last executing test programs:

2m52.009566309s ago: executing program 1 (id=2):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

2m51.019722395s ago: executing program 3 (id=7):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x48002)
sendmsg$inet(r1, 0x0, 0xc014)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bb", 0x48}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x2}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

2m50.932449622s ago: executing program 1 (id=8):
r0 = syz_io_uring_setup(0x1327, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x2def, 0x4000, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mount$fuse(0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=ANY=[])
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x4, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
geteuid()
mount$fuseblk(&(0x7f0000000500), &(0x7f0000000540)='./file1\x00', &(0x7f0000000580), 0x10001, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x404800, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000004c0)={'veth1_macvtap\x00', 0x800})
sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0)
timer_create(0x0, 0x0, 0x0)
read(r4, &(0x7f0000000040)=""/148, 0xffffff96)

2m50.012122779s ago: executing program 3 (id=10):
r0 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
accept$packet(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0xfed7, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000500)={0x14, &(0x7f00000000c0)=ANY=[], 0x0}, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b02, 0x0)

2m49.668140437s ago: executing program 1 (id=12):
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prlimit64(0x0, 0xd, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
syz_emit_vhci(&(0x7f0000001800)=ANY=[], 0xf)
move_pages(0x0, 0xfffffffffffffd3c, 0x0, 0x0, 0x0, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

2m47.891494084s ago: executing program 32 (id=12):
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prlimit64(0x0, 0xd, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
syz_emit_vhci(&(0x7f0000001800)=ANY=[], 0xf)
move_pages(0x0, 0xfffffffffffffd3c, 0x0, 0x0, 0x0, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

2m46.56784313s ago: executing program 3 (id=15):
r0 = syz_open_procfs(0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000064680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003b80)=ANY=[@ANYBLOB="14010000200001030000000000000000010100800c00010002ed9200000100000000"], 0x114}], 0x1}, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)

2m45.51104813s ago: executing program 3 (id=16):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

2m41.91978145s ago: executing program 3 (id=26):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmctl$SHM_LOCK(0x0, 0xb)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1)

2m38.195747312s ago: executing program 3 (id=35):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30314442})
r3 = socket(0x1d, 0x2, 0x6)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r4 = syz_open_dev$sndctrl(0x0, 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100))
syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000340), 0x4)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r8, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x23, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=<r11=>0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r12 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES16=r3, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r13, @ANYRESOCT=r11, @ANYRES16=r7, @ANYBLOB="8da700000000000000001334"], 0x4c}}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r5, 0x0)

2m37.579427305s ago: executing program 33 (id=35):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30314442})
r3 = socket(0x1d, 0x2, 0x6)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r4 = syz_open_dev$sndctrl(0x0, 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100))
syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000340), 0x4)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r8, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x23, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=<r11=>0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r12 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRES16=r3, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r13, @ANYRESOCT=r11, @ANYRES16=r7, @ANYBLOB="8da700000000000000001334"], 0x4c}}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r5, 0x0)

2m4.759328057s ago: executing program 4 (id=114):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0)
r1 = dup(r0)
ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d10, 0x0)

2m4.175867687s ago: executing program 4 (id=118):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$netlink(0x10, 0x3, 0x15)
r2 = getpid()
migrate_pages(r2, 0x100, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r3, 0x80000300, 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet6(0xa, 0x80002, 0x3a)
ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, <r6=>r4})
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$DMA_BUF_SET_NAME_A(r6, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000040)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)

2m2.389558692s ago: executing program 4 (id=121):
openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)
mkdir(0x0, 0x35)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0x1}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)
mknodat(0xffffffffffffffff, 0x0, 0xc000, 0x1)
mkdir(0x0, 0x0)
ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, 0x0)
socket$igmp6(0xa, 0x3, 0x3a)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)

1m58.831296056s ago: executing program 4 (id=130):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, 0x0)

1m57.034189505s ago: executing program 4 (id=133):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0)

1m55.124583007s ago: executing program 4 (id=140):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000850000006100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m54.763451219s ago: executing program 34 (id=140):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000850000006100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m14.841092707s ago: executing program 7 (id=247):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50)
sendto$inet(r0, &(0x7f0000000480)="33b92c", 0x3, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20)
recvmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b00)=""/26, 0x1a}], 0x1}, 0x5}], 0x1, 0x100, 0x0)

1m13.507843801s ago: executing program 7 (id=251):
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000009905000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x2c8257be, r2, 0x0, 0x1ba8847c99}, 0x38)

1m10.238345941s ago: executing program 7 (id=260):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1b00000020000103000000000000000002000000000000001c80000014001100626f6e643000000000000000000000009408b851fcb4f010aec81c95d673ec2d47d14e6e887813c0e29e2d2114ac004f34f04b7660bc365b96c5347d2dfb697bcfb07390366502f6cfb9831e95a6b8ed5a652ce08201ad84d83b89"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xc, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020)

1m9.10586909s ago: executing program 7 (id=264):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a)
open(0x0, 0x145142, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, 0x0)

1m8.095859722s ago: executing program 7 (id=270):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x48810}, 0x4000800)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0)

1m5.483340591s ago: executing program 7 (id=274):
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x13, r0, 0x0)
fallocate(r0, 0x0, 0xdcd8, 0x6)
r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/109, 0x6d}], 0x1)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
syz_memcpy_off$KVM_EXIT_MMIO(r2, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18)

1m4.919783506s ago: executing program 35 (id=274):
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x13, r0, 0x0)
fallocate(r0, 0x0, 0xdcd8, 0x6)
r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/109, 0x6d}], 0x1)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
syz_memcpy_off$KVM_EXIT_MMIO(r2, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18)

44.618203813s ago: executing program 6 (id=343):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x5}, {0xffff, 0xa}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4008040)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
sendmmsg(r0, &(0x7f0000000740)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @broadcast, 0x4}, 0x80, &(0x7f0000000340)=[{0x0}, {0x0}, {&(0x7f0000001400)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000f80)}], 0x2}}], 0x2, 0x11)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

43.240355297s ago: executing program 6 (id=346):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x18, 0x0, 0x0, &(0x7f0000001100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x497c}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000004c0)={{0x80, 0xfe}, 'port1\x00', 0x8, 0x140477, 0x7fff, 0x800004, 0x1ff, 0x0, 0x80000000, 0x0, 0x6})

43.073796246s ago: executing program 6 (id=349):
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x5, 0xc9, 0x100}}}, 0x8)

42.708869617s ago: executing program 6 (id=350):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(0x0, 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, 0x0)

41.958934997s ago: executing program 6 (id=357):
socket$kcm(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
r3 = getuid()
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x5000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[], [{@dont_hash}, {@fsname={'fsname', 0x3d, '}\'!-'}}, {@appraise_type}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@euid_lt={'euid<', r1}}, {@context={'context', 0x3d, 'root'}}]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000)
r5 = socket$inet(0x10, 0x3, 0x0)
timer_create(0x0, 0x0, 0x0)
sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\t\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
recvmmsg(r5, 0x0, 0x0, 0x48, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000002800)={0x2020}, 0x2020)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
r6 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$bt_hci(r6, 0x84, 0x85, 0x0, &(0x7f00000010c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="06000000040000000600000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581"], 0x0)
syz_usb_control_io(r7, 0x0, 0x0)

40.739270693s ago: executing program 6 (id=361):
io_uring_setup(0x149, &(0x7f00000000c0)={0x0, 0x9eac, 0x80, 0x2000000, 0x2d7})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0xa, {}, {0x5, 0x8, 0xc1, 0x6b, 0x9, 0x2, "84653375"}, 0xffb, 0x2, {0x0}})
unshare(0xa020480)
ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0)

40.33056173s ago: executing program 36 (id=361):
io_uring_setup(0x149, &(0x7f00000000c0)={0x0, 0x9eac, 0x80, 0x2000000, 0x2d7})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0xa, {}, {0x5, 0x8, 0xc1, 0x6b, 0x9, 0x2, "84653375"}, 0xffb, 0x2, {0x0}})
unshare(0xa020480)
ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0)

12.254887858s ago: executing program 2 (id=439):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6(0xa, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000)

11.900260197s ago: executing program 8 (id=440):
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x118, 0x0, 0x330, 0x298, 0x330, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'pimreg0\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}, {{@ip={@multicast2, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'vlan0\x00', 'veth1_to_bridge\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x188}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200011904000000000000001c"], 0x28}}, 0x0)

11.864184241s ago: executing program 2 (id=441):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x14, r1, 0x1, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0)
mkdir(0x0, 0x0)
dup(0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$nl_generic(0x11, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500001cfffe00000002907800000000e000000111"], 0x0)
sendmsg(r5, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

9.52722916s ago: executing program 8 (id=445):
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x7b52e4aff0f1e2e5, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

9.510584524s ago: executing program 2 (id=447):
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x10800, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r0, 0x0, 0x36}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net\x00')
ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0)
socket$kcm(0x29, 0x2, 0x0)
r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0)
ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0x0, 0x0, 0x4})
mount$fuseblk(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x3800000, &(0x7f0000000740)=ANY=[@ANYBLOB="c40e3d2742d4639af6422cce3a4674470871d8b08702028fdd8138c416db4b4a30f157756f502997793c9c0ae8260c4209ed1b14eff2d8ef7dcad54e8075a1dc6a280961b2b5136f4056dfb832e49c2b2b04f4385b7a135c0da8d24e60c638f98deb2f1eb83bfad877b84fc53b1d5cac740500000000000000f8a84448a4878729ac02a4e0fc8854e1a613f68fe81e2af0dd3924d79cc4e3f8318e2e122648cdaff4d988935f51fa09786087d68c48ffd33b1cf0dc215ab72dacc38841ebc0dc79884fdbc294", @ANYRESHEX, @ANYBLOB="a32d3fe451914e95872e3fd83ee890e506189d71c1de9cc5ef3f57d50dd978a8c25c0ac07412216c6da82e3ded10c6b0692efac8425e45a9d26d274f062e54f050137efa9e9d1f2f080f809d6ec2c38ef8bf46", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000a00,smackfsdef=sched_switch\x00,e', @ANYRESHEX=r2, @ANYRES64=r5, @ANYRESDEC=0x0, @ANYBLOB="2c7375d68bdf24626a5f747970653d21337375626a4d726f6c653d73636865645f73776974", @ANYRES16=r3, @ANYRESDEC=0x0, @ANYRES8=r1, @ANYRESOCT=r1, @ANYRES64=r0, @ANYRES8=r1, @ANYRES64=r3, @ANYRES8=r3, @ANYRESOCT=r4])

9.333702144s ago: executing program 8 (id=448):
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@private1, @in=@dev}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f00000002c0)=0xe8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="0000000002000100240012800b00010065727370616e0000140002800600020030000000080004"], 0x44}}, 0x0)

