626281][ T6905] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  322.636849][ T6706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.646986][ T6706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  322.657803][ T6706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.668031][ T6706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  322.683058][ T6706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.715404][ T6706] batman_adv: batadv0: Interface activated: batadv_slave_1
[  322.782033][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  322.803149][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  322.828869][ T6706] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  322.842154][ T6706] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  322.859661][ T6706] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  322.873355][ T6706] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  324.533880][ T6832] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.602042][ T6935] netlink: 28 bytes leftover after parsing attributes in process `syz.2.638'.
[  324.694954][ T6832] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.742681][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.773426][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.926503][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  325.124205][ T6832] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.194727][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  325.215279][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.310489][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  325.409078][ T6832] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.558877][ T6951] loop1: detected capacity change from 0 to 16
[  325.593915][ T6951] erofs: (device loop1): mounted with root inode @ nid 36.
[  325.622595][ T3560] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[  325.652917][ T6951] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  325.728664][   T27] audit: type=1800 audit(1719826373.307:46): pid=6951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.609" name="file3" dev="loop1" ino=89 res=0 errno=0
[  325.728941][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.609'.
[  325.766212][ T4239] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  325.872729][ T6832] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  325.886997][ T6832] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  325.971062][ T6832] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  325.996744][ T6832] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  326.164508][ T6947] loop0: detected capacity change from 0 to 40427
[  326.167903][ T6832] 8021q: adding VLAN 0 to HW filter on device bond0
[  326.171766][ T4239] usb 3-1: config 0 has an invalid interface number: 80 but max is 0
[  326.186408][ T4239] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  326.204969][ T6947] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  326.216300][ T5685] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  326.225323][ T6947] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  326.227175][ T4239] usb 3-1: config 0 has no interface number 0
[  326.242875][ T4239] usb 3-1: config 0 interface 80 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  326.244050][ T6947] F2FS-fs (loop0): invalid crc value
[  326.258248][ T4239] usb 3-1: config 0 interface 80 altsetting 0 has a duplicate endpoint with address 0x81, skipping
[  326.270025][ T4239] usb 3-1: config 0 interface 80 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  326.273564][ T6947] F2FS-fs (loop0): Found nat_bits in checkpoint
[  326.308256][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  326.317532][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  326.329201][ T6832] 8021q: adding VLAN 0 to HW filter on device team0
[  326.343587][ T6947] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  326.343668][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  326.351524][ T6947] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  326.370805][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  326.397019][ T3292] bridge0: port 1(bridge_slave_0) entered blocking state
[  326.404166][ T3292] bridge0: port 1(bridge_slave_0) entered forwarding state
[  326.419480][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  326.428192][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  326.438213][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  326.447464][ T6394] bridge0: port 2(bridge_slave_1) entered blocking state
[  326.454667][ T6394] bridge0: port 2(bridge_slave_1) entered forwarding state
[  326.566486][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  326.618741][ T4239] usb 3-1: New USB device found, idVendor=15e8, idProduct=9110, bcdDevice=23.10
[  326.628991][ T4239] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.637173][ T4239] usb 3-1: Product: syz
[  326.641369][ T4239] usb 3-1: Manufacturer: syz
[  326.645996][ T4239] usb 3-1: SerialNumber: syz
[  326.661793][ T4239] usb 3-1: config 0 descriptor??
[  326.665062][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  326.666957][ T5685] usb 2-1: Using ep0 maxpacket: 8
[  326.685419][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  326.817092][ T6962] syz.0.641: attempt to access beyond end of device
[  326.817092][ T6962] loop0: rw=2049, sector=53248, nr_sectors = 408 limit=40427
[  326.939965][ T5685] usb 2-1: config index 0 descriptor too short (expected 35346, got 18)
[  327.156794][ T5685] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  327.216438][ T4239] pegasus: probe of 3-1:0.80 failed with error -71
[  327.250175][ T4239] usb 3-1: USB disconnect, device number 7
[  327.386456][ T5685] usb 2-1: New USB device found, idVendor=04cd, idProduct=0099, bcdDevice=95.0d
[  327.397691][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  327.401395][ T5685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.413290][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  327.439234][ T5685] usb 2-1: Product: syz
[  327.443458][ T5685] usb 2-1: Manufacturer: syz
[  327.459962][ T5685] usb 2-1: SerialNumber: syz
[  327.467194][ T5685] usb 2-1: config 0 descriptor??
[  327.483244][ T3547] syz-executor: attempt to access beyond end of device
[  327.483244][ T3547] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  327.492524][ T6966] overlayfs: unrecognized mount option "euid=00000000000000060929" or missing value
[  327.610752][ T3637] device hsr_slave_0 left promiscuous mode
[  327.646227][ T3637] device hsr_slave_1 left promiscuous mode
[  327.657779][ T3637] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  327.686167][ T3637] batman_adv: batadv0: Removing interface: batadv_slave_0
[  327.720062][ T3637] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  327.756707][ T3637] batman_adv: batadv0: Removing interface: batadv_slave_1
[  327.764723][ T6951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  327.813963][ T3637] device bridge_slave_1 left promiscuous mode
[  327.820134][ T6951] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  327.848778][ T3637] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.880927][ T4239] usb 2-1: USB disconnect, device number 8
[  327.881229][ T3637] device bridge_slave_0 left promiscuous mode
[  327.917375][ T3637] bridge0: port 1(bridge_slave_0) entered disabled state
[  328.043292][ T3637] device veth1_macvtap left promiscuous mode
[  328.056328][ T3637] device veth0_macvtap left promiscuous mode
[  328.072757][ T3637] device veth1_vlan left promiscuous mode
[  328.093023][ T3637] device veth0_vlan left promiscuous mode
[  328.900605][ T6951] syz.1.609 (6951) used greatest stack depth: 19280 bytes left
[  329.564231][ T6971] loop2: detected capacity change from 0 to 40427
[  329.607319][ T6971] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  329.627523][ T6971] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  329.643272][ T6971] F2FS-fs (loop2): invalid crc value
[  329.690741][ T6971] F2FS-fs (loop2): Found nat_bits in checkpoint
[  329.797387][ T6971] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  329.804808][ T6971] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  330.155850][ T3637] team0 (unregistering): Port device team_slave_1 removed
[  330.204612][ T3637] team0 (unregistering): Port device team_slave_0 removed
[  330.264620][ T6988] syz.2.648: attempt to access beyond end of device
[  330.264620][ T6988] loop2: rw=2049, sector=53248, nr_sectors = 408 limit=40427
[  330.284919][ T3637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  330.370143][ T3637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  330.690261][ T6538] syz-executor: attempt to access beyond end of device
[  330.690261][ T6538] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  331.049376][ T3637] bond0 (unregistering): Released all slaves
[  331.166218][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  331.178150][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  331.187426][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  331.196400][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  331.213837][ T6832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  331.232626][ T6832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  331.244027][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  331.254439][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  331.673347][ T6999] netlink: 28 bytes leftover after parsing attributes in process `syz.2.650'.
[  332.680412][ T7008] Zero length message leads to an empty skb
[  332.812970][ T6832] 8021q: adding VLAN 0 to HW filter on device batadv0
[  332.853907][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  332.865326][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  332.906551][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  332.925603][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  332.944294][ T7012] overlayfs: unrecognized mount option "euid=00000000000000060929" or missing value
[  332.987619][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  333.003659][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  333.027670][ T6832] device veth0_vlan entered promiscuous mode
[  333.048928][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  333.064921][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  333.084917][ T6832] device veth1_vlan entered promiscuous mode
[  333.208186][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  333.222705][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  333.247809][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  333.287700][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  333.336468][ T6832] device veth0_macvtap entered promiscuous mode
[  333.343752][   T14] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  333.370289][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  333.406473][ T6832] device veth1_macvtap entered promiscuous mode
[  334.006610][ T6832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  334.072837][ T6832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.126661][ T6832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  334.181656][ T6832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.192501][ T6832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  334.203720][ T6832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.213708][ T6832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  334.224417][ T6832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.236146][ T6832] batman_adv: batadv0: Interface activated: batadv_slave_0
[  334.256235][ T5366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  334.265169][ T5366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  334.288315][ T6832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  334.317626][ T6832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.346134][ T6832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  334.366521][ T6832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.396345][ T6832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  334.416340][   T14] usb 3-1: config 0 has an invalid interface number: 80 but max is 0
[  334.434673][   T14] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  334.443537][ T6832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.476140][   T14] usb 3-1: config 0 has no interface number 0
[  334.482309][   T14] usb 3-1: config 0 interface 80 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  334.492197][ T6832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  334.526139][ T6832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  334.536226][   T14] usb 3-1: config 0 interface 80 altsetting 0 has a duplicate endpoint with address 0x81, skipping
[  334.557736][ T6832] batman_adv: batadv0: Interface activated: batadv_slave_1
[  334.564769][ T7007] loop1: detected capacity change from 0 to 40427
[  334.565333][   T14] usb 3-1: config 0 interface 80 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  334.589215][ T6832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  334.604082][ T7007] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  334.632691][ T7007] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  334.652388][ T6832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  334.661863][ T7007] F2FS-fs (loop1): invalid crc value
[  334.693222][ T6832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  334.708957][ T7007] F2FS-fs (loop1): Found nat_bits in checkpoint
[  334.733704][ T6832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  334.777783][ T5366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  334.797875][ T5366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  334.806475][   T14] usb 3-1: New USB device found, idVendor=15e8, idProduct=9110, bcdDevice=23.10
[  334.815556][   T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.843660][ T7007] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  334.854147][ T7007] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  334.864008][   T14] usb 3-1: Product: syz
[  334.886150][   T14] usb 3-1: Manufacturer: syz
[  334.907457][   T14] usb 3-1: SerialNumber: syz
[  335.002104][   T14] usb 3-1: config 0 descriptor??
