last executing test programs:

5m3.049257586s ago: executing program 0 (id=1):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = dup(r0)
write$UHID_INPUT(r6, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
munlockall()
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00')
umount2(&(0x7f00000002c0)='./file0\x00', 0x2)

4m59.319427747s ago: executing program 0 (id=21):
socket$xdp(0x2c, 0x3, 0x0)
syz_open_dev$admmidi(0x0, 0x20, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
add_key(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
r2 = getpid()
syz_open_procfs(r2, &(0x7f00000000c0)='uid_map\x00')
socket$inet6(0xa, 0x1, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0)
mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)

4m58.627387752s ago: executing program 0 (id=27):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r3 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r7, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000380)=""/184, 0xb8}], 0x1}, 0x0, 0x21a3, 0x0, {0x3}})
io_uring_enter(r3, 0x46f3, 0x1000003, 0x1, 0x0, 0x0)
write(r6, &(0x7f0000000200)='~', 0x1)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, 0x0, 0x0)
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r8, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
accept4$netrom(0xffffffffffffffff, 0x0, 0x0, 0x80000)

4m55.295937304s ago: executing program 0 (id=30):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
kexec_load(0x2, 0x0, 0x0, 0x2)
gettid()
mmap(&(0x7f00008c7000/0x3000)=nil, 0x3000, 0x0, 0x8031, 0xffffffffffffffff, 0x8000000)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
open(&(0x7f0000000340)='./file0\x00', 0x80fd, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0, @ANYBLOB=',group_i'])
read$FUSE(r2, &(0x7f000000c3c0)={0x2020}, 0x2020)
write$FUSE_INIT(r2, 0x0, 0x0)
syz_fuse_handle_req(r2, 0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x2c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x2c}}, 0x0)
write$tcp_congestion(0xffffffffffffffff, &(0x7f00000000c0)='lp\x00', 0xfffffdef)
dup2(0xffffffffffffffff, r2)
r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0x3, 0x0, 0x0, 0x5, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5]}}})

4m49.399637744s ago: executing program 0 (id=39):
socket$xdp(0x2c, 0x3, 0x0)
syz_open_dev$admmidi(0x0, 0x20, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
add_key(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
r4 = getpid()
syz_open_procfs(r4, &(0x7f00000000c0)='uid_map\x00')
socket$inet6(0xa, 0x1, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0)
mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)

4m47.140785281s ago: executing program 0 (id=42):
fsopen(&(0x7f0000000000)='sysfs\x00', 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
mkdir(0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRESOCT=r3], 0x6c}}, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x8, 0x4, 0x0, 0x0, 0x1, 0x5, '\x00', 0x0, r5, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0)
umount2(&(0x7f0000000340)='./file0\x00', 0x0)
syz_emit_ethernet(0x2a, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

4m30.601552234s ago: executing program 32 (id=42):
fsopen(&(0x7f0000000000)='sysfs\x00', 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
mkdir(0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRESOCT=r3], 0x6c}}, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x8, 0x4, 0x0, 0x0, 0x1, 0x5, '\x00', 0x0, r5, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0)
umount2(&(0x7f0000000340)='./file0\x00', 0x0)
syz_emit_ethernet(0x2a, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

3m24.953982807s ago: executing program 4 (id=158):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe2$watch_queue(0x0, 0x80)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffffffd)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e26, 0x3, 'dh\x00', 0x1, 0x7, 0x4b}, 0x2c)
r4 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x3})
r5 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r6=>r2, {0x4}}, './file0\x00'})
writev(r6, &(0x7f0000001a40)=[{&(0x7f0000000100)}, {&(0x7f0000000a40)="7bbe6e59fc0a34d28a0e1125f9ac70283915b1c616bca07d95a9fc59082e1c65a3ce432927b97afccb5064b4b6672adcccc4194398008c03b25bb54e8ed0044e742b91a32beb748f836d25467a536e9cdacae466150c0dbcf965f53de3cae0529f1289afe5534185fd9922cef8a5dce2059346651dd39a741a582a0c644aef7c85a59d390d2f2352445cc1f9a3c78ddf42776b3382c900d30d64023a2561487deeacfd3cd8c034825c4965e14ea0d5f2c930a7330c34dd55746903f3a8f95f2c7079b20820", 0xc5}], 0x2)
close_range(r4, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@broadcast, 0x4e21, 0x10000, 0xc24, 0x0, 0xfffffffb}}, 0x44)
r7 = fsopen(&(0x7f00000001c0)='btrfs\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)

3m23.529484424s ago: executing program 4 (id=161):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
listen(0xffffffffffffffff, 0x101)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000880)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22040085}], 0x1, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5)
sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x34, r6, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x34}}, 0x0)
ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, &(0x7f0000002080)={0xa, "431b8e0e0ff107ce356300", 0x8, 0x4, 0xfffffffc, 0x10, 0x4})

3m21.741182743s ago: executing program 4 (id=164):
close(0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = timerfd_create(0x0, 0x0)
socket(0x28, 0x800, 0x9)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f0000000000)="0a000000010001", 0x7)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x7b)
r5 = accept4(r4, 0x0, 0x0, 0x800)
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000700)={0x10000000})
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r7, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r8, 0x400448ca, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}})

3m18.635044563s ago: executing program 4 (id=169):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
getpid()
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r1}, 0x18)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c1102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xa)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
pipe2$9p(0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
r3 = memfd_create(&(0x7f0000000300)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8<X\xfa\xdd\x8a6\xa1\x82\xf7r\xd8z\x85\x8do\xa5\xed\xd4\xbc8U\x1e\xf2tl8\xfe\xd0\x94\xfe\xf5\x1c+\x00U\te\xfa6\xca\xb9\xb4Q\xd9\xee\r6\x861h{\xc7z\'F\xc7\x91\x06x\xe1`\xf1:\xcf+\xd5\f\xb2\xce\xa4\x06\x90\x90\x9b\x1d\xcaa\xf7\x8f\x9e\x80\x93\xafT\xdfl\xec\xc6\x8e\x96\r[n\xc6\x99\x1fr<\x06\xb3\xbcT\x00\xda6\x18/\x18l\xc1\x81\x8e8L\xcb*S_\xd0:\xa4V\xbd\xf1\xa4\x955\xa9\x9d\xe0\x9b\xd3\x95\xc88n:\x89>?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4)
ftruncate(r3, 0x400000)
finit_module(r3, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0)
ioctl$SNDCTL_TMR_METRONOME(0xffffffffffffffff, 0x40045407)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40000c4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

3m11.898508719s ago: executing program 4 (id=176):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = socket$inet6(0xa, 0x3, 0x7)
syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0xa08042, &(0x7f0000000200)=ANY=[@ANYBLOB="646174615f636865636b73756d3d7878686173682c7374725f686173683d63726336342c6e6f7265636f766572792c726561645f6f6e6c792c726174656c696d69745f6572726f72732c6669785f6572726f72733d657869742c62747265655f6e6f64655f6d656d5f7074725f6f7074696d697a6174696f6e2c7265636f6e7374727563745f616c6c6f632c0000000000000fff7472616e73616374696f6e5f6e616d65732c61636c2c6e6f5f646174615f696f2c6e6f5f73706c6974627261696e5f636865636b2c646973636172642c686173682c00"], 0x1, 0x5927, &(0x7f0000000300)="$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")
r2 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0)
pwrite64(r2, &(0x7f00000000c0)='#', 0x1, 0x709d)
read$FUSE(r2, &(0x7f0000005c40)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_WRITE(r2, &(0x7f0000000080)={0x18, 0xfffffffffffffffe, r3, {0x6}}, 0x18)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback, 0x10000001}, 0x1c)
sendmmsg(r1, &(0x7f00000039c0), 0x0, 0x400c0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0)
umount2(&(0x7f0000000340)='./file0\x00', 0x0)

3m6.370890502s ago: executing program 4 (id=181):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mknod$loop(0x0, 0x6000, 0x0)
r2 = eventfd(0x20000)
io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
read$eventfd(r2, &(0x7f00000001c0), 0x8)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000480)={'\x00', 0x40, 0xa, 0x401, 0x40000004, 0x10})
unlinkat(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', 0x200)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_io_uring_setup(0x31c7, 0x0, 0x0, &(0x7f00000005c0))
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$SOUND_MIXER_READ_RECSRC(r4, 0x80044dff, &(0x7f00000000c0))

2m49.31821221s ago: executing program 33 (id=181):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mknod$loop(0x0, 0x6000, 0x0)
r2 = eventfd(0x20000)
io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
read$eventfd(r2, &(0x7f00000001c0), 0x8)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000480)={'\x00', 0x40, 0xa, 0x401, 0x40000004, 0x10})
unlinkat(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', 0x200)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_io_uring_setup(0x31c7, 0x0, 0x0, &(0x7f00000005c0))
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$SOUND_MIXER_READ_RECSRC(r4, 0x80044dff, &(0x7f00000000c0))

2m11.51281293s ago: executing program 1 (id=246):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0xb4}}, 0x0)
ioperm(0x83, 0x6, 0x8)
arch_prctl$ARCH_GET_CPUID(0x1011)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x13, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = creat(0x0, 0x0)
r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x4, 0x288, 0x0, r3}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000180)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x7, 0x100000000, {}, 0xfc, 0x5, 0x0, {0x0, 0x0, r3}})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
io_uring_enter(r4, 0x3516, 0x300, 0x0, 0x0, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000100), 0x7, 0x400000)

2m8.995709742s ago: executing program 1 (id=249):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = socket(0x840000000002, 0x3, 0x6)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
tkill(r1, 0x13)
ptrace(0x4206, r1)
ptrace(0x11, r1)
r2 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe(&(0x7f00000008c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x7, 0x9)
read(r3, &(0x7f0000032440)=""/102364, 0x18fdc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x89}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00')
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x200045a, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES16, @ANYRESHEX], 0x1, 0x2a1, &(0x7f0000000f40)="$eJzs3MFqE18Ux/Hzb/pv0pQ2EURQUA+60c3QxgfQIC2IAaU2RV0IUzvRkDEpM0MlIjYbcetzFJfuBPUFuhE37t0VQXDThTjiTKZN2rSmbdLE9PuBck9y7o+5bdNyUuis3339pFRwjYLpyVBCZUikJhsi6T9V3X/1dSioR6RRTS6P/fhy9s69+zezudz0rOpMdu5KRlUnzr9/+vzNhY/e2PzbiXdxWUs/WP+e+bp2au30+q+5x0VXi66WK56aulCpeOaCbeli0S0Zqrdty3QtLZZdy2nqF+zK0lJVzfLieHLJsVxXzXJVS1ZVvYp6TlXNR2axrIZh6HhSjrfhNvbkV2dnzeyubT/W0ROh60ZbPek42VrrZn71CM4EAAD6zN7zfzjr7z7/5+bDtcPzvwjzf5fUmh79Zf7HQHCcrJms//w2Y/4HAAAAAAAAAAAAAAAAAAAAAOBfsOH7Kd/3U9EafcRFJCEi0eNenxPdccDv/9UeHRcd1vCPewkR+9VyfjkfrmE/W5Ci2GLJpKTkZ/B6qAvrmRu56UkNpOWDvVLPryznYxKP8pF0q/y5E1NhXpvz/0uy8foZScnJ1tfPtMyPyKWLDXlDUvLpoVTElsXgdb2VfzGlev1Wblt+NNgHAAAAAMAgMHTTjvfvQT/YkJCd/TC/j78PbHt/PSxn2rlFJQAAAAAAODS3+qxk2rblHKCIi8gh4oNaxKQvjrGtuCYifXCMoyoSIhI+oweJf9uMt5Xy29gzLCI9/7Lso+j1byYAAAAAnbY19O8j9PllF08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDx0+79wKL9O1pRY494w+ViR/4JAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH3kdwAAAP//R8IgDA==")
syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @private=0x2010102, {[@generic={0x7, 0x2}, @timestamp_addr={0x44, 0x14, 0x6, 0x1, 0x0, [{@remote}, {@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
pread64(r6, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)

2m4.844649711s ago: executing program 1 (id=255):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = socket$inet6(0xa, 0x80002, 0x0)
r4 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
socket$nl_rdma(0x10, 0x3, 0x14)
pipe2$watch_queue(&(0x7f0000000040), 0x80)
r5 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r5, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x20, 0xd, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10081}, 0x4000)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)

2m1.627716301s ago: executing program 1 (id=258):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETA(r3, 0x5406, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000006c0)=0xa)
socket(0x10, 0x803, 0x0)
remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1c0000)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x23, 0x800000000004, @thr={0x0, 0x0}}, 0x0)
mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil)