9.143111491s ago: executing program 8 (id=449):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32], 0x0}, 0x94)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$eJzs3X2QVWUdB/Bzd1lYZGI3BMGBFShfQEIhpVRS7kBBuDJtkjU2GQtioaAwzBI1ii04WLgam1kz5QxCiwjDUmszGmXlygyQk9PWjIPIgjLThjG9SMXEFjU2e+99Lveey+5eyVxfPh9m99zn/s7znOeeOX/c72WfcyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIoujgjtr/rB1ZV75+06hFt199cPSq0RNWVDWdHHWg+rzdl/absWjovuntdw6b0bH6SPX65tsu6IyiRKpfItN/3vSPX/+FufPmlIcBaz+Z3lZWdnfIdNfD6Ub/vCe7+uX/zI+iqCw2QGlmu7s0p52IHyBaXjhgj8pmbVsycEGyduvmp+ouX7J1XOFLp0t5X0+gr2Suq45T11Iy9bsktke2nXPpJfIu0XT/+AX3prwIAOB1mVST2mTfjmbe4mbb9fF6rJ2MtRtj7fAOoTG3cSbS4/bvbp5j4vU+mmcyHRUGdDvPWD1z/rPtmnj/WDsWNV7HPPN3zUSa8u7muSxW76t5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyVvFa3Ys34z714sOyX549bvfLk4WvLL3zoq/8uWXrzS68dqlnzl7ah+6a33zlsRsfqI9Xrm2+7oDOKKlP9EunuiWknXr1kYvWcUeuf+N7ETc+OP16aGTds++XsHO0PD66siKIFOZWOMOzRwVFUk19INaPvFhZuTT2YHQoAAAC8k5yb+l2SbafjYFleO5FKk4nUvyAdFstmbVsycEGyduvmp+ouX7J13JmPV9PNeMnTjpdtV576SeQE4xB/4+OdqoddlxeM07P4iPE8P+X5l1+oGHHtT5+pOu+mlde/NPKax9tmfnP48UX7K+8YtGrc2CsK8n9lz/k/nDn5HwAAgP+F/B8fp2e95f/PzK+75Y5HvnJszD2HVw66+8H9G4eVH7nplsn7/jj8hosvvqz2xoL8PybvkAX5P8w45P+S6MzyPwAAALyV/b/zf7JgnJ71lv/bhzff/MB7Di2sbOt4evtlK/b0X3j1RUMOPHTR3In3XjdozPkNBfl/UnH5v1/utMOTz4UJL66IoknFn1QAAAAgT/h/91MfLYS8nv7kIJ7XW+dtGd3y6swvTxj78KH6P1Vtnvj5jUMe37lh5jd2PXf3/RPbzi7I/8ni8n/Zm/NyAQAAgCI0HTpnxNBPJ38e3X/01vnf/+yuR+9b+sWrLtnbOWvC2l9UP72jviD/1xSX/wf0zcsBAAAATuPE+GsW/mPnkd9e1/yJ+5qO/v5Lq0p/NaNp9/62hqZ/bh81e/XkgvxfW1z+Pyuzzax8SHfaE/4K4VsVUVTe9WBZurA3apyWLQAAAABvkJDT75ryfMm9A6edu2Xub06Me+KFPZ/aN3vxhnPWTGp69n2tiz9y4WMF+X9Zz/f/D3c6COv/8+7/V7D+P6eQvuvfVDcGAAAA4N2ocD1/uD1++psLuvv+/WLX///w6xv+mqiqf/ID8342q/P9zT/Z2zr1wZNVf5hz/OGW5MgnL32xIP/XF5f/S3O3b+T3/wEAAMAZeLt9/9+NBeP0rLf7/7c980j1o1d+6GtXza2buuN3H77iz68Mn9qwPXpl+UfbFx342K5fF+T/xuLyf9gOyn15reH83FMRRSO6HmTuJrgtTHdxrNBSllNIn/hYj7mhR6bQMiCnkLIs1uODFVE0tutBfazw3lBojBWODc4UNsYKbaGQuR6yhR/ECq3hSvvO4Mx044Ufh0JmgUVLWEExKLskItbj79316Cqctkd79uAAAADvKiE8Z7JsWX4zikfZlkRvO5zV2w4lve1Q2tsO/WI7xHfs7vmoNr8Qnv/Rt294ecBdD2yom7Jl04KqhrPX/euxyZNuX7Z2Z93SziF/W7euIP9vLC7/h1PRP73pbv1/FNb/Z77XMLv+vzYUKmOFllCoid8xoCYcIx12G8IxKmsyPY6NyBYAAADgHS18LlDax/MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7J373FW1nXiwL8zzIUZhplRMS+RISaKwTCMKYaZID/TnwQOq6WFJgSDjgxCXEzQTUTd1VzB2+ZtE0jdtIwoNbVUeGnekspLsKl5SfHSK41lS5Js133NnPM9nPOcOc5BQBn3/f5jzvecz/f6nMuc7/M85/sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/N2z85GVfeHmfj/xg3cKBi1eP+krfI4cMn3DMNTceu/jhb0/e777f//8+aw575sydR60955XRi245de+3QmjuKFeSKl5y6F/XNQwePabvotuvGbz0kYF/qUjXm46HXu1/StN3zoutru0dwh0lIZQlA4NrUoHy9P2aWF/fmhB2CJsCmRIt1akSyYbDA1UhLAmbApmq7qoKoSYrcOwT9624uD1xRVUIe4cQKpNtPFuZaqMqGRhQkQpUJwPTy1KBv76TkgncWZoKwBaLb4bMi355c26G+s7LFXj9lW+1jn2wksPrERP1hfO9MXIbdypLRfKB5i162vKqY5vIe3us9G7rBu+2vO18iact+4tU+hvKO5tClaF0csuUiXPaZsdHSkNDQ49CNW2j5/np9WdN2px0t3kdxg7Ub5XX4aoLe49d/OhRw2+tG35Dn0ELN25pNwtt3m2tMqRfc93meYxG+DzpBm+/vG9J/XzpCiHsf9v42798wcs3L7h87K4HPbHTsDc+u/vdLT+75YTxxx++fsVXf//jvPl//bvP/+PLOd6W5uSOrb5dm5qbx0dqYmJdbWpuDgAAAN1Gd9hr+srq/5722X3HDX185OrqW2+659SL7/v8tT9r3a/t4bE77fj8vvN+lDf/71fc8f94yL8me7QrQxjRkTi3LoRdOx5PBW6O3flqXQh7dqSacwMjE4GVIezWkRiYqSpRomcs0S8ReLU2HRiRCDwYA82JwI0xcEkicF4MLE8EJsXAykTgsBgIrbnj2K82PY6iA1UxMCG1EZfHsxD+XBtbS2yrZzJVAQAAbCXp2WF57t2scx22NEOcXi6v6ipDPAO7YIbKRA3JGWxmWlWwhrKuaijtqobMuOe/+/Dzai7pqua80zBKcjNcWXXLpT8aNumNu2e8tOG0Iz7x2quP1S/96afXXfPGU9Mr79/j8ofz5v+N7z7/r+ykIyV5x/9DGNfxN+YuTUfaMvEJzTkZAAAAgC3w1sADvvydsq/NfeH3jwz75K+vfez1lQ9/dO8zb1v7/Bk/+NZ3au4fnTf/H1Hc+f9xn0iPrMxhVdwNMbUuhMbcQKrag/MDqaPevdIBAAAA6A4yx+Mzx8Jb07epU7ST8+n8/M2bmT8e+B/Raf7131p2/Y6feGT2Q7W3zXhqw+NfWTl64bEz3xh05dmP7HvoQU+N/Gze/L+5uPP/q3NvU514MPbi8roQemYFHoq9bA906BcDLxyaG0iP/8G4AS6KVaVPTMhUdVEsMSEGGhOBJYVKPJYpsWtuIP1kZRo/NzOO1nSJrAAAAAC87+LugHhcPp7/v2LBXZf9x41/umzVgUtnnzz98de+V1H5zknL7zyxzwX39li008hJefP/CZt3/n/HPDjv9P62XiEMKQuhR/KHAauqUwsDxkBNSTpxT3Wqrh7JqhZUh3Bw+8CSVb2YXv+/LLnG4JNVqapiYNf+N60f0J64oSqEIdmBNeOXHtCemJMIZBr/YlUIH28fbbLxn/RMNV6ebPyqniHskRXIVDWpZwjtjVUkq7q/Mn0dg2RVyytD2CkrkKlqWGUIcwMA3VX8Xzo5+8FZc+dNndjW1jJzGybiTvyqMKW1raVh0vS2yZUF+jQ50eecdYzOyR9TsZe++V16jaLVx0ytKyad+aFgY3Zb6R35eWcOpu/HL0PlHeNsKs+5u39yyPvuld9EyPoqVWjIpdt4yNXZlWx6EvPqj/krQq/Qc86slpkNZ0ycPXvm0NTfYrM3pf7G40ypbTU0ua2qO+tbES+PgstlJbzXbTUgu5Ihs6fNGDJr7rzBrdMmntxycstpwz7VNKxp6P5NjUPaB5X+28VIB3RWc2Kk7ywtclhbcaS7l2VV8n58aEhISHS3xE2Xj39m0UcXV3538UmXPHH++WefcvrOt1057ft9p48fdOXnlkz9et78f8a7z//jp0784E+vz1Do+H99PMyfenzTYf4JMbCk2OP/9YWO5mdODOiXCMyPgfkO8wMAAPDhEHdHxr2Zcad07SvfOP1/Tjii9NA/HP2LpqGDdrnw1qkDbnx94+kf23vekmvLKvKv/ze/uN//b6X1/zNL1x9VaJn/gbFEY6H1/5PL/GfW/59faP3/5DL/mfX/l3wA6//PyQQSm+TP1v8HAAA+DN6/9f+7XN4/eYGAvAxdLu+fvEBAXoYul/Ev9gIBm73+/89/XrbDx47YrW/ZF56YuNedB/7mpGkP7vKjUVev+3RT/TfPWPPzZXnz/0uKm/9buB8AAAC2Hyfs+6UBC14a8vVzpj/ww8Ezdn7purOfH3HPL4/75MYxfddVr+v76bz5/5Li5v/v//p/odD5//0KBZoLLQxo/T8AAAC6qULr//3t42d987p+O24Y1O/M29+6emrJ8L2fO/XXbRc9NOrwj435xyWTrs2b/y8vbv4fT7sozckde/N2bWpNu5Bc025dbeYnAwAAANA9lIaGhvIi8+YsjDryvbf5dHop0HdLZ9vtE6vWnHvvdX8fcvP5C9Ydf3rtQUf+oeyQOydf99KCU/boX/Pc2rz5/8ri5v85v8tYdWHvsYsfPWr427fWDb+hz6CFGzcd/wcAAAC2nWL3SwAAAAAAAAAAAAAAAB+8Y1b95Kz/+uWY4+4cNu/qR3d+/OT//PqsM1on/aLtiHUHPLv0hk/tk/f7/zCuo1yh3//H6/7F3xf0yckdW+16/b/0/WNHL5vbsWThqtoQ9soOTF0wdYeQvjb/PtmBFScO3KU9sSBZ4u7nDnu5PXFSMnDk4B03tCc+kwhMiIsk7pYMxKsqbuidCMTlFZ9MBuL2WJ4MVKQDF/ZOjaMkua3+UJPaViXJbfV0TQh1WYHMtrqjJtVGSXKAVyQCmQF+LRmIAxybDpQme7WsV6pXMVATiy7uleoVAADbrfgtsDxMaW1raYxf4ePt7mW5t1HOkmXn5FdbUmTzv0svTbb6mKl1xaR7JL+LbrrWeHmobB/C0Lyvq9lZSjpGuXVq6WLT9Skw5K5WeystUC5pczddReERVaVG1DBpetvk8i4Hvn/XWZrKuswyNG+yk52ltGOTFlFLEX0pYkRFbpsiuhzvl4aGhh6JXMNjsD7k6OoVUezv9bPX+Sv0KsjOs3zUQQOOW/bcgRMWPXnQtKnhI5e9M2Li5FmHXPHiU0vnjxw0oUfe/L++uPl/Zfa4NqQvBjA/Xlnv4LoQJhQ5IgAAAPjwO+W05y674P5LX32hecDL04dcuuK3c6+aV1Z783mHP3336W+OX3jSlsYHDHtj6Kl3/ebcjU2jHrqy99X3X7PTkXU//H/Vvea+tWLQmy/cvVfe/L9fcfP/uAcrfSg4tbdjZbz+/7l1IXRcWr8+Fbg5DverdSHs2ZFqjiVSF9Q/KpZoTAVujjtMBsYSE5pzq+oZA8sTgVdr04GVicCDMZDeS3FTSO/KubQ2hAM6UuNyS8yIJeoTgaNjoF8i0BADjYlA7xgYkQi83jsdaE4EHo2B0Jq7rW7tnd5WAAAAmyM9zyrPvRuS87zlZV1lKOkqQ3VXGUq7ylDZVYZCo4j3fxwzlCdOXinJylSerLUqUUtehngx/M3uV16G8FhuzmTBvKbj+QeZ8w1KcjNccWbF9Dc/33/R8UPGrB/ftPhzc38a/uHtOW9d8OYvz6977pqNJXnz/8bi5v/Vubep1h+M8/9N1/9LBR6K3bs8njreLwZeODQ3kN4x8GCc7F6Uqao5XSI9ab8olhgRA/0SgRkxMCIRmDAuHViyS24gPdPONH5upvHWdImsAAAAALzv4g6CuJsmzv+fXTv+iWnjf3vQZX1nLzx/+VFffvrXx736i3t73v3d/osebitZuzpv/j+iuPl/bK9XdmPnxd6s7R3CHSWbepMJDK5JBeJ+jJr48/i+NSHskLWDI1OipTpVoiLRcHigKvUL9YpkVXdVpdYYiPePfeK+FRe3J66oCmHvrL0vmTaerUy1UZUMDKhIBaqTgellqUDc85MJ3FmaCsAWy+wVjC+o9KkuGfWdlyvw+vuwXBM0Oby8faCd5OvsN1fbSmXygfQ+1YzNe9ryqmObyHt7rPRu647vtnrvtuwvUulvKO9sClWG0sktUybOaZsdH8n+JWuebfQ8Z/9KtZj0Vngdzn/vve1aZbIDjYmPj8bOy3X+OiyJ1a26sPfYxY8eNfzWuuE39Bm0cGPR3Sgg/lB45rCr6rM377ZWGdKvuW73edLs86Q7/hvo52kLIYy7d+xFjYfcuHDSiP7X73xH7fDLvzT4lkMbnx1XM2eXw8e89sV5efP/5uLm/2WJ2w4b48acVRfCvlkbd1Xc/KPqUp+DWYHUp+RO+YHUIfeXagt+cgIAAMDWltndkdlf0Jq+TZ0Qnpwn5+dv3sz8cX/FiE7zF9vv/lecsnL0hAN/23f8XoccvM9Zdy04er+/Tbz+tT9Wj5z0wPd+tfr6vPn/hHef//dMdNPxf8f/2UYc/+/U9r4rumfygflbtCs6rzq2Ccf/O7W9v9sc/++U4/+O/3fG8f8uOP7fqe39acv7ljTDl64Qwr9f/vm/vX3Pbv02LC393pQH5vU//rLvL1r2k52f+efH/mn69H33/FXe/H9GcfN/6/91vmhfZv2/CYXW/5tRaP2/+db/AwAAtqkCC80l53l5q/flZUiu3peXocsFArtcYtD6f5u9/t+L/3Lpgr2mjv3GiWc9dnDvR+tHrRkz6O8nvbrnmuuevHLoIyf8/dt58//5xc3/48uhV3br3WX9v37jClR1SQzMsDAgAAAA26NCOwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4YJ31xynnjVjw+J+ap39l/fLx32nd8fGHprzefMQPRy87es0pu5xyb581hz1z5s6j1p7zyuhFt5y691shtHaUK0kVLzn0r+saBo8e03fR7dcMXvrIwL9UpustT99+NCd3bPXt2hCWZD1SExPratvvbAocO3rZ3LL2xKraEPbKDkxdMHWH9sSNtSHskx1YceLAXdoTC5Il7n7usJfbEyclA0cO3nFDe+Iz6UBJsrv/1jvV3ZJkdy/uHUJdViDT3VN751aVaeOIdKA02cZ3a1JtxEBNLHpVTaqNGGiLJVp7hjCkLIQeyaoeqUxV1SNZ1U8rU1X1SFZ1dmUIB4cQypJVPV+RqqosOfLHKlJVxcCu/W9aP6A9sbQihCHZgTXjlx7QnpiZCGQaP6YihI+3v2SSjd9anmq8PNn4v5aHsEcIoSJZ4s2yVImKZIkXy0LYKSuwaSOWhTA38OEQP30mZz84a+68qRPb2lpmbsNERbqtqjClta2lYdL0tsmViT4VUpKVfuec9z72360/a1L77epjptYVky5Llyvv6HJTec7d/bf33sd+VWdXsun5yKs/5q8IvULPObNaZjacMXH27JlDU3+Lzd6U+tsjHU1tq6HdZVsNyK5kyOxpM4bMmjtvcOu0iSe3nNxy2rBPNQ1rGrp/U+OQ9kGl/26NkS59/0e6e1lWJe/H+19CQqK7JUpzPt0at/fP8bwv+ps6Wh4qOz6g86YV2VlKOka5NQY98j2O+L18TelyREPzJg55WZq6zrJ/3mRiU5aqVJaOr3V5k8Psmko7Nmm8XxoaGnoU2g71uXezN+8bW7B5n05vumLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwv+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAD//+GI8JI=")
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000938644890fc7cc09b465813464d610e6f74fe40afd92dda05194b0349c035f93f6d0f2204281d3c7e4c3bdd2eb7d5b7fb7b4aea4553a9b8937"], 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff)
write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x29f)
write$uinput_user_dev(r0, &(0x7f0000000180)={'syz1\x00', {0x3, 0x9, 0x0, 0xfff7}, 0x38, [0xffff, 0x8, 0x7, 0xe9, 0x4, 0x6, 0x5, 0x10, 0x7, 0x950c, 0x1294, 0x8, 0x2, 0x5506fd78, 0x8000, 0xffffffa2, 0x7, 0x1, 0x8, 0x401, 0x8, 0x9, 0x3, 0x222, 0x1, 0xde, 0x10000, 0x7, 0x5, 0xbf7, 0x490, 0x200, 0x6, 0x4, 0xa, 0x7, 0x100, 0x9, 0x3, 0x1, 0x8, 0x5, 0x9, 0x4, 0x4, 0x4, 0xa, 0x0, 0x635dfebb, 0x0, 0xfffffffe, 0xd, 0x3, 0x0, 0x7, 0x0, 0x0, 0xae, 0x4, 0xfffffff7, 0x5, 0x3, 0x2, 0xfffffff9], [0x7, 0x7, 0x7, 0xb, 0xdd6, 0x6, 0x400, 0x7fff, 0x7, 0x52263b86, 0x0, 0x3, 0x5ce3, 0xfffffff7, 0x7, 0x3, 0x4, 0x200, 0xfffffff8, 0xb0, 0x6, 0x8, 0x20000, 0x45, 0xffffffff, 0x0, 0x2, 0x3, 0x3, 0x9, 0x6, 0x9, 0x8, 0x9, 0x385a, 0x3ff8, 0x9, 0x1, 0x4, 0x2, 0x8, 0x4, 0x1, 0x8, 0x3, 0xfffff305, 0x6a2e, 0x2, 0xf4f4, 0x8, 0x2, 0x36, 0xb6, 0x92, 0x0, 0x1, 0xfff, 0xfffffff9, 0x7, 0x1cd4, 0x5a26, 0x17, 0x80000001, 0x9], [0x4, 0x8000, 0x0, 0x23, 0x0, 0x2, 0x200, 0x0, 0x4, 0x80000000, 0x1, 0x6, 0x51d, 0x9, 0x5, 0xa4, 0x6, 0x0, 0x4, 0x1, 0x2, 0x7, 0x0, 0xe000000, 0xacd, 0x4, 0x7, 0x9, 0x40, 0xc, 0x7, 0x6, 0xa, 0x2, 0x7, 0xb7, 0x2, 0x9, 0x3, 0x0, 0x4, 0x81, 0x5, 0x7, 0xfff, 0xdb91, 0xfffffffc, 0xd, 0x58cb, 0x1, 0x519eb04a, 0xf, 0xdd7, 0x4c, 0xffff, 0x6, 0x6661, 0x4, 0x401, 0x7eedff85, 0x0, 0x1, 0x1, 0xc7fc], [0x7, 0x1, 0xc, 0x1, 0x200, 0x101, 0x101, 0x4, 0x99, 0x4, 0x8001, 0x5, 0xe02c, 0x816b, 0xe, 0x9, 0x101, 0x5, 0x4, 0x200, 0x1, 0x5365, 0x5, 0x8, 0x7, 0x4, 0x5, 0xffff8001, 0x10, 0x3, 0x1, 0xd6, 0x4, 0x8, 0xfcf, 0x8, 0x8, 0x2, 0x6, 0x10001, 0x3919, 0x2, 0x1000, 0x1, 0x0, 0x80000000, 0xb, 0xc33, 0x4, 0x7, 0x3, 0xc2e, 0x8, 0x2, 0x8001, 0x1, 0x4, 0x4, 0x2e, 0x7fffffff, 0xff, 0x1ff, 0x6, 0x5]}, 0x45c)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000})

6.290164168s ago: executing program 8 (id=455):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='hybla', 0x5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
socket(0x10, 0x803, 0x0)
socket(0x10, 0x803, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0)
write$sequencer(r2, &(0x7f00000001c0)=[@t={0x81, 0x5, 0x0, 0x0, @generic}], 0x8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)

6.069897806s ago: executing program 2 (id=457):
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x2, 0x7e5104, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1, 0xd0}}, 0x50)
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x89b0, &(0x7f0000000340)={'bond0\x00', @random="00009e0c1100"})
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r2 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0)
keyctl$chown(0x4, 0x0, 0xee01, 0xee00)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="420000000100000004000000000000b028b96d02d2f55c032381e40000000000200000001ec0109e384799f6c7330e35f3c757b8bb33b9581f7210bbd3"], 0x24, 0x0)
add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000100)={0x0, 0x0, 0x1000}, &(0x7f0000000480)=ANY=[], 0x0, &(0x7f0000000a40)=""/4096)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffff9, 0x1, 0x1, 0x9, 0x13ec, 0x1}, 0x20)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c)

5.878261097s ago: executing program 0 (id=458):
syz_io_uring_setup(0x3df8, 0x0, 0x0, 0x0)