[  335.288920][ T7028] syz.1.655: attempt to access beyond end of device
[  335.288920][ T7028] loop1: rw=2049, sector=53248, nr_sectors = 408 limit=40427
[  335.688709][ T3657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  335.736106][ T3657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  335.867355][ T6706] syz-executor: attempt to access beyond end of device
[  335.867355][ T6706] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  335.891509][ T7020] loop4: detected capacity change from 0 to 40427
[  335.909810][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  335.918112][ T3765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  335.940719][ T3765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  335.976432][ T7020] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  335.984960][ T7020] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  336.012070][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  336.026387][   T14] pegasus: probe of 3-1:0.80 failed with error -71
[  336.051108][   T14] usb 3-1: USB disconnect, device number 8
[  336.138922][ T7020] F2FS-fs (loop4): invalid crc value
[  336.204168][ T7020] F2FS-fs (loop4): Found nat_bits in checkpoint
[  336.271789][ T7022] loop0: detected capacity change from 0 to 40427
[  336.319289][ T7022] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  336.349140][ T7022] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  336.423441][ T7022] F2FS-fs (loop0): invalid crc value
[  336.437848][ T7020] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  336.445073][ T7020] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  336.522397][ T7022] F2FS-fs (loop0): Found nat_bits in checkpoint
[  336.930386][ T7042] syz.4.659: attempt to access beyond end of device
[  336.930386][ T7042] loop4: rw=2049, sector=53248, nr_sectors = 408 limit=40427
[  337.552935][ T3561] syz-executor: attempt to access beyond end of device
[  337.552935][ T3561] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  338.413830][ T7033] loop3: detected capacity change from 0 to 40427
[  338.447831][ T7033] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  338.455540][ T7033] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  338.546687][ T7033] F2FS-fs (loop3): invalid crc value
[  338.607996][ T7033] F2FS-fs (loop3): Found nat_bits in checkpoint
[  339.421145][ T7052] netlink: 28 bytes leftover after parsing attributes in process `syz.0.663'.
[  340.770080][ T7074] overlayfs: unrecognized mount option "euid=00000000000000060929" or missing value
[  341.096371][ T5366] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  341.486836][ T5366] usb 3-1: config 0 has an invalid interface number: 80 but max is 0
[  341.559781][ T5366] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  341.656812][ T5366] usb 3-1: config 0 has no interface number 0
[  341.663003][ T5366] usb 3-1: config 0 interface 80 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  341.736211][ T5366] usb 3-1: config 0 interface 80 altsetting 0 has a duplicate endpoint with address 0x81, skipping
[  341.822202][ T5366] usb 3-1: config 0 interface 80 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  342.026533][ T5366] usb 3-1: New USB device found, idVendor=15e8, idProduct=9110, bcdDevice=23.10
[  342.059759][ T7082] loop4: detected capacity change from 0 to 40427
[  342.061965][ T5366] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.089537][ T7082] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  342.089559][ T5366] usb 3-1: Product: syz
[  342.089579][ T5366] usb 3-1: Manufacturer: syz
[  342.132695][ T5366] usb 3-1: SerialNumber: syz
[  342.138442][ T7082] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  342.145340][ T5366] usb 3-1: config 0 descriptor??
[  342.187427][ T7082] F2FS-fs (loop4): invalid crc value
[  342.221108][ T7082] F2FS-fs (loop4): Found nat_bits in checkpoint
[  342.399501][ T7082] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  342.418445][ T7082] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  342.439229][ T3564] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[  342.476432][ T5366] pegasus: probe of 3-1:0.80 failed with error -71
[  342.594402][ T5366] usb 3-1: USB disconnect, device number 9
[  342.701196][ T3564] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  342.710100][ T3564] Bluetooth: hci3: Injecting HCI hardware error event
[  342.719270][ T3564] Bluetooth: hci3: hardware error 0x00
[  342.866567][ T7102] syz.4.672: attempt to access beyond end of device
[  342.866567][ T7102] loop4: rw=2049, sector=53248, nr_sectors = 408 limit=40427
[  343.465179][ T3561] syz-executor: attempt to access beyond end of device
[  343.465179][ T3561] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  343.493429][ T7090] loop3: detected capacity change from 0 to 40427
[  343.511727][ T7090] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  343.521855][ T7090] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  343.557337][ T7090] F2FS-fs (loop3): invalid crc value
[  343.580246][ T7090] F2FS-fs (loop3): Found nat_bits in checkpoint
[  343.600156][ T7088] loop0: detected capacity change from 0 to 40427
[  343.627127][ T7088] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  343.634832][ T7088] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  343.952724][ T7088] F2FS-fs (loop0): invalid crc value
[  344.062825][ T7088] F2FS-fs (loop0): Found nat_bits in checkpoint
[  344.107865][ T7090] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  344.150757][ T7090] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  344.844406][ T7121] syz.3.674: attempt to access beyond end of device
[  344.844406][ T7121] loop3: rw=2049, sector=53248, nr_sectors = 408 limit=40427
[  345.445040][ T6832] syz-executor: attempt to access beyond end of device
[  345.445040][ T6832] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  345.486396][ T3564] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  345.610637][ T7105] loop2: detected capacity change from 0 to 40427
[  345.650481][ T7105] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  345.676486][ T7105] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  345.707401][ T7105] F2FS-fs (loop2): invalid crc value
[  345.763813][ T7105] F2FS-fs (loop2): Found nat_bits in checkpoint
[  345.957675][ T7105] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  345.964826][ T7105] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  345.978129][ T7131] netlink: 28 bytes leftover after parsing attributes in process `syz.1.680'.
[  346.993964][ T7135] syz.2.677: attempt to access beyond end of device
[  346.993964][ T7135] loop2: rw=2049, sector=53248, nr_sectors = 408 limit=40427
[  347.378281][ T7139] overlayfs: unrecognized mount option "euid=00000000000000060929" or missing value
[  347.521687][ T6538] syz-executor: attempt to access beyond end of device
[  347.521687][ T6538] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  348.641434][ T7129] loop4: detected capacity change from 0 to 40427
[  348.679422][ T7129] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  348.730847][ T7129] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  348.773935][ T7129] F2FS-fs (loop4): invalid crc value
[  348.811662][ T7129] F2FS-fs (loop4): Found nat_bits in checkpoint
[  349.016678][ T4239] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  349.386407][ T4239] usb 4-1: config 0 has an invalid interface number: 80 but max is 0
[  349.404795][ T4239] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  349.435367][ T4239] usb 4-1: config 0 has no interface number 0
[  349.454769][ T4239] usb 4-1: config 0 interface 80 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  349.502204][ T4239] usb 4-1: config 0 interface 80 altsetting 0 has a duplicate endpoint with address 0x81, skipping
[  349.632679][ T4239] usb 4-1: config 0 interface 80 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  351.836333][ T4239] usb 4-1: New USB device found, idVendor=15e8, idProduct=9110, bcdDevice=23.10
[  351.864912][ T4239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.944765][ T4239] usb 4-1: Product: syz
[  351.976906][ T4239] usb 4-1: config 0 descriptor??
[  352.002838][ T4239] usb 4-1: can't set config #0, error -71
[  352.031052][ T4239] usb 4-1: USB disconnect, device number 9
[  352.052756][ T7184] overlayfs: unrecognized mount option "euid=00000000000000060929" or missing value
[  352.922207][ T7182] loop3: detected capacity change from 0 to 40427
[  352.945238][ T7191] netlink: 28 bytes leftover after parsing attributes in process `syz.4.696'.
[  352.960257][ T7182] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  352.989176][ T7182] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  353.004370][ T7182] F2FS-fs (loop3): invalid crc value
[  353.014587][ T7180] loop1: detected capacity change from 0 to 40427
[  353.027785][ T7182] F2FS-fs (loop3): Found nat_bits in checkpoint
[  353.052773][ T7180] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  353.093492][ T7180] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  353.127954][ T7180] F2FS-fs (loop1): invalid crc value
[  353.156314][ T7180] F2FS-fs (loop1): Found nat_bits in checkpoint
[  353.236823][ T7182] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  353.244011][ T7182] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  353.476817][ T7180] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  353.500292][ T7180] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  354.144140][ T7205] syz.3.694: attempt to access beyond end of device
[  354.144140][ T7205] loop3: rw=2049, sector=53248, nr_sectors = 408 limit=40427
[  354.808240][ T7211] syz.1.693: attempt to access beyond end of device
[  354.808240][ T7211] loop1: rw=2049, sector=53248, nr_sectors = 408 limit=40427
[  355.468228][ T6832] syz-executor: attempt to access beyond end of device
[  355.468228][ T6832] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  355.521617][ T6706] syz-executor: attempt to access beyond end of device
[  355.521617][ T6706] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  355.802690][ T7209] loop4: detected capacity change from 0 to 32768
[  355.919509][ T5364] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  356.296216][ T5364] usb 3-1: config 0 has an invalid interface number: 80 but max is 0
[  356.310663][ T5364] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  356.338443][ T5364] usb 3-1: config 0 has no interface number 0
[  356.354868][ T5364] usb 3-1: config 0 interface 80 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  357.266117][ T5364] usb 3-1: config 0 interface 80 altsetting 0 has a duplicate endpoint with address 0x81, skipping
[  357.286155][ T5364] usb 3-1: config 0 interface 80 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  357.466441][ T5364] usb 3-1: New USB device found, idVendor=15e8, idProduct=9110, bcdDevice=23.10
[  357.492419][ T5364] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.561906][ T5364] usb 3-1: Product: syz
[  357.600422][ T5364] usb 3-1: Manufacturer: syz
[  357.826666][ T5364] usb 3-1: SerialNumber: syz
[  357.836764][ T5364] usb 3-1: config 0 descriptor??