1m59.970113781s ago: executing program 1 (id=260):
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x200, 0x100, 0x80, 0x4, 0x20, 0x6, 0x7}, &(0x7f0000000580)=0x9c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x32, 0x701, 0xfffffffc, 0x0, {0x6}}, 0x14}}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000100)={r1, 0x5, 0x3, 0x5})
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}, 0xffffffffffffffff, 0xfffffffc}}, 0x48)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={<r5=>0xffffffffffffffff}, 0x2, 0xc}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r5, 0xb}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r5}}, 0x18)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
sendmmsg$inet6(r6, &(0x7f0000000280), 0x0, 0x404000c)
syz_open_procfs(0x0, 0x0)
syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000240)='./file1\x00', 0x800010, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYBLOB="1e0534e9c8ed25d9"], 0x1, 0x5956, &(0x7f0000008e40)="$eJzs3X+MXGXdKPDnzMx2p7v9sS0gFWS7FKoIarf8Cv6IVq+/AkhqMEq5VVjoFqttadoiUFCKF7wQwKDRKOofaJBctBoSuEolIj9uy1WUcPWSN0hefUX/0CAvjUBfYnzdN7tzntnZs3P2zM7OlgKfT9o9c545832e85xnzpzvM7M7AQAAgFeFvddu23/WEe/7xeeHX7jqgz/ZdHXoLY+VV+MGfenyspeqhRxI3ZUlY8vsuHjDFd/708CF7/n5nT3ffXHPuqPX//a9h1x476dO333LNx94fv7d/3yqabDK+M04no4fX0+eSUKo/nTfV7+w55HDR8uSEEI56dsZwqJk8QOLkky0wb+HENalK0syd971wknrR5dX39A9oXxhZjvj/dWtmo6zHfsvPSH87t1rrvnV0h/+oGvX0zvHN0mqDeMphAXnNz6+K4QwN/0/Ko62OB7joF0dQuhpeNxpBe06psX2r8hZPzJdzkmXvQVx4v3LMuulzHbZ9agrs+wpqG+m8trR7nZF5mXWsyejmcprZyxflC5/nC6Pn2b8cvyfhFISKvXmb0zGx0hoOG5JSMaOZbW+Xqof25Duf2Y9yayXMuvlrsx+jdWbDrRykkwsj9tlyuPpuJKWH914rm7i7Jzy16bLavpEfTGuh+yNmt5JN+r7NSa2a98UbTkQSg3noGbl9QOfHozetKw3WTzpMSNNxPv2rLlxeXntg3v7ctqR3Jmk8ZO24u/45aJ5n/j+9ZdkX9fr8c8vpfFLbcX//RmPPnvu9d/5Rm78m2P8clvxT7yv55kzHrp2WW7/7Iv9U2kr/tBTD9+09NALduW2/9YYv9pW/FW7H+2ev/+++3PbPxj7Z25b8Z98+/v/eMfj9zydGz/E+D1txV+7e8sXu/v3H5cb//7YP73tjZ/ndp36RH//nwfy4j8W489vK/7tO295220Lbzg99/iujv3T11b8M4+995p5++85Ku/cmdzaqVdOgFenQ9JrrOvS9Yl55h/e2WqeOVMN+cLXByq1a7556f/5nawoc/E5Ws+CTsYHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBDCYSf83w/84aN9z1TS9e70xpOl2jKWzwkhmRtC2LZ9aOv2DZsvGvjUxZds3Ty0cWBo+8Dw5u1bLx84+U0DW4e3bBy6fPTewTefVHvc4pDUlslRk+ruHhkZKfVNLIv1/bdjd/1u+Wl/+WsIg4f9pr+S2/4Vt2y67dAmPzOSVSPv2nTJWb855dvpfvWl7epr0q6RkZGRkNOufz/nH7d9ed+fjgth8DVTtevhJ9/5swkNGisYj5MqdYdag7qTnqbtqLc6bU/sr8r6DRuHB6fu39HHl3P2479f8fTf11/2pX/U+reaux8t9u/cVSMbS19bc+Z/fu3KWkFRu16q417U33EvYvti/1XT/l6Q7teCnP2q5OzXziQ8/tMjrn9+ZxisPLd0ct1F+9WVDoCu5LUt1Rtr6EkWTSivpttXM+1bsX3TlhXbLt/x5g2bhi4avmh481tXnrzy1MFTTj1lxdier5jh/l/7q/sn7H+s//Ut7v+BGU8LP7Pzx/Fna+OpqF1F/THaruL+aGxR3vOv5+wvfOWttzx0Vq2gaJzHrevnk3TZM3qcV4aG8Ta5r5rtV1E/hBAGmvXDs8+fHg7/lw3XFJ2HGo9M48+MZNXII8v+9u3TvrXkHbWCA3Keb2xQm+f5eqvH2zPWX9X0eIwcpP3bHcrpfvU2bdfKRx7qunHvXz9bb9+cOeGyoe3bt66s/ZyXtnRecmTTdmVL434tHftZDmm3hPowbTJeR3WFWvuy58+4ebZXe9P7epPFTfcrK963Z82Ny8trH9yb19PJnbUa54b5tWXyupwtN2YeWK43uFn9B+vzr2h89H/gW3d/9O4fnTxpfJxY+1m0X0nOfv3w8du/8t0v/c8fdW6/PvDOR/v+9q+fXF4reLmcV+qtTtuTNJ5XTgyh6Pm3NDTfj9znX6n5/hQ9/7L1jG/fPN5AZr03lNt6vp54X88zZzx07bLc5+u+Vp+vV05YKxc8Xw+W8ZN9fiWVie2YvefXhIGSrBr5+XWH7HzgqtVH1AqKxnV962bj+qQW8o+c/frZuU/0XzzwP/5/584b33vTXef9dmjV52oF7R/32JbOHPdq2r/VnP6ttzrmnY39+5YLL964rlZ+8F7/psuC/CeeSrZdvuPTQxs3Dm/d1tp+tfp6GuvJ9nK7r6fx7La4YL9Kk/Zr9m600l+tPt9i+9e13V8Tn2+9IWnrdWHHLxfN+8T3r7+kb9Kj0orOL6XxS23F//0Zjz577vXf+UZu/Jtj/Epb8YeeevimpYdesCs3/q1JGr/aVvxVux/tnr//vvtz4w/G9s9tK/6Tb3//H+94/J6nc+OHGL+3vf5/btepT/T3/zk3/mNJWs/oNVIId71w0vraehK60udbbEfXhHaF7HqSWS9l1suN66XaXGu9gnKSTCyP26XlRze0pZmP5ZTHq7DqktryxbgesjemLj/YlBrO/c3Ki65TAQBe6eL7//EaNL7/P5xeKOXPNMC4meZhS3LixjxsfD5nzoT7l6Tx4+PjPGD/W8Lg6PLqgdqF/nTfR4jPh+w8Z6znuGMmxmh3nrNo/n1ZZj22qzZfXmnIQ1OT85pKaGH+fXI9U8+/Z3a/eH584LpJzRpomLfKHr+udMas2ecdMu2tjEbIGx/ZebH4eY7+BWH1WH0tjo/s52jicch+jibWc0TmxNnu52hmOj5is6cYH2NNLn5/Y/LxC1P07/jxax4te/ymcbyro9vP9vuzHZg3bHpKO3DzhrP7fph5yZz46RPsYJ83jOVxPyotzid+NKe8U/OJ8XQR27VvirYcCOYTgVeqmP/H14jR/H/0Avw/MtsVXYdmrxpjvNzPCZWbt6co75j8Ob2etl7H1+7e8sXu/v3H5V7n3N/q5362TFjrKfjcT1E/Ls+sF/ZjzgRN2o+VkJPvZesp6vfs5zJ6w/y2+v32nbe87baFN5ye2++ray+kxf3+lQlr8wv6/WWQLzSPL19oN1/4SyvxD5Z8Ybbnz16yfCT94NNs5SMfySmfbj7SM+lGfb/GvOzyka4D2y4A4OUj5v/198/S/P/f4gbpdURR3np8Zj3Gy81bc65P8t6n/FC6vCyzfW/6GxXTvW4+89h7r5m3/56jcvOWW1vNQ//XhLW+wjx0Znlzbh6xujOfF8/NI+p51szyxNz21/PEmeXpufHrefrM8ujc/qnn0TObB8iNX58HOIjeF5s7fl/reW7BfF2msrja6nzdKzaPTn99drby6LNzyqebR/dOulHfrzHyaACAl1bM/+NlXMz/H8psN9P32XPzgg5dt2f/Hkg9/mMHKq+c7bxvtvPW2c7rZ3te4iDKi9t6/3e254Vmd57sVZ8Xp5XKiwEAOJjF/D++lZef/88sP2mWv3VNyE/k503jv1Lz877W4h88+fnLff5L/u998WLyfwCAV7aY/8dfe4x//+//pOvZv1svT8+J/0rN01uML0/vVJ7e+Xm24HMAL+08QMPvSZgHAADgpdA1lilN/j37j6fL7O/Z5/1e/rk527eqkl4eX7B96/DweZdsWTe0ffi8zRevG9523qVbN2zfPry5tt1M88bcvCXNG7tCJe2P5ttl87aF6d9DWJjz9xCy28ewR47dmPz3ELLVzi34OwLjx6+19uYdv9IU2zcbH3nHOy/+x3K2j+rH/8JPnnje+m3nbdi8YfuGoY0bdgxP3G40a+2Zxvdmxm6Z1velZn5MUpr+93d2ph2lSe3oSvsj7/vZk0w7FqUtWZT3/Qc57f7F//vyZ44d+ccdIQweVn7d9PuvIT1MVo3873OGP7R972+2jJaXpmx/fcu0XUXfV5rdPu5PZePF27afsP7iSzZnv1GyPXE+o1Rfn6X5jPTpX25xfmJtTvl0P6dQnnTj4NTy/AQAABPE9//j9Wx8//BL6QVULG89T5/Z+8e5efpga3l69nvJivL07PZxf1vN06szzNOz9Rfl6c22b5an5+XdefE/krP9dLU+Tmb2OY/ccXJ+a+Mk+30GReMku/10x0kyw3GSrb9onDTbvtk4yTvuefE/nLN9ntbHw8w+l5M7Hm5ubTy8MbNeNB6y2093PJRmOB6y9ReNh2bbNxsPecc3L/5ZOdu3auL4GB0YY+Ni+LxLL9766YbtZvv7L2bevtn9/o92td7+2f3c1+y3f3Y/Vzb77Z/Z58py2//YzGbCWm//7H6/S7sO2Hxt+mGzos+fFc3jrskpn+487pxJNw5O5nHhpRPz//h2T8z/b0iXnX4b6OX/PWm+97hp/A59j1nRdYzX8ykqOwh4PQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoTXdlydhy77Xb9p91xPt+8fnhF6764E82Xf2GK773p4EL3/PzO3u+++KedUev/+17D7nw3k+dvvuWbz7w/Py7//lUYeC+sZ+V49PVagjJM0kI1Z/u++oX9jxy+GhZEkIoJ307Q1iULH5gUZKJMPj3EMK6ejsn3nnXCyetH11efUP3hPKFmSDZ/Qq95diexnaGcFnhHvEyVE3H2Y79l54QfvfuNdf8aukPf9C16+md45sk1YbxFMKC8xsf3xVCmJv+HxVH25L44HS5OoTQ0/C40wradUyL7V+Rs35kupyTLnsL4sT7l2XWS5ntsutRV2bZU1DfTOW1o93tiszLrGdPRjmyp5tcee2M5YvS5Y/T5fGtBk6V4/8klJJQqTd/YzI+RkLDcUtCMnYsq/X1Uv3YhnT/x9fHbiWZ+0uZ9XJXZr/G6k0HWjlJJpbH7TLl8XRcScuPbjxXN3F2Tvlr02U1faK+GNdD9kZN76Qb9f0aE9u1b4q2HAilhnNQs/L6gU8PRm9a1pssnvSYkSbifXvW3Li8vPbBvX057UjuTNL4SVvxd/xy0bxPfP/6S5bkxT+/lMYvtRX/92c8+uy513/nG7nxb47xy23FP/G+nmfOeOjaZbn9sy/2T6Wt+ENPPXzT0kMv2JXb/ltj/Gpb8VftfrR7/v777s9t/2Dsn7ltxX/y7e//4x2P3/N0bvwQ4/e0FX/t7i1f7O7ff1xu/Ptj//S2N36e23XqE/39fx7Ii/9YjD+/rfi377zlbbctvOH03OO7OvZPX1vxzzz23mvm7b/nqLxzZ3JrwytSp15EAV5FDkmvsa5L19vNM2eqIV/4+kClds03L/0/v5MVZYzWs2AW4wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Mr06ytP/vg57/rwmkoSQpKzzUgT8b7ynFWrBtqod+iph29aeugFuxrLlrQRBwAAACgW8/BSvaQaloRLk7nhyKbbxzmCI+NaMrE8O4cQ42TnCNqNU+pQnHKH4lQ6FKerQ3HmdChOd4fiVAviVENrceZOEacyOipabE/PlO1pPU5vh+LM61Cc+R2Ks6BDcRZ2KE7flHFaH4eLOhRncYfiHNKhOId2KM5hHYrzmg7FObxDcbJzytMdh/PTLY/IizN2o1wYp5KU63c0m08/PK3nqBnW01tQz/yi1+MW65nbYj3HZB5XmmY91Rbref0M60larOeNM6ynVFBPHLeXZdsX64lrLY7/yzsUZ0eH4lzRoThXdijOZzsU53MdinPVDOOkwQAKxfx/PN/rC92Vd4Se9IyTnQWI+e7SsZ+TX++an5BCPd7rMuVziuJlE/VMvKXTbV92AiETb1mmvGtCvEo9H5kiXrUx3vLMnYX7m51QyLTv+Ex5d1G87MQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMyiX1958sfPedeH14QkjP5raqSJeF95zqpVA23Uu2fNjcvLax/c21jWXWkjEAAAAFAo5uFd9ZJq6K6sDN3JnAnbVdN5gGq6Xu6rLfsXhNWjy2SgNLbekyya8nGV9HErtm/asmLb5TvevGHT0EXDFw1vfuvKk1eeOnjKqaesWL9h4/Bg7WcI3QXxQghj0w/bLt/x6aGNG4e3bqsVZtu/JH3cknQ9SR/X/5YwOLq8Om3/4oL6SpPqm70bxUcPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC/2LXfULfOOg7gz0lyk+xuXSP7l5X1NvTPqDq0rXfS6VgOCA62tvQykGR6HcW1OLxdy9aOOuNWcJstirBRKJW+sFKHm8M3++OGuD8UKrNa8NYi29C90BfKppNu9IV0RHpvTm6SmzTX0LVb9/m8OOfkOb/n+Z0nlML33AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC5NVkbHa+Ux6rDUQhRj5p6F8m9dDaOSwP0/doLW3+UGzm5vHUslxlgIQAAAKCvJIcPNUfyIZdJh3S4eurT4tByI8zkfgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4ONnsjY6XimPVS+OQoh61NS7SO6ls3FcGqDvm+8+9fnXRkb+0TpWHGAdAAAAoL8kh6eaI/lQDEvCUHR1W13ybmBBx/zOumSdhXOs63x30KtuyRzrrp1j3Sf71K1rnHcEAAAA+OhL8n+mOVIIucy8nvm/X65P6hZ11KUb5zn9VqDXDxEAAACAgST5P9ccKYZcptjM63PN+4s76pL5/f5un8xf1mN+v7/nr22c/Z0eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD46Jmuj45XyWDUdhRD1qKl3kdxLZ+O4NEDfVS8O/+vWQw8vbh3LZQZYCAAAAOgryeEz0TsfcpnhMBQunsr9Izfvf+Yrzzw3GkKYjvnZbNixYdu2e1ZNH5O6lUcODf3w8NvfnVW3cvp43jYIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcNZO10fFKeax6URRC1KOm3kVyL52N49IAfd/44pf/9sTx599qHSsOsA4AAADQX5LDZ7J/PhRDNmTDlVOfWrP+aamO+b3eGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXjnu/ff+3NkxMbLznnF1cmlzU508/wjnt7sLF2bvYefqf7/l/jA/k4nz/zwQAAJxti0IU6v+nq9af76cGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+DCZro+OV8lg1H4UQ9aipd5HcS2fjuDRA3/iFo7l5J198uXWsOMA6AAAAQH9JDp/J/vlQDENhKFwx9anbO4Gp/F84hw8JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfKhM1kbHK+Wx6rwohKhHTb2L5F46G8elAfo+vnPfFw7O/8EtrWO5zAALAQAAAH0lOTzbHMmHXOZTIReuaXyeaJ8QpRvn7u8FZuZtbZs2POd5tbZ56TnP29Wxs0xjN9Pz8sl6helzc15p9rxSy7xiaLYvtc0Le9pmzevznAEAAADOoyT/55ojhZDL5Fpy7s/b6gtyLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQw2RtdLxSHqtGUQhRj5p6F8m9dDaOSwP0vf/3n7jk67/Yvb11rDjAOgAAAEB/SQ6fyf75UAwLw6Vh4VTuD4X2+qTu35VTBx/7z9+Xh7DiymMjmc5lf5Jc/PaNm17qPISQaq9OhTC/0S/q0e93f3zsvqX1U0+EsOKK9DWz+oUz92tfMq4/W9m4dtvhY1v7fDkAAABwgUjy/1BzpBBymbt75v8keffJ/01TAXz+fTt/dXnj2EjkHTNShUa/VI9+X1r61F+Xrf7n26fz/5n6fXbf5oOXtzWcHukQxfXy5u3rjl1/IJXserp/uqN/8r189Ttv/XfTjkdPTffPh3xjfEGmW//Zxw4XxfWJ1N7qmvf31tr7Z3rs/+E/vHz8Nwt2v3e6/7uLhpv9rz3D/s/cf/i2R/bcsO/Quvb+IYRSt/7vvHdLuOrPdz3Uuf/hjoVbv/nWY4corh9ZfOLA6v3FG9v7Rx39k+//l8cf3/OzR7//XNI/+a3I8iVz7Z/q6P/qrst2vvLg+gXt/VM99v/S7a+NbCl970+d+7+zbdVMz6eYvf8nr3v6jtc3xA903gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALiwTNZGxyvlsWoqCiHqUVPvIrmXzsZxaYC+b9569J3bd//0x61jxQHWAQAAAPpLcvhM9s+HYsiGbBieyv3PVjau3Xb42NZQmL4bNc6ZiS33bvv0pi3b775zjp3SH8DTAwAAAHOR5P9Mc6QQcpmlYaiR/8ubt687dv2BVJL/U0n+33TXxMYVoVn36q7Ldr7y4PoFzfcEIUz9LCB/uu5zM3U333S0cOIv31zWtW7VTN2RxScOrN5fvDGpC611K0Pz/cST1z19x+sb4geaz9da95lvbJlovJ5I1h2+7ZE9N+w7tK65j8Z5uLFuUjeR2ltd8/7eWlKXbpzzjX0DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALNN1kbHK+WxakiHEPWoqXeR3Etn47g0QN81S3/90CUnn1/YOpbLDLAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9jBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCvv1ExpH2ccB/Hl2kzfbbNIm7QtGxTStilIPFgURvaioSCtS8FQpUm3tQRQEEaUeTKUVS1W8CFYvRVRQoxQUbCyWVknFf8WLBxUUqgehFAPapXhQye4z2810x9VJFdTPB4YnzzMz3/nNPM/OZgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+UQb6xprt4R33N24554aPHr3rxCM3vXPvtosefvW7iU3Xfbh38KWTM5tXbPny+mWb9t+9Znr384d+Gn7rl6M9gx9qNatStxZCPB5DqL07+8xjMx+fNTcWQwjVODIZwmhcemg05hJW/xxC2Nyuc/7ON09cvmWu3bZrYN74klxI/r5CvZrV0zIyv17+XWppnW1tPHhJ+Pra9ds/Xf7G6/1TxyZPHRJrHesphMUbO8/vDyEsStucbLWNZSendl0IYbDjvCt71HX+H6z/0oL+uan9X2rrPXKy/Stz/UruuHw/059rB3tcb6GK6ih7XC9DuX7+ZbRQRXVm46OpfTu1q/5kfjXbYqjE0Ncu/554ao2EjnmLITbnstbuV9pzG9L95/ox16/k+tX+3H01r5sWWjXG+ePZcbnx7HXcl8ZXdL6ru7i1YPzs1NbSB/Vk1g/5P1rqp/3Rvq+mrK7Z36nl71DpeAd1G29PfJqMehqrx6WnnfNrF9m+mfVPXFjd8N7hkYI64t6Y8mOp/K2fjA7d/trOB8aK8jdWUn6lVP43a4/8cNvOF54rzH86y6+Wyr/swODxte/vWFn4fGaz59NXKv+Oox88ufz/d051m+tm/p4sv1Yq/5rpIwPDjQMHC+tfnT2fRaXyv7r6xm9f+XzfscL8kOUPlsrfMH3fUwPjjYsL8w+2Pgr15gotsX5+nLrii/Hx7yeK8j/Lnv9wl/zYM//lyd1Xvbhk15rC9bkuez4jpeq/+YL924ca+84renfGPWfqmxPgv2lZ+h/r8dQv+ztzoTp+Lzw70df6BhpK2/CZvFDO3HUW/4X5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8xg4ckAAAAAAI+v+6HYECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBUAAP//cjogZA==")
rmdir(0x0)

1m56.072573752s ago: executing program 1 (id=264):
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82)
setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x141dc0, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000100)={0x7})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
fadvise64(0xffffffffffffffff, 0x0, 0x7, 0x3)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r5, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000700)=0x8, 0x4)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r7 = accept(r4, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)

1m39.497017994s ago: executing program 34 (id=264):
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82)
setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x141dc0, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000100)={0x7})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
fadvise64(0xffffffffffffffff, 0x0, 0x7, 0x3)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r5, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000700)=0x8, 0x4)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r7 = accept(r4, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)

52.580589688s ago: executing program 5 (id=316):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = socket$inet6(0xa, 0x80002, 0x0)
r4 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
socket$nl_rdma(0x10, 0x3, 0x14)
pipe2$watch_queue(&(0x7f0000000040), 0x80)
r5 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r5, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x20, 0xd, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10081}, 0x4000)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

49.617052216s ago: executing program 2 (id=323):
syz_open_dev$vim2m(0x0, 0x0, 0x2)
socket$vsock_stream(0x28, 0x1, 0x0)
epoll_create1(0x0)
socket(0x10, 0x3, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x2001, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0xbc, 0x8000e, 0x2, 0x0, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x0, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x41, 0x107, 0xfffffffc, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x4, 0x136}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
write$binfmt_register(0xffffffffffffffff, &(0x7f0000000200)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x5, 0x3a, '\'', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a)
openat(0xffffffffffffff9c, 0x0, 0x300, 0xba)
r2 = fsopen(&(0x7f0000000280)='binfmt_misc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
mount$nfs4(&(0x7f0000000080)='\\\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x20000, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r3, 0x3)
accept(r3, &(0x7f0000000240)=@qipcrtr, 0x0)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB="20199e"], 0x16)