5.614171606s ago: executing program 9 (id=364):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101)
r2 = epoll_create(0xff9)
open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, <r4=>0x0}, 0x2020)
open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
write$FUSE_INIT(r3, &(0x7f0000002300)={0x50, 0x0, r4, {0x7, 0x9, 0x0, 0x1030002}}, 0x50)
write$FUSE_INTERRUPT(r3, &(0x7f0000002240)={0x10, 0xffffffffffffffda}, 0x10)
r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0)
dup3(r5, r3, 0x0)
close(0x3)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
pselect6(0x25, &(0x7f00000001c0)={0x6b, 0x300, 0x0, 0x0, 0x1, 0x37a0}, 0x0, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x2, 0x2000000})

5.368607268s ago: executing program 0 (id=459):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, 0x0)
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18)
sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@deltaction={0x14, 0x31, 0x200, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x400c044}, 0x480c5)
close(r0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)

5.056262528s ago: executing program 2 (id=461):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000000)={0x1, 0x2, 0x1, 0x5})
ioctl$DRM_IOCTL_GET_UNIQUE(r3, 0xc0106401, &(0x7f0000000040)={0xffffffffffffff85, 0x0})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000180)=[{0x20, 0x5, 0x2, 0x70ff}, {0x28, 0x7, 0x1, 0xa56e}, {0x6, 0xfe, 0x0, 0xa1a}]}, 0x10)

4.96008539s ago: executing program 5 (id=462):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e978000000000000"], 0x1c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)

4.043836836s ago: executing program 2 (id=463):
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680))
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x130c17, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80d02, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000000)=0x18, 0x4)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
fremovexattr(r0, &(0x7f0000000480)=ANY=[])
syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)

3.647379997s ago: executing program 0 (id=464):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
inotify_init1(0x800)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x10e, &(0x7f0000000380)={0x0, 0x8000016, 0x400, 0x3, 0x2007d}, &(0x7f0000019080)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[0xffffffffffffffff], 0x1})
io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0)

3.647053577s ago: executing program 9 (id=465):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000001100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x497c}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000004c0)={{0x80, 0xfe}, 'port1\x00', 0x8, 0x140477, 0x7fff, 0x800004, 0x1ff, 0x0, 0x80000000, 0x0, 0x6})

3.625995531s ago: executing program 8 (id=466):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = getpgid(0x0)
r1 = syz_pidfd_open(r0, 0x0)
r2 = pidfd_getfd(r1, r1, 0x0)
setns(r2, 0x66020000)
mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)
umount2(&(0x7f0000000040)='.\x00', 0x2)

3.593394162s ago: executing program 5 (id=467):
prlimit64(0x0, 0xe, &(0x7f0000000340)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b66, 0x12, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x80089203, 0x0)

3.359398312s ago: executing program 0 (id=468):
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000000)='8\x00\x00\x00', 0x4)

2.684541973s ago: executing program 9 (id=469):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000480)="19dcaca56eb028a80e6c8941d6f01fdbc50c93e74c", 0x15}, {&(0x7f0000000680)="db642faddd0e6771b14d0750d254a232cfa65ba23251f1308384efb9f579c3acfdd141160b8a3f04cb2a8986e2d5f57331a3be8126cc9bcd80068e571268146654a7b6a0311a58c352d93cd7b79982c71a8bbb9600a9ae1f7508cd3fd56fc2b749c1a45420243875137600bdf5001827c54e82aef5278ab81a7242715a532b5cf7be2193714484c75fbaaaad1c2d3a0533b16918c07c83984c050d902aececb687d05d9dec254d089f01530aa693b1a5456a3d3b0d51968107fa48340be469ad87", 0xc1}, {&(0x7f0000000240)="2dd9a3e107fffc29294833c9400bc7bcc25863adfba5adfd36821fe0566a9de122c2398f4e7232edde627269144f596fded1ef3b23632030205b83ceab58c37596bba6d6479585db5181bed145a869d69e1080dfcbf5411a54da47909dd8d85b6663164f7ea6e8c22505000000dd4cc7eae5a64d1572971a2f", 0x79}, {&(0x7f0000000540)="0cb45d42e5597a52e2142be516641886f4464a", 0x13}, {&(0x7f0000000cc0)="1f4ffa7c23f5470cd6e73c5e7be1b40a21618cfb007f3e613410075f0ad9022ada286460a2137409efa4e1be3ce7a2e99b6d0614513597299ee99656dad90f11ed91399b2dcb3101affc9e3e03c3a3c488f2b9cf", 0x54}, {&(0x7f0000001040)="8c30fb2308c0f5a3fccc413ed7e871fdd83404204f3a859c0fa2a41c01ca1b4455d51295fc0cb29af1b683ad33d0ae7d4a07d332f7e22798687d1637f047dcb22827aeb6c6fa92989694a3741db1c7478cf23be260d66f8ad5ecf8e5122a7e6d31fcded7bd02b4cd1b74946b639dac90f2904df70bf368d4406a7573e564b3c9ca875ad5036d51e4fefa870fddd2c41e41ba6eb848725c7652385d4926fb3c30864326aac268c88f03e440498f584cb2cdd1b68f7e0f1fb8153d58", 0xbb}, {&(0x7f0000000f00)="1ba1f777454791dca9824e7d97779aab33fc564a9891fabf2ac114b3ca57a9728096f5333205353f5f76fc7868a826f3ea24f427cc71d1d19c01", 0x3a}, {&(0x7f0000000f40)}], 0x8}, 0x811)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800010400000000000000008594233c2d76add12defac00ad00000095000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
connect$rxrpc(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x1e, 0x1, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x40040)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x208400, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0)
read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8)
clock_nanosleep(0x2, 0x1, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000440)=0x1f)

2.523283248s ago: executing program 5 (id=470):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, 0x0, 0x0, 0x0)

2.399426793s ago: executing program 5 (id=471):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
poll(&(0x7f0000000240), 0x0, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
socket$igmp(0x2, 0x3, 0x2)
socket$packet(0x11, 0x2, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8)
syz_open_dev$vcsn(0x0, 0x1002, 0x434901)
bpf$MAP_CREATE(0x700000000000000, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
recvfrom$inet6(r1, &(0x7f0000000000)=""/45, 0x2d, 0x0, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1)
clock_settime(0x5, &(0x7f0000000180)={0x0, 0x3938700})

1.653501911s ago: executing program 0 (id=472):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0xb0b}, 0x14}}, 0x0)

1.34559811s ago: executing program 9 (id=473):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000000)={0x1, 0x2, 0x1, 0x5})
ioctl$DRM_IOCTL_GET_UNIQUE(r3, 0xc0106401, &(0x7f0000000040)={0xffffffffffffff85, 0x0})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000180)=[{0x20, 0x5, 0x2, 0x70ff}, {0x28, 0x7, 0x1, 0xa56e}, {0x6, 0xfe, 0x0, 0xa1a}]}, 0x10)

1.239249188s ago: executing program 5 (id=474):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0x602, 0x0)
writev(r0, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {0x0}], 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
setpgid(0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1a000000", 0x4)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)={0x7, 0x0, @auto=[0x2f, 0x35, 0x39, 0x13]}, 0xc, 0xfffffffffffffffa)
r4 = request_key(&(0x7f0000000480)='encrypted\x00', &(0x7f0000001900)={'syz', 0x2}, &(0x7f0000001940)='./binderfs/binder0\x00', 0x0)
keyctl$instantiate_iov(0x14, r3, 0x0, 0x0, r4)
bpf$MAP_CREATE(0x0, &(0x7f0000001980)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00'}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f00000001c0)='net/mcfilter\x00')
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)

1.03680546s ago: executing program 0 (id=475):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
pipe(0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$l2tp(0x2, 0x2, 0x73)
sendto$inet(r3, &(0x7f00000006c0)="49b3df4f9f1aeb16fedcdcd91277af62f1bb597b6f033c53dfd8463e5ed8a391e49a5dfb02796df7c540e4fffc429aa7ee58ee066a393bb808d46741e8f86de44e7c085cf20ad1360970fd39f058f6a2a48e298f50820f48d75d86151b3e542728e08a31e10beee810bafd69cdc25bf458df711770aeca3a463c047c11062fdbbdfe5a656abe7a1abb6f", 0x8a, 0x20000000, 0x0, 0x0)
socket$inet6(0xa, 0x1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x5c}}, 0x20000890)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0x64, 0x4, 0x2c8, 0x100000c, 0x0, 0xe0, 0x178, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@dscp={{0x28}, {0x10, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x42}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x7}, {0x2, 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)

195.979675ms ago: executing program 9 (id=476):
syz_open_dev$video4linux(0x0, 0x36, 0x101100)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="170e0000000000000000010000600500070000000000080009000000000014001f000000000000000000000000000000000008000a0000000000060002000100000014002000"], 0x5c}}, 0x0)

0s ago: executing program 5 (id=477):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e978000000000000"], 0x1c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)

kernel console output (not intermixed with test programs):