[  358.676485][ T5364] pegasus: probe of 3-1:0.80 failed with error -71
[  358.715735][ T5364] usb 3-1: USB disconnect, device number 10
[  359.698570][ T7302] netlink: 28 bytes leftover after parsing attributes in process `syz.4.730'.
[  360.832617][ T7339] syz.3.746[7339] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  362.042626][ T7355] netlink: 28 bytes leftover after parsing attributes in process `syz.1.753'.
[  365.338273][ T7458] device syzkaller0 entered promiscuous mode
[  365.427259][ T7433] netlink: 28 bytes leftover after parsing attributes in process `syz.2.787'.
[  370.684615][ T7538] netlink: 88 bytes leftover after parsing attributes in process `syz.4.832'.
[  370.749978][ T7538] netlink: 16 bytes leftover after parsing attributes in process `syz.4.832'.
[  370.971879][ T7542] device batadv0 entered promiscuous mode
[  370.992276][ T7542] device vlan2 entered promiscuous mode
[  371.249887][ T7542] device batadv0 left promiscuous mode
[  371.323327][   T27] audit: type=1800 audit(1719826418.897:47): pid=7554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.838" name="file0" dev="sda1" ino=1997 res=0 errno=0
[  372.583207][ T7550] netlink: 28 bytes leftover after parsing attributes in process `syz.4.836'.
[  372.800752][ T7582] loop0: detected capacity change from 0 to 512
[  372.901338][ T7582] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  372.936792][ T7582] ext4 filesystem being mounted at /root/syzkaller.Yaxkn6/187/file0 supports timestamps until 2038 (0x7fffffff)
[  373.032151][ T7582] EXT4-fs error (device loop0): ext4_search_dir:1548: inode #2: block 3: comm syz.0.846: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0
[  373.101157][ T7592] device batadv0 entered promiscuous mode
[  373.126995][ T7592] device vlan2 entered promiscuous mode
[  373.193323][ T7592] device batadv0 left promiscuous mode
[  373.215051][ T3547] EXT4-fs (loop0): unmounting filesystem.
[  373.319095][ T7598] loop1: detected capacity change from 0 to 512
[  373.480264][ T7598] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  373.527929][ T7598] ext4 filesystem being mounted at /root/syzkaller.ZoSmtX/47/file0 supports timestamps until 2038 (0x7fffffff)
[  374.251984][ T6706] EXT4-fs (loop1): unmounting filesystem.
[  374.846547][ T7629] loop1: detected capacity change from 0 to 512
[  374.956931][ T7629] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  374.991969][ T7629] ext4 filesystem being mounted at /root/syzkaller.ZoSmtX/48/file0 supports timestamps until 2038 (0x7fffffff)
[  375.257895][ T6706] EXT4-fs (loop1): unmounting filesystem.
[  375.824132][ T7667] device batadv0 entered promiscuous mode
[  375.879647][ T7667] device vlan2 entered promiscuous mode
[  375.975400][ T7635] netlink: 28 bytes leftover after parsing attributes in process `syz.4.863'.
[  375.985335][ T7667] device batadv0 left promiscuous mode
[  377.281496][ T7700] loop2: detected capacity change from 0 to 512
[  377.439071][ T7700] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  377.469465][ T7700] ext4 filesystem being mounted at /root/syzkaller.RcfwFN/50/file0 supports timestamps until 2038 (0x7fffffff)
[  377.724303][ T6538] EXT4-fs (loop2): unmounting filesystem.
[  377.741426][ T7718] device batadv0 entered promiscuous mode
[  377.747529][ T7718] device vlan2 entered promiscuous mode
[  377.755590][ T7718] device batadv0 left promiscuous mode
[  378.528602][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  378.535372][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  378.768484][   T27] audit: type=1800 audit(1719826426.347:48): pid=7735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.895" name="file0" dev="sda1" ino=1978 res=0 errno=0
[  378.770000][ T7735] 9pnet: Unknown protocol version 9p2000.
[  378.861897][ T7737] loop1: detected capacity change from 0 to 512
[  378.917093][ T7737] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  379.006353][ T7737] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  379.044314][ T7737] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  379.142553][ T7737] EXT4-fs error (device loop1): __ext4_get_inode_loc:4495: comm syz.1.896: Invalid inode table block 0 in block_group 0
[  379.171093][ T7737] EXT4-fs (loop1): get root inode failed
[  379.183388][ T7737] EXT4-fs (loop1): mount failed
[  379.316395][ T7723] netlink: 28 bytes leftover after parsing attributes in process `syz.2.890'.
[  379.349801][ T7742] loop3: detected capacity change from 0 to 512
[  379.392390][ T7742] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349)
[  379.501240][ T7742] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a800e01c, mo2=0002]
[  379.655195][ T7742] System zones: 1-12
[  379.673183][ T7742] EXT4-fs (loop3): orphan cleanup on readonly fs
[  379.711860][ T7764] loop1: detected capacity change from 0 to 128
[  379.713015][ T7742] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.897: Inode bitmap for bg 0 marked uninitialized
[  380.247931][ T7742] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  380.428432][ T7742] EXT4-fs error (device loop3): ext4_map_blocks:607: inode #2: block 5: comm syz.3.897: lblock 0 mapped to illegal pblock 5 (length 1)
[  380.487114][ T7767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.907'.
[  380.611205][ T7742] EXT4-fs warning (device loop3): dx_probe:822: inode #2: lblock 0: comm syz.3.897: error -117 reading directory block
[  380.694159][ T7748] EXT4-fs error (device loop3): ext4_map_blocks:607: inode #2: block 5: comm syz.3.897: lblock 0 mapped to illegal pblock 5 (length 1)
[  380.752899][ T7748] EXT4-fs warning (device loop3): dx_probe:822: inode #2: lblock 0: comm syz.3.897: error -117 reading directory block
[  380.898752][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  381.189307][ T6832] EXT4-fs (loop3): unmounting filesystem.
[  381.209129][ T7799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.917'.
[  381.673291][ T7797] netlink: 28 bytes leftover after parsing attributes in process `syz.1.916'.
[  381.829541][ T7811] loop4: detected capacity change from 0 to 128
[  383.682996][ T7853] loop3: detected capacity change from 0 to 128
[  384.448086][   T27] audit: type=1326 audit(1719826431.997:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7854 comm="syz.2.936" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7595375b99 code=0x0
[  384.902072][   T27] audit: type=1800 audit(1719826432.077:50): pid=7869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.939" name="/" dev="fuse" ino=1 res=0 errno=0
[  385.321710][   T27] audit: type=1804 audit(1719826432.787:51): pid=7875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.940" name="/root/syzkaller.W1kKvx/175/file0" dev="sda1" ino=2001 res=1 errno=0
[  385.790230][ T7867] netlink: 28 bytes leftover after parsing attributes in process `syz.0.938'.
[  386.056745][   T27] audit: type=1800 audit(1719826433.637:52): pid=7900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.949" name="file0" dev="sda1" ino=1986 res=0 errno=0
[  387.143184][ T7910] loop2: detected capacity change from 0 to 128
[  387.606259][   T27] audit: type=1326 audit(1719826435.167:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.3.952" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94da375b99 code=0x0
[  389.754576][   T27] audit: type=1326 audit(1719826437.327:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7961 comm="syz.3.969" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94da375b99 code=0x0
[  390.465220][ T7948] netlink: 28 bytes leftover after parsing attributes in process `syz.4.963'.
[  392.266450][   T27] audit: type=1326 audit(1719826439.817:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7990 comm="syz.1.977" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d39575b99 code=0x0
[  394.078876][ T8027] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  394.472186][ T8032] netlink: 28 bytes leftover after parsing attributes in process `syz.3.986'.
[  394.508031][   T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.970395][   T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.950157][   T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.192921][   T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.029247][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1003'.
[  398.148758][ T3560] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  398.158884][ T3560] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  398.173368][ T3560] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  398.183492][ T3560] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  398.191664][ T3560] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  398.199100][ T3560] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  398.834198][ T3564] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  398.848697][ T3564] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  398.857911][ T3559] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  398.867970][ T3559] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  398.878271][ T3559] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  398.885694][ T3559] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  399.609674][ T8087] chnl_net:caif_netlink_parms(): no params data found
[  399.904337][ T8096] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1007'.