48.111061588s ago: executing program 5 (id=327):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r3 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000380)=""/184, 0xb8}], 0x1}, 0x0, 0x21a3, 0x0, {0x3}})
io_uring_enter(r3, 0x46f3, 0x1000003, 0x1, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000200)='~', 0x1)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, 0x0, 0x0)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
accept4$netrom(0xffffffffffffffff, 0x0, 0x0, 0x80000)
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b4c, &(0x7f00000000c0))

45.977344177s ago: executing program 3 (id=328):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x3041832, &(0x7f0000000340)=ANY=[@ANYRESOCT=r2, @ANYBLOB, @ANYRESDEC=r0, @ANYBLOB=',gr'])
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50)
r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00', 0x8}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0})
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, &(0x7f0000000280)={@my=0x1})
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r8, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
close_range(r6, 0xffffffffffffffff, 0x0)
syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

44.872562138s ago: executing program 5 (id=330):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r1, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f00000000c0), 0x4)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x40010, r0, 0xa6c1a000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00'}, 0x10)
r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
waitid(0x0, r2, 0x0, 0x1, &(0x7f0000000380))
keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffe, r5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x70bd2a, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0)

44.452310228s ago: executing program 2 (id=331):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r7, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000380)=""/184, 0xb8}], 0x1}, 0x0, 0x21a3, 0x0, {0x3}})
io_uring_enter(r3, 0x46f3, 0x1000003, 0x1, 0x0, 0x0)
write(r6, &(0x7f0000000200)='~', 0x1)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, 0x0, 0x0)
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r8, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
accept4$netrom(0xffffffffffffffff, 0x0, 0x0, 0x80000)
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b4c, &(0x7f00000000c0))

42.756703259s ago: executing program 3 (id=332):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = socket$inet6(0xa, 0x80002, 0x0)
r4 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
socket$nl_rdma(0x10, 0x3, 0x14)
pipe2$watch_queue(&(0x7f0000000040), 0x80)
r5 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r5, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x20, 0xd, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10081}, 0x4000)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

40.964848786s ago: executing program 2 (id=335):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000380)=""/184, 0xb8}], 0x1}, 0x0, 0x21a3, 0x0, {0x3}})
io_uring_enter(0xffffffffffffffff, 0x46f3, 0x1000003, 0x1, 0x0, 0x0)
write(r3, &(0x7f0000000200)='~', 0x1)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, 0x0, 0x0)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
accept4$netrom(0xffffffffffffffff, 0x0, 0x0, 0x80000)
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b4c, &(0x7f00000000c0))

39.857789318s ago: executing program 3 (id=336):
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[], 0x158}, 0x40)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @multicast2, @remote}, &(0x7f0000000280)=0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r3, 0x0, 0x0)
bind$netrom(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000000)=0x36)
r4 = accept$netrom(0xffffffffffffffff, 0x0, 0x0)
writev(r4, 0x0, 0x0)
bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r5 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0)
r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f00000002c0)={0x1, 0x5}, 0x2)
write$USERIO_CMD_REGISTER(r6, &(0x7f00000000c0), 0x2)
read(r6, &(0x7f00000001c0)=""/93, 0x5d)

37.076767273s ago: executing program 2 (id=338):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = socket$inet6(0xa, 0x80002, 0x0)
r4 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
socket$nl_rdma(0x10, 0x3, 0x14)
pipe2$watch_queue(&(0x7f0000000040), 0x80)
r5 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r5, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x20, 0xd, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10081}, 0x4000)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

34.526573647s ago: executing program 5 (id=340):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = socket$inet6(0xa, 0x80002, 0x0)
r4 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
socket$nl_rdma(0x10, 0x3, 0x14)
pipe2$watch_queue(&(0x7f0000000040), 0x80)
r5 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r5, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x20, 0xd, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10081}, 0x4000)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

33.202281654s ago: executing program 3 (id=342):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r3 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000380)=""/184, 0xb8}], 0x1}, 0x0, 0x21a3, 0x0, {0x3}})
io_uring_enter(r3, 0x46f3, 0x1000003, 0x1, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000200)='~', 0x1)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, 0x0, 0x0)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
accept4$netrom(0xffffffffffffffff, 0x0, 0x0, 0x80000)
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b4c, &(0x7f00000000c0))

32.994319723s ago: executing program 2 (id=343):
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket(0x10, 0x803, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = epoll_create1(0x0)
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x30000009})
modify_ldt$write(0x1, 0x0, 0xfffffffffffffe8a)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ptrace(0x10, r3)
shutdown(r4, 0x1)
ptrace$pokeuser(0x6, r3, 0x358, 0x800000000000)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00')
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000300)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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")
syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0)

30.082180448s ago: executing program 5 (id=347):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r7, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000380)=""/184, 0xb8}], 0x1}, 0x0, 0x21a3, 0x0, {0x3}})
io_uring_enter(r3, 0x46f3, 0x1000003, 0x1, 0x0, 0x0)
write(r6, &(0x7f0000000200)='~', 0x1)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, 0x0, 0x0)
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r8, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
accept4$netrom(0xffffffffffffffff, 0x0, 0x0, 0x80000)
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b4c, &(0x7f00000000c0))

30.056764642s ago: executing program 3 (id=348):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x400)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0xe533, 0x80, 0x4, 0x1ab}, &(0x7f0000000040)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x800, 0x0, 0x1, 0x0, 0x0)
mount$afs(0x0, &(0x7f00000008c0)='./file0/../file0\x00', &(0x7f0000000900), 0x1, &(0x7f0000000080)={[{@dyn}]})
chdir(&(0x7f0000000040)='./file0\x00')
r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff)
close(r5)
execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0)
execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f0000000440), 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/41, 0x29)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r1, 0x47f8, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))

27.004994093s ago: executing program 5 (id=349):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = socket$inet6(0xa, 0x80002, 0x0)
r4 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
socket$nl_rdma(0x10, 0x3, 0x14)
pipe2$watch_queue(&(0x7f0000000040), 0x80)
r5 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r5, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

23.254487277s ago: executing program 3 (id=354):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = syz_open_dev$vcsu(&(0x7f0000000a40), 0x10000, 0x202200)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40004)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
r3 = io_uring_setup(0x25f3, &(0x7f0000000340)={0x0, 0x5972, 0x2, 0x0, 0x257})
io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f0000000a40)="b1", 0x1)

23.142648589s ago: executing program 2 (id=355):
syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@union]}, {0x0, [0x61, 0x5f, 0x2e, 0x61, 0x61, 0x30]}}, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0xffb)
ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00')
preadv(r6, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0)

22.084950891s ago: executing program 7 (id=357):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r3 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000380)=""/184, 0xb8}], 0x1}, 0x0, 0x21a3, 0x0, {0x3}})
io_uring_enter(r3, 0x46f3, 0x1000003, 0x1, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000200)='~', 0x1)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, 0x0, 0x0)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
accept4$netrom(0xffffffffffffffff, 0x0, 0x0, 0x80000)
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b4c, &(0x7f00000000c0))

21.792110562s ago: executing program 8 (id=358):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9)
r0 = getpid()
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
kcmp(r0, r0, 0x2, r1, r2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x305}, '\x00', "bcbd13b603e0f7b3bfa8909ef43c0ae1", "0000fd9f", "b08068ebce17ab00"}, 0x28)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
unshare(0x22020600)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_SET_RELBIT(r6, 0x40045566, 0x200000000000000)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
r8 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000200)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x1000000, 0x0, 0x0, 0xfd}}, 0xe8)
sendmmsg(r8, &(0x7f0000000480), 0x21, 0x0)

19.089384388s ago: executing program 8 (id=360):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = socket$inet6(0xa, 0x80002, 0x0)
r4 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
socket$nl_rdma(0x10, 0x3, 0x14)
pipe2$watch_queue(&(0x7f0000000040), 0x80)
r5 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r5, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

17.183824282s ago: executing program 6 (id=361):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r3 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r7, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000380)=""/184, 0xb8}], 0x1}, 0x0, 0x21a3, 0x0, {0x3}})
io_uring_enter(r3, 0x46f3, 0x1000003, 0x1, 0x0, 0x0)
write(r6, &(0x7f0000000200)='~', 0x1)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, 0x0, 0x0)
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r8, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
accept4$netrom(0xffffffffffffffff, 0x0, 0x0, 0x80000)
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b4c, &(0x7f00000000c0))

17.177935294s ago: executing program 7 (id=362):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000600)={[{@noblock_validity}, {@noblock_validity}, {@norecovery}, {@nodelalloc}, {@abort}], [{@dont_hash}]}, 0x1, 0x610, &(0x7f0000000a40)="$eJzs3c9rFGcfAPDvTH6avO+bKC+8rz3UQCkKrYmJWqQUau5F7I9/IDVRxGgkSaFRwQjtsfTSQ6GnHmr/i1borfTQaw+9F0FK8VCL1C2zOxs3m93Nz/3h7ucDa+aZmczznTXfPM88eWY2gJ41kf2TRhyNiJtJxFjFtv7IN06U9nv8x51L2SuJQuH935O4czdZrzxWkn8dzb/577FIfk4jjvRtrXdl7da1ucXFheW8PLV6/ebUytqtk1evz11ZuLJwY+aNmXNnz5w9N31qX+c3UGPdN189Taa//fVCEufjWR5bdl7V+w3tq+bsPZuIQsmTyvXZ+3pun8fuFH+OlX9OnkuqV9CxLud5m+XJ/2Is+ir+N8fi03fbGhzQVIUkym0U0HOSOvn/42yj3wzDTYsHaJVyP6B8bV/rOnirtMm9EqAVHs2WBqRKuT8QEeX87y+NDcZwcWxg5HGyaZwniYj9jcyVZHX89MOFT7JX1BmHA5pj/V55lLu6/U+KuTkew8XSyON0c/6vFwpp3hPI1r+3x/onqsryH1pn/V5E/D9v/wdjx/mf5rlbzv8P91i//AcAAAAAAICD82A2Il6vNf8v3Zj/M1hj/s9oRJw/gPq3//tf+jBfSKp2HTyA6qGnPZqNeKvm/N+NOb7jfXnp38X5ALeTy1cXF05FxH8i4kQMDGXl6arjVs4QPvnZkS/r1V85/y97ZfWX5wLmR3rYX3Uj7vzc6tx+zxuIeHQv4qXi/N9j+ZrN83+y9j+p0f5n+X1zh3UcefX+xXrbts9/oFkKX0ccr9n+P+9uJ42fzzFV7A9MlXsFW718+/Pv6tVfnf9NOEWgjqz9H2mc/0NJ5fN6VnZ3/Owi/fRaf6He9r32/weTD/qiYhDg47nV1eXpiMHkna3rZ3YXM3SrPB+ORZ4vWf6feKXx+N9G/78iDw9FxPoO6hveZrv+P7RPlv/zjdv/8c3t/+4XZu6Pf1+v/os7av/PFNv0E/ka439QaevzOHaaoG0JFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABecGlE/CuSdHJjOU0nJyNGI+K/MZIuLq2svnZ56aMb89m2iPEYSMuf9DtWKiflz/8fryjPVJVPR8ThiPii71CxPHlpaXG+3ScPAAAAAAAAAAAAAAAAAAAAHWK0eM9/Yaj6/v/Mb33tjg5ouv78q3yH3tO/5+8sDB1oIEDL7T3/gRdYds2/i/wfaGYsQBvUz/8nTwtFLQ0HaCH9f+hde8x/fy6ALqD9h161wzG94WbHAbSD9h8AAAAAALrK4WMPfkkiYv3NQ8VXZjDfZrI/dLe03QEAbWMOL/Su/qV2RwC0i2t8INlY+qvmzf71Z/8nzQkIAAAAAAAAAAAAANji+FH3/0Ovanz/v7n90M0a3P9fK/k9LgC6SP2P/tD2Q7dzjQ9s19q7/x8AAAAAAAAAAAAAOsDwrWtzi4sLyytrL97C250Rxu4W1uc6IoxdLBTuRjTe51lzah+IiE55E5ZXsmhaVVf5ERxtPOU2/14CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2/BMAAP//cdEbCg==")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
socket(0x22, 0x2, 0x1)
syz_io_uring_setup(0x6d0c, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000000c0), &(0x7f0000000140)=<r1=>0x0)
syz_io_uring_setup(0x1866, &(0x7f00000003c0), &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000100))
syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x68040200)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

15.297148068s ago: executing program 8 (id=363):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x45)
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0)
r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r3, 0x0, 0x0)
r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{}, {}], 0x2, 0x0, 0x0, 0x0, 0x0, 0x5c})
socket$xdp(0x2c, 0x3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x12f}, 0x14}}, 0x20000000)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000000640)={0x44, &(0x7f00000002c0)={0x0, 0xf}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x41}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000400)={0x20, 0x81, 0x1, "f9"}, 0x0, 0x0, 0x0, 0x0})

14.388795058s ago: executing program 6 (id=364):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = socket$inet6(0xa, 0x80002, 0x0)
r4 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
socket$nl_rdma(0x10, 0x3, 0x14)
pipe2$watch_queue(&(0x7f0000000040), 0x80)
r5 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r5, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

10.775814202s ago: executing program 35 (id=349):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = socket$inet6(0xa, 0x80002, 0x0)
r4 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
socket$nl_rdma(0x10, 0x3, 0x14)
pipe2$watch_queue(&(0x7f0000000040), 0x80)
r5 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r5, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

10.768039972s ago: executing program 6 (id=366):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x45)
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0)
r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r3, 0x0, 0x0)
r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{}, {}], 0x2, 0x0, 0x0, 0x0, 0x0, 0x5c})
socket$xdp(0x2c, 0x3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x12f}, 0x14}}, 0x20000000)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000000640)={0x44, &(0x7f00000002c0)={0x0, 0xf}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x41}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000400)={0x20, 0x81, 0x1, "f9"}, 0x0, 0x0, 0x0, 0x0})

10.598051452s ago: executing program 8 (id=367):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = socket$inet6(0xa, 0x80002, 0x0)
r4 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
socket$nl_rdma(0x10, 0x3, 0x14)
pipe2$watch_queue(&(0x7f0000000040), 0x80)
r5 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r5, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

9.868116083s ago: executing program 7 (id=368):
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x2)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200)
ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]})
r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000d40)={0x2, 0x3, 0x3, 0xfffffffc, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x0, 0x0, 0x0, 0xfd, 0x5, 0x1})
ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000340)={'\x00', 0x7, 0x9, 0x0, 0x9, 0x9, "00800000000000f51000", "00598b00", "0200", "01000800", ["dc001000", '\x00', "4a218302000000215c384d00", "790000a5a16706008c00edbf"]})
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
setreuid(0xffffffffffffffff, 0xee00)
keyctl$setperm(0x5, r5, 0x220c)

8.794582998s ago: executing program 8 (id=369):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x45)
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0)
r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r3, 0x0, 0x0)
r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{}, {}], 0x2, 0x0, 0x0, 0x0, 0x0, 0x5c})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x12f}, 0x14}}, 0x20000000)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000000640)={0x44, &(0x7f00000002c0)={0x0, 0xf}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x41}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000400)={0x20, 0x81, 0x1, "f9"}, 0x0, 0x0, 0x0, 0x0})

7.465933749s ago: executing program 36 (id=355):
syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@union]}, {0x0, [0x61, 0x5f, 0x2e, 0x61, 0x61, 0x30]}}, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0xffb)
ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00')
preadv(r6, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0)

7.14844614s ago: executing program 37 (id=354):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = syz_open_dev$vcsu(&(0x7f0000000a40), 0x10000, 0x202200)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40004)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
r3 = io_uring_setup(0x25f3, &(0x7f0000000340)={0x0, 0x5972, 0x2, 0x0, 0x257})
io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f0000000a40)="b1", 0x1)

7.12912814s ago: executing program 6 (id=372):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
kexec_load(0x2, 0x0, 0x0, 0x2)
mmap(&(0x7f00008c7000/0x3000)=nil, 0x3000, 0x0, 0x8031, 0xffffffffffffffff, 0x8000000)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x92c, &(0x7f0000000340)={0x0, 0x4, 0x0, 0x1}, &(0x7f0000000140), &(0x7f0000000100))
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
open(&(0x7f0000000340)='./file0\x00', 0x80fd, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=0x0, @ANYBLOB])
write$FUSE_INIT(r2, 0x0, 0x0)
syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r2, 0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
close_range(r4, 0xffffffffffffffff, 0x2)
fgetxattr(r4, 0x0, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000006800e97800000000dd34df250a0000000400000014000600"/43], 0x2c}}, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0x3, 0x0, 0x0, 0x5, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5]}}})
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000300)={0x2, @vbi={0xfffffffd, 0x6, 0x8, 0x3234564e, [0x800, 0x4], [0x527, 0x2]}})

7.119688885s ago: executing program 7 (id=373):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000380)=""/184, 0xb8}], 0x1}, 0x0, 0x21a3, 0x0, {0x3}})
io_uring_enter(0xffffffffffffffff, 0x46f3, 0x1000003, 0x1, 0x0, 0x0)
write(r3, &(0x7f0000000200)='~', 0x1)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, 0x0, 0x0)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
accept4$netrom(0xffffffffffffffff, 0x0, 0x0, 0x80000)
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b4c, &(0x7f00000000c0))

5.020854412s ago: executing program 7 (id=374):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000380)=""/184, 0xb8}], 0x1}, 0x0, 0x21a3, 0x0, {0x3}})
io_uring_enter(0xffffffffffffffff, 0x46f3, 0x1000003, 0x1, 0x0, 0x0)
write(r3, &(0x7f0000000200)='~', 0x1)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, 0x0, 0x0)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
accept4$netrom(0xffffffffffffffff, 0x0, 0x0, 0x80000)
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b4c, &(0x7f00000000c0))

4.776208174s ago: executing program 8 (id=375):
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x54)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r7, <r8=>0x0})
fcntl$getownex(r1, 0x10, &(0x7f0000000180))
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x1, [<r9=>0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]})
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x20000000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806})
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x14, r11, 0x28543634fae43ad, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, <r12=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r12})
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0)