4: unexpected cc 0x1001 length: 249 > 9
[   74.452832][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   74.471062][ T5147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   74.486963][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   74.495187][ T5147] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   74.503066][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   74.512976][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   75.126603][ T5824] chnl_net:caif_netlink_parms(): no params data found
[   75.176796][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   75.274271][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   75.395737][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   75.422314][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   75.508726][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.516635][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.524333][ T5824] bridge_slave_0: entered allmulticast mode
[   75.531721][ T5824] bridge_slave_0: entered promiscuous mode
[   75.580620][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.587909][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.595362][ T5824] bridge_slave_1: entered allmulticast mode
[   75.602549][ T5824] bridge_slave_1: entered promiscuous mode
[   75.648031][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.655435][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.662939][ T5830] bridge_slave_0: entered allmulticast mode
[   75.670283][ T5830] bridge_slave_0: entered promiscuous mode
[   75.709886][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.717374][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.724863][ T5830] bridge_slave_1: entered allmulticast mode
[   75.732329][ T5830] bridge_slave_1: entered promiscuous mode
[   75.742749][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.757317][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.764622][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.772594][ T5831] bridge_slave_0: entered allmulticast mode
[   75.780357][ T5831] bridge_slave_0: entered promiscuous mode
[   75.819379][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.848489][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.855716][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.863008][ T5831] bridge_slave_1: entered allmulticast mode
[   75.870383][ T5831] bridge_slave_1: entered promiscuous mode
[   75.936672][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.944899][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.952146][ T5833] bridge_slave_0: entered allmulticast mode
[   75.959327][ T5833] bridge_slave_0: entered promiscuous mode
[   75.970969][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.982725][ T5824] team0: Port device team_slave_0 added
[   76.015680][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.023274][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.030835][ T5833] bridge_slave_1: entered allmulticast mode
[   76.037884][ T5833] bridge_slave_1: entered promiscuous mode
[   76.048070][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.075097][ T5824] team0: Port device team_slave_1 added
[   76.080918][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.088154][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.096032][ T5825] bridge_slave_0: entered allmulticast mode
[   76.104064][ T5825] bridge_slave_0: entered promiscuous mode
[   76.114926][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.162909][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.170516][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.177697][ T5825] bridge_slave_1: entered allmulticast mode
[   76.185204][ T5825] bridge_slave_1: entered promiscuous mode
[   76.194751][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.218945][ T5830] team0: Port device team_slave_0 added
[   76.261586][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.272975][ T5830] team0: Port device team_slave_1 added
[   76.279787][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.287367][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.313839][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.350893][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.374612][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.381726][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.408192][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.422029][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.433747][ T5831] team0: Port device team_slave_0 added
[   76.442014][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.483272][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.490519][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.516512][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.529209][ T5834] Bluetooth: hci2: command tx timeout
[   76.529448][ T5834] Bluetooth: hci3: command tx timeout
[   76.535563][   T52] Bluetooth: hci0: command tx timeout
[   76.545726][ T5831] team0: Port device team_slave_1 added
[   76.596618][ T5833] team0: Port device team_slave_0 added
[   76.601007][   T52] Bluetooth: hci4: command tx timeout
[   76.602614][ T5834] Bluetooth: hci1: command tx timeout
[   76.612299][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.620850][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.646817][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.681577][ T5833] team0: Port device team_slave_1 added
[   76.713416][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.721024][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.747251][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.760540][ T5825] team0: Port device team_slave_0 added
[   76.790630][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.797595][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.824033][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.836721][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.843912][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.870054][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.882983][ T5825] team0: Port device team_slave_1 added
[   76.909538][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.916693][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.943171][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.979813][ T5824] hsr_slave_0: entered promiscuous mode
[   76.987034][ T5824] hsr_slave_1: entered promiscuous mode
[   77.029187][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.036423][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.064084][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.081855][ T5830] hsr_slave_0: entered promiscuous mode
[   77.088558][ T5830] hsr_slave_1: entered promiscuous mode
[   77.095276][ T5830] debugfs: 'hsr0' already exists in 'hsr'
[   77.101818][ T5830] Cannot create hsr debugfs directory
[   77.138588][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.145709][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.172882][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.276987][ T5833] hsr_slave_0: entered promiscuous mode
[   77.283491][ T5833] hsr_slave_1: entered promiscuous mode
[   77.289767][ T5833] debugfs: 'hsr0' already exists in 'hsr'
[   77.295990][ T5833] Cannot create hsr debugfs directory
[   77.307530][ T5831] hsr_slave_0: entered promiscuous mode
[   77.313942][ T5831] hsr_slave_1: entered promiscuous mode
[   77.320367][ T5831] debugfs: 'hsr0' already exists in 'hsr'
[   77.326097][ T5831] Cannot create hsr debugfs directory
[   77.519714][ T5825] hsr_slave_0: entered promiscuous mode
[   77.526617][ T5825] hsr_slave_1: entered promiscuous mode
[   77.532957][ T5825] debugfs: 'hsr0' already exists in 'hsr'
[   77.538701][ T5825] Cannot create hsr debugfs directory
[   77.943801][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   77.965540][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   77.984462][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   77.996505][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   78.046690][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   78.059853][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   78.071511][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   78.083911][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   78.167525][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   78.186285][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   78.219220][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   78.231092][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   78.317601][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   78.329683][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   78.341809][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   78.361580][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   78.438023][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.491987][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   78.507876][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   78.518523][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   78.546719][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   78.561991][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[   78.599929][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.607080][ T5834] Bluetooth: hci3: command tx timeout
[   78.612018][   T52] Bluetooth: hci0: command tx timeout
[   78.613461][ T5828] Bluetooth: hci2: command tx timeout
[   78.627197][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.634605][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.671148][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.678323][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.686898][ T5828] Bluetooth: hci1: command tx timeout
[   78.687187][ T5834] Bluetooth: hci4: command tx timeout
[   78.733234][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   78.794891][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.802044][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.811421][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.818755][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.836460][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.851722][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.893785][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   78.945353][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   78.994576][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   79.016661][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.023984][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.056862][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.064135][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.076439][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.083730][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.125444][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.133024][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.266052][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.296240][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.409567][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   79.453581][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   79.477460][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.502013][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.509182][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.555719][ T5824] veth0_vlan: entered promiscuous mode
[   79.570436][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.577648][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.647726][ T5824] veth1_vlan: entered promiscuous mode
[   79.736751][ T5833] veth0_vlan: entered promiscuous mode
[   79.796267][ T5833] veth1_vlan: entered promiscuous mode
[   79.809320][ T5824] veth0_macvtap: entered promiscuous mode
[   79.828827][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.847401][ T5824] veth1_macvtap: entered promiscuous mode
[   79.905549][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.967891][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.028840][   T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.057404][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.067710][   T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.076631][   T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.086718][ T1149] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.099221][ T5833] veth0_macvtap: entered promiscuous mode
[   80.125302][ T5833] veth1_macvtap: entered promiscuous mode
[   80.155158][ T5825] veth0_vlan: entered promiscuous mode
[   80.170012][ T5825] veth1_vlan: entered promiscuous mode
[   80.255872][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.273574][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.317888][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.376006][ T2926] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.387498][ T2926] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.403456][ T5825] veth0_macvtap: entered promiscuous mode
[   80.419052][ T2926] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.429694][ T2926] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.441578][ T5830] veth0_vlan: entered promiscuous mode
[   80.448609][ T3024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.458786][ T3024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.501403][ T5825] veth1_macvtap: entered promiscuous mode
[   80.572181][ T5830] veth1_vlan: entered promiscuous mode
[   80.600095][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.617344][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.637745][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.662264][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.681315][ T5834] Bluetooth: hci2: command tx timeout
[   80.686756][ T5834] Bluetooth: hci3: command tx timeout
[   80.688755][ T5828] Bluetooth: hci0: command tx timeout
[   80.735191][ T2926] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.745154][ T2926] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.762333][ T5828] Bluetooth: hci4: command tx timeout
[   80.766321][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   80.771157][ T5828] Bluetooth: hci1: command tx timeout
[   80.794355][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.803124][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.803499][ T2926] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.819702][ T2926] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.896020][ T5830] veth0_macvtap: entered promiscuous mode
[   80.915321][ T2926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.938184][ T2926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.950067][ T5830] veth1_macvtap: entered promiscuous mode
[   81.053690][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.379674][ T5831] veth0_vlan: entered promiscuous mode
[   81.467443][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.482485][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.494519][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.525522][ T5831] veth1_vlan: entered promiscuous mode
[   81.597942][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.615218][ T3024] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.621677][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.630267][ T3024] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.654758][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   81.664399][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   81.697307][ T3024] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.714504][ T3024] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.730692][ T5884] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   81.902567][ T5831] veth0_macvtap: entered promiscuous mode
[   81.912184][ T5884] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[   81.936834][ T5831] veth1_macvtap: entered promiscuous mode
[   81.949003][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.995756][ T5884] usb 1-1: Product: syz
[   82.004964][ T5956] loop1: detected capacity change from 0 to 512
[   82.020390][ T5884] usb 1-1: Manufacturer: syz
[   82.025030][ T5884] usb 1-1: SerialNumber: syz
[   82.034969][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.060320][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.071540][ T5956] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   82.109131][ T5884] usb 1-1: config 0 descriptor??
[   82.123725][ T5884] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[   82.138694][ T5956] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   82.165622][ T5884] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   82.173714][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.193335][ T5884] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[   82.218213][ T5884] usb 1-1: media controller created
[   82.241022][ T5956] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[   82.274838][ T5956] System zones: 1-12
[   82.298707][ T5884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   82.363146][ T5956] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   82.448547][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.471702][ T5956] EXT4-fs (loop1): 1 truncate cleaned up
[   82.493421][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.510266][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.511002][ T5956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.560421][ T5884] DVB: Unable to find symbol mt352_attach()
[   82.613880][   T30] audit: type=1800 audit(1762546389.499:2): pid=5956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="file1" dev="loop1" ino=15 res=0 errno=0
[   82.636265][ T5884] DVB: Unable to find symbol nxt6000_attach()
[   82.666940][ T5884] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[   82.677266][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.716350][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.719089][ T5884] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5
[   82.761050][ T5828] Bluetooth: hci0: command tx timeout
[   82.766515][ T5828] Bluetooth: hci3: command tx timeout
[   82.773347][   T52] Bluetooth: hci2: command tx timeout
[   82.778200][ T5884] dvb-usb: schedule remote query interval to 1000 msecs.
[   82.790999][ T5956] loop1: detected capacity change from 512 to 0
[   82.840875][ T5828] Bluetooth: hci1: command tx timeout
[   82.846328][ T5828] Bluetooth: hci4: command tx timeout
[   82.870692][ T5884] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[   82.891678][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.930895][ T5884] dvb-usb: bulk message failed: -22 (7/0)
[   82.936733][ T5884] dvb-usb: bulk message failed: -22 (7/0)
[   82.943616][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.011867][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.018979][ T5884] usb 1-1: USB disconnect, device number 2
[   83.068400][ T5825] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[   83.140572][ T5969] Zero length message leads to an empty skb
[   83.309100][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   83.341288][ T5825] EXT4-fs (loop1): I/O error while writing superblock
[   83.513980][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   83.720350][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   83.731150][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   83.812441][ T5884] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[   83.853072][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   83.923482][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   83.989179][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.997969][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   84.023542][ T5978] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   84.044661][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.052940][    T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!!
[   84.252089][ T5981] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   85.330670][ T5884] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   85.422461][    C1] raw-gadget.0 gadget.3: ignoring, device is not running
[   85.741279][ T2926] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.800575][ T5884] usb 4-1: device descriptor read/64, error -32
[   85.937489][ T2926] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.040287][ T5884] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   86.195166][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.821553][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.847888][   T43] cfg80211: failed to load regulatory.db
[   87.048184][ T5990] loop2: detected capacity change from 0 to 512
[   87.053727][ T2926] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.110301][ T5884] usb 4-1: Using ep0 maxpacket: 8
[   87.122293][ T5990] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   87.181834][ T5884] usb 4-1: device descriptor read/all, error -71
[   87.232236][ T5884] usb usb4-port1: attempt power cycle
[   87.321084][ T5990] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0003]
[   87.349010][ T5990] System zones: 1-2, 4-12, 8-8
[   87.366953][ T5990] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.14: iget: bad i_size value: 38620345925642
[   87.383479][ T5990] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.14: couldn't read orphan inode 15 (err -117)
[   87.395646][   T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   87.408200][ T5990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.421270][   T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   87.440609][   T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   87.450756][   T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   87.459080][   T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   87.511438][ T2926] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.686828][ T5998] netlink: 'syz.3.15': attribute type 1 has an invalid length.
[   87.694917][ T5998] netlink: 244 bytes leftover after parsing attributes in process `syz.3.15'.
[   87.705398][ T5998] NCSI netlink: No device for ifindex 9628930
[   88.022093][ T5999] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.14: bg 0: block 5: invalid block bitmap
[   88.089514][ T5999] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 544 with error 28
[   88.125840][ T5999] EXT4-fs (loop2): This should not happen!! Data will be lost
[   88.125840][ T5999] 
[   88.177874][ T5999] EXT4-fs (loop2): Total free blocks count 0
[   88.209070][ T5999] EXT4-fs (loop2): Free/Dirty block details
[   88.254964][ T5999] EXT4-fs (loop2): free_blocks=0
[   88.276303][ T5999] EXT4-fs (loop2): dirty_blocks=544
[   88.322213][ T5999] EXT4-fs (loop2): Block reservation details
[   88.328830][ T5999] EXT4-fs (loop2): i_reserved_data_blocks=544