[  399.946276][   T27] audit: type=1326 audit(1719826447.517:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94da375b99 code=0x7ffc0000
[  399.977091][   T53] device hsr_slave_0 left promiscuous mode
[  400.001597][   T27] audit: type=1326 audit(1719826447.517:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94da375b99 code=0x7ffc0000
[  400.025595][   T53] device hsr_slave_1 left promiscuous mode
[  400.034468][   T27] audit: type=1326 audit(1719826447.607:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f94da375b99 code=0x7ffc0000
[  400.072080][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  400.103840][   T53] batman_adv: batadv0: Removing interface: batadv_slave_0
[  400.142576][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  400.176940][   T27] audit: type=1326 audit(1719826447.607:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94da375b99 code=0x7ffc0000
[  400.215448][   T53] batman_adv: batadv0: Removing interface: batadv_slave_1
[  400.276489][   T53] device bridge_slave_1 left promiscuous mode
[  400.282788][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  400.296268][ T3560] Bluetooth: hci3: command tx timeout
[  400.346434][   T53] device bridge_slave_0 left promiscuous mode
[  400.362978][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  400.646743][   T53] device veth1_macvtap left promiscuous mode
[  400.724180][   T53] device veth0_macvtap left promiscuous mode
[  400.832205][   T53] device veth1_vlan left promiscuous mode
[  400.911705][   T53] device veth0_vlan left promiscuous mode
[  400.927821][ T3564] Bluetooth: hci4: command tx timeout
[  402.368001][ T3564] Bluetooth: hci3: command tx timeout
[  402.874096][   T53] team0 (unregistering): Port device team_slave_1 removed
[  402.968125][   T53] team0 (unregistering): Port device team_slave_0 removed
[  403.027595][ T3564] Bluetooth: hci4: command tx timeout
[  403.045380][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  403.104274][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  404.295289][   T27] audit: type=1326 audit(1719826451.867:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8170 comm="syz.0.1023" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8674f75b99 code=0x0
[  404.456453][ T3564] Bluetooth: hci3: command tx timeout
[  404.852085][   T53] bond0 (unregistering): Released all slaves
[  405.083105][ T8087] bridge0: port 1(bridge_slave_0) entered blocking state
[  405.096262][ T3564] Bluetooth: hci4: command tx timeout
[  405.101960][ T8087] bridge0: port 1(bridge_slave_0) entered disabled state
[  405.110374][ T8087] device bridge_slave_0 entered promiscuous mode
[  405.119616][ T8087] bridge0: port 2(bridge_slave_1) entered blocking state
[  405.176396][ T8087] bridge0: port 2(bridge_slave_1) entered disabled state
[  405.204561][ T8087] device bridge_slave_1 entered promiscuous mode
[  405.473277][ T8087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  405.600133][ T8087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  405.818892][ T8087] team0: Port device team_slave_0 added
[  405.858556][ T8087] team0: Port device team_slave_1 added
[  405.915118][ T8087] batman_adv: batadv0: Adding interface: batadv_slave_0
[  405.926114][ T8087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  405.983895][ T8087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  406.029670][ T8106] chnl_net:caif_netlink_parms(): no params data found
[  406.074141][ T8087] batman_adv: batadv0: Adding interface: batadv_slave_1
[  406.090346][ T8087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  406.143156][ T8087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  406.566553][ T3564] Bluetooth: hci3: command tx timeout
[  406.771076][ T8087] device hsr_slave_0 entered promiscuous mode
[  406.836841][ T8087] device hsr_slave_1 entered promiscuous mode
[  406.883136][ T8087] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  406.908266][ T8087] Cannot create hsr debugfs directory
[  407.176480][ T3560] Bluetooth: hci4: command tx timeout
[  407.353592][ T8106] bridge0: port 1(bridge_slave_0) entered blocking state
[  407.373561][ T8106] bridge0: port 1(bridge_slave_0) entered disabled state
[  407.442368][ T8106] device bridge_slave_0 entered promiscuous mode
[  407.606497][ T8106] bridge0: port 2(bridge_slave_1) entered blocking state
[  407.634044][ T8106] bridge0: port 2(bridge_slave_1) entered disabled state
[  407.722347][ T8106] device bridge_slave_1 entered promiscuous mode
[  408.435514][ T8106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  408.627062][ T8106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  409.316299][ T8106] team0: Port device team_slave_0 added
[  409.341137][ T8251] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1038'.
[  409.412888][ T8106] team0: Port device team_slave_1 added
[  409.676108][    C0] hrtimer: interrupt took 75418 ns
[  410.191805][ T8106] batman_adv: batadv0: Adding interface: batadv_slave_0
[  410.217479][ T8106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  410.365341][ T8106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  410.387866][ T8106] batman_adv: batadv0: Adding interface: batadv_slave_1
[  410.400922][ T8106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  410.607861][ T8106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  411.027112][ T8106] device hsr_slave_0 entered promiscuous mode
[  411.133002][ T8106] device hsr_slave_1 entered promiscuous mode
[  411.268989][ T8106] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  411.307494][ T8106] Cannot create hsr debugfs directory
[  411.567531][ T8087] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  411.717065][ T8087] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  411.764655][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88805ce63c00: rx timeout, send abort
[  411.775755][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88805ce62c00: rx timeout, send abort
[  411.786185][    C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805ce63c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  411.788691][ T8281] Bluetooth: MGMT ver 1.22
[  411.802932][    C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805ce62c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  411.841484][ T8087] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  411.911163][ T8087] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  412.757634][ T8106] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.038510][ T8106] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.409731][ T8106] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.502609][ T8087] 8021q: adding VLAN 0 to HW filter on device bond0
[  413.927772][ T8106] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.527451][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  414.549425][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  414.621887][ T8087] 8021q: adding VLAN 0 to HW filter on device team0
[  414.676796][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  414.702782][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  414.722686][ T3593] bridge0: port 1(bridge_slave_0) entered blocking state
[  414.729904][ T3593] bridge0: port 1(bridge_slave_0) entered forwarding state
[  414.776564][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  414.784759][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  414.804841][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  414.824953][ T6394] bridge0: port 2(bridge_slave_1) entered blocking state
[  414.832140][ T6394] bridge0: port 2(bridge_slave_1) entered forwarding state
[  414.870970][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  414.906883][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  414.985865][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  414.995791][   T27] audit: type=1800 audit(1719826462.567:61): pid=8335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1058" name="bus" dev="sda1" ino=1989 res=0 errno=0
[  415.057651][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  415.126714][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  415.182754][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  415.231736][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  415.275589][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  415.323438][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  415.370393][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  415.414870][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  416.457780][ T3560] Bluetooth: hci1: command 0x0406 tx timeout
[  416.738473][ T8106] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  416.777559][ T8106] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  416.872716][ T8106] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  417.021688][ T8106] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  417.614950][ T8106] 8021q: adding VLAN 0 to HW filter on device bond0
[  417.718638][ T8106] 8021q: adding VLAN 0 to HW filter on device team0
[  418.007168][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  418.015980][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  418.037654][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  418.047187][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  418.057437][ T3292] bridge0: port 1(bridge_slave_0) entered blocking state
[  418.064570][ T3292] bridge0: port 1(bridge_slave_0) entered forwarding state
[  418.103434][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  418.128553][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  418.153308][ T3292] bridge0: port 2(bridge_slave_1) entered blocking state
[  418.160587][ T3292] bridge0: port 2(bridge_slave_1) entered forwarding state
[  418.170851][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  418.227795][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  418.305380][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  418.338038][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  418.408539][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  418.483275][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  418.493378][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  418.502806][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  418.510837][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  418.522341][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  418.531727][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  418.541123][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  418.550211][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  418.559635][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  418.589665][ T8087] 8021q: adding VLAN 0 to HW filter on device batadv0
[  418.693299][ T8106] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  419.295183][ T8087] device veth0_vlan entered promiscuous mode
[  419.389264][ T8087] device veth1_vlan entered promiscuous mode
[  419.538673][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  419.553765][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  419.607147][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  419.655869][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  419.657563][ T8413] loop0: detected capacity change from 0 to 7
[  419.684369][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  419.731360][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  419.901078][ T8413] Dev loop0: unable to read RDB block 7
[  419.916652][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  419.924711][ T8413]  loop0: unable to read partition table
[  419.931009][ T8413] loop0: partition table beyond EOD, truncated
[  419.931485][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  419.937273][ T8413] loop_reread_partitions: partition scan of loop0 (�被x������ڬ��dƤ����ݡ�����
[  419.937273][ T8413] 
) failed (rc=-5)
[  420.550040][   T27] audit: type=1326 audit(1719826468.127:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.3.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94da375b99 code=0x7ffc0000
[  420.572265][    C0] vkms_vblank_simulate: vblank timer overrun
[  420.754597][   T27] audit: type=1326 audit(1719826468.197:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.3.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f94da375b99 code=0x7ffc0000
[  420.794701][   T27] audit: type=1326 audit(1719826468.197:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.3.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94da375b99 code=0x7ffc0000
[  420.922454][ T8087] device veth0_macvtap entered promiscuous mode
[  420.946774][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  420.955576][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  420.964742][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  420.975447][ T8087] device veth1_macvtap entered promiscuous mode
[  420.983764][   T27] audit: type=1326 audit(1719826468.197:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.3.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94da375b99 code=0x7ffc0000
[  421.006073][    C0] vkms_vblank_simulate: vblank timer overrun
[  421.030869][   T27] audit: type=1326 audit(1719826468.207:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.3.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f94da375b99 code=0x7ffc0000
[  421.102319][   T27] audit: type=1326 audit(1719826468.207:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.3.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94da375b99 code=0x7ffc0000
[  421.124940][    C0] vkms_vblank_simulate: vblank timer overrun
[  421.234219][   T27] audit: type=1326 audit(1719826468.207:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.3.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94da375b99 code=0x7ffc0000
[  421.269480][ T8442] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1081'.