4.681746736s ago: executing program 6 (id=376):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r3 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r7, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000380)=""/184, 0xb8}], 0x1}, 0x0, 0x21a3, 0x0, {0x3}})
io_uring_enter(r3, 0x46f3, 0x1000003, 0x1, 0x0, 0x0)
write(r6, &(0x7f0000000200)='~', 0x1)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, 0x0, 0x0)
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r8, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
accept4$netrom(0xffffffffffffffff, 0x0, 0x0, 0x80000)
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b4c, &(0x7f00000000c0))

3.537035307s ago: executing program 7 (id=377):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = socket$inet6(0xa, 0x80002, 0x0)
r4 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
socket$nl_rdma(0x10, 0x3, 0x14)
pipe2$watch_queue(&(0x7f0000000040), 0x80)
r5 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r5, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

0s ago: executing program 6 (id=378):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x45)
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0)
r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r3, 0x0, 0x0)
r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{}, {}], 0x2, 0x0, 0x0, 0x0, 0x0, 0x5c})
socket$xdp(0x2c, 0x3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x12f}, 0x14}}, 0x20000000)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000000640)={0x44, &(0x7f00000002c0)={0x0, 0xf}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x41}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000400)={0x20, 0x81, 0x1, "f9"}, 0x0, 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.130' (ED25519) to the list of known hosts.
[  101.494017][ T3382] cfg80211: failed to load regulatory.db
[  101.826065][ T5811] cgroup: Unknown subsys name 'net'
[  101.927737][ T5811] cgroup: Unknown subsys name 'cpuset'
[  101.937640][ T5811] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  103.680362][ T5811] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  106.729409][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  106.743984][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  106.752590][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  106.759929][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  106.761941][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  106.768465][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  106.783237][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  106.790671][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  106.792647][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  106.798374][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  106.812526][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  106.812932][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  106.820609][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  106.835585][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  106.842803][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  106.843551][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  106.854497][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  106.860969][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  106.866176][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  106.878283][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  106.886398][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  106.886473][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  106.894284][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  106.910173][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  106.926924][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  106.956970][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  106.957923][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  106.964826][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  106.975188][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  107.003081][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  107.950968][ T5828] chnl_net:caif_netlink_parms(): no params data found
[  108.027159][ T5827] chnl_net:caif_netlink_parms(): no params data found
[  108.220139][ T5826] chnl_net:caif_netlink_parms(): no params data found
[  108.249975][ T5824] chnl_net:caif_netlink_parms(): no params data found
[  108.326582][ T5829] chnl_net:caif_netlink_parms(): no params data found
[  108.386938][ T5825] chnl_net:caif_netlink_parms(): no params data found
[  108.566005][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.578258][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.585794][ T5828] bridge_slave_0: entered allmulticast mode
[  108.593812][ T5828] bridge_slave_0: entered promiscuous mode
[  108.629117][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.636431][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.644702][ T5827] bridge_slave_0: entered allmulticast mode
[  108.652473][ T5827] bridge_slave_0: entered promiscuous mode
[  108.693352][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.700507][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.708194][ T5828] bridge_slave_1: entered allmulticast mode
[  108.716266][ T5828] bridge_slave_1: entered promiscuous mode
[  108.748712][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.758764][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.766426][ T5827] bridge_slave_1: entered allmulticast mode
[  108.775301][ T5827] bridge_slave_1: entered promiscuous mode
[  108.834439][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.841627][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.849240][ T5826] bridge_slave_0: entered allmulticast mode
[  108.857655][ T5826] bridge_slave_0: entered promiscuous mode
[  108.913459][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.920694][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.928939][ T5824] bridge_slave_0: entered allmulticast mode
[  108.935924][ T5135] Bluetooth: hci1: command tx timeout
[  108.941650][   T55] Bluetooth: hci3: command tx timeout
[  108.943497][ T5824] bridge_slave_0: entered promiscuous mode
[  108.990492][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.001997][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.009176][ T5826] bridge_slave_1: entered allmulticast mode
[  109.015434][   T55] Bluetooth: hci5: command tx timeout
[  109.021267][ T5135] Bluetooth: hci4: command tx timeout
[  109.024531][ T5826] bridge_slave_1: entered promiscuous mode
[  109.087077][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.094327][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.101497][ T5824] bridge_slave_1: entered allmulticast mode
[  109.102791][   T55] Bluetooth: hci0: command tx timeout
[  109.113150][ T5135] Bluetooth: hci2: command tx timeout
[  109.116160][ T5824] bridge_slave_1: entered promiscuous mode
[  109.139442][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.153399][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.194986][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.202432][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.209797][ T5825] bridge_slave_0: entered allmulticast mode
[  109.218023][ T5825] bridge_slave_0: entered promiscuous mode
[  109.229084][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.313807][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.327565][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.337724][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.344986][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.352472][ T5825] bridge_slave_1: entered allmulticast mode
[  109.360143][ T5825] bridge_slave_1: entered promiscuous mode
[  109.370095][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.383393][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.430940][ T5827] team0: Port device team_slave_0 added
[  109.491280][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.500801][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.508497][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.515796][ T5829] bridge_slave_0: entered allmulticast mode
[  109.524603][ T5829] bridge_slave_0: entered promiscuous mode
[  109.535241][ T5827] team0: Port device team_slave_1 added
[  109.541315][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.548739][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.556230][ T5829] bridge_slave_1: entered allmulticast mode
[  109.564100][ T5829] bridge_slave_1: entered promiscuous mode
[  109.610848][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.709949][ T5826] team0: Port device team_slave_0 added
[  109.724809][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.738235][ T5828] team0: Port device team_slave_0 added
[  109.750482][ T5824] team0: Port device team_slave_0 added
[  109.792814][ T5826] team0: Port device team_slave_1 added
[  109.837009][ T5828] team0: Port device team_slave_1 added
[  109.845673][ T5824] team0: Port device team_slave_1 added
[  109.870967][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[  109.882279][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.909020][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  109.924858][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.957966][ T5825] team0: Port device team_slave_0 added
[  110.019548][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[  110.026948][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.052940][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  110.075326][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  110.123356][ T5825] team0: Port device team_slave_1 added
[  110.148862][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[  110.156223][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.182500][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  110.196524][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[  110.204207][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.230710][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  110.261787][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[  110.268817][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.295505][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  110.324744][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0
[  110.331762][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.358669][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  110.375928][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1
[  110.383763][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.410028][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  110.466800][ T5829] team0: Port device team_slave_0 added
[  110.474479][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[  110.481439][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.507536][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  110.566153][ T5827] hsr_slave_0: entered promiscuous mode
[  110.573119][ T5827] hsr_slave_1: entered promiscuous mode
[  110.583399][ T5829] team0: Port device team_slave_1 added
[  110.591078][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[  110.598520][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.624535][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  110.637789][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[  110.644873][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.671270][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  110.844236][ T5828] hsr_slave_0: entered promiscuous mode
[  110.851084][ T5828] hsr_slave_1: entered promiscuous mode
[  110.857913][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  110.866056][ T5828] Cannot create hsr debugfs directory
[  110.872582][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[  110.879537][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.905826][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  111.013621][ T5825] hsr_slave_0: entered promiscuous mode
[  111.020280][ T5825] hsr_slave_1: entered promiscuous mode
[  111.021941][   T55] Bluetooth: hci3: command tx timeout
[  111.027730][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  111.031211][   T55] Bluetooth: hci1: command tx timeout
[  111.039145][ T5825] Cannot create hsr debugfs directory
[  111.073777][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[  111.080743][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.093050][ T5135] Bluetooth: hci5: command tx timeout
[  111.107452][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  111.119335][   T55] Bluetooth: hci4: command tx timeout
[  111.138787][ T5826] hsr_slave_0: entered promiscuous mode
[  111.145570][ T5826] hsr_slave_1: entered promiscuous mode
[  111.151922][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  111.159764][ T5826] Cannot create hsr debugfs directory
[  111.174968][ T5824] hsr_slave_0: entered promiscuous mode
[  111.181448][ T5824] hsr_slave_1: entered promiscuous mode
[  111.187613][   T55] Bluetooth: hci0: command tx timeout
[  111.193316][ T5135] Bluetooth: hci2: command tx timeout
[  111.194281][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  111.206763][ T5824] Cannot create hsr debugfs directory
[  111.490176][ T5829] hsr_slave_0: entered promiscuous mode
[  111.499567][ T5829] hsr_slave_1: entered promiscuous mode
[  111.506683][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  111.514665][ T5829] Cannot create hsr debugfs directory
[  112.160637][ T5828] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  112.184884][ T5828] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  112.199858][ T5828] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  112.223343][ T5828] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  112.275037][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  112.301686][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  112.320847][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  112.334203][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  112.418125][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  112.445720][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  112.484051][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  112.516803][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  112.609995][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  112.659955][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  112.689322][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  112.737943][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  112.819580][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  112.840868][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.874298][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.881383][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  112.893722][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  112.906150][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  113.010917][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[  113.083542][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.090871][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.100492][   T55] Bluetooth: hci1: command tx timeout
[  113.106157][   T55] Bluetooth: hci3: command tx timeout
[  113.139927][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  113.161624][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.168920][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.186286][   T55] Bluetooth: hci4: command tx timeout
[  113.186471][ T5135] Bluetooth: hci5: command tx timeout
[  113.209424][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  113.226381][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[  113.247140][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  113.254263][ T5135] Bluetooth: hci0: command tx timeout
[  113.254315][ T5135] Bluetooth: hci2: command tx timeout
[  113.271816][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  113.311222][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.318413][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.370039][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.377227][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.469581][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.619174][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[  113.640945][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.720811][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.728066][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.744359][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.773450][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.780699][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.896796][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[  113.926400][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[  113.961652][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.990248][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.997504][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.034933][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.042185][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.077137][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.084395][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.110054][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.117273][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.185398][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[  114.297808][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.305393][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.361658][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[  114.410222][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.417438][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.497410][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[  114.978238][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.182256][   T55] Bluetooth: hci3: command tx timeout
[  115.187764][   T55] Bluetooth: hci1: command tx timeout
[  115.252535][ T5135] Bluetooth: hci5: command tx timeout
[  115.262151][ T5135] Bluetooth: hci4: command tx timeout
[  115.329948][ T5825] veth0_vlan: entered promiscuous mode
[  115.332526][ T5135] Bluetooth: hci2: command tx timeout
[  115.341031][ T5135] Bluetooth: hci0: command tx timeout
[  115.464736][ T5825] veth1_vlan: entered promiscuous mode
[  115.549774][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.682627][ T5825] veth0_macvtap: entered promiscuous mode
[  115.711317][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.735198][ T5825] veth1_macvtap: entered promiscuous mode
[  115.799140][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.824362][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[  115.870903][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.931640][ T5825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.942443][ T5825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.951629][ T5825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.962485][ T5825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.988014][ T5824] veth0_vlan: entered promiscuous mode
[  116.059131][ T5824] veth1_vlan: entered promiscuous mode
[  116.070815][ T5827] veth0_vlan: entered promiscuous mode
[  116.106181][ T5828] veth0_vlan: entered promiscuous mode
[  116.121542][ T5826] veth0_vlan: entered promiscuous mode
[  116.154603][ T5828] veth1_vlan: entered promiscuous mode
[  116.172402][ T5827] veth1_vlan: entered promiscuous mode
[  116.202651][ T5826] veth1_vlan: entered promiscuous mode
[  116.220477][ T5829] veth0_vlan: entered promiscuous mode
[  116.305729][ T5829] veth1_vlan: entered promiscuous mode
[  116.332605][ T5912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.341664][ T5912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.377650][ T5824] veth0_macvtap: entered promiscuous mode
[  116.415220][ T5824] veth1_macvtap: entered promiscuous mode
[  116.488921][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.499073][ T5828] veth0_macvtap: entered promiscuous mode
[  116.502178][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.510779][ T5829] veth0_macvtap: entered promiscuous mode
[  116.527461][ T5826] veth0_macvtap: entered promiscuous mode
[  116.555829][ T5827] veth0_macvtap: entered promiscuous mode
[  116.571398][ T5829] veth1_macvtap: entered promiscuous mode
[  116.605312][ T5826] veth1_macvtap: entered promiscuous mode
[  116.611199][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  116.639642][ T5828] veth1_macvtap: entered promiscuous mode
[  116.660481][ T5827] veth1_macvtap: entered promiscuous mode