[   88.636241][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.657531][ T6005] loop3: detected capacity change from 0 to 512
[   88.735720][ T6007] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   88.749337][ T6005] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   88.827325][ T6005] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[   88.870555][ T2926] bridge_slave_1: left allmulticast mode
[   88.876368][ T2926] bridge_slave_1: left promiscuous mode
[   88.886542][ T6005] System zones: 1-12
[   88.935112][ T2926] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.984491][ T6005] EXT4-fs (loop3): 1 truncate cleaned up
[   89.079102][ T6005] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.134024][ T2926] bridge_slave_0: left allmulticast mode
[   89.139712][ T2926] bridge_slave_0: left promiscuous mode
[   89.187538][ T2926] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.357384][   T30] audit: type=1800 audit(1762546396.249:3): pid=6005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.16" name="file1" dev="loop3" ino=15 res=0 errno=0
[   89.520936][   T52] Bluetooth: hci1: command tx timeout
[   90.709270][ T6026] loop3: detected capacity change from 512 to 0
[   90.738230][    C0] I/O error, dev loop3, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   90.753993][ T6005] EXT4-fs error (device loop3): ext4_get_inode_loc:4974: inode #15: block 8: comm syz.3.16: unable to read itable block
[   90.843007][ T6005] Buffer I/O error on dev loop3, logical block 1, lost sync page write
[   90.904118][ T6005] EXT4-fs (loop3): I/O error while writing superblock
[   91.032048][ T6005] EXT4-fs error (device loop3): ext4_get_inode_loc:4974: inode #15: block 8: comm syz.3.16: unable to read itable block
[   91.045723][ T6005] Buffer I/O error on dev loop3, logical block 1, lost sync page write
[   91.054476][ T6005] EXT4-fs (loop3): I/O error while writing superblock
[   91.064484][   T30] audit: type=1800 audit(1762546397.969:4): pid=6005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.16" name="file1" dev="loop3" ino=15 res=0 errno=0
[   91.560855][   T52] Bluetooth: hci1: command tx timeout
[   91.847419][ T5824] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 13: comm syz-executor: path /5/file2: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   91.899486][ T5824] Buffer I/O error on dev loop3, logical block 1, lost sync page write
[   91.928807][ T5824] EXT4-fs (loop3): I/O error while writing superblock
[   92.965257][ T5949] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.982378][ T6045] netlink: 132 bytes leftover after parsing attributes in process `syz.0.27'.
[   93.001375][ T5949] Buffer I/O error on dev loop3, logical block 1, lost sync page write
[   93.044587][ T5949] EXT4-fs (loop3): I/O error while writing superblock
[   93.356234][ T2926] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   93.390409][ T2926] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   93.404000][ T2926] bond0 (unregistering): Released all slaves
[   93.412060][ T6052] overlayfs: missing 'lowerdir'
[   93.640296][   T52] Bluetooth: hci1: command tx timeout
[   93.793805][ T6060] netlink: 24 bytes leftover after parsing attributes in process `syz.2.31'.
[   93.957552][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.31'.
[   94.123308][ T6060] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.379510][ T6060] bridge_slave_0 (unregistering): left allmulticast mode
[   94.388033][ T6060] bridge_slave_0 (unregistering): left promiscuous mode
[   94.461638][ T6060] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.605887][ T5993] chnl_net:caif_netlink_parms(): no params data found
[   95.008442][ T2926] hsr_slave_0: left promiscuous mode
[   95.023615][ T2926] hsr_slave_1: left promiscuous mode
[   95.036690][ T2926] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.050363][ T2926] batman_adv: batadv0: Removing interface: batadv_slave_0
[   95.078734][ T2926] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.098291][ T2926] batman_adv: batadv0: Removing interface: batadv_slave_1
[   95.128547][ T2926] veth1_macvtap: left promiscuous mode
[   95.169713][ T2926] veth0_macvtap: left promiscuous mode
[   95.181192][ T2926] veth1_vlan: left promiscuous mode
[   95.188295][ T2926] veth0_vlan: left promiscuous mode
[   95.407031][ T6069] [U] 
[   95.583039][ T5824] syz-executor (5824) used greatest stack depth: 18424 bytes left
[   95.720702][   T52] Bluetooth: hci1: command tx timeout
[   97.189659][ T6095] overlayfs: missing 'workdir'
[   98.617580][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   98.627142][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   98.635131][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   98.643698][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   98.651440][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   98.882619][ T2926] team0 (unregistering): Port device team_slave_1 removed
[   98.928264][ T2926] team0 (unregistering): Port device team_slave_0 removed
[   99.562927][ T5993] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.582631][ T5993] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.634699][ T5993] bridge_slave_0: entered allmulticast mode
[   99.734915][ T5993] bridge_slave_0: entered promiscuous mode
[   99.769248][ T6126] netlink: 16 bytes leftover after parsing attributes in process `syz.0.46'.
[   99.799789][ T5993] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.859322][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.896301][ T5993] bridge_slave_1: entered allmulticast mode
[  100.256281][ T5993] bridge_slave_1: entered promiscuous mode
[  100.443177][ T6132] loop2: detected capacity change from 0 to 256
[  100.644363][ T5993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.697052][   T52] Bluetooth: hci0: command tx timeout
[  100.708476][ T5993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  101.801957][ T5993] team0: Port device team_slave_0 added
[  101.836798][ T5993] team0: Port device team_slave_1 added
[  102.802714][   T52] Bluetooth: hci0: command tx timeout
[  102.955942][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.52'.
[  102.989661][ T5993] batman_adv: batadv0: Adding interface: batadv_slave_0
[  103.140322][ T5993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  103.179526][ T5993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  103.232092][ T6166] netlink: 4456 bytes leftover after parsing attributes in process `syz.4.53'.
[  103.306579][ T2926] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.596568][ T5993] batman_adv: batadv0: Adding interface: batadv_slave_1
[  103.609163][ T5993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  103.638793][ T5993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  103.703738][ T6106] chnl_net:caif_netlink_parms(): no params data found
[  103.895446][ T6158] tc_dump_action: action bad kind
[  103.988662][ T6172] loop2: detected capacity change from 0 to 256
[  104.047287][ T2926] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.120457][ T5884] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  104.310852][ T5884] usb 1-1: Using ep0 maxpacket: 8
[  104.317729][ T5884] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.330725][ T5884] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.342407][ T5884] usb 1-1: config 128 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  104.356249][ T5884] usb 1-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= c.00
[  104.365382][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.389664][ T5993] hsr_slave_0: entered promiscuous mode
[  104.550996][ T5993] hsr_slave_1: entered promiscuous mode
[  104.569661][ T5993] debugfs: 'hsr0' already exists in 'hsr'
[  105.060091][   T52] Bluetooth: hci0: command tx timeout
[  105.100826][ T5884] usbhid 1-1:128.0: can't add hid device: -71
[  105.245447][ T5884] usbhid 1-1:128.0: probe with driver usbhid failed with error -71
[  105.271855][ T5884] usb 1-1: USB disconnect, device number 3
[  105.310273][ T5993] Cannot create hsr debugfs directory
[  105.553061][ T2926] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.301976][ T6106] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.358041][ T6106] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.370704][ T6106] bridge_slave_0: entered allmulticast mode
[  106.378028][ T6106] bridge_slave_0: entered promiscuous mode
[  106.438250][ T2926] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.557129][ T6106] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.665900][ T6106] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.696366][ T6106] bridge_slave_1: entered allmulticast mode
[  106.712259][ T6106] bridge_slave_1: entered promiscuous mode
[  107.110515][   T52] Bluetooth: hci0: command tx timeout
[  107.673504][ T6106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.765881][ T6106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.788433][ T6210] loop4: detected capacity change from 0 to 256
[  107.900248][ T5884] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  108.060369][ T5884] usb 1-1: Using ep0 maxpacket: 32
[  108.096688][ T5884] usb 1-1: config 0 has no interfaces?
[  108.117872][ T5884] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  108.214454][ T6106] team0: Port device team_slave_0 added
[  108.302232][ T6106] team0: Port device team_slave_1 added
[  108.320345][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  108.332165][ T5884] usb 1-1: Product: syz
[  108.336355][ T5884] usb 1-1: Manufacturer: syz
[  108.341108][ T5884] usb 1-1: SerialNumber: syz
[  108.354100][ T5884] usb 1-1: config 0 descriptor??
[  109.110918][ T6225] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.69' sets config #0
[  109.124733][ T5898] usb 1-1: USB disconnect, device number 4
[  109.623792][ T6225] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.69' sets config #1
[  109.986094][ T6106] batman_adv: batadv0: Adding interface: batadv_slave_0
[  110.000463][ T6106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  110.037454][ T6106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  110.126168][ T6106] batman_adv: batadv0: Adding interface: batadv_slave_1
[  110.146228][ T6106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  110.230806][ T6106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  110.254023][ T6243] netlink: 'syz.2.72': attribute type 3 has an invalid length.
[  110.290051][ T2926] bridge_slave_1: left allmulticast mode
[  110.299443][ T2926] bridge_slave_1: left promiscuous mode
[  110.327762][ T2926] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.435129][ T2926] bridge_slave_0: left allmulticast mode
[  110.446566][ T2926] bridge_slave_0: left promiscuous mode
[  110.452879][ T2926] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.459185][ T6256] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  111.468099][ T6256] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  112.233711][ T2926] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  112.249304][ T2926] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  112.261443][ T2926] bond0 (unregistering): Released all slaves
[  112.396965][ T6249] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  113.542710][ T6106] hsr_slave_0: entered promiscuous mode
[  113.562661][ T6106] hsr_slave_1: entered promiscuous mode
[  113.580476][ T6106] debugfs: 'hsr0' already exists in 'hsr'
[  113.603821][ T6106] Cannot create hsr debugfs directory
[  113.665186][ T5993] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  115.293791][    T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  115.417390][ T6290] warning: `syz.2.82' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  115.461106][ T5993] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  115.554839][ T5993] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  115.560384][    T9] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  115.592643][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[  115.650754][    T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  115.659831][    T9] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  115.690395][    T9] usb 1-1: Product: syz
[  115.694711][    T9] usb 1-1: Manufacturer: syz
[  115.699315][    T9] usb 1-1: SerialNumber: syz
[  115.722904][    T9] usb 1-1: config 0 descriptor??
[  115.768935][    T9] usb 1-1: selecting invalid altsetting 0
[  115.803903][ T5993] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  115.969561][   T30] audit: type=1804 audit(1762546422.869:5): pid=6297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.86" name="/newroot/20/file1" dev="fuse" ino=1 res=1 errno=0
[  116.033474][   T30] audit: type=1800 audit(1762546422.899:6): pid=6297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.86" name="/" dev="fuse" ino=1 res=0 errno=0
[  116.094351][ T2926] hsr_slave_0: left promiscuous mode
[  116.163777][ T2926] hsr_slave_1: left promiscuous mode
[  116.185461][ T2926] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  116.193533][ T2926] batman_adv: batadv0: Removing interface: batadv_slave_0
[  116.231141][ T2926] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.238568][ T2926] batman_adv: batadv0: Removing interface: batadv_slave_1
[  116.267094][ T2926] veth1_macvtap: left promiscuous mode
[  116.272810][ T2926] veth0_macvtap: left promiscuous mode
[  116.283018][ T2926] veth1_vlan: left promiscuous mode
[  116.290443][ T2926] veth0_vlan: left promiscuous mode
[  117.107333][ T6301] loop2: detected capacity change from 0 to 32768
[  117.118849][ T6301] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.87 (6301)
[  117.178511][ T6301] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  117.191791][ T6301] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  117.352078][ T6301] BTRFS info (device loop2): enabling ssd optimizations
[  117.359419][ T6301] BTRFS info (device loop2): turning on async discard
[  117.366493][ T6301] BTRFS info (device loop2): enabling free space tree
[  117.499349][ T5830] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  117.654937][ T2926] team0 (unregistering): Port device team_slave_1 removed
[  117.734071][ T2926] team0 (unregistering): Port device team_slave_0 removed
[  118.138675][    T9] usb 1-1: USB disconnect, device number 5
[  118.540853][    T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  118.831080][    T9] usb 3-1: Using ep0 maxpacket: 32
[  118.853308][    T9] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  118.881890][    T9] usb 3-1: config 0 has no interface number 0
[  118.913404][    T9] usb 3-1: config 0 interface 12 has no altsetting 0
[  118.923481][    T9] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  118.935417][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.943753][    T9] usb 3-1: Product: syz
[  118.948462][    T9] usb 3-1: Manufacturer: syz
[  118.953562][    T9] usb 3-1: SerialNumber: syz
[  118.966297][    T9] usb 3-1: config 0 descriptor??
[  119.640921][ T5934] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  119.874781][ T5934] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  119.914611][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.939559][ T5934] usb 1-1: Product: syz
[  119.960796][ T5934] usb 1-1: Manufacturer: syz
[  119.965472][ T5934] usb 1-1: SerialNumber: syz
[  120.039477][ T5993] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.076139][ T5993] 8021q: adding VLAN 0 to HW filter on device team0
[  120.117978][ T5934] usb 1-1: config 0 descriptor??
[  120.128735][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.136037][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.153703][ T5934] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  120.179373][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.184154][ T5934] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  120.186659][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.204826][ T5934] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  120.235376][ T5934] usb 1-1: media controller created
[  120.397620][ T6106] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  120.399697][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  120.469252][ T6106] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  120.508024][ T6106] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  120.545844][ T6106] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  120.601699][ T5934] DVB: Unable to find symbol mt352_attach()
[  120.866465][ T5934] DVB: Unable to find symbol nxt6000_attach()
[  120.903780][ T5934] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  120.922295][    T9] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  120.924324][ T6106] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.944671][    T9] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[  120.989517][ T5934] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6
[  121.041602][    T9] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  121.046725][ T6106] 8021q: adding VLAN 0 to HW filter on device team0
[  121.049258][    T9] f81534 3-1:0.12: probe with driver f81534 failed with error -71
[  121.088477][    T9] usb 3-1: USB disconnect, device number 2
[  121.095747][ T5934] dvb-usb: schedule remote query interval to 1000 msecs.
[  121.102877][ T5934] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  121.129078][ T5934] dvb-usb: bulk message failed: -22 (7/0)
[  121.151985][ T6102] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.159202][ T6102] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.264104][ T5934] dvb-usb: bulk message failed: -22 (7/0)
[  121.316189][ T2926] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.323634][ T2926] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.332054][ T5934] usb 1-1: USB disconnect, device number 6
[  122.265198][ T6106] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  122.451220][ T5934] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  122.551752][ T5993] 8021q: adding VLAN 0 to HW filter on device batadv0
[  122.969830][ T6106] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.042514][ T5934] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  123.497601][ T5934] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  123.510201][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.530198][ T5934] usb 3-1: Product: syz
[  123.564894][ T5934] usb 3-1: Manufacturer: syz
[  123.569532][ T5934] usb 3-1: SerialNumber: syz
[  123.627016][ T5934] usb 3-1: config 0 descriptor??
[  123.682196][ T5934] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  123.717587][ T6413] netlink: 256 bytes leftover after parsing attributes in process `syz.4.102'.
[  123.771129][ T6413] netlink: 56 bytes leftover after parsing attributes in process `syz.4.102'.
[  123.773834][ T5934] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  123.830442][ T5934] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  123.847175][ T6417] fuse: Bad value for 'fd'
[  123.867621][ T5934] usb 3-1: media controller created
[  123.994609][ T5993] veth0_vlan: entered promiscuous mode
[  124.003496][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  124.058603][ T5993] veth1_vlan: entered promiscuous mode
[  124.293588][ T5993] veth0_macvtap: entered promiscuous mode
[  124.323536][ T5993] veth1_macvtap: entered promiscuous mode
[  124.373311][ T5905] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  124.426322][ T5934] DVB: Unable to find symbol mt352_attach()
[  124.737980][ T5905] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  124.828323][ T5993] batman_adv: batadv0: Interface activated: batadv_slave_0
[  124.935575][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.045540][ T5934] DVB: Unable to find symbol nxt6000_attach()
[  125.072197][ T5934] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  125.137126][ T5905] usb 5-1: Product: syz
[  125.144189][ T5905] usb 5-1: Manufacturer: syz
[  125.149483][ T5905] usb 5-1: SerialNumber: syz
[  125.164473][ T5934] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7
[  125.169413][ T5905] usb 5-1: config 0 descriptor??
[  125.195455][ T5905] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  125.215624][ T5905] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  125.226998][ T5934] dvb-usb: schedule remote query interval to 1000 msecs.
[  125.240035][ T5993] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.248572][ T5905] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  125.261493][ T5934] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  125.295212][ T5934] dvb-usb: bulk message failed: -22 (7/0)
[  125.297169][ T5905] usb 5-1: media controller created
[  125.313293][ T5934] dvb-usb: bulk message failed: -22 (7/0)
[  125.325698][ T2971] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.349490][ T5905] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  125.363466][ T6106] veth0_vlan: entered promiscuous mode
[  125.384380][ T2971] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.418668][ T2971] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.469299][ T2971] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.863715][ T6106] veth1_vlan: entered promiscuous mode
[  125.889045][ T5905] DVB: Unable to find symbol mt352_attach()
[  126.160906][ T2971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.230285][ T2971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.282176][   T10] dvb-usb: bulk message failed: -22 (7/0)
[  126.302434][   T10] dvb-usb: error while querying for an remote control event.
[  126.465104][ T5905] DVB: Unable to find symbol nxt6000_attach()
[  126.480271][ T5905] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  126.649787][ T5905] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8
[  126.779026][ T5905] dvb-usb: schedule remote query interval to 1000 msecs.
[  126.789324][ T6106] veth0_macvtap: entered promiscuous mode
[  126.795268][ T5905] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  126.957833][ T5905] dvb-usb: bulk message failed: -22 (7/0)
[  127.020917][ T3024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.038413][ T5905] dvb-usb: bulk message failed: -22 (7/0)
[  127.054346][   T30] audit: type=1804 audit(1762546433.789:7): pid=6455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.108" name="/newroot/27/file1" dev="fuse" ino=1 res=1 errno=0
[  127.054840][ T6106] veth1_macvtap: entered promiscuous mode
[  127.080311][ T3024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.111173][ T5905] usb 5-1: USB disconnect, device number 2
[  127.118804][   T30] audit: type=1800 audit(1762546433.869:8): pid=6455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.108" name="/" dev="fuse" ino=1 res=0 errno=0