[  421.306575][ T8087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  421.313564][   T27] audit: type=1326 audit(1719826468.207:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.3.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f94da375b99 code=0x7ffc0000
[  421.351989][   T27] audit: type=1326 audit(1719826468.207:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.3.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94da375b99 code=0x7ffc0000
[  421.354276][ T8087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  421.398463][   T27] audit: type=1326 audit(1719826468.207:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8423 comm="syz.3.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94da375b99 code=0x7ffc0000
[  421.445032][ T8087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  421.456840][ T8087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  421.467227][ T8087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  421.479727][ T8087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  421.490403][ T8087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  421.501454][ T8087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  421.515833][ T8087] batman_adv: batadv0: Interface activated: batadv_slave_0
[  421.612443][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  421.623366][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  421.667803][ T8087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  421.698443][ T8087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  421.721671][ T8087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  421.743262][ T8087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  421.755442][ T8087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  421.781233][ T8087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  421.819209][ T8087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  421.954940][ T8087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  421.977192][ T8087] batman_adv: batadv0: Interface activated: batadv_slave_1
[  422.028430][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  422.042571][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  422.263594][   T53] device hsr_slave_0 left promiscuous mode
[  422.279287][   T53] device hsr_slave_1 left promiscuous mode
[  422.295789][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  422.325682][   T53] batman_adv: batadv0: Removing interface: batadv_slave_0
[  422.388519][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  422.430319][   T53] batman_adv: batadv0: Removing interface: batadv_slave_1
[  422.487956][   T53] device bridge_slave_1 left promiscuous mode
[  422.917544][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.968771][   T53] device bridge_slave_0 left promiscuous mode
[  422.975099][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.135943][   T53] device veth1_macvtap left promiscuous mode
[  423.149803][   T53] device veth0_macvtap left promiscuous mode
[  423.173132][   T53] device veth1_vlan left promiscuous mode
[  423.210019][   T53] device veth0_vlan left promiscuous mode
[  423.578243][ T8485] binder: BC_ACQUIRE_RESULT not supported
[  423.584130][ T8485] binder: 8477:8485 ioctl c0306201 200001c0 returned -22
[  424.368398][ T8492] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1092'.
[  424.936693][   T53] team0 (unregistering): Port device team_slave_1 removed
[  425.023689][   T53] team0 (unregistering): Port device team_slave_0 removed
[  425.091652][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  425.134990][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  425.922556][   T53] bond0 (unregistering): Released all slaves
[  426.000551][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  426.008763][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  426.017842][ T8087] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  426.027082][ T8087] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  426.035892][ T8087] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  426.044820][ T8087] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  426.138989][ T8106] 8021q: adding VLAN 0 to HW filter on device batadv0
[  426.365706][ T3680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  426.384899][ T3680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  426.633424][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  426.729262][ T8516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1098'.
[  426.742871][ T3680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  426.797268][ T3680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  426.911564][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  427.597976][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  427.617713][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  427.689155][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  427.705850][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  427.717661][ T8106] device veth0_vlan entered promiscuous mode
[  427.734176][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  427.744656][ T6395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  427.801004][ T8106] device veth1_vlan entered promiscuous mode
[  428.039095][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  428.056956][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  428.121224][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  428.185869][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  428.314683][ T8106] device veth0_macvtap entered promiscuous mode
[  428.599042][ T8106] device veth1_macvtap entered promiscuous mode
[  428.826399][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  428.901707][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.006537][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  429.040482][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.076201][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  429.106141][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.116008][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  429.176081][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.208443][ T8106] batman_adv: batadv0: Interface activated: batadv_slave_0
[  429.218060][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  429.242755][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  429.277281][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  429.301055][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  429.333818][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  429.358764][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.370496][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  429.388248][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.413011][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  429.450039][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.480984][ T8106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  429.512994][ T8106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  429.544341][ T8106] batman_adv: batadv0: Interface activated: batadv_slave_1
[  429.601622][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  429.618100][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  429.646454][ T8106] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  429.683985][ T8106] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  429.709945][ T8106] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  429.741510][ T8106] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  430.053605][ T3680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.101094][ T3680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  430.131076][ T3657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.152154][ T3657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  430.160524][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  430.198844][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  430.285120][ T8560] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1108'.
[  430.306184][ T3292] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  430.546188][ T3292] usb 3-1: Using ep0 maxpacket: 8
[  430.671649][ T3292] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  430.712176][ T3292] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  430.763085][ T3292] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  430.804036][ T3292] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  430.842868][ T3292] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  430.964991][ T3292] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  431.138187][ T3292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.616656][ T3292] usb 3-1: GET_CAPABILITIES returned 0
[  431.622243][ T3292] usbtmc 3-1:16.0: can't read capabilities
[  431.891383][  T152] usb 3-1: USB disconnect, device number 11
[  435.032997][ T8607] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1122'.
[  437.045096][ T3564] Bluetooth: hci5: command 0x0406 tx timeout
[  439.688171][ T8677] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1143'.
[  439.971854][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  439.979475][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  440.494355][ T8713] binder: 8708:8713 ioctl 4018620d 0 returned -22
[  440.786133][  T152] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  441.028419][  T152] usb 1-1: Using ep0 maxpacket: 16
[  441.066422][  T152] usb 1-1: no configurations
[  441.071091][  T152] usb 1-1: can't read configurations, error -22
[  441.207684][ T3564] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  441.227770][ T3564] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  441.237991][ T3564] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  441.247944][  T152] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  441.256937][ T3559] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  441.278106][ T3559] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  441.285591][ T3559] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  441.304699][ T3657] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.553523][ T8722] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1158'.
[  441.708916][ T3657] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.966507][  T152] usb 1-1: Using ep0 maxpacket: 16
[  442.006440][  T152] usb 1-1: no configurations
[  442.011530][  T152] usb 1-1: can't read configurations, error -22
[  442.024473][  T152] usb usb1-port1: attempt power cycle
[  442.093087][ T3657] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  442.189453][ T8726] chnl_net:caif_netlink_parms(): no params data found
[  442.815574][ T3657] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.008802][ T8754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1164'.
[  443.094802][ T8726] bridge0: port 1(bridge_slave_0) entered blocking state
[  443.127787][ T8726] bridge0: port 1(bridge_slave_0) entered disabled state
[  443.143981][ T8726] device bridge_slave_0 entered promiscuous mode
[  443.154548][ T8726] bridge0: port 2(bridge_slave_1) entered blocking state
[  443.161908][ T8726] bridge0: port 2(bridge_slave_1) entered disabled state
[  443.170945][ T8726] device bridge_slave_1 entered promiscuous mode
[  443.206120][  T152] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  443.245637][ T8726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  443.299539][ T8726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  443.327202][  T152] usb 1-1: Using ep0 maxpacket: 16
[  443.406270][ T3559] Bluetooth: hci5: command tx timeout
[  443.516538][  T152] usb 1-1: device descriptor read/all, error -71
[  443.590290][ T8726] team0: Port device team_slave_0 added
[  443.616795][ T8726] team0: Port device team_slave_1 added
[  443.750464][ T8726] batman_adv: batadv0: Adding interface: batadv_slave_0
[  443.773785][ T8726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  443.801491][ T8726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  443.801526][ T8770] capability: warning: `syz.0.1169' uses 32-bit capabilities (legacy support in use)
[  444.000619][ T8726] batman_adv: batadv0: Adding interface: batadv_slave_1
[  444.011103][ T8726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  444.074447][ T8726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  444.652303][ T8779] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1170'.
[  444.670862][ T8726] device hsr_slave_0 entered promiscuous mode
[  444.708346][ T8726] device hsr_slave_1 entered promiscuous mode
[  444.728482][ T8726] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  444.760500][ T8726] Cannot create hsr debugfs directory
[  444.956191][ T3292] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  445.326414][ T3292] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  445.357592][ T3292] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  445.380972][ T3292] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  445.401287][ T3292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.433902][ T3292] usb 5-1: config 0 descriptor??