[  116.689780][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.715833][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.761301][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.810872][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.827942][ T5824] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.837982][ T5824] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.847572][ T5824] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.856936][ T5824] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.880759][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.906820][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.921241][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.937280][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.993976][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.019058][ T5827] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.039604][ T5827] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.050027][ T5827] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.065408][ T5827] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.084305][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.123562][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.132870][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.141614][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.151482][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.166046][ T5828] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.177071][ T5828] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.186579][ T5828] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.195363][ T5828] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.677950][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.700316][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.720901][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.741676][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.119879][ T1080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.129669][ T1080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.560670][ T5941] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  119.099685][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.108804][ T1080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.140127][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.145327][ T1080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.230987][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.249564][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.336120][ T5912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.356348][ T5912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.807026][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.843231][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.843116][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.850996][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.934702][ T5951] loop1: detected capacity change from 0 to 512
[  120.943076][ T5951] EXT4-fs: Ignoring removed orlov option
[  121.234931][ T5951] Quota error (device loop1): v2_read_file_info: Can't read info structure
[  121.244004][ T5951] EXT4-fs warning (device loop1): ext4_enable_quotas:7166: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix.
[  121.259667][ T5951] EXT4-fs (loop1): mount failed
[  121.780168][ T5957] loop4: detected capacity change from 0 to 512
[  121.832035][ T5957] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  123.216877][ T5963] Process accounting resumed
[  123.291183][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.771969][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.838146][ T5957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.902239][ T5957] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.007162][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.019805][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.344802][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  124.396961][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  126.451170][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.522770][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.530975][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.800427][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  128.901972][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  129.502586][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  129.511230][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  129.540977][ T5999] loop4: detected capacity change from 0 to 512
[  130.552675][ T5999] EXT4-fs: Ignoring removed bh option
[  130.960708][ T5999] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  131.363173][ T5999] EXT4-fs (loop4): 1 truncate cleaned up
[  131.878041][    T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!!
[  131.886973][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  131.984856][ T5999] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.212576][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  132.283554][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  134.385197][ T6023] EXT4-fs error (device loop4): ext4_lookup:1789: inode #14: comm syz.4.16: invalid fast symlink length 39
[  134.726290][ T6015] loop5: detected capacity change from 0 to 1024
[  134.773738][   T30] audit: type=1800 audit(1747625545.097:2): pid=6030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.16" name="bus" dev="loop4" ino=15 res=0 errno=0
[  135.295387][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.980833][ T6089] fuse: Unknown parameter 'group_i'
[  142.675281][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  142.683597][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  145.858890][ T6106] loop3: detected capacity change from 0 to 512
[  145.875837][ T6109] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  146.359929][ T6106] EXT4-fs: Ignoring removed bh option
[  146.425865][ T6106] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  146.513829][ T6106] EXT4-fs (loop3): 1 truncate cleaned up
[  146.552530][ T6106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.267300][   T30] audit: type=1326 audit(1747625557.587:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6119 comm="syz.5.41" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f126d78e969 code=0x0
[  147.289454][ T6124] EXT4-fs error (device loop3): ext4_lookup:1789: inode #14: comm syz.3.37: invalid fast symlink length 39
[  147.656579][   T30] audit: type=1800 audit(1747625557.737:4): pid=6125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.37" name="bus" dev="loop3" ino=15 res=0 errno=0
[  148.969745][ T5824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.230501][ T6207] loop5: detected capacity change from 0 to 164
[  159.240548][ T6209] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  160.752237][ T6221] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20000
[  161.357235][ T6217] syz.3.60 uses obsolete (PF_INET,SOCK_PACKET)
[  161.725808][ T5888] IPVS: starting estimator thread 0...
[  161.827969][ T6224] IPVS: using max 19 ests per chain, 45600 per kthread
[  167.195804][ T6259] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5
[  172.682075][ T6276] loop4: detected capacity change from 0 to 256
[  172.689373][ T6276] =======================================================
[  172.689373][ T6276] WARNING: The mand mount option has been deprecated and
[  172.689373][ T6276]          and is ignored by this kernel. Remove the mand
[  172.689373][ T6276]          option from the mount to silence this warning.
[  172.689373][ T6276] =======================================================
[  172.724520][ T6276] exfat: Unknown parameter ''
[  173.101214][   T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  173.112373][   T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  173.120696][   T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  173.384097][ T5837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  173.402050][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  174.685096][ T6288] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  174.740511][ T6288] input: syz1 as /devices/virtual/input/input6
[  175.614598][ T5837] Bluetooth: hci6: command tx timeout
[  177.260274][ T6300] Zero length message leads to an empty skb
[  177.653384][ T5837] Bluetooth: hci6: command tx timeout
[  179.731972][ T5837] Bluetooth: hci6: command tx timeout
[  180.152846][ T6325] process 'syz.3.86' launched '/dev/fd/8' with NULL argv: empty string added
[  181.875935][ T5837] Bluetooth: hci6: command tx timeout
[  182.160740][ T6331] loop2: detected capacity change from 0 to 16
[  182.207933][ T6331] erofs (device loop2): mounted with root inode @ nid 36.
[  182.257390][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.534925][   T30] audit: type=1800 audit(1747625593.877:5): pid=6335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.90" name="file3" dev="loop2" ino=89 res=0 errno=0
[  183.898353][ T5837] erofs (device loop2): failed to decompress 6887 in[4096, 0] out[9000]
[  184.287341][ T6346] loop5: detected capacity change from 0 to 8
[  184.299095][ T6346] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  185.551659][ T6351] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  188.325767][ T6052] udevd[6052]: incorrect cramfs checksum on /dev/loop5
[  188.355783][ T6052] udevd[6052]: incorrect cramfs checksum on /dev/loop5
[  188.442327][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.812322][ T6359] cramfs: Error -3 while decompressing!
[  188.818085][ T6359] cramfs: ffffffff9ac05b88(26)->ffff88804fb95000(4096)
[  188.825147][ T6359] cramfs: bad data blocksize 3489655184
[  188.830863][ T6359] cramfs: Error -3 while decompressing!
[  188.836453][ T6359] cramfs: ffffffff9ac05b88(26)->ffff88804fb95000(4096)
[  189.666465][ T6368] mmap: syz.2.94 (6368) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  190.654609][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.533948][ T6391] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  193.663869][ T6393] overlayfs: failed to resolve './file1': -2
[  194.174481][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.126459][   T13] bridge_slave_1: left allmulticast mode
[  199.145008][   T13] bridge_slave_1: left promiscuous mode
[  199.166513][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.617535][   T13] bridge_slave_0: left allmulticast mode
[  199.917582][   T13] bridge_slave_0: left promiscuous mode
[  200.645012][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.821546][ T6459] loop1: detected capacity change from 0 to 1024
[  200.933241][ T6459] EXT4-fs: Ignoring removed nobh option
[  200.938876][ T6459] EXT4-fs: Ignoring removed nomblk_io_submit option
[  201.029703][ T6461] overlayfs: failed to resolve './file1': -2
[  202.749690][ T6459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.234507][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  204.241005][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  204.551461][ T6501] capability: warning: `syz.1.116' uses deprecated v2 capabilities in a way that may be insecure
[  207.781260][ T6526] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  210.027801][ T6534] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input7
[  210.122104][ T6535] PM: Enabling pm_trace changes system date and time during resume.
[  210.122104][ T6535] PM: Correct system time has to be restored manually after resume.
[  210.621524][ T6541] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  210.732344][ T5837] Bluetooth: hci5: unexpected event 0x01 length: 4 > 1
[  213.671282][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.861341][ T6555] overlayfs: failed to resolve './file1': -2
[  214.116679][ T6563] loop5: detected capacity change from 0 to 512
[  214.199386][ T6563] EXT4-fs (loop5): corrupt root inode, run e2fsck
[  214.256819][ T6563] EXT4-fs (loop5): mount failed
[  217.227468][ T6584] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  218.977923][ T6595] fuse: Unknown parameter 'gro‡p_id'
[  220.744211][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  221.516770][ T6610] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  221.528986][ T6610] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  223.104892][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  223.209662][   T13] bond0 (unregistering): Released all slaves
[  223.511954][ T6277] chnl_net:caif_netlink_parms(): no params data found
[  223.767263][ T6633] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  223.894151][ T6632] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input8
[  229.288516][ T6651] Bluetooth: MGMT ver 1.23
[  229.599817][ T6658] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  230.792122][    T9] IPVS: starting estimator thread 0...
[  230.942354][ T6663] IPVS: using max 21 ests per chain, 50400 per kthread
[  231.611923][ T5840] Bluetooth: hci3: command 0x0406 tx timeout
[  231.618005][ T5840] Bluetooth: hci4: command 0x0406 tx timeout
[  231.624490][ T5840] Bluetooth: hci0: command 0x0406 tx timeout
[  231.630513][ T5840] Bluetooth: hci2: command 0x0406 tx timeout
[  231.979652][ T6675] sd 0:0:1:0: device reset
[  233.341406][ T6683] ptrace attach of "./syz-executor exec"[5825] was attempted by "./syz-executor exec"[6683]
[  234.035014][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  234.046927][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  234.054837][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  234.063328][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  234.073807][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  236.133661][ T5135] Bluetooth: hci1: command tx timeout
[  237.389299][ T5135] Bluetooth: hci0: command 0x0406 tx timeout
[  237.858319][ T6708] Invalid ELF header magic: != ELF
[  238.211907][ T5135] Bluetooth: hci1: command tx timeout
[  238.782025][ T6716] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9
[  239.349214][ T6721] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  240.291964][ T5135] Bluetooth: hci1: command tx timeout
[  240.422018][   T13] hsr_slave_0: left promiscuous mode
[  240.652003][   T13] hsr_slave_1: left promiscuous mode
[  240.695616][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  240.950339][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  242.105404][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  242.136318][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  242.397598][ T5135] Bluetooth: hci1: command tx timeout
[  244.494721][ T6749] loop4: detected capacity change from 0 to 32768
[  245.441490][   T13] veth1_macvtap: left promiscuous mode
[  245.514816][   T13] veth0_macvtap: left promiscuous mode
[  245.538309][   T13] veth1_vlan: left promiscuous mode
[  245.549442][   T13] veth0_vlan: left promiscuous mode
[  245.664594][ T6749] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[  245.701195][ T6749] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,str_hash=crc64,norecovery,nojournal_transaction_names,reconstruct_alloc
[  245.701195][ T6749]   allowing incompatible features above 0.0: (unknown version)
[  245.728005][ T6749] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  245.736662][ T6749] bcachefs (loop4): Version upgrade required:
[  245.736662][ T6749] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  245.736662][ T6749] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags
[  245.736662][ T6749]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  245.808423][ T6749] bcachefs (loop4): dropping and reconstructing all alloc info
[  245.993797][ T6749] bcachefs (loop4): accounting_read... done
[  246.018702][ T6749] bcachefs (loop4): alloc_read... done
[  246.024343][ T6749] bcachefs (loop4): snapshots_read... done
[  246.031320][ T6749] bcachefs (loop4): done starting filesystem
[  248.684471][ T6770] tty tty27: ldisc open failed (-12), clearing slot 26
[  249.387747][ T5827] bcachefs (loop4): shutting down
[  250.336300][ T5827] bcachefs (loop4): shutdown complete
[  250.444423][ T6788] fuse: Unknown parameter 'group_i'
[  255.701083][ T6811] usb usb8: usbfs: process 6811 (syz.1.187) did not claim interface 0 before use
[  261.465694][   T13] team0 (unregistering): Port device team_slave_1 removed
[  261.677663][   T13] team0 (unregistering): Port device team_slave_0 removed
[  261.797922][ T6843] fuse: Unknown parameter 'group_i'
[  266.332449][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  266.338819][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  272.725745][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  272.992649][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  273.015489][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  273.032456][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  273.046392][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  273.894878][ T6045] IPVS: starting estimator thread 0...
[  274.601917][ T6884] IPVS: using max 22 ests per chain, 52800 per kthread
[  276.021883][ T5840] Bluetooth: hci6: command tx timeout
[  276.522014][ T6895] loop2: detected capacity change from 0 to 2048
[  278.501866][ T5840] Bluetooth: hci6: command tx timeout
[  279.959492][ T6914] loop5: detected capacity change from 0 to 1024
[  279.992876][ T6914] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  280.531919][ T5840] Bluetooth: hci6: command tx timeout
[  282.782568][ T5840] Bluetooth: hci6: command tx timeout
[  289.842324][ T3382] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  290.125599][ T3382] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  290.167969][ T3382] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  290.237840][ T3382] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  290.444837][ T3382] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  290.740800][ T3382] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  290.867253][ T3382] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  290.896537][ T3382] usb 4-1: Manufacturer: syz
[  290.967512][ T3382] usb 4-1: config 0 descriptor??
[  292.282255][ T6975] loop3: detected capacity change from 0 to 512
[  292.302379][ T3382] rc_core: IR keymap rc-hauppauge not found
[  292.308602][ T3382] Registered IR keymap rc-empty
[  292.402407][ T6975] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  292.448332][ T5135] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  292.462429][ T3382] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  292.491903][ T5135] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  292.510428][ T5135] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  292.517749][ T6975] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  292.533352][ T3382] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  292.552152][ T5135] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  292.569534][ T5135] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  292.585192][ T6975] System zones: 0-1, 15-15, 18-18, 34-34
[  292.591429][ T6975] EXT4-fs (loop3): orphan cleanup on readonly fs
[  292.633289][ T6975] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0
[  292.659076][ T3382] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  292.715851][ T6975] EXT4-fs warning (device loop3): ext4_enable_quotas:7166: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  292.726076][ T3382] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input10
[  292.799641][ T3382] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  292.818027][ T6975] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  292.831988][ T3382] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  292.874492][ T3382] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  292.939202][ T6975] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.227: bad orphan inode 16
[  292.975165][ T6975] ext4_test_bit(bit=15, block=18) = 1
[  292.982223][ T3382] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  293.001888][ T6975] is_bad_inode(inode)=0
[  293.006122][ T6975] NEXT_ORPHAN(inode)=0
[  293.010230][ T6975] max_ino=32
[  293.012212][ T3382] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  293.051658][ T6975] i_nlink=2
[  293.126661][   T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.132216][ T3382] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  293.167202][ T6975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  293.211951][ T3382] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  293.237640][ T6876] chnl_net:caif_netlink_parms(): no params data found