[  127.194943][ T5934] usb 3-1: USB disconnect, device number 3
[  127.305994][ T5905] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  127.373298][ T6106] batman_adv: batadv0: Interface activated: batadv_slave_0
[  127.445134][ T6461] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  127.487647][ T6106] batman_adv: batadv0: Interface activated: batadv_slave_1
[  127.639500][ T5934] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  127.653304][ T6102] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.692161][ T6102] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.989497][ T6102] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.059685][ T6475] netlink: 16 bytes leftover after parsing attributes in process `syz.5.21'.
[  128.937400][ T6482] Trying to write to read-only block-device nullb0
[  128.989455][ T6102] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.303122][ T6474] F2FS-fs: Conflicting test_dummy_encryption options
[  129.763499][ T3024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.840317][ T3024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.268800][ T5934] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  130.299214][ T2926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.310282][ T2926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.600723][ T5934] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  130.618359][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.241391][ T5934] usb 3-1: Product: syz
[  131.256733][ T5934] usb 3-1: Manufacturer: syz
[  131.262556][ T5934] usb 3-1: SerialNumber: syz
[  131.275164][ T5934] usb 3-1: config 0 descriptor??
[  131.407250][ T5934] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  131.501224][ T5934] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  131.545733][ T5934] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  132.530242][ T5934] usb 3-1: media controller created
[  133.027927][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  133.034679][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  133.159668][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  133.403726][ T5934] DVB: Unable to find symbol mt352_attach()
[  133.528850][ T5934] DVB: Unable to find symbol nxt6000_attach()
[  133.538904][ T5934] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  133.759447][ T5934] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9
[  133.762624][ T5905] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  133.775183][ T5934] dvb-usb: schedule remote query interval to 1000 msecs.
[  133.794576][ T5934] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  133.806389][ T5934] dvb-usb: bulk message failed: -22 (7/0)
[  133.819695][ T5934] dvb-usb: bulk message failed: -22 (7/0)
[  134.317019][ T5934] usb 3-1: USB disconnect, device number 4
[  134.516892][ T5905] usb 7-1: config 0 has no interfaces?
[  134.525727][ T5905] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  134.545496][ T5934] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  134.623075][ T5905] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.719411][ T5905] usb 7-1: Product: syz
[  134.738799][ T5905] usb 7-1: Manufacturer: syz
[  134.750513][ T5905] usb 7-1: SerialNumber: syz
[  134.822241][ T5905] usb 7-1: config 0 descriptor??
[  134.956903][ T6556] loop4: detected capacity change from 0 to 512
[  134.984618][ T6556] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  134.996296][ T6557] syz.5.129 uses obsolete (PF_INET,SOCK_PACKET)
[  135.006312][ T6556] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  135.016538][ T6556] System zones: 1-12
[  135.043005][ T6556] EXT4-fs (loop4): 1 truncate cleaned up
[  135.059476][ T6556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.257186][ T6563] MINIX-fs: unable to read superblock
[  135.352321][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz.5.129'.
[  135.361352][ T6564] netlink: 24 bytes leftover after parsing attributes in process `syz.5.129'.
[  135.526214][ T6556] loop4: detected capacity change from 512 to 0
[  135.693399][ T6567] EXT4-fs error (device loop4): __ext4_find_entry:1615: inode #2: comm syz.4.130: reading directory lblock 0
[  136.491016][ T6560] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  136.520405][ T6567] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  136.528758][ T6567] EXT4-fs (loop4): I/O error while writing superblock
[  136.608702][  T793] usb 7-1: USB disconnect, device number 2
[  136.660553][ T6560] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  136.838194][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.883604][ T5831] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  136.913443][ T5831] EXT4-fs (loop4): I/O error while writing superblock
[  136.941556][ T6560] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  136.987363][ T6560] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  137.314858][ T6560] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  137.343219][ T6560] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  137.439063][ T6560] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  137.458621][ T6560] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  137.535306][ T6560] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  137.616383][ T6560] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  139.221928][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  139.234794][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  139.246950][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  139.259672][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  139.269007][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  139.289374][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  139.297283][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  139.304841][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  139.313351][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  139.327337][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  139.625439][ T6611] chnl_net:caif_netlink_parms(): no params data found
[  139.850952][ T6611] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.860374][ T6611] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.867583][ T6611] bridge_slave_0: entered allmulticast mode
[  139.907451][ T6611] bridge_slave_0: entered promiscuous mode
[  139.927685][ T6611] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.947674][ T6611] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.965821][ T6611] bridge_slave_1: entered allmulticast mode
[  139.984823][ T6611] bridge_slave_1: entered promiscuous mode
[  140.000332][   T52] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  140.982845][ T6611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  141.005703][ T6611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  141.080041][ T6611] team0: Port device team_slave_0 added
[  141.100104][ T6611] team0: Port device team_slave_1 added
[  141.173119][ T6640] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  141.242074][ T5927] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  141.293521][ T6611] batman_adv: batadv0: Adding interface: batadv_slave_0
[  141.319738][ T6611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  141.375550][ T6646] netlink: 28 bytes leftover after parsing attributes in process `syz.0.151'.
[  141.428589][ T5828] Bluetooth: hci2: command tx timeout
[  141.436482][ T5927] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  141.447311][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.467737][ T5927] usb 3-1: config 0 descriptor??
[  141.594535][ T6648] Bluetooth: MGMT ver 1.23
[  141.606085][ T6611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  141.618498][ T6648] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes
[  141.647045][ T6611] batman_adv: batadv0: Adding interface: batadv_slave_1
[  141.668404][ T6611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  141.921075][ T6611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  142.663240][ T6611] hsr_slave_0: entered promiscuous mode
[  142.677313][ T6611] hsr_slave_1: entered promiscuous mode
[  142.833886][ T5927] pegasus 3-1:0.0: can't reset MAC
[  142.839625][ T5927] pegasus 3-1:0.0: probe with driver pegasus failed with error -5
[  142.892396][ T5927] usb 3-1: USB disconnect, device number 5
[  143.443924][ T6667] process 'syz.6.152' launched '/dev/fd/8' with NULL argv: empty string added
[  143.611070][ T6667] vxfs: unable to read disk superblock at 1
[  143.619393][ T6667] vxfs: unable to read disk superblock at 8
[  143.626598][ T6667] vxfs: can't find superblock.
[  143.636959][ T5828] Bluetooth: hci2: command tx timeout
[  144.958248][ T6682] fuse: Bad value for 'fd'
[  145.027611][ T5934] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  145.105739][   T30] audit: type=1804 audit(1762546452.009:9): pid=6676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.155" name="/newroot/5/file1" dev="fuse" ino=1 res=1 errno=0
[  145.143827][ T6611] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  145.176985][ T6611] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  145.193381][ T5934] usb 3-1: Using ep0 maxpacket: 16
[  145.212437][ T5934] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  145.225534][ T6611] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  145.241762][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  145.280883][ T6611] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  145.290503][ T5934] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  145.300194][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.308378][ T5934] usb 3-1: Product: syz
[  145.320682][ T5934] usb 3-1: Manufacturer: syz
[  145.325412][ T5934] usb 3-1: SerialNumber: syz
[  145.338342][ T5934] usb 3-1: config 0 descriptor??
[  145.366175][ T5934] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  145.381357][ T5934] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  145.600730][  T793] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  145.726208][ T5828] Bluetooth: hci2: command tx timeout
[  145.885173][  T793] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  146.044511][ T6611] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.050279][  T793] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.095835][ T6611] 8021q: adding VLAN 0 to HW filter on device team0
[  146.124819][ T3024] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.132061][ T3024] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.182359][  T793] usb 7-1: Product: syz
[  146.188577][  T793] usb 7-1: Manufacturer: syz
[  146.201650][  T793] usb 7-1: SerialNumber: syz
[  146.209768][  T793] usb 7-1: config 0 descriptor??
[  146.219147][ T3024] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.226405][ T3024] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.235926][ T5934] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  146.248845][  T793] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  146.266910][ T5934] em28xx 3-1:0.0: Config register raw data: 0x00
[  146.276961][  T793] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  146.351239][  T793] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  146.375820][  T793] usb 7-1: media controller created
[  146.414392][  T793] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  146.496661][ T6711] syz.5.160: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  146.511104][ T6689] dvb-usb: bulk message failed: -22 (7/0)
[  146.518345][ T6711] CPU: 0 UID: 0 PID: 6711 Comm: syz.5.160 Not tainted syzkaller #0 PREEMPT(full) 
[  146.518371][ T6711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  146.518389][ T6711] Call Trace:
[  146.518397][ T6711]  <TASK>
[  146.518405][ T6711]  dump_stack_lvl+0x189/0x250
[  146.518446][ T6711]  ? __pfx_dump_stack_lvl+0x10/0x10
[  146.518490][ T6711]  warn_alloc+0x214/0x310
[  146.518524][ T6711]  ? __pfx_warn_alloc+0x10/0x10
[  146.518550][ T6711]  ? kasan_save_track+0x4f/0x80
[  146.518565][ T6711]  ? kasan_save_track+0x3e/0x80
[  146.518580][ T6711]  ? __kasan_kmalloc+0x93/0xb0
[  146.518594][ T6711]  ? __kmalloc_cache_noprof+0x3e2/0x700
[  146.518609][ T6711]  ? xskq_create+0x56/0x170
[  146.518630][ T6711]  ? xsk_setsockopt+0x4dc/0x8d0
[  146.518648][ T6711]  ? do_sock_setsockopt+0x17c/0x1b0
[  146.518670][ T6711]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  146.518690][ T6711]  ? do_syscall_64+0xfa/0xfa0
[  146.518716][ T6711]  __vmalloc_node_range_noprof+0x134/0x1640
[  146.518770][ T6711]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  146.518796][ T6711]  ? __kasan_kmalloc+0x93/0xb0
[  146.518817][ T6711]  vmalloc_user_noprof+0xad/0xf0
[  146.518835][ T6711]  ? xskq_create+0xbf/0x170
[  146.518856][ T6711]  xskq_create+0xbf/0x170
[  146.518881][ T6711]  xsk_init_queue+0xb0/0x110
[  146.518905][ T6711]  xsk_setsockopt+0x4dc/0x8d0
[  146.518927][ T6711]  ? __pfx_xsk_setsockopt+0x10/0x10
[  146.518951][ T6711]  ? __pfx_aa_sk_perm+0x10/0x10
[  146.518978][ T6711]  ? aa_sock_opt_perm+0xff/0x1b0
[  146.519007][ T6711]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  146.519025][ T6711]  ? __pfx_xsk_setsockopt+0x10/0x10
[  146.519046][ T6711]  do_sock_setsockopt+0x17c/0x1b0
[  146.519073][ T6711]  __x64_sys_setsockopt+0x13f/0x1b0
[  146.519101][ T6711]  do_syscall_64+0xfa/0xfa0
[  146.519126][ T6711]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.519144][ T6711]  ? clear_bhb_loop+0x60/0xb0
[  146.519165][ T6711]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.519183][ T6711] RIP: 0033:0x7fd4c698f6c9
[  146.519204][ T6711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  146.519219][ T6711] RSP: 002b:00007fd4c7864038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  146.519239][ T6711] RAX: ffffffffffffffda RBX: 00007fd4c6be6090 RCX: 00007fd4c698f6c9
[  146.519253][ T6711] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  146.519263][ T6711] RBP: 00007fd4c6a11f91 R08: 0000000000000004 R09: 0000000000000000
[  146.519274][ T6711] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000
[  146.519285][ T6711] R13: 00007fd4c6be6128 R14: 00007fd4c6be6090 R15: 00007ffee04f44e8
[  146.519318][ T6711]  </TASK>
[  146.519463][ T6711] Mem-Info:
[  146.657610][  T793] DVB: Unable to find symbol mt352_attach()
[  147.540736][ T6711] active_anon:9859 inactive_anon:0 isolated_anon:0
[  147.540736][ T6711]  active_file:12743 inactive_file:39905 isolated_file:0
[  147.540736][ T6711]  unevictable:768 dirty:249 writeback:0
[  147.540736][ T6711]  slab_reclaimable:10853 slab_unreclaimable:97205
[  147.540736][ T6711]  mapped:32855 shmem:4406 pagetables:1493
[  147.540736][ T6711]  sec_pagetables:0 bounce:0
[  147.540736][ T6711]  kernel_misc_reclaimable:0
[  147.540736][ T6711]  free:1305846 free_pcp:13941 free_cma:0
[  147.770712][ T6711] Node 0 active_anon:39380kB inactive_anon:0kB active_file:50972kB inactive_file:159416kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131512kB dirty:1000kB writeback:0kB shmem:16176kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13188kB pagetables:5784kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  147.803391][ T6711] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  147.819230][   T43] usb 3-1: USB disconnect, device number 6
[  147.842955][ T6711] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  147.873274][ T6711] lowmem_reserve[]: 0 2495 2496 2496 2496
[  147.879686][ T6711] Node 0 DMA32 free:1335736kB boost:0kB min:34232kB low:42788kB high:51344kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39180kB inactive_anon:0kB active_file:50972kB inactive_file:159416kB unevictable:1536kB writepending:1000kB zspages:0kB present:3129332kB managed:2555368kB mlocked:0kB bounce:0kB free_pcp:36464kB local_pcp:13224kB free_cma:0kB
[  147.913681][ T6711] lowmem_reserve[]: 0 0 1 1 1
[  147.915401][ T5828] Bluetooth: hci2: command tx timeout
[  147.926755][ T6711] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  147.928639][   T43] em28xx 3-1:0.0: Disconnecting em28xx
[  147.962729][ T6711] lowmem_reserve[]: 0 0 0 0 0
[  147.967848][   T43] em28xx 3-1:0.0: Freeing device
[  147.973621][ T6711] Node 1 Normal free:3871840kB boost:0kB min:55652kB low:69564kB high:83476kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20292kB local_pcp:13664kB free_cma:0kB
[  148.006470][ T6711] lowmem_reserve[]: 0 0 0 0 0
[  148.011868][ T6711] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  148.029448][ T6711] Node 0 DMA32: 1876*4kB (U) 711*8kB (UME) 197*16kB (UME) 240*32kB (ME) 174*64kB (UM) 126*128kB (UM) 71*256kB (UM) 33*512kB (UME) 14*1024kB (UM) 7*2048kB (UM) 298*4096kB (UM) = 1335640kB
[  148.051742][ T6711] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  148.066646][ T6711] Node 1 Normal: 198*4kB (UE) 41*8kB (UME) 48*16kB (UME) 90*32kB (UME) 27*64kB (UME) 6*128kB (UME) 4*256kB (UM) 4*512kB (UME) 1*1024kB (M) 1*2048kB (E) 942*4096kB (M) = 3871840kB
[  148.088348][ T6711] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  148.098557][ T6711] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  148.109223][ T6711] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  148.119466][ T6711] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  148.129574][ T6711] 57071 total pagecache pages
[  148.134676][ T6711] 0 pages in swap cache
[  148.139096][ T6711] Free swap  = 124996kB
[  148.143641][ T6711] Total swap = 124996kB
[  148.148018][ T6711] 2097051 pages RAM
[  148.152453][ T6711] 0 pages HighMem/MovableOnly
[  148.157386][ T6711] 426247 pages reserved
[  148.161908][ T6711] 0 pages cma reserved
[  148.847687][  T793] DVB: Unable to find symbol nxt6000_attach()
[  148.853939][  T793] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  149.234647][  T793] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input10
[  149.250687][  T793] dvb-usb: schedule remote query interval to 1000 msecs.
[  149.259312][  T793] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  149.269471][  T793] dvb-usb: bulk message failed: -22 (7/0)
[  149.275270][  T793] dvb-usb: bulk message failed: -22 (7/0)
[  149.307709][  T793] usb 7-1: USB disconnect, device number 3
[  150.172326][ T6737] netlink: 64 bytes leftover after parsing attributes in process `syz.6.166'.
[  150.215278][ T6737] team0: No ports can be present during mode change
[  150.224951][  T793] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  150.449318][ T6611] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.460769][ T5912] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  150.644877][ T5912] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  150.686891][ T5912] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  150.738932][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.801979][ T5912] usb 6-1: config 0 descriptor??
[  150.826052][ T5912] pwc: Askey VC010 type 2 USB webcam detected.
[  151.726228][ T5912] pwc: recv_control_msg error -32 req 02 val 2b00
[  151.774989][ T5912] pwc: recv_control_msg error -32 req 02 val 2700
[  151.802066][ T5912] pwc: recv_control_msg error -32 req 02 val 2c00
[  151.853572][ T5912] pwc: recv_control_msg error -32 req 04 val 1000
[  151.890789][ T5912] pwc: recv_control_msg error -32 req 04 val 1300
[  151.921140][ T5912] pwc: recv_control_msg error -32 req 04 val 1400
[  151.974670][ T5912] pwc: recv_control_msg error -32 req 02 val 2000
[  151.985646][ T6611] veth0_vlan: entered promiscuous mode
[  152.024102][ T5912] pwc: recv_control_msg error -32 req 02 val 2100
[  152.027766][ T6611] veth1_vlan: entered promiscuous mode
[  152.055457][ T5912] pwc: recv_control_msg error -32 req 04 val 1500
[  152.077821][ T5912] pwc: recv_control_msg error -32 req 02 val 2500
[  152.104407][ T6611] veth0_macvtap: entered promiscuous mode
[  152.110281][ T5912] pwc: recv_control_msg error -32 req 02 val 2400
[  152.116914][ T6611] veth1_macvtap: entered promiscuous mode
[  152.140325][ T5912] pwc: recv_control_msg error -32 req 02 val 2600
[  152.184311][ T6611] batman_adv: batadv0: Interface activated: batadv_slave_0
[  152.214405][ T6611] batman_adv: batadv0: Interface activated: batadv_slave_1
[  152.240339][   T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  152.258256][ T1149] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.298837][ T1149] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.349631][ T5912] pwc: recv_control_msg error -71 req 02 val 2800
[  152.361006][ T1149] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.391329][ T5912] pwc: recv_control_msg error -71 req 04 val 1100
[  152.405270][ T1149] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.430291][ T5912] pwc: recv_control_msg error -71 req 04 val 1200
[  152.444345][   T24] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  152.463777][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.471827][ T5912] pwc: Registered as video103.
[  152.482616][   T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.483716][ T5912] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input11
[  152.518288][   T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.552249][   T24] usb 3-1: Product: syz
[  152.560917][ T5912] usb 6-1: USB disconnect, device number 2
[  152.577071][   T24] usb 3-1: Manufacturer: syz
[  152.595240][   T24] usb 3-1: SerialNumber: syz
[  152.631446][   T24] usb 3-1: config 0 descriptor??
[  152.660543][   T24] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  152.675358][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.687081][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.719321][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  152.756095][   T24] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  152.780052][   T24] usb 3-1: media controller created
[  152.816936][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  152.862840][ T6769] dvb-usb: bulk message failed: -22 (7/0)
[  152.866188][ T6764] loop6: detected capacity change from 0 to 32768
[  152.926490][   T24] DVB: Unable to find symbol mt352_attach()
[  152.968584][ T6764] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.172 (6764)
[  153.120516][ T6764] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  153.163329][ T6764] BTRFS info (device loop6): using blake2b (blake2b-256-lib) checksum algorithm
[  153.638338][   T24] DVB: Unable to find symbol nxt6000_attach()
[  153.871405][   T24] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  154.356939][   T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12
[  154.474226][   T24] dvb-usb: schedule remote query interval to 1000 msecs.
[  154.522914][ T6794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.177'.
[  154.538150][   T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  154.622247][   T24] dvb-usb: bulk message failed: -22 (7/0)
[  154.628045][   T24] dvb-usb: bulk message failed: -22 (7/0)