[  445.478511][ T3292] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  445.486323][ T3560] Bluetooth: hci5: command tx timeout
[  446.068213][ T3657] device hsr_slave_0 left promiscuous mode
[  446.081944][ T3657] device hsr_slave_1 left promiscuous mode
[  446.103774][ T3657] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  446.154289][ T3657] batman_adv: batadv0: Removing interface: batadv_slave_0
[  446.183816][ T3657] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  446.222578][ T3657] batman_adv: batadv0: Removing interface: batadv_slave_1
[  446.253621][ T3657] device bridge_slave_1 left promiscuous mode
[  446.267620][ T3657] bridge0: port 2(bridge_slave_1) entered disabled state
[  446.303438][ T3657] device bridge_slave_0 left promiscuous mode
[  446.320109][ T3657] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.448642][ T3657] device veth1_macvtap left promiscuous mode
[  446.468148][ T3657] device veth0_macvtap left promiscuous mode
[  446.487861][ T3657] device veth1_vlan left promiscuous mode
[  446.507466][ T3657] device veth0_vlan left promiscuous mode
[  447.507108][ T3657] team0 (unregistering): Port device team_slave_1 removed
[  447.547012][ T8844] loop0: detected capacity change from 0 to 7
[  447.582852][ T8844] Dev loop0: unable to read RDB block 7
[  447.596109][ T8844]  loop0: unable to read partition table
[  447.612513][ T3560] Bluetooth: hci5: command tx timeout
[  447.636507][ T8844] loop0: partition table beyond EOD, truncated
[  447.653744][ T8844] loop_reread_partitions: partition scan of loop0 (�被x������ڬ��dƤ����ݡ�����
[  447.653744][ T8844] 
) failed (rc=-5)
[  447.705989][ T3657] team0 (unregistering): Port device team_slave_0 removed
[  447.737169][ T4239] usb 5-1: USB disconnect, device number 14
[  447.897355][ T3657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  448.054975][ T3657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  448.275705][ T8848] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1184'.
[  448.779314][ T3657] bond0 (unregistering): Released all slaves
[  448.898594][   T27] kauditd_printk_skb: 24 callbacks suppressed
[  448.898612][   T27] audit: type=1326 audit(1719826496.477:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8864 comm="syz.4.1187" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f95b2b75b99 code=0x0
[  449.232619][ T8726] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  449.331978][ T8726] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  449.367027][ T8726] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  449.400454][ T8726] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  449.646231][ T3560] Bluetooth: hci5: command tx timeout
[  449.928006][ T8726] 8021q: adding VLAN 0 to HW filter on device bond0
[  449.979853][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  449.994944][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  450.021140][ T8726] 8021q: adding VLAN 0 to HW filter on device team0
[  450.052201][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  450.069488][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  450.125547][ T4112] bridge0: port 1(bridge_slave_0) entered blocking state
[  450.132842][ T4112] bridge0: port 1(bridge_slave_0) entered forwarding state
[  450.801476][ T8897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1192'.
[  450.811563][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  450.848147][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  450.907745][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  450.927167][ T4112] bridge0: port 2(bridge_slave_1) entered blocking state
[  450.934299][ T4112] bridge0: port 2(bridge_slave_1) entered forwarding state
[  451.014899][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  451.081868][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  451.175000][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  451.203699][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  451.373989][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  451.407285][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  451.447726][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  451.481985][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  451.545815][ T8726] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  451.621747][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  451.668168][ T8905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1194'.
[  451.734718][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  451.747179][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  451.803128][ T6394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  453.021541][ T8917] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1199'.
[  453.723665][ T8726] 8021q: adding VLAN 0 to HW filter on device batadv0
[  453.916746][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  453.975077][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  454.367188][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  454.381703][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  454.543599][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  454.552962][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  454.603227][ T8726] device veth0_vlan entered promiscuous mode
[  454.628138][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  454.661849][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  454.679874][ T8726] device veth1_vlan entered promiscuous mode
[  454.937643][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  454.946609][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  455.703147][ T8726] device veth0_macvtap entered promiscuous mode
[  455.797502][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  455.828461][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  455.918643][ T8726] device veth1_macvtap entered promiscuous mode
[  455.932321][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  455.955256][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  455.975471][ T8726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.018352][ T8726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.039202][ T8726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.058777][ T8726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.082262][ T8726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.115563][ T8726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.139183][ T8726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.158973][ T8726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.231953][ T8726] batman_adv: batadv0: Interface activated: batadv_slave_0
[  456.252449][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  456.276820][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  456.314337][ T8726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  456.365736][ T8726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.391572][ T8726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  456.451878][ T8726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.489430][ T8726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  456.536133][ T8726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.578459][ T8726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  456.632639][ T8726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.684504][ T8726] batman_adv: batadv0: Interface activated: batadv_slave_1
[  456.714449][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  456.745584][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  456.785273][ T8726] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  456.814787][ T8726] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  456.857433][ T8726] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  456.884176][ T8726] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  457.188179][ T3637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  457.216110][ T3637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  457.321681][ T9002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1216'.
[  457.403723][ T9002] device veth1_macvtap left promiscuous mode
[  457.829347][ T9008] trusted_key: encrypted_key: insufficient parameters specified
[  457.878596][ T3599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  457.999656][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  458.046177][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  458.274971][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  459.747193][ T9039] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1221'.
[  459.756578][ T9039] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1221'.
[  464.629718][ T9096] netlink: 'syz.1.1242': attribute type 3 has an invalid length.
[  464.638053][ T9096] netlink: 'syz.1.1242': attribute type 1 has an invalid length.
[  469.029291][   T27] audit: type=1804 audit(1719826516.607:97): pid=9141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1255" name="/root/syzkaller.RcfwFN/135/cgroup.controllers" dev="sda1" ino=2003 res=1 errno=0
[  470.432080][ T9152] netlink: 'syz.4.1256': attribute type 3 has an invalid length.
[  470.440347][ T9152] netlink: 'syz.4.1256': attribute type 1 has an invalid length.
[  474.009471][ T9185] input: syz0 as /devices/virtual/input/input5
[  474.571125][   T27] audit: type=1804 audit(1719826522.147:98): pid=9201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1273" name="/root/syzkaller.RcfwFN/139/cgroup.controllers" dev="sda1" ino=2002 res=1 errno=0
[  478.225576][ T9254] netlink: 'syz.4.1292': attribute type 3 has an invalid length.
[  478.233457][ T9254] netlink: 'syz.4.1292': attribute type 1 has an invalid length.
[  478.856282][   T22] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  479.119766][ T9256] loop3: detected capacity change from 0 to 32768
[  479.135540][ T9256] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1294 (9256)
[  479.499698][ T9256] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  479.787817][ T9256] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  479.866855][ T9256] BTRFS info (device loop3): using free space tree
[  480.220753][   T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  480.239949][   T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  480.250680][   T22] usb 1-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00
[  480.259854][   T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  480.475426][   T22] usb 1-1: config 0 descriptor??
[  480.758340][ T9312] netlink: 'syz.4.1307': attribute type 3 has an invalid length.
[  480.766314][ T9312] netlink: 'syz.4.1307': attribute type 1 has an invalid length.
[  480.790607][ T9256] BTRFS info (device loop3): enabling ssd optimizations
[  480.990611][ T9318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1311'.
[  481.044174][ T9318] device veth1_macvtap left promiscuous mode
[  481.536254][   T22] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0
[  481.543967][   T22] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0
[  481.567062][   T22] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0
[  481.581900][   T22] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0
[  481.596350][   T22] hid-rmi 0003:06CB:81A7.0001: unknown main item tag 0x0
[  481.687334][ T8726] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  481.738003][   T22] hid-rmi 0003:06CB:81A7.0001: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.0-1/input0
[  481.780308][   T22] usb 1-1: USB disconnect, device number 16
[  484.919518][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1327'.
[  484.930135][ T9373] device veth1_macvtap left promiscuous mode
[  485.274826][ T9385] loop1: detected capacity change from 0 to 16
[  485.295986][ T9385] erofs: (device loop1): mounted with root inode @ nid 36.
[  485.477352][ T9385] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  485.507182][ T9385] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[1851]
[  485.523107][ T9385] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117]
[  487.571617][ T9423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1348'.
[  487.654182][ T9422] loop0: detected capacity change from 0 to 1764
[  487.826365][ T9422] iso9660: Corrupted directory entry in block 2 of inode 1920
[  487.859326][ T9430] loop3: detected capacity change from 0 to 16
[  487.902675][ T9430] erofs: (device loop3): mounted with root inode @ nid 36.
[  488.008926][ T9430] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  488.066080][ T9430] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[1851]
[  488.083455][ T9430] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117]
[  488.951789][ T9451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1361'.
[  490.720581][ T9443] loop0: detected capacity change from 0 to 40427
[  490.758255][ T9443] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  490.778518][ T9443] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  490.819029][ T9443] F2FS-fs (loop0): Found nat_bits in checkpoint
[  490.955737][ T9443] F2FS-fs (loop0): recover fsync data on readonly fs
[  491.016642][ T9443] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30
[  491.023928][ T9443] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  491.150190][ T9461] loop3: detected capacity change from 0 to 40427
[  491.164922][ T9457] loop4: detected capacity change from 0 to 40427
[  491.177337][ T9457] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  491.190681][ T9461] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  491.198547][ T9461] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  491.209271][ T9457] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  491.388529][ T9461] F2FS-fs (loop3): invalid crc value
[  491.394492][ T9457] F2FS-fs (loop4): invalid crc value
[  491.572890][ T9461] F2FS-fs (loop3): Found nat_bits in checkpoint
[  491.674116][ T9457] F2FS-fs (loop4): Found nat_bits in checkpoint
[  492.261174][ T9461] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  492.297699][ T9461] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  492.702996][ T9492] syz.3.1363: attempt to access beyond end of device
[  492.702996][ T9492] loop3: rw=2049, sector=53248, nr_sectors = 408 limit=40427
[  493.255470][ T8726] syz-executor: attempt to access beyond end of device
[  493.255470][ T8726] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  493.702427][ T9488] loop1: detected capacity change from 0 to 32768
[  494.334821][ T9505] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1373'.