[  293.244853][ T3382] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  293.282036][ T3382] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  293.332052][ T3382] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  293.381706][ T3382] mceusb 4-1:0.0: Registered  with mce emulator interface version 1
[  293.406464][   T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.427490][ T3382] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  294.115931][ T3382] usb 4-1: USB disconnect, device number 2
[  294.426798][ T7006] loop5: detected capacity change from 0 to 256
[  294.645097][   T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.816138][ T5135] Bluetooth: hci3: command tx timeout
[  295.793276][ T7006] FAT-fs (loop5): Directory bread(block 64) failed
[  296.634215][ T7006] FAT-fs (loop5): Directory bread(block 65) failed
[  296.640979][ T7006] FAT-fs (loop5): Directory bread(block 66) failed
[  296.709974][ T7016] sd 0:0:1:0: device reset
[  296.852142][ T5840] Bluetooth: hci3: command tx timeout
[  296.897686][ T7006] FAT-fs (loop5): Directory bread(block 67) failed
[  297.018502][ T7006] FAT-fs (loop5): Directory bread(block 68) failed
[  297.083264][ T7006] FAT-fs (loop5): Directory bread(block 69) failed
[  297.090238][ T7006] FAT-fs (loop5): Directory bread(block 70) failed
[  297.143507][ T7006] FAT-fs (loop5): Directory bread(block 71) failed
[  297.153521][ T7006] FAT-fs (loop5): Directory bread(block 72) failed
[  297.160312][ T7006] FAT-fs (loop5): Directory bread(block 73) failed
[  297.236472][ T5824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.626393][ T7030] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  297.729956][ T7031] Invalid ELF header magic: != ELF
[  297.779861][ T7032] evm: overlay not supported
[  298.136288][ T5840] Bluetooth: hci5: command 0x0406 tx timeout
[  298.932017][ T5837] Bluetooth: hci3: command tx timeout
[  299.005170][   T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.466938][ T7039] loop1: detected capacity change from 0 to 8
[  299.493142][ T7039] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  300.578377][ T5889] udevd[5889]: incorrect cramfs checksum on /dev/loop1
[  300.847197][ T6876] bridge0: port 1(bridge_slave_0) entered blocking state
[  301.553871][ T6876] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.855258][ T5135] Bluetooth: hci3: command tx timeout
[  301.909387][ T7050] cramfs: Error -3 while decompressing!
[  301.917454][ T7050] cramfs: ffffffff9ac05b88(26)->ffff88804b790000(4096)
[  301.925106][ T7050] cramfs: bad data blocksize 3489655184
[  301.938602][ T7050] cramfs: Error -3 while decompressing!
[  301.944811][ T7050] cramfs: ffffffff9ac05b88(26)->ffff88804b790000(4096)
[  301.989278][ T6876] bridge_slave_0: entered allmulticast mode
[  302.015573][ T5889] udevd[5889]: incorrect cramfs checksum on /dev/loop1
[  302.451397][ T6876] bridge_slave_0: entered promiscuous mode
[  302.848062][ T6876] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.890449][ T6876] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.907393][ T6876] bridge_slave_1: entered allmulticast mode
[  303.627182][ T6876] bridge_slave_1: entered promiscuous mode
[  304.212633][ T7066] cgroup: fork rejected by pids controller in /syz1
[  304.966824][ T6876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  305.139729][ T6876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  305.553084][ T7213] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  305.679537][ T7217] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  306.049156][ T6876] team0: Port device team_slave_0 added
[  306.539699][ T7222] loop5: detected capacity change from 0 to 4096
[  306.596143][ T7227] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  306.936075][ T6876] team0: Port device team_slave_1 added
[  307.030647][ T7230] xt_CT: You must specify a L4 protocol and not use inversions on it
[  307.060656][ T7230] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  307.878850][ T7231] loop1: detected capacity change from 0 to 128
[  307.889092][ T7231] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  308.178827][ T7231] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  309.506849][ T6876] batman_adv: batadv0: Adding interface: batadv_slave_0
[  309.644003][ T6876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  309.764549][ T7241] loop3: detected capacity change from 0 to 512
[  309.800591][ T7241] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  309.814836][ T6876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  310.128846][ T7241] EXT4-fs (loop3): 1 truncate cleaned up
[  310.144940][ T7241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  311.132270][ T5824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.304394][ T6876] batman_adv: batadv0: Adding interface: batadv_slave_1
[  311.314301][ T6876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.342612][ T6876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  314.463997][   T36] bridge_slave_1: left allmulticast mode
[  314.469848][   T36] bridge_slave_1: left promiscuous mode
[  314.512611][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.600017][   T36] bridge_slave_0: left allmulticast mode
[  314.692640][ T7281] fuse: Unknown parameter '0x000000000000000900000000000000000000'
[  314.735954][ T7281] vim2m vim2m.0: vidioc_s_fmt queue busy
[  314.778436][   T36] bridge_slave_0: left promiscuous mode
[  314.849169][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.851398][ T7285] loop1: detected capacity change from 0 to 32768
[  317.073747][ T7285] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[  317.110891][ T7285] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io
[  317.110891][ T7285]   allowing incompatible features above 0.0: (unknown version)
[  317.142793][ T7285] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  317.151246][ T7285] bcachefs (loop1): Version upgrade required:
[  317.151246][ T7285] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  317.151246][ T7285] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags
[  317.151246][ T7285]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  317.223565][ T7285] bcachefs (loop1): dropping and reconstructing all alloc info
[  317.425457][ T7285] bcachefs (loop1): accounting_read... done
[  318.019278][ T7285] bcachefs (loop1): alloc_read... done
[  318.025073][ T7285] bcachefs (loop1): snapshots_read... done
[  318.034271][ T7285] bcachefs (loop1): done starting filesystem
[  318.598682][ T5825] bcachefs (loop1): shutting down
[  319.453490][ T5825] bcachefs (loop1): shutdown complete
[  325.356935][ T7338] sd 0:0:1:0: device reset
[  326.802602][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  326.809100][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  329.764955][ T7359] loop5: detected capacity change from 0 to 128
[  330.266033][ T7359] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  330.358356][ T7358] UDF-fs: error (device loop5): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  330.466104][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  330.481963][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  330.491505][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  330.514645][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  330.524074][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  332.228623][ T7374] netlink: 8 bytes leftover after parsing attributes in process `syz.5.277'.
[  332.612234][ T5840] Bluetooth: hci1: command tx timeout
[  333.944652][ T7383] CUSE: unknown device info "ÿ
"
[  333.949847][ T7383] CUSE: zero length info key specified
[  334.696922][ T5840] Bluetooth: hci1: command tx timeout
[  336.002850][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  336.982626][ T5840] Bluetooth: hci1: command tx timeout
[  337.057760][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  337.222956][   T36] bond0 (unregistering): Released all slaves
[  337.305341][ T7405] NILFS (nullb0): couldn't find nilfs on the device
[  338.340018][   T36] bond0 (unregistering): Released all slaves
[  338.676690][ T7410] loop3: detected capacity change from 0 to 128
[  338.684545][ T7410] Invalid source name
[  338.688591][ T7410] UBIFS error (pid: 7410): cannot open "/dev/loop3", error -22
[  339.012182][ T5840] Bluetooth: hci1: command tx timeout
[  339.590184][ T5135] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  339.600075][ T5135] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  339.609096][ T6980] chnl_net:caif_netlink_parms(): no params data found
[  339.617463][ T5135] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  339.629251][ T5135] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  339.637387][ T5135] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  340.219124][ T7424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.290'.
[  341.732050][ T5135] Bluetooth: hci7: command tx timeout
[  342.027498][ T7433] loop2: detected capacity change from 0 to 8
[  342.079101][ T7433] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  342.121085][ T5889] udevd[5889]: incorrect cramfs checksum on /dev/loop2
[  344.075612][ T5135] Bluetooth: hci7: command tx timeout
[  344.124283][ T5889] udevd[5889]: incorrect cramfs checksum on /dev/loop2
[  344.483414][ T7444] cramfs: Error -3 while decompressing!
[  344.489056][ T7444] cramfs: ffffffff9ac05b88(26)->ffff888050e1f000(4096)
[  344.496112][ T7444] cramfs: bad data blocksize 3489655184
[  344.501745][ T7444] cramfs: Error -3 while decompressing!
[  344.507409][ T7444] cramfs: ffffffff9ac05b88(26)->ffff888050e1f000(4096)
[  346.249181][ T5840] Bluetooth: hci7: command tx timeout
[  346.538278][ T6980] bridge0: port 1(bridge_slave_0) entered blocking state
[  346.613980][ T6980] bridge0: port 1(bridge_slave_0) entered disabled state
[  346.731103][ T6980] bridge_slave_0: entered allmulticast mode
[  347.142596][ T6980] bridge_slave_0: entered promiscuous mode
[  347.695490][ T7450] Invalid ELF header magic: != ELF
[  348.341894][ T5840] Bluetooth: hci7: command tx timeout
[  349.087786][   T36] hsr_slave_0: left promiscuous mode
[  349.104011][   T36] hsr_slave_1: left promiscuous mode
[  349.110606][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  349.139084][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  349.181685][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  349.199746][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  350.551183][   T36] veth1_macvtap: left promiscuous mode
[  350.574305][   T36] veth0_macvtap: left promiscuous mode
[  350.592789][   T36] veth1_vlan: left promiscuous mode
[  350.615669][   T36] veth0_vlan: left promiscuous mode
[  351.148124][ T5135] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  351.160970][ T5135] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  351.171119][ T5135] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  351.182727][ T5135] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  351.193767][ T5135] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  353.215340][ T7487] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  353.332113][ T5840] Bluetooth: hci2: command tx timeout
[  354.023272][   T36] team0 (unregistering): Port device team_slave_1 removed
[  355.439188][ T5840] Bluetooth: hci2: command tx timeout
[  355.645671][   T36] team0 (unregistering): Port device team_slave_0 removed
[  357.951494][ T5840] Bluetooth: hci2: command tx timeout
[  358.523228][ T7517] ptrace attach of "./syz-executor exec"[5824] was attempted by ""[7517]
[  359.637969][ T6980] bridge0: port 2(bridge_slave_1) entered blocking state
[  359.645658][ T6980] bridge0: port 2(bridge_slave_1) entered disabled state
[  359.655522][ T6980] bridge_slave_1: entered allmulticast mode
[  359.663977][ T6980] bridge_slave_1: entered promiscuous mode
[  359.971963][ T5840] Bluetooth: hci2: command tx timeout
[  360.578440][ T7362] chnl_net:caif_netlink_parms(): no params data found
[  360.702240][   T36] IPVS: stop unused estimator thread 0...
[  360.775344][ T7418] chnl_net:caif_netlink_parms(): no params data found
[  361.151556][ T7362] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.159202][ T7362] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.167084][ T7362] bridge_slave_0: entered allmulticast mode
[  361.181388][ T7362] bridge_slave_0: entered promiscuous mode
[  361.279419][ T7362] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.286875][ T7362] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.297858][ T7362] bridge_slave_1: entered allmulticast mode
[  361.306508][ T7362] bridge_slave_1: entered promiscuous mode
[  361.477924][ T7362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  361.495047][ T7418] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.504224][ T7418] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.511627][ T7418] bridge_slave_0: entered allmulticast mode
[  361.520696][ T7418] bridge_slave_0: entered promiscuous mode
[  361.558482][ T7362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  361.596141][ T7418] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.603941][ T7418] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.611168][ T7418] bridge_slave_1: entered allmulticast mode
[  361.620193][ T7418] bridge_slave_1: entered promiscuous mode
[  361.639704][ T7479] chnl_net:caif_netlink_parms(): no params data found
[  361.701290][   T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.797988][ T7362] team0: Port device team_slave_0 added
[  361.884682][   T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.916871][ T7418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  361.968187][ T7362] team0: Port device team_slave_1 added
[  362.003448][ T7418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  362.143279][   T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.199352][ T7362] batman_adv: batadv0: Adding interface: batadv_slave_0
[  362.206620][ T7362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  362.234457][ T7362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  362.248531][ T7362] batman_adv: batadv0: Adding interface: batadv_slave_1
[  362.256989][ T7362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  362.285808][ T7362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  362.309283][ T7418] team0: Port device team_slave_0 added
[  362.318452][ T7418] team0: Port device team_slave_1 added
[  362.350599][   T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.549646][ T7479] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.572065][ T7479] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.592037][ T7479] bridge_slave_0: entered allmulticast mode
[  362.600662][ T7479] bridge_slave_0: entered promiscuous mode
[  362.644675][ T7418] batman_adv: batadv0: Adding interface: batadv_slave_0
[  362.651717][ T7418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  362.706536][ T7418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  362.728030][ T7418] batman_adv: batadv0: Adding interface: batadv_slave_1
[  362.741818][ T7418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  362.777759][ T7418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  362.792306][ T7479] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.799586][ T7479] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.816088][ T7479] bridge_slave_1: entered allmulticast mode
[  362.825115][ T7479] bridge_slave_1: entered promiscuous mode
[  363.090339][ T7362] hsr_slave_0: entered promiscuous mode
[  363.099640][ T7362] hsr_slave_1: entered promiscuous mode
[  363.167450][ T7479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  363.186825][ T7479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  363.442830][ T7418] hsr_slave_0: entered promiscuous mode
[  363.449674][ T7418] hsr_slave_1: entered promiscuous mode
[  363.456371][ T7418] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  363.464160][ T7418] Cannot create hsr debugfs directory
[  363.476120][ T7479] team0: Port device team_slave_0 added
[  363.532729][ T7479] team0: Port device team_slave_1 added
[  363.621335][   T36] bridge_slave_1: left allmulticast mode
[  363.629895][   T36] bridge_slave_1: left promiscuous mode
[  363.641044][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.652893][   T36] bridge_slave_0: left allmulticast mode
[  363.658544][   T36] bridge_slave_0: left promiscuous mode
[  363.672059][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.686572][   T36] bridge_slave_1: left allmulticast mode
[  363.692646][   T36] bridge_slave_1: left promiscuous mode
[  363.698576][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.709729][   T36] bridge_slave_0: left allmulticast mode
[  363.715624][   T36] bridge_slave_0: left promiscuous mode
[  363.721380][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.735382][   T36] bridge_slave_1: left allmulticast mode
[  363.741093][   T36] bridge_slave_1: left promiscuous mode
[  363.747680][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.760655][   T36] bridge_slave_0: left allmulticast mode
[  363.768799][   T36] bridge_slave_0: left promiscuous mode
[  363.776753][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.440024][   T36] bond0 (unregistering): Released all slaves
[  364.464661][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  364.477115][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  364.495153][   T36] bond0 (unregistering): Released all slaves
[  364.670202][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  364.681732][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  364.695109][   T36] bond0 (unregistering): Released all slaves
[  364.739682][ T7479] batman_adv: batadv0: Adding interface: batadv_slave_0
[  364.750355][ T7479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  364.777271][ T7479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  364.790558][ T7479] batman_adv: batadv0: Adding interface: batadv_slave_1
[  364.797775][ T7479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  364.825321][ T7479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  365.320768][ T7479] hsr_slave_0: entered promiscuous mode
[  365.328138][ T7479] hsr_slave_1: entered promiscuous mode
[  365.335320][ T7479] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  365.343205][ T7479] Cannot create hsr debugfs directory
[  365.510260][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  365.520756][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  365.536036][   T36] hsr_slave_0: left promiscuous mode
[  365.543852][   T36] hsr_slave_1: left promiscuous mode
[  365.551431][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  365.559299][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  365.569023][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  365.576990][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  365.604247][   T36] veth1_macvtap: left promiscuous mode
[  365.609898][   T36] veth0_macvtap: left promiscuous mode
[  365.615755][   T36] veth1_vlan: left promiscuous mode
[  365.621190][   T36] veth0_vlan: left promiscuous mode
[  365.974429][   T36] team0 (unregistering): Port device team_slave_1 removed
[  366.019328][   T36] team0 (unregistering): Port device team_slave_0 removed
[  366.939100][   T36] team0 (unregistering): Port device team_slave_1 removed
[  367.025120][   T36] team0 (unregistering): Port device team_slave_0 removed
[  367.955044][ T7362] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  367.995343][ T7362] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  368.065756][ T7362] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  368.157970][ T7362] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  368.329441][ T7418] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  368.412789][ T7418] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  368.441058][ T7418] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  368.468265][ T7418] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  368.836382][ T7479] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  368.887439][ T7479] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  368.929573][ T7479] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  368.988875][ T7479] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  369.194384][ T7362] 8021q: adding VLAN 0 to HW filter on device bond0
[  369.220845][ T7418] 8021q: adding VLAN 0 to HW filter on device bond0
[  369.250132][ T7362] 8021q: adding VLAN 0 to HW filter on device team0