[  154.650495][   T24] usb 3-1: USB disconnect, device number 7
[  154.691060][ T6764] BTRFS info (device loop6): enabling ssd optimizations
[  154.750349][ T6764] BTRFS info (device loop6): turning on async discard
[  154.793511][ T6764] BTRFS info (device loop6): enabling free space tree
[  154.835602][ T6764] BTRFS info (device loop6): use zstd compression, level 3
[  155.061014][ T6820] loop5: detected capacity change from 0 to 512
[  155.118266][   T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  155.138695][ T6106] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  155.149043][ T6820] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  155.682878][ T6820] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0003]
[  155.781451][ T6820] System zones: 1-2, 4-12, 8-8
[  155.800873][ T6820] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.183: iget: bad i_size value: 38620345925642
[  155.855646][ T6820] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.183: couldn't read orphan inode 15 (err -117)
[  155.870979][ T6820] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.147092][ T6839] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.183: bg 0: block 5: invalid block bitmap
[  156.226467][ T6839] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 500 with error 28
[  156.283257][ T6839] EXT4-fs (loop5): This should not happen!! Data will be lost
[  156.283257][ T6839] 
[  156.294121][ T6839] EXT4-fs (loop5): Total free blocks count 0
[  156.300722][ T6839] EXT4-fs (loop5): Free/Dirty block details
[  156.306643][ T6839] EXT4-fs (loop5): free_blocks=0
[  156.313712][ T6839] EXT4-fs (loop5): dirty_blocks=500
[  156.319213][ T6839] EXT4-fs (loop5): Block reservation details
[  156.366907][ T6839] EXT4-fs (loop5): i_reserved_data_blocks=500
[  156.430516][ T6847] netlink: 12 bytes leftover after parsing attributes in process `syz.6.184'.
[  157.278322][ T5993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.530774][ T5934] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  157.709703][ T5934] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  157.729570][ T5934] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.810292][ T5934] usb 7-1: Product: syz
[  157.830382][ T5934] usb 7-1: Manufacturer: syz
[  157.842290][ T5934] usb 7-1: SerialNumber: syz
[  157.862445][ T5934] usb 7-1: config 0 descriptor??
[  157.873301][ T5934] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  157.903348][ T5934] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  158.000006][ T5934] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  158.179167][ T6855] dvb-usb: bulk message failed: -22 (7/0)
[  158.266396][ T5934] usb 7-1: media controller created
[  158.320217][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  158.787875][ T5934] DVB: Unable to find symbol mt352_attach()
[  158.970531][ T5934] DVB: Unable to find symbol nxt6000_attach()
[  159.011231][ T5934] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  159.039209][ T5934] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input13
[  159.101261][ T5934] dvb-usb: schedule remote query interval to 1000 msecs.
[  159.196051][ T5934] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  159.799519][ T5934] dvb-usb: bulk message failed: -22 (7/0)
[  159.821131][ T5934] dvb-usb: bulk message failed: -22 (7/0)
[  159.837112][ T5934] usb 7-1: USB disconnect, device number 4
[  160.162237][ T5934] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  163.064714][ T6926] netlink: 12 bytes leftover after parsing attributes in process `syz.5.203'.
[  164.040219][ T5912] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  164.240760][ T5912] usb 7-1: Using ep0 maxpacket: 8
[  164.264067][ T5912] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  164.450530][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.210'.
[  164.467021][ T5912] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  164.477863][ T5912] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  164.499073][ T5912] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  164.532813][ T5912] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  164.617278][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.130323][ T5912] usb 7-1: GET_CAPABILITIES returned 0
[  168.136052][ T5912] usbtmc 7-1:16.0: can't read capabilities
[  168.339274][ T5912] usb 7-1: USB disconnect, device number 5
[  170.435873][ T6972] overlayfs: missing 'lowerdir'
[  171.800837][ T5912] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  171.895531][ T6971] could not allocate digest TFM handle cryptd(blake2b-160)
[  172.269958][ T7025] comedi comedi0: Minor 31 could not be opened
[  172.789364][ T5912] usb 8-1: Using ep0 maxpacket: 8
[  172.796960][ T5912] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  172.809984][ T5912] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  172.849432][ T5912] usb 8-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  172.873817][ T5912] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.909531][ T5912] usb 8-1: Product: syz
[  172.914800][ T5912] usb 8-1: Manufacturer: syz
[  172.919421][ T5912] usb 8-1: SerialNumber: syz
[  172.963005][ T5912] usb 8-1: config 0 descriptor??
[  173.086359][ T7038] mmap: syz.2.228 (7038) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  173.256337][ T7039] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2
[  173.312986][ T7039] netdevsim netdevsim2: Falling back to sysfs fallback for: ..€
[  174.958625][ T7055] random: crng reseeded on system resumption
[  176.734756][ T7050] delete_channel: no stack
[  177.111106][ T5912] usb 8-1: USB disconnect, device number 2
[  177.261500][ T7076] netlink: 24 bytes leftover after parsing attributes in process `syz.2.240'.
[  177.311299][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'.
[  177.413184][ T7082] netlink: 24 bytes leftover after parsing attributes in process `syz.5.242'.
[  177.430768][ T5934] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  178.262612][ T5934] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  178.796716][ T5934] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.805384][ T5934] usb 7-1: Product: syz
[  178.809569][ T5934] usb 7-1: Manufacturer: syz
[  178.814356][ T5934] usb 7-1: SerialNumber: syz
[  178.938637][ T5934] usb 7-1: config 0 descriptor??
[  178.966411][ T5934] hub 7-1:0.0: bad descriptor, ignoring hub
[  179.003831][ T5934] hub 7-1:0.0: probe with driver hub failed with error -5
[  179.169216][ T5934] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[  179.198745][ T5934] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  179.358182][ T5934] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[  179.368260][ T5934] usb 7-1: media controller created
[  179.389774][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  180.306859][ T5934] DVB: Unable to find symbol dib7000p_attach()
[  180.350216][ T5934] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[  180.590776][ T5934] rc_core: IR keymap rc-dib0700-rc5 not found
[  180.764438][ T5934] Registered IR keymap rc-empty
[  180.774164][ T5934] dvb-usb: could not initialize remote control.
[  180.810984][ T5934] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[  181.073195][ T5905] usb 7-1: USB disconnect, device number 6
[  181.178930][ T5905] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[  181.437762][ T7141] netlink: 24 bytes leftover after parsing attributes in process `syz.5.255'.
[  182.414698][ T5898] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  182.880323][ T5898] usb 3-1: Using ep0 maxpacket: 32
[  182.891596][ T5898] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  182.951660][ T5898] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  182.960981][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  182.969130][ T5898] usb 3-1: Product: syz
[  182.999469][ T5898] usb 3-1: Manufacturer: syz
[  183.010483][ T5934] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[  183.025870][ T5898] usb 3-1: SerialNumber: syz
[  183.121208][ T5898] usb 3-1: config 0 descriptor??
[  183.153259][ T7143] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  183.225098][ T5934] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  183.240164][ T5934] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.303936][ T5934] usb 7-1: Product: syz
[  183.319291][ T5934] usb 7-1: Manufacturer: syz
[  183.337118][ T5934] usb 7-1: SerialNumber: syz
[  183.375489][ T5934] usb 7-1: config 0 descriptor??
[  183.509346][ T5927] usb 3-1: USB disconnect, device number 8
[  183.596039][ T5934] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  184.759869][ T7176] loop7: detected capacity change from 0 to 512
[  184.831858][ T7176] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  184.882093][ T7176] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  184.885805][ T5934] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  184.914857][ T5934] usb 7-1: USB disconnect, device number 7
[  184.927318][ T7179] sctp: [Deprecated]: syz.5.266 (pid 7179) Use of struct sctp_assoc_value in delayed_ack socket option.
[  184.927318][ T7179] Use struct sctp_sack_info instead
[  184.950428][ T7176] System zones: 1-12
[  184.985128][ T7176] EXT4-fs (loop7): 1 truncate cleaned up
[  185.015294][ T7176] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  185.101799][ T7176] loop7: detected capacity change from 512 to 0
[  185.121055][    C1] I/O error, dev loop7, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2
[  185.130864][ T7187] EXT4-fs error (device loop7): __ext4_find_entry:1615: inode #2: comm syz.7.264: reading directory lblock 0
[  185.286657][ T7187] Buffer I/O error on dev loop7, logical block 1, lost sync page write
[  185.354783][ T7187] EXT4-fs (loop7): I/O error while writing superblock
[  185.415677][ T7188] evm: overlay not supported
[  187.090756][ T7190] orangefs_mount: mount request failed with -4
[  187.132897][ T6611] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.306507][ T6611] Buffer I/O error on dev loop7, logical block 1, lost sync page write
[  187.340498][ T6611] EXT4-fs (loop7): I/O error while writing superblock
[  188.426124][ T2992] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.673698][ T2992] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.936546][ T2992] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.290741][ T7218] netlink: 12 bytes leftover after parsing attributes in process `syz.6.277'.
[  190.028587][ T2992] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.082306][   T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  190.092561][   T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  190.103799][   T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  190.114323][   T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  190.131796][   T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  192.217991][   T52] Bluetooth: hci2: command tx timeout
[  193.840410][ T7259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.290'.
[  194.280267][   T52] Bluetooth: hci2: command tx timeout
[  194.366021][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  194.411792][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  194.871039][ T7268] gfs2: gfs2 mount does not exist
[  195.374109][ T2992] bridge_slave_1: left allmulticast mode
[  195.379775][ T2992] bridge_slave_1: left promiscuous mode
[  195.387698][ T2992] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.399296][ T2992] bridge_slave_0: left allmulticast mode
[  195.405521][ T2992] bridge_slave_0: left promiscuous mode
[  195.412102][ T2992] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.858036][   T30] audit: type=1804 audit(1762546502.760:10): pid=7286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.293" name="/newroot/29/file1" dev="fuse" ino=1 res=1 errno=0
[  196.210256][   T30] audit: type=1800 audit(1762546502.760:11): pid=7286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.293" name="/" dev="fuse" ino=1 res=0 errno=0
[  196.363698][   T52] Bluetooth: hci2: command tx timeout
[  196.415986][ T7293] loop2: detected capacity change from 0 to 512
[  196.560426][ T7293] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  196.595000][ T7293] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0003]
[  196.603980][ T7293] System zones: 1-2, 4-12, 8-8
[  196.618004][ T7293] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.297: iget: bad i_size value: 38620345925642
[  196.639015][ T7293] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.297: couldn't read orphan inode 15 (err -117)
[  196.736085][ T7293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.796160][   T30] audit: type=1326 audit(1762546503.700:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7306 comm="syz.6.299" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0791b8f6c9 code=0x0
[  196.963967][ T7312] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.297: bg 0: block 5: invalid block bitmap
[  197.016292][ T7312] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 704 with error 28
[  197.049534][ T7312] EXT4-fs (loop2): This should not happen!! Data will be lost
[  197.049534][ T7312] 
[  197.064253][ T7312] EXT4-fs (loop2): Total free blocks count 0
[  197.072962][ T7312] EXT4-fs (loop2): Free/Dirty block details
[  197.084293][ T7312] EXT4-fs (loop2): free_blocks=0
[  197.089569][ T7312] EXT4-fs (loop2): dirty_blocks=752
[  197.099266][ T7312] EXT4-fs (loop2): Block reservation details
[  197.105494][ T7312] EXT4-fs (loop2): i_reserved_data_blocks=752
[  197.138691][ T3024] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 704 with max blocks 48 with error 28
[  197.152454][ T2992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  197.165959][ T2992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  197.178948][ T2992] bond0 (unregistering): Released all slaves
[  197.706240][ T7333] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  197.738082][ T7333] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  198.281717][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.6.304'.
[  198.324168][ T7341] fuse: Bad value for 'fd'
[  198.404799][ T7338] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  198.440239][   T52] Bluetooth: hci2: command tx timeout
[  198.526932][ T7348] netlink: 'syz.2.307': attribute type 1 has an invalid length.
[  198.534932][ T7348] netlink: 244 bytes leftover after parsing attributes in process `syz.2.307'.
[  198.544270][ T7348] NCSI netlink: No device for ifindex 9628930
[  198.854444][ T7226] chnl_net:caif_netlink_parms(): no params data found
[  199.557398][ T2992] hsr_slave_0: left promiscuous mode
[  199.583704][ T2992] hsr_slave_1: left promiscuous mode
[  199.606417][ T2992] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  199.631420][ T2992] batman_adv: batadv0: Removing interface: batadv_slave_0
[  199.667560][ T2992] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  199.697213][ T2992] batman_adv: batadv0: Removing interface: batadv_slave_1
[  199.808520][ T2992] veth1_macvtap: left promiscuous mode
[  199.827691][ T2992] veth0_macvtap: left promiscuous mode
[  199.850497][ T2992] veth1_vlan: left promiscuous mode
[  199.855795][ T2992] veth0_vlan: left promiscuous mode
[  200.263345][   T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  200.430312][   T10] usb 7-1: Using ep0 maxpacket: 32
[  200.438781][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  200.490252][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  200.501081][   T10] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  200.549443][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.601363][   T10] usb 7-1: config 0 descriptor??
[  202.150408][ T2992] team0 (unregistering): Port device team_slave_1 removed
[  202.736935][ T2992] team0 (unregistering): Port device team_slave_0 removed
[  203.026117][   T10] usbhid 7-1:0.0: can't add hid device: -71
[  203.032199][   T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  203.055878][   T10] usb 7-1: USB disconnect, device number 8
[  203.305670][ T7389] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  204.352373][ T7226] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.369314][ T7226] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.377199][ T7226] bridge_slave_0: entered allmulticast mode
[  204.393965][ T7226] bridge_slave_0: entered promiscuous mode
[  204.403325][ T7226] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.411494][ T7226] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.419409][ T7226] bridge_slave_1: entered allmulticast mode
[  204.476972][ T7226] bridge_slave_1: entered promiscuous mode
[  206.039656][ T7226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  206.515248][ T7226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  206.934557][ T7226] team0: Port device team_slave_0 added
[  206.976548][ T7226] team0: Port device team_slave_1 added
[  207.316915][ T7447] netlink: 'syz.5.333': attribute type 1 has an invalid length.
[  207.325057][ T7447] netlink: 244 bytes leftover after parsing attributes in process `syz.5.333'.
[  207.334458][ T7447] NCSI netlink: No device for ifindex 9628930
[  207.366755][ T7226] batman_adv: batadv0: Adding interface: batadv_slave_0
[  207.760176][ T7226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  207.840191][ T7226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  207.897804][ T7226] batman_adv: batadv0: Adding interface: batadv_slave_1
[  207.940228][ T7226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  208.031573][ T7458] netlink: 24 bytes leftover after parsing attributes in process `syz.2.337'.
[  208.129872][ T7226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.775517][ T7226] hsr_slave_0: entered promiscuous mode
[  208.861918][ T7226] hsr_slave_1: entered promiscuous mode
[  210.960698][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.348'.
[  211.194571][ T7503] loop6: detected capacity change from 0 to 512
[  211.221816][ T7503] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  211.276134][ T7503] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  211.306736][ T7503] System zones: 1-12
[  211.425880][ T7226] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  211.526750][ T7503] EXT4-fs (loop6): 1 truncate cleaned up
[  211.577393][ T7503] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.637346][ T7226] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  211.695418][   T30] audit: type=1800 audit(1762546518.600:13): pid=7503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.350" name="file1" dev="loop6" ino=15 res=0 errno=0
[  211.721659][ T7226] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  211.791888][ T7226] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  211.819254][ T6106] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /43/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  211.885414][ T6106] EXT4-fs error (device loop6): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  211.954556][ T6106] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /43/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  211.991324][ T5898] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  212.027991][ T6106] EXT4-fs error (device loop6): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  212.081392][ T6106] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /43/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  212.121121][ T7226] 8021q: adding VLAN 0 to HW filter on device bond0
[  212.129206][ T6106] EXT4-fs error (device loop6): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  212.179541][ T7226] 8021q: adding VLAN 0 to HW filter on device team0
[  212.188193][ T6106] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /43/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  212.234958][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  212.253422][ T2926] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.254960][ T6106] EXT4-fs error (device loop6): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  212.260847][ T2926] bridge0: port 1(bridge_slave_0) entered forwarding state
[  212.294720][ T5898] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  212.310256][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.321342][ T6106] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /43/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  212.329423][ T5898] usb 3-1: Product: syz
[  212.346024][ T6106] EXT4-fs error (device loop6): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  212.359776][ T2926] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.375217][ T2926] bridge0: port 2(bridge_slave_1) entered forwarding state
[  212.388978][ T5898] usb 3-1: Manufacturer: syz
[  212.394161][ T5898] usb 3-1: SerialNumber: syz
[  212.403651][ T5898] usb 3-1: config 0 descriptor??
[  212.443755][ T5905] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  212.611842][ T5905] usb 6-1: Using ep0 maxpacket: 16
[  212.629204][ T5905] usb 6-1: config 0 has an invalid interface number: 214 but max is 0
[  212.639649][ T5905] usb 6-1: config 0 has no interface number 0
[  212.649381][ T7517] capability: warning: `syz.2.353' uses 32-bit capabilities (legacy support in use)
[  212.669362][ T5905] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  212.717667][ T5905] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  212.748634][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.761164][ T5905] usb 6-1: Product: syz
[  212.766089][ T5905] usb 6-1: Manufacturer: syz
[  212.773893][ T5905] usb 6-1: SerialNumber: syz
[  212.787052][ T5905] usb 6-1: config 0 descriptor??
[  212.918344][ T7226] 8021q: adding VLAN 0 to HW filter on device batadv0
[  212.923798][ T6106] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.955657][ T7517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  212.985344][ T7517] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  213.018515][ T5905] usbtouchscreen 6-1:0.214: Failed to read FW rev: -71
[  213.046634][ T5905] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -71
[  213.061981][ T5898] usb 3-1: USB disconnect, device number 9
[  213.101618][ T5905] usb 6-1: USB disconnect, device number 3
[  213.189429][ T2992] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.264251][ T7548] netlink: 'syz.0.363': attribute type 4 has an invalid length.
[  213.363812][ T2992] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.433370][ T2992] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.522153][ T2992] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.607366][ T7226] veth0_vlan: entered promiscuous mode
[  213.658756][ T7226] veth1_vlan: entered promiscuous mode