[  494.928401][ T3560] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  494.939486][ T3560] Bluetooth: hci3: Injecting HCI hardware error event
[  494.956674][ T3560] Bluetooth: hci3: hardware error 0x00
[  495.232338][ T9511] loop2: detected capacity change from 0 to 1764
[  495.318060][ T9511] iso9660: Corrupted directory entry in block 2 of inode 1920
[  495.776313][ T3596] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  496.176903][ T3596] usb 3-1: config 0 has an invalid interface number: 80 but max is 0
[  496.218466][ T3596] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  496.289617][ T3596] usb 3-1: config 0 has no interface number 0
[  496.306184][ T3596] usb 3-1: config 0 interface 80 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  496.354985][ T3596] usb 3-1: config 0 interface 80 altsetting 0 has a duplicate endpoint with address 0x81, skipping
[  496.672631][ T3596] usb 3-1: config 0 interface 80 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  497.166302][ T3560] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  498.126259][ T3560] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  498.135652][ T3560] Bluetooth: hci4: Injecting HCI hardware error event
[  498.145553][ T3560] Bluetooth: hci4: hardware error 0x00
[  498.629886][ T9522] loop0: detected capacity change from 0 to 40427
[  498.646425][ T3596] usb 3-1: New USB device found, idVendor=15e8, idProduct=9110, bcdDevice=23.10
[  498.665892][ T3596] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  498.682560][ T9522] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  498.692667][ T3596] usb 3-1: config 0 descriptor??
[  498.709993][ T9522] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  498.741523][ T9522] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-4)
[  498.756168][ T3596] usb 3-1: can't set config #0, error -71
[  498.787419][ T3596] usb 3-1: USB disconnect, device number 12
[  499.147369][ T9532] loop4: detected capacity change from 0 to 40427
[  499.176110][ T9532] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  499.196151][ T9532] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  499.387478][ T9532] F2FS-fs (loop4): invalid crc value
[  499.439458][ T9532] F2FS-fs (loop4): Found nat_bits in checkpoint
[  500.051760][ T9532] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  500.081589][ T9532] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  500.206291][ T3560] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  500.686806][ T9561] syz.4.1382: attempt to access beyond end of device
[  500.686806][ T9561] loop4: rw=2049, sector=53248, nr_sectors = 408 limit=40427
[  501.341177][ T9555] overlayfs: unrecognized mount option "euid=00000000000000060929" or missing value
[  501.376675][ T8106] syz-executor: attempt to access beyond end of device
[  501.376675][ T8106] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  501.468394][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  501.474742][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  502.216303][ T4239] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  502.646451][ T4239] usb 4-1: config 0 has an invalid interface number: 80 but max is 0
[  502.657489][ T4239] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  502.744026][ T4239] usb 4-1: config 0 has no interface number 0
[  502.789306][ T4239] usb 4-1: config 0 interface 80 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  502.845230][ T4239] usb 4-1: config 0 interface 80 altsetting 0 has a duplicate endpoint with address 0x81, skipping
[  503.040477][ T4239] usb 4-1: config 0 interface 80 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  503.256161][ T3559] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  503.264994][ T3559] Bluetooth: hci5: Injecting HCI hardware error event
[  503.272318][  T152] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  503.283089][ T3559] Bluetooth: hci5: hardware error 0x00
[  503.686485][  T152] usb 3-1: config 0 has an invalid interface number: 80 but max is 0
[  503.712070][  T152] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  503.763024][  T152] usb 3-1: config 0 has no interface number 0
[  503.817863][  T152] usb 3-1: config 0 interface 80 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  503.873243][  T152] usb 3-1: config 0 interface 80 altsetting 0 has a duplicate endpoint with address 0x81, skipping
[  503.926360][  T152] usb 3-1: config 0 interface 80 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  504.126382][  T152] usb 3-1: New USB device found, idVendor=15e8, idProduct=9110, bcdDevice=23.10
[  504.146559][  T152] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  504.154863][  T152] usb 3-1: Product: syz
[  504.179161][  T152] usb 3-1: Manufacturer: syz
[  504.195952][  T152] usb 3-1: SerialNumber: syz
[  504.253230][  T152] usb 3-1: config 0 descriptor??
[  505.226385][  T152] pegasus: probe of 3-1:0.80 failed with error -71
[  505.263212][  T152] usb 3-1: USB disconnect, device number 13
[  505.486183][ T3559] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  609.205961][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  609.212619][    C1] rcu: 	1-...!: (10499 ticks this GP) idle=962c/1/0x4000000000000000 softirq=39015/39015 fqs=38
[  609.224799][    C1] 	(t=10501 jiffies g=52485 q=636 ncpus=2)
[  609.230665][    C1] rcu: rcu_preempt kthread starved for 10350 jiffies! g52485 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  609.241892][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  609.251922][    C1] rcu: RCU grace-period kthread stack dump:
[  609.257829][    C1] task:rcu_preempt     state:R  running task     stack:25016 pid:16    ppid:2      flags:0x00004000
[  609.268834][    C1] Call Trace:
[  609.272318][    C1]  <TASK>
[  609.275285][    C1]  __schedule+0x142d/0x4550
[  609.279937][    C1]  ? _raw_spin_unlock+0x40/0x40
[  609.284842][    C1]  ? __mod_timer+0x956/0xee0
[  609.289479][    C1]  ? __sched_text_start+0x8/0x8
[  609.294395][    C1]  ? lockdep_softirqs_off+0x420/0x420
[  609.299803][    C1]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  609.305731][    C1]  ? _raw_spin_unlock+0x40/0x40
[  609.310620][    C1]  schedule+0xbf/0x180
[  609.314730][    C1]  schedule_timeout+0x1b9/0x300
[  609.319692][    C1]  ? console_conditional_schedule+0x40/0x40
[  609.325742][    C1]  ? update_process_times+0x1b0/0x1b0
[  609.331252][    C1]  ? prepare_to_swait_event+0x329/0x350
[  609.336851][    C1]  rcu_gp_fqs_loop+0x2d2/0x1150
[  609.341750][    C1]  ? dyntick_save_progress_counter+0x2b0/0x2b0
[  609.347941][    C1]  ? lockdep_hardirqs_on+0x94/0x130
[  609.353197][    C1]  ? rcu_gp_init+0x15f0/0x15f0
[  609.358027][    C1]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  609.363980][    C1]  ? finish_swait+0xcf/0x1e0
[  609.368657][    C1]  rcu_gp_kthread+0xa3/0x3b0
[  609.373302][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  609.378463][    C1]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  609.384503][    C1]  ? __kthread_parkme+0x168/0x1c0
[  609.389579][    C1]  kthread+0x28d/0x320
[  609.393680][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  609.398912][    C1]  ? kthread_blkcg+0xd0/0xd0
[  609.403535][    C1]  ret_from_fork+0x1f/0x30
[  609.408013][    C1]  </TASK>
[  609.411051][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  609.417397][    C1] Sending NMI from CPU 1 to CPUs 0:
[  609.422764][    C0] NMI backtrace for cpu 0
[  609.422779][    C0] CPU: 0 PID: 9594 Comm: syz.3.1401 Not tainted 6.1.96-syzkaller #0
[  609.422798][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  609.422809][    C0] RIP: 0010:lockdep_hardirqs_on_prepare+0x26/0x7a0
[  609.422842][    C0] Code: ff ff ff 90 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec 80 00 00 00 65 48 8b 04 25 28 00 00 00 48 89 44 24 60 <48> ba 00 00 00 00 00 fc ff df 48 c7 44 24 20 b3 8a b5 41 48 c7 44
[  609.422863][    C0] RSP: 0018:ffffc900036ef9c0 EFLAGS: 00000086
[  609.422880][    C0] RAX: c7a1ba2601166e00 RBX: 0000000000000000 RCX: ffff88801f151dc0
[  609.422893][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8aa00d46
[  609.422905][    C0] RBP: ffffc900036efa70 R08: ffffffff815bcc76 R09: ffffed102802f381
[  609.422920][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000