[  369.285366][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.293042][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  369.331030][ T7418] 8021q: adding VLAN 0 to HW filter on device team0
[  369.364502][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.371881][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  369.390886][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.398140][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  369.443946][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.451265][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  369.760286][ T7479] 8021q: adding VLAN 0 to HW filter on device bond0
[  369.848396][ T7479] 8021q: adding VLAN 0 to HW filter on device team0
[  369.894020][ T5920] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.901259][ T5920] bridge0: port 1(bridge_slave_0) entered forwarding state
[  369.978173][ T5920] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.985540][ T5920] bridge0: port 2(bridge_slave_1) entered forwarding state
[  370.359388][ T7418] 8021q: adding VLAN 0 to HW filter on device batadv0
[  370.505252][ T7362] 8021q: adding VLAN 0 to HW filter on device batadv0
[  370.906904][ T7479] 8021q: adding VLAN 0 to HW filter on device batadv0
[  371.367860][ T7418] veth0_vlan: entered promiscuous mode
[  371.454199][ T7418] veth1_vlan: entered promiscuous mode
[  371.637862][ T7418] veth0_macvtap: entered promiscuous mode
[  371.707026][ T7418] veth1_macvtap: entered promiscuous mode
[  371.730280][ T7362] veth0_vlan: entered promiscuous mode
[  371.813793][ T7418] batman_adv: batadv0: Interface activated: batadv_slave_0
[  371.821668][ T7362] veth1_vlan: entered promiscuous mode
[  371.841061][ T7418] batman_adv: batadv0: Interface activated: batadv_slave_1
[  371.875427][ T7418] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  371.887641][ T7418] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  371.902072][ T7418] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  371.910854][ T7418] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  372.041419][ T7362] veth0_macvtap: entered promiscuous mode
[  372.110607][ T7479] veth0_vlan: entered promiscuous mode
[  372.120816][ T7362] veth1_macvtap: entered promiscuous mode
[  372.186664][ T7479] veth1_vlan: entered promiscuous mode
[  372.240052][ T5920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.248750][ T7362] batman_adv: batadv0: Interface activated: batadv_slave_0
[  372.272719][ T5920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.315345][ T7362] batman_adv: batadv0: Interface activated: batadv_slave_1
[  372.373991][ T7362] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  372.390650][ T7362] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  372.402174][ T7362] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  372.419891][ T7362] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  372.485929][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.504601][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.505953][ T7479] veth0_macvtap: entered promiscuous mode
[  372.550535][ T7479] veth1_macvtap: entered promiscuous mode
[  372.659255][ T7479] batman_adv: batadv0: Interface activated: batadv_slave_0
[  372.721890][ T7479] batman_adv: batadv0: Interface activated: batadv_slave_1
[  372.735472][   T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.781474][   T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.861381][ T7479] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  372.907135][ T7479] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  372.948908][ T7479] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  372.979839][ T7479] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  373.374294][ T7655] loop8: detected capacity change from 0 to 1024
[  374.368898][ T7652] hfsplus: xattr search failed
[  374.376795][ T7652] hfsplus: unable to mark blocks free: error -4
[  374.383282][ T7652] hfsplus: can't free extent
[  375.159892][ T7656] Invalid ELF header magic: != ELF
[  375.872875][   T13] hfsplus: b-tree write err: -5, ino 4
[  376.123691][ T5968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  376.131591][ T5968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  382.088972][ T5920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  382.431855][ T5920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  386.216372][ T7715] sd 0:0:1:0: device reset
[  386.764045][ T5920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  386.868627][ T5920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.413520][ T5840] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201'
[  387.424406][ T5840] CPU: 1 UID: 0 PID: 5840 Comm: kworker/u9:6 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) 
[  387.424478][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  387.424518][ T5840] Workqueue: hci5 hci_rx_work
[  387.424583][ T5840] Call Trace:
[  387.424598][ T5840]  <TASK>
[  387.424619][ T5840]  dump_stack_lvl+0x16c/0x1f0
[  387.424717][ T5840]  sysfs_warn_dup+0x7f/0xa0
[  387.424806][ T5840]  sysfs_create_dir_ns+0x24b/0x2b0
[  387.424895][ T5840]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  387.424999][ T5840]  ? find_held_lock+0x2b/0x80
[  387.425082][ T5840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  387.425154][ T5840]  ? do_raw_spin_unlock+0x172/0x230
[  387.425222][ T5840]  kobject_add_internal+0x2c4/0x9b0
[  387.425294][ T5840]  kobject_add+0x16e/0x240
[  387.425353][ T5840]  ? __pfx_kobject_add+0x10/0x10
[  387.425418][ T5840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  387.425492][ T5840]  ? do_raw_spin_unlock+0x172/0x230
[  387.425562][ T5840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  387.425635][ T5840]  ? kobject_put+0xab/0x5a0
[  387.425695][ T5840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  387.425777][ T5840]  device_add+0x288/0x1a70
[  387.425872][ T5840]  ? __pfx_dev_set_name+0x10/0x10
[  387.425984][ T5840]  ? __pfx_device_add+0x10/0x10
[  387.426071][ T5840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  387.426144][ T5840]  ? mgmt_send_event_skb+0x2fb/0x460
[  387.426222][ T5840]  hci_conn_add_sysfs+0x17e/0x230
[  387.426295][ T5840]  le_conn_complete_evt+0x1075/0x1d70
[  387.426421][ T5840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  387.426494][ T5840]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  387.426595][ T5840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  387.426687][ T5840]  hci_le_conn_complete_evt+0x23c/0x370
[  387.426806][ T5840]  hci_le_meta_evt+0x2f6/0x5e0
[  387.426869][ T5840]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  387.427000][ T5840]  hci_event_packet+0x66c/0x1190
[  387.427107][ T5840]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  387.427183][ T5840]  ? __pfx_hci_event_packet+0x10/0x10
[  387.427288][ T5840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  387.427360][ T5840]  ? kcov_remote_start+0x3c9/0x6d0
[  387.427421][ T5840]  ? lockdep_hardirqs_on+0x7c/0x110
[  387.427515][ T5840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  387.427603][ T5840]  hci_rx_work+0x2c5/0x16b0
[  387.427670][ T5840]  ? rcu_is_watching+0x12/0xc0
[  387.427758][ T5840]  process_one_work+0x9cf/0x1b70
[  387.427849][ T5840]  ? __pfx_process_one_work+0x10/0x10
[  387.427917][ T5840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  387.428009][ T5840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  387.428080][ T5840]  ? assign_work+0x1a0/0x250
[  387.428142][ T5840]  worker_thread+0x6c8/0xf10
[  387.428234][ T5840]  ? __pfx_worker_thread+0x10/0x10
[  387.428303][ T5840]  kthread+0x3c5/0x780
[  387.428364][ T5840]  ? __pfx_kthread+0x10/0x10
[  387.428419][ T5840]  ? __pfx_kthread+0x10/0x10
[  387.428474][ T5840]  ? __pfx_kthread+0x10/0x10
[  387.428530][ T5840]  ? __pfx_kthread+0x10/0x10
[  387.428585][ T5840]  ? srso_alias_return_thunk+0x5/0xfbef5
[  387.428662][ T5840]  ? rcu_is_watching+0x12/0xc0
[  387.428746][ T5840]  ? __pfx_kthread+0x10/0x10
[  387.428808][ T5840]  ret_from_fork+0x48/0x80
[  387.428869][ T5840]  ? __pfx_kthread+0x10/0x10
[  387.428926][ T5840]  ret_from_fork_asm+0x1a/0x30
[  387.429059][ T5840]  </TASK>
[  387.429112][ T5840] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  388.231099][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  388.237520][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  388.365006][ T5840] Bluetooth: hci5: failed to register connection device
[  389.603335][ T7734] loop7: detected capacity change from 0 to 164
[  391.327751][ T7750] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20000
[  391.912027][ T5890] IPVS: starting estimator thread 0...
[  392.228604][ T7752] IPVS: using max 20 ests per chain, 48000 per kthread
[  399.773588][ T7798] loop8: detected capacity change from 0 to 32768
[  400.215943][ T7798] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  401.724469][ T7798] XFS (loop8): Ending clean mount
[  402.443862][ T7418] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  404.026776][ T7821] loop2: detected capacity change from 0 to 512
[  404.085460][ T7821] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  404.114297][ T7821] EXT4-fs (loop2): 1 truncate cleaned up
[  404.122550][ T7821] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  411.590719][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  412.574147][ T7886] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  417.513200][ T7905] ubi31: attaching mtd0
[  417.522598][ T7905] ubi31: scanning is finished
[  417.527535][ T7905] ubi31: empty MTD device detected
[  417.726749][ T7905] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  418.071212][ T7922] loop7: detected capacity change from 0 to 1024
[  418.860706][ T7922] ext4: Unknown parameter 'dont_hash'
[  427.824185][ T7976] fuse: Unknown parameter '0x000000000000000900000000000000000000'
[  427.883898][ T7976] vim2m vim2m.0: vidioc_s_fmt queue busy
[  433.784493][    T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  434.943635][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  435.056685][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  435.066535][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  435.082654][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  435.091039][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  436.226017][ T7917] ==================================================================
[  436.234241][ T7917] BUG: KASAN: slab-out-of-bounds in __list_del_entry_valid_or_report+0x1d4/0x200
[  436.243409][ T7917] Read of size 8 at addr ffff88807adf1558 by task syz.2.355/7917
[  436.251196][ T7917] 
[  436.253561][ T7917] CPU: 1 UID: 0 PID: 7917 Comm: syz.2.355 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) 
[  436.253607][ T7917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  436.253630][ T7917] Call Trace:
[  436.253642][ T7917]  <TASK>
[  436.253655][ T7917]  dump_stack_lvl+0x116/0x1f0
[  436.253727][ T7917]  print_report+0xc3/0x670
[  436.253794][ T7917]  ? srso_alias_return_thunk+0x5/0xfbef5
[  436.253846][ T7917]  ? srso_alias_return_thunk+0x5/0xfbef5
[  436.253891][ T7917]  ? __phys_addr+0xc6/0x150
[  436.253952][ T7917]  ? __list_del_entry_valid_or_report+0x1d4/0x200
[  436.253993][ T7917]  kasan_report+0xe0/0x110
[  436.254059][ T7917]  ? __list_del_entry_valid_or_report+0x1d4/0x200
[  436.254106][ T7917]  __list_del_entry_valid_or_report+0x1d4/0x200
[  436.254146][ T7917]  bt_accept_unlink+0x34/0x2e0
[  436.254183][ T7917]  l2cap_sock_teardown_cb+0x1a3/0x3c0
[  436.254237][ T7917]  l2cap_chan_del+0xbd/0x8f0
[  436.254297][ T7917]  l2cap_conn_del+0x37a/0x730
[  436.254353][ T7917]  ? hci_cmd_sync_dequeue+0x191/0x1f0
[  436.254408][ T7917]  ? __pfx_l2cap_disconn_cfm+0x10/0x10
[  436.254462][ T7917]  l2cap_disconn_cfm+0x96/0xd0
[  436.254518][ T7917]  hci_conn_hash_flush+0x10e/0x260
[  436.254572][ T7917]  hci_dev_close_sync+0x602/0x11d0
[  436.254626][ T7917]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  436.254671][ T7917]  ? srso_alias_return_thunk+0x5/0xfbef5
[  436.254718][ T7917]  ? up_write+0x1b2/0x520
[  436.254755][ T7917]  ? srso_alias_return_thunk+0x5/0xfbef5
[  436.254805][ T7917]  hci_dev_do_close+0x2e/0x90
[  436.254851][ T7917]  hci_unregister_dev+0x213/0x620
[  436.254899][ T7917]  ? __pfx_vhci_release+0x10/0x10
[  436.254952][ T7917]  vhci_release+0x79/0xf0
[  436.255010][ T7917]  __fput+0x402/0xb70
[  436.255052][ T7917]  task_work_run+0x150/0x240
[  436.255096][ T7917]  ? __pfx_task_work_run+0x10/0x10
[  436.255144][ T7917]  do_exit+0xafb/0x2c30
[  436.255205][ T7917]  ? __pfx___might_resched+0x10/0x10
[  436.255267][ T7917]  ? __pfx_do_exit+0x10/0x10
[  436.255322][ T7917]  ? srso_alias_return_thunk+0x5/0xfbef5
[  436.255367][ T7917]  ? do_raw_spin_lock+0x12c/0x2b0
[  436.255408][ T7917]  ? srso_alias_return_thunk+0x5/0xfbef5
[  436.255454][ T7917]  ? find_held_lock+0x2b/0x80
[  436.255505][ T7917]  do_group_exit+0xd3/0x2a0
[  436.255565][ T7917]  get_signal+0x2673/0x26d0
[  436.255621][ T7917]  ? __pfx_do_recvmmsg+0x10/0x10
[  436.255675][ T7917]  ? __pfx_get_signal+0x10/0x10
[  436.255722][ T7917]  ? do_futex+0x122/0x350
[  436.255784][ T7917]  arch_do_signal_or_restart+0x8f/0x7d0
[  436.255845][ T7917]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  436.255907][ T7917]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  436.255954][ T7917]  ? rcu_is_watching+0x12/0xc0
[  436.256013][ T7917]  syscall_exit_to_user_mode+0x150/0x2a0
[  436.256082][ T7917]  do_syscall_64+0xda/0x260
[  436.256150][ T7917]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.256188][ T7917] RIP: 0033:0x7f395618e969
[  436.256216][ T7917] Code: Unable to access opcode bytes at 0x7f395618e93f.
[  436.256233][ T7917] RSP: 002b:00007f395702d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  436.256268][ T7917] RAX: 0000000000010106 RBX: 00007f39563b6160 RCX: 00007f395618e969
[  436.256293][ T7917] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000007
[  436.256317][ T7917] RBP: 00007f3956210ab1 R08: 0000000000000000 R09: 0000000000000000
[  436.256340][ T7917] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  436.256363][ T7917] R13: 0000000000000000 R14: 00007f39563b6160 R15: 00007ffe6ff08c18
[  436.256400][ T7917]  </TASK>
[  436.256413][ T7917] 
[  436.594537][ T7917] Allocated by task 6213:
[  436.598902][ T7917]  kasan_save_stack+0x33/0x60
[  436.603663][ T7917]  kasan_save_track+0x14/0x30
[  436.608391][ T7917]  __kasan_kmalloc+0xaa/0xb0
[  436.613069][ T7917]  __kmalloc_node_track_caller_noprof+0x221/0x510
[  436.619539][ T7917]  kmalloc_reserve+0xef/0x2c0
[  436.624290][ T7917]  __alloc_skb+0x166/0x380
[  436.628735][ T7917]  nsim_dev_trap_report_work+0x2b1/0xcf0
[  436.634432][ T7917]  process_one_work+0x9cf/0x1b70
[  436.639404][ T7917]  worker_thread+0x6c8/0xf10
[  436.644024][ T7917]  kthread+0x3c5/0x780
[  436.648120][ T7917]  ret_from_fork+0x48/0x80
[  436.652549][ T7917]  ret_from_fork_asm+0x1a/0x30
[  436.657374][ T7917] 
[  436.659714][ T7917] Freed by task 6213:
[  436.663709][ T7917]  kasan_save_stack+0x33/0x60
[  436.668423][ T7917]  kasan_save_track+0x14/0x30
[  436.673154][ T7917]  kasan_save_free_info+0x3b/0x60
[  436.678210][ T7917]  __kasan_slab_free+0x51/0x70
[  436.683023][ T7917]  kfree+0x2b6/0x4d0
[  436.686952][ T7917]  skb_free_head+0x108/0x1d0
[  436.691565][ T7917]  skb_release_data+0x7a5/0x960
[  436.696442][ T7917]  consume_skb+0xbf/0x100
[  436.700801][ T7917]  nsim_dev_trap_report_work+0x8bd/0xcf0
[  436.706479][ T7917]  process_one_work+0x9cf/0x1b70
[  436.711440][ T7917]  worker_thread+0x6c8/0xf10
[  436.716073][ T7917]  kthread+0x3c5/0x780
[  436.720214][ T7917]  ret_from_fork+0x48/0x80
[  436.724666][ T7917]  ret_from_fork_asm+0x1a/0x30
[  436.729493][ T7917] 
[  436.731825][ T7917] The buggy address belongs to the object at ffff88807adf0000
[  436.731825][ T7917]  which belongs to the cache kmalloc-4k of size 4096
[  436.745915][ T7917] The buggy address is located 1368 bytes to the right of
[  436.745915][ T7917]  allocated 4096-byte region [ffff88807adf0000, ffff88807adf1000)
[  436.760788][ T7917] 
[  436.763131][ T7917] The buggy address belongs to the physical page:
[  436.769554][ T7917] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7adf0
[  436.778335][ T7917] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  436.786862][ T7917] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  436.794420][ T7917] page_type: f5(slab)
[  436.798422][ T7917] raw: 00fff00000000040 ffff88801b442140 dead000000000122 0000000000000000
[  436.807047][ T7917] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  436.815650][ T7917] head: 00fff00000000040 ffff88801b442140 dead000000000122 0000000000000000
[  436.824341][ T7917] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  436.833077][ T7917] head: 00fff00000000003 ffffea0001eb7c01 00000000ffffffff 00000000ffffffff
[  436.841774][ T7917] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  436.850461][ T7917] page dumped because: kasan: bad access detected
[  436.856882][ T7917] page_owner tracks the page as allocated
[  436.862603][ T7917] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6213, tgid 6213 (kworker/u8:13), ts 419402935004, free_ts 418396619251
[  436.883680][ T7917]  post_alloc_hook+0x181/0x1b0
[  436.888508][ T7917]  get_page_from_freelist+0x135c/0x3920
[  436.894131][ T7917]  __alloc_frozen_pages_noprof+0x263/0x23a0
[  436.900073][ T7917]  alloc_pages_mpol+0x1fb/0x550
[  436.904991][ T7917]  new_slab+0x244/0x340
[  436.909222][ T7917]  ___slab_alloc+0xd9c/0x1940
[  436.913952][ T7917]  __slab_alloc.constprop.0+0x56/0xb0
[  436.919373][ T7917]  __kmalloc_node_track_caller_noprof+0x2ee/0x510
[  436.925845][ T7917]  kmalloc_reserve+0xef/0x2c0
[  436.930605][ T7917]  __alloc_skb+0x166/0x380
[  436.935068][ T7917]  nsim_dev_trap_report_work+0x2b1/0xcf0
[  436.940755][ T7917]  process_one_work+0x9cf/0x1b70
[  436.945727][ T7917]  worker_thread+0x6c8/0xf10
[  436.950386][ T7917]  kthread+0x3c5/0x780
[  436.954487][ T7917]  ret_from_fork+0x48/0x80
[  436.958938][ T7917]  ret_from_fork_asm+0x1a/0x30
[  436.963760][ T7917] page last free pid 7929 tgid 7919 stack trace:
[  436.970102][ T7917]  __free_frozen_pages+0x69d/0xff0
[  436.975271][ T7917]  qlist_free_all+0x4e/0x120
[  436.979995][ T7917]  kasan_quarantine_reduce+0x195/0x1e0
[  436.985530][ T7917]  __kasan_slab_alloc+0x69/0x90
[  436.990567][ T7917]  kmem_cache_alloc_node_noprof+0x1d5/0x3b0
[  436.996522][ T7917]  __alloc_skb+0x2b2/0x380
[  437.000975][ T7917]  alloc_skb_with_frags+0xe0/0x860
[  437.006136][ T7917]  sock_alloc_send_pskb+0x7fb/0x990
[  437.011371][ T7917]  __ip_append_data+0x21a2/0x41e0
[  437.016446][ T7917]  ip_make_skb+0x27f/0x300
[  437.020904][ T7917]  udp_sendmsg+0x189a/0x29e0
[  437.025619][ T7917]  udpv6_sendmsg+0x1097/0x3070
[  437.030433][ T7917]  inet6_sendmsg+0x105/0x140
[  437.035082][ T7917]  ____sys_sendmsg+0x705/0xc70
[  437.039917][ T7917]  ___sys_sendmsg+0x134/0x1d0
[  437.044638][ T7917]  __sys_sendmmsg+0x200/0x420
[  437.049393][ T7917] 
[  437.051737][ T7917] Memory state around the buggy address:
[  437.057397][ T7917]  ffff88807adf1400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  437.065684][ T7917]  ffff88807adf1480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  437.073771][ T7917] >ffff88807adf1500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  437.081896][ T7917]                                                     ^
[  437.088890][ T7917]  ffff88807adf1580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  437.096990][ T7917]  ffff88807adf1600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  437.105691][ T7917] ==================================================================
[  437.199980][ T7917] Disabling lock debugging due to kernel taint
[  437.224665][ T7917]  slab kmalloc-4k start ffff88807adf0000 pointer offset 5464 size 4096
[  437.274390][ T7971] syz-executor: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  437.502465][ T5840] Bluetooth: hci0: command tx timeout
[  437.524535][ T7971] CPU: 1 UID: 0 PID: 7971 Comm: syz-executor Tainted: G    B               6.15.0-rc7-syzkaller #0 PREEMPT(full) 
[  437.524591][ T7971] Tainted: [B]=BAD_PAGE
[  437.524603][ T7971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  437.524624][ T7971] Call Trace:
[  437.524636][ T7971]  <TASK>
[  437.524648][ T7971]  dump_stack_lvl+0x16c/0x1f0
[  437.524719][ T7971]  warn_alloc+0x248/0x3a0
[  437.524779][ T7971]  ? __pfx_warn_alloc+0x10/0x10
[  437.524839][ T7971]  ? srso_alias_return_thunk+0x5/0xfbef5
[  437.524888][ T7971]  ? __get_vm_area_node+0x1dc/0x330
[  437.524933][ T7971]  ? __get_vm_area_node+0x208/0x330