[  213.698505][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  213.712573][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  213.721307][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  213.729309][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  213.737630][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  213.954138][ T7567] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size.
[  213.979195][ T7226] veth0_macvtap: entered promiscuous mode
[  214.010265][  T794] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  214.034684][ T7226] veth1_macvtap: entered promiscuous mode
[  214.082531][ T7570] ªªªªª»: renamed from hsr0 (while UP)
[  214.150463][  T794] usb 3-1: device descriptor read/64, error -71
[  214.237008][ T2992] bridge_slave_1: left allmulticast mode
[  214.493722][ T2992] bridge_slave_1: left promiscuous mode
[  214.499687][ T2992] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.530815][ T2992] bridge_slave_0: left allmulticast mode
[  214.536589][ T2992] bridge_slave_0: left promiscuous mode
[  214.542593][ T2992] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.571771][ T7580] netlink: 'syz.0.370': attribute type 3 has an invalid length.
[  214.620285][  T794] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  214.879466][  T794] usb 3-1: device descriptor read/64, error -71
[  215.021227][  T794] usb usb3-port1: attempt power cycle
[  215.401216][  T794] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  215.443963][  T794] usb 3-1: device descriptor read/8, error -71
[  215.880273][ T5828] Bluetooth: hci0: command tx timeout
[  216.140229][  T794] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  216.170882][  T794] usb 3-1: device descriptor read/8, error -71
[  216.284739][  T794] usb usb3-port1: unable to enumerate USB device
[  216.406203][ T2992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  216.417385][ T2992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  216.428187][ T2992] bond0 (unregistering): Released all slaves
[  216.497057][ T7226] batman_adv: batadv0: Interface activated: batadv_slave_0
[  216.516160][ T7226] batman_adv: batadv0: Interface activated: batadv_slave_1
[  217.399184][   T44] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  217.611373][   T44] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  217.628141][ T1160] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  217.641072][ T1160] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  217.960267][ T5828] Bluetooth: hci0: command tx timeout
[  218.143169][   T10] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  218.323483][   T10] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  218.337598][   T10] usb 3-1: config 0 interface 0 has no altsetting 0
[  218.366710][   T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  218.432134][   T10] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  218.539272][   T10] usb 3-1: Product: syz
[  218.618289][   T10] usb 3-1: Manufacturer: syz
[  218.636327][ T2992] hsr_slave_0: left promiscuous mode
[  218.648965][ T2992] hsr_slave_1: left promiscuous mode
[  218.662965][ T2992] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  218.671124][   T10] usb 3-1: SerialNumber: syz
[  218.679249][ T2992] batman_adv: batadv0: Removing interface: batadv_slave_0
[  218.712917][ T2992] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  218.717186][   T10] usb 3-1: config 0 descriptor??
[  218.729881][ T7643] netlink: 24 bytes leftover after parsing attributes in process `syz.0.385'.
[  218.733040][   T10] usb 3-1: selecting invalid altsetting 0
[  218.744730][ T2992] batman_adv: batadv0: Removing interface: batadv_slave_1
[  218.773021][ T2992] veth1_macvtap: left promiscuous mode
[  218.782052][ T2992] veth0_macvtap: left promiscuous mode
[  218.797421][ T2992] veth1_vlan: left promiscuous mode
[  218.810401][ T2992] veth0_vlan: left promiscuous mode
[  220.040275][ T5828] Bluetooth: hci0: command tx timeout
[  220.624602][ T2992] team0 (unregistering): Port device team_slave_1 removed
[  220.714511][ T2992] team0 (unregistering): Port device team_slave_0 removed
[  220.776768][ T5905] usb 3-1: USB disconnect, device number 14
[  221.292988][ T7665] netlink: 'syz.2.387': attribute type 1 has an invalid length.
[  221.300776][ T7665] netlink: 'syz.2.387': attribute type 2 has an invalid length.
[  221.535744][ T7667] trusted_key: encrypted_key: insufficient parameters specified
[  222.121029][ T5828] Bluetooth: hci0: command tx timeout
[  223.983628][ T7670] ªªªªª»: renamed from hsr0 (while UP)
[  224.021535][ T7679] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2
[  224.035837][ T7679] netdevsim netdevsim2: Falling back to sysfs fallback for: ..€
[  224.102456][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  224.116929][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  224.162613][ T7556] chnl_net:caif_netlink_parms(): no params data found
[  224.364562][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  224.387170][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.161515][ T7698] netlink: 24 bytes leftover after parsing attributes in process `syz.2.394'.
[  225.813047][ T7721] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  226.990459][ T7556] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.018811][ T7556] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.010803][ T7556] bridge_slave_0: entered allmulticast mode
[  228.018560][ T7556] bridge_slave_0: entered promiscuous mode
[  228.029665][ T7556] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.112108][ T7736] xt_CONNSECMARK: invalid mode: 66
[  228.590254][ T7556] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.597585][ T7556] bridge_slave_1: entered allmulticast mode
[  228.678502][ T7556] bridge_slave_1: entered promiscuous mode
[  229.001764][ T7740] netlink: 24 bytes leftover after parsing attributes in process `syz.8.400'.
[  229.101364][ T2992] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.377030][   T30] audit: type=1804 audit(1762546536.280:14): pid=7749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.402" name="/newroot/102/file1" dev="fuse" ino=1 res=1 errno=0
[  229.512477][ T2992] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.533144][   T30] audit: type=1800 audit(1762546536.280:15): pid=7749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.402" name="/" dev="fuse" ino=1 res=0 errno=0
[  229.614006][ T7556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  229.751678][ T7756] netlink: 'syz.8.404': attribute type 10 has an invalid length.
[  229.759525][ T7756] netlink: 40 bytes leftover after parsing attributes in process `syz.8.404'.
[  229.885751][ T7756] veth0_vlan: entered allmulticast mode
[  229.919461][   T10] IPVS: starting estimator thread 0...
[  229.931008][ T7756] bridge0: port 3(veth0_vlan) entered blocking state
[  229.942795][ T7756] bridge0: port 3(veth0_vlan) entered disabled state
[  230.150395][ T7758] IPVS: using max 27 ests per chain, 64800 per kthread
[  230.838412][ T7756] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  231.034702][ T7769] netlink: 24 bytes leftover after parsing attributes in process `syz.5.406'.
[  231.113550][ T2992] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.204054][ T7556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  232.372326][ T2992] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.739440][ T7556] team0: Port device team_slave_0 added
[  233.193216][ T7556] team0: Port device team_slave_1 added
[  233.513208][ T7801] netlink: 24 bytes leftover after parsing attributes in process `syz.5.413'.
[  233.635336][ T7556] batman_adv: batadv0: Adding interface: batadv_slave_0
[  233.660560][ T7556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  233.739247][ T7556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  233.764374][ T7556] batman_adv: batadv0: Adding interface: batadv_slave_1
[  233.771982][ T7556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  233.798857][ T7556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  234.396132][ T7556] hsr_slave_0: entered promiscuous mode
[  234.411900][ T7556] hsr_slave_1: entered promiscuous mode
[  234.452610][ T7556] debugfs: 'hsr0' already exists in 'hsr'
[  234.466305][ T7556] Cannot create hsr debugfs directory
[  234.687023][ T2992] bridge_slave_1: left allmulticast mode
[  234.696502][ T2992] bridge_slave_1: left promiscuous mode
[  234.702818][ T2992] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.726937][ T2992] bridge_slave_0: left allmulticast mode
[  234.746604][ T2992] bridge_slave_0: left promiscuous mode
[  234.768414][ T2992] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.142186][ T7844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.422'.
[  237.281239][ T2992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  237.366506][ T2992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  237.378430][ T2992] bond0 (unregistering): Released all slaves
[  237.610972][ T7850] netlink: 24 bytes leftover after parsing attributes in process `syz.5.424'.
[  238.446784][ T2992] hsr_slave_0: left promiscuous mode
[  238.471312][ T2992] hsr_slave_1: left promiscuous mode
[  238.493586][ T2992] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  238.519172][ T2992] batman_adv: batadv0: Removing interface: batadv_slave_0
[  238.546474][ T2992] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  238.560300][ T2992] batman_adv: batadv0: Removing interface: batadv_slave_1
[  238.603606][ T2992] veth1_macvtap: left promiscuous mode
[  238.610681][ T2992] veth0_macvtap: left promiscuous mode
[  238.619017][ T2992] veth1_vlan: left promiscuous mode
[  238.625050][ T2992] veth0_vlan: left promiscuous mode
[  239.210917][ T7882] overlayfs: missing 'lowerdir'
[  239.336426][ T7879] could not allocate digest TFM handle cryptd(blake2b-160)
[  240.246267][ T2992] team0 (unregistering): Port device team_slave_1 removed
[  240.412186][ T2992] team0 (unregistering): Port device team_slave_0 removed
[  240.610693][ T5884] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  240.804604][ T5884] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  240.815912][ T5884] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  240.836417][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.882904][ T5884] usb 6-1: config 0 descriptor??
[  240.918019][ T5884] pwc: Askey VC010 type 2 USB webcam detected.
[  241.307842][ T5884] pwc: recv_control_msg error -32 req 02 val 2b00
[  241.318476][ T5884] pwc: recv_control_msg error -32 req 02 val 2700
[  241.331154][ T5884] pwc: recv_control_msg error -32 req 02 val 2c00
[  241.347128][ T5884] pwc: recv_control_msg error -32 req 04 val 1000
[  241.363010][ T5884] pwc: recv_control_msg error -32 req 04 val 1300
[  241.370425][ T5884] pwc: recv_control_msg error -32 req 04 val 1400
[  241.397375][ T5884] pwc: recv_control_msg error -32 req 02 val 2000
[  241.416358][ T5884] pwc: recv_control_msg error -32 req 02 val 2100
[  241.448474][ T5884] pwc: recv_control_msg error -32 req 04 val 1500
[  241.483518][ T5884] pwc: recv_control_msg error -32 req 02 val 2500
[  241.500228][ T5884] pwc: recv_control_msg error -32 req 02 val 2400
[  241.899288][ T5884] pwc: recv_control_msg error -71 req 02 val 2900
[  241.912133][ T5884] pwc: recv_control_msg error -71 req 02 val 2800
[  241.920267][ T5884] pwc: recv_control_msg error -71 req 04 val 1100
[  241.940275][ T5884] pwc: recv_control_msg error -71 req 04 val 1200
[  241.954621][ T5884] pwc: Registered as video103.
[  241.971706][ T5884] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input16
[  242.047421][ T5884] usb 6-1: USB disconnect, device number 4
[  242.181970][ T7556] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  242.338852][ T7556] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  242.468310][ T7556] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  242.550434][ T7556] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  242.966054][ T7938] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode
[  243.365705][ T7556] 8021q: adding VLAN 0 to HW filter on device bond0
[  243.412300][ T7556] 8021q: adding VLAN 0 to HW filter on device team0
[  243.460045][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.467311][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state
[  243.575525][   T44] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.582732][   T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[  244.716368][ T7556] 8021q: adding VLAN 0 to HW filter on device batadv0
[  245.473885][ T7990] overlayfs: missing 'lowerdir'
[  245.686735][ T7969] loop8: detected capacity change from 0 to 32768
[  245.750516][ T7969] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.449 (7969)
[  245.781721][ T7556] veth0_vlan: entered promiscuous mode
[  245.866626][ T7556] veth1_vlan: entered promiscuous mode
[  245.873453][ T7969] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  246.034001][ T7556] veth0_macvtap: entered promiscuous mode
[  246.043897][ T7984] could not allocate digest TFM handle cryptd(blake2b-160)
[  246.048087][ T7556] veth1_macvtap: entered promiscuous mode
[  246.071612][ T7969] BTRFS info (device loop8): using blake2b (blake2b-256-lib) checksum algorithm
[  246.736460][ T7556] batman_adv: batadv0: Interface activated: batadv_slave_0
[  246.765214][ T7556] batman_adv: batadv0: Interface activated: batadv_slave_1
[  246.838293][ T1160] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  246.916380][ T1160] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  246.946934][ T7969] BTRFS info (device loop8): enabling ssd optimizations
[  246.955130][ T1160] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  246.974362][ T7969] BTRFS info (device loop8): turning on async discard
[  246.991019][   T44] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  247.014223][ T7969] BTRFS info (device loop8): enabling free space tree
[  247.047967][ T7969] BTRFS info (device loop8): use zstd compression, level 3
[  247.302228][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.351764][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.371715][ T8027] netlink: 24 bytes leftover after parsing attributes in process `syz.0.454'.
[  247.430283][  T794] usb 6-1: new low-speed USB device number 5 using dummy_hcd
[  247.545962][ T8031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.454'.
[  247.576111][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  247.584253][ T7226] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  247.660225][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.689898][ T8021] netlink: 'syz.5.453': attribute type 29 has an invalid length.
[  247.717495][ T8034] netlink: 'syz.5.453': attribute type 29 has an invalid length.
[  247.771446][ T8021] netlink: 500 bytes leftover after parsing attributes in process `syz.5.453'.
[  247.864074][  T794] usb 6-1: unable to get BOS descriptor or descriptor too short
[  247.925187][  T794] usb 6-1: unable to read config index 0 descriptor/start: -71
[  247.953875][  T794] usb 6-1: can't read configurations, error -71
[  248.044288][ T8044] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  250.183535][ T8070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.464'.
[  251.254001][   T43] libceph: connect (1)[c::]:6789 error -101
[  251.283639][   T43] libceph: mon0 (1)[c::]:6789 connect error
[  251.337969][   T43] libceph: connect (1)[c::]:6789 error -101
[  251.364522][   T43] libceph: mon0 (1)[c::]:6789 connect error
[  251.374181][ T8074] ceph: No mds server is up or the cluster is laggy
[  251.682385][ T5829] libceph: connect (1)[c::]:6789 error -101
[  251.705632][ T5829] libceph: mon0 (1)[c::]:6789 connect error
[  253.828783][    C1] ------------[ cut here ]------------
[  253.834640][    C1] WARNING: ./include/linux/ns_common.h:255 at put_cred_rcu+0x2c5/0x340, CPU#1: ksoftirqd/1/23
[  253.845051][    C1] Modules linked in:
[  253.849201][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) 
[  253.858464][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  253.868571][    C1] RIP: 0010:put_cred_rcu+0x2c5/0x340
[  253.873935][    C1] Code: 5c 41 5d 41 5e 41 5f 5d e9 b8 25 8e 00 e8 13 a7 32 00 4c 89 e7 be 03 00 00 00 e8 a6 02 02 03 e9 b8 fe ff ff e8 fc a6 32 00 90 <0f> 0b 90 eb 9f e8 f1 a6 32 00 4c 89 ff be 03 00 00 00 e8 84 02 02
[  253.893728][    C1] RSP: 0018:ffffc900001d7888 EFLAGS: 00010246
[  253.899898][    C1] RAX: ffffffff818ed934 RBX: ffff88803218d0a0 RCX: ffff88801d2adb80
[  253.907933][    C1] RDX: 0000000000000100 RSI: 0000000000000004 RDI: 0000000000000000
[  253.916043][    C1] RBP: 0000000000000004 R08: ffff888030148193 R09: 1ffff11006029032
[  253.924143][    C1] R10: dffffc0000000000 R11: ffffed1006029033 R12: dffffc0000000000
[  253.932179][    C1] R13: ffff88803218d000 R14: ffff888030148000 R15: ffff888030148190
[  253.940284][    C1] FS:  0000000000000000(0000) GS:ffff888125fc2000(0000) knlGS:0000000000000000
[  253.949290][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  253.955973][    C1] CR2: 000055555bcf9808 CR3: 00000000316ba000 CR4: 00000000003526f0
[  253.964019][    C1] Call Trace:
[  253.967314][    C1]  <TASK>
[  253.970299][    C1]  ? __pfx_put_cred_rcu+0x10/0x10
[  253.975440][    C1]  ? rcu_core+0xc37/0x1770
[  253.979893][    C1]  rcu_core+0xcab/0x1770
[  253.984256][    C1]  ? __pfx_rcu_core+0x10/0x10
[  253.988971][    C1]  ? rcu_qs+0xc4/0x170
[  253.993129][    C1]  ? __pfx_rcu_qs+0x10/0x10
[  253.997660][    C1]  ? sched_clock_cpu+0x74/0x430
[  254.002610][    C1]  ? rcu_softirq_qs+0xf2/0x350
[  254.007414][    C1]  ? __pfx_rcu_softirq_qs+0x10/0x10
[  254.012731][    C1]  handle_softirqs+0x286/0x870
[  254.017529][    C1]  ? run_ksoftirqd+0x9b/0x100
[  254.022305][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  254.027642][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  254.032769][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  254.038010][    C1]  run_ksoftirqd+0x9b/0x100
[  254.042681][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  254.047837][    C1]  smpboot_thread_fn+0x542/0xa60
[  254.052873][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  254.057948][    C1]  kthread+0x711/0x8a0
[  254.062108][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  254.067599][    C1]  ? __pfx_kthread+0x10/0x10
[  254.072258][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  254.077470][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  254.082767][    C1]  ? __pfx_kthread+0x10/0x10
[  254.087382][    C1]  ret_from_fork+0x599/0xb30
[  254.092060][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  254.097225][    C1]  ? __switch_to_asm+0x39/0x70
[  254.102165][    C1]  ? __switch_to_asm+0x33/0x70
[  254.106950][    C1]  ? __pfx_kthread+0x10/0x10
[  254.111619][    C1]  ret_from_fork_asm+0x1a/0x30
[  254.116430][    C1]  </TASK>
[  254.119471][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  254.126764][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) 
[  254.135982][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  254.146052][    C1] Call Trace:
[  254.149359][    C1]  <TASK>
[  254.152297][    C1]  dump_stack_lvl+0x99/0x250
[  254.156909][    C1]  ? __asan_memcpy+0x40/0x70
[  254.161509][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  254.166726][    C1]  ? __pfx__printk+0x10/0x10
[  254.171419][    C1]  vpanic+0x237/0x6d0
[  254.175400][    C1]  ? __pfx_vpanic+0x10/0x10
[  254.179891][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  254.185199][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  254.190567][    C1]  panic+0xb9/0xc0
[  254.194273][    C1]  ? __pfx_panic+0x10/0x10
[  254.198681][    C1]  ? ret_from_fork_asm+0x1a/0x30
[  254.203633][    C1]  __warn+0x334/0x4c0
[  254.207605][    C1]  ? put_cred_rcu+0x2c5/0x340
[  254.212360][    C1]  ? put_cred_rcu+0x2c5/0x340
[  254.217035][    C1]  report_bug+0x2be/0x4f0
[  254.221389][    C1]  ? put_cred_rcu+0x2c5/0x340
[  254.226067][    C1]  ? put_cred_rcu+0x2c5/0x340
[  254.230746][    C1]  ? put_cred_rcu+0x2c7/0x340
[  254.235500][    C1]  handle_bug+0x84/0x160
[  254.239736][    C1]  exc_invalid_op+0x1a/0x50
[  254.244324][    C1]  asm_exc_invalid_op+0x1a/0x20
[  254.249176][    C1] RIP: 0010:put_cred_rcu+0x2c5/0x340
[  254.254448][    C1] Code: 5c 41 5d 41 5e 41 5f 5d e9 b8 25 8e 00 e8 13 a7 32 00 4c 89 e7 be 03 00 00 00 e8 a6 02 02 03 e9 b8 fe ff ff e8 fc a6 32 00 90 <0f> 0b 90 eb 9f e8 f1 a6 32 00 4c 89 ff be 03 00 00 00 e8 84 02 02
[  254.274046][    C1] RSP: 0018:ffffc900001d7888 EFLAGS: 00010246
[  254.280105][    C1] RAX: ffffffff818ed934 RBX: ffff88803218d0a0 RCX: ffff88801d2adb80
[  254.288066][    C1] RDX: 0000000000000100 RSI: 0000000000000004 RDI: 0000000000000000
[  254.296025][    C1] RBP: 0000000000000004 R08: ffff888030148193 R09: 1ffff11006029032
[  254.304346][    C1] R10: dffffc0000000000 R11: ffffed1006029033 R12: dffffc0000000000
[  254.312570][    C1] R13: ffff88803218d000 R14: ffff888030148000 R15: ffff888030148190
[  254.320609][    C1]  ? put_cred_rcu+0x2c4/0x340
[  254.325385][    C1]  ? put_cred_rcu+0x2c4/0x340
[  254.330066][    C1]  ? __pfx_put_cred_rcu+0x10/0x10
[  254.335083][    C1]  ? rcu_core+0xc37/0x1770
[  254.339503][    C1]  rcu_core+0xcab/0x1770
[  254.343788][    C1]  ? __pfx_rcu_core+0x10/0x10
[  254.348474][    C1]  ? rcu_qs+0xc4/0x170
[  254.352534][    C1]  ? __pfx_rcu_qs+0x10/0x10
[  254.357046][    C1]  ? sched_clock_cpu+0x74/0x430
[  254.361914][    C1]  ? rcu_softirq_qs+0xf2/0x350
[  254.366681][    C1]  ? __pfx_rcu_softirq_qs+0x10/0x10
[  254.371886][    C1]  handle_softirqs+0x286/0x870
[  254.376652][    C1]  ? run_ksoftirqd+0x9b/0x100
[  254.381352][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  254.386636][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  254.391690][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  254.396715][    C1]  run_ksoftirqd+0x9b/0x100
[  254.401306][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  254.406430][    C1]  smpboot_thread_fn+0x542/0xa60
[  254.411365][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  254.416391][    C1]  kthread+0x711/0x8a0
[  254.420451][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  254.425923][    C1]  ? __pfx_kthread+0x10/0x10
[  254.430530][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  254.435730][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  254.440925][    C1]  ? __pfx_kthread+0x10/0x10
[  254.445696][    C1]  ret_from_fork+0x599/0xb30
[  254.450282][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  254.455490][    C1]  ? __switch_to_asm+0x39/0x70
[  254.460330][    C1]  ? __switch_to_asm+0x33/0x70
[  254.465079][    C1]  ? __pfx_kthread+0x10/0x10
[  254.469656][    C1]  ret_from_fork_asm+0x1a/0x30
[  254.474518][    C1]  </TASK>
[  254.477783][    C1] Kernel Offset: disabled
[  254.482104][    C1] Rebooting in 86400 seconds..