[  609.422932][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  609.422943][    C0] FS:  0000555556350500(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[  609.422960][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  609.422973][    C0] CR2: 000000002006b000 CR3: 0000000077959000 CR4: 00000000003506f0
[  609.422988][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  609.422999][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  609.423010][    C0] Call Trace:
[  609.423017][    C0]  <NMI>
[  609.423024][    C0]  ? nmi_cpu_backtrace+0x3de/0x560
[  609.423053][    C0]  ? read_lock_is_recursive+0x10/0x10
[  609.423081][    C0]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  609.423109][    C0]  ? nmi_handle+0x25/0x440
[  609.423145][    C0]  ? nmi_cpu_backtrace_handler+0x8/0x10
[  609.423172][    C0]  ? nmi_handle+0x12e/0x440
[  609.423199][    C0]  ? nmi_handle+0x25/0x440
[  609.423226][    C0]  ? lockdep_hardirqs_on_prepare+0x26/0x7a0
[  609.423252][    C0]  ? default_do_nmi+0x62/0x150
[  609.423270][    C0]  ? exc_nmi+0xa8/0x100
[  609.423291][    C0]  ? end_repeat_nmi+0x16/0x31
[  609.423321][    C0]  ? __kthread_should_park+0xa6/0xe0
[  609.423349][    C0]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  609.423375][    C0]  ? lockdep_hardirqs_on_prepare+0x26/0x7a0
[  609.423402][    C0]  ? lockdep_hardirqs_on_prepare+0x26/0x7a0
[  609.423430][    C0]  ? lockdep_hardirqs_on_prepare+0x26/0x7a0
[  609.423456][    C0]  </NMI>
[  609.423461][    C0]  <TASK>
[  609.423472][    C0]  ? rcu_is_watching+0x11/0xb0
[  609.423488][    C0]  ? trace_hardirqs_off_finish+0x8a/0x1a0
[  609.423518][    C0]  trace_hardirqs_on+0x34/0x40
[  609.423543][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  609.423569][    C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40
[  609.423592][    C0] Code: f1 bc f5 ff 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 0e 30 d5 f6 48 89 df e8 76 6d d6 f6 e8 c1 f9 fb f6 fb bf 01 00 00 00 <e8> e6 05 c9 f6 65 8b 05 87 12 6d 75 85 c0 74 02 5b c3 e8 34 36 6b
[  609.423607][    C0] RSP: 0018:ffffc900036efb30 EFLAGS: 00000286
[  609.423621][    C0] RAX: c7a1ba2601166e00 RBX: ffff8880279d40c0 RCX: ffffffff91c94103
[  609.423636][    C0] RDX: dffffc0000000000 RSI: ffffffff8aec0240 RDI: 0000000000000001
[  609.423649][    C0] RBP: ffffc900036efc70 R08: dffffc0000000000 R09: ffffed1004f3a819
[  609.423662][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11004f3a8ab
[  609.423680][    C0] R13: 000000001c000004 R14: 0000000000000021 R15: ffff8880279d4558
[  609.423703][    C0]  get_signal+0x154b/0x17d0
[  609.423738][    C0]  ? ptrace_notify+0x370/0x370
[  609.423770][    C0]  arch_do_signal_or_restart+0xb0/0x1a10
[  609.423792][    C0]  ? __might_fault+0xa1/0x110
[  609.423815][    C0]  ? __lock_acquire+0x1f80/0x1f80
[  609.423845][    C0]  ? do_sigaltstack+0x3f3/0x610
[  609.423868][    C0]  ? get_sigframe_size+0x10/0x10
[  609.423886][    C0]  ? restore_altstack+0x107/0x150
[  609.423906][    C0]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  609.423941][    C0]  ? exit_to_user_mode_loop+0x39/0x100
[  609.423961][    C0]  exit_to_user_mode_loop+0x6a/0x100
[  609.423979][    C0]  exit_to_user_mode_prepare+0xb1/0x140
[  609.423998][    C0]  syscall_exit_to_user_mode+0x60/0x270
[  609.424021][    C0]  do_syscall_64+0x47/0xb0
[  609.424047][    C0]  ? clear_bhb_loop+0x45/0xa0
[  609.424073][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  609.424097][    C0] RIP: 0033:0x7fa1f9375b99
[  609.424118][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  609.424133][    C0] RSP: 002b:00007ffd69d43cb8 EFLAGS: 00000246
[  609.424146][    C0] RAX: 0000000000000000 RBX: 000000000007b7a2 RCX: 00007fa1f9375b99
[  609.424158][    C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa1f9504084
[  609.424171][    C0] RBP: 000000000007b770 R08: 0000000000000010 R09: 0000000a69d43fcf
[  609.424183][    C0] R10: 00007ffd69d43da0 R11: 0000000000000246 R12: 00007fa1f9504084
[  609.424195][    C0] R13: 0000000000000032 R14: 00007ffd69d43dc0 R15: 00007ffd69d43da0
[  609.424217][    C0]  </TASK>
[  609.424768][    C1] CPU: 1 PID: 9572 Comm: syz.1.1394 Not tainted 6.1.96-syzkaller #0
[  609.913880][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  609.923950][    C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40
[  609.929774][    C1] Code: f1 bc f5 ff 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 0e 30 d5 f6 48 89 df e8 76 6d d6 f6 e8 c1 f9 fb f6 fb bf 01 00 00 00 <e8> e6 05 c9 f6 65 8b 05 87 12 6d 75 85 c0 74 02 5b c3 e8 34 36 6b
[  609.949385][    C1] RSP: 0018:ffffc9000347fb30 EFLAGS: 00000286
[  609.955465][    C1] RAX: 819cafe2f8f07000 RBX: ffff88807ad82500 RCX: ffffffff91c94103
[  609.963615][    C1] RDX: dffffc0000000000 RSI: ffffffff8aec0240 RDI: 0000000000000001
[  609.971606][    C1] RBP: ffffc9000347fc70 R08: dffffc0000000000 R09: ffffed100f5b04a1
[  609.979672][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1100f5b0533
[  609.987696][    C1] R13: 000000001c000004 R14: 0000000000000021 R15: ffff88807ad82998
[  609.996191][    C1] FS:  0000555556dfc500(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[  610.005166][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  610.011757][    C1] CR2: 0000001b2c31dff8 CR3: 0000000064698000 CR4: 00000000003506e0
[  610.019838][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  610.027813][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  610.035877][    C1] Call Trace:
[  610.039157][    C1]  <IRQ>
[  610.042009][    C1]  ? rcu_dump_cpu_stacks+0x296/0x4f0
[  610.047310][    C1]  ? print_cpu_stall+0x346/0x5f0
[  610.052274][    C1]  ? rcu_sched_clock_irq+0x997/0x1200
[  610.057653][    C1]  ? rcutree_dead_cpu+0x20/0x20
[  610.062509][    C1]  ? hrtimer_run_queues+0x163/0x450
[  610.067712][    C1]  ? acct_account_cputime+0xdd/0x270
[  610.073090][    C1]  ? update_process_times+0x147/0x1b0
[  610.078469][    C1]  ? tick_sched_timer+0x386/0x550
[  610.083671][    C1]  ? tick_setup_sched_timer+0x2f0/0x2f0
[  610.089219][    C1]  ? __hrtimer_run_queues+0x5a7/0xe50
[  610.094612][    C1]  ? hrtimer_interrupt+0x980/0x980
[  610.099751][    C1]  ? ktime_get_update_offsets_now+0x407/0x420
[  610.105835][    C1]  ? hrtimer_interrupt+0x392/0x980
[  610.110975][    C1]  ? __sysvec_apic_timer_interrupt+0x156/0x580
[  610.117136][    C1]  ? sysvec_apic_timer_interrupt+0x8c/0xb0
[  610.122947][    C1]  </IRQ>
[  610.125882][    C1]  <TASK>
[  610.128825][    C1]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  610.135003][    C1]  ? _raw_spin_unlock_irq+0x25/0x40
[  610.140304][    C1]  get_signal+0x154b/0x17d0
[  610.144828][    C1]  ? ptrace_notify+0x370/0x370
[  610.149625][    C1]  arch_do_signal_or_restart+0xb0/0x1a10
[  610.155265][    C1]  ? __might_fault+0xa1/0x110
[  610.159948][    C1]  ? __lock_acquire+0x1f80/0x1f80
[  610.164988][    C1]  ? do_sigaltstack+0x3f3/0x610
[  610.169854][    C1]  ? get_sigframe_size+0x10/0x10
[  610.174797][    C1]  ? restore_altstack+0x107/0x150
[  610.179865][    C1]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  610.185876][    C1]  ? exit_to_user_mode_loop+0x39/0x100
[  610.191346][    C1]  exit_to_user_mode_loop+0x6a/0x100
[  610.196638][    C1]  exit_to_user_mode_prepare+0xb1/0x140
[  610.202452][    C1]  syscall_exit_to_user_mode+0x60/0x270
[  610.208033][    C1]  do_syscall_64+0x47/0xb0
[  610.212547][    C1]  ? clear_bhb_loop+0x45/0xa0
[  610.217240][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  610.223233][    C1] RIP: 0033:0x7f1f3f24cbb4
[  610.227654][    C1] Code: 0f 82 b9 00 00 00 48 39 f2 72 6e 41 0f 11 0c 24 48 8b 77 f8 48 89 f8 48 89 eb eb 12 66 2e 0f 1f 84 00 00 00 00 00 48 8b 4b 08 <48> 83 c3 08 48 39 d1 72 f3 48 83 e8 08 48 39 f2 73 17 66 2e 0f 1f
[  610.247352][    C1] RSP: 002b:00007ffeb76991f0 EFLAGS: 00000293
[  610.253425][    C1] RAX: 00007f1f3eaef618 RBX: 00007f1f3ea992f0 RCX: ffffffff81799b5a
[  610.261398][    C1] RDX: ffffffff817e16ca RSI: ffffffff817e11e1 RDI: 00007f1f3eaf6478
[  610.269376][    C1] RBP: 00007f1f3ea69bb8 R08: 00007f1f3eab0010 R09: 0000000000000008
[  610.277377][    C1] R10: 00000000817cd4e5 R11: 00000000817cd4e9 R12: 00007f1f3ea69bb0
[  610.285352][    C1] R13: 000000000000001f R14: 00007f1f3e9ff008 R15: 00007f1f3f504078
[  610.293337][    C1]  ? hrtimer_start_range_ns+0xa2a/0xc50
[  610.298888][    C1]  ? futex_q_lock+0x1a/0x230
[  610.303594][    C1]  ? futex_top_waiter+0x1c1/0x1e0
[  610.308639][    C1]  </TASK>
[  610.311744][    C1] vkms_vblank_simulate: vblank timer overrun