[  437.524980][ T7971]  __vmalloc_node_range_noprof+0x1110/0x1540
[  437.525035][ T7971]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  437.525086][ T7971]  ? kcov_ioctl+0x4c/0x730
[  437.525125][ T7971]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  437.525175][ T7971]  ? hook_file_ioctl_common+0x145/0x410
[  437.525225][ T7971]  ? kcov_ioctl+0x4c/0x730
[  437.525258][ T7971]  vmalloc_user_noprof+0x6b/0x90
[  437.525303][ T7971]  ? kcov_ioctl+0x4c/0x730
[  437.525334][ T7971]  kcov_ioctl+0x4c/0x730
[  437.525368][ T7971]  ? __pfx_kcov_ioctl+0x10/0x10
[  437.525402][ T7971]  __x64_sys_ioctl+0x193/0x200
[  437.525445][ T7971]  do_syscall_64+0xcd/0x260
[  437.525514][ T7971]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.525551][ T7971] RIP: 0033:0x7fa37178e56b
[  437.525577][ T7971] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  437.525612][ T7971] RSP: 002b:00007ffe53411530 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  437.525647][ T7971] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007fa37178e56b
[  437.525671][ T7971] RDX: 0000000000100000 RSI: ffffffff80086301 RDI: 00000000000000d7
[  437.525695][ T7971] RBP: 00007fa3719b5f40 R08: 00000000000000da R09: 0000000000000000
[  437.525717][ T7971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  437.525740][ T7971] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  437.525773][ T7971]  </TASK>
[  437.525822][ T7971] Mem-Info:
[  437.751918][ T7917] ==================================================================
[  437.760062][ T7917] BUG: KASAN: slab-out-of-bounds in __list_del_entry_valid_or_report+0x1f8/0x200
[  437.769241][ T7917] Read of size 8 at addr ffff88807adf1558 by task syz.2.355/7917
[  437.777017][ T7917] 
[  437.779358][ T7917] CPU: 1 UID: 0 PID: 7917 Comm: syz.2.355 Tainted: G    B               6.15.0-rc7-syzkaller #0 PREEMPT(full) 
[  437.779409][ T7917] Tainted: [B]=BAD_PAGE
[  437.779421][ T7917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  437.779442][ T7917] Call Trace:
[  437.779453][ T7917]  <TASK>
[  437.779465][ T7917]  dump_stack_lvl+0x116/0x1f0
[  437.779530][ T7917]  print_report+0xc3/0x670
[  437.779593][ T7917]  ? srso_alias_return_thunk+0x5/0xfbef5
[  437.779639][ T7917]  ? srso_alias_return_thunk+0x5/0xfbef5
[  437.779679][ T7917]  ? __phys_addr+0xc6/0x150
[  437.779737][ T7917]  ? __list_del_entry_valid_or_report+0x1f8/0x200
[  437.779775][ T7917]  kasan_report+0xe0/0x110
[  437.779829][ T7917]  ? __list_del_entry_valid_or_report+0x1f8/0x200
[  437.779870][ T7917]  __list_del_entry_valid_or_report+0x1f8/0x200
[  437.779907][ T7917]  bt_accept_unlink+0x34/0x2e0
[  437.779941][ T7917]  l2cap_sock_teardown_cb+0x1a3/0x3c0
[  437.779991][ T7917]  l2cap_chan_del+0xbd/0x8f0
[  437.780052][ T7917]  l2cap_conn_del+0x37a/0x730
[  437.780104][ T7917]  ? hci_cmd_sync_dequeue+0x191/0x1f0
[  437.780153][ T7917]  ? __pfx_l2cap_disconn_cfm+0x10/0x10
[  437.780203][ T7917]  l2cap_disconn_cfm+0x96/0xd0
[  437.780253][ T7917]  hci_conn_hash_flush+0x10e/0x260
[  437.780303][ T7917]  hci_dev_close_sync+0x602/0x11d0
[  437.780352][ T7917]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  437.780393][ T7917]  ? srso_alias_return_thunk+0x5/0xfbef5
[  437.780434][ T7917]  ? up_write+0x1b2/0x520
[  437.780469][ T7917]  ? srso_alias_return_thunk+0x5/0xfbef5
[  437.780514][ T7917]  hci_dev_do_close+0x2e/0x90
[  437.780556][ T7917]  hci_unregister_dev+0x213/0x620
[  437.780601][ T7917]  ? __pfx_vhci_release+0x10/0x10
[  437.780650][ T7917]  vhci_release+0x79/0xf0
[  437.780696][ T7917]  __fput+0x402/0xb70
[  437.780733][ T7917]  task_work_run+0x150/0x240
[  437.780773][ T7917]  ? __pfx_task_work_run+0x10/0x10
[  437.780815][ T7917]  do_exit+0xafb/0x2c30
[  437.780872][ T7917]  ? __pfx___might_resched+0x10/0x10
[  437.780929][ T7917]  ? __pfx_do_exit+0x10/0x10
[  437.780979][ T7917]  ? srso_alias_return_thunk+0x5/0xfbef5
[  437.781081][ T7917]  ? do_raw_spin_lock+0x12c/0x2b0
[  437.781117][ T7917]  ? srso_alias_return_thunk+0x5/0xfbef5
[  437.781158][ T7917]  ? find_held_lock+0x2b/0x80
[  437.781204][ T7917]  do_group_exit+0xd3/0x2a0
[  437.781258][ T7917]  get_signal+0x2673/0x26d0
[  437.781311][ T7917]  ? __pfx_do_recvmmsg+0x10/0x10
[  437.781359][ T7917]  ? __pfx_get_signal+0x10/0x10
[  437.781402][ T7917]  ? do_futex+0x122/0x350
[  437.781459][ T7917]  arch_do_signal_or_restart+0x8f/0x7d0
[  437.781516][ T7917]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  437.781572][ T7917]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  437.781616][ T7917]  ? rcu_is_watching+0x12/0xc0
[  437.781667][ T7917]  syscall_exit_to_user_mode+0x150/0x2a0
[  437.781732][ T7917]  do_syscall_64+0xda/0x260
[  437.781798][ T7917]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.781834][ T7917] RIP: 0033:0x7f395618e969
[  437.781859][ T7917] Code: Unable to access opcode bytes at 0x7f395618e93f.
[  437.781875][ T7917] RSP: 002b:00007f395702d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  437.781908][ T7917] RAX: 0000000000010106 RBX: 00007f39563b6160 RCX: 00007f395618e969
[  437.781931][ T7917] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000007
[  437.781952][ T7917] RBP: 00007f3956210ab1 R08: 0000000000000000 R09: 0000000000000000
[  437.781974][ T7917] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  437.781995][ T7917] R13: 0000000000000000 R14: 00007f39563b6160 R15: 00007ffe6ff08c18
[  437.782048][ T7917]  </TASK>
[  437.782060][ T7917] 
[  438.122849][ T7917] Allocated by task 6213:
[  438.127190][ T7917]  kasan_save_stack+0x33/0x60
[  438.131920][ T7917]  kasan_save_track+0x14/0x30
[  438.136650][ T7917]  __kasan_kmalloc+0xaa/0xb0
[  438.141284][ T7917]  __kmalloc_node_track_caller_noprof+0x221/0x510
[  438.147748][ T7917]  kmalloc_reserve+0xef/0x2c0
[  438.152473][ T7917]  __alloc_skb+0x166/0x380
[  438.156925][ T7917]  nsim_dev_trap_report_work+0x2b1/0xcf0
[  438.162597][ T7917]  process_one_work+0x9cf/0x1b70
[  438.167560][ T7917]  worker_thread+0x6c8/0xf10
[  438.172174][ T7917]  kthread+0x3c5/0x780
[  438.176272][ T7917]  ret_from_fork+0x48/0x80
[  438.180707][ T7917]  ret_from_fork_asm+0x1a/0x30
[  438.185515][ T7917] 
[  438.187838][ T7917] Freed by task 6213:
[  438.191821][ T7917]  kasan_save_stack+0x33/0x60
[  438.196541][ T7917]  kasan_save_track+0x14/0x30
[  438.201258][ T7917]  kasan_save_free_info+0x3b/0x60
[  438.206307][ T7917]  __kasan_slab_free+0x51/0x70
[  438.211119][ T7917]  kfree+0x2b6/0x4d0
[  438.215061][ T7917]  skb_free_head+0x108/0x1d0
[  438.219676][ T7917]  skb_release_data+0x7a5/0x960
[  438.224560][ T7917]  consume_skb+0xbf/0x100
[  438.228922][ T7917]  nsim_dev_trap_report_work+0x8bd/0xcf0
[  438.234632][ T7917]  process_one_work+0x9cf/0x1b70
[  438.239606][ T7917]  worker_thread+0x6c8/0xf10
[  438.244232][ T7917]  kthread+0x3c5/0x780
[  438.248375][ T7917]  ret_from_fork+0x48/0x80
[  438.252812][ T7917]  ret_from_fork_asm+0x1a/0x30
[  438.257632][ T7917] 
[  438.259959][ T7917] The buggy address belongs to the object at ffff88807adf0000
[  438.259959][ T7917]  which belongs to the cache kmalloc-4k of size 4096
[  438.274058][ T7917] The buggy address is located 1368 bytes to the right of
[  438.274058][ T7917]  allocated 4096-byte region [ffff88807adf0000, ffff88807adf1000)
[  438.288937][ T7917] 
[  438.291266][ T7917] The buggy address belongs to the physical page:
[  438.297687][ T7917] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7adf0
[  438.306472][ T7917] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  438.314990][ T7917] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  438.322553][ T7917] page_type: f5(slab)
[  438.326549][ T7917] raw: 00fff00000000040 ffff88801b442140 dead000000000122 0000000000000000
[  438.335155][ T7917] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  438.343761][ T7917] head: 00fff00000000040 ffff88801b442140 dead000000000122 0000000000000000
[  438.352452][ T7917] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  438.361151][ T7917] head: 00fff00000000003 ffffea0001eb7c01 00000000ffffffff 00000000ffffffff
[  438.369855][ T7917] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  438.378544][ T7917] page dumped because: kasan: bad access detected
[  438.384972][ T7917] page_owner tracks the page as allocated
[  438.390688][ T7917] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6213, tgid 6213 (kworker/u8:13), ts 419402935004, free_ts 418396619251
[  438.411953][ T7917]  post_alloc_hook+0x181/0x1b0
[  438.416776][ T7917]  get_page_from_freelist+0x135c/0x3920
[  438.422391][ T7917]  __alloc_frozen_pages_noprof+0x263/0x23a0
[  438.428386][ T7917]  alloc_pages_mpol+0x1fb/0x550
[  438.433418][ T7917]  new_slab+0x244/0x340
[  438.437618][ T7917]  ___slab_alloc+0xd9c/0x1940
[  438.442324][ T7917]  __slab_alloc.constprop.0+0x56/0xb0
[  438.447720][ T7917]  __kmalloc_node_track_caller_noprof+0x2ee/0x510
[  438.454178][ T7917]  kmalloc_reserve+0xef/0x2c0
[  438.458896][ T7917]  __alloc_skb+0x166/0x380
[  438.463347][ T7917]  nsim_dev_trap_report_work+0x2b1/0xcf0
[  438.469022][ T7917]  process_one_work+0x9cf/0x1b70
[  438.473988][ T7917]  worker_thread+0x6c8/0xf10
[  438.478602][ T7917]  kthread+0x3c5/0x780
[  438.482692][ T7917]  ret_from_fork+0x48/0x80
[  438.487133][ T7917]  ret_from_fork_asm+0x1a/0x30
[  438.491951][ T7917] page last free pid 7929 tgid 7919 stack trace:
[  438.498283][ T7917]  __free_frozen_pages+0x69d/0xff0
[  438.503431][ T7917]  qlist_free_all+0x4e/0x120
[  438.508063][ T7917]  kasan_quarantine_reduce+0x195/0x1e0
[  438.513567][ T7917]  __kasan_slab_alloc+0x69/0x90
[  438.518554][ T7917]  kmem_cache_alloc_node_noprof+0x1d5/0x3b0
[  438.524503][ T7917]  __alloc_skb+0x2b2/0x380
[  438.529097][ T7917]  alloc_skb_with_frags+0xe0/0x860
[  438.534290][ T7917]  sock_alloc_send_pskb+0x7fb/0x990
[  438.539513][ T7917]  __ip_append_data+0x21a2/0x41e0
[  438.544576][ T7917]  ip_make_skb+0x27f/0x300
[  438.549031][ T7917]  udp_sendmsg+0x189a/0x29e0
[  438.553658][ T7917]  udpv6_sendmsg+0x1097/0x3070
[  438.558445][ T7917]  inet6_sendmsg+0x105/0x140
[  438.563080][ T7917]  ____sys_sendmsg+0x705/0xc70
[  438.567899][ T7917]  ___sys_sendmsg+0x134/0x1d0
[  438.572608][ T7917]  __sys_sendmmsg+0x200/0x420
[  438.577367][ T7917] 
[  438.579729][ T7917] Memory state around the buggy address:
[  438.585380][ T7917]  ffff88807adf1400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  438.593465][ T7917]  ffff88807adf1480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  438.601547][ T7917] >ffff88807adf1500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  438.609891][ T7917]                                                     ^
[  438.616843][ T7917]  ffff88807adf1580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  438.625097][ T7917]  ffff88807adf1600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  438.633200][ T7917] ==================================================================
[  438.654953][ T7971] active_anon:15578 inactive_anon:0 isolated_anon:0
[  438.654953][ T7971]  active_file:14591 inactive_file:39966 isolated_file:0
[  438.654953][ T7971]  unevictable:897 dirty:185 writeback:0
[  438.654953][ T7971]  slab_reclaimable:10889 slab_unreclaimable:105511
[  438.654953][ T7971]  mapped:21366 shmem:11353 pagetables:947
[  438.654953][ T7971]  sec_pagetables:0 bounce:0
[  438.654953][ T7971]  kernel_misc_reclaimable:0
[  438.654953][ T7971]  free:1298219 free_pcp:6004 free_cma:0
[  438.701158][ T7971] Node 0 active_anon:62312kB inactive_anon:0kB active_file:58364kB inactive_file:159664kB unevictable:2052kB isolated(anon):0kB isolated(file):0kB mapped:85464kB dirty:736kB writeback:0kB shmem:43876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11760kB pagetables:3788kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  438.812119][ T7971] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  438.929369][    T9] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  438.951798][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.959912][    T9] usb 9-1: Product: syz
[  438.967706][ T7917] list_del corruption. prev->next should be ffff888056404558, but was 0000000000000000. (prev=ffff88807adf1558)
[  439.009819][ T7917] ------------[ cut here ]------------
[  439.015417][ T7917] kernel BUG at lib/list_debug.c:62!
[  439.023984][ T5968] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.191823][    T9] usb 9-1: Manufacturer: syz
[  439.213124][    T9] usb 9-1: config 0 descriptor??
[  439.222887][ T7971] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  439.252748][    T9] usb 9-1: can't set config #0, error -71
[  439.270620][ T7917] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
[  439.277124][ T7917] CPU: 0 UID: 0 PID: 7917 Comm: syz.2.355 Tainted: G    B               6.15.0-rc7-syzkaller #0 PREEMPT(full) 
[  439.288886][ T7917] Tainted: [B]=BAD_PAGE
[  439.293061][ T7917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  439.303151][ T7917] RIP: 0010:__list_del_entry_valid_or_report+0x17a/0x200
[  439.310196][ T7917] Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 8d 00 00 00 48 8b 55 00 48 89 e9 48 89 de 48 c7 c7 80 92 f4 8b e8 e7 54 c6 fc 90 <0f> 0b 4c 89 e7 e8 9c 26 29 fd 48 89 ea 48 b8 00 00 00 00 00 fc ff
[  439.329834][ T7917] RSP: 0018:ffffc900047ef7e8 EFLAGS: 00010282
[  439.335943][ T7917] RAX: 000000000000006d RBX: ffff888056404558 RCX: ffffffff819aa5d9
[  439.343959][ T7917] RDX: 0000000000000000 RSI: ffffffff819b2466 RDI: 0000000000000005
[  439.351970][ T7917] RBP: ffff88807adf1558 R08: 0000000000000005 R09: 0000000000000000
[  439.359986][ T7917] R10: 0000000080000000 R11: 6c65645f7473696c R12: ffff88807adf1558
[  439.367997][ T7917] R13: ffff888056404560 R14: ffff88807adf1000 R15: ffff888056402010
[  439.376009][ T7917] FS:  0000000000000000(0000) GS:ffff8881249e0000(0000) knlGS:0000000000000000
[  439.384978][ T7917] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  439.391602][ T7917] CR2: 00007f721fae7d60 CR3: 000000002ff30000 CR4: 0000000000350ef0
[  439.399613][ T7917] Call Trace:
[  439.402920][ T7917]  <TASK>
[  439.405864][ T7917]  bt_accept_unlink+0x34/0x2e0
[  439.410666][ T7917]  l2cap_sock_teardown_cb+0x1a3/0x3c0
[  439.416086][ T7917]  l2cap_chan_del+0xbd/0x8f0
[  439.420766][ T7917]  l2cap_conn_del+0x37a/0x730
[  439.425492][ T7917]  ? hci_cmd_sync_dequeue+0x191/0x1f0
[  439.430902][ T7917]  ? __pfx_l2cap_disconn_cfm+0x10/0x10
[  439.436413][ T7917]  l2cap_disconn_cfm+0x96/0xd0
[  439.441229][ T7917]  hci_conn_hash_flush+0x10e/0x260
[  439.446385][ T7917]  hci_dev_close_sync+0x602/0x11d0
[  439.451536][ T7917]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  439.457116][ T7917]  ? srso_alias_return_thunk+0x5/0xfbef5
[  439.462782][ T7917]  ? up_write+0x1b2/0x520
[  439.467136][ T7917]  ? srso_alias_return_thunk+0x5/0xfbef5
[  439.472927][ T7917]  hci_dev_do_close+0x2e/0x90
[  439.477636][ T7917]  hci_unregister_dev+0x213/0x620
[  439.482698][ T7917]  ? __pfx_vhci_release+0x10/0x10
[  439.487766][ T7917]  vhci_release+0x79/0xf0
[  439.492138][ T7917]  __fput+0x402/0xb70
[  439.496146][ T7917]  task_work_run+0x150/0x240
[  439.500799][ T7917]  ? __pfx_task_work_run+0x10/0x10
[  439.505973][ T7917]  do_exit+0xafb/0x2c30
[  439.510180][ T7917]  ? __pfx___might_resched+0x10/0x10
[  439.515509][ T7917]  ? __pfx_do_exit+0x10/0x10
[  439.520141][ T7917]  ? srso_alias_return_thunk+0x5/0xfbef5
[  439.525806][ T7917]  ? do_raw_spin_lock+0x12c/0x2b0
[  439.530852][ T7917]  ? srso_alias_return_thunk+0x5/0xfbef5
[  439.536517][ T7917]  ? find_held_lock+0x2b/0x80
[  439.541232][ T7917]  do_group_exit+0xd3/0x2a0
[  439.545829][ T7917]  get_signal+0x2673/0x26d0
[  439.550392][ T7917]  ? __pfx_do_recvmmsg+0x10/0x10
[  439.555380][ T7917]  ? __pfx_get_signal+0x10/0x10
[  439.560282][ T7917]  ? do_futex+0x122/0x350
[  439.564698][ T7917]  arch_do_signal_or_restart+0x8f/0x7d0
[  439.570306][ T7917]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  439.576508][ T7917]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  439.582093][ T7917]  ? rcu_is_watching+0x12/0xc0
[  439.586894][ T7917]  syscall_exit_to_user_mode+0x150/0x2a0
[  439.592581][ T7917]  do_syscall_64+0xda/0x260
[  439.597164][ T7917]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.603081][ T7917] RIP: 0033:0x7f395618e969
[  439.607506][ T7917] Code: Unable to access opcode bytes at 0x7f395618e93f.
[  439.614534][ T7917] RSP: 002b:00007f395702d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  439.622975][ T7917] RAX: 0000000000010106 RBX: 00007f39563b6160 RCX: 00007f395618e969
[  439.630963][ T7917] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000007
[  439.638952][ T7917] RBP: 00007f3956210ab1 R08: 0000000000000000 R09: 0000000000000000
[  439.646967][ T7917] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  439.654972][ T7917] R13: 0000000000000000 R14: 00007f39563b6160 R15: 00007ffe6ff08c18
[  439.662977][ T7917]  </TASK>
[  439.666024][ T7917] Modules linked in:
[  439.672149][ T7917] ---[ end trace 0000000000000000 ]---
[  439.717284][ T7971] lowmem_reserve[]: 0 2484 2486 2486 2486
[  439.723341][ T7971] Node 0 DMA32 free:1446552kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:58464kB inactive_anon:0kB active_file:52564kB inactive_file:157824kB unevictable:1552kB writepending:532kB present:3129332kB managed:2544044kB mlocked:0kB bounce:0kB free_pcp:28604kB local_pcp:6060kB free_cma:0kB
[  439.726115][    T9] usb 9-1: USB disconnect, device number 2
[  439.753872][    C1] vkms_vblank_simulate: vblank timer overrun
[  439.760155][ T5840] Bluetooth: hci0: command tx timeout
[  439.771466][ T7971] lowmem_reserve[]: 0 0 1 1 1
[  439.776579][ T7971] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  439.803779][    C1] vkms_vblank_simulate: vblank timer overrun
[  439.810864][ T7971] lowmem_reserve[]: 0 0 0 0 0
[  439.822075][ T7971] Node 1 Normal free:3908204kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  439.901417][ T7971] lowmem_reserve[]: 0 0 0 0 0
[  439.906518][ T7971] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  439.920591][ T7971] Node 0 
[  439.924670][ T5968] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  439.942965][ T7971] DMA32: 3097*4kB (UME) 1415*8kB (UME) 1057*16kB (UME) 976*32kB (UME) 865*64kB (UME) 388*128kB (UME) 139*256kB (UME) 122*512kB (UM) 47*1024kB (UME) 12*2048kB (UME) 275*4096kB (UM) = 1474028kB
[  439.947348][ T7917] RIP: 0010:__list_del_entry_valid_or_report+0x17a/0x200
[  439.991795][ T7971] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  440.025601][ T7971] Node 1 Normal: 207*4kB (UME) 56*8kB (UME) 47*16kB (UME) 216*32kB (UME) 86*64kB (UME) 28*128kB (UME) 14*256kB (UME) 13*512kB (UME) 7*1024kB (UME) 1*2048kB (U) 945*4096kB (M) = 3908204kB
[  440.049286][ T5968] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.066993][ T7917] Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 8d 00 00 00 48 8b 55 00 48 89 e9 48 89 de 48 c7 c7 80 92 f4 8b e8 e7 54 c6 fc 90 <0f> 0b 4c 89 e7 e8 9c 26 29 fd 48 89 ea 48 b8 00 00 00 00 00 fc ff
[  440.113141][ T7971] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  440.130555][ T7917] RSP: 0018:ffffc900047ef7e8 EFLAGS: 00010282
[  440.151329][ T7917] RAX: 000000000000006d RBX: ffff888056404558 RCX: ffffffff819aa5d9
[  440.162558][ T7971] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  440.165016][ T7917] RDX: 0000000000000000 RSI: ffffffff819b2466 RDI: 0000000000000005
[  440.185179][ T7971] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  440.191616][ T7917] RBP: ffff88807adf1558 R08: 0000000000000005 R09: 0000000000000000
[  440.231958][ T7917] R10: 0000000080000000 R11: 6c65645f7473696c R12: ffff88807adf1558
[  440.232929][ T7971] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  440.240805][ T7917] R13: ffff888056404560 R14: ffff88807adf1000 R15: ffff888056402010
[  440.260406][ T7917] FS:  0000000000000000(0000) GS:ffff8881249e0000(0000) knlGS:0000000000000000
[  440.272355][ T5968] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.286057][ T7971] 64331 total pagecache pages
[  440.288485][ T7917] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  440.297398][ T7971] 0 pages in swap cache
[  440.297415][ T7971] Free swap  = 124996kB
[  440.297428][ T7971] Total swap = 124996kB
[  440.297445][ T7971] 2097051 pages RAM
[  440.297457][ T7971] 0 pages HighMem/MovableOnly
[  440.297469][ T7971] 428934 pages reserved
[  440.297482][ T7971] 0 pages cma reserved
[  440.355811][ T7917] CR2: 000055c9cd0da660 CR3: 000000000e180000 CR4: 0000000000350ef0
[  440.380866][ T7917] Kernel panic - not syncing: Fatal exception
[  440.387702][ T7917] Kernel Offset: disabled
[  440.392066][ T7917] Rebooting in 86400 seconds..